10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 35dbb50887SDaniel Borkmann #include <linux/filter.h> 360a708f8fSGustavo F. Padovan 370a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 390a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 407ef9fbf0SMarcel Holtmann 41ac4b7236SMarcel Holtmann #include "smp.h" 427024728eSMarcel Holtmann #include "a2mp.h" 437ef9fbf0SMarcel Holtmann #include "amp.h" 440a708f8fSGustavo F. Padovan 450f1bfe4eSJohan Hedberg #define LE_FLOWCTL_MAX_CREDITS 65535 460f1bfe4eSJohan Hedberg 47d1de6d46SMat Martineau bool disable_ertm; 480a708f8fSGustavo F. Padovan 49547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 500a708f8fSGustavo F. Padovan 51b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 52b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 530a708f8fSGustavo F. Padovan 540a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 550a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 564519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 574519de9aSGustavo F. Padovan void *data); 58e860d2c9SBen Seri static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data, size_t data_size); 595e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 600a708f8fSGustavo F. Padovan 61d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 62608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 63608bcc6dSMat Martineau 64a250e048SJohan Hedberg static inline u8 bdaddr_type(u8 link_type, u8 bdaddr_type) 654f1654e0SMarcel Holtmann { 66a250e048SJohan Hedberg if (link_type == LE_LINK) { 67a250e048SJohan Hedberg if (bdaddr_type == ADDR_LE_DEV_PUBLIC) 684f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 694f1654e0SMarcel Holtmann else 704f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 714f1654e0SMarcel Holtmann } 724f1654e0SMarcel Holtmann 734f1654e0SMarcel Holtmann return BDADDR_BREDR; 744f1654e0SMarcel Holtmann } 754f1654e0SMarcel Holtmann 76a250e048SJohan Hedberg static inline u8 bdaddr_src_type(struct hci_conn *hcon) 77a250e048SJohan Hedberg { 78a250e048SJohan Hedberg return bdaddr_type(hcon->type, hcon->src_type); 79a250e048SJohan Hedberg } 80a250e048SJohan Hedberg 81a250e048SJohan Hedberg static inline u8 bdaddr_dst_type(struct hci_conn *hcon) 82a250e048SJohan Hedberg { 83a250e048SJohan Hedberg return bdaddr_type(hcon->type, hcon->dst_type); 84a250e048SJohan Hedberg } 85a250e048SJohan Hedberg 860a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 8771ba0e56SGustavo F. Padovan 882d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 892d792818SGustavo Padovan u16 cid) 900a708f8fSGustavo F. Padovan { 913df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 92baa7e1faSGustavo F. Padovan 933df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 943df91ea2SAndrei Emeltchenko if (c->dcid == cid) 953df91ea2SAndrei Emeltchenko return c; 960a708f8fSGustavo F. Padovan } 973df91ea2SAndrei Emeltchenko return NULL; 98baa7e1faSGustavo F. Padovan } 990a708f8fSGustavo F. Padovan 1002d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1012d792818SGustavo Padovan u16 cid) 1020a708f8fSGustavo F. Padovan { 1033df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 104baa7e1faSGustavo F. Padovan 1053df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1063df91ea2SAndrei Emeltchenko if (c->scid == cid) 1073df91ea2SAndrei Emeltchenko return c; 1080a708f8fSGustavo F. Padovan } 1093df91ea2SAndrei Emeltchenko return NULL; 110baa7e1faSGustavo F. Padovan } 1110a708f8fSGustavo F. Padovan 1120a708f8fSGustavo F. Padovan /* Find channel with given SCID. 113ef191adeSMat Martineau * Returns locked channel. */ 1142d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1152d792818SGustavo Padovan u16 cid) 1160a708f8fSGustavo F. Padovan { 11748454079SGustavo F. Padovan struct l2cap_chan *c; 118baa7e1faSGustavo F. Padovan 1193df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 120baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 121ef191adeSMat Martineau if (c) 122ef191adeSMat Martineau l2cap_chan_lock(c); 1233df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1243df91ea2SAndrei Emeltchenko 12548454079SGustavo F. Padovan return c; 1260a708f8fSGustavo F. Padovan } 1270a708f8fSGustavo F. Padovan 128b1a130b7SMat Martineau /* Find channel with given DCID. 129b1a130b7SMat Martineau * Returns locked channel. 130b1a130b7SMat Martineau */ 131b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 132b1a130b7SMat Martineau u16 cid) 133b1a130b7SMat Martineau { 134b1a130b7SMat Martineau struct l2cap_chan *c; 135b1a130b7SMat Martineau 136b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 137b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 138b1a130b7SMat Martineau if (c) 139b1a130b7SMat Martineau l2cap_chan_lock(c); 140b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 141b1a130b7SMat Martineau 142b1a130b7SMat Martineau return c; 143b1a130b7SMat Martineau } 144b1a130b7SMat Martineau 1452d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1462d792818SGustavo Padovan u8 ident) 1470a708f8fSGustavo F. Padovan { 1483df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 149baa7e1faSGustavo F. Padovan 1503df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1513df91ea2SAndrei Emeltchenko if (c->ident == ident) 1523df91ea2SAndrei Emeltchenko return c; 1530a708f8fSGustavo F. Padovan } 1543df91ea2SAndrei Emeltchenko return NULL; 155baa7e1faSGustavo F. Padovan } 1560a708f8fSGustavo F. Padovan 1575b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1585b155ef9SMat Martineau u8 ident) 1595b155ef9SMat Martineau { 1605b155ef9SMat Martineau struct l2cap_chan *c; 1615b155ef9SMat Martineau 1625b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1635b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1645b155ef9SMat Martineau if (c) 1655b155ef9SMat Martineau l2cap_chan_lock(c); 1665b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1675b155ef9SMat Martineau 1685b155ef9SMat Martineau return c; 1695b155ef9SMat Martineau } 1705b155ef9SMat Martineau 17123691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1729e4425ffSGustavo F. Padovan { 17323691d75SGustavo F. Padovan struct l2cap_chan *c; 1749e4425ffSGustavo F. Padovan 17523691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1767eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 17723691d75SGustavo F. Padovan return c; 1789e4425ffSGustavo F. Padovan } 179250938cbSSzymon Janc return NULL; 180250938cbSSzymon Janc } 1819e4425ffSGustavo F. Padovan 1829e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1839e4425ffSGustavo F. Padovan { 18473b2ec18SGustavo F. Padovan int err; 18573b2ec18SGustavo F. Padovan 186333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1879e4425ffSGustavo F. Padovan 18823691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 18973b2ec18SGustavo F. Padovan err = -EADDRINUSE; 19073b2ec18SGustavo F. Padovan goto done; 1919e4425ffSGustavo F. Padovan } 1929e4425ffSGustavo F. Padovan 19373b2ec18SGustavo F. Padovan if (psm) { 1949e4425ffSGustavo F. Padovan chan->psm = psm; 1959e4425ffSGustavo F. Padovan chan->sport = psm; 19673b2ec18SGustavo F. Padovan err = 0; 19773b2ec18SGustavo F. Padovan } else { 19892594a51SJohan Hedberg u16 p, start, end, incr; 19992594a51SJohan Hedberg 20092594a51SJohan Hedberg if (chan->src_type == BDADDR_BREDR) { 20192594a51SJohan Hedberg start = L2CAP_PSM_DYN_START; 20292594a51SJohan Hedberg end = L2CAP_PSM_AUTO_END; 20392594a51SJohan Hedberg incr = 2; 20492594a51SJohan Hedberg } else { 20592594a51SJohan Hedberg start = L2CAP_PSM_LE_DYN_START; 20692594a51SJohan Hedberg end = L2CAP_PSM_LE_DYN_END; 20792594a51SJohan Hedberg incr = 1; 20892594a51SJohan Hedberg } 2099e4425ffSGustavo F. Padovan 21073b2ec18SGustavo F. Padovan err = -EINVAL; 21192594a51SJohan Hedberg for (p = start; p <= end; p += incr) 21223691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 21373b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 21473b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 21573b2ec18SGustavo F. Padovan err = 0; 21673b2ec18SGustavo F. Padovan break; 21773b2ec18SGustavo F. Padovan } 21873b2ec18SGustavo F. Padovan } 21973b2ec18SGustavo F. Padovan 22073b2ec18SGustavo F. Padovan done: 221333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 22273b2ec18SGustavo F. Padovan return err; 2239e4425ffSGustavo F. Padovan } 2246b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_add_psm); 2259e4425ffSGustavo F. Padovan 2269e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2279e4425ffSGustavo F. Padovan { 228333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2299e4425ffSGustavo F. Padovan 23014824308SJohan Hedberg /* Override the defaults (which are for conn-oriented) */ 23114824308SJohan Hedberg chan->omtu = L2CAP_DEFAULT_MTU; 23214824308SJohan Hedberg chan->chan_type = L2CAP_CHAN_FIXED; 23314824308SJohan Hedberg 2349e4425ffSGustavo F. Padovan chan->scid = scid; 2359e4425ffSGustavo F. Padovan 236333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2379e4425ffSGustavo F. Padovan 2389e4425ffSGustavo F. Padovan return 0; 2399e4425ffSGustavo F. Padovan } 2409e4425ffSGustavo F. Padovan 241baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2420a708f8fSGustavo F. Padovan { 243e77af755SJohan Hedberg u16 cid, dyn_end; 2440a708f8fSGustavo F. Padovan 245e77af755SJohan Hedberg if (conn->hcon->type == LE_LINK) 246e77af755SJohan Hedberg dyn_end = L2CAP_CID_LE_DYN_END; 247e77af755SJohan Hedberg else 248e77af755SJohan Hedberg dyn_end = L2CAP_CID_DYN_END; 249e77af755SJohan Hedberg 250ab0c127fSJohan Hedberg for (cid = L2CAP_CID_DYN_START; cid <= dyn_end; cid++) { 251baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2520a708f8fSGustavo F. Padovan return cid; 2530a708f8fSGustavo F. Padovan } 2540a708f8fSGustavo F. Padovan 2550a708f8fSGustavo F. Padovan return 0; 2560a708f8fSGustavo F. Padovan } 2570a708f8fSGustavo F. Padovan 258f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 25989bc500eSGustavo F. Padovan { 26042d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 261badaaa00SGustavo F. Padovan state_to_string(state)); 262badaaa00SGustavo F. Padovan 26389bc500eSGustavo F. Padovan chan->state = state; 26453f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 26589bc500eSGustavo F. Padovan } 26689bc500eSGustavo F. Padovan 267f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 268f8e73017SGustavo Padovan int state, int err) 2692e0052e4SAndrei Emeltchenko { 270f8e73017SGustavo Padovan chan->state = state; 27153f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2722e0052e4SAndrei Emeltchenko } 2732e0052e4SAndrei Emeltchenko 2742e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2752e0052e4SAndrei Emeltchenko { 276f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2772e0052e4SAndrei Emeltchenko } 2782e0052e4SAndrei Emeltchenko 2794239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2804239d16fSMat Martineau { 2814239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2824239d16fSMat Martineau chan->retrans_timeout) { 2834239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2844239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2854239d16fSMat Martineau } 2864239d16fSMat Martineau } 2874239d16fSMat Martineau 2884239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2894239d16fSMat Martineau { 2904239d16fSMat Martineau __clear_retrans_timer(chan); 2914239d16fSMat Martineau if (chan->monitor_timeout) { 2924239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2934239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2944239d16fSMat Martineau } 2954239d16fSMat Martineau } 2964239d16fSMat Martineau 297608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 298608bcc6dSMat Martineau u16 seq) 299608bcc6dSMat Martineau { 300608bcc6dSMat Martineau struct sk_buff *skb; 301608bcc6dSMat Martineau 302608bcc6dSMat Martineau skb_queue_walk(head, skb) { 303a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.txseq == seq) 304608bcc6dSMat Martineau return skb; 305608bcc6dSMat Martineau } 306608bcc6dSMat Martineau 307608bcc6dSMat Martineau return NULL; 308608bcc6dSMat Martineau } 309608bcc6dSMat Martineau 3103c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 3113c588192SMat Martineau 3123c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 3133c588192SMat Martineau * SREJ requests that are received and for frames that are to be 3143c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 3153c588192SMat Martineau * list in an array, where membership in the list can also be checked 3163c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 3173c588192SMat Martineau * and removed from the head in constant time, without further memory 3183c588192SMat Martineau * allocs or frees. 3193c588192SMat Martineau */ 3203c588192SMat Martineau 3213c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3223c588192SMat Martineau { 3233c588192SMat Martineau size_t alloc_size, i; 3243c588192SMat Martineau 3253c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3263c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3273c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3283c588192SMat Martineau */ 3293c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3303c588192SMat Martineau 3316da2ec56SKees Cook seq_list->list = kmalloc_array(alloc_size, sizeof(u16), GFP_KERNEL); 3323c588192SMat Martineau if (!seq_list->list) 3333c588192SMat Martineau return -ENOMEM; 3343c588192SMat Martineau 3353c588192SMat Martineau seq_list->mask = alloc_size - 1; 3363c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3373c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3383c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3393c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3403c588192SMat Martineau 3413c588192SMat Martineau return 0; 3423c588192SMat Martineau } 3433c588192SMat Martineau 3443c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3453c588192SMat Martineau { 3463c588192SMat Martineau kfree(seq_list->list); 3473c588192SMat Martineau } 3483c588192SMat Martineau 3493c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3503c588192SMat Martineau u16 seq) 3513c588192SMat Martineau { 3523c588192SMat Martineau /* Constant-time check for list membership */ 3533c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3543c588192SMat Martineau } 3553c588192SMat Martineau 35603a0c5d6SJohan Hedberg static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3573c588192SMat Martineau { 35803a0c5d6SJohan Hedberg u16 seq = seq_list->head; 3593c588192SMat Martineau u16 mask = seq_list->mask; 3603c588192SMat Martineau 3613c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3623c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3633c588192SMat Martineau 3643c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3653c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3663c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3673c588192SMat Martineau } 3683c588192SMat Martineau 3693c588192SMat Martineau return seq; 3703c588192SMat Martineau } 3713c588192SMat Martineau 3723c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3733c588192SMat Martineau { 3743c588192SMat Martineau u16 i; 375f522ae36SGustavo Padovan 376f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 377f522ae36SGustavo Padovan return; 378f522ae36SGustavo Padovan 3793c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3803c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3813c588192SMat Martineau 3823c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3833c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3843c588192SMat Martineau } 3853c588192SMat Martineau 3863c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3873c588192SMat Martineau { 3883c588192SMat Martineau u16 mask = seq_list->mask; 3893c588192SMat Martineau 3903c588192SMat Martineau /* All appends happen in constant time */ 3913c588192SMat Martineau 392f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 393f522ae36SGustavo Padovan return; 394f522ae36SGustavo Padovan 3953c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3963c588192SMat Martineau seq_list->head = seq; 3973c588192SMat Martineau else 3983c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 3993c588192SMat Martineau 4003c588192SMat Martineau seq_list->tail = seq; 4013c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 4023c588192SMat Martineau } 4033c588192SMat Martineau 404721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 405ab07801dSGustavo F. Padovan { 406721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 407721c4181SGustavo F. Padovan chan_timer.work); 4083df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 409ab07801dSGustavo F. Padovan int reason; 410ab07801dSGustavo F. Padovan 411e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 412ab07801dSGustavo F. Padovan 4133df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 4146be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 415ab07801dSGustavo F. Padovan 41689bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 417ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 41889bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 419ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 420ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 421ab07801dSGustavo F. Padovan else 422ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 423ab07801dSGustavo F. Padovan 4240f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 425ab07801dSGustavo F. Padovan 4266be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 427ab07801dSGustavo F. Padovan 42880b98027SGustavo Padovan chan->ops->close(chan); 4293df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4303df91ea2SAndrei Emeltchenko 431371fd835SUlisses Furquim l2cap_chan_put(chan); 432ab07801dSGustavo F. Padovan } 433ab07801dSGustavo F. Padovan 434eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4350a708f8fSGustavo F. Padovan { 43648454079SGustavo F. Padovan struct l2cap_chan *chan; 4370a708f8fSGustavo F. Padovan 43848454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 43948454079SGustavo F. Padovan if (!chan) 44048454079SGustavo F. Padovan return NULL; 4410a708f8fSGustavo F. Padovan 442c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 443c03b355eSAndrei Emeltchenko 444ff714119SJohan Hedberg /* Set default lock nesting level */ 445ff714119SJohan Hedberg atomic_set(&chan->nesting, L2CAP_NESTING_NORMAL); 446ff714119SJohan Hedberg 447333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 44823691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 449333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45023691d75SGustavo F. Padovan 451721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 452ab07801dSGustavo F. Padovan 45389bc500eSGustavo F. Padovan chan->state = BT_OPEN; 45489bc500eSGustavo F. Padovan 455144ad330SSyam Sidhardhan kref_init(&chan->kref); 45671ba0e56SGustavo F. Padovan 4572827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4582827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4592827011fSMat Martineau 460eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 461abc545b8SSzymon Janc 46248454079SGustavo F. Padovan return chan; 4630a708f8fSGustavo F. Padovan } 4646b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_create); 4650a708f8fSGustavo F. Padovan 466144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4676ff5abbfSGustavo F. Padovan { 468144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 469144ad330SSyam Sidhardhan 4704af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4714af66c69SJaganath Kanakkassery 472333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 47323691d75SGustavo F. Padovan list_del(&chan->global_l); 474333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 47523691d75SGustavo F. Padovan 4764af66c69SJaganath Kanakkassery kfree(chan); 4776ff5abbfSGustavo F. Padovan } 4786ff5abbfSGustavo F. Padovan 47930648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 48030648372SJaganath Kanakkassery { 4812c935bc5SPeter Zijlstra BT_DBG("chan %p orig refcnt %d", c, kref_read(&c->kref)); 48230648372SJaganath Kanakkassery 483144ad330SSyam Sidhardhan kref_get(&c->kref); 48430648372SJaganath Kanakkassery } 48530648372SJaganath Kanakkassery 48630648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 48730648372SJaganath Kanakkassery { 4882c935bc5SPeter Zijlstra BT_DBG("chan %p orig refcnt %d", c, kref_read(&c->kref)); 48930648372SJaganath Kanakkassery 490144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 49130648372SJaganath Kanakkassery } 4926b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_put); 49330648372SJaganath Kanakkassery 494bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 495bd4b1653SAndrei Emeltchenko { 496bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 497bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 498bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 499bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 5006a5e8165SJukka Rissanen chan->remote_max_tx = chan->max_tx; 5016a5e8165SJukka Rissanen chan->remote_tx_win = chan->tx_win; 502c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 503bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 5046a5e8165SJukka Rissanen chan->flush_to = L2CAP_DEFAULT_FLUSH_TO; 5056a5e8165SJukka Rissanen chan->retrans_timeout = L2CAP_DEFAULT_RETRANS_TO; 5066a5e8165SJukka Rissanen chan->monitor_timeout = L2CAP_DEFAULT_MONITOR_TO; 5076a5e8165SJukka Rissanen chan->conf_state = 0; 508bd4b1653SAndrei Emeltchenko 509bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 510bd4b1653SAndrei Emeltchenko } 5116b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_set_defaults); 512bd4b1653SAndrei Emeltchenko 513ba8f5289SLuiz Augusto von Dentz static void l2cap_le_flowctl_init(struct l2cap_chan *chan, u16 tx_credits) 51438319713SJohan Hedberg { 5150ce43ce6SJohan Hedberg chan->sdu = NULL; 5160ce43ce6SJohan Hedberg chan->sdu_last_frag = NULL; 5170ce43ce6SJohan Hedberg chan->sdu_len = 0; 518ba8f5289SLuiz Augusto von Dentz chan->tx_credits = tx_credits; 519fe149310SLuiz Augusto von Dentz /* Derive MPS from connection MTU to stop HCI fragmentation */ 520fe149310SLuiz Augusto von Dentz chan->mps = min_t(u16, chan->imtu, chan->conn->mtu - L2CAP_HDR_SIZE); 52196cd8eaaSLuiz Augusto von Dentz /* Give enough credits for a full packet */ 52296cd8eaaSLuiz Augusto von Dentz chan->rx_credits = (chan->imtu / chan->mps) + 1; 5230ce43ce6SJohan Hedberg 5240ce43ce6SJohan Hedberg skb_queue_head_init(&chan->tx_q); 52538319713SJohan Hedberg } 52638319713SJohan Hedberg 52793c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 5280a708f8fSGustavo F. Padovan { 5290a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 530097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 5310a708f8fSGustavo F. Padovan 5329f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 5330a708f8fSGustavo F. Padovan 5348c1d787bSGustavo F. Padovan chan->conn = conn; 5350a708f8fSGustavo F. Padovan 5365491120eSAndrei Emeltchenko switch (chan->chan_type) { 5375491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 5380a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 539fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 54021626e62SJohan Hedberg if (conn->hcon->type == ACL_LINK) 5410c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5425491120eSAndrei Emeltchenko break; 5435491120eSAndrei Emeltchenko 5445491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5450a708f8fSGustavo F. Padovan /* Connectionless socket */ 546fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 547fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5480c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5495491120eSAndrei Emeltchenko break; 5505491120eSAndrei Emeltchenko 5512338a7e0SJohan Hedberg case L2CAP_CHAN_FIXED: 5522338a7e0SJohan Hedberg /* Caller will set CID and CID specific MTU values */ 553416fa752SAndrei Emeltchenko break; 554416fa752SAndrei Emeltchenko 5555491120eSAndrei Emeltchenko default: 5560a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 557fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 558fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5590c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5600a708f8fSGustavo F. Padovan } 5610a708f8fSGustavo F. Padovan 5628f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5638f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5648f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5658f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5668f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5678936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5688f7975b1SAndrei Emeltchenko 569371fd835SUlisses Furquim l2cap_chan_hold(chan); 570baa7e1faSGustavo F. Padovan 571c16900cfSJohan Hedberg /* Only keep a reference for fixed channels if they requested it */ 572c16900cfSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_FIXED || 573c16900cfSJohan Hedberg test_bit(FLAG_HOLD_HCI_CONN, &chan->flags)) 5745ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5755ee9891dSJohan Hedberg 5763df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 577643162a8SAndrei Emeltchenko } 578643162a8SAndrei Emeltchenko 579466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 580643162a8SAndrei Emeltchenko { 581643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 582643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5833df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5840a708f8fSGustavo F. Padovan } 5850a708f8fSGustavo F. Padovan 586466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5870a708f8fSGustavo F. Padovan { 5888c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5890a708f8fSGustavo F. Padovan 590c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5910a708f8fSGustavo F. Padovan 59249d11741SJohan Hedberg BT_DBG("chan %p, conn %p, err %d, state %s", chan, conn, err, 59349d11741SJohan Hedberg state_to_string(chan->state)); 5940a708f8fSGustavo F. Padovan 59572847ce0SJohan Hedberg chan->ops->teardown(chan, err); 59672847ce0SJohan Hedberg 5970a708f8fSGustavo F. Padovan if (conn) { 59856f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 599baa7e1faSGustavo F. Padovan /* Delete from channel list */ 6003df91ea2SAndrei Emeltchenko list_del(&chan->list); 6013d57dc68SGustavo F. Padovan 602371fd835SUlisses Furquim l2cap_chan_put(chan); 603baa7e1faSGustavo F. Padovan 6048c1d787bSGustavo F. Padovan chan->conn = NULL; 6053cabbfdaSAndrei Emeltchenko 606c16900cfSJohan Hedberg /* Reference was only held for non-fixed channels or 607c16900cfSJohan Hedberg * fixed channels that explicitly requested it using the 608c16900cfSJohan Hedberg * FLAG_HOLD_HCI_CONN flag. 609c16900cfSJohan Hedberg */ 610c16900cfSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_FIXED || 611c16900cfSJohan Hedberg test_bit(FLAG_HOLD_HCI_CONN, &chan->flags)) 61276a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 61356f60984SAndrei Emeltchenko 61456f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 61556f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 6160a708f8fSGustavo F. Padovan } 6170a708f8fSGustavo F. Padovan 618419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 619419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 620419e08c1SAndrei Emeltchenko 621419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 622419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 623419e08c1SAndrei Emeltchenko } 624419e08c1SAndrei Emeltchenko 6252827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 6266ff5abbfSGustavo F. Padovan return; 6272ead70b8SGustavo F. Padovan 628ee556f66SGustavo Padovan switch(chan->mode) { 629ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 630ee556f66SGustavo Padovan break; 6310a708f8fSGustavo F. Padovan 63238319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 633177f8f2bSJohan Hedberg skb_queue_purge(&chan->tx_q); 63438319713SJohan Hedberg break; 63538319713SJohan Hedberg 636ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6371a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6381a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6391a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6400a708f8fSGustavo F. Padovan 641f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6420a708f8fSGustavo F. Padovan 6433c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6443c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 645ee556f66SGustavo Padovan 646ee556f66SGustavo Padovan /* fall through */ 647ee556f66SGustavo Padovan 648ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 649ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 650ee556f66SGustavo Padovan break; 6510a708f8fSGustavo F. Padovan } 652ee556f66SGustavo Padovan 653ee556f66SGustavo Padovan return; 6540a708f8fSGustavo F. Padovan } 6556b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_del); 6560a708f8fSGustavo F. Padovan 657f3d82d0cSJohan Hedberg static void l2cap_conn_update_id_addr(struct work_struct *work) 658387a33e3SJohan Hedberg { 659f3d82d0cSJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 660f3d82d0cSJohan Hedberg id_addr_update_work); 661f3d82d0cSJohan Hedberg struct hci_conn *hcon = conn->hcon; 662387a33e3SJohan Hedberg struct l2cap_chan *chan; 663387a33e3SJohan Hedberg 664387a33e3SJohan Hedberg mutex_lock(&conn->chan_lock); 665387a33e3SJohan Hedberg 666387a33e3SJohan Hedberg list_for_each_entry(chan, &conn->chan_l, list) { 667387a33e3SJohan Hedberg l2cap_chan_lock(chan); 668387a33e3SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 669a250e048SJohan Hedberg chan->dst_type = bdaddr_dst_type(hcon); 670387a33e3SJohan Hedberg l2cap_chan_unlock(chan); 671387a33e3SJohan Hedberg } 672387a33e3SJohan Hedberg 673387a33e3SJohan Hedberg mutex_unlock(&conn->chan_lock); 674387a33e3SJohan Hedberg } 675387a33e3SJohan Hedberg 67627e2d4c8SJohan Hedberg static void l2cap_chan_le_connect_reject(struct l2cap_chan *chan) 67727e2d4c8SJohan Hedberg { 67827e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 67927e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 68027e2d4c8SJohan Hedberg u16 result; 68127e2d4c8SJohan Hedberg 68227e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 683571f7390SMallikarjun Phulari result = L2CAP_CR_LE_AUTHORIZATION; 68427e2d4c8SJohan Hedberg else 685571f7390SMallikarjun Phulari result = L2CAP_CR_LE_BAD_PSM; 68627e2d4c8SJohan Hedberg 68727e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 68827e2d4c8SJohan Hedberg 68927e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 69027e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 6913916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 6920cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 69327e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 69427e2d4c8SJohan Hedberg 69527e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 69627e2d4c8SJohan Hedberg &rsp); 69727e2d4c8SJohan Hedberg } 69827e2d4c8SJohan Hedberg 699791d60f7SJohan Hedberg static void l2cap_chan_connect_reject(struct l2cap_chan *chan) 700791d60f7SJohan Hedberg { 701791d60f7SJohan Hedberg struct l2cap_conn *conn = chan->conn; 702791d60f7SJohan Hedberg struct l2cap_conn_rsp rsp; 703791d60f7SJohan Hedberg u16 result; 704791d60f7SJohan Hedberg 705791d60f7SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 706791d60f7SJohan Hedberg result = L2CAP_CR_SEC_BLOCK; 707791d60f7SJohan Hedberg else 708791d60f7SJohan Hedberg result = L2CAP_CR_BAD_PSM; 709791d60f7SJohan Hedberg 710791d60f7SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 711791d60f7SJohan Hedberg 712791d60f7SJohan Hedberg rsp.scid = cpu_to_le16(chan->dcid); 713791d60f7SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 714791d60f7SJohan Hedberg rsp.result = cpu_to_le16(result); 715dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 716791d60f7SJohan Hedberg 717791d60f7SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 718791d60f7SJohan Hedberg } 719791d60f7SJohan Hedberg 7200f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 7214519de9aSGustavo F. Padovan { 7224519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7234519de9aSGustavo F. Padovan 7247eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 7254519de9aSGustavo F. Padovan 72689bc500eSGustavo F. Padovan switch (chan->state) { 7274519de9aSGustavo F. Padovan case BT_LISTEN: 728c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7294519de9aSGustavo F. Padovan break; 7304519de9aSGustavo F. Padovan 7314519de9aSGustavo F. Padovan case BT_CONNECTED: 7324519de9aSGustavo F. Padovan case BT_CONFIG: 7337b25c9b3SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 7348d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7355e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 7364519de9aSGustavo F. Padovan } else 7374519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7384519de9aSGustavo F. Padovan break; 7394519de9aSGustavo F. Padovan 7404519de9aSGustavo F. Padovan case BT_CONNECT2: 741791d60f7SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 742791d60f7SJohan Hedberg if (conn->hcon->type == ACL_LINK) 743791d60f7SJohan Hedberg l2cap_chan_connect_reject(chan); 74427e2d4c8SJohan Hedberg else if (conn->hcon->type == LE_LINK) 74527e2d4c8SJohan Hedberg l2cap_chan_le_connect_reject(chan); 7464519de9aSGustavo F. Padovan } 7474519de9aSGustavo F. Padovan 7484519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7494519de9aSGustavo F. Padovan break; 7504519de9aSGustavo F. Padovan 7514519de9aSGustavo F. Padovan case BT_CONNECT: 7524519de9aSGustavo F. Padovan case BT_DISCONN: 7534519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7544519de9aSGustavo F. Padovan break; 7554519de9aSGustavo F. Padovan 7564519de9aSGustavo F. Padovan default: 757c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7584519de9aSGustavo F. Padovan break; 7594519de9aSGustavo F. Padovan } 7604519de9aSGustavo F. Padovan } 7616b8d4a6aSJukka Rissanen EXPORT_SYMBOL(l2cap_chan_close); 7624519de9aSGustavo F. Padovan 7634343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 7640a708f8fSGustavo F. Padovan { 7656a974b50SMarcel Holtmann switch (chan->chan_type) { 7666a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 7674343478fSGustavo F. Padovan switch (chan->sec_level) { 7680a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7697d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7700a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7710a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7720a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7730a708f8fSGustavo F. Padovan default: 7740a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7750a708f8fSGustavo F. Padovan } 7766a974b50SMarcel Holtmann break; 7773124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 778dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_3DSP)) { 7793124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7803124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7813124b843SMarcel Holtmann } 7827d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7837d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7843124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7853124b843SMarcel Holtmann else 7863124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7873124b843SMarcel Holtmann break; 7886a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 789dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_SDP)) { 7904343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7914343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7920a708f8fSGustavo F. Padovan 7937d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7947d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7950a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7960a708f8fSGustavo F. Padovan else 7970a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7986a974b50SMarcel Holtmann } 7996a974b50SMarcel Holtmann /* fall through */ 8006a974b50SMarcel Holtmann default: 8014343478fSGustavo F. Padovan switch (chan->sec_level) { 8020a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 8037d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 8040a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 8050a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 8060a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 8070a708f8fSGustavo F. Padovan default: 8080a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 8090a708f8fSGustavo F. Padovan } 8106a974b50SMarcel Holtmann break; 8110a708f8fSGustavo F. Padovan } 8120a708f8fSGustavo F. Padovan } 8130a708f8fSGustavo F. Padovan 8140a708f8fSGustavo F. Padovan /* Service level security */ 815e7cafc45SJohan Hedberg int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator) 8160a708f8fSGustavo F. Padovan { 8178c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 8180a708f8fSGustavo F. Padovan __u8 auth_type; 8190a708f8fSGustavo F. Padovan 820a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 821a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 822a17de2feSJohan Hedberg 8234343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 8240a708f8fSGustavo F. Padovan 825e7cafc45SJohan Hedberg return hci_conn_security(conn->hcon, chan->sec_level, auth_type, 826e7cafc45SJohan Hedberg initiator); 8270a708f8fSGustavo F. Padovan } 8280a708f8fSGustavo F. Padovan 829b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 8300a708f8fSGustavo F. Padovan { 8310a708f8fSGustavo F. Padovan u8 id; 8320a708f8fSGustavo F. Padovan 8330a708f8fSGustavo F. Padovan /* Get next available identificator. 8340a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 8350a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 8360a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 8370a708f8fSGustavo F. Padovan */ 8380a708f8fSGustavo F. Padovan 8395a54e7c8SMarcel Holtmann mutex_lock(&conn->ident_lock); 8400a708f8fSGustavo F. Padovan 8410a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 8420a708f8fSGustavo F. Padovan conn->tx_ident = 1; 8430a708f8fSGustavo F. Padovan 8440a708f8fSGustavo F. Padovan id = conn->tx_ident; 8450a708f8fSGustavo F. Padovan 8465a54e7c8SMarcel Holtmann mutex_unlock(&conn->ident_lock); 8470a708f8fSGustavo F. Padovan 8480a708f8fSGustavo F. Padovan return id; 8490a708f8fSGustavo F. Padovan } 8500a708f8fSGustavo F. Padovan 8512d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 8522d792818SGustavo Padovan void *data) 8530a708f8fSGustavo F. Padovan { 8540a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 8550a708f8fSGustavo F. Padovan u8 flags; 8560a708f8fSGustavo F. Padovan 8570a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 8580a708f8fSGustavo F. Padovan 8590a708f8fSGustavo F. Padovan if (!skb) 8600a708f8fSGustavo F. Padovan return; 8610a708f8fSGustavo F. Padovan 862f6af675eSSteven Walter /* Use NO_FLUSH if supported or we have an LE link (which does 863f6af675eSSteven Walter * not support auto-flushing packets) */ 864f6af675eSSteven Walter if (lmp_no_flush_capable(conn->hcon->hdev) || 865f6af675eSSteven Walter conn->hcon->type == LE_LINK) 8660a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 8670a708f8fSGustavo F. Padovan else 8680a708f8fSGustavo F. Padovan flags = ACL_START; 8690a708f8fSGustavo F. Padovan 87014b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 8715e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 87214b12d0bSJaikumar Ganesh 87373d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 8740a708f8fSGustavo F. Padovan } 8750a708f8fSGustavo F. Padovan 87602b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 87702b0fbb9SMat Martineau { 87802b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 87902b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 88002b0fbb9SMat Martineau } 88102b0fbb9SMat Martineau 88273d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 88373d80debSLuiz Augusto von Dentz { 88473d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 88573d80debSLuiz Augusto von Dentz u16 flags; 88673d80debSLuiz Augusto von Dentz 88773d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 88873d80debSLuiz Augusto von Dentz skb->priority); 88973d80debSLuiz Augusto von Dentz 890d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 891d5f8a75dSMat Martineau if (chan->hs_hchan) 892d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 893d5f8a75dSMat Martineau else 894d5f8a75dSMat Martineau kfree_skb(skb); 895d5f8a75dSMat Martineau 896d5f8a75dSMat Martineau return; 897d5f8a75dSMat Martineau } 898d5f8a75dSMat Martineau 899f6af675eSSteven Walter /* Use NO_FLUSH for LE links (where this is the only option) or 900f6af675eSSteven Walter * if the BR/EDR link supports it and flushing has not been 901f6af675eSSteven Walter * explicitly requested (through FLAG_FLUSHABLE). 902f6af675eSSteven Walter */ 903f6af675eSSteven Walter if (hcon->type == LE_LINK || 904f6af675eSSteven Walter (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 905f6af675eSSteven Walter lmp_no_flush_capable(hcon->hdev))) 90673d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 90773d80debSLuiz Augusto von Dentz else 90873d80debSLuiz Augusto von Dentz flags = ACL_START; 90973d80debSLuiz Augusto von Dentz 91073d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 91173d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 9120a708f8fSGustavo F. Padovan } 9130a708f8fSGustavo F. Padovan 914b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 915b5c6aaedSMat Martineau { 916b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 917b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 918b5c6aaedSMat Martineau 919b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 920b5c6aaedSMat Martineau /* S-Frame */ 921b5c6aaedSMat Martineau control->sframe = 1; 922b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 923b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 924b5c6aaedSMat Martineau 925b5c6aaedSMat Martineau control->sar = 0; 926b5c6aaedSMat Martineau control->txseq = 0; 927b5c6aaedSMat Martineau } else { 928b5c6aaedSMat Martineau /* I-Frame */ 929b5c6aaedSMat Martineau control->sframe = 0; 930b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 931b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 932b5c6aaedSMat Martineau 933b5c6aaedSMat Martineau control->poll = 0; 934b5c6aaedSMat Martineau control->super = 0; 935b5c6aaedSMat Martineau } 936b5c6aaedSMat Martineau } 937b5c6aaedSMat Martineau 938b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 939b5c6aaedSMat Martineau { 940b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 941b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 942b5c6aaedSMat Martineau 943b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 944b5c6aaedSMat Martineau /* S-Frame */ 945b5c6aaedSMat Martineau control->sframe = 1; 946b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 947b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 948b5c6aaedSMat Martineau 949b5c6aaedSMat Martineau control->sar = 0; 950b5c6aaedSMat Martineau control->txseq = 0; 951b5c6aaedSMat Martineau } else { 952b5c6aaedSMat Martineau /* I-Frame */ 953b5c6aaedSMat Martineau control->sframe = 0; 954b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 955b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 956b5c6aaedSMat Martineau 957b5c6aaedSMat Martineau control->poll = 0; 958b5c6aaedSMat Martineau control->super = 0; 959b5c6aaedSMat Martineau } 960b5c6aaedSMat Martineau } 961b5c6aaedSMat Martineau 962b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 963b5c6aaedSMat Martineau struct sk_buff *skb) 964b5c6aaedSMat Martineau { 965b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 966b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 967a4368ff3SJohan Hedberg &bt_cb(skb)->l2cap); 968cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 969b5c6aaedSMat Martineau } else { 970b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 971a4368ff3SJohan Hedberg &bt_cb(skb)->l2cap); 972cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 973b5c6aaedSMat Martineau } 974b5c6aaedSMat Martineau } 975b5c6aaedSMat Martineau 976b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 977b5c6aaedSMat Martineau { 978b5c6aaedSMat Martineau u32 packed; 979b5c6aaedSMat Martineau 980b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 981b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 982b5c6aaedSMat Martineau 983b5c6aaedSMat Martineau if (control->sframe) { 984b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 985b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 986b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 987b5c6aaedSMat Martineau } else { 988b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 989b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 990b5c6aaedSMat Martineau } 991b5c6aaedSMat Martineau 992b5c6aaedSMat Martineau return packed; 993b5c6aaedSMat Martineau } 994b5c6aaedSMat Martineau 995b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 996b5c6aaedSMat Martineau { 997b5c6aaedSMat Martineau u16 packed; 998b5c6aaedSMat Martineau 999b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 1000b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 1001b5c6aaedSMat Martineau 1002b5c6aaedSMat Martineau if (control->sframe) { 1003b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 1004b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 1005b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 1006b5c6aaedSMat Martineau } else { 1007b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 1008b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 1009b5c6aaedSMat Martineau } 1010b5c6aaedSMat Martineau 1011b5c6aaedSMat Martineau return packed; 1012b5c6aaedSMat Martineau } 1013b5c6aaedSMat Martineau 1014b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 1015b5c6aaedSMat Martineau struct l2cap_ctrl *control, 1016b5c6aaedSMat Martineau struct sk_buff *skb) 1017b5c6aaedSMat Martineau { 1018b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 1019b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 1020b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 1021b5c6aaedSMat Martineau } else { 1022b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 1023b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 1024b5c6aaedSMat Martineau } 1025b5c6aaedSMat Martineau } 1026b5c6aaedSMat Martineau 1027ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 1028ba7aa64fSGustavo Padovan { 1029ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1030ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 1031ba7aa64fSGustavo Padovan else 1032ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 1033ba7aa64fSGustavo Padovan } 1034ba7aa64fSGustavo Padovan 1035a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 1036a67d7f6fSMat Martineau u32 control) 10370a708f8fSGustavo F. Padovan { 10380a708f8fSGustavo F. Padovan struct sk_buff *skb; 10390a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 1040ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 10410a708f8fSGustavo F. Padovan 10420a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 104303a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 10440a708f8fSGustavo F. Padovan 1045a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 10460a708f8fSGustavo F. Padovan 10470a708f8fSGustavo F. Padovan if (!skb) 1048a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 10490a708f8fSGustavo F. Padovan 10504df864c1SJohannes Berg lh = skb_put(skb, L2CAP_HDR_SIZE); 10510a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 1052fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 105388843ab0SAndrei Emeltchenko 1054a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1055a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 1056a67d7f6fSMat Martineau else 1057a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 10580a708f8fSGustavo F. Padovan 105947d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 1060a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 106103a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 10620a708f8fSGustavo F. Padovan } 10630a708f8fSGustavo F. Padovan 106473d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 1065a67d7f6fSMat Martineau return skb; 1066a67d7f6fSMat Martineau } 1067a67d7f6fSMat Martineau 1068a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 1069a67d7f6fSMat Martineau struct l2cap_ctrl *control) 1070a67d7f6fSMat Martineau { 1071a67d7f6fSMat Martineau struct sk_buff *skb; 1072a67d7f6fSMat Martineau u32 control_field; 1073a67d7f6fSMat Martineau 1074a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 1075a67d7f6fSMat Martineau 1076a67d7f6fSMat Martineau if (!control->sframe) 1077a67d7f6fSMat Martineau return; 1078a67d7f6fSMat Martineau 1079b99e13adSMat Martineau if (__chan_is_moving(chan)) 1080b99e13adSMat Martineau return; 1081b99e13adSMat Martineau 1082a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 1083a67d7f6fSMat Martineau !control->poll) 1084a67d7f6fSMat Martineau control->final = 1; 1085a67d7f6fSMat Martineau 1086a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1087a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1088a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1089a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1090a67d7f6fSMat Martineau 1091a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1092a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1093a67d7f6fSMat Martineau __clear_ack_timer(chan); 1094a67d7f6fSMat Martineau } 1095a67d7f6fSMat Martineau 1096a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1097a67d7f6fSMat Martineau control->final, control->poll, control->super); 1098a67d7f6fSMat Martineau 1099a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1100a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1101a67d7f6fSMat Martineau else 1102a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1103a67d7f6fSMat Martineau 1104a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1105a67d7f6fSMat Martineau if (!IS_ERR(skb)) 110673d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 11070a708f8fSGustavo F. Padovan } 11080a708f8fSGustavo F. Padovan 1109c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 11100a708f8fSGustavo F. Padovan { 1111c9e3d5e0SMat Martineau struct l2cap_ctrl control; 11120a708f8fSGustavo F. Padovan 1113c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1114c9e3d5e0SMat Martineau 1115c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1116c9e3d5e0SMat Martineau control.sframe = 1; 1117c9e3d5e0SMat Martineau control.poll = poll; 1118c9e3d5e0SMat Martineau 1119c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1120c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1121c9e3d5e0SMat Martineau else 1122c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1123c9e3d5e0SMat Martineau 1124c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1125c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 11260a708f8fSGustavo F. Padovan } 11270a708f8fSGustavo F. Padovan 1128b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 11290a708f8fSGustavo F. Padovan { 11305ff6f34dSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 11315ff6f34dSJohan Hedberg return true; 11325ff6f34dSJohan Hedberg 1133c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 11340a708f8fSGustavo F. Padovan } 11350a708f8fSGustavo F. Padovan 113693c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 113793c3e8f5SAndrei Emeltchenko { 113893c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11391df7b17aSMarcel Holtmann struct hci_dev *hdev; 11401df7b17aSMarcel Holtmann bool amp_available = false; 114193c3e8f5SAndrei Emeltchenko 11420bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 11431df7b17aSMarcel Holtmann return false; 11441df7b17aSMarcel Holtmann 11450bd49fc7SJohan Hedberg if (!(conn->remote_fixed_chan & L2CAP_FC_A2MP)) 11461df7b17aSMarcel Holtmann return false; 11471df7b17aSMarcel Holtmann 11481df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 11491df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 11501df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 11511df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 11521df7b17aSMarcel Holtmann amp_available = true; 11531df7b17aSMarcel Holtmann break; 11541df7b17aSMarcel Holtmann } 11551df7b17aSMarcel Holtmann } 11561df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 11571df7b17aSMarcel Holtmann 11581df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 11591df7b17aSMarcel Holtmann return amp_available; 1160848566b3SMarcel Holtmann 116193c3e8f5SAndrei Emeltchenko return false; 116293c3e8f5SAndrei Emeltchenko } 116393c3e8f5SAndrei Emeltchenko 11645ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 11655ce66b59SAndrei Emeltchenko { 11665ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 11675ce66b59SAndrei Emeltchenko return true; 11685ce66b59SAndrei Emeltchenko } 11695ce66b59SAndrei Emeltchenko 11702766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 11719b27f350SAndrei Emeltchenko { 11729b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11739b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 11749b27f350SAndrei Emeltchenko 11759b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 11769b27f350SAndrei Emeltchenko req.psm = chan->psm; 11779b27f350SAndrei Emeltchenko 11789b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 11799b27f350SAndrei Emeltchenko 11809b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 11819b27f350SAndrei Emeltchenko 11829b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 11839b27f350SAndrei Emeltchenko } 11849b27f350SAndrei Emeltchenko 11858eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 11868eb200bdSMat Martineau { 11878eb200bdSMat Martineau struct l2cap_create_chan_req req; 11888eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11898eb200bdSMat Martineau req.psm = chan->psm; 11908eb200bdSMat Martineau req.amp_id = amp_id; 11918eb200bdSMat Martineau 11928eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11938eb200bdSMat Martineau 11948eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11958eb200bdSMat Martineau sizeof(req), &req); 11968eb200bdSMat Martineau } 11978eb200bdSMat Martineau 119802b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 119902b0fbb9SMat Martineau { 120002b0fbb9SMat Martineau struct sk_buff *skb; 120102b0fbb9SMat Martineau 120202b0fbb9SMat Martineau BT_DBG("chan %p", chan); 120302b0fbb9SMat Martineau 120402b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 120502b0fbb9SMat Martineau return; 120602b0fbb9SMat Martineau 120702b0fbb9SMat Martineau __clear_retrans_timer(chan); 120802b0fbb9SMat Martineau __clear_monitor_timer(chan); 120902b0fbb9SMat Martineau __clear_ack_timer(chan); 121002b0fbb9SMat Martineau 121102b0fbb9SMat Martineau chan->retry_count = 0; 121202b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 1213a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.retries) 1214a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 1; 121502b0fbb9SMat Martineau else 121602b0fbb9SMat Martineau break; 121702b0fbb9SMat Martineau } 121802b0fbb9SMat Martineau 121902b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 122002b0fbb9SMat Martineau 122102b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 122202b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 122302b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 122402b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 122502b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 122602b0fbb9SMat Martineau 122702b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 122802b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 122902b0fbb9SMat Martineau 123002b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 123102b0fbb9SMat Martineau } 123202b0fbb9SMat Martineau 12335f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 12345f3847a4SMat Martineau { 12355f3847a4SMat Martineau u8 move_role = chan->move_role; 12365f3847a4SMat Martineau BT_DBG("chan %p", chan); 12375f3847a4SMat Martineau 12385f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 12395f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 12405f3847a4SMat Martineau 12415f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 12425f3847a4SMat Martineau return; 12435f3847a4SMat Martineau 12445f3847a4SMat Martineau switch (move_role) { 12455f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 12465f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 12475f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 12485f3847a4SMat Martineau break; 12495f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 12505f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 12515f3847a4SMat Martineau break; 12525f3847a4SMat Martineau } 12535f3847a4SMat Martineau } 12545f3847a4SMat Martineau 12559f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 12569f0caeb1SVinicius Costa Gomes { 1257315917e0SJohan Hedberg /* The channel may have already been flagged as connected in 1258315917e0SJohan Hedberg * case of receiving data before the L2CAP info req/rsp 1259315917e0SJohan Hedberg * procedure is complete. 1260315917e0SJohan Hedberg */ 1261315917e0SJohan Hedberg if (chan->state == BT_CONNECTED) 1262315917e0SJohan Hedberg return; 1263315917e0SJohan Hedberg 12642827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 12659f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 12669f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 12679f0caeb1SVinicius Costa Gomes 12680ce43ce6SJohan Hedberg if (chan->mode == L2CAP_MODE_LE_FLOWCTL && !chan->tx_credits) 12690ce43ce6SJohan Hedberg chan->ops->suspend(chan); 1270177f8f2bSJohan Hedberg 127154a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 12729f0caeb1SVinicius Costa Gomes 127354a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 12749f0caeb1SVinicius Costa Gomes } 12759f0caeb1SVinicius Costa Gomes 1276f1496deeSJohan Hedberg static void l2cap_le_connect(struct l2cap_chan *chan) 1277f1496deeSJohan Hedberg { 1278f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1279f1496deeSJohan Hedberg struct l2cap_le_conn_req req; 1280f1496deeSJohan Hedberg 1281595177f3SJohan Hedberg if (test_and_set_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags)) 1282595177f3SJohan Hedberg return; 1283595177f3SJohan Hedberg 1284ba8f5289SLuiz Augusto von Dentz l2cap_le_flowctl_init(chan, 0); 1285fe149310SLuiz Augusto von Dentz 1286f1496deeSJohan Hedberg req.psm = chan->psm; 1287f1496deeSJohan Hedberg req.scid = cpu_to_le16(chan->scid); 1288f1496deeSJohan Hedberg req.mtu = cpu_to_le16(chan->imtu); 12893916aed8SJohan Hedberg req.mps = cpu_to_le16(chan->mps); 12900cd75f7eSJohan Hedberg req.credits = cpu_to_le16(chan->rx_credits); 1291f1496deeSJohan Hedberg 1292f1496deeSJohan Hedberg chan->ident = l2cap_get_ident(conn); 1293f1496deeSJohan Hedberg 1294f1496deeSJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_REQ, 1295f1496deeSJohan Hedberg sizeof(req), &req); 1296f1496deeSJohan Hedberg } 1297f1496deeSJohan Hedberg 1298f1496deeSJohan Hedberg static void l2cap_le_start(struct l2cap_chan *chan) 1299f1496deeSJohan Hedberg { 1300f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1301f1496deeSJohan Hedberg 1302f1496deeSJohan Hedberg if (!smp_conn_security(conn->hcon, chan->sec_level)) 1303f1496deeSJohan Hedberg return; 1304f1496deeSJohan Hedberg 1305f1496deeSJohan Hedberg if (!chan->psm) { 1306f1496deeSJohan Hedberg l2cap_chan_ready(chan); 1307f1496deeSJohan Hedberg return; 1308f1496deeSJohan Hedberg } 1309f1496deeSJohan Hedberg 1310f1496deeSJohan Hedberg if (chan->state == BT_CONNECT) 1311f1496deeSJohan Hedberg l2cap_le_connect(chan); 1312f1496deeSJohan Hedberg } 1313f1496deeSJohan Hedberg 131493c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 131593c3e8f5SAndrei Emeltchenko { 131693c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 131793c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 131893c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 1319f1496deeSJohan Hedberg } else if (chan->conn->hcon->type == LE_LINK) { 1320f1496deeSJohan Hedberg l2cap_le_start(chan); 132193c3e8f5SAndrei Emeltchenko } else { 132293c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 132393c3e8f5SAndrei Emeltchenko } 132493c3e8f5SAndrei Emeltchenko } 132593c3e8f5SAndrei Emeltchenko 1326aeaeb4bbSJohan Hedberg static void l2cap_request_info(struct l2cap_conn *conn) 13270a708f8fSGustavo F. Padovan { 13280a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1329aeaeb4bbSJohan Hedberg 1330aeaeb4bbSJohan Hedberg if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1331aeaeb4bbSJohan Hedberg return; 1332aeaeb4bbSJohan Hedberg 1333dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 13340a708f8fSGustavo F. Padovan 13350a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 13360a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 13370a708f8fSGustavo F. Padovan 1338ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 13390a708f8fSGustavo F. Padovan 13402d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 13412d792818SGustavo Padovan sizeof(req), &req); 13420a708f8fSGustavo F. Padovan } 1343aeaeb4bbSJohan Hedberg 1344aeaeb4bbSJohan Hedberg static void l2cap_do_start(struct l2cap_chan *chan) 1345aeaeb4bbSJohan Hedberg { 1346aeaeb4bbSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1347aeaeb4bbSJohan Hedberg 1348aeaeb4bbSJohan Hedberg if (conn->hcon->type == LE_LINK) { 1349aeaeb4bbSJohan Hedberg l2cap_le_start(chan); 1350aeaeb4bbSJohan Hedberg return; 1351aeaeb4bbSJohan Hedberg } 1352aeaeb4bbSJohan Hedberg 1353aeaeb4bbSJohan Hedberg if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT)) { 1354aeaeb4bbSJohan Hedberg l2cap_request_info(conn); 1355aeaeb4bbSJohan Hedberg return; 1356aeaeb4bbSJohan Hedberg } 1357aeaeb4bbSJohan Hedberg 1358aeaeb4bbSJohan Hedberg if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 1359aeaeb4bbSJohan Hedberg return; 1360aeaeb4bbSJohan Hedberg 1361aeaeb4bbSJohan Hedberg if (l2cap_chan_check_security(chan, true) && 1362aeaeb4bbSJohan Hedberg __l2cap_no_conn_pending(chan)) 1363aeaeb4bbSJohan Hedberg l2cap_start_connection(chan); 13640a708f8fSGustavo F. Padovan } 13650a708f8fSGustavo F. Padovan 13660a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 13670a708f8fSGustavo F. Padovan { 13680a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 13690a708f8fSGustavo F. Padovan if (!disable_ertm) 13700a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 13710a708f8fSGustavo F. Padovan 13720a708f8fSGustavo F. Padovan switch (mode) { 13730a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 13740a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 13750a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 13760a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 13770a708f8fSGustavo F. Padovan default: 13780a708f8fSGustavo F. Padovan return 0x00; 13790a708f8fSGustavo F. Padovan } 13800a708f8fSGustavo F. Padovan } 13810a708f8fSGustavo F. Padovan 13825e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 13830a708f8fSGustavo F. Padovan { 13845e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 13850a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 13860a708f8fSGustavo F. Padovan 13870a708f8fSGustavo F. Padovan if (!conn) 13880a708f8fSGustavo F. Padovan return; 13890a708f8fSGustavo F. Padovan 1390aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 13911a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13921a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 13931a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 13940a708f8fSGustavo F. Padovan } 13950a708f8fSGustavo F. Padovan 13962338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1397d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1398416fa752SAndrei Emeltchenko return; 1399416fa752SAndrei Emeltchenko } 1400416fa752SAndrei Emeltchenko 1401fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1402fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 14032d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 14042d792818SGustavo Padovan sizeof(req), &req); 14050a708f8fSGustavo F. Padovan 1406f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 14070a708f8fSGustavo F. Padovan } 14080a708f8fSGustavo F. Padovan 14090a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 14100a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 14110a708f8fSGustavo F. Padovan { 14123df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 14130a708f8fSGustavo F. Padovan 14140a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 14150a708f8fSGustavo F. Padovan 14163df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 14170a708f8fSGustavo F. Padovan 14183df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 14196be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 14200a708f8fSGustavo F. Padovan 1421715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1422aeaeb4bbSJohan Hedberg l2cap_chan_ready(chan); 14236be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14240a708f8fSGustavo F. Padovan continue; 14250a708f8fSGustavo F. Padovan } 14260a708f8fSGustavo F. Padovan 142789bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1428e7cafc45SJohan Hedberg if (!l2cap_chan_check_security(chan, true) || 1429b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 14306be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14310a708f8fSGustavo F. Padovan continue; 14320a708f8fSGustavo F. Padovan } 14330a708f8fSGustavo F. Padovan 1434c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1435c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1436c1360a1cSGustavo F. Padovan &chan->conf_state)) { 14370f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 14386be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14390a708f8fSGustavo F. Padovan continue; 14400a708f8fSGustavo F. Padovan } 14410a708f8fSGustavo F. Padovan 144293c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 14430a708f8fSGustavo F. Padovan 144489bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 14450a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 14460a708f8fSGustavo F. Padovan char buf[128]; 1447fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1448fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 14490a708f8fSGustavo F. Padovan 1450e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 1451bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1452dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1453dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 14542dc4e510SGustavo Padovan chan->ops->defer(chan); 14550a708f8fSGustavo F. Padovan 14560a708f8fSGustavo F. Padovan } else { 1457acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1458dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 1459dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 14600a708f8fSGustavo F. Padovan } 14610a708f8fSGustavo F. Padovan } else { 1462dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1463dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 14640a708f8fSGustavo F. Padovan } 14650a708f8fSGustavo F. Padovan 1466fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1467fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 14680a708f8fSGustavo F. Padovan 1469c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 14700a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 14716be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14720a708f8fSGustavo F. Padovan continue; 14730a708f8fSGustavo F. Padovan } 14740a708f8fSGustavo F. Padovan 1475c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 14760a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 1477e860d2c9SBen Seri l2cap_build_conf_req(chan, buf, sizeof(buf)), buf); 147873ffa904SGustavo F. Padovan chan->num_conf_req++; 14790a708f8fSGustavo F. Padovan } 14800a708f8fSGustavo F. Padovan 14816be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14820a708f8fSGustavo F. Padovan } 14830a708f8fSGustavo F. Padovan 14843df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14850a708f8fSGustavo F. Padovan } 14860a708f8fSGustavo F. Padovan 1487b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1488b62f328bSVille Tervo { 1489cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 1490dcc36c16SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 1491b62f328bSVille Tervo 1492e760ec12SJohan Hedberg BT_DBG("%s conn %p", hdev->name, conn); 1493b62f328bSVille Tervo 1494e760ec12SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1495e760ec12SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1496e760ec12SJohan Hedberg */ 1497e760ec12SJohan Hedberg if (hcon->out) 1498e760ec12SJohan Hedberg smp_conn_security(hcon, hcon->pending_sec_level); 1499cc8dba2bSMarcel Holtmann 150080afeb6cSMarcel Holtmann /* For LE slave connections, make sure the connection interval 150180afeb6cSMarcel Holtmann * is in the range of the minium and maximum interval that has 150280afeb6cSMarcel Holtmann * been configured for this connection. If not, then trigger 150380afeb6cSMarcel Holtmann * the connection update procedure. 150480afeb6cSMarcel Holtmann */ 150540bef302SJohan Hedberg if (hcon->role == HCI_ROLE_SLAVE && 150680afeb6cSMarcel Holtmann (hcon->le_conn_interval < hcon->le_conn_min_interval || 150780afeb6cSMarcel Holtmann hcon->le_conn_interval > hcon->le_conn_max_interval)) { 150880afeb6cSMarcel Holtmann struct l2cap_conn_param_update_req req; 150980afeb6cSMarcel Holtmann 151080afeb6cSMarcel Holtmann req.min = cpu_to_le16(hcon->le_conn_min_interval); 151180afeb6cSMarcel Holtmann req.max = cpu_to_le16(hcon->le_conn_max_interval); 151280afeb6cSMarcel Holtmann req.latency = cpu_to_le16(hcon->le_conn_latency); 151380afeb6cSMarcel Holtmann req.to_multiplier = cpu_to_le16(hcon->le_supv_timeout); 151480afeb6cSMarcel Holtmann 151580afeb6cSMarcel Holtmann l2cap_send_cmd(conn, l2cap_get_ident(conn), 151680afeb6cSMarcel Holtmann L2CAP_CONN_PARAM_UPDATE_REQ, sizeof(req), &req); 151780afeb6cSMarcel Holtmann } 1518b62f328bSVille Tervo } 1519b62f328bSVille Tervo 15200a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 15210a708f8fSGustavo F. Padovan { 152248454079SGustavo F. Padovan struct l2cap_chan *chan; 1523cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 15240a708f8fSGustavo F. Padovan 15250a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15260a708f8fSGustavo F. Padovan 1527aeaeb4bbSJohan Hedberg if (hcon->type == ACL_LINK) 1528aeaeb4bbSJohan Hedberg l2cap_request_info(conn); 1529aeaeb4bbSJohan Hedberg 1530e760ec12SJohan Hedberg mutex_lock(&conn->chan_lock); 1531e760ec12SJohan Hedberg 15323df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1533baa7e1faSGustavo F. Padovan 15346be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15350a708f8fSGustavo F. Padovan 15362338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1537416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1538416fa752SAndrei Emeltchenko continue; 1539416fa752SAndrei Emeltchenko } 1540416fa752SAndrei Emeltchenko 1541cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1542f1496deeSJohan Hedberg l2cap_le_start(chan); 154363128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 1544aeaeb4bbSJohan Hedberg if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 154574e75740SGustavo Padovan l2cap_chan_ready(chan); 15461c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1547fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 15481c244f79SGustavo Padovan } 15490a708f8fSGustavo F. Padovan 15506be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15510a708f8fSGustavo F. Padovan } 15520a708f8fSGustavo F. Padovan 15533df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 155461a939c6SJohan Hedberg 155579a05727SJohan Hedberg if (hcon->type == LE_LINK) 155679a05727SJohan Hedberg l2cap_le_conn_ready(conn); 155779a05727SJohan Hedberg 155861a939c6SJohan Hedberg queue_work(hcon->hdev->workqueue, &conn->pending_rx_work); 15590a708f8fSGustavo F. Padovan } 15600a708f8fSGustavo F. Padovan 15610a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 15620a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 15630a708f8fSGustavo F. Padovan { 156448454079SGustavo F. Padovan struct l2cap_chan *chan; 15650a708f8fSGustavo F. Padovan 15660a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15670a708f8fSGustavo F. Padovan 15683df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15690a708f8fSGustavo F. Padovan 15703df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1571ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 15721d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 15730a708f8fSGustavo F. Padovan } 15740a708f8fSGustavo F. Padovan 15753df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15760a708f8fSGustavo F. Padovan } 15770a708f8fSGustavo F. Padovan 1578f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 15790a708f8fSGustavo F. Padovan { 1580f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1581030013d8SGustavo F. Padovan info_timer.work); 15820a708f8fSGustavo F. Padovan 15830a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 15840a708f8fSGustavo F. Padovan conn->info_ident = 0; 15850a708f8fSGustavo F. Padovan 15860a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 15870a708f8fSGustavo F. Padovan } 15880a708f8fSGustavo F. Padovan 15892c8e1411SDavid Herrmann /* 15902c8e1411SDavid Herrmann * l2cap_user 15912c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 15922c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 15932c8e1411SDavid Herrmann * during unregistration. 15942c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 15952c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 15962c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 15972c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 15982c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 15992c8e1411SDavid Herrmann * any time if they don't. 16002c8e1411SDavid Herrmann */ 16012c8e1411SDavid Herrmann 16022c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 16032c8e1411SDavid Herrmann { 16042c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16052c8e1411SDavid Herrmann int ret; 16062c8e1411SDavid Herrmann 16072c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 16082c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 16092c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 16102c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 16112c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 16122c8e1411SDavid Herrmann * here, too. */ 16132c8e1411SDavid Herrmann 16142c8e1411SDavid Herrmann hci_dev_lock(hdev); 16152c8e1411SDavid Herrmann 1616835a6a2fSAlexey Dobriyan if (!list_empty(&user->list)) { 16172c8e1411SDavid Herrmann ret = -EINVAL; 16182c8e1411SDavid Herrmann goto out_unlock; 16192c8e1411SDavid Herrmann } 16202c8e1411SDavid Herrmann 16212c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 16222c8e1411SDavid Herrmann if (!conn->hchan) { 16232c8e1411SDavid Herrmann ret = -ENODEV; 16242c8e1411SDavid Herrmann goto out_unlock; 16252c8e1411SDavid Herrmann } 16262c8e1411SDavid Herrmann 16272c8e1411SDavid Herrmann ret = user->probe(conn, user); 16282c8e1411SDavid Herrmann if (ret) 16292c8e1411SDavid Herrmann goto out_unlock; 16302c8e1411SDavid Herrmann 16312c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 16322c8e1411SDavid Herrmann ret = 0; 16332c8e1411SDavid Herrmann 16342c8e1411SDavid Herrmann out_unlock: 16352c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16362c8e1411SDavid Herrmann return ret; 16372c8e1411SDavid Herrmann } 16382c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 16392c8e1411SDavid Herrmann 16402c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 16412c8e1411SDavid Herrmann { 16422c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16432c8e1411SDavid Herrmann 16442c8e1411SDavid Herrmann hci_dev_lock(hdev); 16452c8e1411SDavid Herrmann 1646835a6a2fSAlexey Dobriyan if (list_empty(&user->list)) 16472c8e1411SDavid Herrmann goto out_unlock; 16482c8e1411SDavid Herrmann 1649ab944c83STedd Ho-Jeong An list_del_init(&user->list); 16502c8e1411SDavid Herrmann user->remove(conn, user); 16512c8e1411SDavid Herrmann 16522c8e1411SDavid Herrmann out_unlock: 16532c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16542c8e1411SDavid Herrmann } 16552c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 16562c8e1411SDavid Herrmann 16572c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 16582c8e1411SDavid Herrmann { 16592c8e1411SDavid Herrmann struct l2cap_user *user; 16602c8e1411SDavid Herrmann 16612c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 16622c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 1663ab944c83STedd Ho-Jeong An list_del_init(&user->list); 16642c8e1411SDavid Herrmann user->remove(conn, user); 16652c8e1411SDavid Herrmann } 16662c8e1411SDavid Herrmann } 16672c8e1411SDavid Herrmann 16685d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 16695d3de7dfSVinicius Costa Gomes { 16705d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 16715d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 16725d3de7dfSVinicius Costa Gomes 16735d3de7dfSVinicius Costa Gomes if (!conn) 16745d3de7dfSVinicius Costa Gomes return; 16755d3de7dfSVinicius Costa Gomes 16765d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 16775d3de7dfSVinicius Costa Gomes 16785d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 16795d3de7dfSVinicius Costa Gomes 168061a939c6SJohan Hedberg skb_queue_purge(&conn->pending_rx); 16817ab56c3aSJukka Taimisto 16827ab56c3aSJukka Taimisto /* We can not call flush_work(&conn->pending_rx_work) here since we 16837ab56c3aSJukka Taimisto * might block if we are running on a worker from the same workqueue 16847ab56c3aSJukka Taimisto * pending_rx_work is waiting on. 16857ab56c3aSJukka Taimisto */ 16867ab56c3aSJukka Taimisto if (work_pending(&conn->pending_rx_work)) 16877ab56c3aSJukka Taimisto cancel_work_sync(&conn->pending_rx_work); 168861a939c6SJohan Hedberg 1689f3d82d0cSJohan Hedberg if (work_pending(&conn->id_addr_update_work)) 1690f3d82d0cSJohan Hedberg cancel_work_sync(&conn->id_addr_update_work); 1691f3d82d0cSJohan Hedberg 16922c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 16932c8e1411SDavid Herrmann 1694e31fb860SJohan Hedberg /* Force the connection to be immediately dropped */ 1695e31fb860SJohan Hedberg hcon->disc_timeout = 0; 1696e31fb860SJohan Hedberg 16973df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 16983df91ea2SAndrei Emeltchenko 16995d3de7dfSVinicius Costa Gomes /* Kill channels */ 17005d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 170161d6ef3eSMat Martineau l2cap_chan_hold(chan); 17026be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 17036be36555SAndrei Emeltchenko 17045d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 17056be36555SAndrei Emeltchenko 17066be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 17076be36555SAndrei Emeltchenko 170880b98027SGustavo Padovan chan->ops->close(chan); 170961d6ef3eSMat Martineau l2cap_chan_put(chan); 17105d3de7dfSVinicius Costa Gomes } 17115d3de7dfSVinicius Costa Gomes 17123df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 17133df91ea2SAndrei Emeltchenko 171473d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 171573d80debSLuiz Augusto von Dentz 17165d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1717127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 17185d3de7dfSVinicius Costa Gomes 17195d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 17209c903e37SDavid Herrmann conn->hchan = NULL; 17219c903e37SDavid Herrmann l2cap_conn_put(conn); 17225d3de7dfSVinicius Costa Gomes } 17235d3de7dfSVinicius Costa Gomes 17249c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 17259c903e37SDavid Herrmann { 17269c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 17279c903e37SDavid Herrmann 17289c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17299c903e37SDavid Herrmann kfree(conn); 17309c903e37SDavid Herrmann } 17319c903e37SDavid Herrmann 173251bb8457SJohan Hedberg struct l2cap_conn *l2cap_conn_get(struct l2cap_conn *conn) 17339c903e37SDavid Herrmann { 17349c903e37SDavid Herrmann kref_get(&conn->ref); 173551bb8457SJohan Hedberg return conn; 17369c903e37SDavid Herrmann } 17379c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17389c903e37SDavid Herrmann 17399c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17409c903e37SDavid Herrmann { 17419c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17429c903e37SDavid Herrmann } 17439c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17449c903e37SDavid Herrmann 17450a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17460a708f8fSGustavo F. Padovan 1747c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17480a708f8fSGustavo F. Padovan * Returns closest match. 17490a708f8fSGustavo F. Padovan */ 1750c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1751c2287681SIdo Yariv bdaddr_t *src, 1752bf20fd4eSJohan Hedberg bdaddr_t *dst, 1753bf20fd4eSJohan Hedberg u8 link_type) 17540a708f8fSGustavo F. Padovan { 175523691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17560a708f8fSGustavo F. Padovan 175723691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17580a708f8fSGustavo F. Padovan 175923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 176089bc500eSGustavo F. Padovan if (state && c->state != state) 17610a708f8fSGustavo F. Padovan continue; 17620a708f8fSGustavo F. Padovan 1763bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1764bf20fd4eSJohan Hedberg continue; 1765bf20fd4eSJohan Hedberg 1766bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1767bf20fd4eSJohan Hedberg continue; 1768bf20fd4eSJohan Hedberg 176923691d75SGustavo F. Padovan if (c->psm == psm) { 1770c2287681SIdo Yariv int src_match, dst_match; 1771c2287681SIdo Yariv int src_any, dst_any; 1772c2287681SIdo Yariv 17730a708f8fSGustavo F. Padovan /* Exact match. */ 17747eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17757eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1776c2287681SIdo Yariv if (src_match && dst_match) { 1777a24cce14SJohan Hedberg l2cap_chan_hold(c); 1778a7567b20SJohannes Berg read_unlock(&chan_list_lock); 177923691d75SGustavo F. Padovan return c; 178023691d75SGustavo F. Padovan } 17810a708f8fSGustavo F. Padovan 17820a708f8fSGustavo F. Padovan /* Closest match */ 17837eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17847eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1785c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1786c2287681SIdo Yariv (src_any && dst_any)) 178723691d75SGustavo F. Padovan c1 = c; 17880a708f8fSGustavo F. Padovan } 17890a708f8fSGustavo F. Padovan } 17900a708f8fSGustavo F. Padovan 1791a24cce14SJohan Hedberg if (c1) 1792a24cce14SJohan Hedberg l2cap_chan_hold(c1); 1793a24cce14SJohan Hedberg 179423691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17950a708f8fSGustavo F. Padovan 179623691d75SGustavo F. Padovan return c1; 17970a708f8fSGustavo F. Padovan } 17980a708f8fSGustavo F. Padovan 1799721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 18000a708f8fSGustavo F. Padovan { 1801721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1802721c4181SGustavo F. Padovan monitor_timer.work); 18030a708f8fSGustavo F. Padovan 1804525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 18050a708f8fSGustavo F. Padovan 18066be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18076be36555SAndrei Emeltchenko 180880909e04SMat Martineau if (!chan->conn) { 18096be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18108d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18110a708f8fSGustavo F. Padovan return; 18120a708f8fSGustavo F. Padovan } 18130a708f8fSGustavo F. Padovan 1814401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 18150a708f8fSGustavo F. Padovan 18166be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18178d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18180a708f8fSGustavo F. Padovan } 18190a708f8fSGustavo F. Padovan 1820721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 18210a708f8fSGustavo F. Padovan { 1822721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1823721c4181SGustavo F. Padovan retrans_timer.work); 18240a708f8fSGustavo F. Padovan 182549208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 18260a708f8fSGustavo F. Padovan 18276be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18286be36555SAndrei Emeltchenko 182980909e04SMat Martineau if (!chan->conn) { 183080909e04SMat Martineau l2cap_chan_unlock(chan); 183180909e04SMat Martineau l2cap_chan_put(chan); 183280909e04SMat Martineau return; 183380909e04SMat Martineau } 18340a708f8fSGustavo F. Padovan 1835401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 18366be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18378d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18380a708f8fSGustavo F. Padovan } 18390a708f8fSGustavo F. Padovan 1840d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 18413733937dSMat Martineau struct sk_buff_head *skbs) 18420a708f8fSGustavo F. Padovan { 18430a708f8fSGustavo F. Padovan struct sk_buff *skb; 18443733937dSMat Martineau struct l2cap_ctrl *control; 18450a708f8fSGustavo F. Padovan 18463733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 18473733937dSMat Martineau 1848b99e13adSMat Martineau if (__chan_is_moving(chan)) 1849b99e13adSMat Martineau return; 1850b99e13adSMat Martineau 18513733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 18523733937dSMat Martineau 18533733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 18543733937dSMat Martineau 18553733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 18563733937dSMat Martineau 1857a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 1; 1858a4368ff3SJohan Hedberg control = &bt_cb(skb)->l2cap; 18593733937dSMat Martineau 18603733937dSMat Martineau control->reqseq = 0; 18613733937dSMat Martineau control->txseq = chan->next_tx_seq; 18623733937dSMat Martineau 18633733937dSMat Martineau __pack_control(chan, control, skb); 18640a708f8fSGustavo F. Padovan 186547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 18663733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 18673733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18680a708f8fSGustavo F. Padovan } 18690a708f8fSGustavo F. Padovan 18704343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 18710a708f8fSGustavo F. Padovan 1872b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 18733733937dSMat Martineau 1874836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 18753733937dSMat Martineau chan->frames_sent++; 18760a708f8fSGustavo F. Padovan } 18770a708f8fSGustavo F. Padovan } 18780a708f8fSGustavo F. Padovan 187967c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 18800a708f8fSGustavo F. Padovan { 18810a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 188218a48e76SMat Martineau struct l2cap_ctrl *control; 188318a48e76SMat Martineau int sent = 0; 188418a48e76SMat Martineau 188518a48e76SMat Martineau BT_DBG("chan %p", chan); 18860a708f8fSGustavo F. Padovan 188789bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 18880a708f8fSGustavo F. Padovan return -ENOTCONN; 18890a708f8fSGustavo F. Padovan 189094122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 189194122bbeSMat Martineau return 0; 189294122bbeSMat Martineau 1893b99e13adSMat Martineau if (__chan_is_moving(chan)) 1894b99e13adSMat Martineau return 0; 1895b99e13adSMat Martineau 189618a48e76SMat Martineau while (chan->tx_send_head && 189718a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 189818a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 18990a708f8fSGustavo F. Padovan 190018a48e76SMat Martineau skb = chan->tx_send_head; 19010a708f8fSGustavo F. Padovan 1902a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 1; 1903a4368ff3SJohan Hedberg control = &bt_cb(skb)->l2cap; 19040a708f8fSGustavo F. Padovan 1905e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 190618a48e76SMat Martineau control->final = 1; 1907e2ab4353SGustavo F. Padovan 190818a48e76SMat Martineau control->reqseq = chan->buffer_seq; 190918a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 191018a48e76SMat Martineau control->txseq = chan->next_tx_seq; 19110a708f8fSGustavo F. Padovan 191218a48e76SMat Martineau __pack_control(chan, control, skb); 19130a708f8fSGustavo F. Padovan 191447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 191518a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 191618a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 19170a708f8fSGustavo F. Padovan } 19180a708f8fSGustavo F. Padovan 191918a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 192018a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 192118a48e76SMat Martineau */ 192218a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 192318a48e76SMat Martineau 192418a48e76SMat Martineau if (!tx_skb) 192518a48e76SMat Martineau break; 19260a708f8fSGustavo F. Padovan 19271a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 19280a708f8fSGustavo F. Padovan 1929836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19306a026610SGustavo F. Padovan chan->unacked_frames++; 19316a026610SGustavo F. Padovan chan->frames_sent++; 193218a48e76SMat Martineau sent++; 19330a708f8fSGustavo F. Padovan 193458d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 193558d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 19360a708f8fSGustavo F. Padovan else 193758d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 193818a48e76SMat Martineau 193918a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 1940b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19410a708f8fSGustavo F. Padovan } 19420a708f8fSGustavo F. Padovan 1943b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 1944b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 194518a48e76SMat Martineau 194618a48e76SMat Martineau return sent; 19470a708f8fSGustavo F. Padovan } 19480a708f8fSGustavo F. Padovan 1949e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 1950e1fbd4c1SMat Martineau { 1951e1fbd4c1SMat Martineau struct l2cap_ctrl control; 1952e1fbd4c1SMat Martineau struct sk_buff *skb; 1953e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 1954e1fbd4c1SMat Martineau u16 seq; 1955e1fbd4c1SMat Martineau 1956e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 1957e1fbd4c1SMat Martineau 1958e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 1959e1fbd4c1SMat Martineau return; 1960e1fbd4c1SMat Martineau 1961b99e13adSMat Martineau if (__chan_is_moving(chan)) 1962b99e13adSMat Martineau return; 1963b99e13adSMat Martineau 1964e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 1965e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 1966e1fbd4c1SMat Martineau 1967e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 1968e1fbd4c1SMat Martineau if (!skb) { 1969e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 1970e1fbd4c1SMat Martineau seq); 1971e1fbd4c1SMat Martineau continue; 1972e1fbd4c1SMat Martineau } 1973e1fbd4c1SMat Martineau 1974a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries++; 1975a4368ff3SJohan Hedberg control = bt_cb(skb)->l2cap; 1976e1fbd4c1SMat Martineau 1977e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 1978a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries > chan->max_tx) { 1979e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 19805e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 1981e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1982e1fbd4c1SMat Martineau break; 1983e1fbd4c1SMat Martineau } 1984e1fbd4c1SMat Martineau 1985e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 1986e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 1987e1fbd4c1SMat Martineau control.final = 1; 1988e1fbd4c1SMat Martineau else 1989e1fbd4c1SMat Martineau control.final = 0; 1990e1fbd4c1SMat Martineau 1991e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 1992e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 1993e1fbd4c1SMat Martineau * writeable copy 1994e1fbd4c1SMat Martineau */ 19958bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 1996e1fbd4c1SMat Martineau } else { 19978bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 1998e1fbd4c1SMat Martineau } 1999e1fbd4c1SMat Martineau 2000e1fbd4c1SMat Martineau if (!tx_skb) { 2001e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2002e1fbd4c1SMat Martineau break; 2003e1fbd4c1SMat Martineau } 2004e1fbd4c1SMat Martineau 2005e1fbd4c1SMat Martineau /* Update skb contents */ 2006e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 2007e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 2008e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2009e1fbd4c1SMat Martineau } else { 2010e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 2011e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2012e1fbd4c1SMat Martineau } 2013e1fbd4c1SMat Martineau 201413cac152SLukasz Rymanowski /* Update FCS */ 2015e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 201613cac152SLukasz Rymanowski u16 fcs = crc16(0, (u8 *) tx_skb->data, 201713cac152SLukasz Rymanowski tx_skb->len - L2CAP_FCS_SIZE); 201813cac152SLukasz Rymanowski put_unaligned_le16(fcs, skb_tail_pointer(tx_skb) - 201913cac152SLukasz Rymanowski L2CAP_FCS_SIZE); 2020e1fbd4c1SMat Martineau } 2021e1fbd4c1SMat Martineau 2022e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2023e1fbd4c1SMat Martineau 2024e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2025e1fbd4c1SMat Martineau 2026e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2027e1fbd4c1SMat Martineau } 2028e1fbd4c1SMat Martineau } 2029e1fbd4c1SMat Martineau 2030f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2031f80842a8SMat Martineau struct l2cap_ctrl *control) 2032f80842a8SMat Martineau { 2033f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2034f80842a8SMat Martineau 2035f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2036f80842a8SMat Martineau l2cap_ertm_resend(chan); 2037f80842a8SMat Martineau } 2038f80842a8SMat Martineau 2039d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2040d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2041d2a7ac5dSMat Martineau { 2042e1fbd4c1SMat Martineau struct sk_buff *skb; 2043e1fbd4c1SMat Martineau 2044e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2045e1fbd4c1SMat Martineau 2046e1fbd4c1SMat Martineau if (control->poll) 2047e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2048e1fbd4c1SMat Martineau 2049e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2050e1fbd4c1SMat Martineau 2051e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2052e1fbd4c1SMat Martineau return; 2053e1fbd4c1SMat Martineau 2054e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2055e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2056a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.txseq == control->reqseq || 2057e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2058e1fbd4c1SMat Martineau break; 2059e1fbd4c1SMat Martineau } 2060e1fbd4c1SMat Martineau 2061e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2062e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2063e1fbd4c1SMat Martineau break; 2064e1fbd4c1SMat Martineau 2065e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2066a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.txseq); 2067e1fbd4c1SMat Martineau } 2068e1fbd4c1SMat Martineau 2069e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2070e1fbd4c1SMat Martineau } 2071d2a7ac5dSMat Martineau } 2072d2a7ac5dSMat Martineau 2073b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2074b17e73bbSSzymon Janc { 20750a0aba42SMat Martineau struct l2cap_ctrl control; 20760a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 20770a0aba42SMat Martineau chan->last_acked_seq); 20780a0aba42SMat Martineau int threshold; 20790a0aba42SMat Martineau 20800a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 20810a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 20820a0aba42SMat Martineau 20830a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 20840a0aba42SMat Martineau control.sframe = 1; 20850a0aba42SMat Martineau 20860a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 20870a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2088b17e73bbSSzymon Janc __clear_ack_timer(chan); 20890a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 20900a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20910a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20920a0aba42SMat Martineau } else { 20930a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 20940a0aba42SMat Martineau l2cap_ertm_send(chan); 20950a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 20960a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 20970a0aba42SMat Martineau frames_to_ack = 0; 20980a0aba42SMat Martineau } 20990a0aba42SMat Martineau 2100c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 21010a0aba42SMat Martineau * Calculate without mul or div 21020a0aba42SMat Martineau */ 2103c20f8e35SMat Martineau threshold = chan->ack_win; 21040a0aba42SMat Martineau threshold += threshold << 1; 21050a0aba42SMat Martineau threshold >>= 2; 21060a0aba42SMat Martineau 2107b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 21080a0aba42SMat Martineau threshold); 21090a0aba42SMat Martineau 21100a0aba42SMat Martineau if (frames_to_ack >= threshold) { 21110a0aba42SMat Martineau __clear_ack_timer(chan); 21120a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 21130a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21140a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21150a0aba42SMat Martineau frames_to_ack = 0; 21160a0aba42SMat Martineau } 21170a0aba42SMat Martineau 21180a0aba42SMat Martineau if (frames_to_ack) 21190a0aba42SMat Martineau __set_ack_timer(chan); 21200a0aba42SMat Martineau } 2121b17e73bbSSzymon Janc } 2122b17e73bbSSzymon Janc 212304124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 212404124681SGustavo F. Padovan struct msghdr *msg, int len, 212504124681SGustavo F. Padovan int count, struct sk_buff *skb) 21260a708f8fSGustavo F. Padovan { 21270952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 21280a708f8fSGustavo F. Padovan struct sk_buff **frag; 212990338947SGustavo Padovan int sent = 0; 21300a708f8fSGustavo F. Padovan 2131cbbd26b8SAl Viro if (!copy_from_iter_full(skb_put(skb, count), count, &msg->msg_iter)) 21320a708f8fSGustavo F. Padovan return -EFAULT; 21330a708f8fSGustavo F. Padovan 21340a708f8fSGustavo F. Padovan sent += count; 21350a708f8fSGustavo F. Padovan len -= count; 21360a708f8fSGustavo F. Padovan 21370a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 21380a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 21390a708f8fSGustavo F. Padovan while (len) { 2140fbe00700SGustavo Padovan struct sk_buff *tmp; 2141fbe00700SGustavo Padovan 21420a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 21430a708f8fSGustavo F. Padovan 2144d9fbd02bSMarcel Holtmann tmp = chan->ops->alloc_skb(chan, 0, count, 214590338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2146fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2147fbe00700SGustavo Padovan return PTR_ERR(tmp); 21482f7719ceSAndrei Emeltchenko 2149fbe00700SGustavo Padovan *frag = tmp; 2150fbe00700SGustavo Padovan 2151cbbd26b8SAl Viro if (!copy_from_iter_full(skb_put(*frag, count), count, 2152cbbd26b8SAl Viro &msg->msg_iter)) 21530a708f8fSGustavo F. Padovan return -EFAULT; 21540a708f8fSGustavo F. Padovan 21550a708f8fSGustavo F. Padovan sent += count; 21560a708f8fSGustavo F. Padovan len -= count; 21570a708f8fSGustavo F. Padovan 21582d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 21592d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 21602d0ed3d5SGustavo Padovan 21610a708f8fSGustavo F. Padovan frag = &(*frag)->next; 21620a708f8fSGustavo F. Padovan } 21630a708f8fSGustavo F. Padovan 21640a708f8fSGustavo F. Padovan return sent; 21650a708f8fSGustavo F. Padovan } 21660a708f8fSGustavo F. Padovan 21675e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 21688d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21690a708f8fSGustavo F. Padovan { 21708c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21710a708f8fSGustavo F. Padovan struct sk_buff *skb; 217203a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 21730a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21740a708f8fSGustavo F. Padovan 21758d46321cSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu", chan, 21768d46321cSMarcel Holtmann __le16_to_cpu(chan->psm), len); 21770a708f8fSGustavo F. Padovan 21780a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 21792f7719ceSAndrei Emeltchenko 2180d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 218190338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 218290338947SGustavo Padovan if (IS_ERR(skb)) 218390338947SGustavo Padovan return skb; 21840a708f8fSGustavo F. Padovan 21850a708f8fSGustavo F. Padovan /* Create L2CAP header */ 21864df864c1SJohannes Berg lh = skb_put(skb, L2CAP_HDR_SIZE); 2187fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2188daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 218943b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 21900a708f8fSGustavo F. Padovan 21910952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 21920a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 21930a708f8fSGustavo F. Padovan kfree_skb(skb); 21940a708f8fSGustavo F. Padovan return ERR_PTR(err); 21950a708f8fSGustavo F. Padovan } 21960a708f8fSGustavo F. Padovan return skb; 21970a708f8fSGustavo F. Padovan } 21980a708f8fSGustavo F. Padovan 21995e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 22008d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 22010a708f8fSGustavo F. Padovan { 22028c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22030a708f8fSGustavo F. Padovan struct sk_buff *skb; 2204f2ba7faeSGustavo Padovan int err, count; 22050a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22060a708f8fSGustavo F. Padovan 2207b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22080a708f8fSGustavo F. Padovan 2209f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 22102f7719ceSAndrei Emeltchenko 2211d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, L2CAP_HDR_SIZE, count, 221290338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 221390338947SGustavo Padovan if (IS_ERR(skb)) 221490338947SGustavo Padovan return skb; 22150a708f8fSGustavo F. Padovan 22160a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22174df864c1SJohannes Berg lh = skb_put(skb, L2CAP_HDR_SIZE); 2218fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22196ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 22200a708f8fSGustavo F. Padovan 22210952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22220a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22230a708f8fSGustavo F. Padovan kfree_skb(skb); 22240a708f8fSGustavo F. Padovan return ERR_PTR(err); 22250a708f8fSGustavo F. Padovan } 22260a708f8fSGustavo F. Padovan return skb; 22270a708f8fSGustavo F. Padovan } 22280a708f8fSGustavo F. Padovan 2229ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2230ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 223194122bbeSMat Martineau u16 sdulen) 22320a708f8fSGustavo F. Padovan { 22338c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22340a708f8fSGustavo F. Padovan struct sk_buff *skb; 2235e4ca6d98SAndrei Emeltchenko int err, count, hlen; 22360a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22370a708f8fSGustavo F. Padovan 2238b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22390a708f8fSGustavo F. Padovan 22400a708f8fSGustavo F. Padovan if (!conn) 22410a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 22420a708f8fSGustavo F. Padovan 2243ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2244e4ca6d98SAndrei Emeltchenko 22450a708f8fSGustavo F. Padovan if (sdulen) 224603a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 22470a708f8fSGustavo F. Padovan 224847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 224903a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 22500a708f8fSGustavo F. Padovan 22510a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22522f7719ceSAndrei Emeltchenko 2253d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 225490338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 225590338947SGustavo Padovan if (IS_ERR(skb)) 225690338947SGustavo Padovan return skb; 22570a708f8fSGustavo F. Padovan 22580a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22594df864c1SJohannes Berg lh = skb_put(skb, L2CAP_HDR_SIZE); 2260fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22610a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 226288843ab0SAndrei Emeltchenko 226318a48e76SMat Martineau /* Control header is populated later */ 226418a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 226518a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 226618a48e76SMat Martineau else 226718a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 226888843ab0SAndrei Emeltchenko 22690a708f8fSGustavo F. Padovan if (sdulen) 227003a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 22710a708f8fSGustavo F. Padovan 22720952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22730a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22740a708f8fSGustavo F. Padovan kfree_skb(skb); 22750a708f8fSGustavo F. Padovan return ERR_PTR(err); 22760a708f8fSGustavo F. Padovan } 22770a708f8fSGustavo F. Padovan 2278a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.fcs = chan->fcs; 2279a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries = 0; 22800a708f8fSGustavo F. Padovan return skb; 22810a708f8fSGustavo F. Padovan } 22820a708f8fSGustavo F. Padovan 228394122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 228494122bbeSMat Martineau struct sk_buff_head *seg_queue, 228594122bbeSMat Martineau struct msghdr *msg, size_t len) 22860a708f8fSGustavo F. Padovan { 22870a708f8fSGustavo F. Padovan struct sk_buff *skb; 228894122bbeSMat Martineau u16 sdu_len; 228994122bbeSMat Martineau size_t pdu_len; 229094122bbeSMat Martineau u8 sar; 22910a708f8fSGustavo F. Padovan 2292b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 22930a708f8fSGustavo F. Padovan 229494122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 229594122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 229694122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 229794122bbeSMat Martineau */ 229894122bbeSMat Martineau 229994122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 230094122bbeSMat Martineau pdu_len = chan->conn->mtu; 230194122bbeSMat Martineau 2302a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2303a549574dSMat Martineau if (!chan->hs_hcon) 230494122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 230594122bbeSMat Martineau 230694122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 230735d401dfSGustavo Padovan if (chan->fcs) 230835d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 230935d401dfSGustavo Padovan 2310ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 231194122bbeSMat Martineau 231294122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 231394122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 231494122bbeSMat Martineau 231594122bbeSMat Martineau if (len <= pdu_len) { 231694122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 231794122bbeSMat Martineau sdu_len = 0; 231894122bbeSMat Martineau pdu_len = len; 231994122bbeSMat Martineau } else { 232094122bbeSMat Martineau sar = L2CAP_SAR_START; 232194122bbeSMat Martineau sdu_len = len; 232294122bbeSMat Martineau } 23230a708f8fSGustavo F. Padovan 23240a708f8fSGustavo F. Padovan while (len > 0) { 232594122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 23260a708f8fSGustavo F. Padovan 23270a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 232894122bbeSMat Martineau __skb_queue_purge(seg_queue); 23290a708f8fSGustavo F. Padovan return PTR_ERR(skb); 23300a708f8fSGustavo F. Padovan } 23310a708f8fSGustavo F. Padovan 2332a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.sar = sar; 233394122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 23340a708f8fSGustavo F. Padovan 233594122bbeSMat Martineau len -= pdu_len; 2336069cb270SLukasz Rymanowski if (sdu_len) 233794122bbeSMat Martineau sdu_len = 0; 233894122bbeSMat Martineau 233994122bbeSMat Martineau if (len <= pdu_len) { 234094122bbeSMat Martineau sar = L2CAP_SAR_END; 234194122bbeSMat Martineau pdu_len = len; 234294122bbeSMat Martineau } else { 234394122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 234494122bbeSMat Martineau } 234594122bbeSMat Martineau } 234694122bbeSMat Martineau 2347f0f62799SGustavo Padovan return 0; 23480a708f8fSGustavo F. Padovan } 23490a708f8fSGustavo F. Padovan 2350177f8f2bSJohan Hedberg static struct sk_buff *l2cap_create_le_flowctl_pdu(struct l2cap_chan *chan, 2351177f8f2bSJohan Hedberg struct msghdr *msg, 2352177f8f2bSJohan Hedberg size_t len, u16 sdulen) 2353177f8f2bSJohan Hedberg { 2354177f8f2bSJohan Hedberg struct l2cap_conn *conn = chan->conn; 2355177f8f2bSJohan Hedberg struct sk_buff *skb; 2356177f8f2bSJohan Hedberg int err, count, hlen; 2357177f8f2bSJohan Hedberg struct l2cap_hdr *lh; 2358177f8f2bSJohan Hedberg 2359177f8f2bSJohan Hedberg BT_DBG("chan %p len %zu", chan, len); 2360177f8f2bSJohan Hedberg 2361177f8f2bSJohan Hedberg if (!conn) 2362177f8f2bSJohan Hedberg return ERR_PTR(-ENOTCONN); 2363177f8f2bSJohan Hedberg 2364177f8f2bSJohan Hedberg hlen = L2CAP_HDR_SIZE; 2365177f8f2bSJohan Hedberg 2366177f8f2bSJohan Hedberg if (sdulen) 2367177f8f2bSJohan Hedberg hlen += L2CAP_SDULEN_SIZE; 2368177f8f2bSJohan Hedberg 2369177f8f2bSJohan Hedberg count = min_t(unsigned int, (conn->mtu - hlen), len); 2370177f8f2bSJohan Hedberg 2371d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 2372177f8f2bSJohan Hedberg msg->msg_flags & MSG_DONTWAIT); 2373177f8f2bSJohan Hedberg if (IS_ERR(skb)) 2374177f8f2bSJohan Hedberg return skb; 2375177f8f2bSJohan Hedberg 2376177f8f2bSJohan Hedberg /* Create L2CAP header */ 23774df864c1SJohannes Berg lh = skb_put(skb, L2CAP_HDR_SIZE); 2378177f8f2bSJohan Hedberg lh->cid = cpu_to_le16(chan->dcid); 2379177f8f2bSJohan Hedberg lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 2380177f8f2bSJohan Hedberg 2381177f8f2bSJohan Hedberg if (sdulen) 2382177f8f2bSJohan Hedberg put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 2383177f8f2bSJohan Hedberg 2384177f8f2bSJohan Hedberg err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 2385177f8f2bSJohan Hedberg if (unlikely(err < 0)) { 2386177f8f2bSJohan Hedberg kfree_skb(skb); 2387177f8f2bSJohan Hedberg return ERR_PTR(err); 2388177f8f2bSJohan Hedberg } 2389177f8f2bSJohan Hedberg 2390177f8f2bSJohan Hedberg return skb; 2391177f8f2bSJohan Hedberg } 2392177f8f2bSJohan Hedberg 2393177f8f2bSJohan Hedberg static int l2cap_segment_le_sdu(struct l2cap_chan *chan, 2394177f8f2bSJohan Hedberg struct sk_buff_head *seg_queue, 2395177f8f2bSJohan Hedberg struct msghdr *msg, size_t len) 2396177f8f2bSJohan Hedberg { 2397177f8f2bSJohan Hedberg struct sk_buff *skb; 2398177f8f2bSJohan Hedberg size_t pdu_len; 2399177f8f2bSJohan Hedberg u16 sdu_len; 2400177f8f2bSJohan Hedberg 2401177f8f2bSJohan Hedberg BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 2402177f8f2bSJohan Hedberg 2403177f8f2bSJohan Hedberg sdu_len = len; 240472c6fb91SJohan Hedberg pdu_len = chan->remote_mps - L2CAP_SDULEN_SIZE; 2405177f8f2bSJohan Hedberg 2406177f8f2bSJohan Hedberg while (len > 0) { 2407177f8f2bSJohan Hedberg if (len <= pdu_len) 2408177f8f2bSJohan Hedberg pdu_len = len; 2409177f8f2bSJohan Hedberg 2410177f8f2bSJohan Hedberg skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len); 2411177f8f2bSJohan Hedberg if (IS_ERR(skb)) { 2412177f8f2bSJohan Hedberg __skb_queue_purge(seg_queue); 2413177f8f2bSJohan Hedberg return PTR_ERR(skb); 2414177f8f2bSJohan Hedberg } 2415177f8f2bSJohan Hedberg 2416177f8f2bSJohan Hedberg __skb_queue_tail(seg_queue, skb); 2417177f8f2bSJohan Hedberg 2418177f8f2bSJohan Hedberg len -= pdu_len; 2419177f8f2bSJohan Hedberg 2420177f8f2bSJohan Hedberg if (sdu_len) { 2421177f8f2bSJohan Hedberg sdu_len = 0; 2422177f8f2bSJohan Hedberg pdu_len += L2CAP_SDULEN_SIZE; 2423177f8f2bSJohan Hedberg } 2424177f8f2bSJohan Hedberg } 2425177f8f2bSJohan Hedberg 2426177f8f2bSJohan Hedberg return 0; 2427177f8f2bSJohan Hedberg } 2428177f8f2bSJohan Hedberg 24298a505b7fSLuiz Augusto von Dentz static void l2cap_le_flowctl_send(struct l2cap_chan *chan) 24308a505b7fSLuiz Augusto von Dentz { 24318a505b7fSLuiz Augusto von Dentz int sent = 0; 24328a505b7fSLuiz Augusto von Dentz 24338a505b7fSLuiz Augusto von Dentz BT_DBG("chan %p", chan); 24348a505b7fSLuiz Augusto von Dentz 24358a505b7fSLuiz Augusto von Dentz while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 24368a505b7fSLuiz Augusto von Dentz l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 24378a505b7fSLuiz Augusto von Dentz chan->tx_credits--; 24388a505b7fSLuiz Augusto von Dentz sent++; 24398a505b7fSLuiz Augusto von Dentz } 24408a505b7fSLuiz Augusto von Dentz 24418a505b7fSLuiz Augusto von Dentz BT_DBG("Sent %d credits %u queued %u", sent, chan->tx_credits, 24428a505b7fSLuiz Augusto von Dentz skb_queue_len(&chan->tx_q)); 24438a505b7fSLuiz Augusto von Dentz } 24448a505b7fSLuiz Augusto von Dentz 24458d46321cSMarcel Holtmann int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 24469a91a04aSGustavo F. Padovan { 24479a91a04aSGustavo F. Padovan struct sk_buff *skb; 24489a91a04aSGustavo F. Padovan int err; 244994122bbeSMat Martineau struct sk_buff_head seg_queue; 24509a91a04aSGustavo F. Padovan 245131e8ce80SSeung-Woo Kim if (!chan->conn) 245231e8ce80SSeung-Woo Kim return -ENOTCONN; 245331e8ce80SSeung-Woo Kim 24549a91a04aSGustavo F. Padovan /* Connectionless channel */ 2455715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24568d46321cSMarcel Holtmann skb = l2cap_create_connless_pdu(chan, msg, len); 24579a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24589a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24599a91a04aSGustavo F. Padovan 2460ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2461ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2462ede81a2aSAndrzej Kaczmarek */ 2463ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2464ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2465ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2466ede81a2aSAndrzej Kaczmarek } 2467ede81a2aSAndrzej Kaczmarek 24689a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24699a91a04aSGustavo F. Padovan return len; 24709a91a04aSGustavo F. Padovan } 24719a91a04aSGustavo F. Padovan 24729a91a04aSGustavo F. Padovan switch (chan->mode) { 247338319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 2474177f8f2bSJohan Hedberg /* Check outgoing MTU */ 2475177f8f2bSJohan Hedberg if (len > chan->omtu) 2476177f8f2bSJohan Hedberg return -EMSGSIZE; 2477177f8f2bSJohan Hedberg 2478177f8f2bSJohan Hedberg __skb_queue_head_init(&seg_queue); 2479177f8f2bSJohan Hedberg 2480177f8f2bSJohan Hedberg err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len); 2481177f8f2bSJohan Hedberg 2482177f8f2bSJohan Hedberg if (chan->state != BT_CONNECTED) { 2483177f8f2bSJohan Hedberg __skb_queue_purge(&seg_queue); 2484177f8f2bSJohan Hedberg err = -ENOTCONN; 2485177f8f2bSJohan Hedberg } 2486177f8f2bSJohan Hedberg 2487177f8f2bSJohan Hedberg if (err) 2488177f8f2bSJohan Hedberg return err; 2489177f8f2bSJohan Hedberg 2490177f8f2bSJohan Hedberg skb_queue_splice_tail_init(&seg_queue, &chan->tx_q); 2491177f8f2bSJohan Hedberg 24928a505b7fSLuiz Augusto von Dentz l2cap_le_flowctl_send(chan); 2493177f8f2bSJohan Hedberg 2494177f8f2bSJohan Hedberg if (!chan->tx_credits) 2495177f8f2bSJohan Hedberg chan->ops->suspend(chan); 2496177f8f2bSJohan Hedberg 2497177f8f2bSJohan Hedberg err = len; 2498177f8f2bSJohan Hedberg 2499177f8f2bSJohan Hedberg break; 2500177f8f2bSJohan Hedberg 2501fad5fc89SJohan Hedberg case L2CAP_MODE_BASIC: 25029a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 25039a91a04aSGustavo F. Padovan if (len > chan->omtu) 25049a91a04aSGustavo F. Padovan return -EMSGSIZE; 25059a91a04aSGustavo F. Padovan 25069a91a04aSGustavo F. Padovan /* Create a basic PDU */ 25078d46321cSMarcel Holtmann skb = l2cap_create_basic_pdu(chan, msg, len); 25089a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 25099a91a04aSGustavo F. Padovan return PTR_ERR(skb); 25109a91a04aSGustavo F. Padovan 2511ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2512ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2513ede81a2aSAndrzej Kaczmarek */ 2514ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2515ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2516ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2517ede81a2aSAndrzej Kaczmarek } 2518ede81a2aSAndrzej Kaczmarek 25199a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 25209a91a04aSGustavo F. Padovan err = len; 25219a91a04aSGustavo F. Padovan break; 25229a91a04aSGustavo F. Padovan 25239a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 25249a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 252594122bbeSMat Martineau /* Check outgoing MTU */ 252694122bbeSMat Martineau if (len > chan->omtu) { 252794122bbeSMat Martineau err = -EMSGSIZE; 25289a91a04aSGustavo F. Padovan break; 25299a91a04aSGustavo F. Padovan } 25309a91a04aSGustavo F. Padovan 253194122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 253294122bbeSMat Martineau 253394122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 253494122bbeSMat Martineau * since it's possible to block while waiting for memory 253594122bbeSMat Martineau * allocation. 253694122bbeSMat Martineau */ 253794122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 253894122bbeSMat Martineau 253994122bbeSMat Martineau /* The channel could have been closed while segmenting, 254094122bbeSMat Martineau * check that it is still connected. 254194122bbeSMat Martineau */ 254294122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 254394122bbeSMat Martineau __skb_queue_purge(&seg_queue); 254494122bbeSMat Martineau err = -ENOTCONN; 25459a91a04aSGustavo F. Padovan } 25469a91a04aSGustavo F. Padovan 254794122bbeSMat Martineau if (err) 254894122bbeSMat Martineau break; 254994122bbeSMat Martineau 25503733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2551d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25523733937dSMat Martineau else 2553d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 255494122bbeSMat Martineau 25559a91a04aSGustavo F. Padovan err = len; 25569a91a04aSGustavo F. Padovan 255794122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 255894122bbeSMat Martineau * seg_queue and need to be purged. 255994122bbeSMat Martineau */ 256094122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25619a91a04aSGustavo F. Padovan break; 25629a91a04aSGustavo F. Padovan 25639a91a04aSGustavo F. Padovan default: 25649a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25659a91a04aSGustavo F. Padovan err = -EBADFD; 25669a91a04aSGustavo F. Padovan } 25679a91a04aSGustavo F. Padovan 25689a91a04aSGustavo F. Padovan return err; 25699a91a04aSGustavo F. Padovan } 25706b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_send); 25719a91a04aSGustavo F. Padovan 2572d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2573d2a7ac5dSMat Martineau { 2574bed68bdeSMat Martineau struct l2cap_ctrl control; 2575bed68bdeSMat Martineau u16 seq; 2576bed68bdeSMat Martineau 2577b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2578bed68bdeSMat Martineau 2579bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2580bed68bdeSMat Martineau control.sframe = 1; 2581bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2582bed68bdeSMat Martineau 2583bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2584bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2585bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2586bed68bdeSMat Martineau control.reqseq = seq; 2587bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2588bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2589bed68bdeSMat Martineau } 2590bed68bdeSMat Martineau } 2591bed68bdeSMat Martineau 2592bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2593d2a7ac5dSMat Martineau } 2594d2a7ac5dSMat Martineau 2595d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2596d2a7ac5dSMat Martineau { 2597bed68bdeSMat Martineau struct l2cap_ctrl control; 2598bed68bdeSMat Martineau 2599bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2600bed68bdeSMat Martineau 2601bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2602bed68bdeSMat Martineau return; 2603bed68bdeSMat Martineau 2604bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2605bed68bdeSMat Martineau control.sframe = 1; 2606bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2607bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2608bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2609d2a7ac5dSMat Martineau } 2610d2a7ac5dSMat Martineau 2611d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2612d2a7ac5dSMat Martineau { 2613bed68bdeSMat Martineau struct l2cap_ctrl control; 2614bed68bdeSMat Martineau u16 initial_head; 2615bed68bdeSMat Martineau u16 seq; 2616bed68bdeSMat Martineau 2617b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2618bed68bdeSMat Martineau 2619bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2620bed68bdeSMat Martineau control.sframe = 1; 2621bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2622bed68bdeSMat Martineau 2623bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2624bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2625bed68bdeSMat Martineau 2626bed68bdeSMat Martineau do { 2627bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2628bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2629bed68bdeSMat Martineau break; 2630bed68bdeSMat Martineau 2631bed68bdeSMat Martineau control.reqseq = seq; 2632bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2633bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2634bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2635d2a7ac5dSMat Martineau } 2636d2a7ac5dSMat Martineau 2637608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2638608bcc6dSMat Martineau { 2639608bcc6dSMat Martineau struct sk_buff *acked_skb; 2640608bcc6dSMat Martineau u16 ackseq; 2641608bcc6dSMat Martineau 2642b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2643608bcc6dSMat Martineau 2644608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2645608bcc6dSMat Martineau return; 2646608bcc6dSMat Martineau 2647b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2648608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2649608bcc6dSMat Martineau 2650608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2651608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2652608bcc6dSMat Martineau 2653608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2654608bcc6dSMat Martineau if (acked_skb) { 2655608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2656608bcc6dSMat Martineau kfree_skb(acked_skb); 2657608bcc6dSMat Martineau chan->unacked_frames--; 2658608bcc6dSMat Martineau } 2659608bcc6dSMat Martineau } 2660608bcc6dSMat Martineau 2661608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2662608bcc6dSMat Martineau 2663608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2664608bcc6dSMat Martineau __clear_retrans_timer(chan); 2665608bcc6dSMat Martineau 2666b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2667608bcc6dSMat Martineau } 2668608bcc6dSMat Martineau 2669608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2670608bcc6dSMat Martineau { 2671608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2672608bcc6dSMat Martineau 2673608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2674608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2675608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2676608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2677608bcc6dSMat Martineau } 2678608bcc6dSMat Martineau 2679d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2680608bcc6dSMat Martineau struct l2cap_ctrl *control, 2681608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2682608bcc6dSMat Martineau { 2683608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2684608bcc6dSMat Martineau event); 2685608bcc6dSMat Martineau 2686608bcc6dSMat Martineau switch (event) { 2687608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2688608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2689608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2690608bcc6dSMat Martineau 2691608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2692608bcc6dSMat Martineau l2cap_ertm_send(chan); 2693608bcc6dSMat Martineau break; 2694608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2695608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2696608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2697608bcc6dSMat Martineau 2698608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2699608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2700608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2701608bcc6dSMat Martineau */ 2702608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2703608bcc6dSMat Martineau } 2704608bcc6dSMat Martineau 2705608bcc6dSMat Martineau l2cap_send_ack(chan); 2706608bcc6dSMat Martineau 2707608bcc6dSMat Martineau break; 2708608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2709608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2710608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2711608bcc6dSMat Martineau 2712608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2713608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2714608bcc6dSMat Martineau 2715608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2716608bcc6dSMat Martineau local_control.sframe = 1; 2717608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2718608bcc6dSMat Martineau local_control.poll = 1; 2719608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2720a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2721608bcc6dSMat Martineau 2722608bcc6dSMat Martineau chan->retry_count = 1; 2723608bcc6dSMat Martineau __set_monitor_timer(chan); 2724608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2725608bcc6dSMat Martineau } 2726608bcc6dSMat Martineau break; 2727608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2728608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2729608bcc6dSMat Martineau break; 2730608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2731608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2732608bcc6dSMat Martineau chan->retry_count = 1; 2733608bcc6dSMat Martineau __set_monitor_timer(chan); 2734608bcc6dSMat Martineau __clear_ack_timer(chan); 2735608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2736608bcc6dSMat Martineau break; 2737608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2738608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2739608bcc6dSMat Martineau chan->retry_count = 1; 2740608bcc6dSMat Martineau __set_monitor_timer(chan); 2741608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2742608bcc6dSMat Martineau break; 2743608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2744608bcc6dSMat Martineau /* Nothing to process */ 2745608bcc6dSMat Martineau break; 2746608bcc6dSMat Martineau default: 2747608bcc6dSMat Martineau break; 2748608bcc6dSMat Martineau } 2749608bcc6dSMat Martineau } 2750608bcc6dSMat Martineau 2751d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2752608bcc6dSMat Martineau struct l2cap_ctrl *control, 2753608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2754608bcc6dSMat Martineau { 2755608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2756608bcc6dSMat Martineau event); 2757608bcc6dSMat Martineau 2758608bcc6dSMat Martineau switch (event) { 2759608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2760608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2761608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2762608bcc6dSMat Martineau /* Queue data, but don't send. */ 2763608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2764608bcc6dSMat Martineau break; 2765608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2766608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2767608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2768608bcc6dSMat Martineau 2769608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2770608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2771608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2772608bcc6dSMat Martineau */ 2773608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2774608bcc6dSMat Martineau } 2775608bcc6dSMat Martineau 2776608bcc6dSMat Martineau l2cap_send_ack(chan); 2777608bcc6dSMat Martineau 2778608bcc6dSMat Martineau break; 2779608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2780608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2781608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2782608bcc6dSMat Martineau 2783608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2784608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2785608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2786608bcc6dSMat Martineau local_control.sframe = 1; 2787608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2788608bcc6dSMat Martineau local_control.poll = 1; 2789608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2790a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2791608bcc6dSMat Martineau 2792608bcc6dSMat Martineau chan->retry_count = 1; 2793608bcc6dSMat Martineau __set_monitor_timer(chan); 2794608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2795608bcc6dSMat Martineau } 2796608bcc6dSMat Martineau break; 2797608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2798608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2799608bcc6dSMat Martineau 2800608bcc6dSMat Martineau /* Fall through */ 2801608bcc6dSMat Martineau 2802608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2803608bcc6dSMat Martineau if (control && control->final) { 2804608bcc6dSMat Martineau __clear_monitor_timer(chan); 2805608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2806608bcc6dSMat Martineau __set_retrans_timer(chan); 2807608bcc6dSMat Martineau chan->retry_count = 0; 2808608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2809608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2810608bcc6dSMat Martineau } 2811608bcc6dSMat Martineau break; 2812608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2813608bcc6dSMat Martineau /* Ignore */ 2814608bcc6dSMat Martineau break; 2815608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2816608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2817608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2818608bcc6dSMat Martineau __set_monitor_timer(chan); 2819608bcc6dSMat Martineau chan->retry_count++; 2820608bcc6dSMat Martineau } else { 28215e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2822608bcc6dSMat Martineau } 2823608bcc6dSMat Martineau break; 2824608bcc6dSMat Martineau default: 2825608bcc6dSMat Martineau break; 2826608bcc6dSMat Martineau } 2827608bcc6dSMat Martineau } 2828608bcc6dSMat Martineau 2829d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2830608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2831608bcc6dSMat Martineau { 2832608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2833608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2834608bcc6dSMat Martineau 2835608bcc6dSMat Martineau switch (chan->tx_state) { 2836608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2837d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2838608bcc6dSMat Martineau break; 2839608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2840d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2841608bcc6dSMat Martineau break; 2842608bcc6dSMat Martineau default: 2843608bcc6dSMat Martineau /* Ignore event */ 2844608bcc6dSMat Martineau break; 2845608bcc6dSMat Martineau } 2846608bcc6dSMat Martineau } 2847608bcc6dSMat Martineau 28484b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28494b51dae9SMat Martineau struct l2cap_ctrl *control) 28504b51dae9SMat Martineau { 28514b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2852401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28534b51dae9SMat Martineau } 28544b51dae9SMat Martineau 2855f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2856f80842a8SMat Martineau struct l2cap_ctrl *control) 2857f80842a8SMat Martineau { 2858f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2859401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2860f80842a8SMat Martineau } 2861f80842a8SMat Martineau 28620a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28630a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28640a708f8fSGustavo F. Padovan { 28650a708f8fSGustavo F. Padovan struct sk_buff *nskb; 286648454079SGustavo F. Padovan struct l2cap_chan *chan; 28670a708f8fSGustavo F. Padovan 28680a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28690a708f8fSGustavo F. Padovan 28703df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28713d57dc68SGustavo F. Padovan 28723df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2873715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28740a708f8fSGustavo F. Padovan continue; 28750a708f8fSGustavo F. Padovan 28767f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 2877a4368ff3SJohan Hedberg if (bt_cb(skb)->l2cap.chan == chan) 28780a708f8fSGustavo F. Padovan continue; 28797f5396a7SGustavo Padovan 28808bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28810a708f8fSGustavo F. Padovan if (!nskb) 28820a708f8fSGustavo F. Padovan continue; 288380b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28840a708f8fSGustavo F. Padovan kfree_skb(nskb); 28850a708f8fSGustavo F. Padovan } 28863d57dc68SGustavo F. Padovan 28873df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28880a708f8fSGustavo F. Padovan } 28890a708f8fSGustavo F. Padovan 28900a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2891b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2892b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28930a708f8fSGustavo F. Padovan { 28940a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28950a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28960a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28970a708f8fSGustavo F. Padovan int len, count; 28980a708f8fSGustavo F. Padovan 2899b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 29000a708f8fSGustavo F. Padovan conn, code, ident, dlen); 29010a708f8fSGustavo F. Padovan 2902300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2903300b962eSAnderson Lizardo return NULL; 2904300b962eSAnderson Lizardo 29050a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 29060a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29070a708f8fSGustavo F. Padovan 29088bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 29090a708f8fSGustavo F. Padovan if (!skb) 29100a708f8fSGustavo F. Padovan return NULL; 29110a708f8fSGustavo F. Padovan 29124df864c1SJohannes Berg lh = skb_put(skb, L2CAP_HDR_SIZE); 29130a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 29143300d9a9SClaudio Takahasi 29153300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2916dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 29173300d9a9SClaudio Takahasi else 2918dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 29190a708f8fSGustavo F. Padovan 29204df864c1SJohannes Berg cmd = skb_put(skb, L2CAP_CMD_HDR_SIZE); 29210a708f8fSGustavo F. Padovan cmd->code = code; 29220a708f8fSGustavo F. Padovan cmd->ident = ident; 29230a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 29240a708f8fSGustavo F. Padovan 29250a708f8fSGustavo F. Padovan if (dlen) { 29260a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 292759ae1d12SJohannes Berg skb_put_data(skb, data, count); 29280a708f8fSGustavo F. Padovan data += count; 29290a708f8fSGustavo F. Padovan } 29300a708f8fSGustavo F. Padovan 29310a708f8fSGustavo F. Padovan len -= skb->len; 29320a708f8fSGustavo F. Padovan 29330a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 29340a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 29350a708f8fSGustavo F. Padovan while (len) { 29360a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29370a708f8fSGustavo F. Padovan 29388bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 29390a708f8fSGustavo F. Padovan if (!*frag) 29400a708f8fSGustavo F. Padovan goto fail; 29410a708f8fSGustavo F. Padovan 294259ae1d12SJohannes Berg skb_put_data(*frag, data, count); 29430a708f8fSGustavo F. Padovan 29440a708f8fSGustavo F. Padovan len -= count; 29450a708f8fSGustavo F. Padovan data += count; 29460a708f8fSGustavo F. Padovan 29470a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29480a708f8fSGustavo F. Padovan } 29490a708f8fSGustavo F. Padovan 29500a708f8fSGustavo F. Padovan return skb; 29510a708f8fSGustavo F. Padovan 29520a708f8fSGustavo F. Padovan fail: 29530a708f8fSGustavo F. Padovan kfree_skb(skb); 29540a708f8fSGustavo F. Padovan return NULL; 29550a708f8fSGustavo F. Padovan } 29560a708f8fSGustavo F. Padovan 29572d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29582d792818SGustavo Padovan unsigned long *val) 29590a708f8fSGustavo F. Padovan { 29600a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29610a708f8fSGustavo F. Padovan int len; 29620a708f8fSGustavo F. Padovan 29630a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29640a708f8fSGustavo F. Padovan *ptr += len; 29650a708f8fSGustavo F. Padovan 29660a708f8fSGustavo F. Padovan *type = opt->type; 29670a708f8fSGustavo F. Padovan *olen = opt->len; 29680a708f8fSGustavo F. Padovan 29690a708f8fSGustavo F. Padovan switch (opt->len) { 29700a708f8fSGustavo F. Padovan case 1: 29710a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29720a708f8fSGustavo F. Padovan break; 29730a708f8fSGustavo F. Padovan 29740a708f8fSGustavo F. Padovan case 2: 29750a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29760a708f8fSGustavo F. Padovan break; 29770a708f8fSGustavo F. Padovan 29780a708f8fSGustavo F. Padovan case 4: 29790a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29800a708f8fSGustavo F. Padovan break; 29810a708f8fSGustavo F. Padovan 29820a708f8fSGustavo F. Padovan default: 29830a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29840a708f8fSGustavo F. Padovan break; 29850a708f8fSGustavo F. Padovan } 29860a708f8fSGustavo F. Padovan 2987b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29880a708f8fSGustavo F. Padovan return len; 29890a708f8fSGustavo F. Padovan } 29900a708f8fSGustavo F. Padovan 2991e860d2c9SBen Seri static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val, size_t size) 29920a708f8fSGustavo F. Padovan { 29930a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29940a708f8fSGustavo F. Padovan 2995b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29960a708f8fSGustavo F. Padovan 2997e860d2c9SBen Seri if (size < L2CAP_CONF_OPT_SIZE + len) 2998e860d2c9SBen Seri return; 2999e860d2c9SBen Seri 30000a708f8fSGustavo F. Padovan opt->type = type; 30010a708f8fSGustavo F. Padovan opt->len = len; 30020a708f8fSGustavo F. Padovan 30030a708f8fSGustavo F. Padovan switch (len) { 30040a708f8fSGustavo F. Padovan case 1: 30050a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 30060a708f8fSGustavo F. Padovan break; 30070a708f8fSGustavo F. Padovan 30080a708f8fSGustavo F. Padovan case 2: 30090a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 30100a708f8fSGustavo F. Padovan break; 30110a708f8fSGustavo F. Padovan 30120a708f8fSGustavo F. Padovan case 4: 30130a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 30140a708f8fSGustavo F. Padovan break; 30150a708f8fSGustavo F. Padovan 30160a708f8fSGustavo F. Padovan default: 30170a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 30180a708f8fSGustavo F. Padovan break; 30190a708f8fSGustavo F. Padovan } 30200a708f8fSGustavo F. Padovan 30210a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 30220a708f8fSGustavo F. Padovan } 30230a708f8fSGustavo F. Padovan 3024e860d2c9SBen Seri static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan, size_t size) 3025f89cef09SAndrei Emeltchenko { 3026f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 3027f89cef09SAndrei Emeltchenko 3028f89cef09SAndrei Emeltchenko switch (chan->mode) { 3029f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 3030f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 3031f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 3032f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3033f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3034dcf4adbfSJoe Perches efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 3035dcf4adbfSJoe Perches efs.flush_to = cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 3036f89cef09SAndrei Emeltchenko break; 3037f89cef09SAndrei Emeltchenko 3038f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 3039f89cef09SAndrei Emeltchenko efs.id = 1; 3040f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 3041f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3042f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3043f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3044f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3045f89cef09SAndrei Emeltchenko break; 3046f89cef09SAndrei Emeltchenko 3047f89cef09SAndrei Emeltchenko default: 3048f89cef09SAndrei Emeltchenko return; 3049f89cef09SAndrei Emeltchenko } 3050f89cef09SAndrei Emeltchenko 3051f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3052e860d2c9SBen Seri (unsigned long) &efs, size); 3053f89cef09SAndrei Emeltchenko } 3054f89cef09SAndrei Emeltchenko 3055721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30560a708f8fSGustavo F. Padovan { 3057721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3058721c4181SGustavo F. Padovan ack_timer.work); 30590362520bSMat Martineau u16 frames_to_ack; 30600a708f8fSGustavo F. Padovan 30612fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30622fb9b3d4SGustavo F. Padovan 30636be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30646be36555SAndrei Emeltchenko 30650362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30660362520bSMat Martineau chan->last_acked_seq); 30670362520bSMat Martineau 30680362520bSMat Martineau if (frames_to_ack) 30690362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30706be36555SAndrei Emeltchenko 30716be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 307209bfb2eeSSzymon Janc l2cap_chan_put(chan); 30730a708f8fSGustavo F. Padovan } 30740a708f8fSGustavo F. Padovan 3075466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30760a708f8fSGustavo F. Padovan { 30773c588192SMat Martineau int err; 30783c588192SMat Martineau 3079105bdf9eSMat Martineau chan->next_tx_seq = 0; 3080105bdf9eSMat Martineau chan->expected_tx_seq = 0; 308142e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30826a026610SGustavo F. Padovan chan->unacked_frames = 0; 308342e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30846a026610SGustavo F. Padovan chan->frames_sent = 0; 3085105bdf9eSMat Martineau chan->last_acked_seq = 0; 3086105bdf9eSMat Martineau chan->sdu = NULL; 3087105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3088105bdf9eSMat Martineau chan->sdu_len = 0; 3089105bdf9eSMat Martineau 3090d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3091d34c34fbSMat Martineau 30926ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30936ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 309408333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 309508333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 309608333283SMat Martineau 3097105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3098105bdf9eSMat Martineau return 0; 3099105bdf9eSMat Martineau 3100105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3101105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 31020a708f8fSGustavo F. Padovan 3103721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3104721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3105721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 31060a708f8fSGustavo F. Padovan 3107f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 31080a708f8fSGustavo F. Padovan 31093c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 31103c588192SMat Martineau if (err < 0) 31113c588192SMat Martineau return err; 31123c588192SMat Martineau 31139dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 31149dc9affcSMat Martineau if (err < 0) 31159dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 31169dc9affcSMat Martineau 31179dc9affcSMat Martineau return err; 31180a708f8fSGustavo F. Padovan } 31190a708f8fSGustavo F. Padovan 31200a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 31210a708f8fSGustavo F. Padovan { 31220a708f8fSGustavo F. Padovan switch (mode) { 31230a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31240a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 31250a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 31260a708f8fSGustavo F. Padovan return mode; 31270a708f8fSGustavo F. Padovan /* fall through */ 31280a708f8fSGustavo F. Padovan default: 31290a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 31300a708f8fSGustavo F. Padovan } 31310a708f8fSGustavo F. Padovan } 31320a708f8fSGustavo F. Padovan 3133848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 31346327eb98SAndrei Emeltchenko { 31350bd49fc7SJohan Hedberg return ((conn->local_fixed_chan & L2CAP_FC_A2MP) && 31360bd49fc7SJohan Hedberg (conn->feat_mask & L2CAP_FEAT_EXT_WINDOW)); 31376327eb98SAndrei Emeltchenko } 31386327eb98SAndrei Emeltchenko 3139848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3140f89cef09SAndrei Emeltchenko { 31410bd49fc7SJohan Hedberg return ((conn->local_fixed_chan & L2CAP_FC_A2MP) && 31420bd49fc7SJohan Hedberg (conn->feat_mask & L2CAP_FEAT_EXT_FLOW)); 3143f89cef09SAndrei Emeltchenko } 3144f89cef09SAndrei Emeltchenko 314536c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 314636c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 314736c86c85SMat Martineau { 31486ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 314936c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 315036c86c85SMat Martineau 315136c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 315236c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 315336c86c85SMat Martineau * default Link Supervision Timeout for AMP 315436c86c85SMat Martineau * controllers is 10 seconds. 315536c86c85SMat Martineau * 315636c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 315736c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 315836c86c85SMat Martineau * will result in a timeout that meets the above 315936c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 316036c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 316136c86c85SMat Martineau */ 316236c86c85SMat Martineau 316336c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 316436c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 316536c86c85SMat Martineau 316636c86c85SMat Martineau /* This is the recommended formula for class 2 devices 316736c86c85SMat Martineau * that start ERTM timers when packets are sent to the 316836c86c85SMat Martineau * controller. 316936c86c85SMat Martineau */ 317036c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 317136c86c85SMat Martineau 317236c86c85SMat Martineau if (ertm_to > 0xffff) 317336c86c85SMat Martineau ertm_to = 0xffff; 317436c86c85SMat Martineau 317536c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 317636c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 317736c86c85SMat Martineau } else { 3178dcf4adbfSJoe Perches rfc->retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 3179dcf4adbfSJoe Perches rfc->monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 318036c86c85SMat Martineau } 318136c86c85SMat Martineau } 318236c86c85SMat Martineau 31836327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31846327eb98SAndrei Emeltchenko { 31856327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3186848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31876327eb98SAndrei Emeltchenko /* use extended control field */ 31886327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3189836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3190836be934SAndrei Emeltchenko } else { 31916327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31926327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3193836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3194836be934SAndrei Emeltchenko } 3195c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31966327eb98SAndrei Emeltchenko } 31976327eb98SAndrei Emeltchenko 3198e860d2c9SBen Seri static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data, size_t data_size) 31990a708f8fSGustavo F. Padovan { 32000a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 32010c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 32020a708f8fSGustavo F. Padovan void *ptr = req->data; 3203e860d2c9SBen Seri void *endptr = data + data_size; 3204c8f79162SAndrei Emeltchenko u16 size; 32050a708f8fSGustavo F. Padovan 320649208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 32070a708f8fSGustavo F. Padovan 320873ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 32090a708f8fSGustavo F. Padovan goto done; 32100a708f8fSGustavo F. Padovan 32110c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32120a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 32130a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3214c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 32150a708f8fSGustavo F. Padovan break; 32160a708f8fSGustavo F. Padovan 3217848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3218f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3219f89cef09SAndrei Emeltchenko 32200a708f8fSGustavo F. Padovan /* fall through */ 32210a708f8fSGustavo F. Padovan default: 32228c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 32230a708f8fSGustavo F. Padovan break; 32240a708f8fSGustavo F. Padovan } 32250a708f8fSGustavo F. Padovan 32260a708f8fSGustavo F. Padovan done: 32270c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 3228e860d2c9SBen Seri l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu, endptr - ptr); 32290a708f8fSGustavo F. Padovan 32300c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32310a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 32326fea7ad1SMarcel Holtmann if (disable_ertm) 32336fea7ad1SMarcel Holtmann break; 32346fea7ad1SMarcel Holtmann 32358c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 32368c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 32370a708f8fSGustavo F. Padovan break; 32380a708f8fSGustavo F. Padovan 32390a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 32400a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32410a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32420a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32430a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 32440a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 32450a708f8fSGustavo F. Padovan 32460a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 3247e860d2c9SBen Seri (unsigned long) &rfc, endptr - ptr); 32480a708f8fSGustavo F. Padovan break; 32490a708f8fSGustavo F. Padovan 32500a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32510a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 325247d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 325336c86c85SMat Martineau 325436c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3255c8f79162SAndrei Emeltchenko 3256c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32572d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3258c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3259c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32600a708f8fSGustavo F. Padovan 32616327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32626327eb98SAndrei Emeltchenko 32636327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32646327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32650a708f8fSGustavo F. Padovan 32660a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 3267e860d2c9SBen Seri (unsigned long) &rfc, endptr - ptr); 32680a708f8fSGustavo F. Padovan 3269f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3270e860d2c9SBen Seri l2cap_add_opt_efs(&ptr, chan, endptr - ptr); 3271f89cef09SAndrei Emeltchenko 32726327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32736327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 3274e860d2c9SBen Seri chan->tx_win, endptr - ptr); 327560918918SAndrei Emeltchenko 327660918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 327760918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3278f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 327960918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 328060918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 3281e860d2c9SBen Seri chan->fcs, endptr - ptr); 328260918918SAndrei Emeltchenko } 32830a708f8fSGustavo F. Padovan break; 32840a708f8fSGustavo F. Padovan 32850a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3286273759e2SMat Martineau l2cap_txwin_setup(chan); 32870a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32880a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32890a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32900a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32910a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3292c8f79162SAndrei Emeltchenko 3293c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32942d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3295c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3296c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32970a708f8fSGustavo F. Padovan 32980a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 3299e860d2c9SBen Seri (unsigned long) &rfc, endptr - ptr); 33000a708f8fSGustavo F. Padovan 3301f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3302e860d2c9SBen Seri l2cap_add_opt_efs(&ptr, chan, endptr - ptr); 3303f89cef09SAndrei Emeltchenko 330460918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 330547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3306f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 330747d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 330860918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 3309e860d2c9SBen Seri chan->fcs, endptr - ptr); 33100a708f8fSGustavo F. Padovan } 33110a708f8fSGustavo F. Padovan break; 33120a708f8fSGustavo F. Padovan } 33130a708f8fSGustavo F. Padovan 3314fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3315dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 33160a708f8fSGustavo F. Padovan 33170a708f8fSGustavo F. Padovan return ptr - data; 33180a708f8fSGustavo F. Padovan } 33190a708f8fSGustavo F. Padovan 3320e860d2c9SBen Seri static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data, size_t data_size) 33210a708f8fSGustavo F. Padovan { 33220a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 33230a708f8fSGustavo F. Padovan void *ptr = rsp->data; 3324e860d2c9SBen Seri void *endptr = data + data_size; 332573ffa904SGustavo F. Padovan void *req = chan->conf_req; 332673ffa904SGustavo F. Padovan int len = chan->conf_len; 33270a708f8fSGustavo F. Padovan int type, hint, olen; 33280a708f8fSGustavo F. Padovan unsigned long val; 33290a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 333042dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 333142dceae2SAndrei Emeltchenko u8 remote_efs = 0; 33320a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 33330a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3334c8f79162SAndrei Emeltchenko u16 size; 33350a708f8fSGustavo F. Padovan 333673ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 33370a708f8fSGustavo F. Padovan 33380a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 33390a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 33407c9cbd0bSMarcel Holtmann if (len < 0) 33417c9cbd0bSMarcel Holtmann break; 33420a708f8fSGustavo F. Padovan 33430a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 33440a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 33450a708f8fSGustavo F. Padovan 33460a708f8fSGustavo F. Padovan switch (type) { 33470a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 3348af3d5d1cSMarcel Holtmann if (olen != 2) 3349af3d5d1cSMarcel Holtmann break; 33500a708f8fSGustavo F. Padovan mtu = val; 33510a708f8fSGustavo F. Padovan break; 33520a708f8fSGustavo F. Padovan 33530a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 3354af3d5d1cSMarcel Holtmann if (olen != 2) 3355af3d5d1cSMarcel Holtmann break; 33560c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33570a708f8fSGustavo F. Padovan break; 33580a708f8fSGustavo F. Padovan 33590a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33600a708f8fSGustavo F. Padovan break; 33610a708f8fSGustavo F. Padovan 33620a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 3363af3d5d1cSMarcel Holtmann if (olen != sizeof(rfc)) 3364af3d5d1cSMarcel Holtmann break; 33650a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33660a708f8fSGustavo F. Padovan break; 33670a708f8fSGustavo F. Padovan 33680a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 3369af3d5d1cSMarcel Holtmann if (olen != 1) 3370af3d5d1cSMarcel Holtmann break; 33710a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3372f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 337342dceae2SAndrei Emeltchenko break; 33740a708f8fSGustavo F. Padovan 337542dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 3376af3d5d1cSMarcel Holtmann if (olen != sizeof(efs)) 3377af3d5d1cSMarcel Holtmann break; 337842dceae2SAndrei Emeltchenko remote_efs = 1; 337942dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33800a708f8fSGustavo F. Padovan break; 33810a708f8fSGustavo F. Padovan 33826327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3383af3d5d1cSMarcel Holtmann if (olen != 2) 3384af3d5d1cSMarcel Holtmann break; 33850bd49fc7SJohan Hedberg if (!(chan->conn->local_fixed_chan & L2CAP_FC_A2MP)) 33866327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33876327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33886327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3389836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33906327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33910a708f8fSGustavo F. Padovan break; 33920a708f8fSGustavo F. Padovan 33930a708f8fSGustavo F. Padovan default: 33940a708f8fSGustavo F. Padovan if (hint) 33950a708f8fSGustavo F. Padovan break; 33960a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33970a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33980a708f8fSGustavo F. Padovan break; 33990a708f8fSGustavo F. Padovan } 34000a708f8fSGustavo F. Padovan } 34010a708f8fSGustavo F. Padovan 340273ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 34030a708f8fSGustavo F. Padovan goto done; 34040a708f8fSGustavo F. Padovan 34050c1bc5c6SGustavo F. Padovan switch (chan->mode) { 34060a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 34070a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3408c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 34090c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 34108c1d787bSGustavo F. Padovan chan->conn->feat_mask); 34110a708f8fSGustavo F. Padovan break; 34120a708f8fSGustavo F. Padovan } 34130a708f8fSGustavo F. Padovan 341442dceae2SAndrei Emeltchenko if (remote_efs) { 3415848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 341642dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 341742dceae2SAndrei Emeltchenko else 341842dceae2SAndrei Emeltchenko return -ECONNREFUSED; 341942dceae2SAndrei Emeltchenko } 342042dceae2SAndrei Emeltchenko 34210c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 34220a708f8fSGustavo F. Padovan return -ECONNREFUSED; 34230a708f8fSGustavo F. Padovan 34240a708f8fSGustavo F. Padovan break; 34250a708f8fSGustavo F. Padovan } 34260a708f8fSGustavo F. Padovan 34270a708f8fSGustavo F. Padovan done: 34280c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 34290a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34300c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34310a708f8fSGustavo F. Padovan 343273ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 34330a708f8fSGustavo F. Padovan return -ECONNREFUSED; 34340a708f8fSGustavo F. Padovan 34352d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 3436e860d2c9SBen Seri (unsigned long) &rfc, endptr - ptr); 34370a708f8fSGustavo F. Padovan } 34380a708f8fSGustavo F. Padovan 34390a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 34400a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 34410a708f8fSGustavo F. Padovan * which ones we don't like. */ 34420a708f8fSGustavo F. Padovan 34430a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 34440a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34450a708f8fSGustavo F. Padovan else { 34460c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3447c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 34480a708f8fSGustavo F. Padovan } 3449e860d2c9SBen Seri l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu, endptr - ptr); 34500a708f8fSGustavo F. Padovan 345142dceae2SAndrei Emeltchenko if (remote_efs) { 345242dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 345342dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 345442dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 345542dceae2SAndrei Emeltchenko 345642dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 345742dceae2SAndrei Emeltchenko 345842dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 345942dceae2SAndrei Emeltchenko return -ECONNREFUSED; 346042dceae2SAndrei Emeltchenko 346142dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 346242dceae2SAndrei Emeltchenko sizeof(efs), 3463e860d2c9SBen Seri (unsigned long) &efs, endptr - ptr); 34640e8b207eSAndrei Emeltchenko } else { 34653e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34660e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34670e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 346842dceae2SAndrei Emeltchenko } 346942dceae2SAndrei Emeltchenko } 347042dceae2SAndrei Emeltchenko 34710a708f8fSGustavo F. Padovan switch (rfc.mode) { 34720a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 347347d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3474c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34750a708f8fSGustavo F. Padovan break; 34760a708f8fSGustavo F. Padovan 34770a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34786327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34792c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34806327eb98SAndrei Emeltchenko else 34816327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34826327eb98SAndrei Emeltchenko 34832c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34840a708f8fSGustavo F. Padovan 3485c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34862d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34872d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3488c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3489c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34900a708f8fSGustavo F. Padovan 349136c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34920a708f8fSGustavo F. Padovan 3493c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34940a708f8fSGustavo F. Padovan 34950a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 3496e860d2c9SBen Seri sizeof(rfc), (unsigned long) &rfc, endptr - ptr); 34970a708f8fSGustavo F. Padovan 349842dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 349942dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 350042dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 350142dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 350242dceae2SAndrei Emeltchenko chan->remote_flush_to = 350342dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 350442dceae2SAndrei Emeltchenko chan->remote_acc_lat = 350542dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 350642dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 350742dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 350842dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 35092d792818SGustavo Padovan sizeof(efs), 3510e860d2c9SBen Seri (unsigned long) &efs, endptr - ptr); 351142dceae2SAndrei Emeltchenko } 35120a708f8fSGustavo F. Padovan break; 35130a708f8fSGustavo F. Padovan 35140a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3515c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 35162d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 35172d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3518c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3519c8f79162SAndrei Emeltchenko chan->remote_mps = size; 35200a708f8fSGustavo F. Padovan 3521c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 35220a708f8fSGustavo F. Padovan 35232d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 3524e860d2c9SBen Seri (unsigned long) &rfc, endptr - ptr); 35250a708f8fSGustavo F. Padovan 35260a708f8fSGustavo F. Padovan break; 35270a708f8fSGustavo F. Padovan 35280a708f8fSGustavo F. Padovan default: 35290a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 35300a708f8fSGustavo F. Padovan 35310a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 35320c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 35330a708f8fSGustavo F. Padovan } 35340a708f8fSGustavo F. Padovan 35350a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3536c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 35370a708f8fSGustavo F. Padovan } 3538fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 35390a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 3540dcf4adbfSJoe Perches rsp->flags = cpu_to_le16(0); 35410a708f8fSGustavo F. Padovan 35420a708f8fSGustavo F. Padovan return ptr - data; 35430a708f8fSGustavo F. Padovan } 35440a708f8fSGustavo F. Padovan 35452d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 3546e860d2c9SBen Seri void *data, size_t size, u16 *result) 35470a708f8fSGustavo F. Padovan { 35480a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 35490a708f8fSGustavo F. Padovan void *ptr = req->data; 3550e860d2c9SBen Seri void *endptr = data + size; 35510a708f8fSGustavo F. Padovan int type, olen; 35520a708f8fSGustavo F. Padovan unsigned long val; 355336e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 355466af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 35550a708f8fSGustavo F. Padovan 3556fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 35570a708f8fSGustavo F. Padovan 35580a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 35590a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 35607c9cbd0bSMarcel Holtmann if (len < 0) 35617c9cbd0bSMarcel Holtmann break; 35620a708f8fSGustavo F. Padovan 35630a708f8fSGustavo F. Padovan switch (type) { 35640a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 3565af3d5d1cSMarcel Holtmann if (olen != 2) 3566af3d5d1cSMarcel Holtmann break; 35670a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35680a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35690c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35700a708f8fSGustavo F. Padovan } else 35710c1bc5c6SGustavo F. Padovan chan->imtu = val; 3572af3d5d1cSMarcel Holtmann l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu, 3573af3d5d1cSMarcel Holtmann endptr - ptr); 35740a708f8fSGustavo F. Padovan break; 35750a708f8fSGustavo F. Padovan 35760a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 3577af3d5d1cSMarcel Holtmann if (olen != 2) 3578af3d5d1cSMarcel Holtmann break; 35790c1bc5c6SGustavo F. Padovan chan->flush_to = val; 3580af3d5d1cSMarcel Holtmann l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 2, 3581af3d5d1cSMarcel Holtmann chan->flush_to, endptr - ptr); 35820a708f8fSGustavo F. Padovan break; 35830a708f8fSGustavo F. Padovan 35840a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 3585af3d5d1cSMarcel Holtmann if (olen != sizeof(rfc)) 3586af3d5d1cSMarcel Holtmann break; 35870a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3588c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35890c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35900a708f8fSGustavo F. Padovan return -ECONNREFUSED; 359147d1ec61SGustavo F. Padovan chan->fcs = 0; 3592af3d5d1cSMarcel Holtmann l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 3593af3d5d1cSMarcel Holtmann (unsigned long) &rfc, endptr - ptr); 35940a708f8fSGustavo F. Padovan break; 35956327eb98SAndrei Emeltchenko 35966327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3597af3d5d1cSMarcel Holtmann if (olen != 2) 3598af3d5d1cSMarcel Holtmann break; 3599c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 36003e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 3601e860d2c9SBen Seri chan->tx_win, endptr - ptr); 36026327eb98SAndrei Emeltchenko break; 360366af7aafSAndrei Emeltchenko 360466af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 3605af3d5d1cSMarcel Holtmann if (olen != sizeof(efs)) 3606af3d5d1cSMarcel Holtmann break; 360766af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 360866af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 360966af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 361066af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 361166af7aafSAndrei Emeltchenko return -ECONNREFUSED; 36122d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 3613e860d2c9SBen Seri (unsigned long) &efs, endptr - ptr); 361466af7aafSAndrei Emeltchenko break; 3615cbabee78SAndrei Emeltchenko 3616cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3617af3d5d1cSMarcel Holtmann if (olen != 1) 3618af3d5d1cSMarcel Holtmann break; 3619cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3620cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3621f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3622cbabee78SAndrei Emeltchenko &chan->conf_state); 3623cbabee78SAndrei Emeltchenko break; 36240a708f8fSGustavo F. Padovan } 36250a708f8fSGustavo F. Padovan } 36260a708f8fSGustavo F. Padovan 36270c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 36280a708f8fSGustavo F. Padovan return -ECONNREFUSED; 36290a708f8fSGustavo F. Padovan 36300c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 36310a708f8fSGustavo F. Padovan 36320e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 36330a708f8fSGustavo F. Padovan switch (rfc.mode) { 36340a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 363547d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 363647d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 363747d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3638c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3639c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3640c20f8e35SMat Martineau rfc.txwin_size); 364166af7aafSAndrei Emeltchenko 364266af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 364366af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 364466af7aafSAndrei Emeltchenko chan->local_sdu_itime = 364566af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 364666af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 364766af7aafSAndrei Emeltchenko chan->local_flush_to = 364866af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 364966af7aafSAndrei Emeltchenko } 36500a708f8fSGustavo F. Padovan break; 365166af7aafSAndrei Emeltchenko 36520a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 365347d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36540a708f8fSGustavo F. Padovan } 36550a708f8fSGustavo F. Padovan } 36560a708f8fSGustavo F. Padovan 3657fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3658dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 36590a708f8fSGustavo F. Padovan 36600a708f8fSGustavo F. Padovan return ptr - data; 36610a708f8fSGustavo F. Padovan } 36620a708f8fSGustavo F. Padovan 36632d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 36642d792818SGustavo Padovan u16 result, u16 flags) 36650a708f8fSGustavo F. Padovan { 36660a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 36670a708f8fSGustavo F. Padovan void *ptr = rsp->data; 36680a708f8fSGustavo F. Padovan 3669fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36700a708f8fSGustavo F. Padovan 3671fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36720a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36730a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36740a708f8fSGustavo F. Padovan 36750a708f8fSGustavo F. Padovan return ptr - data; 36760a708f8fSGustavo F. Padovan } 36770a708f8fSGustavo F. Padovan 367827e2d4c8SJohan Hedberg void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan) 367927e2d4c8SJohan Hedberg { 368027e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 368127e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 368227e2d4c8SJohan Hedberg 368327e2d4c8SJohan Hedberg BT_DBG("chan %p", chan); 368427e2d4c8SJohan Hedberg 368527e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 368627e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 36873916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 36880cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 3689571f7390SMallikarjun Phulari rsp.result = cpu_to_le16(L2CAP_CR_LE_SUCCESS); 369027e2d4c8SJohan Hedberg 369127e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 369227e2d4c8SJohan Hedberg &rsp); 369327e2d4c8SJohan Hedberg } 369427e2d4c8SJohan Hedberg 36958c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3696710f9b0aSGustavo F. Padovan { 3697710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36988c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3699710f9b0aSGustavo F. Padovan u8 buf[128]; 3700439f34acSAndrei Emeltchenko u8 rsp_code; 3701710f9b0aSGustavo F. Padovan 3702fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3703fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3704dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 3705dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 3706439f34acSAndrei Emeltchenko 3707439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3708439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3709439f34acSAndrei Emeltchenko else 3710439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3711439f34acSAndrei Emeltchenko 3712439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3713439f34acSAndrei Emeltchenko 3714439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3715710f9b0aSGustavo F. Padovan 3716c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3717710f9b0aSGustavo F. Padovan return; 3718710f9b0aSGustavo F. Padovan 3719710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3720e860d2c9SBen Seri l2cap_build_conf_req(chan, buf, sizeof(buf)), buf); 3721710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3722710f9b0aSGustavo F. Padovan } 3723710f9b0aSGustavo F. Padovan 372447d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 37250a708f8fSGustavo F. Padovan { 37260a708f8fSGustavo F. Padovan int type, olen; 37270a708f8fSGustavo F. Padovan unsigned long val; 3728c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3729c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3730c20f8e35SMat Martineau */ 3731c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3732c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3733c20f8e35SMat Martineau .mode = chan->mode, 3734dcf4adbfSJoe Perches .retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3735dcf4adbfSJoe Perches .monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3736c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3737c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3738c20f8e35SMat Martineau }; 37390a708f8fSGustavo F. Padovan 374047d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 37410a708f8fSGustavo F. Padovan 37420c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 37430a708f8fSGustavo F. Padovan return; 37440a708f8fSGustavo F. Padovan 37450a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 37460a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 37477c9cbd0bSMarcel Holtmann if (len < 0) 37487c9cbd0bSMarcel Holtmann break; 37490a708f8fSGustavo F. Padovan 3750c20f8e35SMat Martineau switch (type) { 3751c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3752af3d5d1cSMarcel Holtmann if (olen != sizeof(rfc)) 3753af3d5d1cSMarcel Holtmann break; 37540a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3755c20f8e35SMat Martineau break; 3756c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3757af3d5d1cSMarcel Holtmann if (olen != 2) 3758af3d5d1cSMarcel Holtmann break; 3759c20f8e35SMat Martineau txwin_ext = val; 3760c20f8e35SMat Martineau break; 3761c20f8e35SMat Martineau } 37620a708f8fSGustavo F. Padovan } 37630a708f8fSGustavo F. Padovan 37640a708f8fSGustavo F. Padovan switch (rfc.mode) { 37650a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 376647d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 376747d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 376847d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3769c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3770c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3771c20f8e35SMat Martineau else 3772c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3773c20f8e35SMat Martineau rfc.txwin_size); 37740a708f8fSGustavo F. Padovan break; 37750a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 377647d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 37770a708f8fSGustavo F. Padovan } 37780a708f8fSGustavo F. Padovan } 37790a708f8fSGustavo F. Padovan 37802d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3781cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3782cb3b3152SJohan Hedberg u8 *data) 37830a708f8fSGustavo F. Padovan { 3784e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 37850a708f8fSGustavo F. Padovan 3786cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3787cb3b3152SJohan Hedberg return -EPROTO; 3788cb3b3152SJohan Hedberg 3789e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 37900a708f8fSGustavo F. Padovan return 0; 37910a708f8fSGustavo F. Padovan 37920a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37930a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 379417cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37950a708f8fSGustavo F. Padovan 37960a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37970a708f8fSGustavo F. Padovan conn->info_ident = 0; 37980a708f8fSGustavo F. Padovan 37990a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 38000a708f8fSGustavo F. Padovan } 38010a708f8fSGustavo F. Padovan 38020a708f8fSGustavo F. Padovan return 0; 38030a708f8fSGustavo F. Padovan } 38040a708f8fSGustavo F. Padovan 38051700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 38061700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 38074c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 38080a708f8fSGustavo F. Padovan { 38090a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 38100a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 381123691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 38120a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 38130a708f8fSGustavo F. Padovan 38140a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 38150a708f8fSGustavo F. Padovan __le16 psm = req->psm; 38160a708f8fSGustavo F. Padovan 3817097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 38180a708f8fSGustavo F. Padovan 38190a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 38206f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3821bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 382223691d75SGustavo F. Padovan if (!pchan) { 38230a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 38240a708f8fSGustavo F. Padovan goto sendresp; 38250a708f8fSGustavo F. Padovan } 38260a708f8fSGustavo F. Padovan 38273df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 38288ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 38290a708f8fSGustavo F. Padovan 38300a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 3831dcf4adbfSJoe Perches if (psm != cpu_to_le16(L2CAP_PSM_SDP) && 38320a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 38339f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 38340a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 38350a708f8fSGustavo F. Padovan goto response; 38360a708f8fSGustavo F. Padovan } 38370a708f8fSGustavo F. Padovan 38380a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 38390a708f8fSGustavo F. Padovan 3840dd1a8f8aSMallikarjun Phulari /* Check for valid dynamic CID range (as per Erratum 3253) */ 3841dd1a8f8aSMallikarjun Phulari if (scid < L2CAP_CID_DYN_START || scid > L2CAP_CID_DYN_END) { 3842dd1a8f8aSMallikarjun Phulari result = L2CAP_CR_INVALID_SCID; 38432dfa1003SGustavo Padovan goto response; 3844dd1a8f8aSMallikarjun Phulari } 3845dd1a8f8aSMallikarjun Phulari 3846dd1a8f8aSMallikarjun Phulari /* Check if we already have channel with that dcid */ 3847dd1a8f8aSMallikarjun Phulari if (__l2cap_get_chan_by_dcid(conn, scid)) { 3848dd1a8f8aSMallikarjun Phulari result = L2CAP_CR_SCID_IN_USE; 3849dd1a8f8aSMallikarjun Phulari goto response; 3850dd1a8f8aSMallikarjun Phulari } 38512dfa1003SGustavo Padovan 385280b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 385380808e43SGustavo F. Padovan if (!chan) 38540a708f8fSGustavo F. Padovan goto response; 38550a708f8fSGustavo F. Padovan 3856330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3857330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3858330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3859330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3860330b6c15SSyam Sidhardhan */ 3861330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3862330b6c15SSyam Sidhardhan 38637eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 38647eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 3865a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(conn->hcon); 3866a250e048SJohan Hedberg chan->dst_type = bdaddr_dst_type(conn->hcon); 3867fe4128e0SGustavo F. Padovan chan->psm = psm; 3868fe4128e0SGustavo F. Padovan chan->dcid = scid; 38691700915fSMat Martineau chan->local_amp_id = amp_id; 38700a708f8fSGustavo F. Padovan 38716be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 387248454079SGustavo F. Padovan 3873fe4128e0SGustavo F. Padovan dcid = chan->scid; 38740a708f8fSGustavo F. Padovan 38758d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 38760a708f8fSGustavo F. Padovan 3877fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 38780a708f8fSGustavo F. Padovan 38790a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3880e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 3881bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3882f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38830a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38840a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 38852dc4e510SGustavo Padovan chan->ops->defer(chan); 38860a708f8fSGustavo F. Padovan } else { 38871700915fSMat Martineau /* Force pending result for AMP controllers. 38881700915fSMat Martineau * The connection will succeed after the 38891700915fSMat Martineau * physical link is up. 38901700915fSMat Martineau */ 38916ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3892f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 38930a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38946ed971caSMarcel Holtmann } else { 3895f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38966ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38971700915fSMat Martineau } 38980a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38990a708f8fSGustavo F. Padovan } 39000a708f8fSGustavo F. Padovan } else { 3901f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 39020a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 39030a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 39040a708f8fSGustavo F. Padovan } 39050a708f8fSGustavo F. Padovan } else { 3906f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 39070a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 39080a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 39090a708f8fSGustavo F. Padovan } 39100a708f8fSGustavo F. Padovan 39110a708f8fSGustavo F. Padovan response: 39128ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 39133df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 3914a24cce14SJohan Hedberg l2cap_chan_put(pchan); 39150a708f8fSGustavo F. Padovan 39160a708f8fSGustavo F. Padovan sendresp: 39170a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 39180a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 39190a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 39200a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 39214c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 39220a708f8fSGustavo F. Padovan 39230a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 39240a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3925dcf4adbfSJoe Perches info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 39260a708f8fSGustavo F. Padovan 39270a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 39280a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 39290a708f8fSGustavo F. Padovan 3930ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 39310a708f8fSGustavo F. Padovan 39322d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 39332d792818SGustavo Padovan sizeof(info), &info); 39340a708f8fSGustavo F. Padovan } 39350a708f8fSGustavo F. Padovan 3936c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 39370a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 39380a708f8fSGustavo F. Padovan u8 buf[128]; 3939c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 39400a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3941e860d2c9SBen Seri l2cap_build_conf_req(chan, buf, sizeof(buf)), buf); 394273ffa904SGustavo F. Padovan chan->num_conf_req++; 39430a708f8fSGustavo F. Padovan } 39441700915fSMat Martineau 39451700915fSMat Martineau return chan; 39464c89b6aaSMat Martineau } 39470a708f8fSGustavo F. Padovan 39484c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3949cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 39504c89b6aaSMat Martineau { 39517b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 39527b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 39537b064edaSJaganath Kanakkassery 3954cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3955cb3b3152SJohan Hedberg return -EPROTO; 3956cb3b3152SJohan Hedberg 39577b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 3958d7a5a11dSMarcel Holtmann if (hci_dev_test_flag(hdev, HCI_MGMT) && 39597b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 396048ec92faSAlfonso Acosta mgmt_device_connected(hdev, hcon, 0, NULL, 0); 39617b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 39627b064edaSJaganath Kanakkassery 3963300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 39640a708f8fSGustavo F. Padovan return 0; 39650a708f8fSGustavo F. Padovan } 39660a708f8fSGustavo F. Padovan 39675909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3968cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3969cb3b3152SJohan Hedberg u8 *data) 39700a708f8fSGustavo F. Padovan { 39710a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 39720a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 397348454079SGustavo F. Padovan struct l2cap_chan *chan; 39740a708f8fSGustavo F. Padovan u8 req[128]; 39753df91ea2SAndrei Emeltchenko int err; 39760a708f8fSGustavo F. Padovan 3977cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3978cb3b3152SJohan Hedberg return -EPROTO; 3979cb3b3152SJohan Hedberg 39800a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 39810a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 39820a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 39830a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 39840a708f8fSGustavo F. Padovan 39851b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 39861b009c98SAndrei Emeltchenko dcid, scid, result, status); 39870a708f8fSGustavo F. Padovan 39883df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 39893df91ea2SAndrei Emeltchenko 39900a708f8fSGustavo F. Padovan if (scid) { 39913df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 39923df91ea2SAndrei Emeltchenko if (!chan) { 399321870b52SJohan Hedberg err = -EBADSLT; 39943df91ea2SAndrei Emeltchenko goto unlock; 39953df91ea2SAndrei Emeltchenko } 39960a708f8fSGustavo F. Padovan } else { 39973df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39983df91ea2SAndrei Emeltchenko if (!chan) { 399921870b52SJohan Hedberg err = -EBADSLT; 40003df91ea2SAndrei Emeltchenko goto unlock; 40013df91ea2SAndrei Emeltchenko } 40020a708f8fSGustavo F. Padovan } 40030a708f8fSGustavo F. Padovan 40043df91ea2SAndrei Emeltchenko err = 0; 40053df91ea2SAndrei Emeltchenko 40066be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 400748454079SGustavo F. Padovan 40080a708f8fSGustavo F. Padovan switch (result) { 40090a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 401089bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 4011fc7f8a7eSGustavo F. Padovan chan->ident = 0; 4012fe4128e0SGustavo F. Padovan chan->dcid = dcid; 4013c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 40140a708f8fSGustavo F. Padovan 4015c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 40160a708f8fSGustavo F. Padovan break; 40170a708f8fSGustavo F. Padovan 40180a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 4019e860d2c9SBen Seri l2cap_build_conf_req(chan, req, sizeof(req)), req); 402073ffa904SGustavo F. Padovan chan->num_conf_req++; 40210a708f8fSGustavo F. Padovan break; 40220a708f8fSGustavo F. Padovan 40230a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 4024c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 40250a708f8fSGustavo F. Padovan break; 40260a708f8fSGustavo F. Padovan 40270a708f8fSGustavo F. Padovan default: 402848454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 40290a708f8fSGustavo F. Padovan break; 40300a708f8fSGustavo F. Padovan } 40310a708f8fSGustavo F. Padovan 40326be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 40333df91ea2SAndrei Emeltchenko 40343df91ea2SAndrei Emeltchenko unlock: 40353df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 40363df91ea2SAndrei Emeltchenko 40373df91ea2SAndrei Emeltchenko return err; 40380a708f8fSGustavo F. Padovan } 40390a708f8fSGustavo F. Padovan 404047d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 40410a708f8fSGustavo F. Padovan { 40420a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 40430a708f8fSGustavo F. Padovan * sides request it. 40440a708f8fSGustavo F. Padovan */ 40450c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 404647d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 4047f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 404847d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 40490a708f8fSGustavo F. Padovan } 40500a708f8fSGustavo F. Padovan 405129d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 405229d8a590SAndrei Emeltchenko u8 ident, u16 flags) 405329d8a590SAndrei Emeltchenko { 405429d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 405529d8a590SAndrei Emeltchenko 405629d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 405729d8a590SAndrei Emeltchenko flags); 405829d8a590SAndrei Emeltchenko 405929d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 406029d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 406129d8a590SAndrei Emeltchenko 406229d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 406329d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 406429d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 406529d8a590SAndrei Emeltchenko } 406629d8a590SAndrei Emeltchenko 4067662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 4068662d652dSJohan Hedberg u16 scid, u16 dcid) 4069662d652dSJohan Hedberg { 4070662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 4071662d652dSJohan Hedberg 4072dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 4073662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 4074662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 4075662d652dSJohan Hedberg 4076662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 4077662d652dSJohan Hedberg } 4078662d652dSJohan Hedberg 40792d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 40802d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 40812d792818SGustavo Padovan u8 *data) 40820a708f8fSGustavo F. Padovan { 40830a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 40840a708f8fSGustavo F. Padovan u16 dcid, flags; 40850a708f8fSGustavo F. Padovan u8 rsp[64]; 408648454079SGustavo F. Padovan struct l2cap_chan *chan; 40873c588192SMat Martineau int len, err = 0; 40880a708f8fSGustavo F. Padovan 4089cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 4090cb3b3152SJohan Hedberg return -EPROTO; 4091cb3b3152SJohan Hedberg 40920a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40930a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40940a708f8fSGustavo F. Padovan 40950a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40960a708f8fSGustavo F. Padovan 4097baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4098662d652dSJohan Hedberg if (!chan) { 4099662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4100662d652dSJohan Hedberg return 0; 4101662d652dSJohan Hedberg } 41020a708f8fSGustavo F. Padovan 4103033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4104662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4105662d652dSJohan Hedberg chan->dcid); 41060a708f8fSGustavo F. Padovan goto unlock; 41070a708f8fSGustavo F. Padovan } 41080a708f8fSGustavo F. Padovan 41090a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 41100a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4111cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 41120a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4113fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 41140a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 41150a708f8fSGustavo F. Padovan goto unlock; 41160a708f8fSGustavo F. Padovan } 41170a708f8fSGustavo F. Padovan 41180a708f8fSGustavo F. Padovan /* Store config. */ 411973ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 412073ffa904SGustavo F. Padovan chan->conf_len += len; 41210a708f8fSGustavo F. Padovan 412259e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 41230a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 41240a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4125fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 41265325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 41270a708f8fSGustavo F. Padovan goto unlock; 41280a708f8fSGustavo F. Padovan } 41290a708f8fSGustavo F. Padovan 41300a708f8fSGustavo F. Padovan /* Complete config. */ 4131e860d2c9SBen Seri len = l2cap_parse_conf_req(chan, rsp, sizeof(rsp)); 41320a708f8fSGustavo F. Padovan if (len < 0) { 41335e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41340a708f8fSGustavo F. Padovan goto unlock; 41350a708f8fSGustavo F. Padovan } 41360a708f8fSGustavo F. Padovan 41371500109bSMat Martineau chan->ident = cmd->ident; 41380a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 413973ffa904SGustavo F. Padovan chan->num_conf_rsp++; 41400a708f8fSGustavo F. Padovan 41410a708f8fSGustavo F. Padovan /* Reset config buffer. */ 414273ffa904SGustavo F. Padovan chan->conf_len = 0; 41430a708f8fSGustavo F. Padovan 4144c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 41450a708f8fSGustavo F. Padovan goto unlock; 41460a708f8fSGustavo F. Padovan 4147c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 414847d1ec61SGustavo F. Padovan set_default_fcs(chan); 41490a708f8fSGustavo F. Padovan 4150105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4151105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 41523c588192SMat Martineau err = l2cap_ertm_init(chan); 41530a708f8fSGustavo F. Padovan 41543c588192SMat Martineau if (err < 0) 41555e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 41563c588192SMat Martineau else 4157cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 41583c588192SMat Martineau 41590a708f8fSGustavo F. Padovan goto unlock; 41600a708f8fSGustavo F. Padovan } 41610a708f8fSGustavo F. Padovan 4162c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 41630a708f8fSGustavo F. Padovan u8 buf[64]; 41640a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 4165e860d2c9SBen Seri l2cap_build_conf_req(chan, buf, sizeof(buf)), buf); 416673ffa904SGustavo F. Padovan chan->num_conf_req++; 41670a708f8fSGustavo F. Padovan } 41680a708f8fSGustavo F. Padovan 416949c922bbSStephen Hemminger /* Got Conf Rsp PENDING from remote side and assume we sent 41700e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 41710e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 41720e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41730e8b207eSAndrei Emeltchenko 41740e8b207eSAndrei Emeltchenko /* check compatibility */ 41750e8b207eSAndrei Emeltchenko 417679de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4177f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 417829d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 417979de886dSAndrei Emeltchenko else 418079de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41810e8b207eSAndrei Emeltchenko } 41820e8b207eSAndrei Emeltchenko 41830a708f8fSGustavo F. Padovan unlock: 41846be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41853c588192SMat Martineau return err; 41860a708f8fSGustavo F. Padovan } 41870a708f8fSGustavo F. Padovan 41882d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4189cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4190cb3b3152SJohan Hedberg u8 *data) 41910a708f8fSGustavo F. Padovan { 41920a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41930a708f8fSGustavo F. Padovan u16 scid, flags, result; 419448454079SGustavo F. Padovan struct l2cap_chan *chan; 4195cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41963c588192SMat Martineau int err = 0; 41970a708f8fSGustavo F. Padovan 4198cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4199cb3b3152SJohan Hedberg return -EPROTO; 4200cb3b3152SJohan Hedberg 42010a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 42020a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 42030a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 42040a708f8fSGustavo F. Padovan 420561386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 420661386cbaSAndrei Emeltchenko result, len); 42070a708f8fSGustavo F. Padovan 4208baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 420948454079SGustavo F. Padovan if (!chan) 42100a708f8fSGustavo F. Padovan return 0; 42110a708f8fSGustavo F. Padovan 42120a708f8fSGustavo F. Padovan switch (result) { 42130a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 421447d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 42150e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 42160a708f8fSGustavo F. Padovan break; 42170a708f8fSGustavo F. Padovan 42180e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 42190e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 42200e8b207eSAndrei Emeltchenko 42210e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 42220e8b207eSAndrei Emeltchenko char buf[64]; 42230e8b207eSAndrei Emeltchenko 42240e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4225e860d2c9SBen Seri buf, sizeof(buf), &result); 42260e8b207eSAndrei Emeltchenko if (len < 0) { 42275e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42280e8b207eSAndrei Emeltchenko goto done; 42290e8b207eSAndrei Emeltchenko } 42300e8b207eSAndrei Emeltchenko 4231f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 423279de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 423379de886dSAndrei Emeltchenko 0); 42345ce66b59SAndrei Emeltchenko } else { 42355ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 42365ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 423779de886dSAndrei Emeltchenko chan->ident = cmd->ident; 42380e8b207eSAndrei Emeltchenko } 42395ce66b59SAndrei Emeltchenko } 42405ce66b59SAndrei Emeltchenko } 42410e8b207eSAndrei Emeltchenko goto done; 42420e8b207eSAndrei Emeltchenko 42430a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 424473ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 42450a708f8fSGustavo F. Padovan char req[64]; 42460a708f8fSGustavo F. Padovan 42470a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 42485e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42490a708f8fSGustavo F. Padovan goto done; 42500a708f8fSGustavo F. Padovan } 42510a708f8fSGustavo F. Padovan 42520a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 42530a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4254b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4255e860d2c9SBen Seri req, sizeof(req), &result); 42560a708f8fSGustavo F. Padovan if (len < 0) { 42575e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42580a708f8fSGustavo F. Padovan goto done; 42590a708f8fSGustavo F. Padovan } 42600a708f8fSGustavo F. Padovan 42610a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 42620a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 426373ffa904SGustavo F. Padovan chan->num_conf_req++; 42640a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 42650a708f8fSGustavo F. Padovan goto done; 42660a708f8fSGustavo F. Padovan break; 42670a708f8fSGustavo F. Padovan } 42686317950cSGustavo A. R. Silva /* fall through */ 42690a708f8fSGustavo F. Padovan 42700a708f8fSGustavo F. Padovan default: 42716be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 42722e0052e4SAndrei Emeltchenko 4273ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 42745e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42750a708f8fSGustavo F. Padovan goto done; 42760a708f8fSGustavo F. Padovan } 42770a708f8fSGustavo F. Padovan 427859e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 42790a708f8fSGustavo F. Padovan goto done; 42800a708f8fSGustavo F. Padovan 4281c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 42820a708f8fSGustavo F. Padovan 4283c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 428447d1ec61SGustavo F. Padovan set_default_fcs(chan); 42850a708f8fSGustavo F. Padovan 4286105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4287105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 42883c588192SMat Martineau err = l2cap_ertm_init(chan); 42890a708f8fSGustavo F. Padovan 42903c588192SMat Martineau if (err < 0) 42915e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 42923c588192SMat Martineau else 4293cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42940a708f8fSGustavo F. Padovan } 42950a708f8fSGustavo F. Padovan 42960a708f8fSGustavo F. Padovan done: 42976be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42983c588192SMat Martineau return err; 42990a708f8fSGustavo F. Padovan } 43000a708f8fSGustavo F. Padovan 43012d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4302cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4303cb3b3152SJohan Hedberg u8 *data) 43040a708f8fSGustavo F. Padovan { 43050a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 43060a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 43070a708f8fSGustavo F. Padovan u16 dcid, scid; 430848454079SGustavo F. Padovan struct l2cap_chan *chan; 43090a708f8fSGustavo F. Padovan 4310cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4311cb3b3152SJohan Hedberg return -EPROTO; 4312cb3b3152SJohan Hedberg 43130a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 43140a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 43150a708f8fSGustavo F. Padovan 43160a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 43170a708f8fSGustavo F. Padovan 43183df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 43193df91ea2SAndrei Emeltchenko 43203df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 43213df91ea2SAndrei Emeltchenko if (!chan) { 43223df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4323662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4324662d652dSJohan Hedberg return 0; 43253df91ea2SAndrei Emeltchenko } 43260a708f8fSGustavo F. Padovan 43276be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 43286be36555SAndrei Emeltchenko 4329fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4330fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 43310a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 43320a708f8fSGustavo F. Padovan 43335ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 43340a708f8fSGustavo F. Padovan 433561d6ef3eSMat Martineau l2cap_chan_hold(chan); 433648454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 43376be36555SAndrei Emeltchenko 43386be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43390a708f8fSGustavo F. Padovan 434080b98027SGustavo Padovan chan->ops->close(chan); 434161d6ef3eSMat Martineau l2cap_chan_put(chan); 43423df91ea2SAndrei Emeltchenko 43433df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43443df91ea2SAndrei Emeltchenko 43450a708f8fSGustavo F. Padovan return 0; 43460a708f8fSGustavo F. Padovan } 43470a708f8fSGustavo F. Padovan 43482d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4349cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4350cb3b3152SJohan Hedberg u8 *data) 43510a708f8fSGustavo F. Padovan { 43520a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 43530a708f8fSGustavo F. Padovan u16 dcid, scid; 435448454079SGustavo F. Padovan struct l2cap_chan *chan; 43550a708f8fSGustavo F. Padovan 4356cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4357cb3b3152SJohan Hedberg return -EPROTO; 4358cb3b3152SJohan Hedberg 43590a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 43600a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 43610a708f8fSGustavo F. Padovan 43620a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 43630a708f8fSGustavo F. Padovan 43643df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 43653df91ea2SAndrei Emeltchenko 43663df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 43673df91ea2SAndrei Emeltchenko if (!chan) { 43683df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43690a708f8fSGustavo F. Padovan return 0; 43703df91ea2SAndrei Emeltchenko } 43710a708f8fSGustavo F. Padovan 43726be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 437348454079SGustavo F. Padovan 437461d6ef3eSMat Martineau l2cap_chan_hold(chan); 437548454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 43766be36555SAndrei Emeltchenko 43776be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43780a708f8fSGustavo F. Padovan 437980b98027SGustavo Padovan chan->ops->close(chan); 438061d6ef3eSMat Martineau l2cap_chan_put(chan); 43813df91ea2SAndrei Emeltchenko 43823df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43833df91ea2SAndrei Emeltchenko 43840a708f8fSGustavo F. Padovan return 0; 43850a708f8fSGustavo F. Padovan } 43860a708f8fSGustavo F. Padovan 43872d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4388cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4389cb3b3152SJohan Hedberg u8 *data) 43900a708f8fSGustavo F. Padovan { 43910a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 43920a708f8fSGustavo F. Padovan u16 type; 43930a708f8fSGustavo F. Padovan 4394cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4395cb3b3152SJohan Hedberg return -EPROTO; 4396cb3b3152SJohan Hedberg 43970a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43980a708f8fSGustavo F. Padovan 43990a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 44000a708f8fSGustavo F. Padovan 44010a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 44020a708f8fSGustavo F. Padovan u8 buf[8]; 44030a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 44040a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4405dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 4406dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 44070a708f8fSGustavo F. Padovan if (!disable_ertm) 44080a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 44090a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 44100bd49fc7SJohan Hedberg if (conn->local_fixed_chan & L2CAP_FC_A2MP) 44116327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 44126327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4413a5fd6f30SAndrei Emeltchenko 44140a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 44152d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 44162d792818SGustavo Padovan buf); 44170a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 44180a708f8fSGustavo F. Padovan u8 buf[12]; 44190a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 442050a147cdSMat Martineau 4421dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4422dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 44230bd49fc7SJohan Hedberg rsp->data[0] = conn->local_fixed_chan; 44240bd49fc7SJohan Hedberg memset(rsp->data + 1, 0, 7); 44252d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 44262d792818SGustavo Padovan buf); 44270a708f8fSGustavo F. Padovan } else { 44280a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 44290a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4430dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 44312d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 44322d792818SGustavo Padovan &rsp); 44330a708f8fSGustavo F. Padovan } 44340a708f8fSGustavo F. Padovan 44350a708f8fSGustavo F. Padovan return 0; 44360a708f8fSGustavo F. Padovan } 44370a708f8fSGustavo F. Padovan 44382d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4439cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4440cb3b3152SJohan Hedberg u8 *data) 44410a708f8fSGustavo F. Padovan { 44420a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 44430a708f8fSGustavo F. Padovan u16 type, result; 44440a708f8fSGustavo F. Padovan 44453f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4446cb3b3152SJohan Hedberg return -EPROTO; 4447cb3b3152SJohan Hedberg 44480a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 44490a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 44500a708f8fSGustavo F. Padovan 44510a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 44520a708f8fSGustavo F. Padovan 4453e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4454e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4455e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4456e90165beSAndrei Emeltchenko return 0; 4457e90165beSAndrei Emeltchenko 445817cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 44590a708f8fSGustavo F. Padovan 44600a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 44610a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44620a708f8fSGustavo F. Padovan conn->info_ident = 0; 44630a708f8fSGustavo F. Padovan 44640a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44650a708f8fSGustavo F. Padovan 44660a708f8fSGustavo F. Padovan return 0; 44670a708f8fSGustavo F. Padovan } 44680a708f8fSGustavo F. Padovan 4469978c93b9SAndrei Emeltchenko switch (type) { 4470978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 44710a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 44720a708f8fSGustavo F. Padovan 44730a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 44740a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4475dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 44760a708f8fSGustavo F. Padovan 44770a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 44780a708f8fSGustavo F. Padovan 44790a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 44800a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 44810a708f8fSGustavo F. Padovan } else { 44820a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44830a708f8fSGustavo F. Padovan conn->info_ident = 0; 44840a708f8fSGustavo F. Padovan 44850a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44860a708f8fSGustavo F. Padovan } 4487978c93b9SAndrei Emeltchenko break; 4488978c93b9SAndrei Emeltchenko 4489978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 44900bd49fc7SJohan Hedberg conn->remote_fixed_chan = rsp->data[0]; 44910a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44920a708f8fSGustavo F. Padovan conn->info_ident = 0; 44930a708f8fSGustavo F. Padovan 44940a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4495978c93b9SAndrei Emeltchenko break; 44960a708f8fSGustavo F. Padovan } 44970a708f8fSGustavo F. Padovan 44980a708f8fSGustavo F. Padovan return 0; 44990a708f8fSGustavo F. Padovan } 45000a708f8fSGustavo F. Padovan 45011700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 45022d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 45032d792818SGustavo Padovan u16 cmd_len, void *data) 4504f94ff6ffSMat Martineau { 4505f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 45066e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 45071700915fSMat Martineau struct l2cap_chan *chan; 45086e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4509f94ff6ffSMat Martineau u16 psm, scid; 4510f94ff6ffSMat Martineau 4511f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4512f94ff6ffSMat Martineau return -EPROTO; 4513f94ff6ffSMat Martineau 45140bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 4515f94ff6ffSMat Martineau return -EINVAL; 4516f94ff6ffSMat Martineau 4517f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4518f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4519f94ff6ffSMat Martineau 4520ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4521f94ff6ffSMat Martineau 45226e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 45236ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 45246e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 45256e1df6a6SAndrei Emeltchenko req->amp_id); 45266e1df6a6SAndrei Emeltchenko return 0; 45276e1df6a6SAndrei Emeltchenko } 45281700915fSMat Martineau 45291700915fSMat Martineau /* Validate AMP controller id */ 45301700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 45316e1df6a6SAndrei Emeltchenko if (!hdev) 45326e1df6a6SAndrei Emeltchenko goto error; 45331700915fSMat Martineau 45346e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 45356e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45366e1df6a6SAndrei Emeltchenko goto error; 45376e1df6a6SAndrei Emeltchenko } 45386e1df6a6SAndrei Emeltchenko 45396e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 45406e1df6a6SAndrei Emeltchenko req->amp_id); 45416e1df6a6SAndrei Emeltchenko if (chan) { 45426e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 45436e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 45446e1df6a6SAndrei Emeltchenko 454598e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 454698e0f7eaSMarcel Holtmann &conn->hcon->dst); 45476e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 45486e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4549662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4550662d652dSJohan Hedberg chan->dcid); 4551662d652dSJohan Hedberg return 0; 45526e1df6a6SAndrei Emeltchenko } 45536e1df6a6SAndrei Emeltchenko 45546e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 45556e1df6a6SAndrei Emeltchenko 45566e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 45576e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4558fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 45596e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 45606e1df6a6SAndrei Emeltchenko } 45616e1df6a6SAndrei Emeltchenko 45626e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45636e1df6a6SAndrei Emeltchenko 45646e1df6a6SAndrei Emeltchenko return 0; 45656e1df6a6SAndrei Emeltchenko 45666e1df6a6SAndrei Emeltchenko error: 4567f94ff6ffSMat Martineau rsp.dcid = 0; 4568f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 4569dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_BAD_AMP); 4570dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4571f94ff6ffSMat Martineau 4572f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4573f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4574f94ff6ffSMat Martineau 4575dc280801SJohan Hedberg return 0; 4576f94ff6ffSMat Martineau } 4577f94ff6ffSMat Martineau 45788eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 45798eb200bdSMat Martineau { 45808eb200bdSMat Martineau struct l2cap_move_chan_req req; 45818eb200bdSMat Martineau u8 ident; 45828eb200bdSMat Martineau 45838eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 45848eb200bdSMat Martineau 45858eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 45868eb200bdSMat Martineau chan->ident = ident; 45878eb200bdSMat Martineau 45888eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 45898eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45908eb200bdSMat Martineau 45918eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45928eb200bdSMat Martineau &req); 45938eb200bdSMat Martineau 45948eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45958eb200bdSMat Martineau } 45968eb200bdSMat Martineau 45971500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45988d5a04a1SMat Martineau { 45998d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 46008d5a04a1SMat Martineau 46011500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 46028d5a04a1SMat Martineau 46031500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 46048d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 46058d5a04a1SMat Martineau 46061500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 46071500109bSMat Martineau sizeof(rsp), &rsp); 46088d5a04a1SMat Martineau } 46098d5a04a1SMat Martineau 46105b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 46118d5a04a1SMat Martineau { 46128d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 46138d5a04a1SMat Martineau 46145b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 46158d5a04a1SMat Martineau 46165b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 46178d5a04a1SMat Martineau 46185b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 46198d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 46208d5a04a1SMat Martineau 46215b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 46225b155ef9SMat Martineau sizeof(cfm), &cfm); 46235b155ef9SMat Martineau 46245b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 46255b155ef9SMat Martineau } 46265b155ef9SMat Martineau 46275b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 46285b155ef9SMat Martineau { 46295b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 46305b155ef9SMat Martineau 46315b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 46325b155ef9SMat Martineau 46335b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 4634dcf4adbfSJoe Perches cfm.result = cpu_to_le16(L2CAP_MC_UNCONFIRMED); 46355b155ef9SMat Martineau 46365b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 46375b155ef9SMat Martineau sizeof(cfm), &cfm); 46388d5a04a1SMat Martineau } 46398d5a04a1SMat Martineau 46408d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 46418d5a04a1SMat Martineau u16 icid) 46428d5a04a1SMat Martineau { 46438d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 46448d5a04a1SMat Martineau 4645ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 46468d5a04a1SMat Martineau 46478d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 46488d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 46498d5a04a1SMat Martineau } 46508d5a04a1SMat Martineau 46515f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 46525f3847a4SMat Martineau { 46535f3847a4SMat Martineau chan->hs_hchan = NULL; 46545f3847a4SMat Martineau chan->hs_hcon = NULL; 46555f3847a4SMat Martineau 46565f3847a4SMat Martineau /* Placeholder - release the logical link */ 46575f3847a4SMat Martineau } 46585f3847a4SMat Martineau 46591500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 46601500109bSMat Martineau { 46611500109bSMat Martineau /* Logical link setup failed */ 46621500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46631500109bSMat Martineau /* Create channel failure, disconnect */ 46645e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 46651500109bSMat Martineau return; 46661500109bSMat Martineau } 46671500109bSMat Martineau 46681500109bSMat Martineau switch (chan->move_role) { 46691500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 46701500109bSMat Martineau l2cap_move_done(chan); 46711500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 46721500109bSMat Martineau break; 46731500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 46741500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 46751500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 46761500109bSMat Martineau /* Remote has only sent pending or 46771500109bSMat Martineau * success responses, clean up 46781500109bSMat Martineau */ 46791500109bSMat Martineau l2cap_move_done(chan); 46801500109bSMat Martineau } 46811500109bSMat Martineau 46821500109bSMat Martineau /* Other amp move states imply that the move 46831500109bSMat Martineau * has already aborted 46841500109bSMat Martineau */ 46851500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 46861500109bSMat Martineau break; 46871500109bSMat Martineau } 46881500109bSMat Martineau } 46891500109bSMat Martineau 46901500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46911500109bSMat Martineau struct hci_chan *hchan) 46921500109bSMat Martineau { 46931500109bSMat Martineau struct l2cap_conf_rsp rsp; 46941500109bSMat Martineau 4695336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46961500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46971500109bSMat Martineau 469835ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46991500109bSMat Martineau 47001500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4701fe79c6feSAndrei Emeltchenko int err; 47021500109bSMat Martineau 47031500109bSMat Martineau set_default_fcs(chan); 47041500109bSMat Martineau 47051500109bSMat Martineau err = l2cap_ertm_init(chan); 47061500109bSMat Martineau if (err < 0) 47075e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 47081500109bSMat Martineau else 47091500109bSMat Martineau l2cap_chan_ready(chan); 47101500109bSMat Martineau } 47111500109bSMat Martineau } 47121500109bSMat Martineau 47131500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 47141500109bSMat Martineau struct hci_chan *hchan) 47151500109bSMat Martineau { 47161500109bSMat Martineau chan->hs_hcon = hchan->conn; 47171500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 47181500109bSMat Martineau 47191500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 47201500109bSMat Martineau 47211500109bSMat Martineau switch (chan->move_state) { 47221500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 47231500109bSMat Martineau /* Move confirm will be sent after a success 47241500109bSMat Martineau * response is received 47251500109bSMat Martineau */ 47261500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47271500109bSMat Martineau break; 47281500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 47291500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 47301500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 47311500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 47321500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 47331500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 47341500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 47351500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 47361500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 47371500109bSMat Martineau } 47381500109bSMat Martineau break; 47391500109bSMat Martineau default: 47401500109bSMat Martineau /* Move was not in expected state, free the channel */ 47411500109bSMat Martineau __release_logical_link(chan); 47421500109bSMat Martineau 47431500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 47441500109bSMat Martineau } 47451500109bSMat Martineau } 47461500109bSMat Martineau 47471500109bSMat Martineau /* Call with chan locked */ 474827695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 47495b155ef9SMat Martineau u8 status) 47505b155ef9SMat Martineau { 47511500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 47521500109bSMat Martineau 47531500109bSMat Martineau if (status) { 47541500109bSMat Martineau l2cap_logical_fail(chan); 47551500109bSMat Martineau __release_logical_link(chan); 47565b155ef9SMat Martineau return; 47575b155ef9SMat Martineau } 47585b155ef9SMat Martineau 47591500109bSMat Martineau if (chan->state != BT_CONNECTED) { 47601500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 47616ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 47621500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 47631500109bSMat Martineau } else { 47641500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 47651500109bSMat Martineau } 47661500109bSMat Martineau } 47671500109bSMat Martineau 47683f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 47693f7a56c4SMat Martineau { 47703f7a56c4SMat Martineau BT_DBG("chan %p", chan); 47713f7a56c4SMat Martineau 47726ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 47733f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 47743f7a56c4SMat Martineau return; 47753f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47763f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 47773f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 47783f7a56c4SMat Martineau } else { 47793f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47803f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47813f7a56c4SMat Martineau chan->move_id = 0; 47823f7a56c4SMat Martineau l2cap_move_setup(chan); 47833f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 47843f7a56c4SMat Martineau } 47853f7a56c4SMat Martineau } 47863f7a56c4SMat Martineau 47878eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 47888eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 47898eb200bdSMat Martineau { 479062748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 479162748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 479262748ca1SAndrei Emeltchenko 479312d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 479412d6cc60SAndrei Emeltchenko 479562748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 479662748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 479762748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 479862748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 479962748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 480062748ca1SAndrei Emeltchenko } else { 480162748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 480262748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 480362748ca1SAndrei Emeltchenko } 480462748ca1SAndrei Emeltchenko 480562748ca1SAndrei Emeltchenko return; 480662748ca1SAndrei Emeltchenko } 480762748ca1SAndrei Emeltchenko 480862748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 480962748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 48108eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 48118eb200bdSMat Martineau char buf[128]; 48128eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 48138eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 48148eb200bdSMat Martineau 48158eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 48168eb200bdSMat Martineau /* Send successful response */ 4817dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 4818dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 48198eb200bdSMat Martineau } else { 48208eb200bdSMat Martineau /* Send negative response */ 4821dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_NO_MEM); 4822dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 48238eb200bdSMat Martineau } 48248eb200bdSMat Martineau 48258eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 48268eb200bdSMat Martineau sizeof(rsp), &rsp); 48278eb200bdSMat Martineau 48288eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4829f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 48308eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 48318eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 48328eb200bdSMat Martineau L2CAP_CONF_REQ, 4833e860d2c9SBen Seri l2cap_build_conf_req(chan, buf, sizeof(buf)), buf); 48348eb200bdSMat Martineau chan->num_conf_req++; 48358eb200bdSMat Martineau } 48368eb200bdSMat Martineau } 48378eb200bdSMat Martineau } 48388eb200bdSMat Martineau 48398eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 48408eb200bdSMat Martineau u8 remote_amp_id) 48418eb200bdSMat Martineau { 48428eb200bdSMat Martineau l2cap_move_setup(chan); 48438eb200bdSMat Martineau chan->move_id = local_amp_id; 48448eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 48458eb200bdSMat Martineau 48468eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 48478eb200bdSMat Martineau } 48488eb200bdSMat Martineau 48498eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 48508eb200bdSMat Martineau { 48518eb200bdSMat Martineau struct hci_chan *hchan = NULL; 48528eb200bdSMat Martineau 48538eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 48548eb200bdSMat Martineau 48558eb200bdSMat Martineau if (hchan) { 48568eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 48578eb200bdSMat Martineau /* Logical link is ready to go */ 48588eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 48598eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 48608eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 48618eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 48628eb200bdSMat Martineau 48638eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 48648eb200bdSMat Martineau } else { 48658eb200bdSMat Martineau /* Wait for logical link to be ready */ 48668eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 48678eb200bdSMat Martineau } 48688eb200bdSMat Martineau } else { 48698eb200bdSMat Martineau /* Logical link not available */ 48708eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 48718eb200bdSMat Martineau } 48728eb200bdSMat Martineau } 48738eb200bdSMat Martineau 48748eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 48758eb200bdSMat Martineau { 48768eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 48778eb200bdSMat Martineau u8 rsp_result; 48788eb200bdSMat Martineau if (result == -EINVAL) 48798eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 48808eb200bdSMat Martineau else 48818eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 48828eb200bdSMat Martineau 48838eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 48848eb200bdSMat Martineau } 48858eb200bdSMat Martineau 48868eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 48878eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 48888eb200bdSMat Martineau 48898eb200bdSMat Martineau /* Restart data transmission */ 48908eb200bdSMat Martineau l2cap_ertm_send(chan); 48918eb200bdSMat Martineau } 48928eb200bdSMat Martineau 4893a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4894a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48958eb200bdSMat Martineau { 4896770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4897fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4898770bfefaSAndrei Emeltchenko 48998eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 49008eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 49018eb200bdSMat Martineau 49028eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 49038eb200bdSMat Martineau l2cap_chan_unlock(chan); 49048eb200bdSMat Martineau return; 49058eb200bdSMat Martineau } 49068eb200bdSMat Martineau 49078eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 49088eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 49098eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 49108eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 49118eb200bdSMat Martineau } else { 49128eb200bdSMat Martineau switch (chan->move_role) { 49138eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 49148eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 49158eb200bdSMat Martineau remote_amp_id); 49168eb200bdSMat Martineau break; 49178eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 49188eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 49198eb200bdSMat Martineau break; 49208eb200bdSMat Martineau default: 49218eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 49228eb200bdSMat Martineau break; 49238eb200bdSMat Martineau } 49248eb200bdSMat Martineau } 49258eb200bdSMat Martineau } 49268eb200bdSMat Martineau 49278d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4928ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4929ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 49308d5a04a1SMat Martineau { 49318d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 49321500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 493302b0fbb9SMat Martineau struct l2cap_chan *chan; 49348d5a04a1SMat Martineau u16 icid = 0; 49358d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 49368d5a04a1SMat Martineau 49378d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 49388d5a04a1SMat Martineau return -EPROTO; 49398d5a04a1SMat Martineau 49408d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 49418d5a04a1SMat Martineau 4942ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 49438d5a04a1SMat Martineau 49440bd49fc7SJohan Hedberg if (!(conn->local_fixed_chan & L2CAP_FC_A2MP)) 49458d5a04a1SMat Martineau return -EINVAL; 49468d5a04a1SMat Martineau 494702b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 494802b0fbb9SMat Martineau if (!chan) { 49491500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 4950dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 49511500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 49521500109bSMat Martineau sizeof(rsp), &rsp); 495302b0fbb9SMat Martineau return 0; 495402b0fbb9SMat Martineau } 495502b0fbb9SMat Martineau 49561500109bSMat Martineau chan->ident = cmd->ident; 49571500109bSMat Martineau 495802b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 495902b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 496002b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 496102b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 496202b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 496302b0fbb9SMat Martineau goto send_move_response; 496402b0fbb9SMat Martineau } 496502b0fbb9SMat Martineau 496602b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 496702b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 496802b0fbb9SMat Martineau goto send_move_response; 496902b0fbb9SMat Martineau } 497002b0fbb9SMat Martineau 49716ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 497202b0fbb9SMat Martineau struct hci_dev *hdev; 497302b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 497402b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 497502b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 497602b0fbb9SMat Martineau if (hdev) 497702b0fbb9SMat Martineau hci_dev_put(hdev); 497802b0fbb9SMat Martineau 497902b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 498002b0fbb9SMat Martineau goto send_move_response; 498102b0fbb9SMat Martineau } 498202b0fbb9SMat Martineau hci_dev_put(hdev); 498302b0fbb9SMat Martineau } 498402b0fbb9SMat Martineau 498502b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 498602b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 498702b0fbb9SMat Martineau * The winner has the larger bd_addr. 498802b0fbb9SMat Martineau */ 498902b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 499002b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49916f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 499202b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 499302b0fbb9SMat Martineau goto send_move_response; 499402b0fbb9SMat Martineau } 499502b0fbb9SMat Martineau 499602b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 499702b0fbb9SMat Martineau l2cap_move_setup(chan); 499802b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 499902b0fbb9SMat Martineau icid = chan->dcid; 500002b0fbb9SMat Martineau 50016ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 500202b0fbb9SMat Martineau /* Moving to BR/EDR */ 500302b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 500402b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 500502b0fbb9SMat Martineau result = L2CAP_MR_PEND; 500602b0fbb9SMat Martineau } else { 500702b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 500802b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 500902b0fbb9SMat Martineau } 501002b0fbb9SMat Martineau } else { 501102b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 501202b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 501302b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 501402b0fbb9SMat Martineau result = L2CAP_MR_PEND; 501502b0fbb9SMat Martineau } 501602b0fbb9SMat Martineau 501702b0fbb9SMat Martineau send_move_response: 50181500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 50198d5a04a1SMat Martineau 502002b0fbb9SMat Martineau l2cap_chan_unlock(chan); 502102b0fbb9SMat Martineau 50228d5a04a1SMat Martineau return 0; 50238d5a04a1SMat Martineau } 50248d5a04a1SMat Martineau 50255b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 50265b155ef9SMat Martineau { 50275b155ef9SMat Martineau struct l2cap_chan *chan; 50285b155ef9SMat Martineau struct hci_chan *hchan = NULL; 50295b155ef9SMat Martineau 50305b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 50315b155ef9SMat Martineau if (!chan) { 50325b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50335b155ef9SMat Martineau return; 50345b155ef9SMat Martineau } 50355b155ef9SMat Martineau 50365b155ef9SMat Martineau __clear_chan_timer(chan); 50375b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 50385b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 50395b155ef9SMat Martineau 50405b155ef9SMat Martineau switch (chan->move_state) { 50415b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 50425b155ef9SMat Martineau /* Move confirm will be sent when logical link 50435b155ef9SMat Martineau * is complete. 50445b155ef9SMat Martineau */ 50455b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50465b155ef9SMat Martineau break; 50475b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 50485b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 50495b155ef9SMat Martineau break; 50505b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 50515b155ef9SMat Martineau &chan->conn_state)) { 50525b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 50535b155ef9SMat Martineau } else { 50545b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 50555b155ef9SMat Martineau * proceed with move 50565b155ef9SMat Martineau */ 50575b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 50585b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50595b155ef9SMat Martineau } 50605b155ef9SMat Martineau break; 50615b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 50625b155ef9SMat Martineau /* Moving to AMP */ 50635b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50645b155ef9SMat Martineau /* Remote is ready, send confirm immediately 50655b155ef9SMat Martineau * after logical link is ready 50665b155ef9SMat Martineau */ 50675b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50685b155ef9SMat Martineau } else { 50695b155ef9SMat Martineau /* Both logical link and move success 50705b155ef9SMat Martineau * are required to confirm 50715b155ef9SMat Martineau */ 50725b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 50735b155ef9SMat Martineau } 50745b155ef9SMat Martineau 50755b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 50765b155ef9SMat Martineau if (!hchan) { 50775b155ef9SMat Martineau /* Logical link not available */ 50785b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50795b155ef9SMat Martineau break; 50805b155ef9SMat Martineau } 50815b155ef9SMat Martineau 50825b155ef9SMat Martineau /* If the logical link is not yet connected, do not 50835b155ef9SMat Martineau * send confirmation. 50845b155ef9SMat Martineau */ 50855b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 50865b155ef9SMat Martineau break; 50875b155ef9SMat Martineau 50885b155ef9SMat Martineau /* Logical link is already ready to go */ 50895b155ef9SMat Martineau 50905b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50915b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50925b155ef9SMat Martineau 50935b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50945b155ef9SMat Martineau /* Can confirm now */ 50955b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50965b155ef9SMat Martineau } else { 50975b155ef9SMat Martineau /* Now only need move success 50985b155ef9SMat Martineau * to confirm 50995b155ef9SMat Martineau */ 51005b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 51015b155ef9SMat Martineau } 51025b155ef9SMat Martineau 51035b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 51045b155ef9SMat Martineau break; 51055b155ef9SMat Martineau default: 51065b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 51075b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 51085b155ef9SMat Martineau l2cap_move_done(chan); 51095b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 51105b155ef9SMat Martineau } 51115b155ef9SMat Martineau 51125b155ef9SMat Martineau l2cap_chan_unlock(chan); 51135b155ef9SMat Martineau } 51145b155ef9SMat Martineau 51155b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 51165b155ef9SMat Martineau u16 result) 51175b155ef9SMat Martineau { 51185b155ef9SMat Martineau struct l2cap_chan *chan; 51195b155ef9SMat Martineau 51205b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 51215b155ef9SMat Martineau if (!chan) { 51225b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 51235b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 51245b155ef9SMat Martineau return; 51255b155ef9SMat Martineau } 51265b155ef9SMat Martineau 51275b155ef9SMat Martineau __clear_chan_timer(chan); 51285b155ef9SMat Martineau 51295b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 51305b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 51315b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 51325b155ef9SMat Martineau } else { 51335b155ef9SMat Martineau /* Cleanup - cancel move */ 51345b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 51355b155ef9SMat Martineau l2cap_move_done(chan); 51365b155ef9SMat Martineau } 51375b155ef9SMat Martineau } 51385b155ef9SMat Martineau 51395b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 51405b155ef9SMat Martineau 51415b155ef9SMat Martineau l2cap_chan_unlock(chan); 51425b155ef9SMat Martineau } 51435b155ef9SMat Martineau 51445b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5145ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5146ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51478d5a04a1SMat Martineau { 51488d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 51498d5a04a1SMat Martineau u16 icid, result; 51508d5a04a1SMat Martineau 51518d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51528d5a04a1SMat Martineau return -EPROTO; 51538d5a04a1SMat Martineau 51548d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51558d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 51568d5a04a1SMat Martineau 5157ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51588d5a04a1SMat Martineau 51595b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 51605b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 51615b155ef9SMat Martineau else 51625b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 51638d5a04a1SMat Martineau 51648d5a04a1SMat Martineau return 0; 51658d5a04a1SMat Martineau } 51668d5a04a1SMat Martineau 51675f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5168ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5169ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51708d5a04a1SMat Martineau { 51718d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 51725f3847a4SMat Martineau struct l2cap_chan *chan; 51738d5a04a1SMat Martineau u16 icid, result; 51748d5a04a1SMat Martineau 51758d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 51768d5a04a1SMat Martineau return -EPROTO; 51778d5a04a1SMat Martineau 51788d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 51798d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 51808d5a04a1SMat Martineau 5181ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51828d5a04a1SMat Martineau 51835f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 51845f3847a4SMat Martineau if (!chan) { 51855f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 51868d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51875f3847a4SMat Martineau return 0; 51885f3847a4SMat Martineau } 51895f3847a4SMat Martineau 51905f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51915f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51925f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51936ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51945f3847a4SMat Martineau __release_logical_link(chan); 51955f3847a4SMat Martineau } else { 51965f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51975f3847a4SMat Martineau } 51985f3847a4SMat Martineau 51995f3847a4SMat Martineau l2cap_move_done(chan); 52005f3847a4SMat Martineau } 52015f3847a4SMat Martineau 52025f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 52035f3847a4SMat Martineau 52045f3847a4SMat Martineau l2cap_chan_unlock(chan); 52058d5a04a1SMat Martineau 52068d5a04a1SMat Martineau return 0; 52078d5a04a1SMat Martineau } 52088d5a04a1SMat Martineau 52098d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5210ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5211ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 52128d5a04a1SMat Martineau { 52138d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 52143fd71a0aSMat Martineau struct l2cap_chan *chan; 52158d5a04a1SMat Martineau u16 icid; 52168d5a04a1SMat Martineau 52178d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 52188d5a04a1SMat Martineau return -EPROTO; 52198d5a04a1SMat Martineau 52208d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 52218d5a04a1SMat Martineau 5222ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 52238d5a04a1SMat Martineau 52243fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 52253fd71a0aSMat Martineau if (!chan) 52263fd71a0aSMat Martineau return 0; 52273fd71a0aSMat Martineau 52283fd71a0aSMat Martineau __clear_chan_timer(chan); 52293fd71a0aSMat Martineau 52303fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 52313fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 52323fd71a0aSMat Martineau 52336ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 52343fd71a0aSMat Martineau __release_logical_link(chan); 52353fd71a0aSMat Martineau 52363fd71a0aSMat Martineau l2cap_move_done(chan); 52373fd71a0aSMat Martineau } 52383fd71a0aSMat Martineau 52393fd71a0aSMat Martineau l2cap_chan_unlock(chan); 52403fd71a0aSMat Martineau 52418d5a04a1SMat Martineau return 0; 52428d5a04a1SMat Martineau } 52438d5a04a1SMat Martineau 5244de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 52452d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5246203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5247de73115aSClaudio Takahasi { 5248de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5249de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5250de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5251203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 52522ce603ebSClaudio Takahasi int err; 5253de73115aSClaudio Takahasi 525440bef302SJohan Hedberg if (hcon->role != HCI_ROLE_MASTER) 5255de73115aSClaudio Takahasi return -EINVAL; 5256de73115aSClaudio Takahasi 5257de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5258de73115aSClaudio Takahasi return -EPROTO; 5259de73115aSClaudio Takahasi 5260de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5261de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5262de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5263de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5264de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5265de73115aSClaudio Takahasi 5266de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5267de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5268de73115aSClaudio Takahasi 5269de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 52702ce603ebSClaudio Takahasi 5271d4905f24SAndre Guedes err = hci_check_conn_params(min, max, latency, to_multiplier); 52722ce603ebSClaudio Takahasi if (err) 5273dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5274de73115aSClaudio Takahasi else 5275dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5276de73115aSClaudio Takahasi 5277de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5278de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5279de73115aSClaudio Takahasi 5280ffb5a827SAndre Guedes if (!err) { 5281f4869e2aSJohan Hedberg u8 store_hint; 5282ffb5a827SAndre Guedes 5283f4869e2aSJohan Hedberg store_hint = hci_le_conn_update(hcon, min, max, latency, 5284f4869e2aSJohan Hedberg to_multiplier); 5285f4869e2aSJohan Hedberg mgmt_new_conn_param(hcon->hdev, &hcon->dst, hcon->dst_type, 5286f4869e2aSJohan Hedberg store_hint, min, max, latency, 5287f4869e2aSJohan Hedberg to_multiplier); 5288f4869e2aSJohan Hedberg 5289ffb5a827SAndre Guedes } 52902ce603ebSClaudio Takahasi 5291de73115aSClaudio Takahasi return 0; 5292de73115aSClaudio Takahasi } 5293de73115aSClaudio Takahasi 5294f1496deeSJohan Hedberg static int l2cap_le_connect_rsp(struct l2cap_conn *conn, 5295f1496deeSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5296f1496deeSJohan Hedberg u8 *data) 5297f1496deeSJohan Hedberg { 5298f1496deeSJohan Hedberg struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data; 52993e64b7bdSJohan Hedberg struct hci_conn *hcon = conn->hcon; 5300f1496deeSJohan Hedberg u16 dcid, mtu, mps, credits, result; 5301f1496deeSJohan Hedberg struct l2cap_chan *chan; 53023e64b7bdSJohan Hedberg int err, sec_level; 5303f1496deeSJohan Hedberg 5304f1496deeSJohan Hedberg if (cmd_len < sizeof(*rsp)) 5305f1496deeSJohan Hedberg return -EPROTO; 5306f1496deeSJohan Hedberg 5307f1496deeSJohan Hedberg dcid = __le16_to_cpu(rsp->dcid); 5308f1496deeSJohan Hedberg mtu = __le16_to_cpu(rsp->mtu); 5309f1496deeSJohan Hedberg mps = __le16_to_cpu(rsp->mps); 5310f1496deeSJohan Hedberg credits = __le16_to_cpu(rsp->credits); 5311f1496deeSJohan Hedberg result = __le16_to_cpu(rsp->result); 5312f1496deeSJohan Hedberg 5313571f7390SMallikarjun Phulari if (result == L2CAP_CR_LE_SUCCESS && (mtu < 23 || mps < 23 || 531440624183SJohan Hedberg dcid < L2CAP_CID_DYN_START || 531540624183SJohan Hedberg dcid > L2CAP_CID_LE_DYN_END)) 5316f1496deeSJohan Hedberg return -EPROTO; 5317f1496deeSJohan Hedberg 5318f1496deeSJohan Hedberg BT_DBG("dcid 0x%4.4x mtu %u mps %u credits %u result 0x%2.2x", 5319f1496deeSJohan Hedberg dcid, mtu, mps, credits, result); 5320f1496deeSJohan Hedberg 5321f1496deeSJohan Hedberg mutex_lock(&conn->chan_lock); 5322f1496deeSJohan Hedberg 5323f1496deeSJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 5324f1496deeSJohan Hedberg if (!chan) { 5325f1496deeSJohan Hedberg err = -EBADSLT; 5326f1496deeSJohan Hedberg goto unlock; 5327f1496deeSJohan Hedberg } 5328f1496deeSJohan Hedberg 5329f1496deeSJohan Hedberg err = 0; 5330f1496deeSJohan Hedberg 5331f1496deeSJohan Hedberg l2cap_chan_lock(chan); 5332f1496deeSJohan Hedberg 5333f1496deeSJohan Hedberg switch (result) { 5334571f7390SMallikarjun Phulari case L2CAP_CR_LE_SUCCESS: 533540624183SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, dcid)) { 533640624183SJohan Hedberg err = -EBADSLT; 533740624183SJohan Hedberg break; 533840624183SJohan Hedberg } 533940624183SJohan Hedberg 5340f1496deeSJohan Hedberg chan->ident = 0; 5341f1496deeSJohan Hedberg chan->dcid = dcid; 5342f1496deeSJohan Hedberg chan->omtu = mtu; 5343f1496deeSJohan Hedberg chan->remote_mps = mps; 53440cd75f7eSJohan Hedberg chan->tx_credits = credits; 5345f1496deeSJohan Hedberg l2cap_chan_ready(chan); 5346f1496deeSJohan Hedberg break; 5347f1496deeSJohan Hedberg 5348571f7390SMallikarjun Phulari case L2CAP_CR_LE_AUTHENTICATION: 5349571f7390SMallikarjun Phulari case L2CAP_CR_LE_ENCRYPTION: 53503e64b7bdSJohan Hedberg /* If we already have MITM protection we can't do 53513e64b7bdSJohan Hedberg * anything. 53523e64b7bdSJohan Hedberg */ 53533e64b7bdSJohan Hedberg if (hcon->sec_level > BT_SECURITY_MEDIUM) { 53543e64b7bdSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 53553e64b7bdSJohan Hedberg break; 53563e64b7bdSJohan Hedberg } 53573e64b7bdSJohan Hedberg 53583e64b7bdSJohan Hedberg sec_level = hcon->sec_level + 1; 53593e64b7bdSJohan Hedberg if (chan->sec_level < sec_level) 53603e64b7bdSJohan Hedberg chan->sec_level = sec_level; 53613e64b7bdSJohan Hedberg 53623e64b7bdSJohan Hedberg /* We'll need to send a new Connect Request */ 53633e64b7bdSJohan Hedberg clear_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags); 53643e64b7bdSJohan Hedberg 53653e64b7bdSJohan Hedberg smp_conn_security(hcon, chan->sec_level); 53663e64b7bdSJohan Hedberg break; 53673e64b7bdSJohan Hedberg 5368f1496deeSJohan Hedberg default: 5369f1496deeSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 5370f1496deeSJohan Hedberg break; 5371f1496deeSJohan Hedberg } 5372f1496deeSJohan Hedberg 5373f1496deeSJohan Hedberg l2cap_chan_unlock(chan); 5374f1496deeSJohan Hedberg 5375f1496deeSJohan Hedberg unlock: 5376f1496deeSJohan Hedberg mutex_unlock(&conn->chan_lock); 5377f1496deeSJohan Hedberg 5378f1496deeSJohan Hedberg return err; 5379f1496deeSJohan Hedberg } 5380f1496deeSJohan Hedberg 53813300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 53822d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 53832d792818SGustavo Padovan u8 *data) 53843300d9a9SClaudio Takahasi { 53853300d9a9SClaudio Takahasi int err = 0; 53863300d9a9SClaudio Takahasi 53873300d9a9SClaudio Takahasi switch (cmd->code) { 53883300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5389cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 53903300d9a9SClaudio Takahasi break; 53913300d9a9SClaudio Takahasi 53923300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5393cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 53943300d9a9SClaudio Takahasi break; 53953300d9a9SClaudio Takahasi 53963300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5397f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 53989245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 53993300d9a9SClaudio Takahasi break; 54003300d9a9SClaudio Takahasi 54013300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 54023300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 54033300d9a9SClaudio Takahasi break; 54043300d9a9SClaudio Takahasi 54053300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 54069245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 54073300d9a9SClaudio Takahasi break; 54083300d9a9SClaudio Takahasi 54093300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5410cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 54113300d9a9SClaudio Takahasi break; 54123300d9a9SClaudio Takahasi 54133300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 54149245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 54153300d9a9SClaudio Takahasi break; 54163300d9a9SClaudio Takahasi 54173300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 54183300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 54193300d9a9SClaudio Takahasi break; 54203300d9a9SClaudio Takahasi 54213300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 54223300d9a9SClaudio Takahasi break; 54233300d9a9SClaudio Takahasi 54243300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5425cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 54263300d9a9SClaudio Takahasi break; 54273300d9a9SClaudio Takahasi 54283300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 54299245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 54303300d9a9SClaudio Takahasi break; 54313300d9a9SClaudio Takahasi 5432f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5433f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5434f94ff6ffSMat Martineau break; 5435f94ff6ffSMat Martineau 54368d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 54378d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 54388d5a04a1SMat Martineau break; 54398d5a04a1SMat Martineau 54408d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 54419245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 54428d5a04a1SMat Martineau break; 54438d5a04a1SMat Martineau 54448d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 54458d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 54468d5a04a1SMat Martineau break; 54478d5a04a1SMat Martineau 54488d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 54499245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 54508d5a04a1SMat Martineau break; 54518d5a04a1SMat Martineau 54523300d9a9SClaudio Takahasi default: 54533300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 54543300d9a9SClaudio Takahasi err = -EINVAL; 54553300d9a9SClaudio Takahasi break; 54563300d9a9SClaudio Takahasi } 54573300d9a9SClaudio Takahasi 54583300d9a9SClaudio Takahasi return err; 54593300d9a9SClaudio Takahasi } 54603300d9a9SClaudio Takahasi 546127e2d4c8SJohan Hedberg static int l2cap_le_connect_req(struct l2cap_conn *conn, 546227e2d4c8SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 546327e2d4c8SJohan Hedberg u8 *data) 546427e2d4c8SJohan Hedberg { 546527e2d4c8SJohan Hedberg struct l2cap_le_conn_req *req = (struct l2cap_le_conn_req *) data; 546627e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 546727e2d4c8SJohan Hedberg struct l2cap_chan *chan, *pchan; 54680cd75f7eSJohan Hedberg u16 dcid, scid, credits, mtu, mps; 546927e2d4c8SJohan Hedberg __le16 psm; 547027e2d4c8SJohan Hedberg u8 result; 547127e2d4c8SJohan Hedberg 547227e2d4c8SJohan Hedberg if (cmd_len != sizeof(*req)) 547327e2d4c8SJohan Hedberg return -EPROTO; 547427e2d4c8SJohan Hedberg 547527e2d4c8SJohan Hedberg scid = __le16_to_cpu(req->scid); 547627e2d4c8SJohan Hedberg mtu = __le16_to_cpu(req->mtu); 547727e2d4c8SJohan Hedberg mps = __le16_to_cpu(req->mps); 547827e2d4c8SJohan Hedberg psm = req->psm; 547927e2d4c8SJohan Hedberg dcid = 0; 54800cd75f7eSJohan Hedberg credits = 0; 548127e2d4c8SJohan Hedberg 548227e2d4c8SJohan Hedberg if (mtu < 23 || mps < 23) 548327e2d4c8SJohan Hedberg return -EPROTO; 548427e2d4c8SJohan Hedberg 548527e2d4c8SJohan Hedberg BT_DBG("psm 0x%2.2x scid 0x%4.4x mtu %u mps %u", __le16_to_cpu(psm), 548627e2d4c8SJohan Hedberg scid, mtu, mps); 548727e2d4c8SJohan Hedberg 548827e2d4c8SJohan Hedberg /* Check if we have socket listening on psm */ 548927e2d4c8SJohan Hedberg pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 549027e2d4c8SJohan Hedberg &conn->hcon->dst, LE_LINK); 549127e2d4c8SJohan Hedberg if (!pchan) { 5492571f7390SMallikarjun Phulari result = L2CAP_CR_LE_BAD_PSM; 549327e2d4c8SJohan Hedberg chan = NULL; 549427e2d4c8SJohan Hedberg goto response; 549527e2d4c8SJohan Hedberg } 549627e2d4c8SJohan Hedberg 549727e2d4c8SJohan Hedberg mutex_lock(&conn->chan_lock); 549827e2d4c8SJohan Hedberg l2cap_chan_lock(pchan); 549927e2d4c8SJohan Hedberg 550035dc6f83SJohan Hedberg if (!smp_sufficient_security(conn->hcon, pchan->sec_level, 550135dc6f83SJohan Hedberg SMP_ALLOW_STK)) { 5502571f7390SMallikarjun Phulari result = L2CAP_CR_LE_AUTHENTICATION; 550327e2d4c8SJohan Hedberg chan = NULL; 550427e2d4c8SJohan Hedberg goto response_unlock; 550527e2d4c8SJohan Hedberg } 550627e2d4c8SJohan Hedberg 55078a7889ccSJohan Hedberg /* Check for valid dynamic CID range */ 55088a7889ccSJohan Hedberg if (scid < L2CAP_CID_DYN_START || scid > L2CAP_CID_LE_DYN_END) { 5509571f7390SMallikarjun Phulari result = L2CAP_CR_LE_INVALID_SCID; 55108a7889ccSJohan Hedberg chan = NULL; 55118a7889ccSJohan Hedberg goto response_unlock; 55128a7889ccSJohan Hedberg } 55138a7889ccSJohan Hedberg 551427e2d4c8SJohan Hedberg /* Check if we already have channel with that dcid */ 551527e2d4c8SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, scid)) { 5516571f7390SMallikarjun Phulari result = L2CAP_CR_LE_SCID_IN_USE; 551727e2d4c8SJohan Hedberg chan = NULL; 551827e2d4c8SJohan Hedberg goto response_unlock; 551927e2d4c8SJohan Hedberg } 552027e2d4c8SJohan Hedberg 552127e2d4c8SJohan Hedberg chan = pchan->ops->new_connection(pchan); 552227e2d4c8SJohan Hedberg if (!chan) { 5523571f7390SMallikarjun Phulari result = L2CAP_CR_LE_NO_MEM; 552427e2d4c8SJohan Hedberg goto response_unlock; 552527e2d4c8SJohan Hedberg } 552627e2d4c8SJohan Hedberg 552727e2d4c8SJohan Hedberg bacpy(&chan->src, &conn->hcon->src); 552827e2d4c8SJohan Hedberg bacpy(&chan->dst, &conn->hcon->dst); 5529a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(conn->hcon); 5530a250e048SJohan Hedberg chan->dst_type = bdaddr_dst_type(conn->hcon); 553127e2d4c8SJohan Hedberg chan->psm = psm; 553227e2d4c8SJohan Hedberg chan->dcid = scid; 553327e2d4c8SJohan Hedberg chan->omtu = mtu; 553427e2d4c8SJohan Hedberg chan->remote_mps = mps; 553527e2d4c8SJohan Hedberg 553627e2d4c8SJohan Hedberg __l2cap_chan_add(conn, chan); 5537fe149310SLuiz Augusto von Dentz 5538ba8f5289SLuiz Augusto von Dentz l2cap_le_flowctl_init(chan, __le16_to_cpu(req->credits)); 5539fe149310SLuiz Augusto von Dentz 554027e2d4c8SJohan Hedberg dcid = chan->scid; 55410cd75f7eSJohan Hedberg credits = chan->rx_credits; 554227e2d4c8SJohan Hedberg 554327e2d4c8SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 554427e2d4c8SJohan Hedberg 554527e2d4c8SJohan Hedberg chan->ident = cmd->ident; 554627e2d4c8SJohan Hedberg 554727e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 554827e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_CONNECT2); 5549434714dcSJohan Hedberg /* The following result value is actually not defined 5550434714dcSJohan Hedberg * for LE CoC but we use it to let the function know 5551434714dcSJohan Hedberg * that it should bail out after doing its cleanup 5552434714dcSJohan Hedberg * instead of sending a response. 5553434714dcSJohan Hedberg */ 555427e2d4c8SJohan Hedberg result = L2CAP_CR_PEND; 555527e2d4c8SJohan Hedberg chan->ops->defer(chan); 555627e2d4c8SJohan Hedberg } else { 555727e2d4c8SJohan Hedberg l2cap_chan_ready(chan); 5558571f7390SMallikarjun Phulari result = L2CAP_CR_LE_SUCCESS; 555927e2d4c8SJohan Hedberg } 556027e2d4c8SJohan Hedberg 556127e2d4c8SJohan Hedberg response_unlock: 556227e2d4c8SJohan Hedberg l2cap_chan_unlock(pchan); 556327e2d4c8SJohan Hedberg mutex_unlock(&conn->chan_lock); 5564a24cce14SJohan Hedberg l2cap_chan_put(pchan); 556527e2d4c8SJohan Hedberg 556627e2d4c8SJohan Hedberg if (result == L2CAP_CR_PEND) 556727e2d4c8SJohan Hedberg return 0; 556827e2d4c8SJohan Hedberg 556927e2d4c8SJohan Hedberg response: 557027e2d4c8SJohan Hedberg if (chan) { 557127e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 55723916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 557327e2d4c8SJohan Hedberg } else { 557427e2d4c8SJohan Hedberg rsp.mtu = 0; 557527e2d4c8SJohan Hedberg rsp.mps = 0; 557627e2d4c8SJohan Hedberg } 557727e2d4c8SJohan Hedberg 557827e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(dcid); 55790cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(credits); 558027e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 558127e2d4c8SJohan Hedberg 558227e2d4c8SJohan Hedberg l2cap_send_cmd(conn, cmd->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), &rsp); 558327e2d4c8SJohan Hedberg 558427e2d4c8SJohan Hedberg return 0; 558527e2d4c8SJohan Hedberg } 558627e2d4c8SJohan Hedberg 5587fad5fc89SJohan Hedberg static inline int l2cap_le_credits(struct l2cap_conn *conn, 5588fad5fc89SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5589fad5fc89SJohan Hedberg u8 *data) 5590fad5fc89SJohan Hedberg { 5591fad5fc89SJohan Hedberg struct l2cap_le_credits *pkt; 5592fad5fc89SJohan Hedberg struct l2cap_chan *chan; 55930f1bfe4eSJohan Hedberg u16 cid, credits, max_credits; 5594fad5fc89SJohan Hedberg 5595fad5fc89SJohan Hedberg if (cmd_len != sizeof(*pkt)) 5596fad5fc89SJohan Hedberg return -EPROTO; 5597fad5fc89SJohan Hedberg 5598fad5fc89SJohan Hedberg pkt = (struct l2cap_le_credits *) data; 5599fad5fc89SJohan Hedberg cid = __le16_to_cpu(pkt->cid); 5600fad5fc89SJohan Hedberg credits = __le16_to_cpu(pkt->credits); 5601fad5fc89SJohan Hedberg 5602fad5fc89SJohan Hedberg BT_DBG("cid 0x%4.4x credits 0x%4.4x", cid, credits); 5603fad5fc89SJohan Hedberg 5604fad5fc89SJohan Hedberg chan = l2cap_get_chan_by_dcid(conn, cid); 5605fad5fc89SJohan Hedberg if (!chan) 5606fad5fc89SJohan Hedberg return -EBADSLT; 5607fad5fc89SJohan Hedberg 56080f1bfe4eSJohan Hedberg max_credits = LE_FLOWCTL_MAX_CREDITS - chan->tx_credits; 56090f1bfe4eSJohan Hedberg if (credits > max_credits) { 56100f1bfe4eSJohan Hedberg BT_ERR("LE credits overflow"); 56110f1bfe4eSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 5612ee93053dSMartin Townsend l2cap_chan_unlock(chan); 56130f1bfe4eSJohan Hedberg 56140f1bfe4eSJohan Hedberg /* Return 0 so that we don't trigger an unnecessary 56150f1bfe4eSJohan Hedberg * command reject packet. 56160f1bfe4eSJohan Hedberg */ 56170f1bfe4eSJohan Hedberg return 0; 56180f1bfe4eSJohan Hedberg } 56190f1bfe4eSJohan Hedberg 5620fad5fc89SJohan Hedberg chan->tx_credits += credits; 5621fad5fc89SJohan Hedberg 56228a505b7fSLuiz Augusto von Dentz /* Resume sending */ 56238a505b7fSLuiz Augusto von Dentz l2cap_le_flowctl_send(chan); 5624fad5fc89SJohan Hedberg 5625fad5fc89SJohan Hedberg if (chan->tx_credits) 5626fad5fc89SJohan Hedberg chan->ops->resume(chan); 5627fad5fc89SJohan Hedberg 5628fad5fc89SJohan Hedberg l2cap_chan_unlock(chan); 5629fad5fc89SJohan Hedberg 5630fad5fc89SJohan Hedberg return 0; 5631fad5fc89SJohan Hedberg } 5632fad5fc89SJohan Hedberg 563371fb4197SJohan Hedberg static inline int l2cap_le_command_rej(struct l2cap_conn *conn, 563471fb4197SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 563571fb4197SJohan Hedberg u8 *data) 563671fb4197SJohan Hedberg { 563771fb4197SJohan Hedberg struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 563871fb4197SJohan Hedberg struct l2cap_chan *chan; 563971fb4197SJohan Hedberg 564071fb4197SJohan Hedberg if (cmd_len < sizeof(*rej)) 564171fb4197SJohan Hedberg return -EPROTO; 564271fb4197SJohan Hedberg 564371fb4197SJohan Hedberg mutex_lock(&conn->chan_lock); 564471fb4197SJohan Hedberg 564571fb4197SJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 564671fb4197SJohan Hedberg if (!chan) 564771fb4197SJohan Hedberg goto done; 564871fb4197SJohan Hedberg 564971fb4197SJohan Hedberg l2cap_chan_lock(chan); 565071fb4197SJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 565171fb4197SJohan Hedberg l2cap_chan_unlock(chan); 565271fb4197SJohan Hedberg 565371fb4197SJohan Hedberg done: 565471fb4197SJohan Hedberg mutex_unlock(&conn->chan_lock); 565571fb4197SJohan Hedberg return 0; 565671fb4197SJohan Hedberg } 565771fb4197SJohan Hedberg 56583300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5659203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5660203e639eSJohan Hedberg u8 *data) 56613300d9a9SClaudio Takahasi { 5662b5ecba64SJohan Hedberg int err = 0; 5663b5ecba64SJohan Hedberg 56643300d9a9SClaudio Takahasi switch (cmd->code) { 56653300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 566671fb4197SJohan Hedberg l2cap_le_command_rej(conn, cmd, cmd_len, data); 5667b5ecba64SJohan Hedberg break; 56683300d9a9SClaudio Takahasi 56693300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5670b5ecba64SJohan Hedberg err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 5671b5ecba64SJohan Hedberg break; 56723300d9a9SClaudio Takahasi 56733300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 5674b5ecba64SJohan Hedberg break; 56753300d9a9SClaudio Takahasi 5676f1496deeSJohan Hedberg case L2CAP_LE_CONN_RSP: 5677f1496deeSJohan Hedberg l2cap_le_connect_rsp(conn, cmd, cmd_len, data); 5678b5ecba64SJohan Hedberg break; 5679f1496deeSJohan Hedberg 568027e2d4c8SJohan Hedberg case L2CAP_LE_CONN_REQ: 5681b5ecba64SJohan Hedberg err = l2cap_le_connect_req(conn, cmd, cmd_len, data); 5682b5ecba64SJohan Hedberg break; 568327e2d4c8SJohan Hedberg 5684fad5fc89SJohan Hedberg case L2CAP_LE_CREDITS: 5685fad5fc89SJohan Hedberg err = l2cap_le_credits(conn, cmd, cmd_len, data); 5686fad5fc89SJohan Hedberg break; 5687fad5fc89SJohan Hedberg 56883defe01aSJohan Hedberg case L2CAP_DISCONN_REQ: 5689b5ecba64SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 5690b5ecba64SJohan Hedberg break; 56913defe01aSJohan Hedberg 56923defe01aSJohan Hedberg case L2CAP_DISCONN_RSP: 56933defe01aSJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 5694b5ecba64SJohan Hedberg break; 56953defe01aSJohan Hedberg 56963300d9a9SClaudio Takahasi default: 56973300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 5698b5ecba64SJohan Hedberg err = -EINVAL; 5699b5ecba64SJohan Hedberg break; 57003300d9a9SClaudio Takahasi } 5701b5ecba64SJohan Hedberg 5702b5ecba64SJohan Hedberg return err; 57033300d9a9SClaudio Takahasi } 57043300d9a9SClaudio Takahasi 5705c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5706c5623556SJohan Hedberg struct sk_buff *skb) 5707c5623556SJohan Hedberg { 570869c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 57094f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 57104f3e219dSMarcel Holtmann u16 len; 5711c5623556SJohan Hedberg int err; 5712c5623556SJohan Hedberg 571369c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 57143b166295SMarcel Holtmann goto drop; 571569c4e4e8SJohan Hedberg 57164f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 57174f3e219dSMarcel Holtmann goto drop; 5718c5623556SJohan Hedberg 57194f3e219dSMarcel Holtmann cmd = (void *) skb->data; 57204f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5721c5623556SJohan Hedberg 57224f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5723c5623556SJohan Hedberg 57244f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 57254f3e219dSMarcel Holtmann 57264f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5727c5623556SJohan Hedberg BT_DBG("corrupted command"); 57284f3e219dSMarcel Holtmann goto drop; 5729c5623556SJohan Hedberg } 5730c5623556SJohan Hedberg 5731203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5732c5623556SJohan Hedberg if (err) { 5733c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5734c5623556SJohan Hedberg 5735c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5736c5623556SJohan Hedberg 5737dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 57384f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5739c5623556SJohan Hedberg sizeof(rej), &rej); 5740c5623556SJohan Hedberg } 5741c5623556SJohan Hedberg 57423b166295SMarcel Holtmann drop: 5743c5623556SJohan Hedberg kfree_skb(skb); 5744c5623556SJohan Hedberg } 5745c5623556SJohan Hedberg 57463300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 57473300d9a9SClaudio Takahasi struct sk_buff *skb) 57480a708f8fSGustavo F. Padovan { 574969c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 57500a708f8fSGustavo F. Padovan u8 *data = skb->data; 57510a708f8fSGustavo F. Padovan int len = skb->len; 57520a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 57533300d9a9SClaudio Takahasi int err; 57540a708f8fSGustavo F. Padovan 57550a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 57560a708f8fSGustavo F. Padovan 575769c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 57583b166295SMarcel Holtmann goto drop; 575969c4e4e8SJohan Hedberg 57600a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 57610a708f8fSGustavo F. Padovan u16 cmd_len; 57620a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 57630a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 57640a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 57650a708f8fSGustavo F. Padovan 57660a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 57670a708f8fSGustavo F. Padovan 57682d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 57692d792818SGustavo Padovan cmd.ident); 57700a708f8fSGustavo F. Padovan 57710a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 57720a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 57730a708f8fSGustavo F. Padovan break; 57740a708f8fSGustavo F. Padovan } 57750a708f8fSGustavo F. Padovan 57763300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 57770a708f8fSGustavo F. Padovan if (err) { 5778e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 57792c6d1a2eSGustavo F. Padovan 57802c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 57810a708f8fSGustavo F. Padovan 5782dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 57832d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 57842d792818SGustavo Padovan sizeof(rej), &rej); 57850a708f8fSGustavo F. Padovan } 57860a708f8fSGustavo F. Padovan 57870a708f8fSGustavo F. Padovan data += cmd_len; 57880a708f8fSGustavo F. Padovan len -= cmd_len; 57890a708f8fSGustavo F. Padovan } 57900a708f8fSGustavo F. Padovan 57913b166295SMarcel Holtmann drop: 57920a708f8fSGustavo F. Padovan kfree_skb(skb); 57930a708f8fSGustavo F. Padovan } 57940a708f8fSGustavo F. Padovan 579547d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 57960a708f8fSGustavo F. Padovan { 57970a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5798e4ca6d98SAndrei Emeltchenko int hdr_size; 5799e4ca6d98SAndrei Emeltchenko 5800e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5801e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5802e4ca6d98SAndrei Emeltchenko else 5803e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 58040a708f8fSGustavo F. Padovan 580547d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 580603a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 58070a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 58080a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 58090a708f8fSGustavo F. Padovan 58100a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 58110a708f8fSGustavo F. Padovan return -EBADMSG; 58120a708f8fSGustavo F. Padovan } 58130a708f8fSGustavo F. Padovan return 0; 58140a708f8fSGustavo F. Padovan } 58150a708f8fSGustavo F. Padovan 58166ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 58170a708f8fSGustavo F. Padovan { 5818e31f7633SMat Martineau struct l2cap_ctrl control; 58190a708f8fSGustavo F. Padovan 5820e31f7633SMat Martineau BT_DBG("chan %p", chan); 58210a708f8fSGustavo F. Padovan 5822e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5823e31f7633SMat Martineau control.sframe = 1; 5824e31f7633SMat Martineau control.final = 1; 5825e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5826e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 58270a708f8fSGustavo F. Padovan 5828e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5829e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5830e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 58310a708f8fSGustavo F. Padovan } 58320a708f8fSGustavo F. Padovan 5833e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5834e31f7633SMat Martineau chan->unacked_frames > 0) 5835e31f7633SMat Martineau __set_retrans_timer(chan); 58360a708f8fSGustavo F. Padovan 5837e31f7633SMat Martineau /* Send pending iframes */ 5838525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 58390a708f8fSGustavo F. Padovan 5840e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5841e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5842e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5843e31f7633SMat Martineau * send it now. 5844e31f7633SMat Martineau */ 5845e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5846e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 58470a708f8fSGustavo F. Padovan } 58480a708f8fSGustavo F. Padovan } 58490a708f8fSGustavo F. Padovan 58502d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 58512d792818SGustavo Padovan struct sk_buff **last_frag) 58520a708f8fSGustavo F. Padovan { 585384084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 585484084a31SMat Martineau * skb->data_len reflects only data in fragments 585584084a31SMat Martineau */ 585684084a31SMat Martineau if (!skb_has_frag_list(skb)) 585784084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 585884084a31SMat Martineau 585984084a31SMat Martineau new_frag->next = NULL; 586084084a31SMat Martineau 586184084a31SMat Martineau (*last_frag)->next = new_frag; 586284084a31SMat Martineau *last_frag = new_frag; 586384084a31SMat Martineau 586484084a31SMat Martineau skb->len += new_frag->len; 586584084a31SMat Martineau skb->data_len += new_frag->len; 586684084a31SMat Martineau skb->truesize += new_frag->truesize; 586784084a31SMat Martineau } 586884084a31SMat Martineau 58694b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 58704b51dae9SMat Martineau struct l2cap_ctrl *control) 587184084a31SMat Martineau { 587284084a31SMat Martineau int err = -EINVAL; 58730a708f8fSGustavo F. Padovan 58744b51dae9SMat Martineau switch (control->sar) { 58757e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 587684084a31SMat Martineau if (chan->sdu) 587784084a31SMat Martineau break; 58780a708f8fSGustavo F. Padovan 587980b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 588084084a31SMat Martineau break; 58810a708f8fSGustavo F. Padovan 58827e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 588384084a31SMat Martineau if (chan->sdu) 588484084a31SMat Martineau break; 58850a708f8fSGustavo F. Padovan 5886dbb50887SDaniel Borkmann if (!pskb_may_pull(skb, L2CAP_SDULEN_SIZE)) 5887dbb50887SDaniel Borkmann break; 5888dbb50887SDaniel Borkmann 58896f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 589003a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 58910a708f8fSGustavo F. Padovan 589284084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 589384084a31SMat Martineau err = -EMSGSIZE; 589484084a31SMat Martineau break; 589584084a31SMat Martineau } 58960a708f8fSGustavo F. Padovan 589784084a31SMat Martineau if (skb->len >= chan->sdu_len) 589884084a31SMat Martineau break; 589984084a31SMat Martineau 590084084a31SMat Martineau chan->sdu = skb; 590184084a31SMat Martineau chan->sdu_last_frag = skb; 590284084a31SMat Martineau 590384084a31SMat Martineau skb = NULL; 590484084a31SMat Martineau err = 0; 59050a708f8fSGustavo F. Padovan break; 59060a708f8fSGustavo F. Padovan 59077e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 59086f61fd47SGustavo F. Padovan if (!chan->sdu) 590984084a31SMat Martineau break; 59100a708f8fSGustavo F. Padovan 591184084a31SMat Martineau append_skb_frag(chan->sdu, skb, 591284084a31SMat Martineau &chan->sdu_last_frag); 591384084a31SMat Martineau skb = NULL; 59140a708f8fSGustavo F. Padovan 591584084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 591684084a31SMat Martineau break; 59170a708f8fSGustavo F. Padovan 591884084a31SMat Martineau err = 0; 59190a708f8fSGustavo F. Padovan break; 59200a708f8fSGustavo F. Padovan 59217e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 59226f61fd47SGustavo F. Padovan if (!chan->sdu) 592384084a31SMat Martineau break; 59240a708f8fSGustavo F. Padovan 592584084a31SMat Martineau append_skb_frag(chan->sdu, skb, 592684084a31SMat Martineau &chan->sdu_last_frag); 592784084a31SMat Martineau skb = NULL; 59280a708f8fSGustavo F. Padovan 592984084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 593084084a31SMat Martineau break; 59310a708f8fSGustavo F. Padovan 593280b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 59330a708f8fSGustavo F. Padovan 593484084a31SMat Martineau if (!err) { 593584084a31SMat Martineau /* Reassembly complete */ 593684084a31SMat Martineau chan->sdu = NULL; 593784084a31SMat Martineau chan->sdu_last_frag = NULL; 593884084a31SMat Martineau chan->sdu_len = 0; 59390a708f8fSGustavo F. Padovan } 59400a708f8fSGustavo F. Padovan break; 59410a708f8fSGustavo F. Padovan } 59420a708f8fSGustavo F. Padovan 594384084a31SMat Martineau if (err) { 59440a708f8fSGustavo F. Padovan kfree_skb(skb); 59456f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 59466f61fd47SGustavo F. Padovan chan->sdu = NULL; 594784084a31SMat Martineau chan->sdu_last_frag = NULL; 594884084a31SMat Martineau chan->sdu_len = 0; 594984084a31SMat Martineau } 59500a708f8fSGustavo F. Padovan 595184084a31SMat Martineau return err; 59520a708f8fSGustavo F. Padovan } 59530a708f8fSGustavo F. Padovan 595432b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 595532b32735SMat Martineau { 595632b32735SMat Martineau /* Placeholder */ 595732b32735SMat Martineau return 0; 595832b32735SMat Martineau } 595932b32735SMat Martineau 5960e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 59610a708f8fSGustavo F. Padovan { 596261aa4f5bSMat Martineau u8 event; 596361aa4f5bSMat Martineau 596461aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 596561aa4f5bSMat Martineau return; 596661aa4f5bSMat Martineau 596761aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5968401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 59690a708f8fSGustavo F. Padovan } 59700a708f8fSGustavo F. Padovan 5971d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5972d2a7ac5dSMat Martineau { 597363838725SMat Martineau int err = 0; 597463838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 597563838725SMat Martineau * until a gap is encountered. 597663838725SMat Martineau */ 597763838725SMat Martineau 597863838725SMat Martineau BT_DBG("chan %p", chan); 597963838725SMat Martineau 598063838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 598163838725SMat Martineau struct sk_buff *skb; 598263838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 598363838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 598463838725SMat Martineau 598563838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 598663838725SMat Martineau 598763838725SMat Martineau if (!skb) 598863838725SMat Martineau break; 598963838725SMat Martineau 599063838725SMat Martineau skb_unlink(skb, &chan->srej_q); 599163838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 5992a4368ff3SJohan Hedberg err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->l2cap); 599363838725SMat Martineau if (err) 599463838725SMat Martineau break; 599563838725SMat Martineau } 599663838725SMat Martineau 599763838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 599863838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 599963838725SMat Martineau l2cap_send_ack(chan); 600063838725SMat Martineau } 600163838725SMat Martineau 600263838725SMat Martineau return err; 6003d2a7ac5dSMat Martineau } 6004d2a7ac5dSMat Martineau 6005d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 6006d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 6007d2a7ac5dSMat Martineau { 6008f80842a8SMat Martineau struct sk_buff *skb; 6009f80842a8SMat Martineau 6010f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 6011f80842a8SMat Martineau 6012f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 6013f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 60145e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6015f80842a8SMat Martineau return; 6016f80842a8SMat Martineau } 6017f80842a8SMat Martineau 6018f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 6019f80842a8SMat Martineau 6020f80842a8SMat Martineau if (skb == NULL) { 6021f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 6022f80842a8SMat Martineau control->reqseq); 6023f80842a8SMat Martineau return; 6024f80842a8SMat Martineau } 6025f80842a8SMat Martineau 6026a4368ff3SJohan Hedberg if (chan->max_tx != 0 && bt_cb(skb)->l2cap.retries >= chan->max_tx) { 6027f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 60285e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6029f80842a8SMat Martineau return; 6030f80842a8SMat Martineau } 6031f80842a8SMat Martineau 6032f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6033f80842a8SMat Martineau 6034f80842a8SMat Martineau if (control->poll) { 6035f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 6036f80842a8SMat Martineau 6037f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6038f80842a8SMat Martineau l2cap_retransmit(chan, control); 6039f80842a8SMat Martineau l2cap_ertm_send(chan); 6040f80842a8SMat Martineau 6041f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 6042f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 6043f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 6044f80842a8SMat Martineau } 6045f80842a8SMat Martineau } else { 6046f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 6047f80842a8SMat Martineau 6048f80842a8SMat Martineau if (control->final) { 6049f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 6050f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 6051f80842a8SMat Martineau &chan->conn_state)) 6052f80842a8SMat Martineau l2cap_retransmit(chan, control); 6053f80842a8SMat Martineau } else { 6054f80842a8SMat Martineau l2cap_retransmit(chan, control); 6055f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 6056f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 6057f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 6058f80842a8SMat Martineau } 6059f80842a8SMat Martineau } 6060f80842a8SMat Martineau } 6061d2a7ac5dSMat Martineau } 6062d2a7ac5dSMat Martineau 6063d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 6064d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 6065d2a7ac5dSMat Martineau { 6066fcd289dfSMat Martineau struct sk_buff *skb; 6067fcd289dfSMat Martineau 6068fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 6069fcd289dfSMat Martineau 6070fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 6071fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 60725e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6073fcd289dfSMat Martineau return; 6074fcd289dfSMat Martineau } 6075fcd289dfSMat Martineau 6076fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 6077fcd289dfSMat Martineau 6078fcd289dfSMat Martineau if (chan->max_tx && skb && 6079a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.retries >= chan->max_tx) { 6080fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 60815e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6082fcd289dfSMat Martineau return; 6083fcd289dfSMat Martineau } 6084fcd289dfSMat Martineau 6085fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6086fcd289dfSMat Martineau 6087fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 6088fcd289dfSMat Martineau 6089fcd289dfSMat Martineau if (control->final) { 6090fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 6091fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6092fcd289dfSMat Martineau } else { 6093fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6094fcd289dfSMat Martineau l2cap_ertm_send(chan); 6095fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 6096fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 6097fcd289dfSMat Martineau } 6098d2a7ac5dSMat Martineau } 6099d2a7ac5dSMat Martineau 61004b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 61014b51dae9SMat Martineau { 61024b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 61034b51dae9SMat Martineau 61044b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 61054b51dae9SMat Martineau chan->expected_tx_seq); 61064b51dae9SMat Martineau 61074b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 61084b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 61094b51dae9SMat Martineau chan->tx_win) { 61104b51dae9SMat Martineau /* See notes below regarding "double poll" and 61114b51dae9SMat Martineau * invalid packets. 61124b51dae9SMat Martineau */ 61134b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 61144b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 61154b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 61164b51dae9SMat Martineau } else { 61174b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 61184b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 61194b51dae9SMat Martineau } 61204b51dae9SMat Martineau } 61214b51dae9SMat Martineau 61224b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 61234b51dae9SMat Martineau BT_DBG("Expected SREJ"); 61244b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 61254b51dae9SMat Martineau } 61264b51dae9SMat Martineau 61274b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 61284b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 61294b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 61304b51dae9SMat Martineau } 61314b51dae9SMat Martineau 61324b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 61334b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 61344b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 61354b51dae9SMat Martineau } 61364b51dae9SMat Martineau } 61374b51dae9SMat Martineau 61384b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 61394b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 61404b51dae9SMat Martineau chan->tx_win) { 61414b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 61424b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 61434b51dae9SMat Martineau } else { 61444b51dae9SMat Martineau BT_DBG("Expected"); 61454b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 61464b51dae9SMat Martineau } 61474b51dae9SMat Martineau } 61484b51dae9SMat Martineau 61494b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 61502d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 61514b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 61524b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 61534b51dae9SMat Martineau } 61544b51dae9SMat Martineau 61554b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 61564b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 61574b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 61584b51dae9SMat Martineau * the remote stack receives and processes both polls, 61594b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 61604b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 61614b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 61624b51dae9SMat Martineau * request. 61634b51dae9SMat Martineau * 61644b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 61654b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 61664b51dae9SMat Martineau * invalid frames to be safely ignored. 61674b51dae9SMat Martineau * 61684b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 61694b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 61704b51dae9SMat Martineau * causes a disconnect. 61714b51dae9SMat Martineau */ 61724b51dae9SMat Martineau 61734b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 61744b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 61754b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 61764b51dae9SMat Martineau } else { 61774b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 61784b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 61794b51dae9SMat Martineau } 61804b51dae9SMat Martineau } else { 61814b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 61824b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 61834b51dae9SMat Martineau } 61844b51dae9SMat Martineau } 61854b51dae9SMat Martineau 6186d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 6187d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6188d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6189d2a7ac5dSMat Martineau { 6190d2a7ac5dSMat Martineau int err = 0; 6191941247f9SPeter Senna Tschudin bool skb_in_use = false; 6192d2a7ac5dSMat Martineau 6193d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6194d2a7ac5dSMat Martineau event); 6195d2a7ac5dSMat Martineau 6196d2a7ac5dSMat Martineau switch (event) { 6197d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6198d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 6199d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6200d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6201d2a7ac5dSMat Martineau 6202d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6203d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 6204d2a7ac5dSMat Martineau control->txseq); 6205d2a7ac5dSMat Martineau break; 6206d2a7ac5dSMat Martineau } 6207d2a7ac5dSMat Martineau 6208d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 6209d2a7ac5dSMat Martineau control->txseq); 6210d2a7ac5dSMat Martineau 6211d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 6212941247f9SPeter Senna Tschudin skb_in_use = true; 6213d2a7ac5dSMat Martineau 6214d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 6215d2a7ac5dSMat Martineau if (err) 6216d2a7ac5dSMat Martineau break; 6217d2a7ac5dSMat Martineau 6218d2a7ac5dSMat Martineau if (control->final) { 6219d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6220d2a7ac5dSMat Martineau &chan->conn_state)) { 6221d2a7ac5dSMat Martineau control->final = 0; 6222d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6223d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6224d2a7ac5dSMat Martineau } 6225d2a7ac5dSMat Martineau } 6226d2a7ac5dSMat Martineau 6227d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 6228d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6229d2a7ac5dSMat Martineau break; 6230d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6231d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6232d2a7ac5dSMat Martineau 6233d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 6234d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 6235d2a7ac5dSMat Martineau * when local busy is exited. 6236d2a7ac5dSMat Martineau */ 6237d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6238d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 6239d2a7ac5dSMat Martineau control->txseq); 6240d2a7ac5dSMat Martineau break; 6241d2a7ac5dSMat Martineau } 6242d2a7ac5dSMat Martineau 6243d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 6244d2a7ac5dSMat Martineau * must be sent for each missing frame. The 6245d2a7ac5dSMat Martineau * current frame is stored for later use. 6246d2a7ac5dSMat Martineau */ 6247d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6248941247f9SPeter Senna Tschudin skb_in_use = true; 6249d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6250d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6251d2a7ac5dSMat Martineau 6252d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 6253d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 6254d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6255d2a7ac5dSMat Martineau 6256d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 6257d2a7ac5dSMat Martineau break; 6258d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6259d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6260d2a7ac5dSMat Martineau break; 6261d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6262d2a7ac5dSMat Martineau break; 6263d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6264d2a7ac5dSMat Martineau default: 62655e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6266d2a7ac5dSMat Martineau break; 6267d2a7ac5dSMat Martineau } 6268d2a7ac5dSMat Martineau break; 6269d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6270d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6271d2a7ac5dSMat Martineau if (control->final) { 6272d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6273d2a7ac5dSMat Martineau 6274e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 6275e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 6276d2a7ac5dSMat Martineau control->final = 0; 6277d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6278d2a7ac5dSMat Martineau } 6279d2a7ac5dSMat Martineau 6280d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6281d2a7ac5dSMat Martineau } else if (control->poll) { 6282d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 6283d2a7ac5dSMat Martineau } else { 6284d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6285d2a7ac5dSMat Martineau &chan->conn_state) && 6286d2a7ac5dSMat Martineau chan->unacked_frames) 6287d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6288d2a7ac5dSMat Martineau 6289d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6290d2a7ac5dSMat Martineau } 6291d2a7ac5dSMat Martineau break; 6292d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6293d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6294d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6295d2a7ac5dSMat Martineau if (control && control->poll) { 6296d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6297d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 6298d2a7ac5dSMat Martineau } 6299d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 6300d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 6301d2a7ac5dSMat Martineau break; 6302d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6303d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6304d2a7ac5dSMat Martineau break; 6305d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6306d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6307d2a7ac5dSMat Martineau break; 6308d2a7ac5dSMat Martineau default: 6309d2a7ac5dSMat Martineau break; 6310d2a7ac5dSMat Martineau } 6311d2a7ac5dSMat Martineau 6312d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6313d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6314d2a7ac5dSMat Martineau kfree_skb(skb); 6315d2a7ac5dSMat Martineau } 6316d2a7ac5dSMat Martineau 6317d2a7ac5dSMat Martineau return err; 6318d2a7ac5dSMat Martineau } 6319d2a7ac5dSMat Martineau 6320d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 6321d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6322d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6323d2a7ac5dSMat Martineau { 6324d2a7ac5dSMat Martineau int err = 0; 6325d2a7ac5dSMat Martineau u16 txseq = control->txseq; 6326941247f9SPeter Senna Tschudin bool skb_in_use = false; 6327d2a7ac5dSMat Martineau 6328d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6329d2a7ac5dSMat Martineau event); 6330d2a7ac5dSMat Martineau 6331d2a7ac5dSMat Martineau switch (event) { 6332d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6333d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 6334d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6335d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 6336d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6337d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6338941247f9SPeter Senna Tschudin skb_in_use = true; 6339d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6340d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6341d2a7ac5dSMat Martineau 6342d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 6343d2a7ac5dSMat Martineau break; 6344d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 6345d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 6346d2a7ac5dSMat Martineau 6347d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6348d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6349941247f9SPeter Senna Tschudin skb_in_use = true; 6350d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6351d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6352d2a7ac5dSMat Martineau 6353d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 6354d2a7ac5dSMat Martineau if (err) 6355d2a7ac5dSMat Martineau break; 6356d2a7ac5dSMat Martineau 6357d2a7ac5dSMat Martineau break; 6358d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6359d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 6360d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 6361d2a7ac5dSMat Martineau * the missing frames. 6362d2a7ac5dSMat Martineau */ 6363d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6364941247f9SPeter Senna Tschudin skb_in_use = true; 6365d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6366d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6367d2a7ac5dSMat Martineau 6368d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6369d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6370d2a7ac5dSMat Martineau break; 6371d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 6372d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 6373d2a7ac5dSMat Martineau * some expected retransmitted frames are 6374d2a7ac5dSMat Martineau * missing. Request retransmission of missing 6375d2a7ac5dSMat Martineau * SREJ'd frames. 6376d2a7ac5dSMat Martineau */ 6377d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6378941247f9SPeter Senna Tschudin skb_in_use = true; 6379d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6380d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6381d2a7ac5dSMat Martineau 6382d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6383d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 6384d2a7ac5dSMat Martineau break; 6385d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 6386d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 6387d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6388d2a7ac5dSMat Martineau break; 6389d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6390d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6391d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6392d2a7ac5dSMat Martineau */ 6393d2a7ac5dSMat Martineau break; 6394d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6395d2a7ac5dSMat Martineau break; 6396d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6397d2a7ac5dSMat Martineau default: 63985e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6399d2a7ac5dSMat Martineau break; 6400d2a7ac5dSMat Martineau } 6401d2a7ac5dSMat Martineau break; 6402d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6403d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6404d2a7ac5dSMat Martineau if (control->final) { 6405d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6406d2a7ac5dSMat Martineau 6407d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6408d2a7ac5dSMat Martineau &chan->conn_state)) { 6409d2a7ac5dSMat Martineau control->final = 0; 6410d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6411d2a7ac5dSMat Martineau } 6412d2a7ac5dSMat Martineau 6413d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6414d2a7ac5dSMat Martineau } else if (control->poll) { 6415d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6416d2a7ac5dSMat Martineau &chan->conn_state) && 6417d2a7ac5dSMat Martineau chan->unacked_frames) { 6418d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6419d2a7ac5dSMat Martineau } 6420d2a7ac5dSMat Martineau 6421d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6422d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6423d2a7ac5dSMat Martineau } else { 6424d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6425d2a7ac5dSMat Martineau &chan->conn_state) && 6426d2a7ac5dSMat Martineau chan->unacked_frames) 6427d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6428d2a7ac5dSMat Martineau 6429d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6430d2a7ac5dSMat Martineau } 6431d2a7ac5dSMat Martineau break; 6432d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6433d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6434d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6435d2a7ac5dSMat Martineau if (control->poll) { 6436d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6437d2a7ac5dSMat Martineau } else { 6438d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6439d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6440d2a7ac5dSMat Martineau rr_control.sframe = 1; 6441d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6442d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6443d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6444d2a7ac5dSMat Martineau } 6445d2a7ac5dSMat Martineau 6446d2a7ac5dSMat Martineau break; 6447d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6448d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6449d2a7ac5dSMat Martineau break; 6450d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6451d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6452d2a7ac5dSMat Martineau break; 6453d2a7ac5dSMat Martineau } 6454d2a7ac5dSMat Martineau 6455d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6456d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6457d2a7ac5dSMat Martineau kfree_skb(skb); 6458d2a7ac5dSMat Martineau } 6459d2a7ac5dSMat Martineau 6460d2a7ac5dSMat Martineau return err; 6461d2a7ac5dSMat Martineau } 6462d2a7ac5dSMat Martineau 646332b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 646432b32735SMat Martineau { 646532b32735SMat Martineau BT_DBG("chan %p", chan); 646632b32735SMat Martineau 646732b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 646832b32735SMat Martineau 646932b32735SMat Martineau if (chan->hs_hcon) 647032b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 647132b32735SMat Martineau else 647232b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 647332b32735SMat Martineau 647432b32735SMat Martineau return l2cap_resegment(chan); 647532b32735SMat Martineau } 647632b32735SMat Martineau 647732b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 647832b32735SMat Martineau struct l2cap_ctrl *control, 647932b32735SMat Martineau struct sk_buff *skb, u8 event) 648032b32735SMat Martineau { 648132b32735SMat Martineau int err; 648232b32735SMat Martineau 648332b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 648432b32735SMat Martineau event); 648532b32735SMat Martineau 648632b32735SMat Martineau if (!control->poll) 648732b32735SMat Martineau return -EPROTO; 648832b32735SMat Martineau 648932b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 649032b32735SMat Martineau 649132b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 649232b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 649332b32735SMat Martineau else 649432b32735SMat Martineau chan->tx_send_head = NULL; 649532b32735SMat Martineau 649632b32735SMat Martineau /* Rewind next_tx_seq to the point expected 649732b32735SMat Martineau * by the receiver. 649832b32735SMat Martineau */ 649932b32735SMat Martineau chan->next_tx_seq = control->reqseq; 650032b32735SMat Martineau chan->unacked_frames = 0; 650132b32735SMat Martineau 650232b32735SMat Martineau err = l2cap_finish_move(chan); 650332b32735SMat Martineau if (err) 650432b32735SMat Martineau return err; 650532b32735SMat Martineau 650632b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 650732b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 650832b32735SMat Martineau 650932b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 651032b32735SMat Martineau return -EPROTO; 651132b32735SMat Martineau 651232b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 651332b32735SMat Martineau } 651432b32735SMat Martineau 651532b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 651632b32735SMat Martineau struct l2cap_ctrl *control, 651732b32735SMat Martineau struct sk_buff *skb, u8 event) 651832b32735SMat Martineau { 651932b32735SMat Martineau int err; 652032b32735SMat Martineau 652132b32735SMat Martineau if (!control->final) 652232b32735SMat Martineau return -EPROTO; 652332b32735SMat Martineau 652432b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 652532b32735SMat Martineau 652632b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 652732b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 652832b32735SMat Martineau 652932b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 653032b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 653132b32735SMat Martineau else 653232b32735SMat Martineau chan->tx_send_head = NULL; 653332b32735SMat Martineau 653432b32735SMat Martineau /* Rewind next_tx_seq to the point expected 653532b32735SMat Martineau * by the receiver. 653632b32735SMat Martineau */ 653732b32735SMat Martineau chan->next_tx_seq = control->reqseq; 653832b32735SMat Martineau chan->unacked_frames = 0; 653932b32735SMat Martineau 654032b32735SMat Martineau if (chan->hs_hcon) 654132b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 654232b32735SMat Martineau else 654332b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 654432b32735SMat Martineau 654532b32735SMat Martineau err = l2cap_resegment(chan); 654632b32735SMat Martineau 654732b32735SMat Martineau if (!err) 654832b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 654932b32735SMat Martineau 655032b32735SMat Martineau return err; 655132b32735SMat Martineau } 655232b32735SMat Martineau 6553d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6554d2a7ac5dSMat Martineau { 6555d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6556d2a7ac5dSMat Martineau u16 unacked; 6557d2a7ac5dSMat Martineau 6558d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6559d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6560d2a7ac5dSMat Martineau } 6561d2a7ac5dSMat Martineau 6562cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6563cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 65640a708f8fSGustavo F. Padovan { 6565d2a7ac5dSMat Martineau int err = 0; 6566d2a7ac5dSMat Martineau 6567d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6568d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6569d2a7ac5dSMat Martineau 6570d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6571d2a7ac5dSMat Martineau switch (chan->rx_state) { 6572d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6573d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6574d2a7ac5dSMat Martineau break; 6575d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6576d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6577d2a7ac5dSMat Martineau event); 6578d2a7ac5dSMat Martineau break; 657932b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 658032b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 658132b32735SMat Martineau break; 658232b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 658332b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 658432b32735SMat Martineau break; 6585d2a7ac5dSMat Martineau default: 6586d2a7ac5dSMat Martineau /* shut it down */ 6587d2a7ac5dSMat Martineau break; 6588d2a7ac5dSMat Martineau } 6589d2a7ac5dSMat Martineau } else { 6590d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6591d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6592d2a7ac5dSMat Martineau chan->expected_ack_seq); 65935e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6594d2a7ac5dSMat Martineau } 6595d2a7ac5dSMat Martineau 6596d2a7ac5dSMat Martineau return err; 6597cec8ab6eSMat Martineau } 6598cec8ab6eSMat Martineau 6599cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6600cec8ab6eSMat Martineau struct sk_buff *skb) 6601cec8ab6eSMat Martineau { 66024b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 66034b51dae9SMat Martineau chan->rx_state); 66044b51dae9SMat Martineau 66054b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 66064b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 66074b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 66084b51dae9SMat Martineau 66094b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 66104b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 66114b51dae9SMat Martineau 66124b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 66134b51dae9SMat Martineau 66144b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 66154b51dae9SMat Martineau } else { 66164b51dae9SMat Martineau if (chan->sdu) { 66174b51dae9SMat Martineau kfree_skb(chan->sdu); 66184b51dae9SMat Martineau chan->sdu = NULL; 66194b51dae9SMat Martineau } 66204b51dae9SMat Martineau chan->sdu_last_frag = NULL; 66214b51dae9SMat Martineau chan->sdu_len = 0; 66224b51dae9SMat Martineau 66234b51dae9SMat Martineau if (skb) { 66244b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 66254b51dae9SMat Martineau kfree_skb(skb); 66264b51dae9SMat Martineau } 66274b51dae9SMat Martineau } 66284b51dae9SMat Martineau 66294b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 66304b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 66314b51dae9SMat Martineau 66329a544210SPrasanna Karthik return 0; 6633cec8ab6eSMat Martineau } 6634cec8ab6eSMat Martineau 6635cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6636cec8ab6eSMat Martineau { 6637a4368ff3SJohan Hedberg struct l2cap_ctrl *control = &bt_cb(skb)->l2cap; 6638cec8ab6eSMat Martineau u16 len; 6639cec8ab6eSMat Martineau u8 event; 66400a708f8fSGustavo F. Padovan 6641b76bbd66SMat Martineau __unpack_control(chan, skb); 6642b76bbd66SMat Martineau 66430a708f8fSGustavo F. Padovan len = skb->len; 66440a708f8fSGustavo F. Padovan 66450a708f8fSGustavo F. Padovan /* 66460a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 66470a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6648cec8ab6eSMat Martineau * procedures and ask for retransmission. 66490a708f8fSGustavo F. Padovan */ 665047d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 66510a708f8fSGustavo F. Padovan goto drop; 66520a708f8fSGustavo F. Padovan 6653cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 665403a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 66550a708f8fSGustavo F. Padovan 665647d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 665703a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 66580a708f8fSGustavo F. Padovan 665947d1ec61SGustavo F. Padovan if (len > chan->mps) { 66605e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66610a708f8fSGustavo F. Padovan goto drop; 66620a708f8fSGustavo F. Padovan } 66630a708f8fSGustavo F. Padovan 6664dbb50887SDaniel Borkmann if ((chan->mode == L2CAP_MODE_ERTM || 6665dbb50887SDaniel Borkmann chan->mode == L2CAP_MODE_STREAMING) && sk_filter(chan->data, skb)) 6666dbb50887SDaniel Borkmann goto drop; 6667dbb50887SDaniel Borkmann 6668cec8ab6eSMat Martineau if (!control->sframe) { 6669cec8ab6eSMat Martineau int err; 66700a708f8fSGustavo F. Padovan 6671cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6672cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6673cec8ab6eSMat Martineau control->txseq); 6674836be934SAndrei Emeltchenko 6675cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6676cec8ab6eSMat Martineau * valid in TX WAIT_F 6677cec8ab6eSMat Martineau */ 6678cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 66790a708f8fSGustavo F. Padovan goto drop; 66800a708f8fSGustavo F. Padovan 6681cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6682cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6683cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 66840a708f8fSGustavo F. Padovan } else { 6685cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6686cec8ab6eSMat Martineau } 6687cec8ab6eSMat Martineau 6688cec8ab6eSMat Martineau if (err) 66895e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6690cec8ab6eSMat Martineau } else { 6691cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6692cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6693cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6694cec8ab6eSMat Martineau }; 6695cec8ab6eSMat Martineau 6696cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6697cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6698cec8ab6eSMat Martineau goto drop; 6699cec8ab6eSMat Martineau 6700cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6701cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6702cec8ab6eSMat Martineau control->super); 6703cec8ab6eSMat Martineau 67040a708f8fSGustavo F. Padovan if (len != 0) { 67051bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 67065e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 67070a708f8fSGustavo F. Padovan goto drop; 67080a708f8fSGustavo F. Padovan } 67090a708f8fSGustavo F. Padovan 6710cec8ab6eSMat Martineau /* Validate F and P bits */ 6711cec8ab6eSMat Martineau if (control->final && (control->poll || 6712cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6713cec8ab6eSMat Martineau goto drop; 6714cec8ab6eSMat Martineau 6715cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6716cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 67175e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 67180a708f8fSGustavo F. Padovan } 67190a708f8fSGustavo F. Padovan 67200a708f8fSGustavo F. Padovan return 0; 67210a708f8fSGustavo F. Padovan 67220a708f8fSGustavo F. Padovan drop: 67230a708f8fSGustavo F. Padovan kfree_skb(skb); 67240a708f8fSGustavo F. Padovan return 0; 67250a708f8fSGustavo F. Padovan } 67260a708f8fSGustavo F. Padovan 6727b1c325c2SJohan Hedberg static void l2cap_chan_le_send_credits(struct l2cap_chan *chan) 6728b1c325c2SJohan Hedberg { 6729b1c325c2SJohan Hedberg struct l2cap_conn *conn = chan->conn; 6730b1c325c2SJohan Hedberg struct l2cap_le_credits pkt; 6731b1c325c2SJohan Hedberg u16 return_credits; 6732b1c325c2SJohan Hedberg 673396cd8eaaSLuiz Augusto von Dentz return_credits = ((chan->imtu / chan->mps) + 1) - chan->rx_credits; 6734b1c325c2SJohan Hedberg 673596cd8eaaSLuiz Augusto von Dentz if (!return_credits) 673696cd8eaaSLuiz Augusto von Dentz return; 6737b1c325c2SJohan Hedberg 6738b1c325c2SJohan Hedberg BT_DBG("chan %p returning %u credits to sender", chan, return_credits); 6739b1c325c2SJohan Hedberg 6740b1c325c2SJohan Hedberg chan->rx_credits += return_credits; 6741b1c325c2SJohan Hedberg 6742b1c325c2SJohan Hedberg pkt.cid = cpu_to_le16(chan->scid); 6743b1c325c2SJohan Hedberg pkt.credits = cpu_to_le16(return_credits); 6744b1c325c2SJohan Hedberg 6745b1c325c2SJohan Hedberg chan->ident = l2cap_get_ident(conn); 6746b1c325c2SJohan Hedberg 6747b1c325c2SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CREDITS, sizeof(pkt), &pkt); 6748b1c325c2SJohan Hedberg } 6749b1c325c2SJohan Hedberg 675096cd8eaaSLuiz Augusto von Dentz static int l2cap_le_recv(struct l2cap_chan *chan, struct sk_buff *skb) 675196cd8eaaSLuiz Augusto von Dentz { 675296cd8eaaSLuiz Augusto von Dentz int err; 675396cd8eaaSLuiz Augusto von Dentz 675496cd8eaaSLuiz Augusto von Dentz BT_DBG("SDU reassemble complete: chan %p skb->len %u", chan, skb->len); 675596cd8eaaSLuiz Augusto von Dentz 675696cd8eaaSLuiz Augusto von Dentz /* Wait recv to confirm reception before updating the credits */ 675796cd8eaaSLuiz Augusto von Dentz err = chan->ops->recv(chan, skb); 675896cd8eaaSLuiz Augusto von Dentz 675996cd8eaaSLuiz Augusto von Dentz /* Update credits whenever an SDU is received */ 676096cd8eaaSLuiz Augusto von Dentz l2cap_chan_le_send_credits(chan); 676196cd8eaaSLuiz Augusto von Dentz 676296cd8eaaSLuiz Augusto von Dentz return err; 676396cd8eaaSLuiz Augusto von Dentz } 676496cd8eaaSLuiz Augusto von Dentz 6765fad5fc89SJohan Hedberg static int l2cap_le_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6766fad5fc89SJohan Hedberg { 6767aac23bf6SJohan Hedberg int err; 6768fad5fc89SJohan Hedberg 6769aac23bf6SJohan Hedberg if (!chan->rx_credits) { 6770aac23bf6SJohan Hedberg BT_ERR("No credits to receive LE L2CAP data"); 6771dfd9774cSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 6772fad5fc89SJohan Hedberg return -ENOBUFS; 6773aac23bf6SJohan Hedberg } 6774aac23bf6SJohan Hedberg 6775aac23bf6SJohan Hedberg if (chan->imtu < skb->len) { 6776aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP PDU"); 6777aac23bf6SJohan Hedberg return -ENOBUFS; 6778aac23bf6SJohan Hedberg } 6779fad5fc89SJohan Hedberg 6780fad5fc89SJohan Hedberg chan->rx_credits--; 6781fad5fc89SJohan Hedberg BT_DBG("rx_credits %u -> %u", chan->rx_credits + 1, chan->rx_credits); 6782fad5fc89SJohan Hedberg 678396cd8eaaSLuiz Augusto von Dentz /* Update if remote had run out of credits, this should only happens 678496cd8eaaSLuiz Augusto von Dentz * if the remote is not using the entire MPS. 678596cd8eaaSLuiz Augusto von Dentz */ 678696cd8eaaSLuiz Augusto von Dentz if (!chan->rx_credits) 6787fad5fc89SJohan Hedberg l2cap_chan_le_send_credits(chan); 6788fad5fc89SJohan Hedberg 6789aac23bf6SJohan Hedberg err = 0; 6790aac23bf6SJohan Hedberg 6791aac23bf6SJohan Hedberg if (!chan->sdu) { 6792aac23bf6SJohan Hedberg u16 sdu_len; 6793aac23bf6SJohan Hedberg 6794aac23bf6SJohan Hedberg sdu_len = get_unaligned_le16(skb->data); 6795aac23bf6SJohan Hedberg skb_pull(skb, L2CAP_SDULEN_SIZE); 6796aac23bf6SJohan Hedberg 6797aac23bf6SJohan Hedberg BT_DBG("Start of new SDU. sdu_len %u skb->len %u imtu %u", 6798aac23bf6SJohan Hedberg sdu_len, skb->len, chan->imtu); 6799aac23bf6SJohan Hedberg 6800aac23bf6SJohan Hedberg if (sdu_len > chan->imtu) { 6801aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP SDU length received"); 6802aac23bf6SJohan Hedberg err = -EMSGSIZE; 6803aac23bf6SJohan Hedberg goto failed; 6804aac23bf6SJohan Hedberg } 6805aac23bf6SJohan Hedberg 6806aac23bf6SJohan Hedberg if (skb->len > sdu_len) { 6807aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6808aac23bf6SJohan Hedberg err = -EINVAL; 6809aac23bf6SJohan Hedberg goto failed; 6810aac23bf6SJohan Hedberg } 6811aac23bf6SJohan Hedberg 6812aac23bf6SJohan Hedberg if (skb->len == sdu_len) 681396cd8eaaSLuiz Augusto von Dentz return l2cap_le_recv(chan, skb); 6814aac23bf6SJohan Hedberg 6815aac23bf6SJohan Hedberg chan->sdu = skb; 6816aac23bf6SJohan Hedberg chan->sdu_len = sdu_len; 6817aac23bf6SJohan Hedberg chan->sdu_last_frag = skb; 6818aac23bf6SJohan Hedberg 6819a5c3021bSLuiz Augusto von Dentz /* Detect if remote is not able to use the selected MPS */ 6820a5c3021bSLuiz Augusto von Dentz if (skb->len + L2CAP_SDULEN_SIZE < chan->mps) { 6821a5c3021bSLuiz Augusto von Dentz u16 mps_len = skb->len + L2CAP_SDULEN_SIZE; 6822a5c3021bSLuiz Augusto von Dentz 6823a5c3021bSLuiz Augusto von Dentz /* Adjust the number of credits */ 6824a5c3021bSLuiz Augusto von Dentz BT_DBG("chan->mps %u -> %u", chan->mps, mps_len); 6825a5c3021bSLuiz Augusto von Dentz chan->mps = mps_len; 6826a5c3021bSLuiz Augusto von Dentz l2cap_chan_le_send_credits(chan); 6827a5c3021bSLuiz Augusto von Dentz } 6828a5c3021bSLuiz Augusto von Dentz 6829aac23bf6SJohan Hedberg return 0; 6830aac23bf6SJohan Hedberg } 6831aac23bf6SJohan Hedberg 6832aac23bf6SJohan Hedberg BT_DBG("SDU fragment. chan->sdu->len %u skb->len %u chan->sdu_len %u", 6833aac23bf6SJohan Hedberg chan->sdu->len, skb->len, chan->sdu_len); 6834aac23bf6SJohan Hedberg 6835aac23bf6SJohan Hedberg if (chan->sdu->len + skb->len > chan->sdu_len) { 6836aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6837aac23bf6SJohan Hedberg err = -EINVAL; 6838aac23bf6SJohan Hedberg goto failed; 6839aac23bf6SJohan Hedberg } 6840aac23bf6SJohan Hedberg 6841aac23bf6SJohan Hedberg append_skb_frag(chan->sdu, skb, &chan->sdu_last_frag); 6842aac23bf6SJohan Hedberg skb = NULL; 6843aac23bf6SJohan Hedberg 6844aac23bf6SJohan Hedberg if (chan->sdu->len == chan->sdu_len) { 684596cd8eaaSLuiz Augusto von Dentz err = l2cap_le_recv(chan, chan->sdu); 6846aac23bf6SJohan Hedberg if (!err) { 6847aac23bf6SJohan Hedberg chan->sdu = NULL; 6848aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6849aac23bf6SJohan Hedberg chan->sdu_len = 0; 6850aac23bf6SJohan Hedberg } 6851aac23bf6SJohan Hedberg } 6852aac23bf6SJohan Hedberg 6853aac23bf6SJohan Hedberg failed: 6854aac23bf6SJohan Hedberg if (err) { 6855aac23bf6SJohan Hedberg kfree_skb(skb); 6856aac23bf6SJohan Hedberg kfree_skb(chan->sdu); 6857aac23bf6SJohan Hedberg chan->sdu = NULL; 6858aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6859aac23bf6SJohan Hedberg chan->sdu_len = 0; 6860aac23bf6SJohan Hedberg } 6861aac23bf6SJohan Hedberg 6862aac23bf6SJohan Hedberg /* We can't return an error here since we took care of the skb 6863aac23bf6SJohan Hedberg * freeing internally. An error return would cause the caller to 6864aac23bf6SJohan Hedberg * do a double-free of the skb. 6865aac23bf6SJohan Hedberg */ 6866aac23bf6SJohan Hedberg return 0; 6867fad5fc89SJohan Hedberg } 6868fad5fc89SJohan Hedberg 686913ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 687013ca56e0SAndrei Emeltchenko struct sk_buff *skb) 68710a708f8fSGustavo F. Padovan { 687248454079SGustavo F. Padovan struct l2cap_chan *chan; 68730a708f8fSGustavo F. Padovan 6874baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 687548454079SGustavo F. Padovan if (!chan) { 687697e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 687797e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 687897e8e89dSAndrei Emeltchenko if (!chan) { 687997e8e89dSAndrei Emeltchenko kfree_skb(skb); 688013ca56e0SAndrei Emeltchenko return; 688197e8e89dSAndrei Emeltchenko } 688297e8e89dSAndrei Emeltchenko 688397e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 688497e8e89dSAndrei Emeltchenko } else { 68850a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 68866be36555SAndrei Emeltchenko /* Drop packet and return */ 68873379013bSDan Carpenter kfree_skb(skb); 688813ca56e0SAndrei Emeltchenko return; 68890a708f8fSGustavo F. Padovan } 689097e8e89dSAndrei Emeltchenko } 68910a708f8fSGustavo F. Padovan 689249208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 68930a708f8fSGustavo F. Padovan 6894315917e0SJohan Hedberg /* If we receive data on a fixed channel before the info req/rsp 6895315917e0SJohan Hedberg * procdure is done simply assume that the channel is supported 6896315917e0SJohan Hedberg * and mark it as ready. 6897315917e0SJohan Hedberg */ 6898315917e0SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED) 6899315917e0SJohan Hedberg l2cap_chan_ready(chan); 6900315917e0SJohan Hedberg 690189bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 69020a708f8fSGustavo F. Padovan goto drop; 69030a708f8fSGustavo F. Padovan 69040c1bc5c6SGustavo F. Padovan switch (chan->mode) { 690538319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 6906fad5fc89SJohan Hedberg if (l2cap_le_data_rcv(chan, skb) < 0) 6907fad5fc89SJohan Hedberg goto drop; 6908fad5fc89SJohan Hedberg 6909fad5fc89SJohan Hedberg goto done; 6910fad5fc89SJohan Hedberg 69110a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 69120a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 69130a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 69140a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 69150a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 69160a708f8fSGustavo F. Padovan 69172c96e03dSSzymon Janc if (chan->imtu < skb->len) { 69182c96e03dSSzymon Janc BT_ERR("Dropping L2CAP data: receive buffer overflow"); 69190a708f8fSGustavo F. Padovan goto drop; 69202c96e03dSSzymon Janc } 69210a708f8fSGustavo F. Padovan 692280b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 69230a708f8fSGustavo F. Padovan goto done; 69240a708f8fSGustavo F. Padovan break; 69250a708f8fSGustavo F. Padovan 69260a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 69270a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6928cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 69290a708f8fSGustavo F. Padovan goto done; 69300a708f8fSGustavo F. Padovan 69310a708f8fSGustavo F. Padovan default: 69320c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 69330a708f8fSGustavo F. Padovan break; 69340a708f8fSGustavo F. Padovan } 69350a708f8fSGustavo F. Padovan 69360a708f8fSGustavo F. Padovan drop: 69370a708f8fSGustavo F. Padovan kfree_skb(skb); 69380a708f8fSGustavo F. Padovan 69390a708f8fSGustavo F. Padovan done: 69406be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 69410a708f8fSGustavo F. Padovan } 69420a708f8fSGustavo F. Padovan 694384104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 694484104b24SAndrei Emeltchenko struct sk_buff *skb) 69450a708f8fSGustavo F. Padovan { 6946ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 694723691d75SGustavo F. Padovan struct l2cap_chan *chan; 69480a708f8fSGustavo F. Padovan 6949ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6950a24cce14SJohan Hedberg goto free_skb; 6951ae4fd2d3SMarcel Holtmann 6952bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6953bf20fd4eSJohan Hedberg ACL_LINK); 695423691d75SGustavo F. Padovan if (!chan) 6955a24cce14SJohan Hedberg goto free_skb; 69560a708f8fSGustavo F. Padovan 69575b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 69580a708f8fSGustavo F. Padovan 695989bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 69600a708f8fSGustavo F. Padovan goto drop; 69610a708f8fSGustavo F. Padovan 6962e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 69630a708f8fSGustavo F. Padovan goto drop; 69640a708f8fSGustavo F. Padovan 69652edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 6966a4368ff3SJohan Hedberg bacpy(&bt_cb(skb)->l2cap.bdaddr, &hcon->dst); 6967a4368ff3SJohan Hedberg bt_cb(skb)->l2cap.psm = psm; 69682edf870dSMarcel Holtmann 6969a24cce14SJohan Hedberg if (!chan->ops->recv(chan, skb)) { 6970a24cce14SJohan Hedberg l2cap_chan_put(chan); 697184104b24SAndrei Emeltchenko return; 6972a24cce14SJohan Hedberg } 69730a708f8fSGustavo F. Padovan 69740a708f8fSGustavo F. Padovan drop: 6975a24cce14SJohan Hedberg l2cap_chan_put(chan); 6976a24cce14SJohan Hedberg free_skb: 69770a708f8fSGustavo F. Padovan kfree_skb(skb); 69780a708f8fSGustavo F. Padovan } 69790a708f8fSGustavo F. Padovan 69800a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 69810a708f8fSGustavo F. Padovan { 69820a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 698361a939c6SJohan Hedberg struct hci_conn *hcon = conn->hcon; 69840a708f8fSGustavo F. Padovan u16 cid, len; 69850a708f8fSGustavo F. Padovan __le16 psm; 69860a708f8fSGustavo F. Padovan 698761a939c6SJohan Hedberg if (hcon->state != BT_CONNECTED) { 698861a939c6SJohan Hedberg BT_DBG("queueing pending rx skb"); 698961a939c6SJohan Hedberg skb_queue_tail(&conn->pending_rx, skb); 699061a939c6SJohan Hedberg return; 699161a939c6SJohan Hedberg } 699261a939c6SJohan Hedberg 69930a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 69940a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 69950a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 69960a708f8fSGustavo F. Padovan 69970a708f8fSGustavo F. Padovan if (len != skb->len) { 69980a708f8fSGustavo F. Padovan kfree_skb(skb); 69990a708f8fSGustavo F. Padovan return; 70000a708f8fSGustavo F. Padovan } 70010a708f8fSGustavo F. Padovan 70029e1d7e15SJohan Hedberg /* Since we can't actively block incoming LE connections we must 70039e1d7e15SJohan Hedberg * at least ensure that we ignore incoming data from them. 70049e1d7e15SJohan Hedberg */ 70059e1d7e15SJohan Hedberg if (hcon->type == LE_LINK && 7006dcc36c16SJohan Hedberg hci_bdaddr_list_lookup(&hcon->hdev->blacklist, &hcon->dst, 7007a250e048SJohan Hedberg bdaddr_dst_type(hcon))) { 7008e493150eSJohan Hedberg kfree_skb(skb); 7009e493150eSJohan Hedberg return; 7010e493150eSJohan Hedberg } 7011e493150eSJohan Hedberg 70120a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 70130a708f8fSGustavo F. Padovan 70140a708f8fSGustavo F. Padovan switch (cid) { 70150a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 70160a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 70170a708f8fSGustavo F. Padovan break; 70180a708f8fSGustavo F. Padovan 70190a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 7020097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 70210181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 70220a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 70230a708f8fSGustavo F. Padovan break; 70240a708f8fSGustavo F. Padovan 7025a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 7026a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 7027a2877629SMarcel Holtmann break; 7028a2877629SMarcel Holtmann 70290a708f8fSGustavo F. Padovan default: 70300a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 70310a708f8fSGustavo F. Padovan break; 70320a708f8fSGustavo F. Padovan } 70330a708f8fSGustavo F. Padovan } 70340a708f8fSGustavo F. Padovan 703561a939c6SJohan Hedberg static void process_pending_rx(struct work_struct *work) 703661a939c6SJohan Hedberg { 703761a939c6SJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 703861a939c6SJohan Hedberg pending_rx_work); 703961a939c6SJohan Hedberg struct sk_buff *skb; 704061a939c6SJohan Hedberg 704161a939c6SJohan Hedberg BT_DBG(""); 704261a939c6SJohan Hedberg 704361a939c6SJohan Hedberg while ((skb = skb_dequeue(&conn->pending_rx))) 704461a939c6SJohan Hedberg l2cap_recv_frame(conn, skb); 704561a939c6SJohan Hedberg } 704661a939c6SJohan Hedberg 7047162b49e7SJohan Hedberg static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 7048162b49e7SJohan Hedberg { 7049162b49e7SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 7050162b49e7SJohan Hedberg struct hci_chan *hchan; 7051162b49e7SJohan Hedberg 7052162b49e7SJohan Hedberg if (conn) 7053162b49e7SJohan Hedberg return conn; 7054162b49e7SJohan Hedberg 7055162b49e7SJohan Hedberg hchan = hci_chan_create(hcon); 7056162b49e7SJohan Hedberg if (!hchan) 7057162b49e7SJohan Hedberg return NULL; 7058162b49e7SJohan Hedberg 705927f70f3eSJohan Hedberg conn = kzalloc(sizeof(*conn), GFP_KERNEL); 7060162b49e7SJohan Hedberg if (!conn) { 7061162b49e7SJohan Hedberg hci_chan_del(hchan); 7062162b49e7SJohan Hedberg return NULL; 7063162b49e7SJohan Hedberg } 7064162b49e7SJohan Hedberg 7065162b49e7SJohan Hedberg kref_init(&conn->ref); 7066162b49e7SJohan Hedberg hcon->l2cap_data = conn; 706751bb8457SJohan Hedberg conn->hcon = hci_conn_get(hcon); 7068162b49e7SJohan Hedberg conn->hchan = hchan; 7069162b49e7SJohan Hedberg 7070162b49e7SJohan Hedberg BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 7071162b49e7SJohan Hedberg 7072162b49e7SJohan Hedberg switch (hcon->type) { 7073162b49e7SJohan Hedberg case LE_LINK: 7074162b49e7SJohan Hedberg if (hcon->hdev->le_mtu) { 7075162b49e7SJohan Hedberg conn->mtu = hcon->hdev->le_mtu; 7076162b49e7SJohan Hedberg break; 7077162b49e7SJohan Hedberg } 7078162b49e7SJohan Hedberg /* fall through */ 7079162b49e7SJohan Hedberg default: 7080162b49e7SJohan Hedberg conn->mtu = hcon->hdev->acl_mtu; 7081162b49e7SJohan Hedberg break; 7082162b49e7SJohan Hedberg } 7083162b49e7SJohan Hedberg 7084162b49e7SJohan Hedberg conn->feat_mask = 0; 7085162b49e7SJohan Hedberg 70860bd49fc7SJohan Hedberg conn->local_fixed_chan = L2CAP_FC_SIG_BREDR | L2CAP_FC_CONNLESS; 70870bd49fc7SJohan Hedberg 70880bd49fc7SJohan Hedberg if (hcon->type == ACL_LINK && 7089d7a5a11dSMarcel Holtmann hci_dev_test_flag(hcon->hdev, HCI_HS_ENABLED)) 70900bd49fc7SJohan Hedberg conn->local_fixed_chan |= L2CAP_FC_A2MP; 7091162b49e7SJohan Hedberg 7092d7a5a11dSMarcel Holtmann if (hci_dev_test_flag(hcon->hdev, HCI_LE_ENABLED) && 7093f9be9e86SMarcel Holtmann (bredr_sc_enabled(hcon->hdev) || 7094b7cb93e5SMarcel Holtmann hci_dev_test_flag(hcon->hdev, HCI_FORCE_BREDR_SMP))) 7095b5ae344dSJohan Hedberg conn->local_fixed_chan |= L2CAP_FC_SMP_BREDR; 7096b5ae344dSJohan Hedberg 70975a54e7c8SMarcel Holtmann mutex_init(&conn->ident_lock); 7098162b49e7SJohan Hedberg mutex_init(&conn->chan_lock); 7099162b49e7SJohan Hedberg 7100162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->chan_l); 7101162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->users); 7102162b49e7SJohan Hedberg 7103162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 7104162b49e7SJohan Hedberg 710561a939c6SJohan Hedberg skb_queue_head_init(&conn->pending_rx); 710661a939c6SJohan Hedberg INIT_WORK(&conn->pending_rx_work, process_pending_rx); 7107f3d82d0cSJohan Hedberg INIT_WORK(&conn->id_addr_update_work, l2cap_conn_update_id_addr); 710861a939c6SJohan Hedberg 7109162b49e7SJohan Hedberg conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 7110162b49e7SJohan Hedberg 7111162b49e7SJohan Hedberg return conn; 7112162b49e7SJohan Hedberg } 7113162b49e7SJohan Hedberg 7114162b49e7SJohan Hedberg static bool is_valid_psm(u16 psm, u8 dst_type) { 7115162b49e7SJohan Hedberg if (!psm) 7116162b49e7SJohan Hedberg return false; 7117162b49e7SJohan Hedberg 7118162b49e7SJohan Hedberg if (bdaddr_type_is_le(dst_type)) 7119162b49e7SJohan Hedberg return (psm <= 0x00ff); 7120162b49e7SJohan Hedberg 7121162b49e7SJohan Hedberg /* PSM must be odd and lsb of upper byte must be 0 */ 7122162b49e7SJohan Hedberg return ((psm & 0x0101) == 0x0001); 7123162b49e7SJohan Hedberg } 7124162b49e7SJohan Hedberg 7125162b49e7SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 7126162b49e7SJohan Hedberg bdaddr_t *dst, u8 dst_type) 7127162b49e7SJohan Hedberg { 7128162b49e7SJohan Hedberg struct l2cap_conn *conn; 7129162b49e7SJohan Hedberg struct hci_conn *hcon; 7130162b49e7SJohan Hedberg struct hci_dev *hdev; 7131162b49e7SJohan Hedberg int err; 7132162b49e7SJohan Hedberg 7133162b49e7SJohan Hedberg BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 7134162b49e7SJohan Hedberg dst_type, __le16_to_cpu(psm)); 7135162b49e7SJohan Hedberg 713639385cb5SJohan Hedberg hdev = hci_get_route(dst, &chan->src, chan->src_type); 7137162b49e7SJohan Hedberg if (!hdev) 7138162b49e7SJohan Hedberg return -EHOSTUNREACH; 7139162b49e7SJohan Hedberg 7140162b49e7SJohan Hedberg hci_dev_lock(hdev); 7141162b49e7SJohan Hedberg 7142162b49e7SJohan Hedberg if (!is_valid_psm(__le16_to_cpu(psm), dst_type) && !cid && 7143162b49e7SJohan Hedberg chan->chan_type != L2CAP_CHAN_RAW) { 7144162b49e7SJohan Hedberg err = -EINVAL; 7145162b49e7SJohan Hedberg goto done; 7146162b49e7SJohan Hedberg } 7147162b49e7SJohan Hedberg 714821626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !psm) { 714921626e62SJohan Hedberg err = -EINVAL; 715021626e62SJohan Hedberg goto done; 715121626e62SJohan Hedberg } 715221626e62SJohan Hedberg 715321626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED && !cid) { 7154162b49e7SJohan Hedberg err = -EINVAL; 7155162b49e7SJohan Hedberg goto done; 7156162b49e7SJohan Hedberg } 7157162b49e7SJohan Hedberg 7158162b49e7SJohan Hedberg switch (chan->mode) { 7159162b49e7SJohan Hedberg case L2CAP_MODE_BASIC: 7160162b49e7SJohan Hedberg break; 7161162b49e7SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 7162162b49e7SJohan Hedberg break; 7163162b49e7SJohan Hedberg case L2CAP_MODE_ERTM: 7164162b49e7SJohan Hedberg case L2CAP_MODE_STREAMING: 7165162b49e7SJohan Hedberg if (!disable_ertm) 7166162b49e7SJohan Hedberg break; 7167162b49e7SJohan Hedberg /* fall through */ 7168162b49e7SJohan Hedberg default: 7169beb19e4cSJohan Hedberg err = -EOPNOTSUPP; 7170162b49e7SJohan Hedberg goto done; 7171162b49e7SJohan Hedberg } 7172162b49e7SJohan Hedberg 7173162b49e7SJohan Hedberg switch (chan->state) { 7174162b49e7SJohan Hedberg case BT_CONNECT: 7175162b49e7SJohan Hedberg case BT_CONNECT2: 7176162b49e7SJohan Hedberg case BT_CONFIG: 7177162b49e7SJohan Hedberg /* Already connecting */ 7178162b49e7SJohan Hedberg err = 0; 7179162b49e7SJohan Hedberg goto done; 7180162b49e7SJohan Hedberg 7181162b49e7SJohan Hedberg case BT_CONNECTED: 7182162b49e7SJohan Hedberg /* Already connected */ 7183162b49e7SJohan Hedberg err = -EISCONN; 7184162b49e7SJohan Hedberg goto done; 7185162b49e7SJohan Hedberg 7186162b49e7SJohan Hedberg case BT_OPEN: 7187162b49e7SJohan Hedberg case BT_BOUND: 7188162b49e7SJohan Hedberg /* Can connect */ 7189162b49e7SJohan Hedberg break; 7190162b49e7SJohan Hedberg 7191162b49e7SJohan Hedberg default: 7192162b49e7SJohan Hedberg err = -EBADFD; 7193162b49e7SJohan Hedberg goto done; 7194162b49e7SJohan Hedberg } 7195162b49e7SJohan Hedberg 7196162b49e7SJohan Hedberg /* Set destination address and psm */ 7197162b49e7SJohan Hedberg bacpy(&chan->dst, dst); 7198162b49e7SJohan Hedberg chan->dst_type = dst_type; 7199162b49e7SJohan Hedberg 7200162b49e7SJohan Hedberg chan->psm = psm; 7201162b49e7SJohan Hedberg chan->dcid = cid; 7202162b49e7SJohan Hedberg 72036f77d8c7SAndre Guedes if (bdaddr_type_is_le(dst_type)) { 72046f77d8c7SAndre Guedes /* Convert from L2CAP channel address type to HCI address type 72056f77d8c7SAndre Guedes */ 72066f77d8c7SAndre Guedes if (dst_type == BDADDR_LE_PUBLIC) 72076f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_PUBLIC; 72086f77d8c7SAndre Guedes else 72096f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_RANDOM; 72106f77d8c7SAndre Guedes 7211d7a5a11dSMarcel Holtmann if (hci_dev_test_flag(hdev, HCI_ADVERTISING)) 72120ad06aa6SJohan Hedberg hcon = hci_connect_le(hdev, dst, dst_type, 7213fa142220SJakub Pawlowski chan->sec_level, 7214fa142220SJakub Pawlowski HCI_LE_CONN_TIMEOUT, 7215082f2300SSzymon Janc HCI_ROLE_SLAVE, NULL); 72160ad06aa6SJohan Hedberg else 72170ad06aa6SJohan Hedberg hcon = hci_connect_le_scan(hdev, dst, dst_type, 72180ad06aa6SJohan Hedberg chan->sec_level, 72190ad06aa6SJohan Hedberg HCI_LE_CONN_TIMEOUT); 72200ad06aa6SJohan Hedberg 72216f77d8c7SAndre Guedes } else { 7222d93375a8SJohan Hedberg u8 auth_type = l2cap_get_auth_type(chan); 722304a6c589SAndre Guedes hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type); 72246f77d8c7SAndre Guedes } 7225162b49e7SJohan Hedberg 7226162b49e7SJohan Hedberg if (IS_ERR(hcon)) { 7227162b49e7SJohan Hedberg err = PTR_ERR(hcon); 7228162b49e7SJohan Hedberg goto done; 7229162b49e7SJohan Hedberg } 7230162b49e7SJohan Hedberg 7231162b49e7SJohan Hedberg conn = l2cap_conn_add(hcon); 7232162b49e7SJohan Hedberg if (!conn) { 7233162b49e7SJohan Hedberg hci_conn_drop(hcon); 7234162b49e7SJohan Hedberg err = -ENOMEM; 7235162b49e7SJohan Hedberg goto done; 7236162b49e7SJohan Hedberg } 7237162b49e7SJohan Hedberg 723802e246aeSJohan Hedberg mutex_lock(&conn->chan_lock); 723902e246aeSJohan Hedberg l2cap_chan_lock(chan); 724002e246aeSJohan Hedberg 7241162b49e7SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 7242162b49e7SJohan Hedberg hci_conn_drop(hcon); 7243162b49e7SJohan Hedberg err = -EBUSY; 724402e246aeSJohan Hedberg goto chan_unlock; 7245162b49e7SJohan Hedberg } 7246162b49e7SJohan Hedberg 7247162b49e7SJohan Hedberg /* Update source addr of the socket */ 7248162b49e7SJohan Hedberg bacpy(&chan->src, &hcon->src); 7249a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(hcon); 7250162b49e7SJohan Hedberg 725102e246aeSJohan Hedberg __l2cap_chan_add(conn, chan); 7252162b49e7SJohan Hedberg 7253162b49e7SJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 7254162b49e7SJohan Hedberg hci_conn_drop(hcon); 7255162b49e7SJohan Hedberg 7256162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECT); 7257162b49e7SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7258162b49e7SJohan Hedberg 725961202e4dSJohan Hedberg /* Release chan->sport so that it can be reused by other 726061202e4dSJohan Hedberg * sockets (as it's only used for listening sockets). 726161202e4dSJohan Hedberg */ 726261202e4dSJohan Hedberg write_lock(&chan_list_lock); 726361202e4dSJohan Hedberg chan->sport = 0; 726461202e4dSJohan Hedberg write_unlock(&chan_list_lock); 726561202e4dSJohan Hedberg 7266162b49e7SJohan Hedberg if (hcon->state == BT_CONNECTED) { 7267162b49e7SJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7268162b49e7SJohan Hedberg __clear_chan_timer(chan); 7269e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true)) 7270162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECTED); 7271162b49e7SJohan Hedberg } else 7272162b49e7SJohan Hedberg l2cap_do_start(chan); 7273162b49e7SJohan Hedberg } 7274162b49e7SJohan Hedberg 7275162b49e7SJohan Hedberg err = 0; 7276162b49e7SJohan Hedberg 727702e246aeSJohan Hedberg chan_unlock: 7278162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 727902e246aeSJohan Hedberg mutex_unlock(&conn->chan_lock); 728002e246aeSJohan Hedberg done: 7281162b49e7SJohan Hedberg hci_dev_unlock(hdev); 7282162b49e7SJohan Hedberg hci_dev_put(hdev); 7283162b49e7SJohan Hedberg return err; 7284162b49e7SJohan Hedberg } 72856b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_connect); 7286162b49e7SJohan Hedberg 72870a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 72880a708f8fSGustavo F. Padovan 7289686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 72900a708f8fSGustavo F. Padovan { 72910a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 729223691d75SGustavo F. Padovan struct l2cap_chan *c; 72930a708f8fSGustavo F. Padovan 72946ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 72950a708f8fSGustavo F. Padovan 72960a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 729723691d75SGustavo F. Padovan read_lock(&chan_list_lock); 729823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 729989bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 73000a708f8fSGustavo F. Padovan continue; 73010a708f8fSGustavo F. Padovan 73027eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 73030a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 730443bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 73050a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 73060a708f8fSGustavo F. Padovan exact++; 73077eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 73080a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 730943bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 73100a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 73110a708f8fSGustavo F. Padovan } 73120a708f8fSGustavo F. Padovan } 731323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 73140a708f8fSGustavo F. Padovan 73150a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 73160a708f8fSGustavo F. Padovan } 73170a708f8fSGustavo F. Padovan 7318e760ec12SJohan Hedberg /* Find the next fixed channel in BT_LISTEN state, continue iteration 7319e760ec12SJohan Hedberg * from an existing channel in the list or from the beginning of the 7320e760ec12SJohan Hedberg * global list (by passing NULL as first parameter). 7321e760ec12SJohan Hedberg */ 7322e760ec12SJohan Hedberg static struct l2cap_chan *l2cap_global_fixed_chan(struct l2cap_chan *c, 7323327a7191SJohan Hedberg struct hci_conn *hcon) 7324e760ec12SJohan Hedberg { 7325327a7191SJohan Hedberg u8 src_type = bdaddr_src_type(hcon); 7326327a7191SJohan Hedberg 7327e760ec12SJohan Hedberg read_lock(&chan_list_lock); 7328e760ec12SJohan Hedberg 7329e760ec12SJohan Hedberg if (c) 7330e760ec12SJohan Hedberg c = list_next_entry(c, global_l); 7331e760ec12SJohan Hedberg else 7332e760ec12SJohan Hedberg c = list_entry(chan_list.next, typeof(*c), global_l); 7333e760ec12SJohan Hedberg 7334e760ec12SJohan Hedberg list_for_each_entry_from(c, &chan_list, global_l) { 7335e760ec12SJohan Hedberg if (c->chan_type != L2CAP_CHAN_FIXED) 7336e760ec12SJohan Hedberg continue; 7337e760ec12SJohan Hedberg if (c->state != BT_LISTEN) 7338e760ec12SJohan Hedberg continue; 7339327a7191SJohan Hedberg if (bacmp(&c->src, &hcon->src) && bacmp(&c->src, BDADDR_ANY)) 7340e760ec12SJohan Hedberg continue; 7341327a7191SJohan Hedberg if (src_type != c->src_type) 734254a1b626SJohan Hedberg continue; 7343e760ec12SJohan Hedberg 7344e760ec12SJohan Hedberg l2cap_chan_hold(c); 7345e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7346e760ec12SJohan Hedberg return c; 7347e760ec12SJohan Hedberg } 7348e760ec12SJohan Hedberg 7349e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7350e760ec12SJohan Hedberg 7351e760ec12SJohan Hedberg return NULL; 7352e760ec12SJohan Hedberg } 7353e760ec12SJohan Hedberg 7354539c496dSJohan Hedberg static void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 73550a708f8fSGustavo F. Padovan { 7356e760ec12SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 73570a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 7358e760ec12SJohan Hedberg struct l2cap_chan *pchan; 7359e760ec12SJohan Hedberg u8 dst_type; 73600a708f8fSGustavo F. Padovan 7361539c496dSJohan Hedberg if (hcon->type != ACL_LINK && hcon->type != LE_LINK) 7362539c496dSJohan Hedberg return; 7363539c496dSJohan Hedberg 73646ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 73650a708f8fSGustavo F. Padovan 7366dc0f5088SJohan Hedberg if (status) { 7367e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 7368dc0f5088SJohan Hedberg return; 7369ba6fc317SAndrei Emeltchenko } 7370dc0f5088SJohan Hedberg 7371dc0f5088SJohan Hedberg conn = l2cap_conn_add(hcon); 7372dc0f5088SJohan Hedberg if (!conn) 7373dc0f5088SJohan Hedberg return; 7374dc0f5088SJohan Hedberg 7375a250e048SJohan Hedberg dst_type = bdaddr_dst_type(hcon); 7376e760ec12SJohan Hedberg 7377e760ec12SJohan Hedberg /* If device is blocked, do not create channels for it */ 7378e760ec12SJohan Hedberg if (hci_bdaddr_list_lookup(&hdev->blacklist, &hcon->dst, dst_type)) 7379e760ec12SJohan Hedberg return; 7380e760ec12SJohan Hedberg 7381e760ec12SJohan Hedberg /* Find fixed channels and notify them of the new connection. We 7382e760ec12SJohan Hedberg * use multiple individual lookups, continuing each time where 7383e760ec12SJohan Hedberg * we left off, because the list lock would prevent calling the 7384e760ec12SJohan Hedberg * potentially sleeping l2cap_chan_lock() function. 7385e760ec12SJohan Hedberg */ 7386327a7191SJohan Hedberg pchan = l2cap_global_fixed_chan(NULL, hcon); 7387e760ec12SJohan Hedberg while (pchan) { 7388e760ec12SJohan Hedberg struct l2cap_chan *chan, *next; 7389e760ec12SJohan Hedberg 7390e760ec12SJohan Hedberg /* Client fixed channels should override server ones */ 7391e760ec12SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, pchan->scid)) 7392e760ec12SJohan Hedberg goto next; 7393e760ec12SJohan Hedberg 7394e760ec12SJohan Hedberg l2cap_chan_lock(pchan); 7395e760ec12SJohan Hedberg chan = pchan->ops->new_connection(pchan); 7396e760ec12SJohan Hedberg if (chan) { 7397e760ec12SJohan Hedberg bacpy(&chan->src, &hcon->src); 7398e760ec12SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 7399a250e048SJohan Hedberg chan->src_type = bdaddr_src_type(hcon); 7400e760ec12SJohan Hedberg chan->dst_type = dst_type; 7401e760ec12SJohan Hedberg 7402e760ec12SJohan Hedberg __l2cap_chan_add(conn, chan); 7403e760ec12SJohan Hedberg } 7404e760ec12SJohan Hedberg 7405e760ec12SJohan Hedberg l2cap_chan_unlock(pchan); 7406e760ec12SJohan Hedberg next: 7407327a7191SJohan Hedberg next = l2cap_global_fixed_chan(pchan, hcon); 7408e760ec12SJohan Hedberg l2cap_chan_put(pchan); 7409e760ec12SJohan Hedberg pchan = next; 7410e760ec12SJohan Hedberg } 7411e760ec12SJohan Hedberg 7412dc0f5088SJohan Hedberg l2cap_conn_ready(conn); 74130a708f8fSGustavo F. Padovan } 74140a708f8fSGustavo F. Padovan 7415686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 74160a708f8fSGustavo F. Padovan { 74170a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 74180a708f8fSGustavo F. Padovan 74190a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 74200a708f8fSGustavo F. Padovan 7421686ebf28SUlisses Furquim if (!conn) 74229f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 74230a708f8fSGustavo F. Padovan return conn->disc_reason; 74240a708f8fSGustavo F. Padovan } 74250a708f8fSGustavo F. Padovan 74263a6d576bSJohan Hedberg static void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 74270a708f8fSGustavo F. Padovan { 74283a6d576bSJohan Hedberg if (hcon->type != ACL_LINK && hcon->type != LE_LINK) 74293a6d576bSJohan Hedberg return; 74303a6d576bSJohan Hedberg 74310a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 74320a708f8fSGustavo F. Padovan 7433e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 74340a708f8fSGustavo F. Padovan } 74350a708f8fSGustavo F. Padovan 74364343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 74370a708f8fSGustavo F. Padovan { 7438715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 74390a708f8fSGustavo F. Padovan return; 74400a708f8fSGustavo F. Padovan 74410a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 74424343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 7443ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 74447d513e92SMarcel Holtmann } else if (chan->sec_level == BT_SECURITY_HIGH || 74457d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 74460f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 74470a708f8fSGustavo F. Padovan } else { 74484343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 7449c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 74500a708f8fSGustavo F. Padovan } 74510a708f8fSGustavo F. Padovan } 74520a708f8fSGustavo F. Padovan 7453354fe804SJohan Hedberg static void l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 74540a708f8fSGustavo F. Padovan { 74550a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 745648454079SGustavo F. Padovan struct l2cap_chan *chan; 74570a708f8fSGustavo F. Padovan 74580a708f8fSGustavo F. Padovan if (!conn) 7459354fe804SJohan Hedberg return; 74600a708f8fSGustavo F. Padovan 746189d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 74620a708f8fSGustavo F. Padovan 74633df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 74640a708f8fSGustavo F. Padovan 74653df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 74666be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 74670a708f8fSGustavo F. Padovan 746889d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 746989d8b407SAndrei Emeltchenko state_to_string(chan->state)); 7470f1cb9af5SVinicius Costa Gomes 74712338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 747278eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 747378eb2f98SAndrei Emeltchenko continue; 747478eb2f98SAndrei Emeltchenko } 747578eb2f98SAndrei Emeltchenko 7476191eb398SJohan Hedberg if (!status && encrypt) 7477f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 7478f1cb9af5SVinicius Costa Gomes 747996eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 74806be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74810a708f8fSGustavo F. Padovan continue; 74820a708f8fSGustavo F. Padovan } 74830a708f8fSGustavo F. Padovan 748489bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 748589bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 7486d97c899bSMarcel Holtmann chan->ops->resume(chan); 74874343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 74886be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74890a708f8fSGustavo F. Padovan continue; 74900a708f8fSGustavo F. Padovan } 74910a708f8fSGustavo F. Padovan 749289bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 74936d3c15daSJohan Hedberg if (!status) 749493c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 74956d3c15daSJohan Hedberg else 7496ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7497fa37c1aaSJohan Hedberg } else if (chan->state == BT_CONNECT2 && 7498fa37c1aaSJohan Hedberg chan->mode != L2CAP_MODE_LE_FLOWCTL) { 74990a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7500df3c3931SJohan Hedberg __u16 res, stat; 75010a708f8fSGustavo F. Padovan 75020a708f8fSGustavo F. Padovan if (!status) { 7503bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 7504df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 7505df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 75062dc4e510SGustavo Padovan chan->ops->defer(chan); 7507df3c3931SJohan Hedberg } else { 7508acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 7509df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 7510df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 7511df3c3931SJohan Hedberg } 75120a708f8fSGustavo F. Padovan } else { 7513acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 7514ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7515df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 7516df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 75170a708f8fSGustavo F. Padovan } 75180a708f8fSGustavo F. Padovan 7519fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 7520fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7521df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 7522df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 7523fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 7524fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 75252d369359SMat Martineau 75262d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 75272d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 75282d369359SMat Martineau char buf[128]; 75292d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 75302d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 75312d369359SMat Martineau L2CAP_CONF_REQ, 7532e860d2c9SBen Seri l2cap_build_conf_req(chan, buf, sizeof(buf)), 75332d369359SMat Martineau buf); 75342d369359SMat Martineau chan->num_conf_req++; 75352d369359SMat Martineau } 75360a708f8fSGustavo F. Padovan } 75370a708f8fSGustavo F. Padovan 75386be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 75390a708f8fSGustavo F. Padovan } 75400a708f8fSGustavo F. Padovan 75413df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 75420a708f8fSGustavo F. Padovan } 75430a708f8fSGustavo F. Padovan 75449b4c3336SArron Wang void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 75450a708f8fSGustavo F. Padovan { 75460a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 7547d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 7548d73a0988SAndrei Emeltchenko int len; 75490a708f8fSGustavo F. Padovan 75501d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 7551ca8bee5dSMarcel Holtmann if (!conn && hcon->hdev->dev_type != HCI_PRIMARY) 75521d13a254SAndrei Emeltchenko goto drop; 75530a708f8fSGustavo F. Padovan 75540a708f8fSGustavo F. Padovan if (!conn) 7555baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 75560a708f8fSGustavo F. Padovan 75570a708f8fSGustavo F. Padovan if (!conn) 75580a708f8fSGustavo F. Padovan goto drop; 75590a708f8fSGustavo F. Padovan 75600a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 75610a708f8fSGustavo F. Padovan 7562d73a0988SAndrei Emeltchenko switch (flags) { 7563d73a0988SAndrei Emeltchenko case ACL_START: 7564d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 7565d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 75660a708f8fSGustavo F. Padovan if (conn->rx_len) { 75670a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 75680a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 75690a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 75700a708f8fSGustavo F. Padovan conn->rx_len = 0; 75710a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75720a708f8fSGustavo F. Padovan } 75730a708f8fSGustavo F. Padovan 75740a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 75750a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 75760a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 75770a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75780a708f8fSGustavo F. Padovan goto drop; 75790a708f8fSGustavo F. Padovan } 75800a708f8fSGustavo F. Padovan 75810a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 75820a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 75830a708f8fSGustavo F. Padovan 75840a708f8fSGustavo F. Padovan if (len == skb->len) { 75850a708f8fSGustavo F. Padovan /* Complete frame received */ 75860a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 75879b4c3336SArron Wang return; 75880a708f8fSGustavo F. Padovan } 75890a708f8fSGustavo F. Padovan 75900a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 75910a708f8fSGustavo F. Padovan 75920a708f8fSGustavo F. Padovan if (skb->len > len) { 75930a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 75940a708f8fSGustavo F. Padovan skb->len, len); 75950a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75960a708f8fSGustavo F. Padovan goto drop; 75970a708f8fSGustavo F. Padovan } 75980a708f8fSGustavo F. Padovan 75990a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 76008bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 76010a708f8fSGustavo F. Padovan if (!conn->rx_skb) 76020a708f8fSGustavo F. Padovan goto drop; 76030a708f8fSGustavo F. Padovan 76040a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 76050a708f8fSGustavo F. Padovan skb->len); 76060a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 7607d73a0988SAndrei Emeltchenko break; 7608d73a0988SAndrei Emeltchenko 7609d73a0988SAndrei Emeltchenko case ACL_CONT: 76100a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 76110a708f8fSGustavo F. Padovan 76120a708f8fSGustavo F. Padovan if (!conn->rx_len) { 76130a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 76140a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 76150a708f8fSGustavo F. Padovan goto drop; 76160a708f8fSGustavo F. Padovan } 76170a708f8fSGustavo F. Padovan 76180a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 76190a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 76200a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 76210a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 76220a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 76230a708f8fSGustavo F. Padovan conn->rx_len = 0; 76240a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 76250a708f8fSGustavo F. Padovan goto drop; 76260a708f8fSGustavo F. Padovan } 76270a708f8fSGustavo F. Padovan 76280a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 76290a708f8fSGustavo F. Padovan skb->len); 76300a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 76310a708f8fSGustavo F. Padovan 76320a708f8fSGustavo F. Padovan if (!conn->rx_len) { 7633c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 7634c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 7635c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 7636c4e5bafaSJohan Hedberg */ 7637c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 76380a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 7639c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 76400a708f8fSGustavo F. Padovan } 7641d73a0988SAndrei Emeltchenko break; 76420a708f8fSGustavo F. Padovan } 76430a708f8fSGustavo F. Padovan 76440a708f8fSGustavo F. Padovan drop: 76450a708f8fSGustavo F. Padovan kfree_skb(skb); 76460a708f8fSGustavo F. Padovan } 76470a708f8fSGustavo F. Padovan 7648354fe804SJohan Hedberg static struct hci_cb l2cap_cb = { 7649354fe804SJohan Hedberg .name = "L2CAP", 7650539c496dSJohan Hedberg .connect_cfm = l2cap_connect_cfm, 76513a6d576bSJohan Hedberg .disconn_cfm = l2cap_disconn_cfm, 7652354fe804SJohan Hedberg .security_cfm = l2cap_security_cfm, 7653354fe804SJohan Hedberg }; 7654354fe804SJohan Hedberg 76550a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 76560a708f8fSGustavo F. Padovan { 765723691d75SGustavo F. Padovan struct l2cap_chan *c; 76580a708f8fSGustavo F. Padovan 7659333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 76600a708f8fSGustavo F. Padovan 766123691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 7662eeb5a067SMarcel Holtmann seq_printf(f, "%pMR (%u) %pMR (%u) %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 7663eeb5a067SMarcel Holtmann &c->src, c->src_type, &c->dst, c->dst_type, 766489bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 766523691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 766623691d75SGustavo F. Padovan c->sec_level, c->mode); 76670a708f8fSGustavo F. Padovan } 76680a708f8fSGustavo F. Padovan 7669333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 76700a708f8fSGustavo F. Padovan 76710a708f8fSGustavo F. Padovan return 0; 76720a708f8fSGustavo F. Padovan } 76730a708f8fSGustavo F. Padovan 76748e2924e3SYangtao Li DEFINE_SHOW_ATTRIBUTE(l2cap_debugfs); 76750a708f8fSGustavo F. Padovan 76760a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 76770a708f8fSGustavo F. Padovan 767864274518SGustavo F. Padovan int __init l2cap_init(void) 76790a708f8fSGustavo F. Padovan { 76800a708f8fSGustavo F. Padovan int err; 76810a708f8fSGustavo F. Padovan 7682bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 76830a708f8fSGustavo F. Padovan if (err < 0) 76840a708f8fSGustavo F. Padovan return err; 76850a708f8fSGustavo F. Padovan 7686354fe804SJohan Hedberg hci_register_cb(&l2cap_cb); 7687354fe804SJohan Hedberg 76881120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 76891120e4bfSMarcel Holtmann return 0; 76901120e4bfSMarcel Holtmann 76912d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 76922d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 76930a708f8fSGustavo F. Padovan 76940a708f8fSGustavo F. Padovan return 0; 76950a708f8fSGustavo F. Padovan } 76960a708f8fSGustavo F. Padovan 769764274518SGustavo F. Padovan void l2cap_exit(void) 76980a708f8fSGustavo F. Padovan { 76990a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 7700354fe804SJohan Hedberg hci_unregister_cb(&l2cap_cb); 7701bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 77020a708f8fSGustavo F. Padovan } 77030a708f8fSGustavo F. Padovan 77040a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 77050a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 7706