10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 350a708f8fSGustavo F. Padovan 360a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 370a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 397ef9fbf0SMarcel Holtmann 40ac4b7236SMarcel Holtmann #include "smp.h" 417024728eSMarcel Holtmann #include "a2mp.h" 427ef9fbf0SMarcel Holtmann #include "amp.h" 4318722c24SJukka Rissanen #include "6lowpan.h" 440a708f8fSGustavo F. Padovan 450f1bfe4eSJohan Hedberg #define LE_FLOWCTL_MAX_CREDITS 65535 460f1bfe4eSJohan Hedberg 47d1de6d46SMat Martineau bool disable_ertm; 480a708f8fSGustavo F. Padovan 49547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 50d40bffbcSMarcel Holtmann static u8 l2cap_fixed_chan[8] = { L2CAP_FC_L2CAP | L2CAP_FC_CONNLESS, }; 510a708f8fSGustavo F. Padovan 52b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 53b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 540a708f8fSGustavo F. Padovan 55f15b8ecfSJohan Hedberg static u16 le_max_credits = L2CAP_LE_MAX_CREDITS; 56f15b8ecfSJohan Hedberg static u16 le_default_mps = L2CAP_LE_DEFAULT_MPS; 57f15b8ecfSJohan Hedberg 580a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 590a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 604519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 614519de9aSGustavo F. Padovan void *data); 62710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 635e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 640a708f8fSGustavo F. Padovan 65d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 66608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 67608bcc6dSMat Martineau 684f1654e0SMarcel Holtmann static inline __u8 bdaddr_type(struct hci_conn *hcon, __u8 type) 694f1654e0SMarcel Holtmann { 704f1654e0SMarcel Holtmann if (hcon->type == LE_LINK) { 714f1654e0SMarcel Holtmann if (type == ADDR_LE_DEV_PUBLIC) 724f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 734f1654e0SMarcel Holtmann else 744f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 754f1654e0SMarcel Holtmann } 764f1654e0SMarcel Holtmann 774f1654e0SMarcel Holtmann return BDADDR_BREDR; 784f1654e0SMarcel Holtmann } 794f1654e0SMarcel Holtmann 800a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 8171ba0e56SGustavo F. Padovan 822d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 832d792818SGustavo Padovan u16 cid) 840a708f8fSGustavo F. Padovan { 853df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 86baa7e1faSGustavo F. Padovan 873df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 883df91ea2SAndrei Emeltchenko if (c->dcid == cid) 893df91ea2SAndrei Emeltchenko return c; 900a708f8fSGustavo F. Padovan } 913df91ea2SAndrei Emeltchenko return NULL; 92baa7e1faSGustavo F. Padovan } 930a708f8fSGustavo F. Padovan 942d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 952d792818SGustavo Padovan u16 cid) 960a708f8fSGustavo F. Padovan { 973df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 98baa7e1faSGustavo F. Padovan 993df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1003df91ea2SAndrei Emeltchenko if (c->scid == cid) 1013df91ea2SAndrei Emeltchenko return c; 1020a708f8fSGustavo F. Padovan } 1033df91ea2SAndrei Emeltchenko return NULL; 104baa7e1faSGustavo F. Padovan } 1050a708f8fSGustavo F. Padovan 1060a708f8fSGustavo F. Padovan /* Find channel with given SCID. 107ef191adeSMat Martineau * Returns locked channel. */ 1082d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1092d792818SGustavo Padovan u16 cid) 1100a708f8fSGustavo F. Padovan { 11148454079SGustavo F. Padovan struct l2cap_chan *c; 112baa7e1faSGustavo F. Padovan 1133df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 114baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 115ef191adeSMat Martineau if (c) 116ef191adeSMat Martineau l2cap_chan_lock(c); 1173df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1183df91ea2SAndrei Emeltchenko 11948454079SGustavo F. Padovan return c; 1200a708f8fSGustavo F. Padovan } 1210a708f8fSGustavo F. Padovan 122b1a130b7SMat Martineau /* Find channel with given DCID. 123b1a130b7SMat Martineau * Returns locked channel. 124b1a130b7SMat Martineau */ 125b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 126b1a130b7SMat Martineau u16 cid) 127b1a130b7SMat Martineau { 128b1a130b7SMat Martineau struct l2cap_chan *c; 129b1a130b7SMat Martineau 130b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 131b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 132b1a130b7SMat Martineau if (c) 133b1a130b7SMat Martineau l2cap_chan_lock(c); 134b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 135b1a130b7SMat Martineau 136b1a130b7SMat Martineau return c; 137b1a130b7SMat Martineau } 138b1a130b7SMat Martineau 1392d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1402d792818SGustavo Padovan u8 ident) 1410a708f8fSGustavo F. Padovan { 1423df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 143baa7e1faSGustavo F. Padovan 1443df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1453df91ea2SAndrei Emeltchenko if (c->ident == ident) 1463df91ea2SAndrei Emeltchenko return c; 1470a708f8fSGustavo F. Padovan } 1483df91ea2SAndrei Emeltchenko return NULL; 149baa7e1faSGustavo F. Padovan } 1500a708f8fSGustavo F. Padovan 1515b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1525b155ef9SMat Martineau u8 ident) 1535b155ef9SMat Martineau { 1545b155ef9SMat Martineau struct l2cap_chan *c; 1555b155ef9SMat Martineau 1565b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1575b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1585b155ef9SMat Martineau if (c) 1595b155ef9SMat Martineau l2cap_chan_lock(c); 1605b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1615b155ef9SMat Martineau 1625b155ef9SMat Martineau return c; 1635b155ef9SMat Martineau } 1645b155ef9SMat Martineau 16523691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1669e4425ffSGustavo F. Padovan { 16723691d75SGustavo F. Padovan struct l2cap_chan *c; 1689e4425ffSGustavo F. Padovan 16923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1707eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 17123691d75SGustavo F. Padovan return c; 1729e4425ffSGustavo F. Padovan } 173250938cbSSzymon Janc return NULL; 174250938cbSSzymon Janc } 1759e4425ffSGustavo F. Padovan 1769e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1779e4425ffSGustavo F. Padovan { 17873b2ec18SGustavo F. Padovan int err; 17973b2ec18SGustavo F. Padovan 180333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1819e4425ffSGustavo F. Padovan 18223691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 18373b2ec18SGustavo F. Padovan err = -EADDRINUSE; 18473b2ec18SGustavo F. Padovan goto done; 1859e4425ffSGustavo F. Padovan } 1869e4425ffSGustavo F. Padovan 18773b2ec18SGustavo F. Padovan if (psm) { 1889e4425ffSGustavo F. Padovan chan->psm = psm; 1899e4425ffSGustavo F. Padovan chan->sport = psm; 19073b2ec18SGustavo F. Padovan err = 0; 19173b2ec18SGustavo F. Padovan } else { 19273b2ec18SGustavo F. Padovan u16 p; 1939e4425ffSGustavo F. Padovan 19473b2ec18SGustavo F. Padovan err = -EINVAL; 19573b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 19623691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 19773b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 19873b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 19973b2ec18SGustavo F. Padovan err = 0; 20073b2ec18SGustavo F. Padovan break; 20173b2ec18SGustavo F. Padovan } 20273b2ec18SGustavo F. Padovan } 20373b2ec18SGustavo F. Padovan 20473b2ec18SGustavo F. Padovan done: 205333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 20673b2ec18SGustavo F. Padovan return err; 2079e4425ffSGustavo F. Padovan } 2089e4425ffSGustavo F. Padovan 2099e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2109e4425ffSGustavo F. Padovan { 211333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2129e4425ffSGustavo F. Padovan 2139e4425ffSGustavo F. Padovan chan->scid = scid; 2149e4425ffSGustavo F. Padovan 215333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2169e4425ffSGustavo F. Padovan 2179e4425ffSGustavo F. Padovan return 0; 2189e4425ffSGustavo F. Padovan } 2199e4425ffSGustavo F. Padovan 220baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2210a708f8fSGustavo F. Padovan { 222e77af755SJohan Hedberg u16 cid, dyn_end; 2230a708f8fSGustavo F. Padovan 224e77af755SJohan Hedberg if (conn->hcon->type == LE_LINK) 225e77af755SJohan Hedberg dyn_end = L2CAP_CID_LE_DYN_END; 226e77af755SJohan Hedberg else 227e77af755SJohan Hedberg dyn_end = L2CAP_CID_DYN_END; 228e77af755SJohan Hedberg 229e77af755SJohan Hedberg for (cid = L2CAP_CID_DYN_START; cid < dyn_end; cid++) { 230baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2310a708f8fSGustavo F. Padovan return cid; 2320a708f8fSGustavo F. Padovan } 2330a708f8fSGustavo F. Padovan 2340a708f8fSGustavo F. Padovan return 0; 2350a708f8fSGustavo F. Padovan } 2360a708f8fSGustavo F. Padovan 237f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 23889bc500eSGustavo F. Padovan { 23942d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 240badaaa00SGustavo F. Padovan state_to_string(state)); 241badaaa00SGustavo F. Padovan 24289bc500eSGustavo F. Padovan chan->state = state; 24353f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 24489bc500eSGustavo F. Padovan } 24589bc500eSGustavo F. Padovan 246f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 247f8e73017SGustavo Padovan int state, int err) 2482e0052e4SAndrei Emeltchenko { 249f8e73017SGustavo Padovan chan->state = state; 25053f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2512e0052e4SAndrei Emeltchenko } 2522e0052e4SAndrei Emeltchenko 2532e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2542e0052e4SAndrei Emeltchenko { 255f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2562e0052e4SAndrei Emeltchenko } 2572e0052e4SAndrei Emeltchenko 2584239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2594239d16fSMat Martineau { 2604239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2614239d16fSMat Martineau chan->retrans_timeout) { 2624239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2634239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2644239d16fSMat Martineau } 2654239d16fSMat Martineau } 2664239d16fSMat Martineau 2674239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2684239d16fSMat Martineau { 2694239d16fSMat Martineau __clear_retrans_timer(chan); 2704239d16fSMat Martineau if (chan->monitor_timeout) { 2714239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2724239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2734239d16fSMat Martineau } 2744239d16fSMat Martineau } 2754239d16fSMat Martineau 276608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 277608bcc6dSMat Martineau u16 seq) 278608bcc6dSMat Martineau { 279608bcc6dSMat Martineau struct sk_buff *skb; 280608bcc6dSMat Martineau 281608bcc6dSMat Martineau skb_queue_walk(head, skb) { 282608bcc6dSMat Martineau if (bt_cb(skb)->control.txseq == seq) 283608bcc6dSMat Martineau return skb; 284608bcc6dSMat Martineau } 285608bcc6dSMat Martineau 286608bcc6dSMat Martineau return NULL; 287608bcc6dSMat Martineau } 288608bcc6dSMat Martineau 2893c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 2903c588192SMat Martineau 2913c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 2923c588192SMat Martineau * SREJ requests that are received and for frames that are to be 2933c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 2943c588192SMat Martineau * list in an array, where membership in the list can also be checked 2953c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 2963c588192SMat Martineau * and removed from the head in constant time, without further memory 2973c588192SMat Martineau * allocs or frees. 2983c588192SMat Martineau */ 2993c588192SMat Martineau 3003c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3013c588192SMat Martineau { 3023c588192SMat Martineau size_t alloc_size, i; 3033c588192SMat Martineau 3043c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3053c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3063c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3073c588192SMat Martineau */ 3083c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3093c588192SMat Martineau 3103c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3113c588192SMat Martineau if (!seq_list->list) 3123c588192SMat Martineau return -ENOMEM; 3133c588192SMat Martineau 3143c588192SMat Martineau seq_list->mask = alloc_size - 1; 3153c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3163c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3173c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3183c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3193c588192SMat Martineau 3203c588192SMat Martineau return 0; 3213c588192SMat Martineau } 3223c588192SMat Martineau 3233c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3243c588192SMat Martineau { 3253c588192SMat Martineau kfree(seq_list->list); 3263c588192SMat Martineau } 3273c588192SMat Martineau 3283c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3293c588192SMat Martineau u16 seq) 3303c588192SMat Martineau { 3313c588192SMat Martineau /* Constant-time check for list membership */ 3323c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3333c588192SMat Martineau } 3343c588192SMat Martineau 33503a0c5d6SJohan Hedberg static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3363c588192SMat Martineau { 33703a0c5d6SJohan Hedberg u16 seq = seq_list->head; 3383c588192SMat Martineau u16 mask = seq_list->mask; 3393c588192SMat Martineau 3403c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3413c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3423c588192SMat Martineau 3433c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3443c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3453c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3463c588192SMat Martineau } 3473c588192SMat Martineau 3483c588192SMat Martineau return seq; 3493c588192SMat Martineau } 3503c588192SMat Martineau 3513c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3523c588192SMat Martineau { 3533c588192SMat Martineau u16 i; 354f522ae36SGustavo Padovan 355f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 356f522ae36SGustavo Padovan return; 357f522ae36SGustavo Padovan 3583c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3593c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3603c588192SMat Martineau 3613c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3623c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3633c588192SMat Martineau } 3643c588192SMat Martineau 3653c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3663c588192SMat Martineau { 3673c588192SMat Martineau u16 mask = seq_list->mask; 3683c588192SMat Martineau 3693c588192SMat Martineau /* All appends happen in constant time */ 3703c588192SMat Martineau 371f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 372f522ae36SGustavo Padovan return; 373f522ae36SGustavo Padovan 3743c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3753c588192SMat Martineau seq_list->head = seq; 3763c588192SMat Martineau else 3773c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 3783c588192SMat Martineau 3793c588192SMat Martineau seq_list->tail = seq; 3803c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 3813c588192SMat Martineau } 3823c588192SMat Martineau 383721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 384ab07801dSGustavo F. Padovan { 385721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 386721c4181SGustavo F. Padovan chan_timer.work); 3873df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 388ab07801dSGustavo F. Padovan int reason; 389ab07801dSGustavo F. Padovan 390e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 391ab07801dSGustavo F. Padovan 3923df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 3936be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 394ab07801dSGustavo F. Padovan 39589bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 396ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 39789bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 398ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 399ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 400ab07801dSGustavo F. Padovan else 401ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 402ab07801dSGustavo F. Padovan 4030f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 404ab07801dSGustavo F. Padovan 4056be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 406ab07801dSGustavo F. Padovan 40780b98027SGustavo Padovan chan->ops->close(chan); 4083df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4093df91ea2SAndrei Emeltchenko 410371fd835SUlisses Furquim l2cap_chan_put(chan); 411ab07801dSGustavo F. Padovan } 412ab07801dSGustavo F. Padovan 413eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4140a708f8fSGustavo F. Padovan { 41548454079SGustavo F. Padovan struct l2cap_chan *chan; 4160a708f8fSGustavo F. Padovan 41748454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 41848454079SGustavo F. Padovan if (!chan) 41948454079SGustavo F. Padovan return NULL; 4200a708f8fSGustavo F. Padovan 421c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 422c03b355eSAndrei Emeltchenko 423333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 42423691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 425333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 42623691d75SGustavo F. Padovan 427721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 428ab07801dSGustavo F. Padovan 42989bc500eSGustavo F. Padovan chan->state = BT_OPEN; 43089bc500eSGustavo F. Padovan 431144ad330SSyam Sidhardhan kref_init(&chan->kref); 43271ba0e56SGustavo F. Padovan 4332827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4342827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4352827011fSMat Martineau 436eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 437abc545b8SSzymon Janc 43848454079SGustavo F. Padovan return chan; 4390a708f8fSGustavo F. Padovan } 4400a708f8fSGustavo F. Padovan 441144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4426ff5abbfSGustavo F. Padovan { 443144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 444144ad330SSyam Sidhardhan 4454af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4464af66c69SJaganath Kanakkassery 447333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 44823691d75SGustavo F. Padovan list_del(&chan->global_l); 449333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45023691d75SGustavo F. Padovan 4514af66c69SJaganath Kanakkassery kfree(chan); 4526ff5abbfSGustavo F. Padovan } 4536ff5abbfSGustavo F. Padovan 45430648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 45530648372SJaganath Kanakkassery { 456144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 45730648372SJaganath Kanakkassery 458144ad330SSyam Sidhardhan kref_get(&c->kref); 45930648372SJaganath Kanakkassery } 46030648372SJaganath Kanakkassery 46130648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 46230648372SJaganath Kanakkassery { 463144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 46430648372SJaganath Kanakkassery 465144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 46630648372SJaganath Kanakkassery } 46730648372SJaganath Kanakkassery 468bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 469bd4b1653SAndrei Emeltchenko { 470bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 471bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 472bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 473bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 474c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 475bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 476bd4b1653SAndrei Emeltchenko 477bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 478bd4b1653SAndrei Emeltchenko } 479bd4b1653SAndrei Emeltchenko 4800ce43ce6SJohan Hedberg static void l2cap_le_flowctl_init(struct l2cap_chan *chan) 48138319713SJohan Hedberg { 4820ce43ce6SJohan Hedberg chan->sdu = NULL; 4830ce43ce6SJohan Hedberg chan->sdu_last_frag = NULL; 4840ce43ce6SJohan Hedberg chan->sdu_len = 0; 4850cd75f7eSJohan Hedberg chan->tx_credits = 0; 486f15b8ecfSJohan Hedberg chan->rx_credits = le_max_credits; 487d1d79413SJohan Hedberg chan->mps = min_t(u16, chan->imtu, le_default_mps); 4880ce43ce6SJohan Hedberg 4890ce43ce6SJohan Hedberg skb_queue_head_init(&chan->tx_q); 49038319713SJohan Hedberg } 49138319713SJohan Hedberg 49293c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 4930a708f8fSGustavo F. Padovan { 4940a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 495097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 4960a708f8fSGustavo F. Padovan 4979f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 4980a708f8fSGustavo F. Padovan 4998c1d787bSGustavo F. Padovan chan->conn = conn; 5000a708f8fSGustavo F. Padovan 5015491120eSAndrei Emeltchenko switch (chan->chan_type) { 5025491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 5030a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 504fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 50521626e62SJohan Hedberg if (conn->hcon->type == ACL_LINK) 5060c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5075491120eSAndrei Emeltchenko break; 5085491120eSAndrei Emeltchenko 5095491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5100a708f8fSGustavo F. Padovan /* Connectionless socket */ 511fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 512fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5130c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5145491120eSAndrei Emeltchenko break; 5155491120eSAndrei Emeltchenko 5162338a7e0SJohan Hedberg case L2CAP_CHAN_FIXED: 5172338a7e0SJohan Hedberg /* Caller will set CID and CID specific MTU values */ 518416fa752SAndrei Emeltchenko break; 519416fa752SAndrei Emeltchenko 5205491120eSAndrei Emeltchenko default: 5210a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 522fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 523fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5240c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5250a708f8fSGustavo F. Padovan } 5260a708f8fSGustavo F. Padovan 5278f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5288f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5298f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5308f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5318f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5328936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5338f7975b1SAndrei Emeltchenko 534371fd835SUlisses Furquim l2cap_chan_hold(chan); 535baa7e1faSGustavo F. Padovan 5365ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5375ee9891dSJohan Hedberg 5383df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 539643162a8SAndrei Emeltchenko } 540643162a8SAndrei Emeltchenko 541466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 542643162a8SAndrei Emeltchenko { 543643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 544643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5453df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5460a708f8fSGustavo F. Padovan } 5470a708f8fSGustavo F. Padovan 548466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5490a708f8fSGustavo F. Padovan { 5508c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5510a708f8fSGustavo F. Padovan 552c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5530a708f8fSGustavo F. Padovan 55449208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 5550a708f8fSGustavo F. Padovan 5560a708f8fSGustavo F. Padovan if (conn) { 55756f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 558baa7e1faSGustavo F. Padovan /* Delete from channel list */ 5593df91ea2SAndrei Emeltchenko list_del(&chan->list); 5603d57dc68SGustavo F. Padovan 561371fd835SUlisses Furquim l2cap_chan_put(chan); 562baa7e1faSGustavo F. Padovan 5638c1d787bSGustavo F. Padovan chan->conn = NULL; 5643cabbfdaSAndrei Emeltchenko 5652338a7e0SJohan Hedberg if (chan->scid != L2CAP_CID_A2MP) 56676a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 56756f60984SAndrei Emeltchenko 56856f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 56956f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 5700a708f8fSGustavo F. Padovan } 5710a708f8fSGustavo F. Padovan 572419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 573419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 574419e08c1SAndrei Emeltchenko 575419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 576419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 577419e08c1SAndrei Emeltchenko } 578419e08c1SAndrei Emeltchenko 579c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, err); 5806be36555SAndrei Emeltchenko 5812827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 5826ff5abbfSGustavo F. Padovan return; 5832ead70b8SGustavo F. Padovan 584ee556f66SGustavo Padovan switch(chan->mode) { 585ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 586ee556f66SGustavo Padovan break; 5870a708f8fSGustavo F. Padovan 58838319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 589177f8f2bSJohan Hedberg skb_queue_purge(&chan->tx_q); 59038319713SJohan Hedberg break; 59138319713SJohan Hedberg 592ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 5931a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 5941a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 5951a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 5960a708f8fSGustavo F. Padovan 597f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 5980a708f8fSGustavo F. Padovan 5993c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6003c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 601ee556f66SGustavo Padovan 602ee556f66SGustavo Padovan /* fall through */ 603ee556f66SGustavo Padovan 604ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 605ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 606ee556f66SGustavo Padovan break; 6070a708f8fSGustavo F. Padovan } 608ee556f66SGustavo Padovan 609ee556f66SGustavo Padovan return; 6100a708f8fSGustavo F. Padovan } 6110a708f8fSGustavo F. Padovan 612387a33e3SJohan Hedberg void l2cap_conn_update_id_addr(struct hci_conn *hcon) 613387a33e3SJohan Hedberg { 614387a33e3SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 615387a33e3SJohan Hedberg struct l2cap_chan *chan; 616387a33e3SJohan Hedberg 617387a33e3SJohan Hedberg mutex_lock(&conn->chan_lock); 618387a33e3SJohan Hedberg 619387a33e3SJohan Hedberg list_for_each_entry(chan, &conn->chan_l, list) { 620387a33e3SJohan Hedberg l2cap_chan_lock(chan); 621387a33e3SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 622387a33e3SJohan Hedberg chan->dst_type = bdaddr_type(hcon, hcon->dst_type); 623387a33e3SJohan Hedberg l2cap_chan_unlock(chan); 624387a33e3SJohan Hedberg } 625387a33e3SJohan Hedberg 626387a33e3SJohan Hedberg mutex_unlock(&conn->chan_lock); 627387a33e3SJohan Hedberg } 628387a33e3SJohan Hedberg 62927e2d4c8SJohan Hedberg static void l2cap_chan_le_connect_reject(struct l2cap_chan *chan) 63027e2d4c8SJohan Hedberg { 63127e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 63227e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 63327e2d4c8SJohan Hedberg u16 result; 63427e2d4c8SJohan Hedberg 63527e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 63627e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHORIZATION; 63727e2d4c8SJohan Hedberg else 63827e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 63927e2d4c8SJohan Hedberg 64027e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 64127e2d4c8SJohan Hedberg 64227e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 64327e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 6443916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 6450cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 64627e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 64727e2d4c8SJohan Hedberg 64827e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 64927e2d4c8SJohan Hedberg &rsp); 65027e2d4c8SJohan Hedberg } 65127e2d4c8SJohan Hedberg 652791d60f7SJohan Hedberg static void l2cap_chan_connect_reject(struct l2cap_chan *chan) 653791d60f7SJohan Hedberg { 654791d60f7SJohan Hedberg struct l2cap_conn *conn = chan->conn; 655791d60f7SJohan Hedberg struct l2cap_conn_rsp rsp; 656791d60f7SJohan Hedberg u16 result; 657791d60f7SJohan Hedberg 658791d60f7SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 659791d60f7SJohan Hedberg result = L2CAP_CR_SEC_BLOCK; 660791d60f7SJohan Hedberg else 661791d60f7SJohan Hedberg result = L2CAP_CR_BAD_PSM; 662791d60f7SJohan Hedberg 663791d60f7SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 664791d60f7SJohan Hedberg 665791d60f7SJohan Hedberg rsp.scid = cpu_to_le16(chan->dcid); 666791d60f7SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 667791d60f7SJohan Hedberg rsp.result = cpu_to_le16(result); 668791d60f7SJohan Hedberg rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 669791d60f7SJohan Hedberg 670791d60f7SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 671791d60f7SJohan Hedberg } 672791d60f7SJohan Hedberg 6730f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 6744519de9aSGustavo F. Padovan { 6754519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6764519de9aSGustavo F. Padovan 6777eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 6784519de9aSGustavo F. Padovan 67989bc500eSGustavo F. Padovan switch (chan->state) { 6804519de9aSGustavo F. Padovan case BT_LISTEN: 681c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6824519de9aSGustavo F. Padovan break; 6834519de9aSGustavo F. Padovan 6844519de9aSGustavo F. Padovan case BT_CONNECTED: 6854519de9aSGustavo F. Padovan case BT_CONFIG: 6867b25c9b3SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 6878d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 6885e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 6894519de9aSGustavo F. Padovan } else 6904519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 6914519de9aSGustavo F. Padovan break; 6924519de9aSGustavo F. Padovan 6934519de9aSGustavo F. Padovan case BT_CONNECT2: 694791d60f7SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 695791d60f7SJohan Hedberg if (conn->hcon->type == ACL_LINK) 696791d60f7SJohan Hedberg l2cap_chan_connect_reject(chan); 69727e2d4c8SJohan Hedberg else if (conn->hcon->type == LE_LINK) 69827e2d4c8SJohan Hedberg l2cap_chan_le_connect_reject(chan); 6994519de9aSGustavo F. Padovan } 7004519de9aSGustavo F. Padovan 7014519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7024519de9aSGustavo F. Padovan break; 7034519de9aSGustavo F. Padovan 7044519de9aSGustavo F. Padovan case BT_CONNECT: 7054519de9aSGustavo F. Padovan case BT_DISCONN: 7064519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7074519de9aSGustavo F. Padovan break; 7084519de9aSGustavo F. Padovan 7094519de9aSGustavo F. Padovan default: 710c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7114519de9aSGustavo F. Padovan break; 7124519de9aSGustavo F. Padovan } 7134519de9aSGustavo F. Padovan } 7144519de9aSGustavo F. Padovan 7154343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 7160a708f8fSGustavo F. Padovan { 7176a974b50SMarcel Holtmann switch (chan->chan_type) { 7186a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 7194343478fSGustavo F. Padovan switch (chan->sec_level) { 7200a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7217d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7220a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7230a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7240a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7250a708f8fSGustavo F. Padovan default: 7260a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7270a708f8fSGustavo F. Padovan } 7286a974b50SMarcel Holtmann break; 7293124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 7303124b843SMarcel Holtmann if (chan->psm == __constant_cpu_to_le16(L2CAP_PSM_3DSP)) { 7313124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7323124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7333124b843SMarcel Holtmann } 7347d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7357d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7363124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7373124b843SMarcel Holtmann else 7383124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7393124b843SMarcel Holtmann break; 7406a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 7416a974b50SMarcel Holtmann if (chan->psm == __constant_cpu_to_le16(L2CAP_PSM_SDP)) { 7424343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7434343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7440a708f8fSGustavo F. Padovan 7457d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7467d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7470a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7480a708f8fSGustavo F. Padovan else 7490a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7506a974b50SMarcel Holtmann } 7516a974b50SMarcel Holtmann /* fall through */ 7526a974b50SMarcel Holtmann default: 7534343478fSGustavo F. Padovan switch (chan->sec_level) { 7540a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7557d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7560a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 7570a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7580a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 7590a708f8fSGustavo F. Padovan default: 7600a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7610a708f8fSGustavo F. Padovan } 7626a974b50SMarcel Holtmann break; 7630a708f8fSGustavo F. Padovan } 7640a708f8fSGustavo F. Padovan } 7650a708f8fSGustavo F. Padovan 7660a708f8fSGustavo F. Padovan /* Service level security */ 767d45fc423SGustavo F. Padovan int l2cap_chan_check_security(struct l2cap_chan *chan) 7680a708f8fSGustavo F. Padovan { 7698c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7700a708f8fSGustavo F. Padovan __u8 auth_type; 7710a708f8fSGustavo F. Padovan 772a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 773a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 774a17de2feSJohan Hedberg 7754343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 7760a708f8fSGustavo F. Padovan 7774343478fSGustavo F. Padovan return hci_conn_security(conn->hcon, chan->sec_level, auth_type); 7780a708f8fSGustavo F. Padovan } 7790a708f8fSGustavo F. Padovan 780b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 7810a708f8fSGustavo F. Padovan { 7820a708f8fSGustavo F. Padovan u8 id; 7830a708f8fSGustavo F. Padovan 7840a708f8fSGustavo F. Padovan /* Get next available identificator. 7850a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 7860a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 7870a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 7880a708f8fSGustavo F. Padovan */ 7890a708f8fSGustavo F. Padovan 790333055f2SGustavo F. Padovan spin_lock(&conn->lock); 7910a708f8fSGustavo F. Padovan 7920a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 7930a708f8fSGustavo F. Padovan conn->tx_ident = 1; 7940a708f8fSGustavo F. Padovan 7950a708f8fSGustavo F. Padovan id = conn->tx_ident; 7960a708f8fSGustavo F. Padovan 797333055f2SGustavo F. Padovan spin_unlock(&conn->lock); 7980a708f8fSGustavo F. Padovan 7990a708f8fSGustavo F. Padovan return id; 8000a708f8fSGustavo F. Padovan } 8010a708f8fSGustavo F. Padovan 8022d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 8032d792818SGustavo Padovan void *data) 8040a708f8fSGustavo F. Padovan { 8050a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 8060a708f8fSGustavo F. Padovan u8 flags; 8070a708f8fSGustavo F. Padovan 8080a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 8090a708f8fSGustavo F. Padovan 8100a708f8fSGustavo F. Padovan if (!skb) 8110a708f8fSGustavo F. Padovan return; 8120a708f8fSGustavo F. Padovan 8130a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 8140a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 8150a708f8fSGustavo F. Padovan else 8160a708f8fSGustavo F. Padovan flags = ACL_START; 8170a708f8fSGustavo F. Padovan 81814b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 8195e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 82014b12d0bSJaikumar Ganesh 82173d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 8220a708f8fSGustavo F. Padovan } 8230a708f8fSGustavo F. Padovan 82402b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 82502b0fbb9SMat Martineau { 82602b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 82702b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 82802b0fbb9SMat Martineau } 82902b0fbb9SMat Martineau 83073d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 83173d80debSLuiz Augusto von Dentz { 83273d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 83373d80debSLuiz Augusto von Dentz u16 flags; 83473d80debSLuiz Augusto von Dentz 83573d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 83673d80debSLuiz Augusto von Dentz skb->priority); 83773d80debSLuiz Augusto von Dentz 838d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 839d5f8a75dSMat Martineau if (chan->hs_hchan) 840d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 841d5f8a75dSMat Martineau else 842d5f8a75dSMat Martineau kfree_skb(skb); 843d5f8a75dSMat Martineau 844d5f8a75dSMat Martineau return; 845d5f8a75dSMat Martineau } 846d5f8a75dSMat Martineau 84773d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 84873d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 84973d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 85073d80debSLuiz Augusto von Dentz else 85173d80debSLuiz Augusto von Dentz flags = ACL_START; 85273d80debSLuiz Augusto von Dentz 85373d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 85473d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 8550a708f8fSGustavo F. Padovan } 8560a708f8fSGustavo F. Padovan 857b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 858b5c6aaedSMat Martineau { 859b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 860b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 861b5c6aaedSMat Martineau 862b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 863b5c6aaedSMat Martineau /* S-Frame */ 864b5c6aaedSMat Martineau control->sframe = 1; 865b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 866b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 867b5c6aaedSMat Martineau 868b5c6aaedSMat Martineau control->sar = 0; 869b5c6aaedSMat Martineau control->txseq = 0; 870b5c6aaedSMat Martineau } else { 871b5c6aaedSMat Martineau /* I-Frame */ 872b5c6aaedSMat Martineau control->sframe = 0; 873b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 874b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 875b5c6aaedSMat Martineau 876b5c6aaedSMat Martineau control->poll = 0; 877b5c6aaedSMat Martineau control->super = 0; 878b5c6aaedSMat Martineau } 879b5c6aaedSMat Martineau } 880b5c6aaedSMat Martineau 881b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 882b5c6aaedSMat Martineau { 883b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 884b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 885b5c6aaedSMat Martineau 886b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 887b5c6aaedSMat Martineau /* S-Frame */ 888b5c6aaedSMat Martineau control->sframe = 1; 889b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 890b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 891b5c6aaedSMat Martineau 892b5c6aaedSMat Martineau control->sar = 0; 893b5c6aaedSMat Martineau control->txseq = 0; 894b5c6aaedSMat Martineau } else { 895b5c6aaedSMat Martineau /* I-Frame */ 896b5c6aaedSMat Martineau control->sframe = 0; 897b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 898b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 899b5c6aaedSMat Martineau 900b5c6aaedSMat Martineau control->poll = 0; 901b5c6aaedSMat Martineau control->super = 0; 902b5c6aaedSMat Martineau } 903b5c6aaedSMat Martineau } 904b5c6aaedSMat Martineau 905b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 906b5c6aaedSMat Martineau struct sk_buff *skb) 907b5c6aaedSMat Martineau { 908b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 909b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 910b5c6aaedSMat Martineau &bt_cb(skb)->control); 911cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 912b5c6aaedSMat Martineau } else { 913b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 914b5c6aaedSMat Martineau &bt_cb(skb)->control); 915cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 916b5c6aaedSMat Martineau } 917b5c6aaedSMat Martineau } 918b5c6aaedSMat Martineau 919b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 920b5c6aaedSMat Martineau { 921b5c6aaedSMat Martineau u32 packed; 922b5c6aaedSMat Martineau 923b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 924b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 925b5c6aaedSMat Martineau 926b5c6aaedSMat Martineau if (control->sframe) { 927b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 928b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 929b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 930b5c6aaedSMat Martineau } else { 931b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 932b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 933b5c6aaedSMat Martineau } 934b5c6aaedSMat Martineau 935b5c6aaedSMat Martineau return packed; 936b5c6aaedSMat Martineau } 937b5c6aaedSMat Martineau 938b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 939b5c6aaedSMat Martineau { 940b5c6aaedSMat Martineau u16 packed; 941b5c6aaedSMat Martineau 942b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 943b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 944b5c6aaedSMat Martineau 945b5c6aaedSMat Martineau if (control->sframe) { 946b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 947b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 948b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 949b5c6aaedSMat Martineau } else { 950b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 951b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 952b5c6aaedSMat Martineau } 953b5c6aaedSMat Martineau 954b5c6aaedSMat Martineau return packed; 955b5c6aaedSMat Martineau } 956b5c6aaedSMat Martineau 957b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 958b5c6aaedSMat Martineau struct l2cap_ctrl *control, 959b5c6aaedSMat Martineau struct sk_buff *skb) 960b5c6aaedSMat Martineau { 961b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 962b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 963b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 964b5c6aaedSMat Martineau } else { 965b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 966b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 967b5c6aaedSMat Martineau } 968b5c6aaedSMat Martineau } 969b5c6aaedSMat Martineau 970ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 971ba7aa64fSGustavo Padovan { 972ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 973ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 974ba7aa64fSGustavo Padovan else 975ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 976ba7aa64fSGustavo Padovan } 977ba7aa64fSGustavo Padovan 978a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 979a67d7f6fSMat Martineau u32 control) 9800a708f8fSGustavo F. Padovan { 9810a708f8fSGustavo F. Padovan struct sk_buff *skb; 9820a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 983ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 9840a708f8fSGustavo F. Padovan 9850a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 98603a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 9870a708f8fSGustavo F. Padovan 988a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 9890a708f8fSGustavo F. Padovan 9900a708f8fSGustavo F. Padovan if (!skb) 991a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 9920a708f8fSGustavo F. Padovan 9930a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 9940a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 995fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 99688843ab0SAndrei Emeltchenko 997a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 998a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 999a67d7f6fSMat Martineau else 1000a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 10010a708f8fSGustavo F. Padovan 100247d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 1003a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 100403a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 10050a708f8fSGustavo F. Padovan } 10060a708f8fSGustavo F. Padovan 100773d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 1008a67d7f6fSMat Martineau return skb; 1009a67d7f6fSMat Martineau } 1010a67d7f6fSMat Martineau 1011a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 1012a67d7f6fSMat Martineau struct l2cap_ctrl *control) 1013a67d7f6fSMat Martineau { 1014a67d7f6fSMat Martineau struct sk_buff *skb; 1015a67d7f6fSMat Martineau u32 control_field; 1016a67d7f6fSMat Martineau 1017a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 1018a67d7f6fSMat Martineau 1019a67d7f6fSMat Martineau if (!control->sframe) 1020a67d7f6fSMat Martineau return; 1021a67d7f6fSMat Martineau 1022b99e13adSMat Martineau if (__chan_is_moving(chan)) 1023b99e13adSMat Martineau return; 1024b99e13adSMat Martineau 1025a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 1026a67d7f6fSMat Martineau !control->poll) 1027a67d7f6fSMat Martineau control->final = 1; 1028a67d7f6fSMat Martineau 1029a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1030a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1031a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1032a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1033a67d7f6fSMat Martineau 1034a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1035a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1036a67d7f6fSMat Martineau __clear_ack_timer(chan); 1037a67d7f6fSMat Martineau } 1038a67d7f6fSMat Martineau 1039a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1040a67d7f6fSMat Martineau control->final, control->poll, control->super); 1041a67d7f6fSMat Martineau 1042a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1043a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1044a67d7f6fSMat Martineau else 1045a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1046a67d7f6fSMat Martineau 1047a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1048a67d7f6fSMat Martineau if (!IS_ERR(skb)) 104973d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 10500a708f8fSGustavo F. Padovan } 10510a708f8fSGustavo F. Padovan 1052c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 10530a708f8fSGustavo F. Padovan { 1054c9e3d5e0SMat Martineau struct l2cap_ctrl control; 10550a708f8fSGustavo F. Padovan 1056c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1057c9e3d5e0SMat Martineau 1058c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1059c9e3d5e0SMat Martineau control.sframe = 1; 1060c9e3d5e0SMat Martineau control.poll = poll; 1061c9e3d5e0SMat Martineau 1062c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1063c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1064c9e3d5e0SMat Martineau else 1065c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1066c9e3d5e0SMat Martineau 1067c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1068c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 10690a708f8fSGustavo F. Padovan } 10700a708f8fSGustavo F. Padovan 1071b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 10720a708f8fSGustavo F. Padovan { 1073c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 10740a708f8fSGustavo F. Padovan } 10750a708f8fSGustavo F. Padovan 107693c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 107793c3e8f5SAndrei Emeltchenko { 107893c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10791df7b17aSMarcel Holtmann struct hci_dev *hdev; 10801df7b17aSMarcel Holtmann bool amp_available = false; 108193c3e8f5SAndrei Emeltchenko 10821df7b17aSMarcel Holtmann if (!conn->hs_enabled) 10831df7b17aSMarcel Holtmann return false; 10841df7b17aSMarcel Holtmann 10851df7b17aSMarcel Holtmann if (!(conn->fixed_chan_mask & L2CAP_FC_A2MP)) 10861df7b17aSMarcel Holtmann return false; 10871df7b17aSMarcel Holtmann 10881df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 10891df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 10901df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 10911df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 10921df7b17aSMarcel Holtmann amp_available = true; 10931df7b17aSMarcel Holtmann break; 10941df7b17aSMarcel Holtmann } 10951df7b17aSMarcel Holtmann } 10961df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 10971df7b17aSMarcel Holtmann 10981df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 10991df7b17aSMarcel Holtmann return amp_available; 1100848566b3SMarcel Holtmann 110193c3e8f5SAndrei Emeltchenko return false; 110293c3e8f5SAndrei Emeltchenko } 110393c3e8f5SAndrei Emeltchenko 11045ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 11055ce66b59SAndrei Emeltchenko { 11065ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 11075ce66b59SAndrei Emeltchenko return true; 11085ce66b59SAndrei Emeltchenko } 11095ce66b59SAndrei Emeltchenko 11102766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 11119b27f350SAndrei Emeltchenko { 11129b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11139b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 11149b27f350SAndrei Emeltchenko 11159b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 11169b27f350SAndrei Emeltchenko req.psm = chan->psm; 11179b27f350SAndrei Emeltchenko 11189b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 11199b27f350SAndrei Emeltchenko 11209b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 11219b27f350SAndrei Emeltchenko 11229b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 11239b27f350SAndrei Emeltchenko } 11249b27f350SAndrei Emeltchenko 11258eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 11268eb200bdSMat Martineau { 11278eb200bdSMat Martineau struct l2cap_create_chan_req req; 11288eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11298eb200bdSMat Martineau req.psm = chan->psm; 11308eb200bdSMat Martineau req.amp_id = amp_id; 11318eb200bdSMat Martineau 11328eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11338eb200bdSMat Martineau 11348eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11358eb200bdSMat Martineau sizeof(req), &req); 11368eb200bdSMat Martineau } 11378eb200bdSMat Martineau 113802b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 113902b0fbb9SMat Martineau { 114002b0fbb9SMat Martineau struct sk_buff *skb; 114102b0fbb9SMat Martineau 114202b0fbb9SMat Martineau BT_DBG("chan %p", chan); 114302b0fbb9SMat Martineau 114402b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 114502b0fbb9SMat Martineau return; 114602b0fbb9SMat Martineau 114702b0fbb9SMat Martineau __clear_retrans_timer(chan); 114802b0fbb9SMat Martineau __clear_monitor_timer(chan); 114902b0fbb9SMat Martineau __clear_ack_timer(chan); 115002b0fbb9SMat Martineau 115102b0fbb9SMat Martineau chan->retry_count = 0; 115202b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 115302b0fbb9SMat Martineau if (bt_cb(skb)->control.retries) 115402b0fbb9SMat Martineau bt_cb(skb)->control.retries = 1; 115502b0fbb9SMat Martineau else 115602b0fbb9SMat Martineau break; 115702b0fbb9SMat Martineau } 115802b0fbb9SMat Martineau 115902b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 116002b0fbb9SMat Martineau 116102b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 116202b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 116302b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 116402b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 116502b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 116602b0fbb9SMat Martineau 116702b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 116802b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 116902b0fbb9SMat Martineau 117002b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 117102b0fbb9SMat Martineau } 117202b0fbb9SMat Martineau 11735f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 11745f3847a4SMat Martineau { 11755f3847a4SMat Martineau u8 move_role = chan->move_role; 11765f3847a4SMat Martineau BT_DBG("chan %p", chan); 11775f3847a4SMat Martineau 11785f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 11795f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 11805f3847a4SMat Martineau 11815f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 11825f3847a4SMat Martineau return; 11835f3847a4SMat Martineau 11845f3847a4SMat Martineau switch (move_role) { 11855f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 11865f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 11875f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 11885f3847a4SMat Martineau break; 11895f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 11905f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 11915f3847a4SMat Martineau break; 11925f3847a4SMat Martineau } 11935f3847a4SMat Martineau } 11945f3847a4SMat Martineau 11959f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 11969f0caeb1SVinicius Costa Gomes { 11972827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 11989f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 11999f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 12009f0caeb1SVinicius Costa Gomes 12010ce43ce6SJohan Hedberg if (chan->mode == L2CAP_MODE_LE_FLOWCTL && !chan->tx_credits) 12020ce43ce6SJohan Hedberg chan->ops->suspend(chan); 1203177f8f2bSJohan Hedberg 120454a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 12059f0caeb1SVinicius Costa Gomes 120654a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 12079f0caeb1SVinicius Costa Gomes } 12089f0caeb1SVinicius Costa Gomes 1209f1496deeSJohan Hedberg static void l2cap_le_connect(struct l2cap_chan *chan) 1210f1496deeSJohan Hedberg { 1211f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1212f1496deeSJohan Hedberg struct l2cap_le_conn_req req; 1213f1496deeSJohan Hedberg 1214595177f3SJohan Hedberg if (test_and_set_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags)) 1215595177f3SJohan Hedberg return; 1216595177f3SJohan Hedberg 1217f1496deeSJohan Hedberg req.psm = chan->psm; 1218f1496deeSJohan Hedberg req.scid = cpu_to_le16(chan->scid); 1219f1496deeSJohan Hedberg req.mtu = cpu_to_le16(chan->imtu); 12203916aed8SJohan Hedberg req.mps = cpu_to_le16(chan->mps); 12210cd75f7eSJohan Hedberg req.credits = cpu_to_le16(chan->rx_credits); 1222f1496deeSJohan Hedberg 1223f1496deeSJohan Hedberg chan->ident = l2cap_get_ident(conn); 1224f1496deeSJohan Hedberg 1225f1496deeSJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_REQ, 1226f1496deeSJohan Hedberg sizeof(req), &req); 1227f1496deeSJohan Hedberg } 1228f1496deeSJohan Hedberg 1229f1496deeSJohan Hedberg static void l2cap_le_start(struct l2cap_chan *chan) 1230f1496deeSJohan Hedberg { 1231f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1232f1496deeSJohan Hedberg 1233f1496deeSJohan Hedberg if (!smp_conn_security(conn->hcon, chan->sec_level)) 1234f1496deeSJohan Hedberg return; 1235f1496deeSJohan Hedberg 1236f1496deeSJohan Hedberg if (!chan->psm) { 1237f1496deeSJohan Hedberg l2cap_chan_ready(chan); 1238f1496deeSJohan Hedberg return; 1239f1496deeSJohan Hedberg } 1240f1496deeSJohan Hedberg 1241f1496deeSJohan Hedberg if (chan->state == BT_CONNECT) 1242f1496deeSJohan Hedberg l2cap_le_connect(chan); 1243f1496deeSJohan Hedberg } 1244f1496deeSJohan Hedberg 124593c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 124693c3e8f5SAndrei Emeltchenko { 124793c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 124893c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 124993c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 1250f1496deeSJohan Hedberg } else if (chan->conn->hcon->type == LE_LINK) { 1251f1496deeSJohan Hedberg l2cap_le_start(chan); 125293c3e8f5SAndrei Emeltchenko } else { 125393c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 125493c3e8f5SAndrei Emeltchenko } 125593c3e8f5SAndrei Emeltchenko } 125693c3e8f5SAndrei Emeltchenko 1257fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 12580a708f8fSGustavo F. Padovan { 12598c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 12600a708f8fSGustavo F. Padovan 12619f0caeb1SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 126296ac34fbSJohan Hedberg l2cap_le_start(chan); 12639f0caeb1SVinicius Costa Gomes return; 12649f0caeb1SVinicius Costa Gomes } 12659f0caeb1SVinicius Costa Gomes 12660a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 12670a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 12680a708f8fSGustavo F. Padovan return; 12690a708f8fSGustavo F. Padovan 1270d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan) && 127193c3e8f5SAndrei Emeltchenko __l2cap_no_conn_pending(chan)) { 127293c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 127393c3e8f5SAndrei Emeltchenko } 12740a708f8fSGustavo F. Padovan } else { 12750a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1276ac73498cSAndrei Emeltchenko req.type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 12770a708f8fSGustavo F. Padovan 12780a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 12790a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 12800a708f8fSGustavo F. Padovan 1281ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 12820a708f8fSGustavo F. Padovan 12832d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 12842d792818SGustavo Padovan sizeof(req), &req); 12850a708f8fSGustavo F. Padovan } 12860a708f8fSGustavo F. Padovan } 12870a708f8fSGustavo F. Padovan 12880a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 12890a708f8fSGustavo F. Padovan { 12900a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 12910a708f8fSGustavo F. Padovan if (!disable_ertm) 12920a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 12930a708f8fSGustavo F. Padovan 12940a708f8fSGustavo F. Padovan switch (mode) { 12950a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 12960a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 12970a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 12980a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 12990a708f8fSGustavo F. Padovan default: 13000a708f8fSGustavo F. Padovan return 0x00; 13010a708f8fSGustavo F. Padovan } 13020a708f8fSGustavo F. Padovan } 13030a708f8fSGustavo F. Padovan 13045e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 13050a708f8fSGustavo F. Padovan { 13065e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 13070a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 13080a708f8fSGustavo F. Padovan 13090a708f8fSGustavo F. Padovan if (!conn) 13100a708f8fSGustavo F. Padovan return; 13110a708f8fSGustavo F. Padovan 1312aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 13131a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13141a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 13151a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 13160a708f8fSGustavo F. Padovan } 13170a708f8fSGustavo F. Padovan 13182338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1319d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1320416fa752SAndrei Emeltchenko return; 1321416fa752SAndrei Emeltchenko } 1322416fa752SAndrei Emeltchenko 1323fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1324fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 13252d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 13262d792818SGustavo Padovan sizeof(req), &req); 13270a708f8fSGustavo F. Padovan 1328f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 13290a708f8fSGustavo F. Padovan } 13300a708f8fSGustavo F. Padovan 13310a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 13320a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 13330a708f8fSGustavo F. Padovan { 13343df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 13350a708f8fSGustavo F. Padovan 13360a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 13370a708f8fSGustavo F. Padovan 13383df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 13390a708f8fSGustavo F. Padovan 13403df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 13416be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 13420a708f8fSGustavo F. Padovan 1343715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 13446be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13450a708f8fSGustavo F. Padovan continue; 13460a708f8fSGustavo F. Padovan } 13470a708f8fSGustavo F. Padovan 134889bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1349d45fc423SGustavo F. Padovan if (!l2cap_chan_check_security(chan) || 1350b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 13516be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13520a708f8fSGustavo F. Padovan continue; 13530a708f8fSGustavo F. Padovan } 13540a708f8fSGustavo F. Padovan 1355c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1356c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1357c1360a1cSGustavo F. Padovan &chan->conf_state)) { 13580f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 13596be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13600a708f8fSGustavo F. Padovan continue; 13610a708f8fSGustavo F. Padovan } 13620a708f8fSGustavo F. Padovan 136393c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 13640a708f8fSGustavo F. Padovan 136589bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 13660a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 13670a708f8fSGustavo F. Padovan char buf[128]; 1368fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1369fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 13700a708f8fSGustavo F. Padovan 1371d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 1372bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1373ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_PEND); 1374ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 13752dc4e510SGustavo Padovan chan->ops->defer(chan); 13760a708f8fSGustavo F. Padovan 13770a708f8fSGustavo F. Padovan } else { 1378acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1379ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 1380ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 13810a708f8fSGustavo F. Padovan } 13820a708f8fSGustavo F. Padovan } else { 1383ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_PEND); 1384ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 13850a708f8fSGustavo F. Padovan } 13860a708f8fSGustavo F. Padovan 1387fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1388fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 13890a708f8fSGustavo F. Padovan 1390c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 13910a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 13926be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13930a708f8fSGustavo F. Padovan continue; 13940a708f8fSGustavo F. Padovan } 13950a708f8fSGustavo F. Padovan 1396c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 13970a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 139873ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 139973ffa904SGustavo F. Padovan chan->num_conf_req++; 14000a708f8fSGustavo F. Padovan } 14010a708f8fSGustavo F. Padovan 14026be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14030a708f8fSGustavo F. Padovan } 14040a708f8fSGustavo F. Padovan 14053df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14060a708f8fSGustavo F. Padovan } 14070a708f8fSGustavo F. Padovan 1408c2287681SIdo Yariv /* Find socket with cid and source/destination bdaddr. 1409b62f328bSVille Tervo * Returns closest match, locked. 1410b62f328bSVille Tervo */ 1411d9b88702SAndrei Emeltchenko static struct l2cap_chan *l2cap_global_chan_by_scid(int state, u16 cid, 1412c2287681SIdo Yariv bdaddr_t *src, 1413c2287681SIdo Yariv bdaddr_t *dst) 1414b62f328bSVille Tervo { 141523691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 1416b62f328bSVille Tervo 141723691d75SGustavo F. Padovan read_lock(&chan_list_lock); 1418b62f328bSVille Tervo 141923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 142089bc500eSGustavo F. Padovan if (state && c->state != state) 1421b62f328bSVille Tervo continue; 1422b62f328bSVille Tervo 142323691d75SGustavo F. Padovan if (c->scid == cid) { 1424c2287681SIdo Yariv int src_match, dst_match; 1425c2287681SIdo Yariv int src_any, dst_any; 1426c2287681SIdo Yariv 1427b62f328bSVille Tervo /* Exact match. */ 14287eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 14297eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1430c2287681SIdo Yariv if (src_match && dst_match) { 143123691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 143223691d75SGustavo F. Padovan return c; 143323691d75SGustavo F. Padovan } 1434b62f328bSVille Tervo 1435b62f328bSVille Tervo /* Closest match */ 14367eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 14377eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1438c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1439c2287681SIdo Yariv (src_any && dst_any)) 144023691d75SGustavo F. Padovan c1 = c; 1441b62f328bSVille Tervo } 1442b62f328bSVille Tervo } 1443280f294fSGustavo F. Padovan 144423691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 1445b62f328bSVille Tervo 144623691d75SGustavo F. Padovan return c1; 1447b62f328bSVille Tervo } 1448b62f328bSVille Tervo 1449b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1450b62f328bSVille Tervo { 1451cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 145223691d75SGustavo F. Padovan struct l2cap_chan *chan, *pchan; 1453cc8dba2bSMarcel Holtmann u8 dst_type; 1454b62f328bSVille Tervo 1455b62f328bSVille Tervo BT_DBG(""); 1456b62f328bSVille Tervo 145718722c24SJukka Rissanen bt_6lowpan_add_conn(conn); 145818722c24SJukka Rissanen 1459b62f328bSVille Tervo /* Check if we have socket listening on cid */ 1460073d1cf3SJohan Hedberg pchan = l2cap_global_chan_by_scid(BT_LISTEN, L2CAP_CID_ATT, 1461cc8dba2bSMarcel Holtmann &hcon->src, &hcon->dst); 146223691d75SGustavo F. Padovan if (!pchan) 1463b62f328bSVille Tervo return; 1464b62f328bSVille Tervo 146544f3b0fbSJohan Hedberg /* Client ATT sockets should override the server one */ 146644f3b0fbSJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, L2CAP_CID_ATT)) 146744f3b0fbSJohan Hedberg return; 146844f3b0fbSJohan Hedberg 1469cc8dba2bSMarcel Holtmann dst_type = bdaddr_type(hcon, hcon->dst_type); 1470cc8dba2bSMarcel Holtmann 1471cc8dba2bSMarcel Holtmann /* If device is blocked, do not create a channel for it */ 1472cc8dba2bSMarcel Holtmann if (hci_blacklist_lookup(hcon->hdev, &hcon->dst, dst_type)) 1473cc8dba2bSMarcel Holtmann return; 1474cc8dba2bSMarcel Holtmann 14758ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 147662f3a2cfSGustavo F. Padovan 147780b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 147880808e43SGustavo F. Padovan if (!chan) 1479b62f328bSVille Tervo goto clean; 1480b62f328bSVille Tervo 1481cc8dba2bSMarcel Holtmann bacpy(&chan->src, &hcon->src); 1482cc8dba2bSMarcel Holtmann bacpy(&chan->dst, &hcon->dst); 1483cc8dba2bSMarcel Holtmann chan->src_type = bdaddr_type(hcon, hcon->src_type); 1484cc8dba2bSMarcel Holtmann chan->dst_type = dst_type; 1485b62f328bSVille Tervo 148644f3b0fbSJohan Hedberg __l2cap_chan_add(conn, chan); 148748454079SGustavo F. Padovan 1488b62f328bSVille Tervo clean: 14898ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 1490b62f328bSVille Tervo } 1491b62f328bSVille Tervo 14920a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 14930a708f8fSGustavo F. Padovan { 149448454079SGustavo F. Padovan struct l2cap_chan *chan; 1495cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 14960a708f8fSGustavo F. Padovan 14970a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14980a708f8fSGustavo F. Padovan 1499d8729922SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1500d8729922SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1501d8729922SJohan Hedberg */ 1502cc110922SVinicius Costa Gomes if (hcon->out && hcon->type == LE_LINK) 1503cc110922SVinicius Costa Gomes smp_conn_security(hcon, hcon->pending_sec_level); 1504160dc6acSVinicius Costa Gomes 15053df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15060a708f8fSGustavo F. Padovan 150744f3b0fbSJohan Hedberg if (hcon->type == LE_LINK) 150844f3b0fbSJohan Hedberg l2cap_le_conn_ready(conn); 150944f3b0fbSJohan Hedberg 15103df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1511baa7e1faSGustavo F. Padovan 15126be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15130a708f8fSGustavo F. Padovan 15142338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1515416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1516416fa752SAndrei Emeltchenko continue; 1517416fa752SAndrei Emeltchenko } 1518416fa752SAndrei Emeltchenko 1519cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1520f1496deeSJohan Hedberg l2cap_le_start(chan); 152163128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 152274e75740SGustavo Padovan l2cap_chan_ready(chan); 1523b501d6a1SAnderson Briglia 15241c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1525fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 15261c244f79SGustavo Padovan } 15270a708f8fSGustavo F. Padovan 15286be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15290a708f8fSGustavo F. Padovan } 15300a708f8fSGustavo F. Padovan 15313df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 153261a939c6SJohan Hedberg 153361a939c6SJohan Hedberg queue_work(hcon->hdev->workqueue, &conn->pending_rx_work); 15340a708f8fSGustavo F. Padovan } 15350a708f8fSGustavo F. Padovan 15360a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 15370a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 15380a708f8fSGustavo F. Padovan { 153948454079SGustavo F. Padovan struct l2cap_chan *chan; 15400a708f8fSGustavo F. Padovan 15410a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15420a708f8fSGustavo F. Padovan 15433df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15440a708f8fSGustavo F. Padovan 15453df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1546ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 15471d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 15480a708f8fSGustavo F. Padovan } 15490a708f8fSGustavo F. Padovan 15503df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15510a708f8fSGustavo F. Padovan } 15520a708f8fSGustavo F. Padovan 1553f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 15540a708f8fSGustavo F. Padovan { 1555f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1556030013d8SGustavo F. Padovan info_timer.work); 15570a708f8fSGustavo F. Padovan 15580a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 15590a708f8fSGustavo F. Padovan conn->info_ident = 0; 15600a708f8fSGustavo F. Padovan 15610a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 15620a708f8fSGustavo F. Padovan } 15630a708f8fSGustavo F. Padovan 15642c8e1411SDavid Herrmann /* 15652c8e1411SDavid Herrmann * l2cap_user 15662c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 15672c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 15682c8e1411SDavid Herrmann * during unregistration. 15692c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 15702c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 15712c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 15722c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 15732c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 15742c8e1411SDavid Herrmann * any time if they don't. 15752c8e1411SDavid Herrmann */ 15762c8e1411SDavid Herrmann 15772c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 15782c8e1411SDavid Herrmann { 15792c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 15802c8e1411SDavid Herrmann int ret; 15812c8e1411SDavid Herrmann 15822c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 15832c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 15842c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 15852c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 15862c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 15872c8e1411SDavid Herrmann * here, too. */ 15882c8e1411SDavid Herrmann 15892c8e1411SDavid Herrmann hci_dev_lock(hdev); 15902c8e1411SDavid Herrmann 15912c8e1411SDavid Herrmann if (user->list.next || user->list.prev) { 15922c8e1411SDavid Herrmann ret = -EINVAL; 15932c8e1411SDavid Herrmann goto out_unlock; 15942c8e1411SDavid Herrmann } 15952c8e1411SDavid Herrmann 15962c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 15972c8e1411SDavid Herrmann if (!conn->hchan) { 15982c8e1411SDavid Herrmann ret = -ENODEV; 15992c8e1411SDavid Herrmann goto out_unlock; 16002c8e1411SDavid Herrmann } 16012c8e1411SDavid Herrmann 16022c8e1411SDavid Herrmann ret = user->probe(conn, user); 16032c8e1411SDavid Herrmann if (ret) 16042c8e1411SDavid Herrmann goto out_unlock; 16052c8e1411SDavid Herrmann 16062c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 16072c8e1411SDavid Herrmann ret = 0; 16082c8e1411SDavid Herrmann 16092c8e1411SDavid Herrmann out_unlock: 16102c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16112c8e1411SDavid Herrmann return ret; 16122c8e1411SDavid Herrmann } 16132c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 16142c8e1411SDavid Herrmann 16152c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 16162c8e1411SDavid Herrmann { 16172c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16182c8e1411SDavid Herrmann 16192c8e1411SDavid Herrmann hci_dev_lock(hdev); 16202c8e1411SDavid Herrmann 16212c8e1411SDavid Herrmann if (!user->list.next || !user->list.prev) 16222c8e1411SDavid Herrmann goto out_unlock; 16232c8e1411SDavid Herrmann 16242c8e1411SDavid Herrmann list_del(&user->list); 16252c8e1411SDavid Herrmann user->list.next = NULL; 16262c8e1411SDavid Herrmann user->list.prev = NULL; 16272c8e1411SDavid Herrmann user->remove(conn, user); 16282c8e1411SDavid Herrmann 16292c8e1411SDavid Herrmann out_unlock: 16302c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16312c8e1411SDavid Herrmann } 16322c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 16332c8e1411SDavid Herrmann 16342c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 16352c8e1411SDavid Herrmann { 16362c8e1411SDavid Herrmann struct l2cap_user *user; 16372c8e1411SDavid Herrmann 16382c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 16392c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 16402c8e1411SDavid Herrmann list_del(&user->list); 16412c8e1411SDavid Herrmann user->list.next = NULL; 16422c8e1411SDavid Herrmann user->list.prev = NULL; 16432c8e1411SDavid Herrmann user->remove(conn, user); 16442c8e1411SDavid Herrmann } 16452c8e1411SDavid Herrmann } 16462c8e1411SDavid Herrmann 16475d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 16485d3de7dfSVinicius Costa Gomes { 16495d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 16505d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 16515d3de7dfSVinicius Costa Gomes 16525d3de7dfSVinicius Costa Gomes if (!conn) 16535d3de7dfSVinicius Costa Gomes return; 16545d3de7dfSVinicius Costa Gomes 16555d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 16565d3de7dfSVinicius Costa Gomes 16575d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 16585d3de7dfSVinicius Costa Gomes 165961a939c6SJohan Hedberg skb_queue_purge(&conn->pending_rx); 166061a939c6SJohan Hedberg flush_work(&conn->pending_rx_work); 166161a939c6SJohan Hedberg 16622c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 16632c8e1411SDavid Herrmann 16643df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 16653df91ea2SAndrei Emeltchenko 16665d3de7dfSVinicius Costa Gomes /* Kill channels */ 16675d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 166861d6ef3eSMat Martineau l2cap_chan_hold(chan); 16696be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 16706be36555SAndrei Emeltchenko 16715d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 16726be36555SAndrei Emeltchenko 16736be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 16746be36555SAndrei Emeltchenko 167580b98027SGustavo Padovan chan->ops->close(chan); 167661d6ef3eSMat Martineau l2cap_chan_put(chan); 16775d3de7dfSVinicius Costa Gomes } 16785d3de7dfSVinicius Costa Gomes 16793df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 16803df91ea2SAndrei Emeltchenko 168173d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 168273d80debSLuiz Augusto von Dentz 16835d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1684127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 16855d3de7dfSVinicius Costa Gomes 168651a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1687127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->security_timer); 16888aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1689d26a2345SVinicius Costa Gomes } 16905d3de7dfSVinicius Costa Gomes 16915d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 16929c903e37SDavid Herrmann conn->hchan = NULL; 16939c903e37SDavid Herrmann l2cap_conn_put(conn); 16945d3de7dfSVinicius Costa Gomes } 16955d3de7dfSVinicius Costa Gomes 16966c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 16975d3de7dfSVinicius Costa Gomes { 16986c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 16996c9d42a1SGustavo F. Padovan security_timer.work); 17005d3de7dfSVinicius Costa Gomes 1701d06cc416SJohan Hedberg BT_DBG("conn %p", conn); 1702d06cc416SJohan Hedberg 1703d06cc416SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &conn->hcon->flags)) { 1704d06cc416SJohan Hedberg smp_chan_destroy(conn); 17055d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 17065d3de7dfSVinicius Costa Gomes } 1707d06cc416SJohan Hedberg } 17085d3de7dfSVinicius Costa Gomes 17099c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 17109c903e37SDavid Herrmann { 17119c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 17129c903e37SDavid Herrmann 17139c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17149c903e37SDavid Herrmann kfree(conn); 17159c903e37SDavid Herrmann } 17169c903e37SDavid Herrmann 17179c903e37SDavid Herrmann void l2cap_conn_get(struct l2cap_conn *conn) 17189c903e37SDavid Herrmann { 17199c903e37SDavid Herrmann kref_get(&conn->ref); 17209c903e37SDavid Herrmann } 17219c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17229c903e37SDavid Herrmann 17239c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17249c903e37SDavid Herrmann { 17259c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17269c903e37SDavid Herrmann } 17279c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17289c903e37SDavid Herrmann 17290a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17300a708f8fSGustavo F. Padovan 1731c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17320a708f8fSGustavo F. Padovan * Returns closest match. 17330a708f8fSGustavo F. Padovan */ 1734c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1735c2287681SIdo Yariv bdaddr_t *src, 1736bf20fd4eSJohan Hedberg bdaddr_t *dst, 1737bf20fd4eSJohan Hedberg u8 link_type) 17380a708f8fSGustavo F. Padovan { 173923691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17400a708f8fSGustavo F. Padovan 174123691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17420a708f8fSGustavo F. Padovan 174323691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 174489bc500eSGustavo F. Padovan if (state && c->state != state) 17450a708f8fSGustavo F. Padovan continue; 17460a708f8fSGustavo F. Padovan 1747bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1748bf20fd4eSJohan Hedberg continue; 1749bf20fd4eSJohan Hedberg 1750bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1751bf20fd4eSJohan Hedberg continue; 1752bf20fd4eSJohan Hedberg 175323691d75SGustavo F. Padovan if (c->psm == psm) { 1754c2287681SIdo Yariv int src_match, dst_match; 1755c2287681SIdo Yariv int src_any, dst_any; 1756c2287681SIdo Yariv 17570a708f8fSGustavo F. Padovan /* Exact match. */ 17587eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17597eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1760c2287681SIdo Yariv if (src_match && dst_match) { 1761a7567b20SJohannes Berg read_unlock(&chan_list_lock); 176223691d75SGustavo F. Padovan return c; 176323691d75SGustavo F. Padovan } 17640a708f8fSGustavo F. Padovan 17650a708f8fSGustavo F. Padovan /* Closest match */ 17667eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17677eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1768c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1769c2287681SIdo Yariv (src_any && dst_any)) 177023691d75SGustavo F. Padovan c1 = c; 17710a708f8fSGustavo F. Padovan } 17720a708f8fSGustavo F. Padovan } 17730a708f8fSGustavo F. Padovan 177423691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17750a708f8fSGustavo F. Padovan 177623691d75SGustavo F. Padovan return c1; 17770a708f8fSGustavo F. Padovan } 17780a708f8fSGustavo F. Padovan 1779721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 17800a708f8fSGustavo F. Padovan { 1781721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1782721c4181SGustavo F. Padovan monitor_timer.work); 17830a708f8fSGustavo F. Padovan 1784525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 17850a708f8fSGustavo F. Padovan 17866be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 17876be36555SAndrei Emeltchenko 178880909e04SMat Martineau if (!chan->conn) { 17896be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17908d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 17910a708f8fSGustavo F. Padovan return; 17920a708f8fSGustavo F. Padovan } 17930a708f8fSGustavo F. Padovan 1794401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 17950a708f8fSGustavo F. Padovan 17966be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17978d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 17980a708f8fSGustavo F. Padovan } 17990a708f8fSGustavo F. Padovan 1800721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 18010a708f8fSGustavo F. Padovan { 1802721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1803721c4181SGustavo F. Padovan retrans_timer.work); 18040a708f8fSGustavo F. Padovan 180549208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 18060a708f8fSGustavo F. Padovan 18076be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18086be36555SAndrei Emeltchenko 180980909e04SMat Martineau if (!chan->conn) { 181080909e04SMat Martineau l2cap_chan_unlock(chan); 181180909e04SMat Martineau l2cap_chan_put(chan); 181280909e04SMat Martineau return; 181380909e04SMat Martineau } 18140a708f8fSGustavo F. Padovan 1815401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 18166be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18178d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18180a708f8fSGustavo F. Padovan } 18190a708f8fSGustavo F. Padovan 1820d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 18213733937dSMat Martineau struct sk_buff_head *skbs) 18220a708f8fSGustavo F. Padovan { 18230a708f8fSGustavo F. Padovan struct sk_buff *skb; 18243733937dSMat Martineau struct l2cap_ctrl *control; 18250a708f8fSGustavo F. Padovan 18263733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 18273733937dSMat Martineau 1828b99e13adSMat Martineau if (__chan_is_moving(chan)) 1829b99e13adSMat Martineau return; 1830b99e13adSMat Martineau 18313733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 18323733937dSMat Martineau 18333733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 18343733937dSMat Martineau 18353733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 18363733937dSMat Martineau 18373733937dSMat Martineau bt_cb(skb)->control.retries = 1; 18383733937dSMat Martineau control = &bt_cb(skb)->control; 18393733937dSMat Martineau 18403733937dSMat Martineau control->reqseq = 0; 18413733937dSMat Martineau control->txseq = chan->next_tx_seq; 18423733937dSMat Martineau 18433733937dSMat Martineau __pack_control(chan, control, skb); 18440a708f8fSGustavo F. Padovan 184547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 18463733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 18473733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18480a708f8fSGustavo F. Padovan } 18490a708f8fSGustavo F. Padovan 18504343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 18510a708f8fSGustavo F. Padovan 1852b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 18533733937dSMat Martineau 1854836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 18553733937dSMat Martineau chan->frames_sent++; 18560a708f8fSGustavo F. Padovan } 18570a708f8fSGustavo F. Padovan } 18580a708f8fSGustavo F. Padovan 185967c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 18600a708f8fSGustavo F. Padovan { 18610a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 186218a48e76SMat Martineau struct l2cap_ctrl *control; 186318a48e76SMat Martineau int sent = 0; 186418a48e76SMat Martineau 186518a48e76SMat Martineau BT_DBG("chan %p", chan); 18660a708f8fSGustavo F. Padovan 186789bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 18680a708f8fSGustavo F. Padovan return -ENOTCONN; 18690a708f8fSGustavo F. Padovan 187094122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 187194122bbeSMat Martineau return 0; 187294122bbeSMat Martineau 1873b99e13adSMat Martineau if (__chan_is_moving(chan)) 1874b99e13adSMat Martineau return 0; 1875b99e13adSMat Martineau 187618a48e76SMat Martineau while (chan->tx_send_head && 187718a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 187818a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 18790a708f8fSGustavo F. Padovan 188018a48e76SMat Martineau skb = chan->tx_send_head; 18810a708f8fSGustavo F. Padovan 188218a48e76SMat Martineau bt_cb(skb)->control.retries = 1; 188318a48e76SMat Martineau control = &bt_cb(skb)->control; 18840a708f8fSGustavo F. Padovan 1885e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 188618a48e76SMat Martineau control->final = 1; 1887e2ab4353SGustavo F. Padovan 188818a48e76SMat Martineau control->reqseq = chan->buffer_seq; 188918a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 189018a48e76SMat Martineau control->txseq = chan->next_tx_seq; 18910a708f8fSGustavo F. Padovan 189218a48e76SMat Martineau __pack_control(chan, control, skb); 18930a708f8fSGustavo F. Padovan 189447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 189518a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 189618a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18970a708f8fSGustavo F. Padovan } 18980a708f8fSGustavo F. Padovan 189918a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 190018a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 190118a48e76SMat Martineau */ 190218a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 190318a48e76SMat Martineau 190418a48e76SMat Martineau if (!tx_skb) 190518a48e76SMat Martineau break; 19060a708f8fSGustavo F. Padovan 19071a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 19080a708f8fSGustavo F. Padovan 1909836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19106a026610SGustavo F. Padovan chan->unacked_frames++; 19116a026610SGustavo F. Padovan chan->frames_sent++; 191218a48e76SMat Martineau sent++; 19130a708f8fSGustavo F. Padovan 191458d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 191558d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 19160a708f8fSGustavo F. Padovan else 191758d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 191818a48e76SMat Martineau 191918a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 1920b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19210a708f8fSGustavo F. Padovan } 19220a708f8fSGustavo F. Padovan 1923b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 1924b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 192518a48e76SMat Martineau 192618a48e76SMat Martineau return sent; 19270a708f8fSGustavo F. Padovan } 19280a708f8fSGustavo F. Padovan 1929e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 1930e1fbd4c1SMat Martineau { 1931e1fbd4c1SMat Martineau struct l2cap_ctrl control; 1932e1fbd4c1SMat Martineau struct sk_buff *skb; 1933e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 1934e1fbd4c1SMat Martineau u16 seq; 1935e1fbd4c1SMat Martineau 1936e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 1937e1fbd4c1SMat Martineau 1938e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 1939e1fbd4c1SMat Martineau return; 1940e1fbd4c1SMat Martineau 1941b99e13adSMat Martineau if (__chan_is_moving(chan)) 1942b99e13adSMat Martineau return; 1943b99e13adSMat Martineau 1944e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 1945e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 1946e1fbd4c1SMat Martineau 1947e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 1948e1fbd4c1SMat Martineau if (!skb) { 1949e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 1950e1fbd4c1SMat Martineau seq); 1951e1fbd4c1SMat Martineau continue; 1952e1fbd4c1SMat Martineau } 1953e1fbd4c1SMat Martineau 1954e1fbd4c1SMat Martineau bt_cb(skb)->control.retries++; 1955e1fbd4c1SMat Martineau control = bt_cb(skb)->control; 1956e1fbd4c1SMat Martineau 1957e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 1958e1fbd4c1SMat Martineau bt_cb(skb)->control.retries > chan->max_tx) { 1959e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 19605e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 1961e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1962e1fbd4c1SMat Martineau break; 1963e1fbd4c1SMat Martineau } 1964e1fbd4c1SMat Martineau 1965e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 1966e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 1967e1fbd4c1SMat Martineau control.final = 1; 1968e1fbd4c1SMat Martineau else 1969e1fbd4c1SMat Martineau control.final = 0; 1970e1fbd4c1SMat Martineau 1971e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 1972e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 1973e1fbd4c1SMat Martineau * writeable copy 1974e1fbd4c1SMat Martineau */ 19758bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 1976e1fbd4c1SMat Martineau } else { 19778bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 1978e1fbd4c1SMat Martineau } 1979e1fbd4c1SMat Martineau 1980e1fbd4c1SMat Martineau if (!tx_skb) { 1981e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1982e1fbd4c1SMat Martineau break; 1983e1fbd4c1SMat Martineau } 1984e1fbd4c1SMat Martineau 1985e1fbd4c1SMat Martineau /* Update skb contents */ 1986e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 1987e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 1988e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 1989e1fbd4c1SMat Martineau } else { 1990e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 1991e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 1992e1fbd4c1SMat Martineau } 1993e1fbd4c1SMat Martineau 1994e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 1995e1fbd4c1SMat Martineau u16 fcs = crc16(0, (u8 *) tx_skb->data, tx_skb->len); 1996e1fbd4c1SMat Martineau put_unaligned_le16(fcs, skb_put(tx_skb, 1997e1fbd4c1SMat Martineau L2CAP_FCS_SIZE)); 1998e1fbd4c1SMat Martineau } 1999e1fbd4c1SMat Martineau 2000e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2001e1fbd4c1SMat Martineau 2002e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2003e1fbd4c1SMat Martineau 2004e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2005e1fbd4c1SMat Martineau } 2006e1fbd4c1SMat Martineau } 2007e1fbd4c1SMat Martineau 2008f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2009f80842a8SMat Martineau struct l2cap_ctrl *control) 2010f80842a8SMat Martineau { 2011f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2012f80842a8SMat Martineau 2013f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2014f80842a8SMat Martineau l2cap_ertm_resend(chan); 2015f80842a8SMat Martineau } 2016f80842a8SMat Martineau 2017d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2018d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2019d2a7ac5dSMat Martineau { 2020e1fbd4c1SMat Martineau struct sk_buff *skb; 2021e1fbd4c1SMat Martineau 2022e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2023e1fbd4c1SMat Martineau 2024e1fbd4c1SMat Martineau if (control->poll) 2025e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2026e1fbd4c1SMat Martineau 2027e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2028e1fbd4c1SMat Martineau 2029e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2030e1fbd4c1SMat Martineau return; 2031e1fbd4c1SMat Martineau 2032e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2033e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2034e1fbd4c1SMat Martineau if (bt_cb(skb)->control.txseq == control->reqseq || 2035e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2036e1fbd4c1SMat Martineau break; 2037e1fbd4c1SMat Martineau } 2038e1fbd4c1SMat Martineau 2039e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2040e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2041e1fbd4c1SMat Martineau break; 2042e1fbd4c1SMat Martineau 2043e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2044e1fbd4c1SMat Martineau bt_cb(skb)->control.txseq); 2045e1fbd4c1SMat Martineau } 2046e1fbd4c1SMat Martineau 2047e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2048e1fbd4c1SMat Martineau } 2049d2a7ac5dSMat Martineau } 2050d2a7ac5dSMat Martineau 2051b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2052b17e73bbSSzymon Janc { 20530a0aba42SMat Martineau struct l2cap_ctrl control; 20540a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 20550a0aba42SMat Martineau chan->last_acked_seq); 20560a0aba42SMat Martineau int threshold; 20570a0aba42SMat Martineau 20580a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 20590a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 20600a0aba42SMat Martineau 20610a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 20620a0aba42SMat Martineau control.sframe = 1; 20630a0aba42SMat Martineau 20640a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 20650a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2066b17e73bbSSzymon Janc __clear_ack_timer(chan); 20670a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 20680a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20690a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20700a0aba42SMat Martineau } else { 20710a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 20720a0aba42SMat Martineau l2cap_ertm_send(chan); 20730a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 20740a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 20750a0aba42SMat Martineau frames_to_ack = 0; 20760a0aba42SMat Martineau } 20770a0aba42SMat Martineau 2078c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 20790a0aba42SMat Martineau * Calculate without mul or div 20800a0aba42SMat Martineau */ 2081c20f8e35SMat Martineau threshold = chan->ack_win; 20820a0aba42SMat Martineau threshold += threshold << 1; 20830a0aba42SMat Martineau threshold >>= 2; 20840a0aba42SMat Martineau 2085b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 20860a0aba42SMat Martineau threshold); 20870a0aba42SMat Martineau 20880a0aba42SMat Martineau if (frames_to_ack >= threshold) { 20890a0aba42SMat Martineau __clear_ack_timer(chan); 20900a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 20910a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20920a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20930a0aba42SMat Martineau frames_to_ack = 0; 20940a0aba42SMat Martineau } 20950a0aba42SMat Martineau 20960a0aba42SMat Martineau if (frames_to_ack) 20970a0aba42SMat Martineau __set_ack_timer(chan); 20980a0aba42SMat Martineau } 2099b17e73bbSSzymon Janc } 2100b17e73bbSSzymon Janc 210104124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 210204124681SGustavo F. Padovan struct msghdr *msg, int len, 210304124681SGustavo F. Padovan int count, struct sk_buff *skb) 21040a708f8fSGustavo F. Padovan { 21050952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 21060a708f8fSGustavo F. Padovan struct sk_buff **frag; 210790338947SGustavo Padovan int sent = 0; 21080a708f8fSGustavo F. Padovan 21090a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(skb, count), msg->msg_iov, count)) 21100a708f8fSGustavo F. Padovan return -EFAULT; 21110a708f8fSGustavo F. Padovan 21120a708f8fSGustavo F. Padovan sent += count; 21130a708f8fSGustavo F. Padovan len -= count; 21140a708f8fSGustavo F. Padovan 21150a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 21160a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 21170a708f8fSGustavo F. Padovan while (len) { 2118fbe00700SGustavo Padovan struct sk_buff *tmp; 2119fbe00700SGustavo Padovan 21200a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 21210a708f8fSGustavo F. Padovan 2122fbe00700SGustavo Padovan tmp = chan->ops->alloc_skb(chan, count, 212390338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2124fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2125fbe00700SGustavo Padovan return PTR_ERR(tmp); 21262f7719ceSAndrei Emeltchenko 2127fbe00700SGustavo Padovan *frag = tmp; 2128fbe00700SGustavo Padovan 21290a708f8fSGustavo F. Padovan if (memcpy_fromiovec(skb_put(*frag, count), msg->msg_iov, count)) 21300a708f8fSGustavo F. Padovan return -EFAULT; 21310a708f8fSGustavo F. Padovan 21325e59b791SLuiz Augusto von Dentz (*frag)->priority = skb->priority; 21335e59b791SLuiz Augusto von Dentz 21340a708f8fSGustavo F. Padovan sent += count; 21350a708f8fSGustavo F. Padovan len -= count; 21360a708f8fSGustavo F. Padovan 21372d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 21382d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 21392d0ed3d5SGustavo Padovan 21400a708f8fSGustavo F. Padovan frag = &(*frag)->next; 21410a708f8fSGustavo F. Padovan } 21420a708f8fSGustavo F. Padovan 21430a708f8fSGustavo F. Padovan return sent; 21440a708f8fSGustavo F. Padovan } 21450a708f8fSGustavo F. Padovan 21465e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 21475e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 21485e59b791SLuiz Augusto von Dentz u32 priority) 21490a708f8fSGustavo F. Padovan { 21508c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21510a708f8fSGustavo F. Padovan struct sk_buff *skb; 215203a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 21530a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21540a708f8fSGustavo F. Padovan 215543b1b8dfSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu priority %u", chan, 215643b1b8dfSMarcel Holtmann __le16_to_cpu(chan->psm), len, priority); 21570a708f8fSGustavo F. Padovan 21580a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 21592f7719ceSAndrei Emeltchenko 21602f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 216190338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 216290338947SGustavo Padovan if (IS_ERR(skb)) 216390338947SGustavo Padovan return skb; 21640a708f8fSGustavo F. Padovan 21655e59b791SLuiz Augusto von Dentz skb->priority = priority; 21665e59b791SLuiz Augusto von Dentz 21670a708f8fSGustavo F. Padovan /* Create L2CAP header */ 21680a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2169fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2170daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 217143b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 21720a708f8fSGustavo F. Padovan 21730952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 21740a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 21750a708f8fSGustavo F. Padovan kfree_skb(skb); 21760a708f8fSGustavo F. Padovan return ERR_PTR(err); 21770a708f8fSGustavo F. Padovan } 21780a708f8fSGustavo F. Padovan return skb; 21790a708f8fSGustavo F. Padovan } 21800a708f8fSGustavo F. Padovan 21815e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 21825e59b791SLuiz Augusto von Dentz struct msghdr *msg, size_t len, 21835e59b791SLuiz Augusto von Dentz u32 priority) 21840a708f8fSGustavo F. Padovan { 21858c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21860a708f8fSGustavo F. Padovan struct sk_buff *skb; 2187f2ba7faeSGustavo Padovan int err, count; 21880a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21890a708f8fSGustavo F. Padovan 2190b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 21910a708f8fSGustavo F. Padovan 2192f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 21932f7719ceSAndrei Emeltchenko 2194f2ba7faeSGustavo Padovan skb = chan->ops->alloc_skb(chan, count + L2CAP_HDR_SIZE, 219590338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 219690338947SGustavo Padovan if (IS_ERR(skb)) 219790338947SGustavo Padovan return skb; 21980a708f8fSGustavo F. Padovan 21995e59b791SLuiz Augusto von Dentz skb->priority = priority; 22005e59b791SLuiz Augusto von Dentz 22010a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22020a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2203fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22046ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 22050a708f8fSGustavo F. Padovan 22060952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22070a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22080a708f8fSGustavo F. Padovan kfree_skb(skb); 22090a708f8fSGustavo F. Padovan return ERR_PTR(err); 22100a708f8fSGustavo F. Padovan } 22110a708f8fSGustavo F. Padovan return skb; 22120a708f8fSGustavo F. Padovan } 22130a708f8fSGustavo F. Padovan 2214ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2215ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 221694122bbeSMat Martineau u16 sdulen) 22170a708f8fSGustavo F. Padovan { 22188c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22190a708f8fSGustavo F. Padovan struct sk_buff *skb; 2220e4ca6d98SAndrei Emeltchenko int err, count, hlen; 22210a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22220a708f8fSGustavo F. Padovan 2223b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22240a708f8fSGustavo F. Padovan 22250a708f8fSGustavo F. Padovan if (!conn) 22260a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 22270a708f8fSGustavo F. Padovan 2228ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2229e4ca6d98SAndrei Emeltchenko 22300a708f8fSGustavo F. Padovan if (sdulen) 223103a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 22320a708f8fSGustavo F. Padovan 223347d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 223403a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 22350a708f8fSGustavo F. Padovan 22360a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22372f7719ceSAndrei Emeltchenko 22382f7719ceSAndrei Emeltchenko skb = chan->ops->alloc_skb(chan, count + hlen, 223990338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 224090338947SGustavo Padovan if (IS_ERR(skb)) 224190338947SGustavo Padovan return skb; 22420a708f8fSGustavo F. Padovan 22430a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22440a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2245fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22460a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 224788843ab0SAndrei Emeltchenko 224818a48e76SMat Martineau /* Control header is populated later */ 224918a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 225018a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 225118a48e76SMat Martineau else 225218a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 225388843ab0SAndrei Emeltchenko 22540a708f8fSGustavo F. Padovan if (sdulen) 225503a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 22560a708f8fSGustavo F. Padovan 22570952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22580a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22590a708f8fSGustavo F. Padovan kfree_skb(skb); 22600a708f8fSGustavo F. Padovan return ERR_PTR(err); 22610a708f8fSGustavo F. Padovan } 22620a708f8fSGustavo F. Padovan 226318a48e76SMat Martineau bt_cb(skb)->control.fcs = chan->fcs; 22643ce3514fSMat Martineau bt_cb(skb)->control.retries = 0; 22650a708f8fSGustavo F. Padovan return skb; 22660a708f8fSGustavo F. Padovan } 22670a708f8fSGustavo F. Padovan 226894122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 226994122bbeSMat Martineau struct sk_buff_head *seg_queue, 227094122bbeSMat Martineau struct msghdr *msg, size_t len) 22710a708f8fSGustavo F. Padovan { 22720a708f8fSGustavo F. Padovan struct sk_buff *skb; 227394122bbeSMat Martineau u16 sdu_len; 227494122bbeSMat Martineau size_t pdu_len; 227594122bbeSMat Martineau u8 sar; 22760a708f8fSGustavo F. Padovan 2277b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 22780a708f8fSGustavo F. Padovan 227994122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 228094122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 228194122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 228294122bbeSMat Martineau */ 228394122bbeSMat Martineau 228494122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 228594122bbeSMat Martineau pdu_len = chan->conn->mtu; 228694122bbeSMat Martineau 2287a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2288a549574dSMat Martineau if (!chan->hs_hcon) 228994122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 229094122bbeSMat Martineau 229194122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 229235d401dfSGustavo Padovan if (chan->fcs) 229335d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 229435d401dfSGustavo Padovan 2295ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 229694122bbeSMat Martineau 229794122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 229894122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 229994122bbeSMat Martineau 230094122bbeSMat Martineau if (len <= pdu_len) { 230194122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 230294122bbeSMat Martineau sdu_len = 0; 230394122bbeSMat Martineau pdu_len = len; 230494122bbeSMat Martineau } else { 230594122bbeSMat Martineau sar = L2CAP_SAR_START; 230694122bbeSMat Martineau sdu_len = len; 230794122bbeSMat Martineau pdu_len -= L2CAP_SDULEN_SIZE; 230894122bbeSMat Martineau } 23090a708f8fSGustavo F. Padovan 23100a708f8fSGustavo F. Padovan while (len > 0) { 231194122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 23120a708f8fSGustavo F. Padovan 23130a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 231494122bbeSMat Martineau __skb_queue_purge(seg_queue); 23150a708f8fSGustavo F. Padovan return PTR_ERR(skb); 23160a708f8fSGustavo F. Padovan } 23170a708f8fSGustavo F. Padovan 231894122bbeSMat Martineau bt_cb(skb)->control.sar = sar; 231994122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 23200a708f8fSGustavo F. Padovan 232194122bbeSMat Martineau len -= pdu_len; 232294122bbeSMat Martineau if (sdu_len) { 232394122bbeSMat Martineau sdu_len = 0; 232494122bbeSMat Martineau pdu_len += L2CAP_SDULEN_SIZE; 232594122bbeSMat Martineau } 232694122bbeSMat Martineau 232794122bbeSMat Martineau if (len <= pdu_len) { 232894122bbeSMat Martineau sar = L2CAP_SAR_END; 232994122bbeSMat Martineau pdu_len = len; 233094122bbeSMat Martineau } else { 233194122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 233294122bbeSMat Martineau } 233394122bbeSMat Martineau } 233494122bbeSMat Martineau 2335f0f62799SGustavo Padovan return 0; 23360a708f8fSGustavo F. Padovan } 23370a708f8fSGustavo F. Padovan 2338177f8f2bSJohan Hedberg static struct sk_buff *l2cap_create_le_flowctl_pdu(struct l2cap_chan *chan, 2339177f8f2bSJohan Hedberg struct msghdr *msg, 2340177f8f2bSJohan Hedberg size_t len, u16 sdulen) 2341177f8f2bSJohan Hedberg { 2342177f8f2bSJohan Hedberg struct l2cap_conn *conn = chan->conn; 2343177f8f2bSJohan Hedberg struct sk_buff *skb; 2344177f8f2bSJohan Hedberg int err, count, hlen; 2345177f8f2bSJohan Hedberg struct l2cap_hdr *lh; 2346177f8f2bSJohan Hedberg 2347177f8f2bSJohan Hedberg BT_DBG("chan %p len %zu", chan, len); 2348177f8f2bSJohan Hedberg 2349177f8f2bSJohan Hedberg if (!conn) 2350177f8f2bSJohan Hedberg return ERR_PTR(-ENOTCONN); 2351177f8f2bSJohan Hedberg 2352177f8f2bSJohan Hedberg hlen = L2CAP_HDR_SIZE; 2353177f8f2bSJohan Hedberg 2354177f8f2bSJohan Hedberg if (sdulen) 2355177f8f2bSJohan Hedberg hlen += L2CAP_SDULEN_SIZE; 2356177f8f2bSJohan Hedberg 2357177f8f2bSJohan Hedberg count = min_t(unsigned int, (conn->mtu - hlen), len); 2358177f8f2bSJohan Hedberg 2359177f8f2bSJohan Hedberg skb = chan->ops->alloc_skb(chan, count + hlen, 2360177f8f2bSJohan Hedberg msg->msg_flags & MSG_DONTWAIT); 2361177f8f2bSJohan Hedberg if (IS_ERR(skb)) 2362177f8f2bSJohan Hedberg return skb; 2363177f8f2bSJohan Hedberg 2364177f8f2bSJohan Hedberg /* Create L2CAP header */ 2365177f8f2bSJohan Hedberg lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2366177f8f2bSJohan Hedberg lh->cid = cpu_to_le16(chan->dcid); 2367177f8f2bSJohan Hedberg lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 2368177f8f2bSJohan Hedberg 2369177f8f2bSJohan Hedberg if (sdulen) 2370177f8f2bSJohan Hedberg put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 2371177f8f2bSJohan Hedberg 2372177f8f2bSJohan Hedberg err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 2373177f8f2bSJohan Hedberg if (unlikely(err < 0)) { 2374177f8f2bSJohan Hedberg kfree_skb(skb); 2375177f8f2bSJohan Hedberg return ERR_PTR(err); 2376177f8f2bSJohan Hedberg } 2377177f8f2bSJohan Hedberg 2378177f8f2bSJohan Hedberg return skb; 2379177f8f2bSJohan Hedberg } 2380177f8f2bSJohan Hedberg 2381177f8f2bSJohan Hedberg static int l2cap_segment_le_sdu(struct l2cap_chan *chan, 2382177f8f2bSJohan Hedberg struct sk_buff_head *seg_queue, 2383177f8f2bSJohan Hedberg struct msghdr *msg, size_t len) 2384177f8f2bSJohan Hedberg { 2385177f8f2bSJohan Hedberg struct sk_buff *skb; 2386177f8f2bSJohan Hedberg size_t pdu_len; 2387177f8f2bSJohan Hedberg u16 sdu_len; 2388177f8f2bSJohan Hedberg 2389177f8f2bSJohan Hedberg BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 2390177f8f2bSJohan Hedberg 2391177f8f2bSJohan Hedberg pdu_len = chan->conn->mtu - L2CAP_HDR_SIZE; 2392177f8f2bSJohan Hedberg 2393177f8f2bSJohan Hedberg pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 2394177f8f2bSJohan Hedberg 2395177f8f2bSJohan Hedberg sdu_len = len; 2396177f8f2bSJohan Hedberg pdu_len -= L2CAP_SDULEN_SIZE; 2397177f8f2bSJohan Hedberg 2398177f8f2bSJohan Hedberg while (len > 0) { 2399177f8f2bSJohan Hedberg if (len <= pdu_len) 2400177f8f2bSJohan Hedberg pdu_len = len; 2401177f8f2bSJohan Hedberg 2402177f8f2bSJohan Hedberg skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len); 2403177f8f2bSJohan Hedberg if (IS_ERR(skb)) { 2404177f8f2bSJohan Hedberg __skb_queue_purge(seg_queue); 2405177f8f2bSJohan Hedberg return PTR_ERR(skb); 2406177f8f2bSJohan Hedberg } 2407177f8f2bSJohan Hedberg 2408177f8f2bSJohan Hedberg __skb_queue_tail(seg_queue, skb); 2409177f8f2bSJohan Hedberg 2410177f8f2bSJohan Hedberg len -= pdu_len; 2411177f8f2bSJohan Hedberg 2412177f8f2bSJohan Hedberg if (sdu_len) { 2413177f8f2bSJohan Hedberg sdu_len = 0; 2414177f8f2bSJohan Hedberg pdu_len += L2CAP_SDULEN_SIZE; 2415177f8f2bSJohan Hedberg } 2416177f8f2bSJohan Hedberg } 2417177f8f2bSJohan Hedberg 2418177f8f2bSJohan Hedberg return 0; 2419177f8f2bSJohan Hedberg } 2420177f8f2bSJohan Hedberg 24215e59b791SLuiz Augusto von Dentz int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len, 24225e59b791SLuiz Augusto von Dentz u32 priority) 24239a91a04aSGustavo F. Padovan { 24249a91a04aSGustavo F. Padovan struct sk_buff *skb; 24259a91a04aSGustavo F. Padovan int err; 242694122bbeSMat Martineau struct sk_buff_head seg_queue; 24279a91a04aSGustavo F. Padovan 242831e8ce80SSeung-Woo Kim if (!chan->conn) 242931e8ce80SSeung-Woo Kim return -ENOTCONN; 243031e8ce80SSeung-Woo Kim 24319a91a04aSGustavo F. Padovan /* Connectionless channel */ 2432715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24335e59b791SLuiz Augusto von Dentz skb = l2cap_create_connless_pdu(chan, msg, len, priority); 24349a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24359a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24369a91a04aSGustavo F. Padovan 2437ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2438ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2439ede81a2aSAndrzej Kaczmarek */ 2440ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2441ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2442ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2443ede81a2aSAndrzej Kaczmarek } 2444ede81a2aSAndrzej Kaczmarek 24459a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24469a91a04aSGustavo F. Padovan return len; 24479a91a04aSGustavo F. Padovan } 24489a91a04aSGustavo F. Padovan 24499a91a04aSGustavo F. Padovan switch (chan->mode) { 245038319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 2451177f8f2bSJohan Hedberg /* Check outgoing MTU */ 2452177f8f2bSJohan Hedberg if (len > chan->omtu) 2453177f8f2bSJohan Hedberg return -EMSGSIZE; 2454177f8f2bSJohan Hedberg 2455fad5fc89SJohan Hedberg if (!chan->tx_credits) 2456fad5fc89SJohan Hedberg return -EAGAIN; 2457fad5fc89SJohan Hedberg 2458177f8f2bSJohan Hedberg __skb_queue_head_init(&seg_queue); 2459177f8f2bSJohan Hedberg 2460177f8f2bSJohan Hedberg err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len); 2461177f8f2bSJohan Hedberg 2462177f8f2bSJohan Hedberg if (chan->state != BT_CONNECTED) { 2463177f8f2bSJohan Hedberg __skb_queue_purge(&seg_queue); 2464177f8f2bSJohan Hedberg err = -ENOTCONN; 2465177f8f2bSJohan Hedberg } 2466177f8f2bSJohan Hedberg 2467177f8f2bSJohan Hedberg if (err) 2468177f8f2bSJohan Hedberg return err; 2469177f8f2bSJohan Hedberg 2470177f8f2bSJohan Hedberg skb_queue_splice_tail_init(&seg_queue, &chan->tx_q); 2471177f8f2bSJohan Hedberg 2472177f8f2bSJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 2473177f8f2bSJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 2474177f8f2bSJohan Hedberg chan->tx_credits--; 2475177f8f2bSJohan Hedberg } 2476177f8f2bSJohan Hedberg 2477177f8f2bSJohan Hedberg if (!chan->tx_credits) 2478177f8f2bSJohan Hedberg chan->ops->suspend(chan); 2479177f8f2bSJohan Hedberg 2480177f8f2bSJohan Hedberg err = len; 2481177f8f2bSJohan Hedberg 2482177f8f2bSJohan Hedberg break; 2483177f8f2bSJohan Hedberg 2484fad5fc89SJohan Hedberg case L2CAP_MODE_BASIC: 24859a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 24869a91a04aSGustavo F. Padovan if (len > chan->omtu) 24879a91a04aSGustavo F. Padovan return -EMSGSIZE; 24889a91a04aSGustavo F. Padovan 24899a91a04aSGustavo F. Padovan /* Create a basic PDU */ 24905e59b791SLuiz Augusto von Dentz skb = l2cap_create_basic_pdu(chan, msg, len, priority); 24919a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24929a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24939a91a04aSGustavo F. Padovan 2494ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2495ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2496ede81a2aSAndrzej Kaczmarek */ 2497ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2498ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2499ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2500ede81a2aSAndrzej Kaczmarek } 2501ede81a2aSAndrzej Kaczmarek 25029a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 25039a91a04aSGustavo F. Padovan err = len; 25049a91a04aSGustavo F. Padovan break; 25059a91a04aSGustavo F. Padovan 25069a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 25079a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 250894122bbeSMat Martineau /* Check outgoing MTU */ 250994122bbeSMat Martineau if (len > chan->omtu) { 251094122bbeSMat Martineau err = -EMSGSIZE; 25119a91a04aSGustavo F. Padovan break; 25129a91a04aSGustavo F. Padovan } 25139a91a04aSGustavo F. Padovan 251494122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 251594122bbeSMat Martineau 251694122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 251794122bbeSMat Martineau * since it's possible to block while waiting for memory 251894122bbeSMat Martineau * allocation. 251994122bbeSMat Martineau */ 252094122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 252194122bbeSMat Martineau 252294122bbeSMat Martineau /* The channel could have been closed while segmenting, 252394122bbeSMat Martineau * check that it is still connected. 252494122bbeSMat Martineau */ 252594122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 252694122bbeSMat Martineau __skb_queue_purge(&seg_queue); 252794122bbeSMat Martineau err = -ENOTCONN; 25289a91a04aSGustavo F. Padovan } 25299a91a04aSGustavo F. Padovan 253094122bbeSMat Martineau if (err) 253194122bbeSMat Martineau break; 253294122bbeSMat Martineau 25333733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2534d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25353733937dSMat Martineau else 2536d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 253794122bbeSMat Martineau 25389a91a04aSGustavo F. Padovan err = len; 25399a91a04aSGustavo F. Padovan 254094122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 254194122bbeSMat Martineau * seg_queue and need to be purged. 254294122bbeSMat Martineau */ 254394122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25449a91a04aSGustavo F. Padovan break; 25459a91a04aSGustavo F. Padovan 25469a91a04aSGustavo F. Padovan default: 25479a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25489a91a04aSGustavo F. Padovan err = -EBADFD; 25499a91a04aSGustavo F. Padovan } 25509a91a04aSGustavo F. Padovan 25519a91a04aSGustavo F. Padovan return err; 25529a91a04aSGustavo F. Padovan } 25539a91a04aSGustavo F. Padovan 2554d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2555d2a7ac5dSMat Martineau { 2556bed68bdeSMat Martineau struct l2cap_ctrl control; 2557bed68bdeSMat Martineau u16 seq; 2558bed68bdeSMat Martineau 2559b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2560bed68bdeSMat Martineau 2561bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2562bed68bdeSMat Martineau control.sframe = 1; 2563bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2564bed68bdeSMat Martineau 2565bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2566bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2567bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2568bed68bdeSMat Martineau control.reqseq = seq; 2569bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2570bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2571bed68bdeSMat Martineau } 2572bed68bdeSMat Martineau } 2573bed68bdeSMat Martineau 2574bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2575d2a7ac5dSMat Martineau } 2576d2a7ac5dSMat Martineau 2577d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2578d2a7ac5dSMat Martineau { 2579bed68bdeSMat Martineau struct l2cap_ctrl control; 2580bed68bdeSMat Martineau 2581bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2582bed68bdeSMat Martineau 2583bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2584bed68bdeSMat Martineau return; 2585bed68bdeSMat Martineau 2586bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2587bed68bdeSMat Martineau control.sframe = 1; 2588bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2589bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2590bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2591d2a7ac5dSMat Martineau } 2592d2a7ac5dSMat Martineau 2593d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2594d2a7ac5dSMat Martineau { 2595bed68bdeSMat Martineau struct l2cap_ctrl control; 2596bed68bdeSMat Martineau u16 initial_head; 2597bed68bdeSMat Martineau u16 seq; 2598bed68bdeSMat Martineau 2599b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2600bed68bdeSMat Martineau 2601bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2602bed68bdeSMat Martineau control.sframe = 1; 2603bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2604bed68bdeSMat Martineau 2605bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2606bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2607bed68bdeSMat Martineau 2608bed68bdeSMat Martineau do { 2609bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2610bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2611bed68bdeSMat Martineau break; 2612bed68bdeSMat Martineau 2613bed68bdeSMat Martineau control.reqseq = seq; 2614bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2615bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2616bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2617d2a7ac5dSMat Martineau } 2618d2a7ac5dSMat Martineau 2619608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2620608bcc6dSMat Martineau { 2621608bcc6dSMat Martineau struct sk_buff *acked_skb; 2622608bcc6dSMat Martineau u16 ackseq; 2623608bcc6dSMat Martineau 2624b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2625608bcc6dSMat Martineau 2626608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2627608bcc6dSMat Martineau return; 2628608bcc6dSMat Martineau 2629b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2630608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2631608bcc6dSMat Martineau 2632608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2633608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2634608bcc6dSMat Martineau 2635608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2636608bcc6dSMat Martineau if (acked_skb) { 2637608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2638608bcc6dSMat Martineau kfree_skb(acked_skb); 2639608bcc6dSMat Martineau chan->unacked_frames--; 2640608bcc6dSMat Martineau } 2641608bcc6dSMat Martineau } 2642608bcc6dSMat Martineau 2643608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2644608bcc6dSMat Martineau 2645608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2646608bcc6dSMat Martineau __clear_retrans_timer(chan); 2647608bcc6dSMat Martineau 2648b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2649608bcc6dSMat Martineau } 2650608bcc6dSMat Martineau 2651608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2652608bcc6dSMat Martineau { 2653608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2654608bcc6dSMat Martineau 2655608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2656608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2657608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2658608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2659608bcc6dSMat Martineau } 2660608bcc6dSMat Martineau 2661d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2662608bcc6dSMat Martineau struct l2cap_ctrl *control, 2663608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2664608bcc6dSMat Martineau { 2665608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2666608bcc6dSMat Martineau event); 2667608bcc6dSMat Martineau 2668608bcc6dSMat Martineau switch (event) { 2669608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2670608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2671608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2672608bcc6dSMat Martineau 2673608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2674608bcc6dSMat Martineau l2cap_ertm_send(chan); 2675608bcc6dSMat Martineau break; 2676608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2677608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2678608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2679608bcc6dSMat Martineau 2680608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2681608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2682608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2683608bcc6dSMat Martineau */ 2684608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2685608bcc6dSMat Martineau } 2686608bcc6dSMat Martineau 2687608bcc6dSMat Martineau l2cap_send_ack(chan); 2688608bcc6dSMat Martineau 2689608bcc6dSMat Martineau break; 2690608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2691608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2692608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2693608bcc6dSMat Martineau 2694608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2695608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2696608bcc6dSMat Martineau 2697608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2698608bcc6dSMat Martineau local_control.sframe = 1; 2699608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2700608bcc6dSMat Martineau local_control.poll = 1; 2701608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2702a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2703608bcc6dSMat Martineau 2704608bcc6dSMat Martineau chan->retry_count = 1; 2705608bcc6dSMat Martineau __set_monitor_timer(chan); 2706608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2707608bcc6dSMat Martineau } 2708608bcc6dSMat Martineau break; 2709608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2710608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2711608bcc6dSMat Martineau break; 2712608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2713608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2714608bcc6dSMat Martineau chan->retry_count = 1; 2715608bcc6dSMat Martineau __set_monitor_timer(chan); 2716608bcc6dSMat Martineau __clear_ack_timer(chan); 2717608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2718608bcc6dSMat Martineau break; 2719608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2720608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2721608bcc6dSMat Martineau chan->retry_count = 1; 2722608bcc6dSMat Martineau __set_monitor_timer(chan); 2723608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2724608bcc6dSMat Martineau break; 2725608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2726608bcc6dSMat Martineau /* Nothing to process */ 2727608bcc6dSMat Martineau break; 2728608bcc6dSMat Martineau default: 2729608bcc6dSMat Martineau break; 2730608bcc6dSMat Martineau } 2731608bcc6dSMat Martineau } 2732608bcc6dSMat Martineau 2733d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2734608bcc6dSMat Martineau struct l2cap_ctrl *control, 2735608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2736608bcc6dSMat Martineau { 2737608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2738608bcc6dSMat Martineau event); 2739608bcc6dSMat Martineau 2740608bcc6dSMat Martineau switch (event) { 2741608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2742608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2743608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2744608bcc6dSMat Martineau /* Queue data, but don't send. */ 2745608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2746608bcc6dSMat Martineau break; 2747608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2748608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2749608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2750608bcc6dSMat Martineau 2751608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2752608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2753608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2754608bcc6dSMat Martineau */ 2755608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2756608bcc6dSMat Martineau } 2757608bcc6dSMat Martineau 2758608bcc6dSMat Martineau l2cap_send_ack(chan); 2759608bcc6dSMat Martineau 2760608bcc6dSMat Martineau break; 2761608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2762608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2763608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2764608bcc6dSMat Martineau 2765608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2766608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2767608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2768608bcc6dSMat Martineau local_control.sframe = 1; 2769608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2770608bcc6dSMat Martineau local_control.poll = 1; 2771608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2772a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2773608bcc6dSMat Martineau 2774608bcc6dSMat Martineau chan->retry_count = 1; 2775608bcc6dSMat Martineau __set_monitor_timer(chan); 2776608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2777608bcc6dSMat Martineau } 2778608bcc6dSMat Martineau break; 2779608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2780608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2781608bcc6dSMat Martineau 2782608bcc6dSMat Martineau /* Fall through */ 2783608bcc6dSMat Martineau 2784608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2785608bcc6dSMat Martineau if (control && control->final) { 2786608bcc6dSMat Martineau __clear_monitor_timer(chan); 2787608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2788608bcc6dSMat Martineau __set_retrans_timer(chan); 2789608bcc6dSMat Martineau chan->retry_count = 0; 2790608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2791608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2792608bcc6dSMat Martineau } 2793608bcc6dSMat Martineau break; 2794608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2795608bcc6dSMat Martineau /* Ignore */ 2796608bcc6dSMat Martineau break; 2797608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2798608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2799608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2800608bcc6dSMat Martineau __set_monitor_timer(chan); 2801608bcc6dSMat Martineau chan->retry_count++; 2802608bcc6dSMat Martineau } else { 28035e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2804608bcc6dSMat Martineau } 2805608bcc6dSMat Martineau break; 2806608bcc6dSMat Martineau default: 2807608bcc6dSMat Martineau break; 2808608bcc6dSMat Martineau } 2809608bcc6dSMat Martineau } 2810608bcc6dSMat Martineau 2811d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2812608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2813608bcc6dSMat Martineau { 2814608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2815608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2816608bcc6dSMat Martineau 2817608bcc6dSMat Martineau switch (chan->tx_state) { 2818608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2819d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2820608bcc6dSMat Martineau break; 2821608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2822d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2823608bcc6dSMat Martineau break; 2824608bcc6dSMat Martineau default: 2825608bcc6dSMat Martineau /* Ignore event */ 2826608bcc6dSMat Martineau break; 2827608bcc6dSMat Martineau } 2828608bcc6dSMat Martineau } 2829608bcc6dSMat Martineau 28304b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28314b51dae9SMat Martineau struct l2cap_ctrl *control) 28324b51dae9SMat Martineau { 28334b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2834401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28354b51dae9SMat Martineau } 28364b51dae9SMat Martineau 2837f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2838f80842a8SMat Martineau struct l2cap_ctrl *control) 2839f80842a8SMat Martineau { 2840f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2841401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2842f80842a8SMat Martineau } 2843f80842a8SMat Martineau 28440a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28450a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28460a708f8fSGustavo F. Padovan { 28470a708f8fSGustavo F. Padovan struct sk_buff *nskb; 284848454079SGustavo F. Padovan struct l2cap_chan *chan; 28490a708f8fSGustavo F. Padovan 28500a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28510a708f8fSGustavo F. Padovan 28523df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28533d57dc68SGustavo F. Padovan 28543df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2855715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28560a708f8fSGustavo F. Padovan continue; 28570a708f8fSGustavo F. Padovan 28587f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 28597f5396a7SGustavo Padovan if (bt_cb(skb)->chan == chan) 28600a708f8fSGustavo F. Padovan continue; 28617f5396a7SGustavo Padovan 28628bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28630a708f8fSGustavo F. Padovan if (!nskb) 28640a708f8fSGustavo F. Padovan continue; 286580b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28660a708f8fSGustavo F. Padovan kfree_skb(nskb); 28670a708f8fSGustavo F. Padovan } 28683d57dc68SGustavo F. Padovan 28693df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28700a708f8fSGustavo F. Padovan } 28710a708f8fSGustavo F. Padovan 28720a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2873b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2874b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28750a708f8fSGustavo F. Padovan { 28760a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28770a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28780a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28790a708f8fSGustavo F. Padovan int len, count; 28800a708f8fSGustavo F. Padovan 2881b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 28820a708f8fSGustavo F. Padovan conn, code, ident, dlen); 28830a708f8fSGustavo F. Padovan 2884300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2885300b962eSAnderson Lizardo return NULL; 2886300b962eSAnderson Lizardo 28870a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 28880a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28890a708f8fSGustavo F. Padovan 28908bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 28910a708f8fSGustavo F. Padovan if (!skb) 28920a708f8fSGustavo F. Padovan return NULL; 28930a708f8fSGustavo F. Padovan 28940a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 28950a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 28963300d9a9SClaudio Takahasi 28973300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2898ac73498cSAndrei Emeltchenko lh->cid = __constant_cpu_to_le16(L2CAP_CID_LE_SIGNALING); 28993300d9a9SClaudio Takahasi else 2900ac73498cSAndrei Emeltchenko lh->cid = __constant_cpu_to_le16(L2CAP_CID_SIGNALING); 29010a708f8fSGustavo F. Padovan 29020a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 29030a708f8fSGustavo F. Padovan cmd->code = code; 29040a708f8fSGustavo F. Padovan cmd->ident = ident; 29050a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 29060a708f8fSGustavo F. Padovan 29070a708f8fSGustavo F. Padovan if (dlen) { 29080a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 29090a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 29100a708f8fSGustavo F. Padovan data += count; 29110a708f8fSGustavo F. Padovan } 29120a708f8fSGustavo F. Padovan 29130a708f8fSGustavo F. Padovan len -= skb->len; 29140a708f8fSGustavo F. Padovan 29150a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 29160a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 29170a708f8fSGustavo F. Padovan while (len) { 29180a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29190a708f8fSGustavo F. Padovan 29208bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 29210a708f8fSGustavo F. Padovan if (!*frag) 29220a708f8fSGustavo F. Padovan goto fail; 29230a708f8fSGustavo F. Padovan 29240a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 29250a708f8fSGustavo F. Padovan 29260a708f8fSGustavo F. Padovan len -= count; 29270a708f8fSGustavo F. Padovan data += count; 29280a708f8fSGustavo F. Padovan 29290a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29300a708f8fSGustavo F. Padovan } 29310a708f8fSGustavo F. Padovan 29320a708f8fSGustavo F. Padovan return skb; 29330a708f8fSGustavo F. Padovan 29340a708f8fSGustavo F. Padovan fail: 29350a708f8fSGustavo F. Padovan kfree_skb(skb); 29360a708f8fSGustavo F. Padovan return NULL; 29370a708f8fSGustavo F. Padovan } 29380a708f8fSGustavo F. Padovan 29392d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29402d792818SGustavo Padovan unsigned long *val) 29410a708f8fSGustavo F. Padovan { 29420a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29430a708f8fSGustavo F. Padovan int len; 29440a708f8fSGustavo F. Padovan 29450a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29460a708f8fSGustavo F. Padovan *ptr += len; 29470a708f8fSGustavo F. Padovan 29480a708f8fSGustavo F. Padovan *type = opt->type; 29490a708f8fSGustavo F. Padovan *olen = opt->len; 29500a708f8fSGustavo F. Padovan 29510a708f8fSGustavo F. Padovan switch (opt->len) { 29520a708f8fSGustavo F. Padovan case 1: 29530a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29540a708f8fSGustavo F. Padovan break; 29550a708f8fSGustavo F. Padovan 29560a708f8fSGustavo F. Padovan case 2: 29570a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29580a708f8fSGustavo F. Padovan break; 29590a708f8fSGustavo F. Padovan 29600a708f8fSGustavo F. Padovan case 4: 29610a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29620a708f8fSGustavo F. Padovan break; 29630a708f8fSGustavo F. Padovan 29640a708f8fSGustavo F. Padovan default: 29650a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29660a708f8fSGustavo F. Padovan break; 29670a708f8fSGustavo F. Padovan } 29680a708f8fSGustavo F. Padovan 2969b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29700a708f8fSGustavo F. Padovan return len; 29710a708f8fSGustavo F. Padovan } 29720a708f8fSGustavo F. Padovan 29730a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 29740a708f8fSGustavo F. Padovan { 29750a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29760a708f8fSGustavo F. Padovan 2977b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29780a708f8fSGustavo F. Padovan 29790a708f8fSGustavo F. Padovan opt->type = type; 29800a708f8fSGustavo F. Padovan opt->len = len; 29810a708f8fSGustavo F. Padovan 29820a708f8fSGustavo F. Padovan switch (len) { 29830a708f8fSGustavo F. Padovan case 1: 29840a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 29850a708f8fSGustavo F. Padovan break; 29860a708f8fSGustavo F. Padovan 29870a708f8fSGustavo F. Padovan case 2: 29880a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 29890a708f8fSGustavo F. Padovan break; 29900a708f8fSGustavo F. Padovan 29910a708f8fSGustavo F. Padovan case 4: 29920a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 29930a708f8fSGustavo F. Padovan break; 29940a708f8fSGustavo F. Padovan 29950a708f8fSGustavo F. Padovan default: 29960a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 29970a708f8fSGustavo F. Padovan break; 29980a708f8fSGustavo F. Padovan } 29990a708f8fSGustavo F. Padovan 30000a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 30010a708f8fSGustavo F. Padovan } 30020a708f8fSGustavo F. Padovan 3003f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 3004f89cef09SAndrei Emeltchenko { 3005f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 3006f89cef09SAndrei Emeltchenko 3007f89cef09SAndrei Emeltchenko switch (chan->mode) { 3008f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 3009f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 3010f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 3011f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3012f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3013ac73498cSAndrei Emeltchenko efs.acc_lat = __constant_cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 30148936fa6dSAndrei Emeltchenko efs.flush_to = __constant_cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 3015f89cef09SAndrei Emeltchenko break; 3016f89cef09SAndrei Emeltchenko 3017f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 3018f89cef09SAndrei Emeltchenko efs.id = 1; 3019f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 3020f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3021f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3022f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3023f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3024f89cef09SAndrei Emeltchenko break; 3025f89cef09SAndrei Emeltchenko 3026f89cef09SAndrei Emeltchenko default: 3027f89cef09SAndrei Emeltchenko return; 3028f89cef09SAndrei Emeltchenko } 3029f89cef09SAndrei Emeltchenko 3030f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3031f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3032f89cef09SAndrei Emeltchenko } 3033f89cef09SAndrei Emeltchenko 3034721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30350a708f8fSGustavo F. Padovan { 3036721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3037721c4181SGustavo F. Padovan ack_timer.work); 30380362520bSMat Martineau u16 frames_to_ack; 30390a708f8fSGustavo F. Padovan 30402fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30412fb9b3d4SGustavo F. Padovan 30426be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30436be36555SAndrei Emeltchenko 30440362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30450362520bSMat Martineau chan->last_acked_seq); 30460362520bSMat Martineau 30470362520bSMat Martineau if (frames_to_ack) 30480362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30496be36555SAndrei Emeltchenko 30506be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 305109bfb2eeSSzymon Janc l2cap_chan_put(chan); 30520a708f8fSGustavo F. Padovan } 30530a708f8fSGustavo F. Padovan 3054466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30550a708f8fSGustavo F. Padovan { 30563c588192SMat Martineau int err; 30573c588192SMat Martineau 3058105bdf9eSMat Martineau chan->next_tx_seq = 0; 3059105bdf9eSMat Martineau chan->expected_tx_seq = 0; 306042e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30616a026610SGustavo F. Padovan chan->unacked_frames = 0; 306242e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30636a026610SGustavo F. Padovan chan->frames_sent = 0; 3064105bdf9eSMat Martineau chan->last_acked_seq = 0; 3065105bdf9eSMat Martineau chan->sdu = NULL; 3066105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3067105bdf9eSMat Martineau chan->sdu_len = 0; 3068105bdf9eSMat Martineau 3069d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3070d34c34fbSMat Martineau 30716ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30726ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 307308333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 307408333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 307508333283SMat Martineau 3076105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3077105bdf9eSMat Martineau return 0; 3078105bdf9eSMat Martineau 3079105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3080105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 30810a708f8fSGustavo F. Padovan 3082721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3083721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3084721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 30850a708f8fSGustavo F. Padovan 3086f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 30870a708f8fSGustavo F. Padovan 30883c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 30893c588192SMat Martineau if (err < 0) 30903c588192SMat Martineau return err; 30913c588192SMat Martineau 30929dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 30939dc9affcSMat Martineau if (err < 0) 30949dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 30959dc9affcSMat Martineau 30969dc9affcSMat Martineau return err; 30970a708f8fSGustavo F. Padovan } 30980a708f8fSGustavo F. Padovan 30990a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 31000a708f8fSGustavo F. Padovan { 31010a708f8fSGustavo F. Padovan switch (mode) { 31020a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31030a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 31040a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 31050a708f8fSGustavo F. Padovan return mode; 31060a708f8fSGustavo F. Padovan /* fall through */ 31070a708f8fSGustavo F. Padovan default: 31080a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 31090a708f8fSGustavo F. Padovan } 31100a708f8fSGustavo F. Padovan } 31110a708f8fSGustavo F. Padovan 3112848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 31136327eb98SAndrei Emeltchenko { 3114848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 31156327eb98SAndrei Emeltchenko } 31166327eb98SAndrei Emeltchenko 3117848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3118f89cef09SAndrei Emeltchenko { 3119848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 3120f89cef09SAndrei Emeltchenko } 3121f89cef09SAndrei Emeltchenko 312236c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 312336c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 312436c86c85SMat Martineau { 31256ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 312636c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 312736c86c85SMat Martineau 312836c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 312936c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 313036c86c85SMat Martineau * default Link Supervision Timeout for AMP 313136c86c85SMat Martineau * controllers is 10 seconds. 313236c86c85SMat Martineau * 313336c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 313436c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 313536c86c85SMat Martineau * will result in a timeout that meets the above 313636c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 313736c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 313836c86c85SMat Martineau */ 313936c86c85SMat Martineau 314036c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 314136c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 314236c86c85SMat Martineau 314336c86c85SMat Martineau /* This is the recommended formula for class 2 devices 314436c86c85SMat Martineau * that start ERTM timers when packets are sent to the 314536c86c85SMat Martineau * controller. 314636c86c85SMat Martineau */ 314736c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 314836c86c85SMat Martineau 314936c86c85SMat Martineau if (ertm_to > 0xffff) 315036c86c85SMat Martineau ertm_to = 0xffff; 315136c86c85SMat Martineau 315236c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 315336c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 315436c86c85SMat Martineau } else { 315536c86c85SMat Martineau rfc->retrans_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 315636c86c85SMat Martineau rfc->monitor_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 315736c86c85SMat Martineau } 315836c86c85SMat Martineau } 315936c86c85SMat Martineau 31606327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31616327eb98SAndrei Emeltchenko { 31626327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3163848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31646327eb98SAndrei Emeltchenko /* use extended control field */ 31656327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3166836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3167836be934SAndrei Emeltchenko } else { 31686327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31696327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3170836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3171836be934SAndrei Emeltchenko } 3172c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31736327eb98SAndrei Emeltchenko } 31746327eb98SAndrei Emeltchenko 3175710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 31760a708f8fSGustavo F. Padovan { 31770a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 31780c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 31790a708f8fSGustavo F. Padovan void *ptr = req->data; 3180c8f79162SAndrei Emeltchenko u16 size; 31810a708f8fSGustavo F. Padovan 318249208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 31830a708f8fSGustavo F. Padovan 318473ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 31850a708f8fSGustavo F. Padovan goto done; 31860a708f8fSGustavo F. Padovan 31870c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31880a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31890a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3190c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 31910a708f8fSGustavo F. Padovan break; 31920a708f8fSGustavo F. Padovan 3193848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3194f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3195f89cef09SAndrei Emeltchenko 31960a708f8fSGustavo F. Padovan /* fall through */ 31970a708f8fSGustavo F. Padovan default: 31988c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 31990a708f8fSGustavo F. Padovan break; 32000a708f8fSGustavo F. Padovan } 32010a708f8fSGustavo F. Padovan 32020a708f8fSGustavo F. Padovan done: 32030c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 32040c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 32050a708f8fSGustavo F. Padovan 32060c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32070a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 32088c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 32098c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 32100a708f8fSGustavo F. Padovan break; 32110a708f8fSGustavo F. Padovan 32120a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 32130a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32140a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32150a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32160a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 32170a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 32180a708f8fSGustavo F. Padovan 32190a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32200a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32210a708f8fSGustavo F. Padovan break; 32220a708f8fSGustavo F. Padovan 32230a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32240a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 322547d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 322636c86c85SMat Martineau 322736c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3228c8f79162SAndrei Emeltchenko 3229c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32302d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3231c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3232c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32330a708f8fSGustavo F. Padovan 32346327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32356327eb98SAndrei Emeltchenko 32366327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32376327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32380a708f8fSGustavo F. Padovan 32390a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32400a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32410a708f8fSGustavo F. Padovan 3242f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3243f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3244f89cef09SAndrei Emeltchenko 32456327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32466327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32476327eb98SAndrei Emeltchenko chan->tx_win); 324860918918SAndrei Emeltchenko 324960918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 325060918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3251f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 325260918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 325360918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 325460918918SAndrei Emeltchenko chan->fcs); 325560918918SAndrei Emeltchenko } 32560a708f8fSGustavo F. Padovan break; 32570a708f8fSGustavo F. Padovan 32580a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3259273759e2SMat Martineau l2cap_txwin_setup(chan); 32600a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32610a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32620a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32630a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32640a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3265c8f79162SAndrei Emeltchenko 3266c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32672d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3268c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3269c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32700a708f8fSGustavo F. Padovan 32710a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32720a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32730a708f8fSGustavo F. Padovan 3274f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3275f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3276f89cef09SAndrei Emeltchenko 327760918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 327847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3279f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 328047d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 328160918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 328260918918SAndrei Emeltchenko chan->fcs); 32830a708f8fSGustavo F. Padovan } 32840a708f8fSGustavo F. Padovan break; 32850a708f8fSGustavo F. Padovan } 32860a708f8fSGustavo F. Padovan 3287fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 328859e54bd1SAndrei Emeltchenko req->flags = __constant_cpu_to_le16(0); 32890a708f8fSGustavo F. Padovan 32900a708f8fSGustavo F. Padovan return ptr - data; 32910a708f8fSGustavo F. Padovan } 32920a708f8fSGustavo F. Padovan 329373ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 32940a708f8fSGustavo F. Padovan { 32950a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 32960a708f8fSGustavo F. Padovan void *ptr = rsp->data; 329773ffa904SGustavo F. Padovan void *req = chan->conf_req; 329873ffa904SGustavo F. Padovan int len = chan->conf_len; 32990a708f8fSGustavo F. Padovan int type, hint, olen; 33000a708f8fSGustavo F. Padovan unsigned long val; 33010a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 330242dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 330342dceae2SAndrei Emeltchenko u8 remote_efs = 0; 33040a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 33050a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3306c8f79162SAndrei Emeltchenko u16 size; 33070a708f8fSGustavo F. Padovan 330873ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 33090a708f8fSGustavo F. Padovan 33100a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 33110a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 33120a708f8fSGustavo F. Padovan 33130a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 33140a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 33150a708f8fSGustavo F. Padovan 33160a708f8fSGustavo F. Padovan switch (type) { 33170a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 33180a708f8fSGustavo F. Padovan mtu = val; 33190a708f8fSGustavo F. Padovan break; 33200a708f8fSGustavo F. Padovan 33210a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 33220c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33230a708f8fSGustavo F. Padovan break; 33240a708f8fSGustavo F. Padovan 33250a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33260a708f8fSGustavo F. Padovan break; 33270a708f8fSGustavo F. Padovan 33280a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33290a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33300a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33310a708f8fSGustavo F. Padovan break; 33320a708f8fSGustavo F. Padovan 33330a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33340a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3335f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 333642dceae2SAndrei Emeltchenko break; 33370a708f8fSGustavo F. Padovan 333842dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 333942dceae2SAndrei Emeltchenko remote_efs = 1; 334042dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 334142dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33420a708f8fSGustavo F. Padovan break; 33430a708f8fSGustavo F. Padovan 33446327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3345848566b3SMarcel Holtmann if (!chan->conn->hs_enabled) 33466327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33476327eb98SAndrei Emeltchenko 33486327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33496327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3350836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33516327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33520a708f8fSGustavo F. Padovan break; 33530a708f8fSGustavo F. Padovan 33540a708f8fSGustavo F. Padovan default: 33550a708f8fSGustavo F. Padovan if (hint) 33560a708f8fSGustavo F. Padovan break; 33570a708f8fSGustavo F. Padovan 33580a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33590a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33600a708f8fSGustavo F. Padovan break; 33610a708f8fSGustavo F. Padovan } 33620a708f8fSGustavo F. Padovan } 33630a708f8fSGustavo F. Padovan 336473ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33650a708f8fSGustavo F. Padovan goto done; 33660a708f8fSGustavo F. Padovan 33670c1bc5c6SGustavo F. Padovan switch (chan->mode) { 33680a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 33690a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3370c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 33710c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 33728c1d787bSGustavo F. Padovan chan->conn->feat_mask); 33730a708f8fSGustavo F. Padovan break; 33740a708f8fSGustavo F. Padovan } 33750a708f8fSGustavo F. Padovan 337642dceae2SAndrei Emeltchenko if (remote_efs) { 3377848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 337842dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 337942dceae2SAndrei Emeltchenko else 338042dceae2SAndrei Emeltchenko return -ECONNREFUSED; 338142dceae2SAndrei Emeltchenko } 338242dceae2SAndrei Emeltchenko 33830c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 33840a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33850a708f8fSGustavo F. Padovan 33860a708f8fSGustavo F. Padovan break; 33870a708f8fSGustavo F. Padovan } 33880a708f8fSGustavo F. Padovan 33890a708f8fSGustavo F. Padovan done: 33900c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 33910a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 33920c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 33930a708f8fSGustavo F. Padovan 339473ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 33950a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33960a708f8fSGustavo F. Padovan 33972d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 33982d792818SGustavo Padovan (unsigned long) &rfc); 33990a708f8fSGustavo F. Padovan } 34000a708f8fSGustavo F. Padovan 34010a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 34020a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 34030a708f8fSGustavo F. Padovan * which ones we don't like. */ 34040a708f8fSGustavo F. Padovan 34050a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 34060a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34070a708f8fSGustavo F. Padovan else { 34080c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3409c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 34100a708f8fSGustavo F. Padovan } 34110c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 34120a708f8fSGustavo F. Padovan 341342dceae2SAndrei Emeltchenko if (remote_efs) { 341442dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 341542dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 341642dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 341742dceae2SAndrei Emeltchenko 341842dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 341942dceae2SAndrei Emeltchenko 342042dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 342142dceae2SAndrei Emeltchenko return -ECONNREFUSED; 342242dceae2SAndrei Emeltchenko 342342dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 342442dceae2SAndrei Emeltchenko sizeof(efs), 342542dceae2SAndrei Emeltchenko (unsigned long) &efs); 34260e8b207eSAndrei Emeltchenko } else { 34273e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34280e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34290e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 343042dceae2SAndrei Emeltchenko } 343142dceae2SAndrei Emeltchenko } 343242dceae2SAndrei Emeltchenko 34330a708f8fSGustavo F. Padovan switch (rfc.mode) { 34340a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 343547d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3436c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34370a708f8fSGustavo F. Padovan break; 34380a708f8fSGustavo F. Padovan 34390a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34406327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34412c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34426327eb98SAndrei Emeltchenko else 34436327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34446327eb98SAndrei Emeltchenko 34452c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34460a708f8fSGustavo F. Padovan 3447c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34482d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34492d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3450c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3451c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34520a708f8fSGustavo F. Padovan 345336c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34540a708f8fSGustavo F. Padovan 3455c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34560a708f8fSGustavo F. Padovan 34570a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34580a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34590a708f8fSGustavo F. Padovan 346042dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 346142dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 346242dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 346342dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 346442dceae2SAndrei Emeltchenko chan->remote_flush_to = 346542dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 346642dceae2SAndrei Emeltchenko chan->remote_acc_lat = 346742dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 346842dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 346942dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 347042dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 34712d792818SGustavo Padovan sizeof(efs), 34722d792818SGustavo Padovan (unsigned long) &efs); 347342dceae2SAndrei Emeltchenko } 34740a708f8fSGustavo F. Padovan break; 34750a708f8fSGustavo F. Padovan 34760a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3477c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34782d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34792d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3480c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3481c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34820a708f8fSGustavo F. Padovan 3483c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34840a708f8fSGustavo F. Padovan 34852d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34862d792818SGustavo Padovan (unsigned long) &rfc); 34870a708f8fSGustavo F. Padovan 34880a708f8fSGustavo F. Padovan break; 34890a708f8fSGustavo F. Padovan 34900a708f8fSGustavo F. Padovan default: 34910a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34920a708f8fSGustavo F. Padovan 34930a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 34940c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34950a708f8fSGustavo F. Padovan } 34960a708f8fSGustavo F. Padovan 34970a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3498c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 34990a708f8fSGustavo F. Padovan } 3500fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 35010a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 350259e54bd1SAndrei Emeltchenko rsp->flags = __constant_cpu_to_le16(0); 35030a708f8fSGustavo F. Padovan 35040a708f8fSGustavo F. Padovan return ptr - data; 35050a708f8fSGustavo F. Padovan } 35060a708f8fSGustavo F. Padovan 35072d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 35082d792818SGustavo Padovan void *data, u16 *result) 35090a708f8fSGustavo F. Padovan { 35100a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 35110a708f8fSGustavo F. Padovan void *ptr = req->data; 35120a708f8fSGustavo F. Padovan int type, olen; 35130a708f8fSGustavo F. Padovan unsigned long val; 351436e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 351566af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 35160a708f8fSGustavo F. Padovan 3517fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 35180a708f8fSGustavo F. Padovan 35190a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 35200a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 35210a708f8fSGustavo F. Padovan 35220a708f8fSGustavo F. Padovan switch (type) { 35230a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 35240a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35250a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35260c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35270a708f8fSGustavo F. Padovan } else 35280c1bc5c6SGustavo F. Padovan chan->imtu = val; 35290c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35300a708f8fSGustavo F. Padovan break; 35310a708f8fSGustavo F. Padovan 35320a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35330c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35340a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35350c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35360a708f8fSGustavo F. Padovan break; 35370a708f8fSGustavo F. Padovan 35380a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35390a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35400a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35410a708f8fSGustavo F. Padovan 3542c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35430c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35440a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35450a708f8fSGustavo F. Padovan 354647d1ec61SGustavo F. Padovan chan->fcs = 0; 35470a708f8fSGustavo F. Padovan 35480a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35490a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35500a708f8fSGustavo F. Padovan break; 35516327eb98SAndrei Emeltchenko 35526327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3553c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35543e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35553e6b3b95SGustavo F. Padovan chan->tx_win); 35566327eb98SAndrei Emeltchenko break; 355766af7aafSAndrei Emeltchenko 355866af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 355966af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 356066af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 356166af7aafSAndrei Emeltchenko 356266af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 356366af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 356466af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 356566af7aafSAndrei Emeltchenko return -ECONNREFUSED; 356666af7aafSAndrei Emeltchenko 35672d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 35682d792818SGustavo Padovan (unsigned long) &efs); 356966af7aafSAndrei Emeltchenko break; 3570cbabee78SAndrei Emeltchenko 3571cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3572cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3573cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3574f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3575cbabee78SAndrei Emeltchenko &chan->conf_state); 3576cbabee78SAndrei Emeltchenko break; 35770a708f8fSGustavo F. Padovan } 35780a708f8fSGustavo F. Padovan } 35790a708f8fSGustavo F. Padovan 35800c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 35810a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35820a708f8fSGustavo F. Padovan 35830c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 35840a708f8fSGustavo F. Padovan 35850e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 35860a708f8fSGustavo F. Padovan switch (rfc.mode) { 35870a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 358847d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 358947d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 359047d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3591c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3592c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3593c20f8e35SMat Martineau rfc.txwin_size); 359466af7aafSAndrei Emeltchenko 359566af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 359666af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 359766af7aafSAndrei Emeltchenko chan->local_sdu_itime = 359866af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 359966af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 360066af7aafSAndrei Emeltchenko chan->local_flush_to = 360166af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 360266af7aafSAndrei Emeltchenko } 36030a708f8fSGustavo F. Padovan break; 360466af7aafSAndrei Emeltchenko 36050a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 360647d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36070a708f8fSGustavo F. Padovan } 36080a708f8fSGustavo F. Padovan } 36090a708f8fSGustavo F. Padovan 3610fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 361159e54bd1SAndrei Emeltchenko req->flags = __constant_cpu_to_le16(0); 36120a708f8fSGustavo F. Padovan 36130a708f8fSGustavo F. Padovan return ptr - data; 36140a708f8fSGustavo F. Padovan } 36150a708f8fSGustavo F. Padovan 36162d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 36172d792818SGustavo Padovan u16 result, u16 flags) 36180a708f8fSGustavo F. Padovan { 36190a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 36200a708f8fSGustavo F. Padovan void *ptr = rsp->data; 36210a708f8fSGustavo F. Padovan 3622fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36230a708f8fSGustavo F. Padovan 3624fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36250a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36260a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36270a708f8fSGustavo F. Padovan 36280a708f8fSGustavo F. Padovan return ptr - data; 36290a708f8fSGustavo F. Padovan } 36300a708f8fSGustavo F. Padovan 363127e2d4c8SJohan Hedberg void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan) 363227e2d4c8SJohan Hedberg { 363327e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 363427e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 363527e2d4c8SJohan Hedberg 363627e2d4c8SJohan Hedberg BT_DBG("chan %p", chan); 363727e2d4c8SJohan Hedberg 363827e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 363927e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 36403916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 36410cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 364227e2d4c8SJohan Hedberg rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 364327e2d4c8SJohan Hedberg 364427e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 364527e2d4c8SJohan Hedberg &rsp); 364627e2d4c8SJohan Hedberg } 364727e2d4c8SJohan Hedberg 36488c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3649710f9b0aSGustavo F. Padovan { 3650710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36518c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3652710f9b0aSGustavo F. Padovan u8 buf[128]; 3653439f34acSAndrei Emeltchenko u8 rsp_code; 3654710f9b0aSGustavo F. Padovan 3655fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3656fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3657ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 3658ac73498cSAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 3659439f34acSAndrei Emeltchenko 3660439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3661439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3662439f34acSAndrei Emeltchenko else 3663439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3664439f34acSAndrei Emeltchenko 3665439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3666439f34acSAndrei Emeltchenko 3667439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3668710f9b0aSGustavo F. Padovan 3669c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3670710f9b0aSGustavo F. Padovan return; 3671710f9b0aSGustavo F. Padovan 3672710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3673710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3674710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3675710f9b0aSGustavo F. Padovan } 3676710f9b0aSGustavo F. Padovan 367747d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 36780a708f8fSGustavo F. Padovan { 36790a708f8fSGustavo F. Padovan int type, olen; 36800a708f8fSGustavo F. Padovan unsigned long val; 3681c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3682c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3683c20f8e35SMat Martineau */ 3684c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3685c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3686c20f8e35SMat Martineau .mode = chan->mode, 3687c20f8e35SMat Martineau .retrans_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3688c20f8e35SMat Martineau .monitor_timeout = __constant_cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3689c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3690c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3691c20f8e35SMat Martineau }; 36920a708f8fSGustavo F. Padovan 369347d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 36940a708f8fSGustavo F. Padovan 36950c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 36960a708f8fSGustavo F. Padovan return; 36970a708f8fSGustavo F. Padovan 36980a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 36990a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 37000a708f8fSGustavo F. Padovan 3701c20f8e35SMat Martineau switch (type) { 3702c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3703c20f8e35SMat Martineau if (olen == sizeof(rfc)) 37040a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3705c20f8e35SMat Martineau break; 3706c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3707c20f8e35SMat Martineau txwin_ext = val; 3708c20f8e35SMat Martineau break; 3709c20f8e35SMat Martineau } 37100a708f8fSGustavo F. Padovan } 37110a708f8fSGustavo F. Padovan 37120a708f8fSGustavo F. Padovan switch (rfc.mode) { 37130a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 371447d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 371547d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 371647d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3717c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3718c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3719c20f8e35SMat Martineau else 3720c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3721c20f8e35SMat Martineau rfc.txwin_size); 37220a708f8fSGustavo F. Padovan break; 37230a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 372447d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 37250a708f8fSGustavo F. Padovan } 37260a708f8fSGustavo F. Padovan } 37270a708f8fSGustavo F. Padovan 37282d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3729cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3730cb3b3152SJohan Hedberg u8 *data) 37310a708f8fSGustavo F. Padovan { 3732e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 37330a708f8fSGustavo F. Padovan 3734cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3735cb3b3152SJohan Hedberg return -EPROTO; 3736cb3b3152SJohan Hedberg 3737e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 37380a708f8fSGustavo F. Padovan return 0; 37390a708f8fSGustavo F. Padovan 37400a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37410a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 374217cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37430a708f8fSGustavo F. Padovan 37440a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37450a708f8fSGustavo F. Padovan conn->info_ident = 0; 37460a708f8fSGustavo F. Padovan 37470a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37480a708f8fSGustavo F. Padovan } 37490a708f8fSGustavo F. Padovan 37500a708f8fSGustavo F. Padovan return 0; 37510a708f8fSGustavo F. Padovan } 37520a708f8fSGustavo F. Padovan 37531700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37541700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37554c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37560a708f8fSGustavo F. Padovan { 37570a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37580a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 375923691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37600a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37610a708f8fSGustavo F. Padovan 37620a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37630a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37640a708f8fSGustavo F. Padovan 3765097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37660a708f8fSGustavo F. Padovan 37670a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 37686f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3769bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 377023691d75SGustavo F. Padovan if (!pchan) { 37710a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 37720a708f8fSGustavo F. Padovan goto sendresp; 37730a708f8fSGustavo F. Padovan } 37740a708f8fSGustavo F. Padovan 37753df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 37768ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 37770a708f8fSGustavo F. Padovan 37780a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 37792983fd68SAndrei Emeltchenko if (psm != __constant_cpu_to_le16(L2CAP_PSM_SDP) && 37800a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 37819f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 37820a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 37830a708f8fSGustavo F. Padovan goto response; 37840a708f8fSGustavo F. Padovan } 37850a708f8fSGustavo F. Padovan 37860a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 37870a708f8fSGustavo F. Padovan 37882dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 37892dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 37902dfa1003SGustavo Padovan goto response; 37912dfa1003SGustavo Padovan 379280b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 379380808e43SGustavo F. Padovan if (!chan) 37940a708f8fSGustavo F. Padovan goto response; 37950a708f8fSGustavo F. Padovan 3796330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3797330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3798330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3799330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3800330b6c15SSyam Sidhardhan */ 3801330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3802330b6c15SSyam Sidhardhan 38037eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 38047eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 38054f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 38064f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 3807fe4128e0SGustavo F. Padovan chan->psm = psm; 3808fe4128e0SGustavo F. Padovan chan->dcid = scid; 38091700915fSMat Martineau chan->local_amp_id = amp_id; 38100a708f8fSGustavo F. Padovan 38116be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 381248454079SGustavo F. Padovan 3813fe4128e0SGustavo F. Padovan dcid = chan->scid; 38140a708f8fSGustavo F. Padovan 38158d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 38160a708f8fSGustavo F. Padovan 3817fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 38180a708f8fSGustavo F. Padovan 38190a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3820d45fc423SGustavo F. Padovan if (l2cap_chan_check_security(chan)) { 3821bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3822f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38230a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38240a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 38252dc4e510SGustavo Padovan chan->ops->defer(chan); 38260a708f8fSGustavo F. Padovan } else { 38271700915fSMat Martineau /* Force pending result for AMP controllers. 38281700915fSMat Martineau * The connection will succeed after the 38291700915fSMat Martineau * physical link is up. 38301700915fSMat Martineau */ 38316ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3832f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 38330a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38346ed971caSMarcel Holtmann } else { 3835f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38366ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38371700915fSMat Martineau } 38380a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38390a708f8fSGustavo F. Padovan } 38400a708f8fSGustavo F. Padovan } else { 3841f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38420a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38430a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38440a708f8fSGustavo F. Padovan } 38450a708f8fSGustavo F. Padovan } else { 3846f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38470a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38480a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38490a708f8fSGustavo F. Padovan } 38500a708f8fSGustavo F. Padovan 38510a708f8fSGustavo F. Padovan response: 38528ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 38533df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 38540a708f8fSGustavo F. Padovan 38550a708f8fSGustavo F. Padovan sendresp: 38560a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38570a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38580a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38590a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38604c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38610a708f8fSGustavo F. Padovan 38620a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38630a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3864ac73498cSAndrei Emeltchenko info.type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 38650a708f8fSGustavo F. Padovan 38660a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 38670a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 38680a708f8fSGustavo F. Padovan 3869ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 38700a708f8fSGustavo F. Padovan 38712d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 38722d792818SGustavo Padovan sizeof(info), &info); 38730a708f8fSGustavo F. Padovan } 38740a708f8fSGustavo F. Padovan 3875c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 38760a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 38770a708f8fSGustavo F. Padovan u8 buf[128]; 3878c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 38790a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 388073ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 388173ffa904SGustavo F. Padovan chan->num_conf_req++; 38820a708f8fSGustavo F. Padovan } 38831700915fSMat Martineau 38841700915fSMat Martineau return chan; 38854c89b6aaSMat Martineau } 38860a708f8fSGustavo F. Padovan 38874c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3888cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 38894c89b6aaSMat Martineau { 38907b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 38917b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 38927b064edaSJaganath Kanakkassery 3893cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3894cb3b3152SJohan Hedberg return -EPROTO; 3895cb3b3152SJohan Hedberg 38967b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 38977b064edaSJaganath Kanakkassery if (test_bit(HCI_MGMT, &hdev->dev_flags) && 38987b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 38997b064edaSJaganath Kanakkassery mgmt_device_connected(hdev, &hcon->dst, hcon->type, 39007b064edaSJaganath Kanakkassery hcon->dst_type, 0, NULL, 0, 39017b064edaSJaganath Kanakkassery hcon->dev_class); 39027b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 39037b064edaSJaganath Kanakkassery 3904300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 39050a708f8fSGustavo F. Padovan return 0; 39060a708f8fSGustavo F. Padovan } 39070a708f8fSGustavo F. Padovan 39085909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3909cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3910cb3b3152SJohan Hedberg u8 *data) 39110a708f8fSGustavo F. Padovan { 39120a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 39130a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 391448454079SGustavo F. Padovan struct l2cap_chan *chan; 39150a708f8fSGustavo F. Padovan u8 req[128]; 39163df91ea2SAndrei Emeltchenko int err; 39170a708f8fSGustavo F. Padovan 3918cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3919cb3b3152SJohan Hedberg return -EPROTO; 3920cb3b3152SJohan Hedberg 39210a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 39220a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 39230a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 39240a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 39250a708f8fSGustavo F. Padovan 39261b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 39271b009c98SAndrei Emeltchenko dcid, scid, result, status); 39280a708f8fSGustavo F. Padovan 39293df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 39303df91ea2SAndrei Emeltchenko 39310a708f8fSGustavo F. Padovan if (scid) { 39323df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 39333df91ea2SAndrei Emeltchenko if (!chan) { 393421870b52SJohan Hedberg err = -EBADSLT; 39353df91ea2SAndrei Emeltchenko goto unlock; 39363df91ea2SAndrei Emeltchenko } 39370a708f8fSGustavo F. Padovan } else { 39383df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39393df91ea2SAndrei Emeltchenko if (!chan) { 394021870b52SJohan Hedberg err = -EBADSLT; 39413df91ea2SAndrei Emeltchenko goto unlock; 39423df91ea2SAndrei Emeltchenko } 39430a708f8fSGustavo F. Padovan } 39440a708f8fSGustavo F. Padovan 39453df91ea2SAndrei Emeltchenko err = 0; 39463df91ea2SAndrei Emeltchenko 39476be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 394848454079SGustavo F. Padovan 39490a708f8fSGustavo F. Padovan switch (result) { 39500a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 395189bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3952fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3953fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3954c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39550a708f8fSGustavo F. Padovan 3956c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39570a708f8fSGustavo F. Padovan break; 39580a708f8fSGustavo F. Padovan 39590a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 396073ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 396173ffa904SGustavo F. Padovan chan->num_conf_req++; 39620a708f8fSGustavo F. Padovan break; 39630a708f8fSGustavo F. Padovan 39640a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3965c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39660a708f8fSGustavo F. Padovan break; 39670a708f8fSGustavo F. Padovan 39680a708f8fSGustavo F. Padovan default: 396948454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 39700a708f8fSGustavo F. Padovan break; 39710a708f8fSGustavo F. Padovan } 39720a708f8fSGustavo F. Padovan 39736be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 39743df91ea2SAndrei Emeltchenko 39753df91ea2SAndrei Emeltchenko unlock: 39763df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 39773df91ea2SAndrei Emeltchenko 39783df91ea2SAndrei Emeltchenko return err; 39790a708f8fSGustavo F. Padovan } 39800a708f8fSGustavo F. Padovan 398147d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 39820a708f8fSGustavo F. Padovan { 39830a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 39840a708f8fSGustavo F. Padovan * sides request it. 39850a708f8fSGustavo F. Padovan */ 39860c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 398747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3988f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 398947d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 39900a708f8fSGustavo F. Padovan } 39910a708f8fSGustavo F. Padovan 399229d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 399329d8a590SAndrei Emeltchenko u8 ident, u16 flags) 399429d8a590SAndrei Emeltchenko { 399529d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 399629d8a590SAndrei Emeltchenko 399729d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 399829d8a590SAndrei Emeltchenko flags); 399929d8a590SAndrei Emeltchenko 400029d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 400129d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 400229d8a590SAndrei Emeltchenko 400329d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 400429d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 400529d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 400629d8a590SAndrei Emeltchenko } 400729d8a590SAndrei Emeltchenko 4008662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 4009662d652dSJohan Hedberg u16 scid, u16 dcid) 4010662d652dSJohan Hedberg { 4011662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 4012662d652dSJohan Hedberg 4013662d652dSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_INVALID_CID); 4014662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 4015662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 4016662d652dSJohan Hedberg 4017662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 4018662d652dSJohan Hedberg } 4019662d652dSJohan Hedberg 40202d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 40212d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 40222d792818SGustavo Padovan u8 *data) 40230a708f8fSGustavo F. Padovan { 40240a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 40250a708f8fSGustavo F. Padovan u16 dcid, flags; 40260a708f8fSGustavo F. Padovan u8 rsp[64]; 402748454079SGustavo F. Padovan struct l2cap_chan *chan; 40283c588192SMat Martineau int len, err = 0; 40290a708f8fSGustavo F. Padovan 4030cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 4031cb3b3152SJohan Hedberg return -EPROTO; 4032cb3b3152SJohan Hedberg 40330a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40340a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40350a708f8fSGustavo F. Padovan 40360a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40370a708f8fSGustavo F. Padovan 4038baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4039662d652dSJohan Hedberg if (!chan) { 4040662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4041662d652dSJohan Hedberg return 0; 4042662d652dSJohan Hedberg } 40430a708f8fSGustavo F. Padovan 4044033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4045662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4046662d652dSJohan Hedberg chan->dcid); 40470a708f8fSGustavo F. Padovan goto unlock; 40480a708f8fSGustavo F. Padovan } 40490a708f8fSGustavo F. Padovan 40500a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40510a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4052cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40530a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4054fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40550a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40560a708f8fSGustavo F. Padovan goto unlock; 40570a708f8fSGustavo F. Padovan } 40580a708f8fSGustavo F. Padovan 40590a708f8fSGustavo F. Padovan /* Store config. */ 406073ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 406173ffa904SGustavo F. Padovan chan->conf_len += len; 40620a708f8fSGustavo F. Padovan 406359e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40640a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40650a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4066fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40675325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 40680a708f8fSGustavo F. Padovan goto unlock; 40690a708f8fSGustavo F. Padovan } 40700a708f8fSGustavo F. Padovan 40710a708f8fSGustavo F. Padovan /* Complete config. */ 407273ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 40730a708f8fSGustavo F. Padovan if (len < 0) { 40745e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 40750a708f8fSGustavo F. Padovan goto unlock; 40760a708f8fSGustavo F. Padovan } 40770a708f8fSGustavo F. Padovan 40781500109bSMat Martineau chan->ident = cmd->ident; 40790a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 408073ffa904SGustavo F. Padovan chan->num_conf_rsp++; 40810a708f8fSGustavo F. Padovan 40820a708f8fSGustavo F. Padovan /* Reset config buffer. */ 408373ffa904SGustavo F. Padovan chan->conf_len = 0; 40840a708f8fSGustavo F. Padovan 4085c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 40860a708f8fSGustavo F. Padovan goto unlock; 40870a708f8fSGustavo F. Padovan 4088c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 408947d1ec61SGustavo F. Padovan set_default_fcs(chan); 40900a708f8fSGustavo F. Padovan 4091105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4092105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 40933c588192SMat Martineau err = l2cap_ertm_init(chan); 40940a708f8fSGustavo F. Padovan 40953c588192SMat Martineau if (err < 0) 40965e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 40973c588192SMat Martineau else 4098cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 40993c588192SMat Martineau 41000a708f8fSGustavo F. Padovan goto unlock; 41010a708f8fSGustavo F. Padovan } 41020a708f8fSGustavo F. Padovan 4103c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 41040a708f8fSGustavo F. Padovan u8 buf[64]; 41050a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 410673ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 410773ffa904SGustavo F. Padovan chan->num_conf_req++; 41080a708f8fSGustavo F. Padovan } 41090a708f8fSGustavo F. Padovan 41100e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 41110e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 41120e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 41130e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41140e8b207eSAndrei Emeltchenko 41150e8b207eSAndrei Emeltchenko /* check compatibility */ 41160e8b207eSAndrei Emeltchenko 411779de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4118f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 411929d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 412079de886dSAndrei Emeltchenko else 412179de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41220e8b207eSAndrei Emeltchenko } 41230e8b207eSAndrei Emeltchenko 41240a708f8fSGustavo F. Padovan unlock: 41256be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41263c588192SMat Martineau return err; 41270a708f8fSGustavo F. Padovan } 41280a708f8fSGustavo F. Padovan 41292d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4130cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4131cb3b3152SJohan Hedberg u8 *data) 41320a708f8fSGustavo F. Padovan { 41330a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41340a708f8fSGustavo F. Padovan u16 scid, flags, result; 413548454079SGustavo F. Padovan struct l2cap_chan *chan; 4136cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41373c588192SMat Martineau int err = 0; 41380a708f8fSGustavo F. Padovan 4139cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4140cb3b3152SJohan Hedberg return -EPROTO; 4141cb3b3152SJohan Hedberg 41420a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41430a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41440a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41450a708f8fSGustavo F. Padovan 414661386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 414761386cbaSAndrei Emeltchenko result, len); 41480a708f8fSGustavo F. Padovan 4149baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 415048454079SGustavo F. Padovan if (!chan) 41510a708f8fSGustavo F. Padovan return 0; 41520a708f8fSGustavo F. Padovan 41530a708f8fSGustavo F. Padovan switch (result) { 41540a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 415547d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41560e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41570a708f8fSGustavo F. Padovan break; 41580a708f8fSGustavo F. Padovan 41590e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41600e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41610e8b207eSAndrei Emeltchenko 41620e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41630e8b207eSAndrei Emeltchenko char buf[64]; 41640e8b207eSAndrei Emeltchenko 41650e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41660e8b207eSAndrei Emeltchenko buf, &result); 41670e8b207eSAndrei Emeltchenko if (len < 0) { 41685e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41690e8b207eSAndrei Emeltchenko goto done; 41700e8b207eSAndrei Emeltchenko } 41710e8b207eSAndrei Emeltchenko 4172f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 417379de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 417479de886dSAndrei Emeltchenko 0); 41755ce66b59SAndrei Emeltchenko } else { 41765ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 41775ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 417879de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41790e8b207eSAndrei Emeltchenko } 41805ce66b59SAndrei Emeltchenko } 41815ce66b59SAndrei Emeltchenko } 41820e8b207eSAndrei Emeltchenko goto done; 41830e8b207eSAndrei Emeltchenko 41840a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 418573ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 41860a708f8fSGustavo F. Padovan char req[64]; 41870a708f8fSGustavo F. Padovan 41880a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 41895e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41900a708f8fSGustavo F. Padovan goto done; 41910a708f8fSGustavo F. Padovan } 41920a708f8fSGustavo F. Padovan 41930a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 41940a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4195b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4196b4450035SGustavo F. Padovan req, &result); 41970a708f8fSGustavo F. Padovan if (len < 0) { 41985e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41990a708f8fSGustavo F. Padovan goto done; 42000a708f8fSGustavo F. Padovan } 42010a708f8fSGustavo F. Padovan 42020a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 42030a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 420473ffa904SGustavo F. Padovan chan->num_conf_req++; 42050a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 42060a708f8fSGustavo F. Padovan goto done; 42070a708f8fSGustavo F. Padovan break; 42080a708f8fSGustavo F. Padovan } 42090a708f8fSGustavo F. Padovan 42100a708f8fSGustavo F. Padovan default: 42116be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 42122e0052e4SAndrei Emeltchenko 4213ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 42145e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42150a708f8fSGustavo F. Padovan goto done; 42160a708f8fSGustavo F. Padovan } 42170a708f8fSGustavo F. Padovan 421859e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 42190a708f8fSGustavo F. Padovan goto done; 42200a708f8fSGustavo F. Padovan 4221c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 42220a708f8fSGustavo F. Padovan 4223c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 422447d1ec61SGustavo F. Padovan set_default_fcs(chan); 42250a708f8fSGustavo F. Padovan 4226105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4227105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 42283c588192SMat Martineau err = l2cap_ertm_init(chan); 42290a708f8fSGustavo F. Padovan 42303c588192SMat Martineau if (err < 0) 42315e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 42323c588192SMat Martineau else 4233cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42340a708f8fSGustavo F. Padovan } 42350a708f8fSGustavo F. Padovan 42360a708f8fSGustavo F. Padovan done: 42376be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42383c588192SMat Martineau return err; 42390a708f8fSGustavo F. Padovan } 42400a708f8fSGustavo F. Padovan 42412d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4242cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4243cb3b3152SJohan Hedberg u8 *data) 42440a708f8fSGustavo F. Padovan { 42450a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42460a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42470a708f8fSGustavo F. Padovan u16 dcid, scid; 424848454079SGustavo F. Padovan struct l2cap_chan *chan; 42490a708f8fSGustavo F. Padovan 4250cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4251cb3b3152SJohan Hedberg return -EPROTO; 4252cb3b3152SJohan Hedberg 42530a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42540a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42550a708f8fSGustavo F. Padovan 42560a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42570a708f8fSGustavo F. Padovan 42583df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42593df91ea2SAndrei Emeltchenko 42603df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42613df91ea2SAndrei Emeltchenko if (!chan) { 42623df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4263662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4264662d652dSJohan Hedberg return 0; 42653df91ea2SAndrei Emeltchenko } 42660a708f8fSGustavo F. Padovan 42676be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 42686be36555SAndrei Emeltchenko 4269fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4270fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 42710a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 42720a708f8fSGustavo F. Padovan 42735ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 42740a708f8fSGustavo F. Padovan 427561d6ef3eSMat Martineau l2cap_chan_hold(chan); 427648454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 42776be36555SAndrei Emeltchenko 42786be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42790a708f8fSGustavo F. Padovan 428080b98027SGustavo Padovan chan->ops->close(chan); 428161d6ef3eSMat Martineau l2cap_chan_put(chan); 42823df91ea2SAndrei Emeltchenko 42833df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42843df91ea2SAndrei Emeltchenko 42850a708f8fSGustavo F. Padovan return 0; 42860a708f8fSGustavo F. Padovan } 42870a708f8fSGustavo F. Padovan 42882d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4289cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4290cb3b3152SJohan Hedberg u8 *data) 42910a708f8fSGustavo F. Padovan { 42920a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 42930a708f8fSGustavo F. Padovan u16 dcid, scid; 429448454079SGustavo F. Padovan struct l2cap_chan *chan; 42950a708f8fSGustavo F. Padovan 4296cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4297cb3b3152SJohan Hedberg return -EPROTO; 4298cb3b3152SJohan Hedberg 42990a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 43000a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 43010a708f8fSGustavo F. Padovan 43020a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 43030a708f8fSGustavo F. Padovan 43043df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 43053df91ea2SAndrei Emeltchenko 43063df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 43073df91ea2SAndrei Emeltchenko if (!chan) { 43083df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43090a708f8fSGustavo F. Padovan return 0; 43103df91ea2SAndrei Emeltchenko } 43110a708f8fSGustavo F. Padovan 43126be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 431348454079SGustavo F. Padovan 431461d6ef3eSMat Martineau l2cap_chan_hold(chan); 431548454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 43166be36555SAndrei Emeltchenko 43176be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43180a708f8fSGustavo F. Padovan 431980b98027SGustavo Padovan chan->ops->close(chan); 432061d6ef3eSMat Martineau l2cap_chan_put(chan); 43213df91ea2SAndrei Emeltchenko 43223df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43233df91ea2SAndrei Emeltchenko 43240a708f8fSGustavo F. Padovan return 0; 43250a708f8fSGustavo F. Padovan } 43260a708f8fSGustavo F. Padovan 43272d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4328cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4329cb3b3152SJohan Hedberg u8 *data) 43300a708f8fSGustavo F. Padovan { 43310a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 43320a708f8fSGustavo F. Padovan u16 type; 43330a708f8fSGustavo F. Padovan 4334cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4335cb3b3152SJohan Hedberg return -EPROTO; 4336cb3b3152SJohan Hedberg 43370a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43380a708f8fSGustavo F. Padovan 43390a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 43400a708f8fSGustavo F. Padovan 43410a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 43420a708f8fSGustavo F. Padovan u8 buf[8]; 43430a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43440a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4345ac73498cSAndrei Emeltchenko rsp->type = __constant_cpu_to_le16(L2CAP_IT_FEAT_MASK); 4346ac73498cSAndrei Emeltchenko rsp->result = __constant_cpu_to_le16(L2CAP_IR_SUCCESS); 43470a708f8fSGustavo F. Padovan if (!disable_ertm) 43480a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43490a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 4350848566b3SMarcel Holtmann if (conn->hs_enabled) 43516327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43526327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4353a5fd6f30SAndrei Emeltchenko 43540a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43552d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43562d792818SGustavo Padovan buf); 43570a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43580a708f8fSGustavo F. Padovan u8 buf[12]; 43590a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 436050a147cdSMat Martineau 4361848566b3SMarcel Holtmann if (conn->hs_enabled) 436250a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 436350a147cdSMat Martineau else 436450a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 436550a147cdSMat Martineau 4366ac73498cSAndrei Emeltchenko rsp->type = __constant_cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4367ac73498cSAndrei Emeltchenko rsp->result = __constant_cpu_to_le16(L2CAP_IR_SUCCESS); 4368c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 43692d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43702d792818SGustavo Padovan buf); 43710a708f8fSGustavo F. Padovan } else { 43720a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 43730a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4374ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_IR_NOTSUPP); 43752d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 43762d792818SGustavo Padovan &rsp); 43770a708f8fSGustavo F. Padovan } 43780a708f8fSGustavo F. Padovan 43790a708f8fSGustavo F. Padovan return 0; 43800a708f8fSGustavo F. Padovan } 43810a708f8fSGustavo F. Padovan 43822d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4383cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4384cb3b3152SJohan Hedberg u8 *data) 43850a708f8fSGustavo F. Padovan { 43860a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 43870a708f8fSGustavo F. Padovan u16 type, result; 43880a708f8fSGustavo F. Padovan 43893f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4390cb3b3152SJohan Hedberg return -EPROTO; 4391cb3b3152SJohan Hedberg 43920a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 43930a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 43940a708f8fSGustavo F. Padovan 43950a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 43960a708f8fSGustavo F. Padovan 4397e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4398e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4399e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4400e90165beSAndrei Emeltchenko return 0; 4401e90165beSAndrei Emeltchenko 440217cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 44030a708f8fSGustavo F. Padovan 44040a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 44050a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44060a708f8fSGustavo F. Padovan conn->info_ident = 0; 44070a708f8fSGustavo F. Padovan 44080a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44090a708f8fSGustavo F. Padovan 44100a708f8fSGustavo F. Padovan return 0; 44110a708f8fSGustavo F. Padovan } 44120a708f8fSGustavo F. Padovan 4413978c93b9SAndrei Emeltchenko switch (type) { 4414978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 44150a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 44160a708f8fSGustavo F. Padovan 44170a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 44180a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4419ac73498cSAndrei Emeltchenko req.type = __constant_cpu_to_le16(L2CAP_IT_FIXED_CHAN); 44200a708f8fSGustavo F. Padovan 44210a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 44220a708f8fSGustavo F. Padovan 44230a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 44240a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 44250a708f8fSGustavo F. Padovan } else { 44260a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44270a708f8fSGustavo F. Padovan conn->info_ident = 0; 44280a708f8fSGustavo F. Padovan 44290a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44300a708f8fSGustavo F. Padovan } 4431978c93b9SAndrei Emeltchenko break; 4432978c93b9SAndrei Emeltchenko 4433978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 4434978c93b9SAndrei Emeltchenko conn->fixed_chan_mask = rsp->data[0]; 44350a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44360a708f8fSGustavo F. Padovan conn->info_ident = 0; 44370a708f8fSGustavo F. Padovan 44380a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4439978c93b9SAndrei Emeltchenko break; 44400a708f8fSGustavo F. Padovan } 44410a708f8fSGustavo F. Padovan 44420a708f8fSGustavo F. Padovan return 0; 44430a708f8fSGustavo F. Padovan } 44440a708f8fSGustavo F. Padovan 44451700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44462d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44472d792818SGustavo Padovan u16 cmd_len, void *data) 4448f94ff6ffSMat Martineau { 4449f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44506e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44511700915fSMat Martineau struct l2cap_chan *chan; 44526e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4453f94ff6ffSMat Martineau u16 psm, scid; 4454f94ff6ffSMat Martineau 4455f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4456f94ff6ffSMat Martineau return -EPROTO; 4457f94ff6ffSMat Martineau 4458848566b3SMarcel Holtmann if (!conn->hs_enabled) 4459f94ff6ffSMat Martineau return -EINVAL; 4460f94ff6ffSMat Martineau 4461f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4462f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4463f94ff6ffSMat Martineau 4464ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4465f94ff6ffSMat Martineau 44666e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 44676ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 44686e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44696e1df6a6SAndrei Emeltchenko req->amp_id); 44706e1df6a6SAndrei Emeltchenko return 0; 44716e1df6a6SAndrei Emeltchenko } 44721700915fSMat Martineau 44731700915fSMat Martineau /* Validate AMP controller id */ 44741700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 44756e1df6a6SAndrei Emeltchenko if (!hdev) 44766e1df6a6SAndrei Emeltchenko goto error; 44771700915fSMat Martineau 44786e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 44796e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44806e1df6a6SAndrei Emeltchenko goto error; 44816e1df6a6SAndrei Emeltchenko } 44826e1df6a6SAndrei Emeltchenko 44836e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44846e1df6a6SAndrei Emeltchenko req->amp_id); 44856e1df6a6SAndrei Emeltchenko if (chan) { 44866e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 44876e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 44886e1df6a6SAndrei Emeltchenko 448998e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 449098e0f7eaSMarcel Holtmann &conn->hcon->dst); 44916e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 44926e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4493662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4494662d652dSJohan Hedberg chan->dcid); 4495662d652dSJohan Hedberg return 0; 44966e1df6a6SAndrei Emeltchenko } 44976e1df6a6SAndrei Emeltchenko 44986e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 44996e1df6a6SAndrei Emeltchenko 45006e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 45016e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4502fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 45036e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 45046e1df6a6SAndrei Emeltchenko } 45056e1df6a6SAndrei Emeltchenko 45066e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45076e1df6a6SAndrei Emeltchenko 45086e1df6a6SAndrei Emeltchenko return 0; 45096e1df6a6SAndrei Emeltchenko 45106e1df6a6SAndrei Emeltchenko error: 4511f94ff6ffSMat Martineau rsp.dcid = 0; 4512f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 45131700915fSMat Martineau rsp.result = __constant_cpu_to_le16(L2CAP_CR_BAD_AMP); 45148ce0c498SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 4515f94ff6ffSMat Martineau 4516f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4517f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4518f94ff6ffSMat Martineau 4519dc280801SJohan Hedberg return 0; 4520f94ff6ffSMat Martineau } 4521f94ff6ffSMat Martineau 45228eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 45238eb200bdSMat Martineau { 45248eb200bdSMat Martineau struct l2cap_move_chan_req req; 45258eb200bdSMat Martineau u8 ident; 45268eb200bdSMat Martineau 45278eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 45288eb200bdSMat Martineau 45298eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 45308eb200bdSMat Martineau chan->ident = ident; 45318eb200bdSMat Martineau 45328eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 45338eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45348eb200bdSMat Martineau 45358eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45368eb200bdSMat Martineau &req); 45378eb200bdSMat Martineau 45388eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45398eb200bdSMat Martineau } 45408eb200bdSMat Martineau 45411500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45428d5a04a1SMat Martineau { 45438d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45448d5a04a1SMat Martineau 45451500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45468d5a04a1SMat Martineau 45471500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45488d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45498d5a04a1SMat Martineau 45501500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45511500109bSMat Martineau sizeof(rsp), &rsp); 45528d5a04a1SMat Martineau } 45538d5a04a1SMat Martineau 45545b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45558d5a04a1SMat Martineau { 45568d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45578d5a04a1SMat Martineau 45585b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45598d5a04a1SMat Martineau 45605b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45618d5a04a1SMat Martineau 45625b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45638d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45648d5a04a1SMat Martineau 45655b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45665b155ef9SMat Martineau sizeof(cfm), &cfm); 45675b155ef9SMat Martineau 45685b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45695b155ef9SMat Martineau } 45705b155ef9SMat Martineau 45715b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 45725b155ef9SMat Martineau { 45735b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 45745b155ef9SMat Martineau 45755b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 45765b155ef9SMat Martineau 45775b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 45785b155ef9SMat Martineau cfm.result = __constant_cpu_to_le16(L2CAP_MC_UNCONFIRMED); 45795b155ef9SMat Martineau 45805b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 45815b155ef9SMat Martineau sizeof(cfm), &cfm); 45828d5a04a1SMat Martineau } 45838d5a04a1SMat Martineau 45848d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 45858d5a04a1SMat Martineau u16 icid) 45868d5a04a1SMat Martineau { 45878d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 45888d5a04a1SMat Martineau 4589ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 45908d5a04a1SMat Martineau 45918d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 45928d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 45938d5a04a1SMat Martineau } 45948d5a04a1SMat Martineau 45955f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 45965f3847a4SMat Martineau { 45975f3847a4SMat Martineau chan->hs_hchan = NULL; 45985f3847a4SMat Martineau chan->hs_hcon = NULL; 45995f3847a4SMat Martineau 46005f3847a4SMat Martineau /* Placeholder - release the logical link */ 46015f3847a4SMat Martineau } 46025f3847a4SMat Martineau 46031500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 46041500109bSMat Martineau { 46051500109bSMat Martineau /* Logical link setup failed */ 46061500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46071500109bSMat Martineau /* Create channel failure, disconnect */ 46085e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 46091500109bSMat Martineau return; 46101500109bSMat Martineau } 46111500109bSMat Martineau 46121500109bSMat Martineau switch (chan->move_role) { 46131500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 46141500109bSMat Martineau l2cap_move_done(chan); 46151500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 46161500109bSMat Martineau break; 46171500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 46181500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 46191500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 46201500109bSMat Martineau /* Remote has only sent pending or 46211500109bSMat Martineau * success responses, clean up 46221500109bSMat Martineau */ 46231500109bSMat Martineau l2cap_move_done(chan); 46241500109bSMat Martineau } 46251500109bSMat Martineau 46261500109bSMat Martineau /* Other amp move states imply that the move 46271500109bSMat Martineau * has already aborted 46281500109bSMat Martineau */ 46291500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 46301500109bSMat Martineau break; 46311500109bSMat Martineau } 46321500109bSMat Martineau } 46331500109bSMat Martineau 46341500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46351500109bSMat Martineau struct hci_chan *hchan) 46361500109bSMat Martineau { 46371500109bSMat Martineau struct l2cap_conf_rsp rsp; 46381500109bSMat Martineau 4639336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46401500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46411500109bSMat Martineau 464235ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46431500109bSMat Martineau 46441500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4645fe79c6feSAndrei Emeltchenko int err; 46461500109bSMat Martineau 46471500109bSMat Martineau set_default_fcs(chan); 46481500109bSMat Martineau 46491500109bSMat Martineau err = l2cap_ertm_init(chan); 46501500109bSMat Martineau if (err < 0) 46515e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46521500109bSMat Martineau else 46531500109bSMat Martineau l2cap_chan_ready(chan); 46541500109bSMat Martineau } 46551500109bSMat Martineau } 46561500109bSMat Martineau 46571500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46581500109bSMat Martineau struct hci_chan *hchan) 46591500109bSMat Martineau { 46601500109bSMat Martineau chan->hs_hcon = hchan->conn; 46611500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46621500109bSMat Martineau 46631500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46641500109bSMat Martineau 46651500109bSMat Martineau switch (chan->move_state) { 46661500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 46671500109bSMat Martineau /* Move confirm will be sent after a success 46681500109bSMat Martineau * response is received 46691500109bSMat Martineau */ 46701500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46711500109bSMat Martineau break; 46721500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 46731500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 46741500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 46751500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 46761500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 46771500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 46781500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 46791500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 46801500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 46811500109bSMat Martineau } 46821500109bSMat Martineau break; 46831500109bSMat Martineau default: 46841500109bSMat Martineau /* Move was not in expected state, free the channel */ 46851500109bSMat Martineau __release_logical_link(chan); 46861500109bSMat Martineau 46871500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 46881500109bSMat Martineau } 46891500109bSMat Martineau } 46901500109bSMat Martineau 46911500109bSMat Martineau /* Call with chan locked */ 469227695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 46935b155ef9SMat Martineau u8 status) 46945b155ef9SMat Martineau { 46951500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 46961500109bSMat Martineau 46971500109bSMat Martineau if (status) { 46981500109bSMat Martineau l2cap_logical_fail(chan); 46991500109bSMat Martineau __release_logical_link(chan); 47005b155ef9SMat Martineau return; 47015b155ef9SMat Martineau } 47025b155ef9SMat Martineau 47031500109bSMat Martineau if (chan->state != BT_CONNECTED) { 47041500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 47056ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 47061500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 47071500109bSMat Martineau } else { 47081500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 47091500109bSMat Martineau } 47101500109bSMat Martineau } 47111500109bSMat Martineau 47123f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 47133f7a56c4SMat Martineau { 47143f7a56c4SMat Martineau BT_DBG("chan %p", chan); 47153f7a56c4SMat Martineau 47166ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 47173f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 47183f7a56c4SMat Martineau return; 47193f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47203f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 47213f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 47223f7a56c4SMat Martineau } else { 47233f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47243f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47253f7a56c4SMat Martineau chan->move_id = 0; 47263f7a56c4SMat Martineau l2cap_move_setup(chan); 47273f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 47283f7a56c4SMat Martineau } 47293f7a56c4SMat Martineau } 47303f7a56c4SMat Martineau 47318eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 47328eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 47338eb200bdSMat Martineau { 473462748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 473562748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 473662748ca1SAndrei Emeltchenko 473712d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 473812d6cc60SAndrei Emeltchenko 473962748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 474062748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 474162748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 474262748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 474362748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 474462748ca1SAndrei Emeltchenko } else { 474562748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 474662748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 474762748ca1SAndrei Emeltchenko } 474862748ca1SAndrei Emeltchenko 474962748ca1SAndrei Emeltchenko return; 475062748ca1SAndrei Emeltchenko } 475162748ca1SAndrei Emeltchenko 475262748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 475362748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47548eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47558eb200bdSMat Martineau char buf[128]; 47568eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47578eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47588eb200bdSMat Martineau 47598eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47608eb200bdSMat Martineau /* Send successful response */ 476162cd50e2SAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_SUCCESS); 476262cd50e2SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 47638eb200bdSMat Martineau } else { 47648eb200bdSMat Martineau /* Send negative response */ 476562cd50e2SAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CR_NO_MEM); 476662cd50e2SAndrei Emeltchenko rsp.status = __constant_cpu_to_le16(L2CAP_CS_NO_INFO); 47678eb200bdSMat Martineau } 47688eb200bdSMat Martineau 47698eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 47708eb200bdSMat Martineau sizeof(rsp), &rsp); 47718eb200bdSMat Martineau 47728eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4773f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 47748eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 47758eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 47768eb200bdSMat Martineau L2CAP_CONF_REQ, 47778eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 47788eb200bdSMat Martineau chan->num_conf_req++; 47798eb200bdSMat Martineau } 47808eb200bdSMat Martineau } 47818eb200bdSMat Martineau } 47828eb200bdSMat Martineau 47838eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 47848eb200bdSMat Martineau u8 remote_amp_id) 47858eb200bdSMat Martineau { 47868eb200bdSMat Martineau l2cap_move_setup(chan); 47878eb200bdSMat Martineau chan->move_id = local_amp_id; 47888eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 47898eb200bdSMat Martineau 47908eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 47918eb200bdSMat Martineau } 47928eb200bdSMat Martineau 47938eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 47948eb200bdSMat Martineau { 47958eb200bdSMat Martineau struct hci_chan *hchan = NULL; 47968eb200bdSMat Martineau 47978eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 47988eb200bdSMat Martineau 47998eb200bdSMat Martineau if (hchan) { 48008eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 48018eb200bdSMat Martineau /* Logical link is ready to go */ 48028eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 48038eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 48048eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 48058eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 48068eb200bdSMat Martineau 48078eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 48088eb200bdSMat Martineau } else { 48098eb200bdSMat Martineau /* Wait for logical link to be ready */ 48108eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 48118eb200bdSMat Martineau } 48128eb200bdSMat Martineau } else { 48138eb200bdSMat Martineau /* Logical link not available */ 48148eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 48158eb200bdSMat Martineau } 48168eb200bdSMat Martineau } 48178eb200bdSMat Martineau 48188eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 48198eb200bdSMat Martineau { 48208eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 48218eb200bdSMat Martineau u8 rsp_result; 48228eb200bdSMat Martineau if (result == -EINVAL) 48238eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 48248eb200bdSMat Martineau else 48258eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 48268eb200bdSMat Martineau 48278eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 48288eb200bdSMat Martineau } 48298eb200bdSMat Martineau 48308eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 48318eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 48328eb200bdSMat Martineau 48338eb200bdSMat Martineau /* Restart data transmission */ 48348eb200bdSMat Martineau l2cap_ertm_send(chan); 48358eb200bdSMat Martineau } 48368eb200bdSMat Martineau 4837a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4838a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48398eb200bdSMat Martineau { 4840770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4841fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4842770bfefaSAndrei Emeltchenko 48438eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48448eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48458eb200bdSMat Martineau 48468eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48478eb200bdSMat Martineau l2cap_chan_unlock(chan); 48488eb200bdSMat Martineau return; 48498eb200bdSMat Martineau } 48508eb200bdSMat Martineau 48518eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48528eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48538eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48548eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48558eb200bdSMat Martineau } else { 48568eb200bdSMat Martineau switch (chan->move_role) { 48578eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48588eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48598eb200bdSMat Martineau remote_amp_id); 48608eb200bdSMat Martineau break; 48618eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48628eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48638eb200bdSMat Martineau break; 48648eb200bdSMat Martineau default: 48658eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48668eb200bdSMat Martineau break; 48678eb200bdSMat Martineau } 48688eb200bdSMat Martineau } 48698eb200bdSMat Martineau } 48708eb200bdSMat Martineau 48718d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4872ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4873ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 48748d5a04a1SMat Martineau { 48758d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 48761500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 487702b0fbb9SMat Martineau struct l2cap_chan *chan; 48788d5a04a1SMat Martineau u16 icid = 0; 48798d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 48808d5a04a1SMat Martineau 48818d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 48828d5a04a1SMat Martineau return -EPROTO; 48838d5a04a1SMat Martineau 48848d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 48858d5a04a1SMat Martineau 4886ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 48878d5a04a1SMat Martineau 4888848566b3SMarcel Holtmann if (!conn->hs_enabled) 48898d5a04a1SMat Martineau return -EINVAL; 48908d5a04a1SMat Martineau 489102b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 489202b0fbb9SMat Martineau if (!chan) { 48931500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 48941500109bSMat Martineau rsp.result = __constant_cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 48951500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 48961500109bSMat Martineau sizeof(rsp), &rsp); 489702b0fbb9SMat Martineau return 0; 489802b0fbb9SMat Martineau } 489902b0fbb9SMat Martineau 49001500109bSMat Martineau chan->ident = cmd->ident; 49011500109bSMat Martineau 490202b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 490302b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 490402b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 490502b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 490602b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 490702b0fbb9SMat Martineau goto send_move_response; 490802b0fbb9SMat Martineau } 490902b0fbb9SMat Martineau 491002b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 491102b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 491202b0fbb9SMat Martineau goto send_move_response; 491302b0fbb9SMat Martineau } 491402b0fbb9SMat Martineau 49156ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 491602b0fbb9SMat Martineau struct hci_dev *hdev; 491702b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 491802b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 491902b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 492002b0fbb9SMat Martineau if (hdev) 492102b0fbb9SMat Martineau hci_dev_put(hdev); 492202b0fbb9SMat Martineau 492302b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 492402b0fbb9SMat Martineau goto send_move_response; 492502b0fbb9SMat Martineau } 492602b0fbb9SMat Martineau hci_dev_put(hdev); 492702b0fbb9SMat Martineau } 492802b0fbb9SMat Martineau 492902b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 493002b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 493102b0fbb9SMat Martineau * The winner has the larger bd_addr. 493202b0fbb9SMat Martineau */ 493302b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 493402b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49356f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 493602b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 493702b0fbb9SMat Martineau goto send_move_response; 493802b0fbb9SMat Martineau } 493902b0fbb9SMat Martineau 494002b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 494102b0fbb9SMat Martineau l2cap_move_setup(chan); 494202b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 494302b0fbb9SMat Martineau icid = chan->dcid; 494402b0fbb9SMat Martineau 49456ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 494602b0fbb9SMat Martineau /* Moving to BR/EDR */ 494702b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 494802b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 494902b0fbb9SMat Martineau result = L2CAP_MR_PEND; 495002b0fbb9SMat Martineau } else { 495102b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 495202b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 495302b0fbb9SMat Martineau } 495402b0fbb9SMat Martineau } else { 495502b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 495602b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 495702b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 495802b0fbb9SMat Martineau result = L2CAP_MR_PEND; 495902b0fbb9SMat Martineau } 496002b0fbb9SMat Martineau 496102b0fbb9SMat Martineau send_move_response: 49621500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49638d5a04a1SMat Martineau 496402b0fbb9SMat Martineau l2cap_chan_unlock(chan); 496502b0fbb9SMat Martineau 49668d5a04a1SMat Martineau return 0; 49678d5a04a1SMat Martineau } 49688d5a04a1SMat Martineau 49695b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 49705b155ef9SMat Martineau { 49715b155ef9SMat Martineau struct l2cap_chan *chan; 49725b155ef9SMat Martineau struct hci_chan *hchan = NULL; 49735b155ef9SMat Martineau 49745b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 49755b155ef9SMat Martineau if (!chan) { 49765b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 49775b155ef9SMat Martineau return; 49785b155ef9SMat Martineau } 49795b155ef9SMat Martineau 49805b155ef9SMat Martineau __clear_chan_timer(chan); 49815b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 49825b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 49835b155ef9SMat Martineau 49845b155ef9SMat Martineau switch (chan->move_state) { 49855b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 49865b155ef9SMat Martineau /* Move confirm will be sent when logical link 49875b155ef9SMat Martineau * is complete. 49885b155ef9SMat Martineau */ 49895b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 49905b155ef9SMat Martineau break; 49915b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 49925b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 49935b155ef9SMat Martineau break; 49945b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 49955b155ef9SMat Martineau &chan->conn_state)) { 49965b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 49975b155ef9SMat Martineau } else { 49985b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 49995b155ef9SMat Martineau * proceed with move 50005b155ef9SMat Martineau */ 50015b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 50025b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50035b155ef9SMat Martineau } 50045b155ef9SMat Martineau break; 50055b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 50065b155ef9SMat Martineau /* Moving to AMP */ 50075b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50085b155ef9SMat Martineau /* Remote is ready, send confirm immediately 50095b155ef9SMat Martineau * after logical link is ready 50105b155ef9SMat Martineau */ 50115b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50125b155ef9SMat Martineau } else { 50135b155ef9SMat Martineau /* Both logical link and move success 50145b155ef9SMat Martineau * are required to confirm 50155b155ef9SMat Martineau */ 50165b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 50175b155ef9SMat Martineau } 50185b155ef9SMat Martineau 50195b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 50205b155ef9SMat Martineau if (!hchan) { 50215b155ef9SMat Martineau /* Logical link not available */ 50225b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50235b155ef9SMat Martineau break; 50245b155ef9SMat Martineau } 50255b155ef9SMat Martineau 50265b155ef9SMat Martineau /* If the logical link is not yet connected, do not 50275b155ef9SMat Martineau * send confirmation. 50285b155ef9SMat Martineau */ 50295b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 50305b155ef9SMat Martineau break; 50315b155ef9SMat Martineau 50325b155ef9SMat Martineau /* Logical link is already ready to go */ 50335b155ef9SMat Martineau 50345b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50355b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50365b155ef9SMat Martineau 50375b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50385b155ef9SMat Martineau /* Can confirm now */ 50395b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50405b155ef9SMat Martineau } else { 50415b155ef9SMat Martineau /* Now only need move success 50425b155ef9SMat Martineau * to confirm 50435b155ef9SMat Martineau */ 50445b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50455b155ef9SMat Martineau } 50465b155ef9SMat Martineau 50475b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50485b155ef9SMat Martineau break; 50495b155ef9SMat Martineau default: 50505b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50515b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50525b155ef9SMat Martineau l2cap_move_done(chan); 50535b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50545b155ef9SMat Martineau } 50555b155ef9SMat Martineau 50565b155ef9SMat Martineau l2cap_chan_unlock(chan); 50575b155ef9SMat Martineau } 50585b155ef9SMat Martineau 50595b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50605b155ef9SMat Martineau u16 result) 50615b155ef9SMat Martineau { 50625b155ef9SMat Martineau struct l2cap_chan *chan; 50635b155ef9SMat Martineau 50645b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50655b155ef9SMat Martineau if (!chan) { 50665b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 50675b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50685b155ef9SMat Martineau return; 50695b155ef9SMat Martineau } 50705b155ef9SMat Martineau 50715b155ef9SMat Martineau __clear_chan_timer(chan); 50725b155ef9SMat Martineau 50735b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 50745b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 50755b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 50765b155ef9SMat Martineau } else { 50775b155ef9SMat Martineau /* Cleanup - cancel move */ 50785b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50795b155ef9SMat Martineau l2cap_move_done(chan); 50805b155ef9SMat Martineau } 50815b155ef9SMat Martineau } 50825b155ef9SMat Martineau 50835b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50845b155ef9SMat Martineau 50855b155ef9SMat Martineau l2cap_chan_unlock(chan); 50865b155ef9SMat Martineau } 50875b155ef9SMat Martineau 50885b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5089ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5090ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 50918d5a04a1SMat Martineau { 50928d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 50938d5a04a1SMat Martineau u16 icid, result; 50948d5a04a1SMat Martineau 50958d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 50968d5a04a1SMat Martineau return -EPROTO; 50978d5a04a1SMat Martineau 50988d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 50998d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 51008d5a04a1SMat Martineau 5101ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51028d5a04a1SMat Martineau 51035b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 51045b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 51055b155ef9SMat Martineau else 51065b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 51078d5a04a1SMat Martineau 51088d5a04a1SMat Martineau return 0; 51098d5a04a1SMat Martineau } 51108d5a04a1SMat Martineau 51115f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5112ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5113ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51148d5a04a1SMat Martineau { 51158d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 51165f3847a4SMat Martineau struct l2cap_chan *chan; 51178d5a04a1SMat Martineau u16 icid, result; 51188d5a04a1SMat Martineau 51198d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 51208d5a04a1SMat Martineau return -EPROTO; 51218d5a04a1SMat Martineau 51228d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 51238d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 51248d5a04a1SMat Martineau 5125ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51268d5a04a1SMat Martineau 51275f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 51285f3847a4SMat Martineau if (!chan) { 51295f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 51308d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51315f3847a4SMat Martineau return 0; 51325f3847a4SMat Martineau } 51335f3847a4SMat Martineau 51345f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51355f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51365f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51376ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51385f3847a4SMat Martineau __release_logical_link(chan); 51395f3847a4SMat Martineau } else { 51405f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51415f3847a4SMat Martineau } 51425f3847a4SMat Martineau 51435f3847a4SMat Martineau l2cap_move_done(chan); 51445f3847a4SMat Martineau } 51455f3847a4SMat Martineau 51465f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51475f3847a4SMat Martineau 51485f3847a4SMat Martineau l2cap_chan_unlock(chan); 51498d5a04a1SMat Martineau 51508d5a04a1SMat Martineau return 0; 51518d5a04a1SMat Martineau } 51528d5a04a1SMat Martineau 51538d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5154ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5155ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51568d5a04a1SMat Martineau { 51578d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51583fd71a0aSMat Martineau struct l2cap_chan *chan; 51598d5a04a1SMat Martineau u16 icid; 51608d5a04a1SMat Martineau 51618d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51628d5a04a1SMat Martineau return -EPROTO; 51638d5a04a1SMat Martineau 51648d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51658d5a04a1SMat Martineau 5166ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 51678d5a04a1SMat Martineau 51683fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 51693fd71a0aSMat Martineau if (!chan) 51703fd71a0aSMat Martineau return 0; 51713fd71a0aSMat Martineau 51723fd71a0aSMat Martineau __clear_chan_timer(chan); 51733fd71a0aSMat Martineau 51743fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 51753fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 51763fd71a0aSMat Martineau 51776ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 51783fd71a0aSMat Martineau __release_logical_link(chan); 51793fd71a0aSMat Martineau 51803fd71a0aSMat Martineau l2cap_move_done(chan); 51813fd71a0aSMat Martineau } 51823fd71a0aSMat Martineau 51833fd71a0aSMat Martineau l2cap_chan_unlock(chan); 51843fd71a0aSMat Martineau 51858d5a04a1SMat Martineau return 0; 51868d5a04a1SMat Martineau } 51878d5a04a1SMat Martineau 5188e2174ca4SGustavo F. Padovan static inline int l2cap_check_conn_param(u16 min, u16 max, u16 latency, 5189de73115aSClaudio Takahasi u16 to_multiplier) 5190de73115aSClaudio Takahasi { 5191de73115aSClaudio Takahasi u16 max_latency; 5192de73115aSClaudio Takahasi 5193de73115aSClaudio Takahasi if (min > max || min < 6 || max > 3200) 5194de73115aSClaudio Takahasi return -EINVAL; 5195de73115aSClaudio Takahasi 5196de73115aSClaudio Takahasi if (to_multiplier < 10 || to_multiplier > 3200) 5197de73115aSClaudio Takahasi return -EINVAL; 5198de73115aSClaudio Takahasi 5199de73115aSClaudio Takahasi if (max >= to_multiplier * 8) 5200de73115aSClaudio Takahasi return -EINVAL; 5201de73115aSClaudio Takahasi 5202de73115aSClaudio Takahasi max_latency = (to_multiplier * 8 / max) - 1; 5203de73115aSClaudio Takahasi if (latency > 499 || latency > max_latency) 5204de73115aSClaudio Takahasi return -EINVAL; 5205de73115aSClaudio Takahasi 5206de73115aSClaudio Takahasi return 0; 5207de73115aSClaudio Takahasi } 5208de73115aSClaudio Takahasi 5209de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 52102d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5211203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5212de73115aSClaudio Takahasi { 5213de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5214de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5215de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5216203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 52172ce603ebSClaudio Takahasi int err; 5218de73115aSClaudio Takahasi 5219de73115aSClaudio Takahasi if (!(hcon->link_mode & HCI_LM_MASTER)) 5220de73115aSClaudio Takahasi return -EINVAL; 5221de73115aSClaudio Takahasi 5222de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5223de73115aSClaudio Takahasi return -EPROTO; 5224de73115aSClaudio Takahasi 5225de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5226de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5227de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5228de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5229de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5230de73115aSClaudio Takahasi 5231de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5232de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5233de73115aSClaudio Takahasi 5234de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 52352ce603ebSClaudio Takahasi 52362ce603ebSClaudio Takahasi err = l2cap_check_conn_param(min, max, latency, to_multiplier); 52372ce603ebSClaudio Takahasi if (err) 5238ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5239de73115aSClaudio Takahasi else 5240ac73498cSAndrei Emeltchenko rsp.result = __constant_cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5241de73115aSClaudio Takahasi 5242de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5243de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5244de73115aSClaudio Takahasi 52452ce603ebSClaudio Takahasi if (!err) 52462ce603ebSClaudio Takahasi hci_le_conn_update(hcon, min, max, latency, to_multiplier); 52472ce603ebSClaudio Takahasi 5248de73115aSClaudio Takahasi return 0; 5249de73115aSClaudio Takahasi } 5250de73115aSClaudio Takahasi 5251f1496deeSJohan Hedberg static int l2cap_le_connect_rsp(struct l2cap_conn *conn, 5252f1496deeSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5253f1496deeSJohan Hedberg u8 *data) 5254f1496deeSJohan Hedberg { 5255f1496deeSJohan Hedberg struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data; 5256f1496deeSJohan Hedberg u16 dcid, mtu, mps, credits, result; 5257f1496deeSJohan Hedberg struct l2cap_chan *chan; 5258f1496deeSJohan Hedberg int err; 5259f1496deeSJohan Hedberg 5260f1496deeSJohan Hedberg if (cmd_len < sizeof(*rsp)) 5261f1496deeSJohan Hedberg return -EPROTO; 5262f1496deeSJohan Hedberg 5263f1496deeSJohan Hedberg dcid = __le16_to_cpu(rsp->dcid); 5264f1496deeSJohan Hedberg mtu = __le16_to_cpu(rsp->mtu); 5265f1496deeSJohan Hedberg mps = __le16_to_cpu(rsp->mps); 5266f1496deeSJohan Hedberg credits = __le16_to_cpu(rsp->credits); 5267f1496deeSJohan Hedberg result = __le16_to_cpu(rsp->result); 5268f1496deeSJohan Hedberg 5269f1496deeSJohan Hedberg if (result == L2CAP_CR_SUCCESS && (mtu < 23 || mps < 23)) 5270f1496deeSJohan Hedberg return -EPROTO; 5271f1496deeSJohan Hedberg 5272f1496deeSJohan Hedberg BT_DBG("dcid 0x%4.4x mtu %u mps %u credits %u result 0x%2.2x", 5273f1496deeSJohan Hedberg dcid, mtu, mps, credits, result); 5274f1496deeSJohan Hedberg 5275f1496deeSJohan Hedberg mutex_lock(&conn->chan_lock); 5276f1496deeSJohan Hedberg 5277f1496deeSJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 5278f1496deeSJohan Hedberg if (!chan) { 5279f1496deeSJohan Hedberg err = -EBADSLT; 5280f1496deeSJohan Hedberg goto unlock; 5281f1496deeSJohan Hedberg } 5282f1496deeSJohan Hedberg 5283f1496deeSJohan Hedberg err = 0; 5284f1496deeSJohan Hedberg 5285f1496deeSJohan Hedberg l2cap_chan_lock(chan); 5286f1496deeSJohan Hedberg 5287f1496deeSJohan Hedberg switch (result) { 5288f1496deeSJohan Hedberg case L2CAP_CR_SUCCESS: 5289f1496deeSJohan Hedberg chan->ident = 0; 5290f1496deeSJohan Hedberg chan->dcid = dcid; 5291f1496deeSJohan Hedberg chan->omtu = mtu; 5292f1496deeSJohan Hedberg chan->remote_mps = mps; 52930cd75f7eSJohan Hedberg chan->tx_credits = credits; 5294f1496deeSJohan Hedberg l2cap_chan_ready(chan); 5295f1496deeSJohan Hedberg break; 5296f1496deeSJohan Hedberg 5297f1496deeSJohan Hedberg default: 5298f1496deeSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 5299f1496deeSJohan Hedberg break; 5300f1496deeSJohan Hedberg } 5301f1496deeSJohan Hedberg 5302f1496deeSJohan Hedberg l2cap_chan_unlock(chan); 5303f1496deeSJohan Hedberg 5304f1496deeSJohan Hedberg unlock: 5305f1496deeSJohan Hedberg mutex_unlock(&conn->chan_lock); 5306f1496deeSJohan Hedberg 5307f1496deeSJohan Hedberg return err; 5308f1496deeSJohan Hedberg } 5309f1496deeSJohan Hedberg 53103300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 53112d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 53122d792818SGustavo Padovan u8 *data) 53133300d9a9SClaudio Takahasi { 53143300d9a9SClaudio Takahasi int err = 0; 53153300d9a9SClaudio Takahasi 53163300d9a9SClaudio Takahasi switch (cmd->code) { 53173300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5318cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 53193300d9a9SClaudio Takahasi break; 53203300d9a9SClaudio Takahasi 53213300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5322cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 53233300d9a9SClaudio Takahasi break; 53243300d9a9SClaudio Takahasi 53253300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5326f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 53279245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 53283300d9a9SClaudio Takahasi break; 53293300d9a9SClaudio Takahasi 53303300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 53313300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 53323300d9a9SClaudio Takahasi break; 53333300d9a9SClaudio Takahasi 53343300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 53359245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 53363300d9a9SClaudio Takahasi break; 53373300d9a9SClaudio Takahasi 53383300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5339cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 53403300d9a9SClaudio Takahasi break; 53413300d9a9SClaudio Takahasi 53423300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 53439245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 53443300d9a9SClaudio Takahasi break; 53453300d9a9SClaudio Takahasi 53463300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 53473300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 53483300d9a9SClaudio Takahasi break; 53493300d9a9SClaudio Takahasi 53503300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 53513300d9a9SClaudio Takahasi break; 53523300d9a9SClaudio Takahasi 53533300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5354cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 53553300d9a9SClaudio Takahasi break; 53563300d9a9SClaudio Takahasi 53573300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 53589245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 53593300d9a9SClaudio Takahasi break; 53603300d9a9SClaudio Takahasi 5361f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5362f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5363f94ff6ffSMat Martineau break; 5364f94ff6ffSMat Martineau 53658d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 53668d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 53678d5a04a1SMat Martineau break; 53688d5a04a1SMat Martineau 53698d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 53709245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 53718d5a04a1SMat Martineau break; 53728d5a04a1SMat Martineau 53738d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 53748d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 53758d5a04a1SMat Martineau break; 53768d5a04a1SMat Martineau 53778d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 53789245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 53798d5a04a1SMat Martineau break; 53808d5a04a1SMat Martineau 53813300d9a9SClaudio Takahasi default: 53823300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 53833300d9a9SClaudio Takahasi err = -EINVAL; 53843300d9a9SClaudio Takahasi break; 53853300d9a9SClaudio Takahasi } 53863300d9a9SClaudio Takahasi 53873300d9a9SClaudio Takahasi return err; 53883300d9a9SClaudio Takahasi } 53893300d9a9SClaudio Takahasi 539027e2d4c8SJohan Hedberg static int l2cap_le_connect_req(struct l2cap_conn *conn, 539127e2d4c8SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 539227e2d4c8SJohan Hedberg u8 *data) 539327e2d4c8SJohan Hedberg { 539427e2d4c8SJohan Hedberg struct l2cap_le_conn_req *req = (struct l2cap_le_conn_req *) data; 539527e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 539627e2d4c8SJohan Hedberg struct l2cap_chan *chan, *pchan; 53970cd75f7eSJohan Hedberg u16 dcid, scid, credits, mtu, mps; 539827e2d4c8SJohan Hedberg __le16 psm; 539927e2d4c8SJohan Hedberg u8 result; 540027e2d4c8SJohan Hedberg 540127e2d4c8SJohan Hedberg if (cmd_len != sizeof(*req)) 540227e2d4c8SJohan Hedberg return -EPROTO; 540327e2d4c8SJohan Hedberg 540427e2d4c8SJohan Hedberg scid = __le16_to_cpu(req->scid); 540527e2d4c8SJohan Hedberg mtu = __le16_to_cpu(req->mtu); 540627e2d4c8SJohan Hedberg mps = __le16_to_cpu(req->mps); 540727e2d4c8SJohan Hedberg psm = req->psm; 540827e2d4c8SJohan Hedberg dcid = 0; 54090cd75f7eSJohan Hedberg credits = 0; 541027e2d4c8SJohan Hedberg 541127e2d4c8SJohan Hedberg if (mtu < 23 || mps < 23) 541227e2d4c8SJohan Hedberg return -EPROTO; 541327e2d4c8SJohan Hedberg 541427e2d4c8SJohan Hedberg BT_DBG("psm 0x%2.2x scid 0x%4.4x mtu %u mps %u", __le16_to_cpu(psm), 541527e2d4c8SJohan Hedberg scid, mtu, mps); 541627e2d4c8SJohan Hedberg 541727e2d4c8SJohan Hedberg /* Check if we have socket listening on psm */ 541827e2d4c8SJohan Hedberg pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 541927e2d4c8SJohan Hedberg &conn->hcon->dst, LE_LINK); 542027e2d4c8SJohan Hedberg if (!pchan) { 542127e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 542227e2d4c8SJohan Hedberg chan = NULL; 542327e2d4c8SJohan Hedberg goto response; 542427e2d4c8SJohan Hedberg } 542527e2d4c8SJohan Hedberg 542627e2d4c8SJohan Hedberg mutex_lock(&conn->chan_lock); 542727e2d4c8SJohan Hedberg l2cap_chan_lock(pchan); 542827e2d4c8SJohan Hedberg 542927e2d4c8SJohan Hedberg if (!smp_sufficient_security(conn->hcon, pchan->sec_level)) { 543027e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHENTICATION; 543127e2d4c8SJohan Hedberg chan = NULL; 543227e2d4c8SJohan Hedberg goto response_unlock; 543327e2d4c8SJohan Hedberg } 543427e2d4c8SJohan Hedberg 543527e2d4c8SJohan Hedberg /* Check if we already have channel with that dcid */ 543627e2d4c8SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, scid)) { 543727e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 543827e2d4c8SJohan Hedberg chan = NULL; 543927e2d4c8SJohan Hedberg goto response_unlock; 544027e2d4c8SJohan Hedberg } 544127e2d4c8SJohan Hedberg 544227e2d4c8SJohan Hedberg chan = pchan->ops->new_connection(pchan); 544327e2d4c8SJohan Hedberg if (!chan) { 544427e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 544527e2d4c8SJohan Hedberg goto response_unlock; 544627e2d4c8SJohan Hedberg } 544727e2d4c8SJohan Hedberg 54480ce43ce6SJohan Hedberg l2cap_le_flowctl_init(chan); 54490ce43ce6SJohan Hedberg 545027e2d4c8SJohan Hedberg bacpy(&chan->src, &conn->hcon->src); 545127e2d4c8SJohan Hedberg bacpy(&chan->dst, &conn->hcon->dst); 545227e2d4c8SJohan Hedberg chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 545327e2d4c8SJohan Hedberg chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 545427e2d4c8SJohan Hedberg chan->psm = psm; 545527e2d4c8SJohan Hedberg chan->dcid = scid; 545627e2d4c8SJohan Hedberg chan->omtu = mtu; 545727e2d4c8SJohan Hedberg chan->remote_mps = mps; 54580cd75f7eSJohan Hedberg chan->tx_credits = __le16_to_cpu(req->credits); 545927e2d4c8SJohan Hedberg 546027e2d4c8SJohan Hedberg __l2cap_chan_add(conn, chan); 546127e2d4c8SJohan Hedberg dcid = chan->scid; 54620cd75f7eSJohan Hedberg credits = chan->rx_credits; 546327e2d4c8SJohan Hedberg 546427e2d4c8SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 546527e2d4c8SJohan Hedberg 546627e2d4c8SJohan Hedberg chan->ident = cmd->ident; 546727e2d4c8SJohan Hedberg 546827e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 546927e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_CONNECT2); 547027e2d4c8SJohan Hedberg result = L2CAP_CR_PEND; 547127e2d4c8SJohan Hedberg chan->ops->defer(chan); 547227e2d4c8SJohan Hedberg } else { 547327e2d4c8SJohan Hedberg l2cap_chan_ready(chan); 547427e2d4c8SJohan Hedberg result = L2CAP_CR_SUCCESS; 547527e2d4c8SJohan Hedberg } 547627e2d4c8SJohan Hedberg 547727e2d4c8SJohan Hedberg response_unlock: 547827e2d4c8SJohan Hedberg l2cap_chan_unlock(pchan); 547927e2d4c8SJohan Hedberg mutex_unlock(&conn->chan_lock); 548027e2d4c8SJohan Hedberg 548127e2d4c8SJohan Hedberg if (result == L2CAP_CR_PEND) 548227e2d4c8SJohan Hedberg return 0; 548327e2d4c8SJohan Hedberg 548427e2d4c8SJohan Hedberg response: 548527e2d4c8SJohan Hedberg if (chan) { 548627e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 54873916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 548827e2d4c8SJohan Hedberg } else { 548927e2d4c8SJohan Hedberg rsp.mtu = 0; 549027e2d4c8SJohan Hedberg rsp.mps = 0; 549127e2d4c8SJohan Hedberg } 549227e2d4c8SJohan Hedberg 549327e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(dcid); 54940cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(credits); 549527e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 549627e2d4c8SJohan Hedberg 549727e2d4c8SJohan Hedberg l2cap_send_cmd(conn, cmd->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), &rsp); 549827e2d4c8SJohan Hedberg 549927e2d4c8SJohan Hedberg return 0; 550027e2d4c8SJohan Hedberg } 550127e2d4c8SJohan Hedberg 5502fad5fc89SJohan Hedberg static inline int l2cap_le_credits(struct l2cap_conn *conn, 5503fad5fc89SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5504fad5fc89SJohan Hedberg u8 *data) 5505fad5fc89SJohan Hedberg { 5506fad5fc89SJohan Hedberg struct l2cap_le_credits *pkt; 5507fad5fc89SJohan Hedberg struct l2cap_chan *chan; 55080f1bfe4eSJohan Hedberg u16 cid, credits, max_credits; 5509fad5fc89SJohan Hedberg 5510fad5fc89SJohan Hedberg if (cmd_len != sizeof(*pkt)) 5511fad5fc89SJohan Hedberg return -EPROTO; 5512fad5fc89SJohan Hedberg 5513fad5fc89SJohan Hedberg pkt = (struct l2cap_le_credits *) data; 5514fad5fc89SJohan Hedberg cid = __le16_to_cpu(pkt->cid); 5515fad5fc89SJohan Hedberg credits = __le16_to_cpu(pkt->credits); 5516fad5fc89SJohan Hedberg 5517fad5fc89SJohan Hedberg BT_DBG("cid 0x%4.4x credits 0x%4.4x", cid, credits); 5518fad5fc89SJohan Hedberg 5519fad5fc89SJohan Hedberg chan = l2cap_get_chan_by_dcid(conn, cid); 5520fad5fc89SJohan Hedberg if (!chan) 5521fad5fc89SJohan Hedberg return -EBADSLT; 5522fad5fc89SJohan Hedberg 55230f1bfe4eSJohan Hedberg max_credits = LE_FLOWCTL_MAX_CREDITS - chan->tx_credits; 55240f1bfe4eSJohan Hedberg if (credits > max_credits) { 55250f1bfe4eSJohan Hedberg BT_ERR("LE credits overflow"); 55260f1bfe4eSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 55270f1bfe4eSJohan Hedberg 55280f1bfe4eSJohan Hedberg /* Return 0 so that we don't trigger an unnecessary 55290f1bfe4eSJohan Hedberg * command reject packet. 55300f1bfe4eSJohan Hedberg */ 55310f1bfe4eSJohan Hedberg return 0; 55320f1bfe4eSJohan Hedberg } 55330f1bfe4eSJohan Hedberg 5534fad5fc89SJohan Hedberg chan->tx_credits += credits; 5535fad5fc89SJohan Hedberg 5536fad5fc89SJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 5537fad5fc89SJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 5538fad5fc89SJohan Hedberg chan->tx_credits--; 5539fad5fc89SJohan Hedberg } 5540fad5fc89SJohan Hedberg 5541fad5fc89SJohan Hedberg if (chan->tx_credits) 5542fad5fc89SJohan Hedberg chan->ops->resume(chan); 5543fad5fc89SJohan Hedberg 5544fad5fc89SJohan Hedberg l2cap_chan_unlock(chan); 5545fad5fc89SJohan Hedberg 5546fad5fc89SJohan Hedberg return 0; 5547fad5fc89SJohan Hedberg } 5548fad5fc89SJohan Hedberg 554971fb4197SJohan Hedberg static inline int l2cap_le_command_rej(struct l2cap_conn *conn, 555071fb4197SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 555171fb4197SJohan Hedberg u8 *data) 555271fb4197SJohan Hedberg { 555371fb4197SJohan Hedberg struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 555471fb4197SJohan Hedberg struct l2cap_chan *chan; 555571fb4197SJohan Hedberg 555671fb4197SJohan Hedberg if (cmd_len < sizeof(*rej)) 555771fb4197SJohan Hedberg return -EPROTO; 555871fb4197SJohan Hedberg 555971fb4197SJohan Hedberg mutex_lock(&conn->chan_lock); 556071fb4197SJohan Hedberg 556171fb4197SJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 556271fb4197SJohan Hedberg if (!chan) 556371fb4197SJohan Hedberg goto done; 556471fb4197SJohan Hedberg 556571fb4197SJohan Hedberg l2cap_chan_lock(chan); 556671fb4197SJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 556771fb4197SJohan Hedberg l2cap_chan_unlock(chan); 556871fb4197SJohan Hedberg 556971fb4197SJohan Hedberg done: 557071fb4197SJohan Hedberg mutex_unlock(&conn->chan_lock); 557171fb4197SJohan Hedberg return 0; 557271fb4197SJohan Hedberg } 557371fb4197SJohan Hedberg 55743300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5575203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5576203e639eSJohan Hedberg u8 *data) 55773300d9a9SClaudio Takahasi { 5578b5ecba64SJohan Hedberg int err = 0; 5579b5ecba64SJohan Hedberg 55803300d9a9SClaudio Takahasi switch (cmd->code) { 55813300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 558271fb4197SJohan Hedberg l2cap_le_command_rej(conn, cmd, cmd_len, data); 5583b5ecba64SJohan Hedberg break; 55843300d9a9SClaudio Takahasi 55853300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5586b5ecba64SJohan Hedberg err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 5587b5ecba64SJohan Hedberg break; 55883300d9a9SClaudio Takahasi 55893300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 5590b5ecba64SJohan Hedberg break; 55913300d9a9SClaudio Takahasi 5592f1496deeSJohan Hedberg case L2CAP_LE_CONN_RSP: 5593f1496deeSJohan Hedberg l2cap_le_connect_rsp(conn, cmd, cmd_len, data); 5594b5ecba64SJohan Hedberg break; 5595f1496deeSJohan Hedberg 559627e2d4c8SJohan Hedberg case L2CAP_LE_CONN_REQ: 5597b5ecba64SJohan Hedberg err = l2cap_le_connect_req(conn, cmd, cmd_len, data); 5598b5ecba64SJohan Hedberg break; 559927e2d4c8SJohan Hedberg 5600fad5fc89SJohan Hedberg case L2CAP_LE_CREDITS: 5601fad5fc89SJohan Hedberg err = l2cap_le_credits(conn, cmd, cmd_len, data); 5602fad5fc89SJohan Hedberg break; 5603fad5fc89SJohan Hedberg 56043defe01aSJohan Hedberg case L2CAP_DISCONN_REQ: 5605b5ecba64SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 5606b5ecba64SJohan Hedberg break; 56073defe01aSJohan Hedberg 56083defe01aSJohan Hedberg case L2CAP_DISCONN_RSP: 56093defe01aSJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 5610b5ecba64SJohan Hedberg break; 56113defe01aSJohan Hedberg 56123300d9a9SClaudio Takahasi default: 56133300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 5614b5ecba64SJohan Hedberg err = -EINVAL; 5615b5ecba64SJohan Hedberg break; 56163300d9a9SClaudio Takahasi } 5617b5ecba64SJohan Hedberg 5618b5ecba64SJohan Hedberg return err; 56193300d9a9SClaudio Takahasi } 56203300d9a9SClaudio Takahasi 5621c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5622c5623556SJohan Hedberg struct sk_buff *skb) 5623c5623556SJohan Hedberg { 562469c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56254f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 56264f3e219dSMarcel Holtmann u16 len; 5627c5623556SJohan Hedberg int err; 5628c5623556SJohan Hedberg 562969c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 56303b166295SMarcel Holtmann goto drop; 563169c4e4e8SJohan Hedberg 56324f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 56334f3e219dSMarcel Holtmann goto drop; 5634c5623556SJohan Hedberg 56354f3e219dSMarcel Holtmann cmd = (void *) skb->data; 56364f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5637c5623556SJohan Hedberg 56384f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5639c5623556SJohan Hedberg 56404f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 56414f3e219dSMarcel Holtmann 56424f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5643c5623556SJohan Hedberg BT_DBG("corrupted command"); 56444f3e219dSMarcel Holtmann goto drop; 5645c5623556SJohan Hedberg } 5646c5623556SJohan Hedberg 5647203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5648c5623556SJohan Hedberg if (err) { 5649c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5650c5623556SJohan Hedberg 5651c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5652c5623556SJohan Hedberg 5653a521149aSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56544f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5655c5623556SJohan Hedberg sizeof(rej), &rej); 5656c5623556SJohan Hedberg } 5657c5623556SJohan Hedberg 56583b166295SMarcel Holtmann drop: 5659c5623556SJohan Hedberg kfree_skb(skb); 5660c5623556SJohan Hedberg } 5661c5623556SJohan Hedberg 56623300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 56633300d9a9SClaudio Takahasi struct sk_buff *skb) 56640a708f8fSGustavo F. Padovan { 566569c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56660a708f8fSGustavo F. Padovan u8 *data = skb->data; 56670a708f8fSGustavo F. Padovan int len = skb->len; 56680a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 56693300d9a9SClaudio Takahasi int err; 56700a708f8fSGustavo F. Padovan 56710a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 56720a708f8fSGustavo F. Padovan 567369c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 56743b166295SMarcel Holtmann goto drop; 567569c4e4e8SJohan Hedberg 56760a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 56770a708f8fSGustavo F. Padovan u16 cmd_len; 56780a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 56790a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 56800a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 56810a708f8fSGustavo F. Padovan 56820a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 56830a708f8fSGustavo F. Padovan 56842d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 56852d792818SGustavo Padovan cmd.ident); 56860a708f8fSGustavo F. Padovan 56870a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 56880a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 56890a708f8fSGustavo F. Padovan break; 56900a708f8fSGustavo F. Padovan } 56910a708f8fSGustavo F. Padovan 56923300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 56930a708f8fSGustavo F. Padovan if (err) { 5694e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 56952c6d1a2eSGustavo F. Padovan 56962c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 56970a708f8fSGustavo F. Padovan 5698a521149aSJohan Hedberg rej.reason = __constant_cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56992d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 57002d792818SGustavo Padovan sizeof(rej), &rej); 57010a708f8fSGustavo F. Padovan } 57020a708f8fSGustavo F. Padovan 57030a708f8fSGustavo F. Padovan data += cmd_len; 57040a708f8fSGustavo F. Padovan len -= cmd_len; 57050a708f8fSGustavo F. Padovan } 57060a708f8fSGustavo F. Padovan 57073b166295SMarcel Holtmann drop: 57080a708f8fSGustavo F. Padovan kfree_skb(skb); 57090a708f8fSGustavo F. Padovan } 57100a708f8fSGustavo F. Padovan 571147d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 57120a708f8fSGustavo F. Padovan { 57130a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5714e4ca6d98SAndrei Emeltchenko int hdr_size; 5715e4ca6d98SAndrei Emeltchenko 5716e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5717e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5718e4ca6d98SAndrei Emeltchenko else 5719e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 57200a708f8fSGustavo F. Padovan 572147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 572203a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 57230a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 57240a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 57250a708f8fSGustavo F. Padovan 57260a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 57270a708f8fSGustavo F. Padovan return -EBADMSG; 57280a708f8fSGustavo F. Padovan } 57290a708f8fSGustavo F. Padovan return 0; 57300a708f8fSGustavo F. Padovan } 57310a708f8fSGustavo F. Padovan 57326ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 57330a708f8fSGustavo F. Padovan { 5734e31f7633SMat Martineau struct l2cap_ctrl control; 57350a708f8fSGustavo F. Padovan 5736e31f7633SMat Martineau BT_DBG("chan %p", chan); 57370a708f8fSGustavo F. Padovan 5738e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5739e31f7633SMat Martineau control.sframe = 1; 5740e31f7633SMat Martineau control.final = 1; 5741e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5742e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 57430a708f8fSGustavo F. Padovan 5744e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5745e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5746e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57470a708f8fSGustavo F. Padovan } 57480a708f8fSGustavo F. Padovan 5749e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5750e31f7633SMat Martineau chan->unacked_frames > 0) 5751e31f7633SMat Martineau __set_retrans_timer(chan); 57520a708f8fSGustavo F. Padovan 5753e31f7633SMat Martineau /* Send pending iframes */ 5754525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 57550a708f8fSGustavo F. Padovan 5756e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5757e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5758e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5759e31f7633SMat Martineau * send it now. 5760e31f7633SMat Martineau */ 5761e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5762e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57630a708f8fSGustavo F. Padovan } 57640a708f8fSGustavo F. Padovan } 57650a708f8fSGustavo F. Padovan 57662d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 57672d792818SGustavo Padovan struct sk_buff **last_frag) 57680a708f8fSGustavo F. Padovan { 576984084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 577084084a31SMat Martineau * skb->data_len reflects only data in fragments 577184084a31SMat Martineau */ 577284084a31SMat Martineau if (!skb_has_frag_list(skb)) 577384084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 577484084a31SMat Martineau 577584084a31SMat Martineau new_frag->next = NULL; 577684084a31SMat Martineau 577784084a31SMat Martineau (*last_frag)->next = new_frag; 577884084a31SMat Martineau *last_frag = new_frag; 577984084a31SMat Martineau 578084084a31SMat Martineau skb->len += new_frag->len; 578184084a31SMat Martineau skb->data_len += new_frag->len; 578284084a31SMat Martineau skb->truesize += new_frag->truesize; 578384084a31SMat Martineau } 578484084a31SMat Martineau 57854b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 57864b51dae9SMat Martineau struct l2cap_ctrl *control) 578784084a31SMat Martineau { 578884084a31SMat Martineau int err = -EINVAL; 57890a708f8fSGustavo F. Padovan 57904b51dae9SMat Martineau switch (control->sar) { 57917e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 579284084a31SMat Martineau if (chan->sdu) 579384084a31SMat Martineau break; 57940a708f8fSGustavo F. Padovan 579580b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 579684084a31SMat Martineau break; 57970a708f8fSGustavo F. Padovan 57987e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 579984084a31SMat Martineau if (chan->sdu) 580084084a31SMat Martineau break; 58010a708f8fSGustavo F. Padovan 58026f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 580303a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 58040a708f8fSGustavo F. Padovan 580584084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 580684084a31SMat Martineau err = -EMSGSIZE; 580784084a31SMat Martineau break; 580884084a31SMat Martineau } 58090a708f8fSGustavo F. Padovan 581084084a31SMat Martineau if (skb->len >= chan->sdu_len) 581184084a31SMat Martineau break; 581284084a31SMat Martineau 581384084a31SMat Martineau chan->sdu = skb; 581484084a31SMat Martineau chan->sdu_last_frag = skb; 581584084a31SMat Martineau 581684084a31SMat Martineau skb = NULL; 581784084a31SMat Martineau err = 0; 58180a708f8fSGustavo F. Padovan break; 58190a708f8fSGustavo F. Padovan 58207e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 58216f61fd47SGustavo F. Padovan if (!chan->sdu) 582284084a31SMat Martineau break; 58230a708f8fSGustavo F. Padovan 582484084a31SMat Martineau append_skb_frag(chan->sdu, skb, 582584084a31SMat Martineau &chan->sdu_last_frag); 582684084a31SMat Martineau skb = NULL; 58270a708f8fSGustavo F. Padovan 582884084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 582984084a31SMat Martineau break; 58300a708f8fSGustavo F. Padovan 583184084a31SMat Martineau err = 0; 58320a708f8fSGustavo F. Padovan break; 58330a708f8fSGustavo F. Padovan 58347e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 58356f61fd47SGustavo F. Padovan if (!chan->sdu) 583684084a31SMat Martineau break; 58370a708f8fSGustavo F. Padovan 583884084a31SMat Martineau append_skb_frag(chan->sdu, skb, 583984084a31SMat Martineau &chan->sdu_last_frag); 584084084a31SMat Martineau skb = NULL; 58410a708f8fSGustavo F. Padovan 584284084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 584384084a31SMat Martineau break; 58440a708f8fSGustavo F. Padovan 584580b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 58460a708f8fSGustavo F. Padovan 584784084a31SMat Martineau if (!err) { 584884084a31SMat Martineau /* Reassembly complete */ 584984084a31SMat Martineau chan->sdu = NULL; 585084084a31SMat Martineau chan->sdu_last_frag = NULL; 585184084a31SMat Martineau chan->sdu_len = 0; 58520a708f8fSGustavo F. Padovan } 58530a708f8fSGustavo F. Padovan break; 58540a708f8fSGustavo F. Padovan } 58550a708f8fSGustavo F. Padovan 585684084a31SMat Martineau if (err) { 58570a708f8fSGustavo F. Padovan kfree_skb(skb); 58586f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 58596f61fd47SGustavo F. Padovan chan->sdu = NULL; 586084084a31SMat Martineau chan->sdu_last_frag = NULL; 586184084a31SMat Martineau chan->sdu_len = 0; 586284084a31SMat Martineau } 58630a708f8fSGustavo F. Padovan 586484084a31SMat Martineau return err; 58650a708f8fSGustavo F. Padovan } 58660a708f8fSGustavo F. Padovan 586732b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 586832b32735SMat Martineau { 586932b32735SMat Martineau /* Placeholder */ 587032b32735SMat Martineau return 0; 587132b32735SMat Martineau } 587232b32735SMat Martineau 5873e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 58740a708f8fSGustavo F. Padovan { 587561aa4f5bSMat Martineau u8 event; 587661aa4f5bSMat Martineau 587761aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 587861aa4f5bSMat Martineau return; 587961aa4f5bSMat Martineau 588061aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5881401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 58820a708f8fSGustavo F. Padovan } 58830a708f8fSGustavo F. Padovan 5884d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5885d2a7ac5dSMat Martineau { 588663838725SMat Martineau int err = 0; 588763838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 588863838725SMat Martineau * until a gap is encountered. 588963838725SMat Martineau */ 589063838725SMat Martineau 589163838725SMat Martineau BT_DBG("chan %p", chan); 589263838725SMat Martineau 589363838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 589463838725SMat Martineau struct sk_buff *skb; 589563838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 589663838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 589763838725SMat Martineau 589863838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 589963838725SMat Martineau 590063838725SMat Martineau if (!skb) 590163838725SMat Martineau break; 590263838725SMat Martineau 590363838725SMat Martineau skb_unlink(skb, &chan->srej_q); 590463838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 590563838725SMat Martineau err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->control); 590663838725SMat Martineau if (err) 590763838725SMat Martineau break; 590863838725SMat Martineau } 590963838725SMat Martineau 591063838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 591163838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 591263838725SMat Martineau l2cap_send_ack(chan); 591363838725SMat Martineau } 591463838725SMat Martineau 591563838725SMat Martineau return err; 5916d2a7ac5dSMat Martineau } 5917d2a7ac5dSMat Martineau 5918d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5919d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5920d2a7ac5dSMat Martineau { 5921f80842a8SMat Martineau struct sk_buff *skb; 5922f80842a8SMat Martineau 5923f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5924f80842a8SMat Martineau 5925f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5926f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59275e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5928f80842a8SMat Martineau return; 5929f80842a8SMat Martineau } 5930f80842a8SMat Martineau 5931f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5932f80842a8SMat Martineau 5933f80842a8SMat Martineau if (skb == NULL) { 5934f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5935f80842a8SMat Martineau control->reqseq); 5936f80842a8SMat Martineau return; 5937f80842a8SMat Martineau } 5938f80842a8SMat Martineau 5939f80842a8SMat Martineau if (chan->max_tx != 0 && bt_cb(skb)->control.retries >= chan->max_tx) { 5940f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59415e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5942f80842a8SMat Martineau return; 5943f80842a8SMat Martineau } 5944f80842a8SMat Martineau 5945f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5946f80842a8SMat Martineau 5947f80842a8SMat Martineau if (control->poll) { 5948f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5949f80842a8SMat Martineau 5950f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5951f80842a8SMat Martineau l2cap_retransmit(chan, control); 5952f80842a8SMat Martineau l2cap_ertm_send(chan); 5953f80842a8SMat Martineau 5954f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5955f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5956f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5957f80842a8SMat Martineau } 5958f80842a8SMat Martineau } else { 5959f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 5960f80842a8SMat Martineau 5961f80842a8SMat Martineau if (control->final) { 5962f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 5963f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 5964f80842a8SMat Martineau &chan->conn_state)) 5965f80842a8SMat Martineau l2cap_retransmit(chan, control); 5966f80842a8SMat Martineau } else { 5967f80842a8SMat Martineau l2cap_retransmit(chan, control); 5968f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5969f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5970f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5971f80842a8SMat Martineau } 5972f80842a8SMat Martineau } 5973f80842a8SMat Martineau } 5974d2a7ac5dSMat Martineau } 5975d2a7ac5dSMat Martineau 5976d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 5977d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5978d2a7ac5dSMat Martineau { 5979fcd289dfSMat Martineau struct sk_buff *skb; 5980fcd289dfSMat Martineau 5981fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 5982fcd289dfSMat Martineau 5983fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 5984fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59855e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5986fcd289dfSMat Martineau return; 5987fcd289dfSMat Martineau } 5988fcd289dfSMat Martineau 5989fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5990fcd289dfSMat Martineau 5991fcd289dfSMat Martineau if (chan->max_tx && skb && 5992fcd289dfSMat Martineau bt_cb(skb)->control.retries >= chan->max_tx) { 5993fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59945e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5995fcd289dfSMat Martineau return; 5996fcd289dfSMat Martineau } 5997fcd289dfSMat Martineau 5998fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5999fcd289dfSMat Martineau 6000fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 6001fcd289dfSMat Martineau 6002fcd289dfSMat Martineau if (control->final) { 6003fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 6004fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6005fcd289dfSMat Martineau } else { 6006fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6007fcd289dfSMat Martineau l2cap_ertm_send(chan); 6008fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 6009fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 6010fcd289dfSMat Martineau } 6011d2a7ac5dSMat Martineau } 6012d2a7ac5dSMat Martineau 60134b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 60144b51dae9SMat Martineau { 60154b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 60164b51dae9SMat Martineau 60174b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 60184b51dae9SMat Martineau chan->expected_tx_seq); 60194b51dae9SMat Martineau 60204b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 60214b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60224b51dae9SMat Martineau chan->tx_win) { 60234b51dae9SMat Martineau /* See notes below regarding "double poll" and 60244b51dae9SMat Martineau * invalid packets. 60254b51dae9SMat Martineau */ 60264b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60274b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 60284b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60294b51dae9SMat Martineau } else { 60304b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 60314b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60324b51dae9SMat Martineau } 60334b51dae9SMat Martineau } 60344b51dae9SMat Martineau 60354b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 60364b51dae9SMat Martineau BT_DBG("Expected SREJ"); 60374b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 60384b51dae9SMat Martineau } 60394b51dae9SMat Martineau 60404b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 60414b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 60424b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 60434b51dae9SMat Martineau } 60444b51dae9SMat Martineau 60454b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 60464b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 60474b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 60484b51dae9SMat Martineau } 60494b51dae9SMat Martineau } 60504b51dae9SMat Martineau 60514b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 60524b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60534b51dae9SMat Martineau chan->tx_win) { 60544b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60554b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60564b51dae9SMat Martineau } else { 60574b51dae9SMat Martineau BT_DBG("Expected"); 60584b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 60594b51dae9SMat Martineau } 60604b51dae9SMat Martineau } 60614b51dae9SMat Martineau 60624b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 60632d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 60644b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 60654b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 60664b51dae9SMat Martineau } 60674b51dae9SMat Martineau 60684b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 60694b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 60704b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 60714b51dae9SMat Martineau * the remote stack receives and processes both polls, 60724b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 60734b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 60744b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 60754b51dae9SMat Martineau * request. 60764b51dae9SMat Martineau * 60774b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 60784b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 60794b51dae9SMat Martineau * invalid frames to be safely ignored. 60804b51dae9SMat Martineau * 60814b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 60824b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 60834b51dae9SMat Martineau * causes a disconnect. 60844b51dae9SMat Martineau */ 60854b51dae9SMat Martineau 60864b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60874b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 60884b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60894b51dae9SMat Martineau } else { 60904b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60914b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60924b51dae9SMat Martineau } 60934b51dae9SMat Martineau } else { 60944b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 60954b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 60964b51dae9SMat Martineau } 60974b51dae9SMat Martineau } 60984b51dae9SMat Martineau 6099d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 6100d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6101d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6102d2a7ac5dSMat Martineau { 6103d2a7ac5dSMat Martineau int err = 0; 6104941247f9SPeter Senna Tschudin bool skb_in_use = false; 6105d2a7ac5dSMat Martineau 6106d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6107d2a7ac5dSMat Martineau event); 6108d2a7ac5dSMat Martineau 6109d2a7ac5dSMat Martineau switch (event) { 6110d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6111d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 6112d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6113d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6114d2a7ac5dSMat Martineau 6115d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6116d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 6117d2a7ac5dSMat Martineau control->txseq); 6118d2a7ac5dSMat Martineau break; 6119d2a7ac5dSMat Martineau } 6120d2a7ac5dSMat Martineau 6121d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 6122d2a7ac5dSMat Martineau control->txseq); 6123d2a7ac5dSMat Martineau 6124d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 6125941247f9SPeter Senna Tschudin skb_in_use = true; 6126d2a7ac5dSMat Martineau 6127d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 6128d2a7ac5dSMat Martineau if (err) 6129d2a7ac5dSMat Martineau break; 6130d2a7ac5dSMat Martineau 6131d2a7ac5dSMat Martineau if (control->final) { 6132d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6133d2a7ac5dSMat Martineau &chan->conn_state)) { 6134d2a7ac5dSMat Martineau control->final = 0; 6135d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6136d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6137d2a7ac5dSMat Martineau } 6138d2a7ac5dSMat Martineau } 6139d2a7ac5dSMat Martineau 6140d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 6141d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6142d2a7ac5dSMat Martineau break; 6143d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6144d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6145d2a7ac5dSMat Martineau 6146d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 6147d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 6148d2a7ac5dSMat Martineau * when local busy is exited. 6149d2a7ac5dSMat Martineau */ 6150d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6151d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 6152d2a7ac5dSMat Martineau control->txseq); 6153d2a7ac5dSMat Martineau break; 6154d2a7ac5dSMat Martineau } 6155d2a7ac5dSMat Martineau 6156d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 6157d2a7ac5dSMat Martineau * must be sent for each missing frame. The 6158d2a7ac5dSMat Martineau * current frame is stored for later use. 6159d2a7ac5dSMat Martineau */ 6160d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6161941247f9SPeter Senna Tschudin skb_in_use = true; 6162d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6163d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6164d2a7ac5dSMat Martineau 6165d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 6166d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 6167d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6168d2a7ac5dSMat Martineau 6169d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 6170d2a7ac5dSMat Martineau break; 6171d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6172d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6173d2a7ac5dSMat Martineau break; 6174d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6175d2a7ac5dSMat Martineau break; 6176d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6177d2a7ac5dSMat Martineau default: 61785e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6179d2a7ac5dSMat Martineau break; 6180d2a7ac5dSMat Martineau } 6181d2a7ac5dSMat Martineau break; 6182d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6183d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6184d2a7ac5dSMat Martineau if (control->final) { 6185d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6186d2a7ac5dSMat Martineau 6187e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 6188e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 6189d2a7ac5dSMat Martineau control->final = 0; 6190d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6191d2a7ac5dSMat Martineau } 6192d2a7ac5dSMat Martineau 6193d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6194d2a7ac5dSMat Martineau } else if (control->poll) { 6195d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 6196d2a7ac5dSMat Martineau } else { 6197d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6198d2a7ac5dSMat Martineau &chan->conn_state) && 6199d2a7ac5dSMat Martineau chan->unacked_frames) 6200d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6201d2a7ac5dSMat Martineau 6202d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6203d2a7ac5dSMat Martineau } 6204d2a7ac5dSMat Martineau break; 6205d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6206d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6207d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6208d2a7ac5dSMat Martineau if (control && control->poll) { 6209d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6210d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 6211d2a7ac5dSMat Martineau } 6212d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 6213d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 6214d2a7ac5dSMat Martineau break; 6215d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6216d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6217d2a7ac5dSMat Martineau break; 6218d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6219d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6220d2a7ac5dSMat Martineau break; 6221d2a7ac5dSMat Martineau default: 6222d2a7ac5dSMat Martineau break; 6223d2a7ac5dSMat Martineau } 6224d2a7ac5dSMat Martineau 6225d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6226d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6227d2a7ac5dSMat Martineau kfree_skb(skb); 6228d2a7ac5dSMat Martineau } 6229d2a7ac5dSMat Martineau 6230d2a7ac5dSMat Martineau return err; 6231d2a7ac5dSMat Martineau } 6232d2a7ac5dSMat Martineau 6233d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 6234d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6235d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6236d2a7ac5dSMat Martineau { 6237d2a7ac5dSMat Martineau int err = 0; 6238d2a7ac5dSMat Martineau u16 txseq = control->txseq; 6239941247f9SPeter Senna Tschudin bool skb_in_use = false; 6240d2a7ac5dSMat Martineau 6241d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6242d2a7ac5dSMat Martineau event); 6243d2a7ac5dSMat Martineau 6244d2a7ac5dSMat Martineau switch (event) { 6245d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6246d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 6247d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6248d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 6249d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6250d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6251941247f9SPeter Senna Tschudin skb_in_use = true; 6252d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6253d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6254d2a7ac5dSMat Martineau 6255d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 6256d2a7ac5dSMat Martineau break; 6257d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 6258d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 6259d2a7ac5dSMat Martineau 6260d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6261d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6262941247f9SPeter Senna Tschudin skb_in_use = true; 6263d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6264d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6265d2a7ac5dSMat Martineau 6266d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 6267d2a7ac5dSMat Martineau if (err) 6268d2a7ac5dSMat Martineau break; 6269d2a7ac5dSMat Martineau 6270d2a7ac5dSMat Martineau break; 6271d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6272d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 6273d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 6274d2a7ac5dSMat Martineau * the missing frames. 6275d2a7ac5dSMat Martineau */ 6276d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6277941247f9SPeter Senna Tschudin skb_in_use = true; 6278d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6279d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6280d2a7ac5dSMat Martineau 6281d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6282d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6283d2a7ac5dSMat Martineau break; 6284d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 6285d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 6286d2a7ac5dSMat Martineau * some expected retransmitted frames are 6287d2a7ac5dSMat Martineau * missing. Request retransmission of missing 6288d2a7ac5dSMat Martineau * SREJ'd frames. 6289d2a7ac5dSMat Martineau */ 6290d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6291941247f9SPeter Senna Tschudin skb_in_use = true; 6292d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6293d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6294d2a7ac5dSMat Martineau 6295d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6296d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 6297d2a7ac5dSMat Martineau break; 6298d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 6299d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 6300d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6301d2a7ac5dSMat Martineau break; 6302d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6303d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6304d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6305d2a7ac5dSMat Martineau */ 6306d2a7ac5dSMat Martineau break; 6307d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6308d2a7ac5dSMat Martineau break; 6309d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6310d2a7ac5dSMat Martineau default: 63115e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6312d2a7ac5dSMat Martineau break; 6313d2a7ac5dSMat Martineau } 6314d2a7ac5dSMat Martineau break; 6315d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6316d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6317d2a7ac5dSMat Martineau if (control->final) { 6318d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6319d2a7ac5dSMat Martineau 6320d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6321d2a7ac5dSMat Martineau &chan->conn_state)) { 6322d2a7ac5dSMat Martineau control->final = 0; 6323d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6324d2a7ac5dSMat Martineau } 6325d2a7ac5dSMat Martineau 6326d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6327d2a7ac5dSMat Martineau } else if (control->poll) { 6328d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6329d2a7ac5dSMat Martineau &chan->conn_state) && 6330d2a7ac5dSMat Martineau chan->unacked_frames) { 6331d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6332d2a7ac5dSMat Martineau } 6333d2a7ac5dSMat Martineau 6334d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6335d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6336d2a7ac5dSMat Martineau } else { 6337d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6338d2a7ac5dSMat Martineau &chan->conn_state) && 6339d2a7ac5dSMat Martineau chan->unacked_frames) 6340d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6341d2a7ac5dSMat Martineau 6342d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6343d2a7ac5dSMat Martineau } 6344d2a7ac5dSMat Martineau break; 6345d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6346d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6347d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6348d2a7ac5dSMat Martineau if (control->poll) { 6349d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6350d2a7ac5dSMat Martineau } else { 6351d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6352d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6353d2a7ac5dSMat Martineau rr_control.sframe = 1; 6354d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6355d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6356d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6357d2a7ac5dSMat Martineau } 6358d2a7ac5dSMat Martineau 6359d2a7ac5dSMat Martineau break; 6360d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6361d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6362d2a7ac5dSMat Martineau break; 6363d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6364d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6365d2a7ac5dSMat Martineau break; 6366d2a7ac5dSMat Martineau } 6367d2a7ac5dSMat Martineau 6368d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6369d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6370d2a7ac5dSMat Martineau kfree_skb(skb); 6371d2a7ac5dSMat Martineau } 6372d2a7ac5dSMat Martineau 6373d2a7ac5dSMat Martineau return err; 6374d2a7ac5dSMat Martineau } 6375d2a7ac5dSMat Martineau 637632b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 637732b32735SMat Martineau { 637832b32735SMat Martineau BT_DBG("chan %p", chan); 637932b32735SMat Martineau 638032b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 638132b32735SMat Martineau 638232b32735SMat Martineau if (chan->hs_hcon) 638332b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 638432b32735SMat Martineau else 638532b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 638632b32735SMat Martineau 638732b32735SMat Martineau return l2cap_resegment(chan); 638832b32735SMat Martineau } 638932b32735SMat Martineau 639032b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 639132b32735SMat Martineau struct l2cap_ctrl *control, 639232b32735SMat Martineau struct sk_buff *skb, u8 event) 639332b32735SMat Martineau { 639432b32735SMat Martineau int err; 639532b32735SMat Martineau 639632b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 639732b32735SMat Martineau event); 639832b32735SMat Martineau 639932b32735SMat Martineau if (!control->poll) 640032b32735SMat Martineau return -EPROTO; 640132b32735SMat Martineau 640232b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 640332b32735SMat Martineau 640432b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 640532b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 640632b32735SMat Martineau else 640732b32735SMat Martineau chan->tx_send_head = NULL; 640832b32735SMat Martineau 640932b32735SMat Martineau /* Rewind next_tx_seq to the point expected 641032b32735SMat Martineau * by the receiver. 641132b32735SMat Martineau */ 641232b32735SMat Martineau chan->next_tx_seq = control->reqseq; 641332b32735SMat Martineau chan->unacked_frames = 0; 641432b32735SMat Martineau 641532b32735SMat Martineau err = l2cap_finish_move(chan); 641632b32735SMat Martineau if (err) 641732b32735SMat Martineau return err; 641832b32735SMat Martineau 641932b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 642032b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 642132b32735SMat Martineau 642232b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 642332b32735SMat Martineau return -EPROTO; 642432b32735SMat Martineau 642532b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 642632b32735SMat Martineau } 642732b32735SMat Martineau 642832b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 642932b32735SMat Martineau struct l2cap_ctrl *control, 643032b32735SMat Martineau struct sk_buff *skb, u8 event) 643132b32735SMat Martineau { 643232b32735SMat Martineau int err; 643332b32735SMat Martineau 643432b32735SMat Martineau if (!control->final) 643532b32735SMat Martineau return -EPROTO; 643632b32735SMat Martineau 643732b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 643832b32735SMat Martineau 643932b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 644032b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 644132b32735SMat Martineau 644232b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 644332b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 644432b32735SMat Martineau else 644532b32735SMat Martineau chan->tx_send_head = NULL; 644632b32735SMat Martineau 644732b32735SMat Martineau /* Rewind next_tx_seq to the point expected 644832b32735SMat Martineau * by the receiver. 644932b32735SMat Martineau */ 645032b32735SMat Martineau chan->next_tx_seq = control->reqseq; 645132b32735SMat Martineau chan->unacked_frames = 0; 645232b32735SMat Martineau 645332b32735SMat Martineau if (chan->hs_hcon) 645432b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 645532b32735SMat Martineau else 645632b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 645732b32735SMat Martineau 645832b32735SMat Martineau err = l2cap_resegment(chan); 645932b32735SMat Martineau 646032b32735SMat Martineau if (!err) 646132b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 646232b32735SMat Martineau 646332b32735SMat Martineau return err; 646432b32735SMat Martineau } 646532b32735SMat Martineau 6466d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6467d2a7ac5dSMat Martineau { 6468d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6469d2a7ac5dSMat Martineau u16 unacked; 6470d2a7ac5dSMat Martineau 6471d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6472d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6473d2a7ac5dSMat Martineau } 6474d2a7ac5dSMat Martineau 6475cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6476cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 64770a708f8fSGustavo F. Padovan { 6478d2a7ac5dSMat Martineau int err = 0; 6479d2a7ac5dSMat Martineau 6480d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6481d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6482d2a7ac5dSMat Martineau 6483d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6484d2a7ac5dSMat Martineau switch (chan->rx_state) { 6485d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6486d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6487d2a7ac5dSMat Martineau break; 6488d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6489d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6490d2a7ac5dSMat Martineau event); 6491d2a7ac5dSMat Martineau break; 649232b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 649332b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 649432b32735SMat Martineau break; 649532b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 649632b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 649732b32735SMat Martineau break; 6498d2a7ac5dSMat Martineau default: 6499d2a7ac5dSMat Martineau /* shut it down */ 6500d2a7ac5dSMat Martineau break; 6501d2a7ac5dSMat Martineau } 6502d2a7ac5dSMat Martineau } else { 6503d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6504d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6505d2a7ac5dSMat Martineau chan->expected_ack_seq); 65065e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6507d2a7ac5dSMat Martineau } 6508d2a7ac5dSMat Martineau 6509d2a7ac5dSMat Martineau return err; 6510cec8ab6eSMat Martineau } 6511cec8ab6eSMat Martineau 6512cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6513cec8ab6eSMat Martineau struct sk_buff *skb) 6514cec8ab6eSMat Martineau { 65154b51dae9SMat Martineau int err = 0; 65164b51dae9SMat Martineau 65174b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 65184b51dae9SMat Martineau chan->rx_state); 65194b51dae9SMat Martineau 65204b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 65214b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 65224b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 65234b51dae9SMat Martineau 65244b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 65254b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 65264b51dae9SMat Martineau 65274b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 65284b51dae9SMat Martineau 65294b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 65304b51dae9SMat Martineau } else { 65314b51dae9SMat Martineau if (chan->sdu) { 65324b51dae9SMat Martineau kfree_skb(chan->sdu); 65334b51dae9SMat Martineau chan->sdu = NULL; 65344b51dae9SMat Martineau } 65354b51dae9SMat Martineau chan->sdu_last_frag = NULL; 65364b51dae9SMat Martineau chan->sdu_len = 0; 65374b51dae9SMat Martineau 65384b51dae9SMat Martineau if (skb) { 65394b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 65404b51dae9SMat Martineau kfree_skb(skb); 65414b51dae9SMat Martineau } 65424b51dae9SMat Martineau } 65434b51dae9SMat Martineau 65444b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 65454b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 65464b51dae9SMat Martineau 65474b51dae9SMat Martineau return err; 6548cec8ab6eSMat Martineau } 6549cec8ab6eSMat Martineau 6550cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6551cec8ab6eSMat Martineau { 6552cec8ab6eSMat Martineau struct l2cap_ctrl *control = &bt_cb(skb)->control; 6553cec8ab6eSMat Martineau u16 len; 6554cec8ab6eSMat Martineau u8 event; 65550a708f8fSGustavo F. Padovan 6556b76bbd66SMat Martineau __unpack_control(chan, skb); 6557b76bbd66SMat Martineau 65580a708f8fSGustavo F. Padovan len = skb->len; 65590a708f8fSGustavo F. Padovan 65600a708f8fSGustavo F. Padovan /* 65610a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 65620a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6563cec8ab6eSMat Martineau * procedures and ask for retransmission. 65640a708f8fSGustavo F. Padovan */ 656547d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 65660a708f8fSGustavo F. Padovan goto drop; 65670a708f8fSGustavo F. Padovan 6568cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 656903a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 65700a708f8fSGustavo F. Padovan 657147d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 657203a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 65730a708f8fSGustavo F. Padovan 657447d1ec61SGustavo F. Padovan if (len > chan->mps) { 65755e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 65760a708f8fSGustavo F. Padovan goto drop; 65770a708f8fSGustavo F. Padovan } 65780a708f8fSGustavo F. Padovan 6579cec8ab6eSMat Martineau if (!control->sframe) { 6580cec8ab6eSMat Martineau int err; 65810a708f8fSGustavo F. Padovan 6582cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6583cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6584cec8ab6eSMat Martineau control->txseq); 6585836be934SAndrei Emeltchenko 6586cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6587cec8ab6eSMat Martineau * valid in TX WAIT_F 6588cec8ab6eSMat Martineau */ 6589cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 65900a708f8fSGustavo F. Padovan goto drop; 65910a708f8fSGustavo F. Padovan 6592cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6593cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6594cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 65950a708f8fSGustavo F. Padovan } else { 6596cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6597cec8ab6eSMat Martineau } 6598cec8ab6eSMat Martineau 6599cec8ab6eSMat Martineau if (err) 66005e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6601cec8ab6eSMat Martineau } else { 6602cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6603cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6604cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6605cec8ab6eSMat Martineau }; 6606cec8ab6eSMat Martineau 6607cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6608cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6609cec8ab6eSMat Martineau goto drop; 6610cec8ab6eSMat Martineau 6611cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6612cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6613cec8ab6eSMat Martineau control->super); 6614cec8ab6eSMat Martineau 66150a708f8fSGustavo F. Padovan if (len != 0) { 66161bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 66175e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66180a708f8fSGustavo F. Padovan goto drop; 66190a708f8fSGustavo F. Padovan } 66200a708f8fSGustavo F. Padovan 6621cec8ab6eSMat Martineau /* Validate F and P bits */ 6622cec8ab6eSMat Martineau if (control->final && (control->poll || 6623cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6624cec8ab6eSMat Martineau goto drop; 6625cec8ab6eSMat Martineau 6626cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6627cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 66285e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66290a708f8fSGustavo F. Padovan } 66300a708f8fSGustavo F. Padovan 66310a708f8fSGustavo F. Padovan return 0; 66320a708f8fSGustavo F. Padovan 66330a708f8fSGustavo F. Padovan drop: 66340a708f8fSGustavo F. Padovan kfree_skb(skb); 66350a708f8fSGustavo F. Padovan return 0; 66360a708f8fSGustavo F. Padovan } 66370a708f8fSGustavo F. Padovan 6638b1c325c2SJohan Hedberg static void l2cap_chan_le_send_credits(struct l2cap_chan *chan) 6639b1c325c2SJohan Hedberg { 6640b1c325c2SJohan Hedberg struct l2cap_conn *conn = chan->conn; 6641b1c325c2SJohan Hedberg struct l2cap_le_credits pkt; 6642b1c325c2SJohan Hedberg u16 return_credits; 6643b1c325c2SJohan Hedberg 6644b1c325c2SJohan Hedberg /* We return more credits to the sender only after the amount of 6645b1c325c2SJohan Hedberg * credits falls below half of the initial amount. 6646b1c325c2SJohan Hedberg */ 6647f15b8ecfSJohan Hedberg if (chan->rx_credits >= (le_max_credits + 1) / 2) 6648b1c325c2SJohan Hedberg return; 6649b1c325c2SJohan Hedberg 6650f15b8ecfSJohan Hedberg return_credits = le_max_credits - chan->rx_credits; 6651b1c325c2SJohan Hedberg 6652b1c325c2SJohan Hedberg BT_DBG("chan %p returning %u credits to sender", chan, return_credits); 6653b1c325c2SJohan Hedberg 6654b1c325c2SJohan Hedberg chan->rx_credits += return_credits; 6655b1c325c2SJohan Hedberg 6656b1c325c2SJohan Hedberg pkt.cid = cpu_to_le16(chan->scid); 6657b1c325c2SJohan Hedberg pkt.credits = cpu_to_le16(return_credits); 6658b1c325c2SJohan Hedberg 6659b1c325c2SJohan Hedberg chan->ident = l2cap_get_ident(conn); 6660b1c325c2SJohan Hedberg 6661b1c325c2SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CREDITS, sizeof(pkt), &pkt); 6662b1c325c2SJohan Hedberg } 6663b1c325c2SJohan Hedberg 6664fad5fc89SJohan Hedberg static int l2cap_le_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6665fad5fc89SJohan Hedberg { 6666aac23bf6SJohan Hedberg int err; 6667fad5fc89SJohan Hedberg 6668aac23bf6SJohan Hedberg if (!chan->rx_credits) { 6669aac23bf6SJohan Hedberg BT_ERR("No credits to receive LE L2CAP data"); 6670dfd9774cSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 6671fad5fc89SJohan Hedberg return -ENOBUFS; 6672aac23bf6SJohan Hedberg } 6673aac23bf6SJohan Hedberg 6674aac23bf6SJohan Hedberg if (chan->imtu < skb->len) { 6675aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP PDU"); 6676aac23bf6SJohan Hedberg return -ENOBUFS; 6677aac23bf6SJohan Hedberg } 6678fad5fc89SJohan Hedberg 6679fad5fc89SJohan Hedberg chan->rx_credits--; 6680fad5fc89SJohan Hedberg BT_DBG("rx_credits %u -> %u", chan->rx_credits + 1, chan->rx_credits); 6681fad5fc89SJohan Hedberg 6682fad5fc89SJohan Hedberg l2cap_chan_le_send_credits(chan); 6683fad5fc89SJohan Hedberg 6684aac23bf6SJohan Hedberg err = 0; 6685aac23bf6SJohan Hedberg 6686aac23bf6SJohan Hedberg if (!chan->sdu) { 6687aac23bf6SJohan Hedberg u16 sdu_len; 6688aac23bf6SJohan Hedberg 6689aac23bf6SJohan Hedberg sdu_len = get_unaligned_le16(skb->data); 6690aac23bf6SJohan Hedberg skb_pull(skb, L2CAP_SDULEN_SIZE); 6691aac23bf6SJohan Hedberg 6692aac23bf6SJohan Hedberg BT_DBG("Start of new SDU. sdu_len %u skb->len %u imtu %u", 6693aac23bf6SJohan Hedberg sdu_len, skb->len, chan->imtu); 6694aac23bf6SJohan Hedberg 6695aac23bf6SJohan Hedberg if (sdu_len > chan->imtu) { 6696aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP SDU length received"); 6697aac23bf6SJohan Hedberg err = -EMSGSIZE; 6698aac23bf6SJohan Hedberg goto failed; 6699aac23bf6SJohan Hedberg } 6700aac23bf6SJohan Hedberg 6701aac23bf6SJohan Hedberg if (skb->len > sdu_len) { 6702aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6703aac23bf6SJohan Hedberg err = -EINVAL; 6704aac23bf6SJohan Hedberg goto failed; 6705aac23bf6SJohan Hedberg } 6706aac23bf6SJohan Hedberg 6707aac23bf6SJohan Hedberg if (skb->len == sdu_len) 6708fad5fc89SJohan Hedberg return chan->ops->recv(chan, skb); 6709aac23bf6SJohan Hedberg 6710aac23bf6SJohan Hedberg chan->sdu = skb; 6711aac23bf6SJohan Hedberg chan->sdu_len = sdu_len; 6712aac23bf6SJohan Hedberg chan->sdu_last_frag = skb; 6713aac23bf6SJohan Hedberg 6714aac23bf6SJohan Hedberg return 0; 6715aac23bf6SJohan Hedberg } 6716aac23bf6SJohan Hedberg 6717aac23bf6SJohan Hedberg BT_DBG("SDU fragment. chan->sdu->len %u skb->len %u chan->sdu_len %u", 6718aac23bf6SJohan Hedberg chan->sdu->len, skb->len, chan->sdu_len); 6719aac23bf6SJohan Hedberg 6720aac23bf6SJohan Hedberg if (chan->sdu->len + skb->len > chan->sdu_len) { 6721aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6722aac23bf6SJohan Hedberg err = -EINVAL; 6723aac23bf6SJohan Hedberg goto failed; 6724aac23bf6SJohan Hedberg } 6725aac23bf6SJohan Hedberg 6726aac23bf6SJohan Hedberg append_skb_frag(chan->sdu, skb, &chan->sdu_last_frag); 6727aac23bf6SJohan Hedberg skb = NULL; 6728aac23bf6SJohan Hedberg 6729aac23bf6SJohan Hedberg if (chan->sdu->len == chan->sdu_len) { 6730aac23bf6SJohan Hedberg err = chan->ops->recv(chan, chan->sdu); 6731aac23bf6SJohan Hedberg if (!err) { 6732aac23bf6SJohan Hedberg chan->sdu = NULL; 6733aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6734aac23bf6SJohan Hedberg chan->sdu_len = 0; 6735aac23bf6SJohan Hedberg } 6736aac23bf6SJohan Hedberg } 6737aac23bf6SJohan Hedberg 6738aac23bf6SJohan Hedberg failed: 6739aac23bf6SJohan Hedberg if (err) { 6740aac23bf6SJohan Hedberg kfree_skb(skb); 6741aac23bf6SJohan Hedberg kfree_skb(chan->sdu); 6742aac23bf6SJohan Hedberg chan->sdu = NULL; 6743aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6744aac23bf6SJohan Hedberg chan->sdu_len = 0; 6745aac23bf6SJohan Hedberg } 6746aac23bf6SJohan Hedberg 6747aac23bf6SJohan Hedberg /* We can't return an error here since we took care of the skb 6748aac23bf6SJohan Hedberg * freeing internally. An error return would cause the caller to 6749aac23bf6SJohan Hedberg * do a double-free of the skb. 6750aac23bf6SJohan Hedberg */ 6751aac23bf6SJohan Hedberg return 0; 6752fad5fc89SJohan Hedberg } 6753fad5fc89SJohan Hedberg 675413ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 675513ca56e0SAndrei Emeltchenko struct sk_buff *skb) 67560a708f8fSGustavo F. Padovan { 675748454079SGustavo F. Padovan struct l2cap_chan *chan; 67580a708f8fSGustavo F. Padovan 6759baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 676048454079SGustavo F. Padovan if (!chan) { 676197e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 676297e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 676397e8e89dSAndrei Emeltchenko if (!chan) { 676497e8e89dSAndrei Emeltchenko kfree_skb(skb); 676513ca56e0SAndrei Emeltchenko return; 676697e8e89dSAndrei Emeltchenko } 676797e8e89dSAndrei Emeltchenko 676897e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 676997e8e89dSAndrei Emeltchenko } else { 67700a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 67716be36555SAndrei Emeltchenko /* Drop packet and return */ 67723379013bSDan Carpenter kfree_skb(skb); 677313ca56e0SAndrei Emeltchenko return; 67740a708f8fSGustavo F. Padovan } 677597e8e89dSAndrei Emeltchenko } 67760a708f8fSGustavo F. Padovan 677749208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 67780a708f8fSGustavo F. Padovan 677989bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 67800a708f8fSGustavo F. Padovan goto drop; 67810a708f8fSGustavo F. Padovan 67820c1bc5c6SGustavo F. Padovan switch (chan->mode) { 678338319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 6784fad5fc89SJohan Hedberg if (l2cap_le_data_rcv(chan, skb) < 0) 6785fad5fc89SJohan Hedberg goto drop; 6786fad5fc89SJohan Hedberg 6787fad5fc89SJohan Hedberg goto done; 6788fad5fc89SJohan Hedberg 67890a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 67900a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 67910a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 67920a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 67930a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 67940a708f8fSGustavo F. Padovan 67952c96e03dSSzymon Janc if (chan->imtu < skb->len) { 67962c96e03dSSzymon Janc BT_ERR("Dropping L2CAP data: receive buffer overflow"); 67970a708f8fSGustavo F. Padovan goto drop; 67982c96e03dSSzymon Janc } 67990a708f8fSGustavo F. Padovan 680080b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68010a708f8fSGustavo F. Padovan goto done; 68020a708f8fSGustavo F. Padovan break; 68030a708f8fSGustavo F. Padovan 68040a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 68050a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6806cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 68070a708f8fSGustavo F. Padovan goto done; 68080a708f8fSGustavo F. Padovan 68090a708f8fSGustavo F. Padovan default: 68100c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 68110a708f8fSGustavo F. Padovan break; 68120a708f8fSGustavo F. Padovan } 68130a708f8fSGustavo F. Padovan 68140a708f8fSGustavo F. Padovan drop: 68150a708f8fSGustavo F. Padovan kfree_skb(skb); 68160a708f8fSGustavo F. Padovan 68170a708f8fSGustavo F. Padovan done: 68186be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 68190a708f8fSGustavo F. Padovan } 68200a708f8fSGustavo F. Padovan 682184104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 682284104b24SAndrei Emeltchenko struct sk_buff *skb) 68230a708f8fSGustavo F. Padovan { 6824ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 682523691d75SGustavo F. Padovan struct l2cap_chan *chan; 68260a708f8fSGustavo F. Padovan 6827ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6828ae4fd2d3SMarcel Holtmann goto drop; 6829ae4fd2d3SMarcel Holtmann 6830bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6831bf20fd4eSJohan Hedberg ACL_LINK); 683223691d75SGustavo F. Padovan if (!chan) 68330a708f8fSGustavo F. Padovan goto drop; 68340a708f8fSGustavo F. Padovan 68355b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68360a708f8fSGustavo F. Padovan 683789bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 68380a708f8fSGustavo F. Padovan goto drop; 68390a708f8fSGustavo F. Padovan 6840e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68410a708f8fSGustavo F. Padovan goto drop; 68420a708f8fSGustavo F. Padovan 68432edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 684406ae3314SMarcel Holtmann bacpy(&bt_cb(skb)->bdaddr, &hcon->dst); 68452edf870dSMarcel Holtmann bt_cb(skb)->psm = psm; 68462edf870dSMarcel Holtmann 684780b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 684884104b24SAndrei Emeltchenko return; 68490a708f8fSGustavo F. Padovan 68500a708f8fSGustavo F. Padovan drop: 68510a708f8fSGustavo F. Padovan kfree_skb(skb); 68520a708f8fSGustavo F. Padovan } 68530a708f8fSGustavo F. Padovan 685472f78356SMarcel Holtmann static void l2cap_att_channel(struct l2cap_conn *conn, 6855d9b88702SAndrei Emeltchenko struct sk_buff *skb) 68569f69bda6SGustavo F. Padovan { 6857b99707d7SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 685823691d75SGustavo F. Padovan struct l2cap_chan *chan; 68599f69bda6SGustavo F. Padovan 6860b99707d7SMarcel Holtmann if (hcon->type != LE_LINK) 6861b99707d7SMarcel Holtmann goto drop; 6862b99707d7SMarcel Holtmann 6863af1c0134SJohan Hedberg chan = l2cap_global_chan_by_scid(BT_CONNECTED, L2CAP_CID_ATT, 686406ae3314SMarcel Holtmann &hcon->src, &hcon->dst); 686523691d75SGustavo F. Padovan if (!chan) 68669f69bda6SGustavo F. Padovan goto drop; 68679f69bda6SGustavo F. Padovan 68685b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68699f69bda6SGustavo F. Padovan 6870cc8dba2bSMarcel Holtmann if (hci_blacklist_lookup(hcon->hdev, &hcon->dst, hcon->dst_type)) 6871cc8dba2bSMarcel Holtmann goto drop; 6872cc8dba2bSMarcel Holtmann 6873e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68749f69bda6SGustavo F. Padovan goto drop; 68759f69bda6SGustavo F. Padovan 687680b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68776810fca7SAndrei Emeltchenko return; 68789f69bda6SGustavo F. Padovan 68799f69bda6SGustavo F. Padovan drop: 68809f69bda6SGustavo F. Padovan kfree_skb(skb); 68819f69bda6SGustavo F. Padovan } 68829f69bda6SGustavo F. Padovan 68830a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 68840a708f8fSGustavo F. Padovan { 68850a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 688661a939c6SJohan Hedberg struct hci_conn *hcon = conn->hcon; 68870a708f8fSGustavo F. Padovan u16 cid, len; 68880a708f8fSGustavo F. Padovan __le16 psm; 68890a708f8fSGustavo F. Padovan 689061a939c6SJohan Hedberg if (hcon->state != BT_CONNECTED) { 689161a939c6SJohan Hedberg BT_DBG("queueing pending rx skb"); 689261a939c6SJohan Hedberg skb_queue_tail(&conn->pending_rx, skb); 689361a939c6SJohan Hedberg return; 689461a939c6SJohan Hedberg } 689561a939c6SJohan Hedberg 68960a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 68970a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 68980a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 68990a708f8fSGustavo F. Padovan 69000a708f8fSGustavo F. Padovan if (len != skb->len) { 69010a708f8fSGustavo F. Padovan kfree_skb(skb); 69020a708f8fSGustavo F. Padovan return; 69030a708f8fSGustavo F. Padovan } 69040a708f8fSGustavo F. Padovan 69050a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 69060a708f8fSGustavo F. Padovan 69070a708f8fSGustavo F. Padovan switch (cid) { 69080a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 69090a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 69100a708f8fSGustavo F. Padovan break; 69110a708f8fSGustavo F. Padovan 69120a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6913097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 69140181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 69150a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 69160a708f8fSGustavo F. Padovan break; 69170a708f8fSGustavo F. Padovan 6918073d1cf3SJohan Hedberg case L2CAP_CID_ATT: 691972f78356SMarcel Holtmann l2cap_att_channel(conn, skb); 69209f69bda6SGustavo F. Padovan break; 69219f69bda6SGustavo F. Padovan 6922a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6923a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6924a2877629SMarcel Holtmann break; 6925a2877629SMarcel Holtmann 6926b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 6927b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 6928b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 6929b501d6a1SAnderson Briglia break; 6930b501d6a1SAnderson Briglia 693118722c24SJukka Rissanen case L2CAP_FC_6LOWPAN: 693218722c24SJukka Rissanen bt_6lowpan_recv(conn, skb); 693318722c24SJukka Rissanen break; 693418722c24SJukka Rissanen 69350a708f8fSGustavo F. Padovan default: 69360a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 69370a708f8fSGustavo F. Padovan break; 69380a708f8fSGustavo F. Padovan } 69390a708f8fSGustavo F. Padovan } 69400a708f8fSGustavo F. Padovan 694161a939c6SJohan Hedberg static void process_pending_rx(struct work_struct *work) 694261a939c6SJohan Hedberg { 694361a939c6SJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 694461a939c6SJohan Hedberg pending_rx_work); 694561a939c6SJohan Hedberg struct sk_buff *skb; 694661a939c6SJohan Hedberg 694761a939c6SJohan Hedberg BT_DBG(""); 694861a939c6SJohan Hedberg 694961a939c6SJohan Hedberg while ((skb = skb_dequeue(&conn->pending_rx))) 695061a939c6SJohan Hedberg l2cap_recv_frame(conn, skb); 695161a939c6SJohan Hedberg } 695261a939c6SJohan Hedberg 6953162b49e7SJohan Hedberg static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 6954162b49e7SJohan Hedberg { 6955162b49e7SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 6956162b49e7SJohan Hedberg struct hci_chan *hchan; 6957162b49e7SJohan Hedberg 6958162b49e7SJohan Hedberg if (conn) 6959162b49e7SJohan Hedberg return conn; 6960162b49e7SJohan Hedberg 6961162b49e7SJohan Hedberg hchan = hci_chan_create(hcon); 6962162b49e7SJohan Hedberg if (!hchan) 6963162b49e7SJohan Hedberg return NULL; 6964162b49e7SJohan Hedberg 6965162b49e7SJohan Hedberg conn = kzalloc(sizeof(struct l2cap_conn), GFP_KERNEL); 6966162b49e7SJohan Hedberg if (!conn) { 6967162b49e7SJohan Hedberg hci_chan_del(hchan); 6968162b49e7SJohan Hedberg return NULL; 6969162b49e7SJohan Hedberg } 6970162b49e7SJohan Hedberg 6971162b49e7SJohan Hedberg kref_init(&conn->ref); 6972162b49e7SJohan Hedberg hcon->l2cap_data = conn; 6973162b49e7SJohan Hedberg conn->hcon = hcon; 6974162b49e7SJohan Hedberg hci_conn_get(conn->hcon); 6975162b49e7SJohan Hedberg conn->hchan = hchan; 6976162b49e7SJohan Hedberg 6977162b49e7SJohan Hedberg BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 6978162b49e7SJohan Hedberg 6979162b49e7SJohan Hedberg switch (hcon->type) { 6980162b49e7SJohan Hedberg case LE_LINK: 6981162b49e7SJohan Hedberg if (hcon->hdev->le_mtu) { 6982162b49e7SJohan Hedberg conn->mtu = hcon->hdev->le_mtu; 6983162b49e7SJohan Hedberg break; 6984162b49e7SJohan Hedberg } 6985162b49e7SJohan Hedberg /* fall through */ 6986162b49e7SJohan Hedberg default: 6987162b49e7SJohan Hedberg conn->mtu = hcon->hdev->acl_mtu; 6988162b49e7SJohan Hedberg break; 6989162b49e7SJohan Hedberg } 6990162b49e7SJohan Hedberg 6991162b49e7SJohan Hedberg conn->feat_mask = 0; 6992162b49e7SJohan Hedberg 6993162b49e7SJohan Hedberg if (hcon->type == ACL_LINK) 6994162b49e7SJohan Hedberg conn->hs_enabled = test_bit(HCI_HS_ENABLED, 6995162b49e7SJohan Hedberg &hcon->hdev->dev_flags); 6996162b49e7SJohan Hedberg 6997162b49e7SJohan Hedberg spin_lock_init(&conn->lock); 6998162b49e7SJohan Hedberg mutex_init(&conn->chan_lock); 6999162b49e7SJohan Hedberg 7000162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->chan_l); 7001162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->users); 7002162b49e7SJohan Hedberg 7003162b49e7SJohan Hedberg if (hcon->type == LE_LINK) 7004162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 7005162b49e7SJohan Hedberg else 7006162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 7007162b49e7SJohan Hedberg 700861a939c6SJohan Hedberg skb_queue_head_init(&conn->pending_rx); 700961a939c6SJohan Hedberg INIT_WORK(&conn->pending_rx_work, process_pending_rx); 701061a939c6SJohan Hedberg 7011162b49e7SJohan Hedberg conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 7012162b49e7SJohan Hedberg 7013162b49e7SJohan Hedberg return conn; 7014162b49e7SJohan Hedberg } 7015162b49e7SJohan Hedberg 7016162b49e7SJohan Hedberg static bool is_valid_psm(u16 psm, u8 dst_type) { 7017162b49e7SJohan Hedberg if (!psm) 7018162b49e7SJohan Hedberg return false; 7019162b49e7SJohan Hedberg 7020162b49e7SJohan Hedberg if (bdaddr_type_is_le(dst_type)) 7021162b49e7SJohan Hedberg return (psm <= 0x00ff); 7022162b49e7SJohan Hedberg 7023162b49e7SJohan Hedberg /* PSM must be odd and lsb of upper byte must be 0 */ 7024162b49e7SJohan Hedberg return ((psm & 0x0101) == 0x0001); 7025162b49e7SJohan Hedberg } 7026162b49e7SJohan Hedberg 7027162b49e7SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 7028162b49e7SJohan Hedberg bdaddr_t *dst, u8 dst_type) 7029162b49e7SJohan Hedberg { 7030162b49e7SJohan Hedberg struct l2cap_conn *conn; 7031162b49e7SJohan Hedberg struct hci_conn *hcon; 7032162b49e7SJohan Hedberg struct hci_dev *hdev; 7033162b49e7SJohan Hedberg __u8 auth_type; 7034162b49e7SJohan Hedberg int err; 7035162b49e7SJohan Hedberg 7036162b49e7SJohan Hedberg BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 7037162b49e7SJohan Hedberg dst_type, __le16_to_cpu(psm)); 7038162b49e7SJohan Hedberg 7039162b49e7SJohan Hedberg hdev = hci_get_route(dst, &chan->src); 7040162b49e7SJohan Hedberg if (!hdev) 7041162b49e7SJohan Hedberg return -EHOSTUNREACH; 7042162b49e7SJohan Hedberg 7043162b49e7SJohan Hedberg hci_dev_lock(hdev); 7044162b49e7SJohan Hedberg 7045162b49e7SJohan Hedberg l2cap_chan_lock(chan); 7046162b49e7SJohan Hedberg 7047162b49e7SJohan Hedberg if (!is_valid_psm(__le16_to_cpu(psm), dst_type) && !cid && 7048162b49e7SJohan Hedberg chan->chan_type != L2CAP_CHAN_RAW) { 7049162b49e7SJohan Hedberg err = -EINVAL; 7050162b49e7SJohan Hedberg goto done; 7051162b49e7SJohan Hedberg } 7052162b49e7SJohan Hedberg 705321626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !psm) { 705421626e62SJohan Hedberg err = -EINVAL; 705521626e62SJohan Hedberg goto done; 705621626e62SJohan Hedberg } 705721626e62SJohan Hedberg 705821626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED && !cid) { 7059162b49e7SJohan Hedberg err = -EINVAL; 7060162b49e7SJohan Hedberg goto done; 7061162b49e7SJohan Hedberg } 7062162b49e7SJohan Hedberg 7063162b49e7SJohan Hedberg switch (chan->mode) { 7064162b49e7SJohan Hedberg case L2CAP_MODE_BASIC: 7065162b49e7SJohan Hedberg break; 7066162b49e7SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 7067162b49e7SJohan Hedberg l2cap_le_flowctl_init(chan); 7068162b49e7SJohan Hedberg break; 7069162b49e7SJohan Hedberg case L2CAP_MODE_ERTM: 7070162b49e7SJohan Hedberg case L2CAP_MODE_STREAMING: 7071162b49e7SJohan Hedberg if (!disable_ertm) 7072162b49e7SJohan Hedberg break; 7073162b49e7SJohan Hedberg /* fall through */ 7074162b49e7SJohan Hedberg default: 7075162b49e7SJohan Hedberg err = -ENOTSUPP; 7076162b49e7SJohan Hedberg goto done; 7077162b49e7SJohan Hedberg } 7078162b49e7SJohan Hedberg 7079162b49e7SJohan Hedberg switch (chan->state) { 7080162b49e7SJohan Hedberg case BT_CONNECT: 7081162b49e7SJohan Hedberg case BT_CONNECT2: 7082162b49e7SJohan Hedberg case BT_CONFIG: 7083162b49e7SJohan Hedberg /* Already connecting */ 7084162b49e7SJohan Hedberg err = 0; 7085162b49e7SJohan Hedberg goto done; 7086162b49e7SJohan Hedberg 7087162b49e7SJohan Hedberg case BT_CONNECTED: 7088162b49e7SJohan Hedberg /* Already connected */ 7089162b49e7SJohan Hedberg err = -EISCONN; 7090162b49e7SJohan Hedberg goto done; 7091162b49e7SJohan Hedberg 7092162b49e7SJohan Hedberg case BT_OPEN: 7093162b49e7SJohan Hedberg case BT_BOUND: 7094162b49e7SJohan Hedberg /* Can connect */ 7095162b49e7SJohan Hedberg break; 7096162b49e7SJohan Hedberg 7097162b49e7SJohan Hedberg default: 7098162b49e7SJohan Hedberg err = -EBADFD; 7099162b49e7SJohan Hedberg goto done; 7100162b49e7SJohan Hedberg } 7101162b49e7SJohan Hedberg 7102162b49e7SJohan Hedberg /* Set destination address and psm */ 7103162b49e7SJohan Hedberg bacpy(&chan->dst, dst); 7104162b49e7SJohan Hedberg chan->dst_type = dst_type; 7105162b49e7SJohan Hedberg 7106162b49e7SJohan Hedberg chan->psm = psm; 7107162b49e7SJohan Hedberg chan->dcid = cid; 7108162b49e7SJohan Hedberg 7109162b49e7SJohan Hedberg auth_type = l2cap_get_auth_type(chan); 7110162b49e7SJohan Hedberg 71116f77d8c7SAndre Guedes if (bdaddr_type_is_le(dst_type)) { 71126f77d8c7SAndre Guedes /* Convert from L2CAP channel address type to HCI address type 71136f77d8c7SAndre Guedes */ 71146f77d8c7SAndre Guedes if (dst_type == BDADDR_LE_PUBLIC) 71156f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_PUBLIC; 71166f77d8c7SAndre Guedes else 71176f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_RANDOM; 71186f77d8c7SAndre Guedes 711904a6c589SAndre Guedes hcon = hci_connect_le(hdev, dst, dst_type, chan->sec_level, 712004a6c589SAndre Guedes auth_type); 71216f77d8c7SAndre Guedes } else { 712204a6c589SAndre Guedes hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type); 71236f77d8c7SAndre Guedes } 7124162b49e7SJohan Hedberg 7125162b49e7SJohan Hedberg if (IS_ERR(hcon)) { 7126162b49e7SJohan Hedberg err = PTR_ERR(hcon); 7127162b49e7SJohan Hedberg goto done; 7128162b49e7SJohan Hedberg } 7129162b49e7SJohan Hedberg 7130162b49e7SJohan Hedberg conn = l2cap_conn_add(hcon); 7131162b49e7SJohan Hedberg if (!conn) { 7132162b49e7SJohan Hedberg hci_conn_drop(hcon); 7133162b49e7SJohan Hedberg err = -ENOMEM; 7134162b49e7SJohan Hedberg goto done; 7135162b49e7SJohan Hedberg } 7136162b49e7SJohan Hedberg 7137162b49e7SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 7138162b49e7SJohan Hedberg hci_conn_drop(hcon); 7139162b49e7SJohan Hedberg err = -EBUSY; 7140162b49e7SJohan Hedberg goto done; 7141162b49e7SJohan Hedberg } 7142162b49e7SJohan Hedberg 7143162b49e7SJohan Hedberg /* Update source addr of the socket */ 7144162b49e7SJohan Hedberg bacpy(&chan->src, &hcon->src); 7145162b49e7SJohan Hedberg chan->src_type = bdaddr_type(hcon, hcon->src_type); 7146162b49e7SJohan Hedberg 7147162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 7148162b49e7SJohan Hedberg l2cap_chan_add(conn, chan); 7149162b49e7SJohan Hedberg l2cap_chan_lock(chan); 7150162b49e7SJohan Hedberg 7151162b49e7SJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 7152162b49e7SJohan Hedberg hci_conn_drop(hcon); 7153162b49e7SJohan Hedberg 7154162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECT); 7155162b49e7SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7156162b49e7SJohan Hedberg 715761202e4dSJohan Hedberg /* Release chan->sport so that it can be reused by other 715861202e4dSJohan Hedberg * sockets (as it's only used for listening sockets). 715961202e4dSJohan Hedberg */ 716061202e4dSJohan Hedberg write_lock(&chan_list_lock); 716161202e4dSJohan Hedberg chan->sport = 0; 716261202e4dSJohan Hedberg write_unlock(&chan_list_lock); 716361202e4dSJohan Hedberg 7164162b49e7SJohan Hedberg if (hcon->state == BT_CONNECTED) { 7165162b49e7SJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7166162b49e7SJohan Hedberg __clear_chan_timer(chan); 7167162b49e7SJohan Hedberg if (l2cap_chan_check_security(chan)) 7168162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECTED); 7169162b49e7SJohan Hedberg } else 7170162b49e7SJohan Hedberg l2cap_do_start(chan); 7171162b49e7SJohan Hedberg } 7172162b49e7SJohan Hedberg 7173162b49e7SJohan Hedberg err = 0; 7174162b49e7SJohan Hedberg 7175162b49e7SJohan Hedberg done: 7176162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 7177162b49e7SJohan Hedberg hci_dev_unlock(hdev); 7178162b49e7SJohan Hedberg hci_dev_put(hdev); 7179162b49e7SJohan Hedberg return err; 7180162b49e7SJohan Hedberg } 7181162b49e7SJohan Hedberg 71820a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 71830a708f8fSGustavo F. Padovan 7184686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 71850a708f8fSGustavo F. Padovan { 71860a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 718723691d75SGustavo F. Padovan struct l2cap_chan *c; 71880a708f8fSGustavo F. Padovan 71896ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 71900a708f8fSGustavo F. Padovan 71910a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 719223691d75SGustavo F. Padovan read_lock(&chan_list_lock); 719323691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 719489bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 71950a708f8fSGustavo F. Padovan continue; 71960a708f8fSGustavo F. Padovan 71977eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 71980a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 719943bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72000a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 72010a708f8fSGustavo F. Padovan exact++; 72027eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 72030a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 720443bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72050a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 72060a708f8fSGustavo F. Padovan } 72070a708f8fSGustavo F. Padovan } 720823691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 72090a708f8fSGustavo F. Padovan 72100a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 72110a708f8fSGustavo F. Padovan } 72120a708f8fSGustavo F. Padovan 72139e664631SAndrei Emeltchenko void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 72140a708f8fSGustavo F. Padovan { 72150a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 72160a708f8fSGustavo F. Padovan 72176ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 72180a708f8fSGustavo F. Padovan 72190a708f8fSGustavo F. Padovan if (!status) { 7220baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 72210a708f8fSGustavo F. Padovan if (conn) 72220a708f8fSGustavo F. Padovan l2cap_conn_ready(conn); 7223ba6fc317SAndrei Emeltchenko } else { 7224e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 7225ba6fc317SAndrei Emeltchenko } 72260a708f8fSGustavo F. Padovan } 72270a708f8fSGustavo F. Padovan 7228686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 72290a708f8fSGustavo F. Padovan { 72300a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 72310a708f8fSGustavo F. Padovan 72320a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 72330a708f8fSGustavo F. Padovan 7234686ebf28SUlisses Furquim if (!conn) 72359f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 72360a708f8fSGustavo F. Padovan return conn->disc_reason; 72370a708f8fSGustavo F. Padovan } 72380a708f8fSGustavo F. Padovan 72399e664631SAndrei Emeltchenko void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 72400a708f8fSGustavo F. Padovan { 72410a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 72420a708f8fSGustavo F. Padovan 724318722c24SJukka Rissanen bt_6lowpan_del_conn(hcon->l2cap_data); 724418722c24SJukka Rissanen 7245e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 72460a708f8fSGustavo F. Padovan } 72470a708f8fSGustavo F. Padovan 72484343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 72490a708f8fSGustavo F. Padovan { 7250715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 72510a708f8fSGustavo F. Padovan return; 72520a708f8fSGustavo F. Padovan 72530a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 72544343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 7255ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 72567d513e92SMarcel Holtmann } else if (chan->sec_level == BT_SECURITY_HIGH || 72577d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 72580f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 72590a708f8fSGustavo F. Padovan } else { 72604343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 7261c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 72620a708f8fSGustavo F. Padovan } 72630a708f8fSGustavo F. Padovan } 72640a708f8fSGustavo F. Padovan 7265686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 72660a708f8fSGustavo F. Padovan { 72670a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 726848454079SGustavo F. Padovan struct l2cap_chan *chan; 72690a708f8fSGustavo F. Padovan 72700a708f8fSGustavo F. Padovan if (!conn) 72710a708f8fSGustavo F. Padovan return 0; 72720a708f8fSGustavo F. Padovan 727389d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 72740a708f8fSGustavo F. Padovan 7275160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 727635d4adccSHemant Gupta if (!status && encrypt) 72774bd6d38eSJohan Hedberg smp_distribute_keys(conn); 727817cd3f37SUlisses Furquim cancel_delayed_work(&conn->security_timer); 7279160dc6acSVinicius Costa Gomes } 7280160dc6acSVinicius Costa Gomes 72813df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 72820a708f8fSGustavo F. Padovan 72833df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 72846be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 72850a708f8fSGustavo F. Padovan 728689d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 728789d8b407SAndrei Emeltchenko state_to_string(chan->state)); 7288f1cb9af5SVinicius Costa Gomes 72892338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 729078eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 729178eb2f98SAndrei Emeltchenko continue; 729278eb2f98SAndrei Emeltchenko } 729378eb2f98SAndrei Emeltchenko 7294073d1cf3SJohan Hedberg if (chan->scid == L2CAP_CID_ATT) { 7295f1cb9af5SVinicius Costa Gomes if (!status && encrypt) { 7296f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 7297cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 7298f1cb9af5SVinicius Costa Gomes } 7299f1cb9af5SVinicius Costa Gomes 73006be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 7301f1cb9af5SVinicius Costa Gomes continue; 7302f1cb9af5SVinicius Costa Gomes } 7303f1cb9af5SVinicius Costa Gomes 730496eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 73056be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73060a708f8fSGustavo F. Padovan continue; 73070a708f8fSGustavo F. Padovan } 73080a708f8fSGustavo F. Padovan 730989bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 731089bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 7311d97c899bSMarcel Holtmann chan->ops->resume(chan); 73124343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 73136be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73140a708f8fSGustavo F. Padovan continue; 73150a708f8fSGustavo F. Padovan } 73160a708f8fSGustavo F. Padovan 731789bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 73186d3c15daSJohan Hedberg if (!status) 731993c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 73206d3c15daSJohan Hedberg else 7321ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 732289bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 73230a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7324df3c3931SJohan Hedberg __u16 res, stat; 73250a708f8fSGustavo F. Padovan 73260a708f8fSGustavo F. Padovan if (!status) { 7327bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 7328df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 7329df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 73302dc4e510SGustavo Padovan chan->ops->defer(chan); 7331df3c3931SJohan Hedberg } else { 7332acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 7333df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 7334df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 7335df3c3931SJohan Hedberg } 73360a708f8fSGustavo F. Padovan } else { 7337acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 7338ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7339df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 7340df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 73410a708f8fSGustavo F. Padovan } 73420a708f8fSGustavo F. Padovan 7343fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 7344fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7345df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 7346df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 7347fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 7348fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 73492d369359SMat Martineau 73502d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 73512d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 73522d369359SMat Martineau char buf[128]; 73532d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 73542d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 73552d369359SMat Martineau L2CAP_CONF_REQ, 73562d369359SMat Martineau l2cap_build_conf_req(chan, buf), 73572d369359SMat Martineau buf); 73582d369359SMat Martineau chan->num_conf_req++; 73592d369359SMat Martineau } 73600a708f8fSGustavo F. Padovan } 73610a708f8fSGustavo F. Padovan 73626be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73630a708f8fSGustavo F. Padovan } 73640a708f8fSGustavo F. Padovan 73653df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 73660a708f8fSGustavo F. Padovan 73670a708f8fSGustavo F. Padovan return 0; 73680a708f8fSGustavo F. Padovan } 73690a708f8fSGustavo F. Padovan 7370686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 73710a708f8fSGustavo F. Padovan { 73720a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 7373d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 7374d73a0988SAndrei Emeltchenko int len; 73750a708f8fSGustavo F. Padovan 73761d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 73771d13a254SAndrei Emeltchenko if (!conn && hcon->hdev->dev_type != HCI_BREDR) 73781d13a254SAndrei Emeltchenko goto drop; 73790a708f8fSGustavo F. Padovan 73800a708f8fSGustavo F. Padovan if (!conn) 7381baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 73820a708f8fSGustavo F. Padovan 73830a708f8fSGustavo F. Padovan if (!conn) 73840a708f8fSGustavo F. Padovan goto drop; 73850a708f8fSGustavo F. Padovan 73860a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 73870a708f8fSGustavo F. Padovan 7388d73a0988SAndrei Emeltchenko switch (flags) { 7389d73a0988SAndrei Emeltchenko case ACL_START: 7390d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 7391d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 73920a708f8fSGustavo F. Padovan if (conn->rx_len) { 73930a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 73940a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 73950a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 73960a708f8fSGustavo F. Padovan conn->rx_len = 0; 73970a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 73980a708f8fSGustavo F. Padovan } 73990a708f8fSGustavo F. Padovan 74000a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 74010a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 74020a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 74030a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74040a708f8fSGustavo F. Padovan goto drop; 74050a708f8fSGustavo F. Padovan } 74060a708f8fSGustavo F. Padovan 74070a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 74080a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 74090a708f8fSGustavo F. Padovan 74100a708f8fSGustavo F. Padovan if (len == skb->len) { 74110a708f8fSGustavo F. Padovan /* Complete frame received */ 74120a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 74130a708f8fSGustavo F. Padovan return 0; 74140a708f8fSGustavo F. Padovan } 74150a708f8fSGustavo F. Padovan 74160a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 74170a708f8fSGustavo F. Padovan 74180a708f8fSGustavo F. Padovan if (skb->len > len) { 74190a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 74200a708f8fSGustavo F. Padovan skb->len, len); 74210a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74220a708f8fSGustavo F. Padovan goto drop; 74230a708f8fSGustavo F. Padovan } 74240a708f8fSGustavo F. Padovan 74250a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 74268bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 74270a708f8fSGustavo F. Padovan if (!conn->rx_skb) 74280a708f8fSGustavo F. Padovan goto drop; 74290a708f8fSGustavo F. Padovan 74300a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 74310a708f8fSGustavo F. Padovan skb->len); 74320a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 7433d73a0988SAndrei Emeltchenko break; 7434d73a0988SAndrei Emeltchenko 7435d73a0988SAndrei Emeltchenko case ACL_CONT: 74360a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 74370a708f8fSGustavo F. Padovan 74380a708f8fSGustavo F. Padovan if (!conn->rx_len) { 74390a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 74400a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74410a708f8fSGustavo F. Padovan goto drop; 74420a708f8fSGustavo F. Padovan } 74430a708f8fSGustavo F. Padovan 74440a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 74450a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 74460a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 74470a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74480a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74490a708f8fSGustavo F. Padovan conn->rx_len = 0; 74500a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74510a708f8fSGustavo F. Padovan goto drop; 74520a708f8fSGustavo F. Padovan } 74530a708f8fSGustavo F. Padovan 74540a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 74550a708f8fSGustavo F. Padovan skb->len); 74560a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 74570a708f8fSGustavo F. Padovan 74580a708f8fSGustavo F. Padovan if (!conn->rx_len) { 7459c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 7460c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 7461c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 7462c4e5bafaSJohan Hedberg */ 7463c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 74640a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 7465c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 74660a708f8fSGustavo F. Padovan } 7467d73a0988SAndrei Emeltchenko break; 74680a708f8fSGustavo F. Padovan } 74690a708f8fSGustavo F. Padovan 74700a708f8fSGustavo F. Padovan drop: 74710a708f8fSGustavo F. Padovan kfree_skb(skb); 74720a708f8fSGustavo F. Padovan return 0; 74730a708f8fSGustavo F. Padovan } 74740a708f8fSGustavo F. Padovan 74750a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 74760a708f8fSGustavo F. Padovan { 747723691d75SGustavo F. Padovan struct l2cap_chan *c; 74780a708f8fSGustavo F. Padovan 7479333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 74800a708f8fSGustavo F. Padovan 748123691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 7482fcb73338SAndrei Emeltchenko seq_printf(f, "%pMR %pMR %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 74837eafc59eSMarcel Holtmann &c->src, &c->dst, 748489bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 748523691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 748623691d75SGustavo F. Padovan c->sec_level, c->mode); 74870a708f8fSGustavo F. Padovan } 74880a708f8fSGustavo F. Padovan 7489333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 74900a708f8fSGustavo F. Padovan 74910a708f8fSGustavo F. Padovan return 0; 74920a708f8fSGustavo F. Padovan } 74930a708f8fSGustavo F. Padovan 74940a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 74950a708f8fSGustavo F. Padovan { 74960a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 74970a708f8fSGustavo F. Padovan } 74980a708f8fSGustavo F. Padovan 74990a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 75000a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 75010a708f8fSGustavo F. Padovan .read = seq_read, 75020a708f8fSGustavo F. Padovan .llseek = seq_lseek, 75030a708f8fSGustavo F. Padovan .release = single_release, 75040a708f8fSGustavo F. Padovan }; 75050a708f8fSGustavo F. Padovan 75060a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 75070a708f8fSGustavo F. Padovan 750864274518SGustavo F. Padovan int __init l2cap_init(void) 75090a708f8fSGustavo F. Padovan { 75100a708f8fSGustavo F. Padovan int err; 75110a708f8fSGustavo F. Padovan 7512bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 75130a708f8fSGustavo F. Padovan if (err < 0) 75140a708f8fSGustavo F. Padovan return err; 75150a708f8fSGustavo F. Padovan 75161120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 75171120e4bfSMarcel Holtmann return 0; 75181120e4bfSMarcel Holtmann 75192d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 75202d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 75210a708f8fSGustavo F. Padovan 7522f15b8ecfSJohan Hedberg debugfs_create_u16("l2cap_le_max_credits", 0466, bt_debugfs, 7523f15b8ecfSJohan Hedberg &le_max_credits); 7524f15b8ecfSJohan Hedberg debugfs_create_u16("l2cap_le_default_mps", 0466, bt_debugfs, 7525f15b8ecfSJohan Hedberg &le_default_mps); 7526f15b8ecfSJohan Hedberg 752718722c24SJukka Rissanen bt_6lowpan_init(); 752818722c24SJukka Rissanen 75290a708f8fSGustavo F. Padovan return 0; 75300a708f8fSGustavo F. Padovan } 75310a708f8fSGustavo F. Padovan 753264274518SGustavo F. Padovan void l2cap_exit(void) 75330a708f8fSGustavo F. Padovan { 753418722c24SJukka Rissanen bt_6lowpan_cleanup(); 75350a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 7536bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 75370a708f8fSGustavo F. Padovan } 75380a708f8fSGustavo F. Padovan 75390a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 75400a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 7541