10a708f8fSGustavo F. Padovan /* 20a708f8fSGustavo F. Padovan BlueZ - Bluetooth protocol stack for Linux 30a708f8fSGustavo F. Padovan Copyright (C) 2000-2001 Qualcomm Incorporated 40a708f8fSGustavo F. Padovan Copyright (C) 2009-2010 Gustavo F. Padovan <gustavo@padovan.org> 50a708f8fSGustavo F. Padovan Copyright (C) 2010 Google Inc. 6590051deSGustavo F. Padovan Copyright (C) 2011 ProFUSION Embedded Systems 7422e925bSMat Martineau Copyright (c) 2012 Code Aurora Forum. All rights reserved. 80a708f8fSGustavo F. Padovan 90a708f8fSGustavo F. Padovan Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com> 100a708f8fSGustavo F. Padovan 110a708f8fSGustavo F. Padovan This program is free software; you can redistribute it and/or modify 120a708f8fSGustavo F. Padovan it under the terms of the GNU General Public License version 2 as 130a708f8fSGustavo F. Padovan published by the Free Software Foundation; 140a708f8fSGustavo F. Padovan 150a708f8fSGustavo F. Padovan THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 160a708f8fSGustavo F. Padovan OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 170a708f8fSGustavo F. Padovan FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. 180a708f8fSGustavo F. Padovan IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY 190a708f8fSGustavo F. Padovan CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES 200a708f8fSGustavo F. Padovan WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 210a708f8fSGustavo F. Padovan ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 220a708f8fSGustavo F. Padovan OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 230a708f8fSGustavo F. Padovan 240a708f8fSGustavo F. Padovan ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS, 250a708f8fSGustavo F. Padovan COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS 260a708f8fSGustavo F. Padovan SOFTWARE IS DISCLAIMED. 270a708f8fSGustavo F. Padovan */ 280a708f8fSGustavo F. Padovan 29bb58f747SGustavo F. Padovan /* Bluetooth L2CAP core. */ 300a708f8fSGustavo F. Padovan 310a708f8fSGustavo F. Padovan #include <linux/module.h> 320a708f8fSGustavo F. Padovan 330a708f8fSGustavo F. Padovan #include <linux/debugfs.h> 340a708f8fSGustavo F. Padovan #include <linux/crc16.h> 350a708f8fSGustavo F. Padovan 360a708f8fSGustavo F. Padovan #include <net/bluetooth/bluetooth.h> 370a708f8fSGustavo F. Padovan #include <net/bluetooth/hci_core.h> 380a708f8fSGustavo F. Padovan #include <net/bluetooth/l2cap.h> 397ef9fbf0SMarcel Holtmann 40ac4b7236SMarcel Holtmann #include "smp.h" 417024728eSMarcel Holtmann #include "a2mp.h" 427ef9fbf0SMarcel Holtmann #include "amp.h" 430a708f8fSGustavo F. Padovan 440f1bfe4eSJohan Hedberg #define LE_FLOWCTL_MAX_CREDITS 65535 450f1bfe4eSJohan Hedberg 46d1de6d46SMat Martineau bool disable_ertm; 470a708f8fSGustavo F. Padovan 48547d1032SMarcel Holtmann static u32 l2cap_feat_mask = L2CAP_FEAT_FIXED_CHAN | L2CAP_FEAT_UCD; 49a6801ca9SMarcel Holtmann static u8 l2cap_fixed_chan[8] = { L2CAP_FC_SIG_BREDR | L2CAP_FC_CONNLESS, }; 500a708f8fSGustavo F. Padovan 51b5ad8b7fSJohannes Berg static LIST_HEAD(chan_list); 52b5ad8b7fSJohannes Berg static DEFINE_RWLOCK(chan_list_lock); 530a708f8fSGustavo F. Padovan 54f15b8ecfSJohan Hedberg static u16 le_max_credits = L2CAP_LE_MAX_CREDITS; 55f15b8ecfSJohan Hedberg static u16 le_default_mps = L2CAP_LE_DEFAULT_MPS; 56f15b8ecfSJohan Hedberg 570a708f8fSGustavo F. Padovan static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, 580a708f8fSGustavo F. Padovan u8 code, u8 ident, u16 dlen, void *data); 594519de9aSGustavo F. Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 604519de9aSGustavo F. Padovan void *data); 61710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data); 625e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err); 630a708f8fSGustavo F. Padovan 64d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 65608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event); 66608bcc6dSMat Martineau 674f1654e0SMarcel Holtmann static inline __u8 bdaddr_type(struct hci_conn *hcon, __u8 type) 684f1654e0SMarcel Holtmann { 694f1654e0SMarcel Holtmann if (hcon->type == LE_LINK) { 704f1654e0SMarcel Holtmann if (type == ADDR_LE_DEV_PUBLIC) 714f1654e0SMarcel Holtmann return BDADDR_LE_PUBLIC; 724f1654e0SMarcel Holtmann else 734f1654e0SMarcel Holtmann return BDADDR_LE_RANDOM; 744f1654e0SMarcel Holtmann } 754f1654e0SMarcel Holtmann 764f1654e0SMarcel Holtmann return BDADDR_BREDR; 774f1654e0SMarcel Holtmann } 784f1654e0SMarcel Holtmann 790a708f8fSGustavo F. Padovan /* ---- L2CAP channels ---- */ 8071ba0e56SGustavo F. Padovan 812d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 822d792818SGustavo Padovan u16 cid) 830a708f8fSGustavo F. Padovan { 843df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 85baa7e1faSGustavo F. Padovan 863df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 873df91ea2SAndrei Emeltchenko if (c->dcid == cid) 883df91ea2SAndrei Emeltchenko return c; 890a708f8fSGustavo F. Padovan } 903df91ea2SAndrei Emeltchenko return NULL; 91baa7e1faSGustavo F. Padovan } 920a708f8fSGustavo F. Padovan 932d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_scid(struct l2cap_conn *conn, 942d792818SGustavo Padovan u16 cid) 950a708f8fSGustavo F. Padovan { 963df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 97baa7e1faSGustavo F. Padovan 983df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 993df91ea2SAndrei Emeltchenko if (c->scid == cid) 1003df91ea2SAndrei Emeltchenko return c; 1010a708f8fSGustavo F. Padovan } 1023df91ea2SAndrei Emeltchenko return NULL; 103baa7e1faSGustavo F. Padovan } 1040a708f8fSGustavo F. Padovan 1050a708f8fSGustavo F. Padovan /* Find channel with given SCID. 106ef191adeSMat Martineau * Returns locked channel. */ 1072d792818SGustavo Padovan static struct l2cap_chan *l2cap_get_chan_by_scid(struct l2cap_conn *conn, 1082d792818SGustavo Padovan u16 cid) 1090a708f8fSGustavo F. Padovan { 11048454079SGustavo F. Padovan struct l2cap_chan *c; 111baa7e1faSGustavo F. Padovan 1123df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 113baa7e1faSGustavo F. Padovan c = __l2cap_get_chan_by_scid(conn, cid); 114ef191adeSMat Martineau if (c) 115ef191adeSMat Martineau l2cap_chan_lock(c); 1163df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 1173df91ea2SAndrei Emeltchenko 11848454079SGustavo F. Padovan return c; 1190a708f8fSGustavo F. Padovan } 1200a708f8fSGustavo F. Padovan 121b1a130b7SMat Martineau /* Find channel with given DCID. 122b1a130b7SMat Martineau * Returns locked channel. 123b1a130b7SMat Martineau */ 124b1a130b7SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_dcid(struct l2cap_conn *conn, 125b1a130b7SMat Martineau u16 cid) 126b1a130b7SMat Martineau { 127b1a130b7SMat Martineau struct l2cap_chan *c; 128b1a130b7SMat Martineau 129b1a130b7SMat Martineau mutex_lock(&conn->chan_lock); 130b1a130b7SMat Martineau c = __l2cap_get_chan_by_dcid(conn, cid); 131b1a130b7SMat Martineau if (c) 132b1a130b7SMat Martineau l2cap_chan_lock(c); 133b1a130b7SMat Martineau mutex_unlock(&conn->chan_lock); 134b1a130b7SMat Martineau 135b1a130b7SMat Martineau return c; 136b1a130b7SMat Martineau } 137b1a130b7SMat Martineau 1382d792818SGustavo Padovan static struct l2cap_chan *__l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1392d792818SGustavo Padovan u8 ident) 1400a708f8fSGustavo F. Padovan { 1413df91ea2SAndrei Emeltchenko struct l2cap_chan *c; 142baa7e1faSGustavo F. Padovan 1433df91ea2SAndrei Emeltchenko list_for_each_entry(c, &conn->chan_l, list) { 1443df91ea2SAndrei Emeltchenko if (c->ident == ident) 1453df91ea2SAndrei Emeltchenko return c; 1460a708f8fSGustavo F. Padovan } 1473df91ea2SAndrei Emeltchenko return NULL; 148baa7e1faSGustavo F. Padovan } 1490a708f8fSGustavo F. Padovan 1505b155ef9SMat Martineau static struct l2cap_chan *l2cap_get_chan_by_ident(struct l2cap_conn *conn, 1515b155ef9SMat Martineau u8 ident) 1525b155ef9SMat Martineau { 1535b155ef9SMat Martineau struct l2cap_chan *c; 1545b155ef9SMat Martineau 1555b155ef9SMat Martineau mutex_lock(&conn->chan_lock); 1565b155ef9SMat Martineau c = __l2cap_get_chan_by_ident(conn, ident); 1575b155ef9SMat Martineau if (c) 1585b155ef9SMat Martineau l2cap_chan_lock(c); 1595b155ef9SMat Martineau mutex_unlock(&conn->chan_lock); 1605b155ef9SMat Martineau 1615b155ef9SMat Martineau return c; 1625b155ef9SMat Martineau } 1635b155ef9SMat Martineau 16423691d75SGustavo F. Padovan static struct l2cap_chan *__l2cap_global_chan_by_addr(__le16 psm, bdaddr_t *src) 1659e4425ffSGustavo F. Padovan { 16623691d75SGustavo F. Padovan struct l2cap_chan *c; 1679e4425ffSGustavo F. Padovan 16823691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 1697eafc59eSMarcel Holtmann if (c->sport == psm && !bacmp(&c->src, src)) 17023691d75SGustavo F. Padovan return c; 1719e4425ffSGustavo F. Padovan } 172250938cbSSzymon Janc return NULL; 173250938cbSSzymon Janc } 1749e4425ffSGustavo F. Padovan 1759e4425ffSGustavo F. Padovan int l2cap_add_psm(struct l2cap_chan *chan, bdaddr_t *src, __le16 psm) 1769e4425ffSGustavo F. Padovan { 17773b2ec18SGustavo F. Padovan int err; 17873b2ec18SGustavo F. Padovan 179333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 1809e4425ffSGustavo F. Padovan 18123691d75SGustavo F. Padovan if (psm && __l2cap_global_chan_by_addr(psm, src)) { 18273b2ec18SGustavo F. Padovan err = -EADDRINUSE; 18373b2ec18SGustavo F. Padovan goto done; 1849e4425ffSGustavo F. Padovan } 1859e4425ffSGustavo F. Padovan 18673b2ec18SGustavo F. Padovan if (psm) { 1879e4425ffSGustavo F. Padovan chan->psm = psm; 1889e4425ffSGustavo F. Padovan chan->sport = psm; 18973b2ec18SGustavo F. Padovan err = 0; 19073b2ec18SGustavo F. Padovan } else { 19173b2ec18SGustavo F. Padovan u16 p; 1929e4425ffSGustavo F. Padovan 19373b2ec18SGustavo F. Padovan err = -EINVAL; 19473b2ec18SGustavo F. Padovan for (p = 0x1001; p < 0x1100; p += 2) 19523691d75SGustavo F. Padovan if (!__l2cap_global_chan_by_addr(cpu_to_le16(p), src)) { 19673b2ec18SGustavo F. Padovan chan->psm = cpu_to_le16(p); 19773b2ec18SGustavo F. Padovan chan->sport = cpu_to_le16(p); 19873b2ec18SGustavo F. Padovan err = 0; 19973b2ec18SGustavo F. Padovan break; 20073b2ec18SGustavo F. Padovan } 20173b2ec18SGustavo F. Padovan } 20273b2ec18SGustavo F. Padovan 20373b2ec18SGustavo F. Padovan done: 204333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 20573b2ec18SGustavo F. Padovan return err; 2069e4425ffSGustavo F. Padovan } 2076b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_add_psm); 2089e4425ffSGustavo F. Padovan 2099e4425ffSGustavo F. Padovan int l2cap_add_scid(struct l2cap_chan *chan, __u16 scid) 2109e4425ffSGustavo F. Padovan { 211333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 2129e4425ffSGustavo F. Padovan 2139e4425ffSGustavo F. Padovan chan->scid = scid; 2149e4425ffSGustavo F. Padovan 215333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 2169e4425ffSGustavo F. Padovan 2179e4425ffSGustavo F. Padovan return 0; 2189e4425ffSGustavo F. Padovan } 2199e4425ffSGustavo F. Padovan 220baa7e1faSGustavo F. Padovan static u16 l2cap_alloc_cid(struct l2cap_conn *conn) 2210a708f8fSGustavo F. Padovan { 222e77af755SJohan Hedberg u16 cid, dyn_end; 2230a708f8fSGustavo F. Padovan 224e77af755SJohan Hedberg if (conn->hcon->type == LE_LINK) 225e77af755SJohan Hedberg dyn_end = L2CAP_CID_LE_DYN_END; 226e77af755SJohan Hedberg else 227e77af755SJohan Hedberg dyn_end = L2CAP_CID_DYN_END; 228e77af755SJohan Hedberg 229e77af755SJohan Hedberg for (cid = L2CAP_CID_DYN_START; cid < dyn_end; cid++) { 230baa7e1faSGustavo F. Padovan if (!__l2cap_get_chan_by_scid(conn, cid)) 2310a708f8fSGustavo F. Padovan return cid; 2320a708f8fSGustavo F. Padovan } 2330a708f8fSGustavo F. Padovan 2340a708f8fSGustavo F. Padovan return 0; 2350a708f8fSGustavo F. Padovan } 2360a708f8fSGustavo F. Padovan 237f93fa273SGustavo Padovan static void l2cap_state_change(struct l2cap_chan *chan, int state) 23889bc500eSGustavo F. Padovan { 23942d2d87cSAndrei Emeltchenko BT_DBG("chan %p %s -> %s", chan, state_to_string(chan->state), 240badaaa00SGustavo F. Padovan state_to_string(state)); 241badaaa00SGustavo F. Padovan 24289bc500eSGustavo F. Padovan chan->state = state; 24353f52121SGustavo Padovan chan->ops->state_change(chan, state, 0); 24489bc500eSGustavo F. Padovan } 24589bc500eSGustavo F. Padovan 246f8e73017SGustavo Padovan static inline void l2cap_state_change_and_error(struct l2cap_chan *chan, 247f8e73017SGustavo Padovan int state, int err) 2482e0052e4SAndrei Emeltchenko { 249f8e73017SGustavo Padovan chan->state = state; 25053f52121SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2512e0052e4SAndrei Emeltchenko } 2522e0052e4SAndrei Emeltchenko 2532e0052e4SAndrei Emeltchenko static inline void l2cap_chan_set_err(struct l2cap_chan *chan, int err) 2542e0052e4SAndrei Emeltchenko { 255f8e73017SGustavo Padovan chan->ops->state_change(chan, chan->state, err); 2562e0052e4SAndrei Emeltchenko } 2572e0052e4SAndrei Emeltchenko 2584239d16fSMat Martineau static void __set_retrans_timer(struct l2cap_chan *chan) 2594239d16fSMat Martineau { 2604239d16fSMat Martineau if (!delayed_work_pending(&chan->monitor_timer) && 2614239d16fSMat Martineau chan->retrans_timeout) { 2624239d16fSMat Martineau l2cap_set_timer(chan, &chan->retrans_timer, 2634239d16fSMat Martineau msecs_to_jiffies(chan->retrans_timeout)); 2644239d16fSMat Martineau } 2654239d16fSMat Martineau } 2664239d16fSMat Martineau 2674239d16fSMat Martineau static void __set_monitor_timer(struct l2cap_chan *chan) 2684239d16fSMat Martineau { 2694239d16fSMat Martineau __clear_retrans_timer(chan); 2704239d16fSMat Martineau if (chan->monitor_timeout) { 2714239d16fSMat Martineau l2cap_set_timer(chan, &chan->monitor_timer, 2724239d16fSMat Martineau msecs_to_jiffies(chan->monitor_timeout)); 2734239d16fSMat Martineau } 2744239d16fSMat Martineau } 2754239d16fSMat Martineau 276608bcc6dSMat Martineau static struct sk_buff *l2cap_ertm_seq_in_queue(struct sk_buff_head *head, 277608bcc6dSMat Martineau u16 seq) 278608bcc6dSMat Martineau { 279608bcc6dSMat Martineau struct sk_buff *skb; 280608bcc6dSMat Martineau 281608bcc6dSMat Martineau skb_queue_walk(head, skb) { 282608bcc6dSMat Martineau if (bt_cb(skb)->control.txseq == seq) 283608bcc6dSMat Martineau return skb; 284608bcc6dSMat Martineau } 285608bcc6dSMat Martineau 286608bcc6dSMat Martineau return NULL; 287608bcc6dSMat Martineau } 288608bcc6dSMat Martineau 2893c588192SMat Martineau /* ---- L2CAP sequence number lists ---- */ 2903c588192SMat Martineau 2913c588192SMat Martineau /* For ERTM, ordered lists of sequence numbers must be tracked for 2923c588192SMat Martineau * SREJ requests that are received and for frames that are to be 2933c588192SMat Martineau * retransmitted. These seq_list functions implement a singly-linked 2943c588192SMat Martineau * list in an array, where membership in the list can also be checked 2953c588192SMat Martineau * in constant time. Items can also be added to the tail of the list 2963c588192SMat Martineau * and removed from the head in constant time, without further memory 2973c588192SMat Martineau * allocs or frees. 2983c588192SMat Martineau */ 2993c588192SMat Martineau 3003c588192SMat Martineau static int l2cap_seq_list_init(struct l2cap_seq_list *seq_list, u16 size) 3013c588192SMat Martineau { 3023c588192SMat Martineau size_t alloc_size, i; 3033c588192SMat Martineau 3043c588192SMat Martineau /* Allocated size is a power of 2 to map sequence numbers 3053c588192SMat Martineau * (which may be up to 14 bits) in to a smaller array that is 3063c588192SMat Martineau * sized for the negotiated ERTM transmit windows. 3073c588192SMat Martineau */ 3083c588192SMat Martineau alloc_size = roundup_pow_of_two(size); 3093c588192SMat Martineau 3103c588192SMat Martineau seq_list->list = kmalloc(sizeof(u16) * alloc_size, GFP_KERNEL); 3113c588192SMat Martineau if (!seq_list->list) 3123c588192SMat Martineau return -ENOMEM; 3133c588192SMat Martineau 3143c588192SMat Martineau seq_list->mask = alloc_size - 1; 3153c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3163c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3173c588192SMat Martineau for (i = 0; i < alloc_size; i++) 3183c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3193c588192SMat Martineau 3203c588192SMat Martineau return 0; 3213c588192SMat Martineau } 3223c588192SMat Martineau 3233c588192SMat Martineau static inline void l2cap_seq_list_free(struct l2cap_seq_list *seq_list) 3243c588192SMat Martineau { 3253c588192SMat Martineau kfree(seq_list->list); 3263c588192SMat Martineau } 3273c588192SMat Martineau 3283c588192SMat Martineau static inline bool l2cap_seq_list_contains(struct l2cap_seq_list *seq_list, 3293c588192SMat Martineau u16 seq) 3303c588192SMat Martineau { 3313c588192SMat Martineau /* Constant-time check for list membership */ 3323c588192SMat Martineau return seq_list->list[seq & seq_list->mask] != L2CAP_SEQ_LIST_CLEAR; 3333c588192SMat Martineau } 3343c588192SMat Martineau 33503a0c5d6SJohan Hedberg static inline u16 l2cap_seq_list_pop(struct l2cap_seq_list *seq_list) 3363c588192SMat Martineau { 33703a0c5d6SJohan Hedberg u16 seq = seq_list->head; 3383c588192SMat Martineau u16 mask = seq_list->mask; 3393c588192SMat Martineau 3403c588192SMat Martineau seq_list->head = seq_list->list[seq & mask]; 3413c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_CLEAR; 3423c588192SMat Martineau 3433c588192SMat Martineau if (seq_list->head == L2CAP_SEQ_LIST_TAIL) { 3443c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3453c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3463c588192SMat Martineau } 3473c588192SMat Martineau 3483c588192SMat Martineau return seq; 3493c588192SMat Martineau } 3503c588192SMat Martineau 3513c588192SMat Martineau static void l2cap_seq_list_clear(struct l2cap_seq_list *seq_list) 3523c588192SMat Martineau { 3533c588192SMat Martineau u16 i; 354f522ae36SGustavo Padovan 355f522ae36SGustavo Padovan if (seq_list->head == L2CAP_SEQ_LIST_CLEAR) 356f522ae36SGustavo Padovan return; 357f522ae36SGustavo Padovan 3583c588192SMat Martineau for (i = 0; i <= seq_list->mask; i++) 3593c588192SMat Martineau seq_list->list[i] = L2CAP_SEQ_LIST_CLEAR; 3603c588192SMat Martineau 3613c588192SMat Martineau seq_list->head = L2CAP_SEQ_LIST_CLEAR; 3623c588192SMat Martineau seq_list->tail = L2CAP_SEQ_LIST_CLEAR; 3633c588192SMat Martineau } 3643c588192SMat Martineau 3653c588192SMat Martineau static void l2cap_seq_list_append(struct l2cap_seq_list *seq_list, u16 seq) 3663c588192SMat Martineau { 3673c588192SMat Martineau u16 mask = seq_list->mask; 3683c588192SMat Martineau 3693c588192SMat Martineau /* All appends happen in constant time */ 3703c588192SMat Martineau 371f522ae36SGustavo Padovan if (seq_list->list[seq & mask] != L2CAP_SEQ_LIST_CLEAR) 372f522ae36SGustavo Padovan return; 373f522ae36SGustavo Padovan 3743c588192SMat Martineau if (seq_list->tail == L2CAP_SEQ_LIST_CLEAR) 3753c588192SMat Martineau seq_list->head = seq; 3763c588192SMat Martineau else 3773c588192SMat Martineau seq_list->list[seq_list->tail & mask] = seq; 3783c588192SMat Martineau 3793c588192SMat Martineau seq_list->tail = seq; 3803c588192SMat Martineau seq_list->list[seq & mask] = L2CAP_SEQ_LIST_TAIL; 3813c588192SMat Martineau } 3823c588192SMat Martineau 383721c4181SGustavo F. Padovan static void l2cap_chan_timeout(struct work_struct *work) 384ab07801dSGustavo F. Padovan { 385721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 386721c4181SGustavo F. Padovan chan_timer.work); 3873df91ea2SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 388ab07801dSGustavo F. Padovan int reason; 389ab07801dSGustavo F. Padovan 390e05dcc32SAndrei Emeltchenko BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 391ab07801dSGustavo F. Padovan 3923df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 3936be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 394ab07801dSGustavo F. Padovan 39589bc500eSGustavo F. Padovan if (chan->state == BT_CONNECTED || chan->state == BT_CONFIG) 396ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 39789bc500eSGustavo F. Padovan else if (chan->state == BT_CONNECT && 398ab07801dSGustavo F. Padovan chan->sec_level != BT_SECURITY_SDP) 399ab07801dSGustavo F. Padovan reason = ECONNREFUSED; 400ab07801dSGustavo F. Padovan else 401ab07801dSGustavo F. Padovan reason = ETIMEDOUT; 402ab07801dSGustavo F. Padovan 4030f852724SGustavo F. Padovan l2cap_chan_close(chan, reason); 404ab07801dSGustavo F. Padovan 4056be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 406ab07801dSGustavo F. Padovan 40780b98027SGustavo Padovan chan->ops->close(chan); 4083df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4093df91ea2SAndrei Emeltchenko 410371fd835SUlisses Furquim l2cap_chan_put(chan); 411ab07801dSGustavo F. Padovan } 412ab07801dSGustavo F. Padovan 413eef1d9b6SGustavo Padovan struct l2cap_chan *l2cap_chan_create(void) 4140a708f8fSGustavo F. Padovan { 41548454079SGustavo F. Padovan struct l2cap_chan *chan; 4160a708f8fSGustavo F. Padovan 41748454079SGustavo F. Padovan chan = kzalloc(sizeof(*chan), GFP_ATOMIC); 41848454079SGustavo F. Padovan if (!chan) 41948454079SGustavo F. Padovan return NULL; 4200a708f8fSGustavo F. Padovan 421c03b355eSAndrei Emeltchenko mutex_init(&chan->lock); 422c03b355eSAndrei Emeltchenko 423333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 42423691d75SGustavo F. Padovan list_add(&chan->global_l, &chan_list); 425333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 42623691d75SGustavo F. Padovan 427721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->chan_timer, l2cap_chan_timeout); 428ab07801dSGustavo F. Padovan 42989bc500eSGustavo F. Padovan chan->state = BT_OPEN; 43089bc500eSGustavo F. Padovan 431144ad330SSyam Sidhardhan kref_init(&chan->kref); 43271ba0e56SGustavo F. Padovan 4332827011fSMat Martineau /* This flag is cleared in l2cap_chan_ready() */ 4342827011fSMat Martineau set_bit(CONF_NOT_COMPLETE, &chan->conf_state); 4352827011fSMat Martineau 436eef1d9b6SGustavo Padovan BT_DBG("chan %p", chan); 437abc545b8SSzymon Janc 43848454079SGustavo F. Padovan return chan; 4390a708f8fSGustavo F. Padovan } 4406b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_create); 4410a708f8fSGustavo F. Padovan 442144ad330SSyam Sidhardhan static void l2cap_chan_destroy(struct kref *kref) 4436ff5abbfSGustavo F. Padovan { 444144ad330SSyam Sidhardhan struct l2cap_chan *chan = container_of(kref, struct l2cap_chan, kref); 445144ad330SSyam Sidhardhan 4464af66c69SJaganath Kanakkassery BT_DBG("chan %p", chan); 4474af66c69SJaganath Kanakkassery 448333055f2SGustavo F. Padovan write_lock(&chan_list_lock); 44923691d75SGustavo F. Padovan list_del(&chan->global_l); 450333055f2SGustavo F. Padovan write_unlock(&chan_list_lock); 45123691d75SGustavo F. Padovan 4524af66c69SJaganath Kanakkassery kfree(chan); 4536ff5abbfSGustavo F. Padovan } 4546ff5abbfSGustavo F. Padovan 45530648372SJaganath Kanakkassery void l2cap_chan_hold(struct l2cap_chan *c) 45630648372SJaganath Kanakkassery { 457144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 45830648372SJaganath Kanakkassery 459144ad330SSyam Sidhardhan kref_get(&c->kref); 46030648372SJaganath Kanakkassery } 46130648372SJaganath Kanakkassery 46230648372SJaganath Kanakkassery void l2cap_chan_put(struct l2cap_chan *c) 46330648372SJaganath Kanakkassery { 464144ad330SSyam Sidhardhan BT_DBG("chan %p orig refcnt %d", c, atomic_read(&c->kref.refcount)); 46530648372SJaganath Kanakkassery 466144ad330SSyam Sidhardhan kref_put(&c->kref, l2cap_chan_destroy); 46730648372SJaganath Kanakkassery } 4686b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_put); 46930648372SJaganath Kanakkassery 470bd4b1653SAndrei Emeltchenko void l2cap_chan_set_defaults(struct l2cap_chan *chan) 471bd4b1653SAndrei Emeltchenko { 472bd4b1653SAndrei Emeltchenko chan->fcs = L2CAP_FCS_CRC16; 473bd4b1653SAndrei Emeltchenko chan->max_tx = L2CAP_DEFAULT_MAX_TX; 474bd4b1653SAndrei Emeltchenko chan->tx_win = L2CAP_DEFAULT_TX_WINDOW; 475bd4b1653SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 4766a5e8165SJukka Rissanen chan->remote_max_tx = chan->max_tx; 4776a5e8165SJukka Rissanen chan->remote_tx_win = chan->tx_win; 478c20f8e35SMat Martineau chan->ack_win = L2CAP_DEFAULT_TX_WINDOW; 479bd4b1653SAndrei Emeltchenko chan->sec_level = BT_SECURITY_LOW; 4806a5e8165SJukka Rissanen chan->flush_to = L2CAP_DEFAULT_FLUSH_TO; 4816a5e8165SJukka Rissanen chan->retrans_timeout = L2CAP_DEFAULT_RETRANS_TO; 4826a5e8165SJukka Rissanen chan->monitor_timeout = L2CAP_DEFAULT_MONITOR_TO; 4836a5e8165SJukka Rissanen chan->conf_state = 0; 484bd4b1653SAndrei Emeltchenko 485bd4b1653SAndrei Emeltchenko set_bit(FLAG_FORCE_ACTIVE, &chan->flags); 486bd4b1653SAndrei Emeltchenko } 4876b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_set_defaults); 488bd4b1653SAndrei Emeltchenko 4890ce43ce6SJohan Hedberg static void l2cap_le_flowctl_init(struct l2cap_chan *chan) 49038319713SJohan Hedberg { 4910ce43ce6SJohan Hedberg chan->sdu = NULL; 4920ce43ce6SJohan Hedberg chan->sdu_last_frag = NULL; 4930ce43ce6SJohan Hedberg chan->sdu_len = 0; 4940cd75f7eSJohan Hedberg chan->tx_credits = 0; 495f15b8ecfSJohan Hedberg chan->rx_credits = le_max_credits; 496d1d79413SJohan Hedberg chan->mps = min_t(u16, chan->imtu, le_default_mps); 4970ce43ce6SJohan Hedberg 4980ce43ce6SJohan Hedberg skb_queue_head_init(&chan->tx_q); 49938319713SJohan Hedberg } 50038319713SJohan Hedberg 50193c3e8f5SAndrei Emeltchenko void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 5020a708f8fSGustavo F. Padovan { 5030a708f8fSGustavo F. Padovan BT_DBG("conn %p, psm 0x%2.2x, dcid 0x%4.4x", conn, 504097db76cSAndrei Emeltchenko __le16_to_cpu(chan->psm), chan->dcid); 5050a708f8fSGustavo F. Padovan 5069f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 5070a708f8fSGustavo F. Padovan 5088c1d787bSGustavo F. Padovan chan->conn = conn; 5090a708f8fSGustavo F. Padovan 5105491120eSAndrei Emeltchenko switch (chan->chan_type) { 5115491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_ORIENTED: 5120a708f8fSGustavo F. Padovan /* Alloc CID for connection-oriented socket */ 513fe4128e0SGustavo F. Padovan chan->scid = l2cap_alloc_cid(conn); 51421626e62SJohan Hedberg if (conn->hcon->type == ACL_LINK) 5150c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5165491120eSAndrei Emeltchenko break; 5175491120eSAndrei Emeltchenko 5185491120eSAndrei Emeltchenko case L2CAP_CHAN_CONN_LESS: 5190a708f8fSGustavo F. Padovan /* Connectionless socket */ 520fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_CONN_LESS; 521fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_CONN_LESS; 5220c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5235491120eSAndrei Emeltchenko break; 5245491120eSAndrei Emeltchenko 5252338a7e0SJohan Hedberg case L2CAP_CHAN_FIXED: 5262338a7e0SJohan Hedberg /* Caller will set CID and CID specific MTU values */ 527416fa752SAndrei Emeltchenko break; 528416fa752SAndrei Emeltchenko 5295491120eSAndrei Emeltchenko default: 5300a708f8fSGustavo F. Padovan /* Raw socket can send/recv signalling messages only */ 531fe4128e0SGustavo F. Padovan chan->scid = L2CAP_CID_SIGNALING; 532fe4128e0SGustavo F. Padovan chan->dcid = L2CAP_CID_SIGNALING; 5330c1bc5c6SGustavo F. Padovan chan->omtu = L2CAP_DEFAULT_MTU; 5340a708f8fSGustavo F. Padovan } 5350a708f8fSGustavo F. Padovan 5368f7975b1SAndrei Emeltchenko chan->local_id = L2CAP_BESTEFFORT_ID; 5378f7975b1SAndrei Emeltchenko chan->local_stype = L2CAP_SERV_BESTEFFORT; 5388f7975b1SAndrei Emeltchenko chan->local_msdu = L2CAP_DEFAULT_MAX_SDU_SIZE; 5398f7975b1SAndrei Emeltchenko chan->local_sdu_itime = L2CAP_DEFAULT_SDU_ITIME; 5408f7975b1SAndrei Emeltchenko chan->local_acc_lat = L2CAP_DEFAULT_ACC_LAT; 5418936fa6dSAndrei Emeltchenko chan->local_flush_to = L2CAP_EFS_DEFAULT_FLUSH_TO; 5428f7975b1SAndrei Emeltchenko 543371fd835SUlisses Furquim l2cap_chan_hold(chan); 544baa7e1faSGustavo F. Padovan 5455ee9891dSJohan Hedberg hci_conn_hold(conn->hcon); 5465ee9891dSJohan Hedberg 5473df91ea2SAndrei Emeltchenko list_add(&chan->list, &conn->chan_l); 548643162a8SAndrei Emeltchenko } 549643162a8SAndrei Emeltchenko 550466f8004SAndrei Emeltchenko void l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan) 551643162a8SAndrei Emeltchenko { 552643162a8SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 553643162a8SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 5543df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 5550a708f8fSGustavo F. Padovan } 5560a708f8fSGustavo F. Padovan 557466f8004SAndrei Emeltchenko void l2cap_chan_del(struct l2cap_chan *chan, int err) 5580a708f8fSGustavo F. Padovan { 5598c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 5600a708f8fSGustavo F. Padovan 561c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 5620a708f8fSGustavo F. Padovan 56349208c9cSGustavo F. Padovan BT_DBG("chan %p, conn %p, err %d", chan, conn, err); 5640a708f8fSGustavo F. Padovan 5650a708f8fSGustavo F. Padovan if (conn) { 56656f60984SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 567baa7e1faSGustavo F. Padovan /* Delete from channel list */ 5683df91ea2SAndrei Emeltchenko list_del(&chan->list); 5693d57dc68SGustavo F. Padovan 570371fd835SUlisses Furquim l2cap_chan_put(chan); 571baa7e1faSGustavo F. Padovan 5728c1d787bSGustavo F. Padovan chan->conn = NULL; 5733cabbfdaSAndrei Emeltchenko 5742338a7e0SJohan Hedberg if (chan->scid != L2CAP_CID_A2MP) 57576a68ba0SDavid Herrmann hci_conn_drop(conn->hcon); 57656f60984SAndrei Emeltchenko 57756f60984SAndrei Emeltchenko if (mgr && mgr->bredr_chan == chan) 57856f60984SAndrei Emeltchenko mgr->bredr_chan = NULL; 5790a708f8fSGustavo F. Padovan } 5800a708f8fSGustavo F. Padovan 581419e08c1SAndrei Emeltchenko if (chan->hs_hchan) { 582419e08c1SAndrei Emeltchenko struct hci_chan *hs_hchan = chan->hs_hchan; 583419e08c1SAndrei Emeltchenko 584419e08c1SAndrei Emeltchenko BT_DBG("chan %p disconnect hs_hchan %p", chan, hs_hchan); 585419e08c1SAndrei Emeltchenko amp_disconnect_logical_link(hs_hchan); 586419e08c1SAndrei Emeltchenko } 587419e08c1SAndrei Emeltchenko 588c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, err); 5896be36555SAndrei Emeltchenko 5902827011fSMat Martineau if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state)) 5916ff5abbfSGustavo F. Padovan return; 5922ead70b8SGustavo F. Padovan 593ee556f66SGustavo Padovan switch(chan->mode) { 594ee556f66SGustavo Padovan case L2CAP_MODE_BASIC: 595ee556f66SGustavo Padovan break; 5960a708f8fSGustavo F. Padovan 59738319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 598177f8f2bSJohan Hedberg skb_queue_purge(&chan->tx_q); 59938319713SJohan Hedberg break; 60038319713SJohan Hedberg 601ee556f66SGustavo Padovan case L2CAP_MODE_ERTM: 6021a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 6031a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 6041a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 6050a708f8fSGustavo F. Padovan 606f1c6775bSGustavo F. Padovan skb_queue_purge(&chan->srej_q); 6070a708f8fSGustavo F. Padovan 6083c588192SMat Martineau l2cap_seq_list_free(&chan->srej_list); 6093c588192SMat Martineau l2cap_seq_list_free(&chan->retrans_list); 610ee556f66SGustavo Padovan 611ee556f66SGustavo Padovan /* fall through */ 612ee556f66SGustavo Padovan 613ee556f66SGustavo Padovan case L2CAP_MODE_STREAMING: 614ee556f66SGustavo Padovan skb_queue_purge(&chan->tx_q); 615ee556f66SGustavo Padovan break; 6160a708f8fSGustavo F. Padovan } 617ee556f66SGustavo Padovan 618ee556f66SGustavo Padovan return; 6190a708f8fSGustavo F. Padovan } 6206b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_del); 6210a708f8fSGustavo F. Padovan 622387a33e3SJohan Hedberg void l2cap_conn_update_id_addr(struct hci_conn *hcon) 623387a33e3SJohan Hedberg { 624387a33e3SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 625387a33e3SJohan Hedberg struct l2cap_chan *chan; 626387a33e3SJohan Hedberg 627387a33e3SJohan Hedberg mutex_lock(&conn->chan_lock); 628387a33e3SJohan Hedberg 629387a33e3SJohan Hedberg list_for_each_entry(chan, &conn->chan_l, list) { 630387a33e3SJohan Hedberg l2cap_chan_lock(chan); 631387a33e3SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 632387a33e3SJohan Hedberg chan->dst_type = bdaddr_type(hcon, hcon->dst_type); 633387a33e3SJohan Hedberg l2cap_chan_unlock(chan); 634387a33e3SJohan Hedberg } 635387a33e3SJohan Hedberg 636387a33e3SJohan Hedberg mutex_unlock(&conn->chan_lock); 637387a33e3SJohan Hedberg } 638387a33e3SJohan Hedberg 63927e2d4c8SJohan Hedberg static void l2cap_chan_le_connect_reject(struct l2cap_chan *chan) 64027e2d4c8SJohan Hedberg { 64127e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 64227e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 64327e2d4c8SJohan Hedberg u16 result; 64427e2d4c8SJohan Hedberg 64527e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 64627e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHORIZATION; 64727e2d4c8SJohan Hedberg else 64827e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 64927e2d4c8SJohan Hedberg 65027e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 65127e2d4c8SJohan Hedberg 65227e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 65327e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 6543916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 6550cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 65627e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 65727e2d4c8SJohan Hedberg 65827e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 65927e2d4c8SJohan Hedberg &rsp); 66027e2d4c8SJohan Hedberg } 66127e2d4c8SJohan Hedberg 662791d60f7SJohan Hedberg static void l2cap_chan_connect_reject(struct l2cap_chan *chan) 663791d60f7SJohan Hedberg { 664791d60f7SJohan Hedberg struct l2cap_conn *conn = chan->conn; 665791d60f7SJohan Hedberg struct l2cap_conn_rsp rsp; 666791d60f7SJohan Hedberg u16 result; 667791d60f7SJohan Hedberg 668791d60f7SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) 669791d60f7SJohan Hedberg result = L2CAP_CR_SEC_BLOCK; 670791d60f7SJohan Hedberg else 671791d60f7SJohan Hedberg result = L2CAP_CR_BAD_PSM; 672791d60f7SJohan Hedberg 673791d60f7SJohan Hedberg l2cap_state_change(chan, BT_DISCONN); 674791d60f7SJohan Hedberg 675791d60f7SJohan Hedberg rsp.scid = cpu_to_le16(chan->dcid); 676791d60f7SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 677791d60f7SJohan Hedberg rsp.result = cpu_to_le16(result); 678dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 679791d60f7SJohan Hedberg 680791d60f7SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, sizeof(rsp), &rsp); 681791d60f7SJohan Hedberg } 682791d60f7SJohan Hedberg 6830f852724SGustavo F. Padovan void l2cap_chan_close(struct l2cap_chan *chan, int reason) 6844519de9aSGustavo F. Padovan { 6854519de9aSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 6864519de9aSGustavo F. Padovan 6877eafc59eSMarcel Holtmann BT_DBG("chan %p state %s", chan, state_to_string(chan->state)); 6884519de9aSGustavo F. Padovan 68989bc500eSGustavo F. Padovan switch (chan->state) { 6904519de9aSGustavo F. Padovan case BT_LISTEN: 691c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 6924519de9aSGustavo F. Padovan break; 6934519de9aSGustavo F. Padovan 6944519de9aSGustavo F. Padovan case BT_CONNECTED: 6954519de9aSGustavo F. Padovan case BT_CONFIG: 6967b25c9b3SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 6978d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 6985e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, reason); 6994519de9aSGustavo F. Padovan } else 7004519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7014519de9aSGustavo F. Padovan break; 7024519de9aSGustavo F. Padovan 7034519de9aSGustavo F. Padovan case BT_CONNECT2: 704791d60f7SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED) { 705791d60f7SJohan Hedberg if (conn->hcon->type == ACL_LINK) 706791d60f7SJohan Hedberg l2cap_chan_connect_reject(chan); 70727e2d4c8SJohan Hedberg else if (conn->hcon->type == LE_LINK) 70827e2d4c8SJohan Hedberg l2cap_chan_le_connect_reject(chan); 7094519de9aSGustavo F. Padovan } 7104519de9aSGustavo F. Padovan 7114519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7124519de9aSGustavo F. Padovan break; 7134519de9aSGustavo F. Padovan 7144519de9aSGustavo F. Padovan case BT_CONNECT: 7154519de9aSGustavo F. Padovan case BT_DISCONN: 7164519de9aSGustavo F. Padovan l2cap_chan_del(chan, reason); 7174519de9aSGustavo F. Padovan break; 7184519de9aSGustavo F. Padovan 7194519de9aSGustavo F. Padovan default: 720c0df7f6eSAndrei Emeltchenko chan->ops->teardown(chan, 0); 7214519de9aSGustavo F. Padovan break; 7224519de9aSGustavo F. Padovan } 7234519de9aSGustavo F. Padovan } 7246b8d4a6aSJukka Rissanen EXPORT_SYMBOL(l2cap_chan_close); 7254519de9aSGustavo F. Padovan 7264343478fSGustavo F. Padovan static inline u8 l2cap_get_auth_type(struct l2cap_chan *chan) 7270a708f8fSGustavo F. Padovan { 7286a974b50SMarcel Holtmann switch (chan->chan_type) { 7296a974b50SMarcel Holtmann case L2CAP_CHAN_RAW: 7304343478fSGustavo F. Padovan switch (chan->sec_level) { 7310a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7327d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7330a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING_MITM; 7340a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7350a708f8fSGustavo F. Padovan return HCI_AT_DEDICATED_BONDING; 7360a708f8fSGustavo F. Padovan default: 7370a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7380a708f8fSGustavo F. Padovan } 7396a974b50SMarcel Holtmann break; 7403124b843SMarcel Holtmann case L2CAP_CHAN_CONN_LESS: 741dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_3DSP)) { 7423124b843SMarcel Holtmann if (chan->sec_level == BT_SECURITY_LOW) 7433124b843SMarcel Holtmann chan->sec_level = BT_SECURITY_SDP; 7443124b843SMarcel Holtmann } 7457d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7467d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7473124b843SMarcel Holtmann return HCI_AT_NO_BONDING_MITM; 7483124b843SMarcel Holtmann else 7493124b843SMarcel Holtmann return HCI_AT_NO_BONDING; 7503124b843SMarcel Holtmann break; 7516a974b50SMarcel Holtmann case L2CAP_CHAN_CONN_ORIENTED: 752dcf4adbfSJoe Perches if (chan->psm == cpu_to_le16(L2CAP_PSM_SDP)) { 7534343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_LOW) 7544343478fSGustavo F. Padovan chan->sec_level = BT_SECURITY_SDP; 7550a708f8fSGustavo F. Padovan 7567d513e92SMarcel Holtmann if (chan->sec_level == BT_SECURITY_HIGH || 7577d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 7580a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING_MITM; 7590a708f8fSGustavo F. Padovan else 7600a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7616a974b50SMarcel Holtmann } 7626a974b50SMarcel Holtmann /* fall through */ 7636a974b50SMarcel Holtmann default: 7644343478fSGustavo F. Padovan switch (chan->sec_level) { 7650a708f8fSGustavo F. Padovan case BT_SECURITY_HIGH: 7667d513e92SMarcel Holtmann case BT_SECURITY_FIPS: 7670a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING_MITM; 7680a708f8fSGustavo F. Padovan case BT_SECURITY_MEDIUM: 7690a708f8fSGustavo F. Padovan return HCI_AT_GENERAL_BONDING; 7700a708f8fSGustavo F. Padovan default: 7710a708f8fSGustavo F. Padovan return HCI_AT_NO_BONDING; 7720a708f8fSGustavo F. Padovan } 7736a974b50SMarcel Holtmann break; 7740a708f8fSGustavo F. Padovan } 7750a708f8fSGustavo F. Padovan } 7760a708f8fSGustavo F. Padovan 7770a708f8fSGustavo F. Padovan /* Service level security */ 778e7cafc45SJohan Hedberg int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator) 7790a708f8fSGustavo F. Padovan { 7808c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 7810a708f8fSGustavo F. Padovan __u8 auth_type; 7820a708f8fSGustavo F. Padovan 783a17de2feSJohan Hedberg if (conn->hcon->type == LE_LINK) 784a17de2feSJohan Hedberg return smp_conn_security(conn->hcon, chan->sec_level); 785a17de2feSJohan Hedberg 7864343478fSGustavo F. Padovan auth_type = l2cap_get_auth_type(chan); 7870a708f8fSGustavo F. Padovan 788e7cafc45SJohan Hedberg return hci_conn_security(conn->hcon, chan->sec_level, auth_type, 789e7cafc45SJohan Hedberg initiator); 7900a708f8fSGustavo F. Padovan } 7910a708f8fSGustavo F. Padovan 792b5ad8b7fSJohannes Berg static u8 l2cap_get_ident(struct l2cap_conn *conn) 7930a708f8fSGustavo F. Padovan { 7940a708f8fSGustavo F. Padovan u8 id; 7950a708f8fSGustavo F. Padovan 7960a708f8fSGustavo F. Padovan /* Get next available identificator. 7970a708f8fSGustavo F. Padovan * 1 - 128 are used by kernel. 7980a708f8fSGustavo F. Padovan * 129 - 199 are reserved. 7990a708f8fSGustavo F. Padovan * 200 - 254 are used by utilities like l2ping, etc. 8000a708f8fSGustavo F. Padovan */ 8010a708f8fSGustavo F. Padovan 8025a54e7c8SMarcel Holtmann mutex_lock(&conn->ident_lock); 8030a708f8fSGustavo F. Padovan 8040a708f8fSGustavo F. Padovan if (++conn->tx_ident > 128) 8050a708f8fSGustavo F. Padovan conn->tx_ident = 1; 8060a708f8fSGustavo F. Padovan 8070a708f8fSGustavo F. Padovan id = conn->tx_ident; 8080a708f8fSGustavo F. Padovan 8095a54e7c8SMarcel Holtmann mutex_unlock(&conn->ident_lock); 8100a708f8fSGustavo F. Padovan 8110a708f8fSGustavo F. Padovan return id; 8120a708f8fSGustavo F. Padovan } 8130a708f8fSGustavo F. Padovan 8142d792818SGustavo Padovan static void l2cap_send_cmd(struct l2cap_conn *conn, u8 ident, u8 code, u16 len, 8152d792818SGustavo Padovan void *data) 8160a708f8fSGustavo F. Padovan { 8170a708f8fSGustavo F. Padovan struct sk_buff *skb = l2cap_build_cmd(conn, code, ident, len, data); 8180a708f8fSGustavo F. Padovan u8 flags; 8190a708f8fSGustavo F. Padovan 8200a708f8fSGustavo F. Padovan BT_DBG("code 0x%2.2x", code); 8210a708f8fSGustavo F. Padovan 8220a708f8fSGustavo F. Padovan if (!skb) 8230a708f8fSGustavo F. Padovan return; 8240a708f8fSGustavo F. Padovan 8250a708f8fSGustavo F. Padovan if (lmp_no_flush_capable(conn->hcon->hdev)) 8260a708f8fSGustavo F. Padovan flags = ACL_START_NO_FLUSH; 8270a708f8fSGustavo F. Padovan else 8280a708f8fSGustavo F. Padovan flags = ACL_START; 8290a708f8fSGustavo F. Padovan 83014b12d0bSJaikumar Ganesh bt_cb(skb)->force_active = BT_POWER_FORCE_ACTIVE_ON; 8315e59b791SLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 83214b12d0bSJaikumar Ganesh 83373d80debSLuiz Augusto von Dentz hci_send_acl(conn->hchan, skb, flags); 8340a708f8fSGustavo F. Padovan } 8350a708f8fSGustavo F. Padovan 83602b0fbb9SMat Martineau static bool __chan_is_moving(struct l2cap_chan *chan) 83702b0fbb9SMat Martineau { 83802b0fbb9SMat Martineau return chan->move_state != L2CAP_MOVE_STABLE && 83902b0fbb9SMat Martineau chan->move_state != L2CAP_MOVE_WAIT_PREPARE; 84002b0fbb9SMat Martineau } 84102b0fbb9SMat Martineau 84273d80debSLuiz Augusto von Dentz static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb) 84373d80debSLuiz Augusto von Dentz { 84473d80debSLuiz Augusto von Dentz struct hci_conn *hcon = chan->conn->hcon; 84573d80debSLuiz Augusto von Dentz u16 flags; 84673d80debSLuiz Augusto von Dentz 84773d80debSLuiz Augusto von Dentz BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len, 84873d80debSLuiz Augusto von Dentz skb->priority); 84973d80debSLuiz Augusto von Dentz 850d5f8a75dSMat Martineau if (chan->hs_hcon && !__chan_is_moving(chan)) { 851d5f8a75dSMat Martineau if (chan->hs_hchan) 852d5f8a75dSMat Martineau hci_send_acl(chan->hs_hchan, skb, ACL_COMPLETE); 853d5f8a75dSMat Martineau else 854d5f8a75dSMat Martineau kfree_skb(skb); 855d5f8a75dSMat Martineau 856d5f8a75dSMat Martineau return; 857d5f8a75dSMat Martineau } 858d5f8a75dSMat Martineau 85973d80debSLuiz Augusto von Dentz if (!test_bit(FLAG_FLUSHABLE, &chan->flags) && 86073d80debSLuiz Augusto von Dentz lmp_no_flush_capable(hcon->hdev)) 86173d80debSLuiz Augusto von Dentz flags = ACL_START_NO_FLUSH; 86273d80debSLuiz Augusto von Dentz else 86373d80debSLuiz Augusto von Dentz flags = ACL_START; 86473d80debSLuiz Augusto von Dentz 86573d80debSLuiz Augusto von Dentz bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags); 86673d80debSLuiz Augusto von Dentz hci_send_acl(chan->conn->hchan, skb, flags); 8670a708f8fSGustavo F. Padovan } 8680a708f8fSGustavo F. Padovan 869b5c6aaedSMat Martineau static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control) 870b5c6aaedSMat Martineau { 871b5c6aaedSMat Martineau control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT; 872b5c6aaedSMat Martineau control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT; 873b5c6aaedSMat Martineau 874b5c6aaedSMat Martineau if (enh & L2CAP_CTRL_FRAME_TYPE) { 875b5c6aaedSMat Martineau /* S-Frame */ 876b5c6aaedSMat Martineau control->sframe = 1; 877b5c6aaedSMat Martineau control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT; 878b5c6aaedSMat Martineau control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT; 879b5c6aaedSMat Martineau 880b5c6aaedSMat Martineau control->sar = 0; 881b5c6aaedSMat Martineau control->txseq = 0; 882b5c6aaedSMat Martineau } else { 883b5c6aaedSMat Martineau /* I-Frame */ 884b5c6aaedSMat Martineau control->sframe = 0; 885b5c6aaedSMat Martineau control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT; 886b5c6aaedSMat Martineau control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT; 887b5c6aaedSMat Martineau 888b5c6aaedSMat Martineau control->poll = 0; 889b5c6aaedSMat Martineau control->super = 0; 890b5c6aaedSMat Martineau } 891b5c6aaedSMat Martineau } 892b5c6aaedSMat Martineau 893b5c6aaedSMat Martineau static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control) 894b5c6aaedSMat Martineau { 895b5c6aaedSMat Martineau control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT; 896b5c6aaedSMat Martineau control->final = (ext & L2CAP_EXT_CTRL_FINAL) >> L2CAP_EXT_CTRL_FINAL_SHIFT; 897b5c6aaedSMat Martineau 898b5c6aaedSMat Martineau if (ext & L2CAP_EXT_CTRL_FRAME_TYPE) { 899b5c6aaedSMat Martineau /* S-Frame */ 900b5c6aaedSMat Martineau control->sframe = 1; 901b5c6aaedSMat Martineau control->poll = (ext & L2CAP_EXT_CTRL_POLL) >> L2CAP_EXT_CTRL_POLL_SHIFT; 902b5c6aaedSMat Martineau control->super = (ext & L2CAP_EXT_CTRL_SUPERVISE) >> L2CAP_EXT_CTRL_SUPER_SHIFT; 903b5c6aaedSMat Martineau 904b5c6aaedSMat Martineau control->sar = 0; 905b5c6aaedSMat Martineau control->txseq = 0; 906b5c6aaedSMat Martineau } else { 907b5c6aaedSMat Martineau /* I-Frame */ 908b5c6aaedSMat Martineau control->sframe = 0; 909b5c6aaedSMat Martineau control->sar = (ext & L2CAP_EXT_CTRL_SAR) >> L2CAP_EXT_CTRL_SAR_SHIFT; 910b5c6aaedSMat Martineau control->txseq = (ext & L2CAP_EXT_CTRL_TXSEQ) >> L2CAP_EXT_CTRL_TXSEQ_SHIFT; 911b5c6aaedSMat Martineau 912b5c6aaedSMat Martineau control->poll = 0; 913b5c6aaedSMat Martineau control->super = 0; 914b5c6aaedSMat Martineau } 915b5c6aaedSMat Martineau } 916b5c6aaedSMat Martineau 917b5c6aaedSMat Martineau static inline void __unpack_control(struct l2cap_chan *chan, 918b5c6aaedSMat Martineau struct sk_buff *skb) 919b5c6aaedSMat Martineau { 920b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 921b5c6aaedSMat Martineau __unpack_extended_control(get_unaligned_le32(skb->data), 922b5c6aaedSMat Martineau &bt_cb(skb)->control); 923cec8ab6eSMat Martineau skb_pull(skb, L2CAP_EXT_CTRL_SIZE); 924b5c6aaedSMat Martineau } else { 925b5c6aaedSMat Martineau __unpack_enhanced_control(get_unaligned_le16(skb->data), 926b5c6aaedSMat Martineau &bt_cb(skb)->control); 927cec8ab6eSMat Martineau skb_pull(skb, L2CAP_ENH_CTRL_SIZE); 928b5c6aaedSMat Martineau } 929b5c6aaedSMat Martineau } 930b5c6aaedSMat Martineau 931b5c6aaedSMat Martineau static u32 __pack_extended_control(struct l2cap_ctrl *control) 932b5c6aaedSMat Martineau { 933b5c6aaedSMat Martineau u32 packed; 934b5c6aaedSMat Martineau 935b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_EXT_CTRL_REQSEQ_SHIFT; 936b5c6aaedSMat Martineau packed |= control->final << L2CAP_EXT_CTRL_FINAL_SHIFT; 937b5c6aaedSMat Martineau 938b5c6aaedSMat Martineau if (control->sframe) { 939b5c6aaedSMat Martineau packed |= control->poll << L2CAP_EXT_CTRL_POLL_SHIFT; 940b5c6aaedSMat Martineau packed |= control->super << L2CAP_EXT_CTRL_SUPER_SHIFT; 941b5c6aaedSMat Martineau packed |= L2CAP_EXT_CTRL_FRAME_TYPE; 942b5c6aaedSMat Martineau } else { 943b5c6aaedSMat Martineau packed |= control->sar << L2CAP_EXT_CTRL_SAR_SHIFT; 944b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_EXT_CTRL_TXSEQ_SHIFT; 945b5c6aaedSMat Martineau } 946b5c6aaedSMat Martineau 947b5c6aaedSMat Martineau return packed; 948b5c6aaedSMat Martineau } 949b5c6aaedSMat Martineau 950b5c6aaedSMat Martineau static u16 __pack_enhanced_control(struct l2cap_ctrl *control) 951b5c6aaedSMat Martineau { 952b5c6aaedSMat Martineau u16 packed; 953b5c6aaedSMat Martineau 954b5c6aaedSMat Martineau packed = control->reqseq << L2CAP_CTRL_REQSEQ_SHIFT; 955b5c6aaedSMat Martineau packed |= control->final << L2CAP_CTRL_FINAL_SHIFT; 956b5c6aaedSMat Martineau 957b5c6aaedSMat Martineau if (control->sframe) { 958b5c6aaedSMat Martineau packed |= control->poll << L2CAP_CTRL_POLL_SHIFT; 959b5c6aaedSMat Martineau packed |= control->super << L2CAP_CTRL_SUPER_SHIFT; 960b5c6aaedSMat Martineau packed |= L2CAP_CTRL_FRAME_TYPE; 961b5c6aaedSMat Martineau } else { 962b5c6aaedSMat Martineau packed |= control->sar << L2CAP_CTRL_SAR_SHIFT; 963b5c6aaedSMat Martineau packed |= control->txseq << L2CAP_CTRL_TXSEQ_SHIFT; 964b5c6aaedSMat Martineau } 965b5c6aaedSMat Martineau 966b5c6aaedSMat Martineau return packed; 967b5c6aaedSMat Martineau } 968b5c6aaedSMat Martineau 969b5c6aaedSMat Martineau static inline void __pack_control(struct l2cap_chan *chan, 970b5c6aaedSMat Martineau struct l2cap_ctrl *control, 971b5c6aaedSMat Martineau struct sk_buff *skb) 972b5c6aaedSMat Martineau { 973b5c6aaedSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 974b5c6aaedSMat Martineau put_unaligned_le32(__pack_extended_control(control), 975b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 976b5c6aaedSMat Martineau } else { 977b5c6aaedSMat Martineau put_unaligned_le16(__pack_enhanced_control(control), 978b5c6aaedSMat Martineau skb->data + L2CAP_HDR_SIZE); 979b5c6aaedSMat Martineau } 980b5c6aaedSMat Martineau } 981b5c6aaedSMat Martineau 982ba7aa64fSGustavo Padovan static inline unsigned int __ertm_hdr_size(struct l2cap_chan *chan) 983ba7aa64fSGustavo Padovan { 984ba7aa64fSGustavo Padovan if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 985ba7aa64fSGustavo Padovan return L2CAP_EXT_HDR_SIZE; 986ba7aa64fSGustavo Padovan else 987ba7aa64fSGustavo Padovan return L2CAP_ENH_HDR_SIZE; 988ba7aa64fSGustavo Padovan } 989ba7aa64fSGustavo Padovan 990a67d7f6fSMat Martineau static struct sk_buff *l2cap_create_sframe_pdu(struct l2cap_chan *chan, 991a67d7f6fSMat Martineau u32 control) 9920a708f8fSGustavo F. Padovan { 9930a708f8fSGustavo F. Padovan struct sk_buff *skb; 9940a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 995ba7aa64fSGustavo Padovan int hlen = __ertm_hdr_size(chan); 9960a708f8fSGustavo F. Padovan 9970a708f8fSGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 99803a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 9990a708f8fSGustavo F. Padovan 1000a67d7f6fSMat Martineau skb = bt_skb_alloc(hlen, GFP_KERNEL); 10010a708f8fSGustavo F. Padovan 10020a708f8fSGustavo F. Padovan if (!skb) 1003a67d7f6fSMat Martineau return ERR_PTR(-ENOMEM); 10040a708f8fSGustavo F. Padovan 10050a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 10060a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(hlen - L2CAP_HDR_SIZE); 1007fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 100888843ab0SAndrei Emeltchenko 1009a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1010a67d7f6fSMat Martineau put_unaligned_le32(control, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 1011a67d7f6fSMat Martineau else 1012a67d7f6fSMat Martineau put_unaligned_le16(control, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 10130a708f8fSGustavo F. Padovan 101447d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 1015a67d7f6fSMat Martineau u16 fcs = crc16(0, (u8 *)skb->data, skb->len); 101603a51213SAndrei Emeltchenko put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 10170a708f8fSGustavo F. Padovan } 10180a708f8fSGustavo F. Padovan 101973d80debSLuiz Augusto von Dentz skb->priority = HCI_PRIO_MAX; 1020a67d7f6fSMat Martineau return skb; 1021a67d7f6fSMat Martineau } 1022a67d7f6fSMat Martineau 1023a67d7f6fSMat Martineau static void l2cap_send_sframe(struct l2cap_chan *chan, 1024a67d7f6fSMat Martineau struct l2cap_ctrl *control) 1025a67d7f6fSMat Martineau { 1026a67d7f6fSMat Martineau struct sk_buff *skb; 1027a67d7f6fSMat Martineau u32 control_field; 1028a67d7f6fSMat Martineau 1029a67d7f6fSMat Martineau BT_DBG("chan %p, control %p", chan, control); 1030a67d7f6fSMat Martineau 1031a67d7f6fSMat Martineau if (!control->sframe) 1032a67d7f6fSMat Martineau return; 1033a67d7f6fSMat Martineau 1034b99e13adSMat Martineau if (__chan_is_moving(chan)) 1035b99e13adSMat Martineau return; 1036b99e13adSMat Martineau 1037a67d7f6fSMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state) && 1038a67d7f6fSMat Martineau !control->poll) 1039a67d7f6fSMat Martineau control->final = 1; 1040a67d7f6fSMat Martineau 1041a67d7f6fSMat Martineau if (control->super == L2CAP_SUPER_RR) 1042a67d7f6fSMat Martineau clear_bit(CONN_RNR_SENT, &chan->conn_state); 1043a67d7f6fSMat Martineau else if (control->super == L2CAP_SUPER_RNR) 1044a67d7f6fSMat Martineau set_bit(CONN_RNR_SENT, &chan->conn_state); 1045a67d7f6fSMat Martineau 1046a67d7f6fSMat Martineau if (control->super != L2CAP_SUPER_SREJ) { 1047a67d7f6fSMat Martineau chan->last_acked_seq = control->reqseq; 1048a67d7f6fSMat Martineau __clear_ack_timer(chan); 1049a67d7f6fSMat Martineau } 1050a67d7f6fSMat Martineau 1051a67d7f6fSMat Martineau BT_DBG("reqseq %d, final %d, poll %d, super %d", control->reqseq, 1052a67d7f6fSMat Martineau control->final, control->poll, control->super); 1053a67d7f6fSMat Martineau 1054a67d7f6fSMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 1055a67d7f6fSMat Martineau control_field = __pack_extended_control(control); 1056a67d7f6fSMat Martineau else 1057a67d7f6fSMat Martineau control_field = __pack_enhanced_control(control); 1058a67d7f6fSMat Martineau 1059a67d7f6fSMat Martineau skb = l2cap_create_sframe_pdu(chan, control_field); 1060a67d7f6fSMat Martineau if (!IS_ERR(skb)) 106173d80debSLuiz Augusto von Dentz l2cap_do_send(chan, skb); 10620a708f8fSGustavo F. Padovan } 10630a708f8fSGustavo F. Padovan 1064c9e3d5e0SMat Martineau static void l2cap_send_rr_or_rnr(struct l2cap_chan *chan, bool poll) 10650a708f8fSGustavo F. Padovan { 1066c9e3d5e0SMat Martineau struct l2cap_ctrl control; 10670a708f8fSGustavo F. Padovan 1068c9e3d5e0SMat Martineau BT_DBG("chan %p, poll %d", chan, poll); 1069c9e3d5e0SMat Martineau 1070c9e3d5e0SMat Martineau memset(&control, 0, sizeof(control)); 1071c9e3d5e0SMat Martineau control.sframe = 1; 1072c9e3d5e0SMat Martineau control.poll = poll; 1073c9e3d5e0SMat Martineau 1074c9e3d5e0SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 1075c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RNR; 1076c9e3d5e0SMat Martineau else 1077c9e3d5e0SMat Martineau control.super = L2CAP_SUPER_RR; 1078c9e3d5e0SMat Martineau 1079c9e3d5e0SMat Martineau control.reqseq = chan->buffer_seq; 1080c9e3d5e0SMat Martineau l2cap_send_sframe(chan, &control); 10810a708f8fSGustavo F. Padovan } 10820a708f8fSGustavo F. Padovan 1083b4450035SGustavo F. Padovan static inline int __l2cap_no_conn_pending(struct l2cap_chan *chan) 10840a708f8fSGustavo F. Padovan { 10855ff6f34dSJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 10865ff6f34dSJohan Hedberg return true; 10875ff6f34dSJohan Hedberg 1088c1360a1cSGustavo F. Padovan return !test_bit(CONF_CONNECT_PEND, &chan->conf_state); 10890a708f8fSGustavo F. Padovan } 10900a708f8fSGustavo F. Padovan 109193c3e8f5SAndrei Emeltchenko static bool __amp_capable(struct l2cap_chan *chan) 109293c3e8f5SAndrei Emeltchenko { 109393c3e8f5SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 10941df7b17aSMarcel Holtmann struct hci_dev *hdev; 10951df7b17aSMarcel Holtmann bool amp_available = false; 109693c3e8f5SAndrei Emeltchenko 10971df7b17aSMarcel Holtmann if (!conn->hs_enabled) 10981df7b17aSMarcel Holtmann return false; 10991df7b17aSMarcel Holtmann 11001df7b17aSMarcel Holtmann if (!(conn->fixed_chan_mask & L2CAP_FC_A2MP)) 11011df7b17aSMarcel Holtmann return false; 11021df7b17aSMarcel Holtmann 11031df7b17aSMarcel Holtmann read_lock(&hci_dev_list_lock); 11041df7b17aSMarcel Holtmann list_for_each_entry(hdev, &hci_dev_list, list) { 11051df7b17aSMarcel Holtmann if (hdev->amp_type != AMP_TYPE_BREDR && 11061df7b17aSMarcel Holtmann test_bit(HCI_UP, &hdev->flags)) { 11071df7b17aSMarcel Holtmann amp_available = true; 11081df7b17aSMarcel Holtmann break; 11091df7b17aSMarcel Holtmann } 11101df7b17aSMarcel Holtmann } 11111df7b17aSMarcel Holtmann read_unlock(&hci_dev_list_lock); 11121df7b17aSMarcel Holtmann 11131df7b17aSMarcel Holtmann if (chan->chan_policy == BT_CHANNEL_POLICY_AMP_PREFERRED) 11141df7b17aSMarcel Holtmann return amp_available; 1115848566b3SMarcel Holtmann 111693c3e8f5SAndrei Emeltchenko return false; 111793c3e8f5SAndrei Emeltchenko } 111893c3e8f5SAndrei Emeltchenko 11195ce66b59SAndrei Emeltchenko static bool l2cap_check_efs(struct l2cap_chan *chan) 11205ce66b59SAndrei Emeltchenko { 11215ce66b59SAndrei Emeltchenko /* Check EFS parameters */ 11225ce66b59SAndrei Emeltchenko return true; 11235ce66b59SAndrei Emeltchenko } 11245ce66b59SAndrei Emeltchenko 11252766be48SAndrei Emeltchenko void l2cap_send_conn_req(struct l2cap_chan *chan) 11269b27f350SAndrei Emeltchenko { 11279b27f350SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 11289b27f350SAndrei Emeltchenko struct l2cap_conn_req req; 11299b27f350SAndrei Emeltchenko 11309b27f350SAndrei Emeltchenko req.scid = cpu_to_le16(chan->scid); 11319b27f350SAndrei Emeltchenko req.psm = chan->psm; 11329b27f350SAndrei Emeltchenko 11339b27f350SAndrei Emeltchenko chan->ident = l2cap_get_ident(conn); 11349b27f350SAndrei Emeltchenko 11359b27f350SAndrei Emeltchenko set_bit(CONF_CONNECT_PEND, &chan->conf_state); 11369b27f350SAndrei Emeltchenko 11379b27f350SAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_REQ, sizeof(req), &req); 11389b27f350SAndrei Emeltchenko } 11399b27f350SAndrei Emeltchenko 11408eb200bdSMat Martineau static void l2cap_send_create_chan_req(struct l2cap_chan *chan, u8 amp_id) 11418eb200bdSMat Martineau { 11428eb200bdSMat Martineau struct l2cap_create_chan_req req; 11438eb200bdSMat Martineau req.scid = cpu_to_le16(chan->scid); 11448eb200bdSMat Martineau req.psm = chan->psm; 11458eb200bdSMat Martineau req.amp_id = amp_id; 11468eb200bdSMat Martineau 11478eb200bdSMat Martineau chan->ident = l2cap_get_ident(chan->conn); 11488eb200bdSMat Martineau 11498eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_REQ, 11508eb200bdSMat Martineau sizeof(req), &req); 11518eb200bdSMat Martineau } 11528eb200bdSMat Martineau 115302b0fbb9SMat Martineau static void l2cap_move_setup(struct l2cap_chan *chan) 115402b0fbb9SMat Martineau { 115502b0fbb9SMat Martineau struct sk_buff *skb; 115602b0fbb9SMat Martineau 115702b0fbb9SMat Martineau BT_DBG("chan %p", chan); 115802b0fbb9SMat Martineau 115902b0fbb9SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 116002b0fbb9SMat Martineau return; 116102b0fbb9SMat Martineau 116202b0fbb9SMat Martineau __clear_retrans_timer(chan); 116302b0fbb9SMat Martineau __clear_monitor_timer(chan); 116402b0fbb9SMat Martineau __clear_ack_timer(chan); 116502b0fbb9SMat Martineau 116602b0fbb9SMat Martineau chan->retry_count = 0; 116702b0fbb9SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 116802b0fbb9SMat Martineau if (bt_cb(skb)->control.retries) 116902b0fbb9SMat Martineau bt_cb(skb)->control.retries = 1; 117002b0fbb9SMat Martineau else 117102b0fbb9SMat Martineau break; 117202b0fbb9SMat Martineau } 117302b0fbb9SMat Martineau 117402b0fbb9SMat Martineau chan->expected_tx_seq = chan->buffer_seq; 117502b0fbb9SMat Martineau 117602b0fbb9SMat Martineau clear_bit(CONN_REJ_ACT, &chan->conn_state); 117702b0fbb9SMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 117802b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 117902b0fbb9SMat Martineau l2cap_seq_list_clear(&chan->srej_list); 118002b0fbb9SMat Martineau skb_queue_purge(&chan->srej_q); 118102b0fbb9SMat Martineau 118202b0fbb9SMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 118302b0fbb9SMat Martineau chan->rx_state = L2CAP_RX_STATE_MOVE; 118402b0fbb9SMat Martineau 118502b0fbb9SMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 118602b0fbb9SMat Martineau } 118702b0fbb9SMat Martineau 11885f3847a4SMat Martineau static void l2cap_move_done(struct l2cap_chan *chan) 11895f3847a4SMat Martineau { 11905f3847a4SMat Martineau u8 move_role = chan->move_role; 11915f3847a4SMat Martineau BT_DBG("chan %p", chan); 11925f3847a4SMat Martineau 11935f3847a4SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 11945f3847a4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 11955f3847a4SMat Martineau 11965f3847a4SMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 11975f3847a4SMat Martineau return; 11985f3847a4SMat Martineau 11995f3847a4SMat Martineau switch (move_role) { 12005f3847a4SMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 12015f3847a4SMat Martineau l2cap_tx(chan, NULL, NULL, L2CAP_EV_EXPLICIT_POLL); 12025f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_F; 12035f3847a4SMat Martineau break; 12045f3847a4SMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 12055f3847a4SMat Martineau chan->rx_state = L2CAP_RX_STATE_WAIT_P; 12065f3847a4SMat Martineau break; 12075f3847a4SMat Martineau } 12085f3847a4SMat Martineau } 12095f3847a4SMat Martineau 12109f0caeb1SVinicius Costa Gomes static void l2cap_chan_ready(struct l2cap_chan *chan) 12119f0caeb1SVinicius Costa Gomes { 12122827011fSMat Martineau /* This clears all conf flags, including CONF_NOT_COMPLETE */ 12139f0caeb1SVinicius Costa Gomes chan->conf_state = 0; 12149f0caeb1SVinicius Costa Gomes __clear_chan_timer(chan); 12159f0caeb1SVinicius Costa Gomes 12160ce43ce6SJohan Hedberg if (chan->mode == L2CAP_MODE_LE_FLOWCTL && !chan->tx_credits) 12170ce43ce6SJohan Hedberg chan->ops->suspend(chan); 1218177f8f2bSJohan Hedberg 121954a59aa2SAndrei Emeltchenko chan->state = BT_CONNECTED; 12209f0caeb1SVinicius Costa Gomes 122154a59aa2SAndrei Emeltchenko chan->ops->ready(chan); 12229f0caeb1SVinicius Costa Gomes } 12239f0caeb1SVinicius Costa Gomes 1224f1496deeSJohan Hedberg static void l2cap_le_connect(struct l2cap_chan *chan) 1225f1496deeSJohan Hedberg { 1226f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1227f1496deeSJohan Hedberg struct l2cap_le_conn_req req; 1228f1496deeSJohan Hedberg 1229595177f3SJohan Hedberg if (test_and_set_bit(FLAG_LE_CONN_REQ_SENT, &chan->flags)) 1230595177f3SJohan Hedberg return; 1231595177f3SJohan Hedberg 1232f1496deeSJohan Hedberg req.psm = chan->psm; 1233f1496deeSJohan Hedberg req.scid = cpu_to_le16(chan->scid); 1234f1496deeSJohan Hedberg req.mtu = cpu_to_le16(chan->imtu); 12353916aed8SJohan Hedberg req.mps = cpu_to_le16(chan->mps); 12360cd75f7eSJohan Hedberg req.credits = cpu_to_le16(chan->rx_credits); 1237f1496deeSJohan Hedberg 1238f1496deeSJohan Hedberg chan->ident = l2cap_get_ident(conn); 1239f1496deeSJohan Hedberg 1240f1496deeSJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_REQ, 1241f1496deeSJohan Hedberg sizeof(req), &req); 1242f1496deeSJohan Hedberg } 1243f1496deeSJohan Hedberg 1244f1496deeSJohan Hedberg static void l2cap_le_start(struct l2cap_chan *chan) 1245f1496deeSJohan Hedberg { 1246f1496deeSJohan Hedberg struct l2cap_conn *conn = chan->conn; 1247f1496deeSJohan Hedberg 1248f1496deeSJohan Hedberg if (!smp_conn_security(conn->hcon, chan->sec_level)) 1249f1496deeSJohan Hedberg return; 1250f1496deeSJohan Hedberg 1251f1496deeSJohan Hedberg if (!chan->psm) { 1252f1496deeSJohan Hedberg l2cap_chan_ready(chan); 1253f1496deeSJohan Hedberg return; 1254f1496deeSJohan Hedberg } 1255f1496deeSJohan Hedberg 1256f1496deeSJohan Hedberg if (chan->state == BT_CONNECT) 1257f1496deeSJohan Hedberg l2cap_le_connect(chan); 1258f1496deeSJohan Hedberg } 1259f1496deeSJohan Hedberg 126093c3e8f5SAndrei Emeltchenko static void l2cap_start_connection(struct l2cap_chan *chan) 126193c3e8f5SAndrei Emeltchenko { 126293c3e8f5SAndrei Emeltchenko if (__amp_capable(chan)) { 126393c3e8f5SAndrei Emeltchenko BT_DBG("chan %p AMP capable: discover AMPs", chan); 126493c3e8f5SAndrei Emeltchenko a2mp_discover_amp(chan); 1265f1496deeSJohan Hedberg } else if (chan->conn->hcon->type == LE_LINK) { 1266f1496deeSJohan Hedberg l2cap_le_start(chan); 126793c3e8f5SAndrei Emeltchenko } else { 126893c3e8f5SAndrei Emeltchenko l2cap_send_conn_req(chan); 126993c3e8f5SAndrei Emeltchenko } 127093c3e8f5SAndrei Emeltchenko } 127193c3e8f5SAndrei Emeltchenko 1272fc7f8a7eSGustavo F. Padovan static void l2cap_do_start(struct l2cap_chan *chan) 12730a708f8fSGustavo F. Padovan { 12748c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 12750a708f8fSGustavo F. Padovan 12769f0caeb1SVinicius Costa Gomes if (conn->hcon->type == LE_LINK) { 127796ac34fbSJohan Hedberg l2cap_le_start(chan); 12789f0caeb1SVinicius Costa Gomes return; 12799f0caeb1SVinicius Costa Gomes } 12809f0caeb1SVinicius Costa Gomes 12810a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) { 12820a708f8fSGustavo F. Padovan if (!(conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE)) 12830a708f8fSGustavo F. Padovan return; 12840a708f8fSGustavo F. Padovan 1285e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true) && 128693c3e8f5SAndrei Emeltchenko __l2cap_no_conn_pending(chan)) { 128793c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 128893c3e8f5SAndrei Emeltchenko } 12890a708f8fSGustavo F. Padovan } else { 12900a708f8fSGustavo F. Padovan struct l2cap_info_req req; 1291dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 12920a708f8fSGustavo F. Padovan 12930a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 12940a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 12950a708f8fSGustavo F. Padovan 1296ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 12970a708f8fSGustavo F. Padovan 12982d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 12992d792818SGustavo Padovan sizeof(req), &req); 13000a708f8fSGustavo F. Padovan } 13010a708f8fSGustavo F. Padovan } 13020a708f8fSGustavo F. Padovan 13030a708f8fSGustavo F. Padovan static inline int l2cap_mode_supported(__u8 mode, __u32 feat_mask) 13040a708f8fSGustavo F. Padovan { 13050a708f8fSGustavo F. Padovan u32 local_feat_mask = l2cap_feat_mask; 13060a708f8fSGustavo F. Padovan if (!disable_ertm) 13070a708f8fSGustavo F. Padovan local_feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING; 13080a708f8fSGustavo F. Padovan 13090a708f8fSGustavo F. Padovan switch (mode) { 13100a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 13110a708f8fSGustavo F. Padovan return L2CAP_FEAT_ERTM & feat_mask & local_feat_mask; 13120a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 13130a708f8fSGustavo F. Padovan return L2CAP_FEAT_STREAMING & feat_mask & local_feat_mask; 13140a708f8fSGustavo F. Padovan default: 13150a708f8fSGustavo F. Padovan return 0x00; 13160a708f8fSGustavo F. Padovan } 13170a708f8fSGustavo F. Padovan } 13180a708f8fSGustavo F. Padovan 13195e4e3972SAndrei Emeltchenko static void l2cap_send_disconn_req(struct l2cap_chan *chan, int err) 13200a708f8fSGustavo F. Padovan { 13215e4e3972SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 13220a708f8fSGustavo F. Padovan struct l2cap_disconn_req req; 13230a708f8fSGustavo F. Padovan 13240a708f8fSGustavo F. Padovan if (!conn) 13250a708f8fSGustavo F. Padovan return; 13260a708f8fSGustavo F. Padovan 1327aad3d0e3SAndrei Emeltchenko if (chan->mode == L2CAP_MODE_ERTM && chan->state == BT_CONNECTED) { 13281a09bcb9SGustavo F. Padovan __clear_retrans_timer(chan); 13291a09bcb9SGustavo F. Padovan __clear_monitor_timer(chan); 13301a09bcb9SGustavo F. Padovan __clear_ack_timer(chan); 13310a708f8fSGustavo F. Padovan } 13320a708f8fSGustavo F. Padovan 13332338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1334d117773cSGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 1335416fa752SAndrei Emeltchenko return; 1336416fa752SAndrei Emeltchenko } 1337416fa752SAndrei Emeltchenko 1338fe4128e0SGustavo F. Padovan req.dcid = cpu_to_le16(chan->dcid); 1339fe4128e0SGustavo F. Padovan req.scid = cpu_to_le16(chan->scid); 13402d792818SGustavo Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_DISCONN_REQ, 13412d792818SGustavo Padovan sizeof(req), &req); 13420a708f8fSGustavo F. Padovan 1343f8e73017SGustavo Padovan l2cap_state_change_and_error(chan, BT_DISCONN, err); 13440a708f8fSGustavo F. Padovan } 13450a708f8fSGustavo F. Padovan 13460a708f8fSGustavo F. Padovan /* ---- L2CAP connections ---- */ 13470a708f8fSGustavo F. Padovan static void l2cap_conn_start(struct l2cap_conn *conn) 13480a708f8fSGustavo F. Padovan { 13493df91ea2SAndrei Emeltchenko struct l2cap_chan *chan, *tmp; 13500a708f8fSGustavo F. Padovan 13510a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 13520a708f8fSGustavo F. Padovan 13533df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 13540a708f8fSGustavo F. Padovan 13553df91ea2SAndrei Emeltchenko list_for_each_entry_safe(chan, tmp, &conn->chan_l, list) { 13566be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 13570a708f8fSGustavo F. Padovan 1358715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 13596be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13600a708f8fSGustavo F. Padovan continue; 13610a708f8fSGustavo F. Padovan } 13620a708f8fSGustavo F. Padovan 136389bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 1364e7cafc45SJohan Hedberg if (!l2cap_chan_check_security(chan, true) || 1365b4450035SGustavo F. Padovan !__l2cap_no_conn_pending(chan)) { 13666be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13670a708f8fSGustavo F. Padovan continue; 13680a708f8fSGustavo F. Padovan } 13690a708f8fSGustavo F. Padovan 1370c1360a1cSGustavo F. Padovan if (!l2cap_mode_supported(chan->mode, conn->feat_mask) 1371c1360a1cSGustavo F. Padovan && test_bit(CONF_STATE2_DEVICE, 1372c1360a1cSGustavo F. Padovan &chan->conf_state)) { 13730f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNRESET); 13746be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 13750a708f8fSGustavo F. Padovan continue; 13760a708f8fSGustavo F. Padovan } 13770a708f8fSGustavo F. Padovan 137893c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 13790a708f8fSGustavo F. Padovan 138089bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 13810a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 13820a708f8fSGustavo F. Padovan char buf[128]; 1383fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 1384fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 13850a708f8fSGustavo F. Padovan 1386e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 1387bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 1388dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1389dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHOR_PEND); 13902dc4e510SGustavo Padovan chan->ops->defer(chan); 13910a708f8fSGustavo F. Padovan 13920a708f8fSGustavo F. Padovan } else { 1393acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 1394dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 1395dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 13960a708f8fSGustavo F. Padovan } 13970a708f8fSGustavo F. Padovan } else { 1398dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_PEND); 1399dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_AUTHEN_PEND); 14000a708f8fSGustavo F. Padovan } 14010a708f8fSGustavo F. Padovan 1402fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 1403fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 14040a708f8fSGustavo F. Padovan 1405c1360a1cSGustavo F. Padovan if (test_bit(CONF_REQ_SENT, &chan->conf_state) || 14060a708f8fSGustavo F. Padovan rsp.result != L2CAP_CR_SUCCESS) { 14076be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14080a708f8fSGustavo F. Padovan continue; 14090a708f8fSGustavo F. Padovan } 14100a708f8fSGustavo F. Padovan 1411c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 14120a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 141373ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 141473ffa904SGustavo F. Padovan chan->num_conf_req++; 14150a708f8fSGustavo F. Padovan } 14160a708f8fSGustavo F. Padovan 14176be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 14180a708f8fSGustavo F. Padovan } 14190a708f8fSGustavo F. Padovan 14203df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 14210a708f8fSGustavo F. Padovan } 14220a708f8fSGustavo F. Padovan 1423c2287681SIdo Yariv /* Find socket with cid and source/destination bdaddr. 1424b62f328bSVille Tervo * Returns closest match, locked. 1425b62f328bSVille Tervo */ 1426d9b88702SAndrei Emeltchenko static struct l2cap_chan *l2cap_global_chan_by_scid(int state, u16 cid, 1427c2287681SIdo Yariv bdaddr_t *src, 1428c2287681SIdo Yariv bdaddr_t *dst) 1429b62f328bSVille Tervo { 143023691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 1431b62f328bSVille Tervo 143223691d75SGustavo F. Padovan read_lock(&chan_list_lock); 1433b62f328bSVille Tervo 143423691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 143589bc500eSGustavo F. Padovan if (state && c->state != state) 1436b62f328bSVille Tervo continue; 1437b62f328bSVille Tervo 143823691d75SGustavo F. Padovan if (c->scid == cid) { 1439c2287681SIdo Yariv int src_match, dst_match; 1440c2287681SIdo Yariv int src_any, dst_any; 1441c2287681SIdo Yariv 1442b62f328bSVille Tervo /* Exact match. */ 14437eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 14447eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1445c2287681SIdo Yariv if (src_match && dst_match) { 1446a24cce14SJohan Hedberg l2cap_chan_hold(c); 144723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 144823691d75SGustavo F. Padovan return c; 144923691d75SGustavo F. Padovan } 1450b62f328bSVille Tervo 1451b62f328bSVille Tervo /* Closest match */ 14527eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 14537eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1454c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1455c2287681SIdo Yariv (src_any && dst_any)) 145623691d75SGustavo F. Padovan c1 = c; 1457b62f328bSVille Tervo } 1458b62f328bSVille Tervo } 1459280f294fSGustavo F. Padovan 1460a24cce14SJohan Hedberg if (c1) 1461a24cce14SJohan Hedberg l2cap_chan_hold(c1); 1462a24cce14SJohan Hedberg 146323691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 1464b62f328bSVille Tervo 146523691d75SGustavo F. Padovan return c1; 1466b62f328bSVille Tervo } 1467b62f328bSVille Tervo 1468b62f328bSVille Tervo static void l2cap_le_conn_ready(struct l2cap_conn *conn) 1469b62f328bSVille Tervo { 1470cc8dba2bSMarcel Holtmann struct hci_conn *hcon = conn->hcon; 1471dcc36c16SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 1472b62f328bSVille Tervo 1473*e760ec12SJohan Hedberg BT_DBG("%s conn %p", hdev->name, conn); 1474b62f328bSVille Tervo 1475*e760ec12SJohan Hedberg /* For outgoing pairing which doesn't necessarily have an 1476*e760ec12SJohan Hedberg * associated socket (e.g. mgmt_pair_device). 1477*e760ec12SJohan Hedberg */ 1478*e760ec12SJohan Hedberg if (hcon->out) 1479*e760ec12SJohan Hedberg smp_conn_security(hcon, hcon->pending_sec_level); 1480cc8dba2bSMarcel Holtmann 148180afeb6cSMarcel Holtmann /* For LE slave connections, make sure the connection interval 148280afeb6cSMarcel Holtmann * is in the range of the minium and maximum interval that has 148380afeb6cSMarcel Holtmann * been configured for this connection. If not, then trigger 148480afeb6cSMarcel Holtmann * the connection update procedure. 148580afeb6cSMarcel Holtmann */ 148640bef302SJohan Hedberg if (hcon->role == HCI_ROLE_SLAVE && 148780afeb6cSMarcel Holtmann (hcon->le_conn_interval < hcon->le_conn_min_interval || 148880afeb6cSMarcel Holtmann hcon->le_conn_interval > hcon->le_conn_max_interval)) { 148980afeb6cSMarcel Holtmann struct l2cap_conn_param_update_req req; 149080afeb6cSMarcel Holtmann 149180afeb6cSMarcel Holtmann req.min = cpu_to_le16(hcon->le_conn_min_interval); 149280afeb6cSMarcel Holtmann req.max = cpu_to_le16(hcon->le_conn_max_interval); 149380afeb6cSMarcel Holtmann req.latency = cpu_to_le16(hcon->le_conn_latency); 149480afeb6cSMarcel Holtmann req.to_multiplier = cpu_to_le16(hcon->le_supv_timeout); 149580afeb6cSMarcel Holtmann 149680afeb6cSMarcel Holtmann l2cap_send_cmd(conn, l2cap_get_ident(conn), 149780afeb6cSMarcel Holtmann L2CAP_CONN_PARAM_UPDATE_REQ, sizeof(req), &req); 149880afeb6cSMarcel Holtmann } 1499b62f328bSVille Tervo } 1500b62f328bSVille Tervo 15010a708f8fSGustavo F. Padovan static void l2cap_conn_ready(struct l2cap_conn *conn) 15020a708f8fSGustavo F. Padovan { 150348454079SGustavo F. Padovan struct l2cap_chan *chan; 1504cc110922SVinicius Costa Gomes struct hci_conn *hcon = conn->hcon; 15050a708f8fSGustavo F. Padovan 15060a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15070a708f8fSGustavo F. Padovan 150844f3b0fbSJohan Hedberg if (hcon->type == LE_LINK) 150944f3b0fbSJohan Hedberg l2cap_le_conn_ready(conn); 151044f3b0fbSJohan Hedberg 1511*e760ec12SJohan Hedberg mutex_lock(&conn->chan_lock); 1512*e760ec12SJohan Hedberg 15133df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1514baa7e1faSGustavo F. Padovan 15156be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 15160a708f8fSGustavo F. Padovan 15172338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 1518416fa752SAndrei Emeltchenko l2cap_chan_unlock(chan); 1519416fa752SAndrei Emeltchenko continue; 1520416fa752SAndrei Emeltchenko } 1521416fa752SAndrei Emeltchenko 1522cc110922SVinicius Costa Gomes if (hcon->type == LE_LINK) { 1523f1496deeSJohan Hedberg l2cap_le_start(chan); 152463128451SVinicius Costa Gomes } else if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 152574e75740SGustavo Padovan l2cap_chan_ready(chan); 1526b501d6a1SAnderson Briglia 15271c244f79SGustavo Padovan } else if (chan->state == BT_CONNECT) { 1528fc7f8a7eSGustavo F. Padovan l2cap_do_start(chan); 15291c244f79SGustavo Padovan } 15300a708f8fSGustavo F. Padovan 15316be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 15320a708f8fSGustavo F. Padovan } 15330a708f8fSGustavo F. Padovan 15343df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 153561a939c6SJohan Hedberg 153661a939c6SJohan Hedberg queue_work(hcon->hdev->workqueue, &conn->pending_rx_work); 15370a708f8fSGustavo F. Padovan } 15380a708f8fSGustavo F. Padovan 15390a708f8fSGustavo F. Padovan /* Notify sockets that we cannot guaranty reliability anymore */ 15400a708f8fSGustavo F. Padovan static void l2cap_conn_unreliable(struct l2cap_conn *conn, int err) 15410a708f8fSGustavo F. Padovan { 154248454079SGustavo F. Padovan struct l2cap_chan *chan; 15430a708f8fSGustavo F. Padovan 15440a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 15450a708f8fSGustavo F. Padovan 15463df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 15470a708f8fSGustavo F. Padovan 15483df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 1549ecf61bdbSAndrei Emeltchenko if (test_bit(FLAG_FORCE_RELIABLE, &chan->flags)) 15501d8b1fd5SGustavo Padovan l2cap_chan_set_err(chan, err); 15510a708f8fSGustavo F. Padovan } 15520a708f8fSGustavo F. Padovan 15533df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 15540a708f8fSGustavo F. Padovan } 15550a708f8fSGustavo F. Padovan 1556f878fcadSGustavo F. Padovan static void l2cap_info_timeout(struct work_struct *work) 15570a708f8fSGustavo F. Padovan { 1558f878fcadSGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 1559030013d8SGustavo F. Padovan info_timer.work); 15600a708f8fSGustavo F. Padovan 15610a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 15620a708f8fSGustavo F. Padovan conn->info_ident = 0; 15630a708f8fSGustavo F. Padovan 15640a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 15650a708f8fSGustavo F. Padovan } 15660a708f8fSGustavo F. Padovan 15672c8e1411SDavid Herrmann /* 15682c8e1411SDavid Herrmann * l2cap_user 15692c8e1411SDavid Herrmann * External modules can register l2cap_user objects on l2cap_conn. The ->probe 15702c8e1411SDavid Herrmann * callback is called during registration. The ->remove callback is called 15712c8e1411SDavid Herrmann * during unregistration. 15722c8e1411SDavid Herrmann * An l2cap_user object can either be explicitly unregistered or when the 15732c8e1411SDavid Herrmann * underlying l2cap_conn object is deleted. This guarantees that l2cap->hcon, 15742c8e1411SDavid Herrmann * l2cap->hchan, .. are valid as long as the remove callback hasn't been called. 15752c8e1411SDavid Herrmann * External modules must own a reference to the l2cap_conn object if they intend 15762c8e1411SDavid Herrmann * to call l2cap_unregister_user(). The l2cap_conn object might get destroyed at 15772c8e1411SDavid Herrmann * any time if they don't. 15782c8e1411SDavid Herrmann */ 15792c8e1411SDavid Herrmann 15802c8e1411SDavid Herrmann int l2cap_register_user(struct l2cap_conn *conn, struct l2cap_user *user) 15812c8e1411SDavid Herrmann { 15822c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 15832c8e1411SDavid Herrmann int ret; 15842c8e1411SDavid Herrmann 15852c8e1411SDavid Herrmann /* We need to check whether l2cap_conn is registered. If it is not, we 15862c8e1411SDavid Herrmann * must not register the l2cap_user. l2cap_conn_del() is unregisters 15872c8e1411SDavid Herrmann * l2cap_conn objects, but doesn't provide its own locking. Instead, it 15882c8e1411SDavid Herrmann * relies on the parent hci_conn object to be locked. This itself relies 15892c8e1411SDavid Herrmann * on the hci_dev object to be locked. So we must lock the hci device 15902c8e1411SDavid Herrmann * here, too. */ 15912c8e1411SDavid Herrmann 15922c8e1411SDavid Herrmann hci_dev_lock(hdev); 15932c8e1411SDavid Herrmann 15942c8e1411SDavid Herrmann if (user->list.next || user->list.prev) { 15952c8e1411SDavid Herrmann ret = -EINVAL; 15962c8e1411SDavid Herrmann goto out_unlock; 15972c8e1411SDavid Herrmann } 15982c8e1411SDavid Herrmann 15992c8e1411SDavid Herrmann /* conn->hchan is NULL after l2cap_conn_del() was called */ 16002c8e1411SDavid Herrmann if (!conn->hchan) { 16012c8e1411SDavid Herrmann ret = -ENODEV; 16022c8e1411SDavid Herrmann goto out_unlock; 16032c8e1411SDavid Herrmann } 16042c8e1411SDavid Herrmann 16052c8e1411SDavid Herrmann ret = user->probe(conn, user); 16062c8e1411SDavid Herrmann if (ret) 16072c8e1411SDavid Herrmann goto out_unlock; 16082c8e1411SDavid Herrmann 16092c8e1411SDavid Herrmann list_add(&user->list, &conn->users); 16102c8e1411SDavid Herrmann ret = 0; 16112c8e1411SDavid Herrmann 16122c8e1411SDavid Herrmann out_unlock: 16132c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16142c8e1411SDavid Herrmann return ret; 16152c8e1411SDavid Herrmann } 16162c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_register_user); 16172c8e1411SDavid Herrmann 16182c8e1411SDavid Herrmann void l2cap_unregister_user(struct l2cap_conn *conn, struct l2cap_user *user) 16192c8e1411SDavid Herrmann { 16202c8e1411SDavid Herrmann struct hci_dev *hdev = conn->hcon->hdev; 16212c8e1411SDavid Herrmann 16222c8e1411SDavid Herrmann hci_dev_lock(hdev); 16232c8e1411SDavid Herrmann 16242c8e1411SDavid Herrmann if (!user->list.next || !user->list.prev) 16252c8e1411SDavid Herrmann goto out_unlock; 16262c8e1411SDavid Herrmann 16272c8e1411SDavid Herrmann list_del(&user->list); 16282c8e1411SDavid Herrmann user->list.next = NULL; 16292c8e1411SDavid Herrmann user->list.prev = NULL; 16302c8e1411SDavid Herrmann user->remove(conn, user); 16312c8e1411SDavid Herrmann 16322c8e1411SDavid Herrmann out_unlock: 16332c8e1411SDavid Herrmann hci_dev_unlock(hdev); 16342c8e1411SDavid Herrmann } 16352c8e1411SDavid Herrmann EXPORT_SYMBOL(l2cap_unregister_user); 16362c8e1411SDavid Herrmann 16372c8e1411SDavid Herrmann static void l2cap_unregister_all_users(struct l2cap_conn *conn) 16382c8e1411SDavid Herrmann { 16392c8e1411SDavid Herrmann struct l2cap_user *user; 16402c8e1411SDavid Herrmann 16412c8e1411SDavid Herrmann while (!list_empty(&conn->users)) { 16422c8e1411SDavid Herrmann user = list_first_entry(&conn->users, struct l2cap_user, list); 16432c8e1411SDavid Herrmann list_del(&user->list); 16442c8e1411SDavid Herrmann user->list.next = NULL; 16452c8e1411SDavid Herrmann user->list.prev = NULL; 16462c8e1411SDavid Herrmann user->remove(conn, user); 16472c8e1411SDavid Herrmann } 16482c8e1411SDavid Herrmann } 16492c8e1411SDavid Herrmann 16505d3de7dfSVinicius Costa Gomes static void l2cap_conn_del(struct hci_conn *hcon, int err) 16515d3de7dfSVinicius Costa Gomes { 16525d3de7dfSVinicius Costa Gomes struct l2cap_conn *conn = hcon->l2cap_data; 16535d3de7dfSVinicius Costa Gomes struct l2cap_chan *chan, *l; 16545d3de7dfSVinicius Costa Gomes 16555d3de7dfSVinicius Costa Gomes if (!conn) 16565d3de7dfSVinicius Costa Gomes return; 16575d3de7dfSVinicius Costa Gomes 16585d3de7dfSVinicius Costa Gomes BT_DBG("hcon %p conn %p, err %d", hcon, conn, err); 16595d3de7dfSVinicius Costa Gomes 16605d3de7dfSVinicius Costa Gomes kfree_skb(conn->rx_skb); 16615d3de7dfSVinicius Costa Gomes 166261a939c6SJohan Hedberg skb_queue_purge(&conn->pending_rx); 16637ab56c3aSJukka Taimisto 16647ab56c3aSJukka Taimisto /* We can not call flush_work(&conn->pending_rx_work) here since we 16657ab56c3aSJukka Taimisto * might block if we are running on a worker from the same workqueue 16667ab56c3aSJukka Taimisto * pending_rx_work is waiting on. 16677ab56c3aSJukka Taimisto */ 16687ab56c3aSJukka Taimisto if (work_pending(&conn->pending_rx_work)) 16697ab56c3aSJukka Taimisto cancel_work_sync(&conn->pending_rx_work); 167061a939c6SJohan Hedberg 16712c8e1411SDavid Herrmann l2cap_unregister_all_users(conn); 16722c8e1411SDavid Herrmann 16733df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 16743df91ea2SAndrei Emeltchenko 16755d3de7dfSVinicius Costa Gomes /* Kill channels */ 16765d3de7dfSVinicius Costa Gomes list_for_each_entry_safe(chan, l, &conn->chan_l, list) { 167761d6ef3eSMat Martineau l2cap_chan_hold(chan); 16786be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 16796be36555SAndrei Emeltchenko 16805d3de7dfSVinicius Costa Gomes l2cap_chan_del(chan, err); 16816be36555SAndrei Emeltchenko 16826be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 16836be36555SAndrei Emeltchenko 168480b98027SGustavo Padovan chan->ops->close(chan); 168561d6ef3eSMat Martineau l2cap_chan_put(chan); 16865d3de7dfSVinicius Costa Gomes } 16875d3de7dfSVinicius Costa Gomes 16883df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 16893df91ea2SAndrei Emeltchenko 169073d80debSLuiz Augusto von Dentz hci_chan_del(conn->hchan); 169173d80debSLuiz Augusto von Dentz 16925d3de7dfSVinicius Costa Gomes if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) 1693127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->info_timer); 16945d3de7dfSVinicius Costa Gomes 169551a8efd7SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags)) { 1696127074bfSUlisses Furquim cancel_delayed_work_sync(&conn->security_timer); 16978aab4757SVinicius Costa Gomes smp_chan_destroy(conn); 1698d26a2345SVinicius Costa Gomes } 16995d3de7dfSVinicius Costa Gomes 17005d3de7dfSVinicius Costa Gomes hcon->l2cap_data = NULL; 17019c903e37SDavid Herrmann conn->hchan = NULL; 17029c903e37SDavid Herrmann l2cap_conn_put(conn); 17035d3de7dfSVinicius Costa Gomes } 17045d3de7dfSVinicius Costa Gomes 17056c9d42a1SGustavo F. Padovan static void security_timeout(struct work_struct *work) 17065d3de7dfSVinicius Costa Gomes { 17076c9d42a1SGustavo F. Padovan struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 17086c9d42a1SGustavo F. Padovan security_timer.work); 17095d3de7dfSVinicius Costa Gomes 1710d06cc416SJohan Hedberg BT_DBG("conn %p", conn); 1711d06cc416SJohan Hedberg 1712d06cc416SJohan Hedberg if (test_and_clear_bit(HCI_CONN_LE_SMP_PEND, &conn->hcon->flags)) { 1713d06cc416SJohan Hedberg smp_chan_destroy(conn); 17145d3de7dfSVinicius Costa Gomes l2cap_conn_del(conn->hcon, ETIMEDOUT); 17155d3de7dfSVinicius Costa Gomes } 1716d06cc416SJohan Hedberg } 17175d3de7dfSVinicius Costa Gomes 17189c903e37SDavid Herrmann static void l2cap_conn_free(struct kref *ref) 17199c903e37SDavid Herrmann { 17209c903e37SDavid Herrmann struct l2cap_conn *conn = container_of(ref, struct l2cap_conn, ref); 17219c903e37SDavid Herrmann 17229c903e37SDavid Herrmann hci_conn_put(conn->hcon); 17239c903e37SDavid Herrmann kfree(conn); 17249c903e37SDavid Herrmann } 17259c903e37SDavid Herrmann 17269c903e37SDavid Herrmann void l2cap_conn_get(struct l2cap_conn *conn) 17279c903e37SDavid Herrmann { 17289c903e37SDavid Herrmann kref_get(&conn->ref); 17299c903e37SDavid Herrmann } 17309c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_get); 17319c903e37SDavid Herrmann 17329c903e37SDavid Herrmann void l2cap_conn_put(struct l2cap_conn *conn) 17339c903e37SDavid Herrmann { 17349c903e37SDavid Herrmann kref_put(&conn->ref, l2cap_conn_free); 17359c903e37SDavid Herrmann } 17369c903e37SDavid Herrmann EXPORT_SYMBOL(l2cap_conn_put); 17379c903e37SDavid Herrmann 17380a708f8fSGustavo F. Padovan /* ---- Socket interface ---- */ 17390a708f8fSGustavo F. Padovan 1740c2287681SIdo Yariv /* Find socket with psm and source / destination bdaddr. 17410a708f8fSGustavo F. Padovan * Returns closest match. 17420a708f8fSGustavo F. Padovan */ 1743c2287681SIdo Yariv static struct l2cap_chan *l2cap_global_chan_by_psm(int state, __le16 psm, 1744c2287681SIdo Yariv bdaddr_t *src, 1745bf20fd4eSJohan Hedberg bdaddr_t *dst, 1746bf20fd4eSJohan Hedberg u8 link_type) 17470a708f8fSGustavo F. Padovan { 174823691d75SGustavo F. Padovan struct l2cap_chan *c, *c1 = NULL; 17490a708f8fSGustavo F. Padovan 175023691d75SGustavo F. Padovan read_lock(&chan_list_lock); 17510a708f8fSGustavo F. Padovan 175223691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 175389bc500eSGustavo F. Padovan if (state && c->state != state) 17540a708f8fSGustavo F. Padovan continue; 17550a708f8fSGustavo F. Padovan 1756bf20fd4eSJohan Hedberg if (link_type == ACL_LINK && c->src_type != BDADDR_BREDR) 1757bf20fd4eSJohan Hedberg continue; 1758bf20fd4eSJohan Hedberg 1759bf20fd4eSJohan Hedberg if (link_type == LE_LINK && c->src_type == BDADDR_BREDR) 1760bf20fd4eSJohan Hedberg continue; 1761bf20fd4eSJohan Hedberg 176223691d75SGustavo F. Padovan if (c->psm == psm) { 1763c2287681SIdo Yariv int src_match, dst_match; 1764c2287681SIdo Yariv int src_any, dst_any; 1765c2287681SIdo Yariv 17660a708f8fSGustavo F. Padovan /* Exact match. */ 17677eafc59eSMarcel Holtmann src_match = !bacmp(&c->src, src); 17687eafc59eSMarcel Holtmann dst_match = !bacmp(&c->dst, dst); 1769c2287681SIdo Yariv if (src_match && dst_match) { 1770a24cce14SJohan Hedberg l2cap_chan_hold(c); 1771a7567b20SJohannes Berg read_unlock(&chan_list_lock); 177223691d75SGustavo F. Padovan return c; 177323691d75SGustavo F. Padovan } 17740a708f8fSGustavo F. Padovan 17750a708f8fSGustavo F. Padovan /* Closest match */ 17767eafc59eSMarcel Holtmann src_any = !bacmp(&c->src, BDADDR_ANY); 17777eafc59eSMarcel Holtmann dst_any = !bacmp(&c->dst, BDADDR_ANY); 1778c2287681SIdo Yariv if ((src_match && dst_any) || (src_any && dst_match) || 1779c2287681SIdo Yariv (src_any && dst_any)) 178023691d75SGustavo F. Padovan c1 = c; 17810a708f8fSGustavo F. Padovan } 17820a708f8fSGustavo F. Padovan } 17830a708f8fSGustavo F. Padovan 1784a24cce14SJohan Hedberg if (c1) 1785a24cce14SJohan Hedberg l2cap_chan_hold(c1); 1786a24cce14SJohan Hedberg 178723691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 17880a708f8fSGustavo F. Padovan 178923691d75SGustavo F. Padovan return c1; 17900a708f8fSGustavo F. Padovan } 17910a708f8fSGustavo F. Padovan 1792721c4181SGustavo F. Padovan static void l2cap_monitor_timeout(struct work_struct *work) 17930a708f8fSGustavo F. Padovan { 1794721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1795721c4181SGustavo F. Padovan monitor_timer.work); 17960a708f8fSGustavo F. Padovan 1797525cd185SGustavo F. Padovan BT_DBG("chan %p", chan); 17980a708f8fSGustavo F. Padovan 17996be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18006be36555SAndrei Emeltchenko 180180909e04SMat Martineau if (!chan->conn) { 18026be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18038d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18040a708f8fSGustavo F. Padovan return; 18050a708f8fSGustavo F. Padovan } 18060a708f8fSGustavo F. Padovan 1807401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_MONITOR_TO); 18080a708f8fSGustavo F. Padovan 18096be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18108d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18110a708f8fSGustavo F. Padovan } 18120a708f8fSGustavo F. Padovan 1813721c4181SGustavo F. Padovan static void l2cap_retrans_timeout(struct work_struct *work) 18140a708f8fSGustavo F. Padovan { 1815721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 1816721c4181SGustavo F. Padovan retrans_timer.work); 18170a708f8fSGustavo F. Padovan 181849208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 18190a708f8fSGustavo F. Padovan 18206be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 18216be36555SAndrei Emeltchenko 182280909e04SMat Martineau if (!chan->conn) { 182380909e04SMat Martineau l2cap_chan_unlock(chan); 182480909e04SMat Martineau l2cap_chan_put(chan); 182580909e04SMat Martineau return; 182680909e04SMat Martineau } 18270a708f8fSGustavo F. Padovan 1828401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, L2CAP_EV_RETRANS_TO); 18296be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 18308d7e1c7fSAndrei Emeltchenko l2cap_chan_put(chan); 18310a708f8fSGustavo F. Padovan } 18320a708f8fSGustavo F. Padovan 1833d660366dSGustavo Padovan static void l2cap_streaming_send(struct l2cap_chan *chan, 18343733937dSMat Martineau struct sk_buff_head *skbs) 18350a708f8fSGustavo F. Padovan { 18360a708f8fSGustavo F. Padovan struct sk_buff *skb; 18373733937dSMat Martineau struct l2cap_ctrl *control; 18380a708f8fSGustavo F. Padovan 18393733937dSMat Martineau BT_DBG("chan %p, skbs %p", chan, skbs); 18403733937dSMat Martineau 1841b99e13adSMat Martineau if (__chan_is_moving(chan)) 1842b99e13adSMat Martineau return; 1843b99e13adSMat Martineau 18443733937dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 18453733937dSMat Martineau 18463733937dSMat Martineau while (!skb_queue_empty(&chan->tx_q)) { 18473733937dSMat Martineau 18483733937dSMat Martineau skb = skb_dequeue(&chan->tx_q); 18493733937dSMat Martineau 18503733937dSMat Martineau bt_cb(skb)->control.retries = 1; 18513733937dSMat Martineau control = &bt_cb(skb)->control; 18523733937dSMat Martineau 18533733937dSMat Martineau control->reqseq = 0; 18543733937dSMat Martineau control->txseq = chan->next_tx_seq; 18553733937dSMat Martineau 18563733937dSMat Martineau __pack_control(chan, control, skb); 18570a708f8fSGustavo F. Padovan 185847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 18593733937dSMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 18603733937dSMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 18610a708f8fSGustavo F. Padovan } 18620a708f8fSGustavo F. Padovan 18634343478fSGustavo F. Padovan l2cap_do_send(chan, skb); 18640a708f8fSGustavo F. Padovan 1865b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 18663733937dSMat Martineau 1867836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 18683733937dSMat Martineau chan->frames_sent++; 18690a708f8fSGustavo F. Padovan } 18700a708f8fSGustavo F. Padovan } 18710a708f8fSGustavo F. Padovan 187267c9e840SSzymon Janc static int l2cap_ertm_send(struct l2cap_chan *chan) 18730a708f8fSGustavo F. Padovan { 18740a708f8fSGustavo F. Padovan struct sk_buff *skb, *tx_skb; 187518a48e76SMat Martineau struct l2cap_ctrl *control; 187618a48e76SMat Martineau int sent = 0; 187718a48e76SMat Martineau 187818a48e76SMat Martineau BT_DBG("chan %p", chan); 18790a708f8fSGustavo F. Padovan 188089bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 18810a708f8fSGustavo F. Padovan return -ENOTCONN; 18820a708f8fSGustavo F. Padovan 188394122bbeSMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 188494122bbeSMat Martineau return 0; 188594122bbeSMat Martineau 1886b99e13adSMat Martineau if (__chan_is_moving(chan)) 1887b99e13adSMat Martineau return 0; 1888b99e13adSMat Martineau 188918a48e76SMat Martineau while (chan->tx_send_head && 189018a48e76SMat Martineau chan->unacked_frames < chan->remote_tx_win && 189118a48e76SMat Martineau chan->tx_state == L2CAP_TX_STATE_XMIT) { 18920a708f8fSGustavo F. Padovan 189318a48e76SMat Martineau skb = chan->tx_send_head; 18940a708f8fSGustavo F. Padovan 189518a48e76SMat Martineau bt_cb(skb)->control.retries = 1; 189618a48e76SMat Martineau control = &bt_cb(skb)->control; 18970a708f8fSGustavo F. Padovan 1898e2ab4353SGustavo F. Padovan if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 189918a48e76SMat Martineau control->final = 1; 1900e2ab4353SGustavo F. Padovan 190118a48e76SMat Martineau control->reqseq = chan->buffer_seq; 190218a48e76SMat Martineau chan->last_acked_seq = chan->buffer_seq; 190318a48e76SMat Martineau control->txseq = chan->next_tx_seq; 19040a708f8fSGustavo F. Padovan 190518a48e76SMat Martineau __pack_control(chan, control, skb); 19060a708f8fSGustavo F. Padovan 190747d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 190818a48e76SMat Martineau u16 fcs = crc16(0, (u8 *) skb->data, skb->len); 190918a48e76SMat Martineau put_unaligned_le16(fcs, skb_put(skb, L2CAP_FCS_SIZE)); 19100a708f8fSGustavo F. Padovan } 19110a708f8fSGustavo F. Padovan 191218a48e76SMat Martineau /* Clone after data has been modified. Data is assumed to be 191318a48e76SMat Martineau read-only (for locking purposes) on cloned sk_buffs. 191418a48e76SMat Martineau */ 191518a48e76SMat Martineau tx_skb = skb_clone(skb, GFP_KERNEL); 191618a48e76SMat Martineau 191718a48e76SMat Martineau if (!tx_skb) 191818a48e76SMat Martineau break; 19190a708f8fSGustavo F. Padovan 19201a09bcb9SGustavo F. Padovan __set_retrans_timer(chan); 19210a708f8fSGustavo F. Padovan 1922836be934SAndrei Emeltchenko chan->next_tx_seq = __next_seq(chan, chan->next_tx_seq); 19236a026610SGustavo F. Padovan chan->unacked_frames++; 19246a026610SGustavo F. Padovan chan->frames_sent++; 192518a48e76SMat Martineau sent++; 19260a708f8fSGustavo F. Padovan 192758d35f87SGustavo F. Padovan if (skb_queue_is_last(&chan->tx_q, skb)) 192858d35f87SGustavo F. Padovan chan->tx_send_head = NULL; 19290a708f8fSGustavo F. Padovan else 193058d35f87SGustavo F. Padovan chan->tx_send_head = skb_queue_next(&chan->tx_q, skb); 193118a48e76SMat Martineau 193218a48e76SMat Martineau l2cap_do_send(chan, tx_skb); 1933b4400672SAndrei Emeltchenko BT_DBG("Sent txseq %u", control->txseq); 19340a708f8fSGustavo F. Padovan } 19350a708f8fSGustavo F. Padovan 1936b4400672SAndrei Emeltchenko BT_DBG("Sent %d, %u unacked, %u in ERTM queue", sent, 1937b4400672SAndrei Emeltchenko chan->unacked_frames, skb_queue_len(&chan->tx_q)); 193818a48e76SMat Martineau 193918a48e76SMat Martineau return sent; 19400a708f8fSGustavo F. Padovan } 19410a708f8fSGustavo F. Padovan 1942e1fbd4c1SMat Martineau static void l2cap_ertm_resend(struct l2cap_chan *chan) 1943e1fbd4c1SMat Martineau { 1944e1fbd4c1SMat Martineau struct l2cap_ctrl control; 1945e1fbd4c1SMat Martineau struct sk_buff *skb; 1946e1fbd4c1SMat Martineau struct sk_buff *tx_skb; 1947e1fbd4c1SMat Martineau u16 seq; 1948e1fbd4c1SMat Martineau 1949e1fbd4c1SMat Martineau BT_DBG("chan %p", chan); 1950e1fbd4c1SMat Martineau 1951e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 1952e1fbd4c1SMat Martineau return; 1953e1fbd4c1SMat Martineau 1954b99e13adSMat Martineau if (__chan_is_moving(chan)) 1955b99e13adSMat Martineau return; 1956b99e13adSMat Martineau 1957e1fbd4c1SMat Martineau while (chan->retrans_list.head != L2CAP_SEQ_LIST_CLEAR) { 1958e1fbd4c1SMat Martineau seq = l2cap_seq_list_pop(&chan->retrans_list); 1959e1fbd4c1SMat Martineau 1960e1fbd4c1SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, seq); 1961e1fbd4c1SMat Martineau if (!skb) { 1962e1fbd4c1SMat Martineau BT_DBG("Error: Can't retransmit seq %d, frame missing", 1963e1fbd4c1SMat Martineau seq); 1964e1fbd4c1SMat Martineau continue; 1965e1fbd4c1SMat Martineau } 1966e1fbd4c1SMat Martineau 1967e1fbd4c1SMat Martineau bt_cb(skb)->control.retries++; 1968e1fbd4c1SMat Martineau control = bt_cb(skb)->control; 1969e1fbd4c1SMat Martineau 1970e1fbd4c1SMat Martineau if (chan->max_tx != 0 && 1971e1fbd4c1SMat Martineau bt_cb(skb)->control.retries > chan->max_tx) { 1972e1fbd4c1SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 19735e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 1974e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1975e1fbd4c1SMat Martineau break; 1976e1fbd4c1SMat Martineau } 1977e1fbd4c1SMat Martineau 1978e1fbd4c1SMat Martineau control.reqseq = chan->buffer_seq; 1979e1fbd4c1SMat Martineau if (test_and_clear_bit(CONN_SEND_FBIT, &chan->conn_state)) 1980e1fbd4c1SMat Martineau control.final = 1; 1981e1fbd4c1SMat Martineau else 1982e1fbd4c1SMat Martineau control.final = 0; 1983e1fbd4c1SMat Martineau 1984e1fbd4c1SMat Martineau if (skb_cloned(skb)) { 1985e1fbd4c1SMat Martineau /* Cloned sk_buffs are read-only, so we need a 1986e1fbd4c1SMat Martineau * writeable copy 1987e1fbd4c1SMat Martineau */ 19888bcde1f2SGustavo Padovan tx_skb = skb_copy(skb, GFP_KERNEL); 1989e1fbd4c1SMat Martineau } else { 19908bcde1f2SGustavo Padovan tx_skb = skb_clone(skb, GFP_KERNEL); 1991e1fbd4c1SMat Martineau } 1992e1fbd4c1SMat Martineau 1993e1fbd4c1SMat Martineau if (!tx_skb) { 1994e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 1995e1fbd4c1SMat Martineau break; 1996e1fbd4c1SMat Martineau } 1997e1fbd4c1SMat Martineau 1998e1fbd4c1SMat Martineau /* Update skb contents */ 1999e1fbd4c1SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) { 2000e1fbd4c1SMat Martineau put_unaligned_le32(__pack_extended_control(&control), 2001e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2002e1fbd4c1SMat Martineau } else { 2003e1fbd4c1SMat Martineau put_unaligned_le16(__pack_enhanced_control(&control), 2004e1fbd4c1SMat Martineau tx_skb->data + L2CAP_HDR_SIZE); 2005e1fbd4c1SMat Martineau } 2006e1fbd4c1SMat Martineau 2007e1fbd4c1SMat Martineau if (chan->fcs == L2CAP_FCS_CRC16) { 2008e1fbd4c1SMat Martineau u16 fcs = crc16(0, (u8 *) tx_skb->data, tx_skb->len); 2009e1fbd4c1SMat Martineau put_unaligned_le16(fcs, skb_put(tx_skb, 2010e1fbd4c1SMat Martineau L2CAP_FCS_SIZE)); 2011e1fbd4c1SMat Martineau } 2012e1fbd4c1SMat Martineau 2013e1fbd4c1SMat Martineau l2cap_do_send(chan, tx_skb); 2014e1fbd4c1SMat Martineau 2015e1fbd4c1SMat Martineau BT_DBG("Resent txseq %d", control.txseq); 2016e1fbd4c1SMat Martineau 2017e1fbd4c1SMat Martineau chan->last_acked_seq = chan->buffer_seq; 2018e1fbd4c1SMat Martineau } 2019e1fbd4c1SMat Martineau } 2020e1fbd4c1SMat Martineau 2021f80842a8SMat Martineau static void l2cap_retransmit(struct l2cap_chan *chan, 2022f80842a8SMat Martineau struct l2cap_ctrl *control) 2023f80842a8SMat Martineau { 2024f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2025f80842a8SMat Martineau 2026f80842a8SMat Martineau l2cap_seq_list_append(&chan->retrans_list, control->reqseq); 2027f80842a8SMat Martineau l2cap_ertm_resend(chan); 2028f80842a8SMat Martineau } 2029f80842a8SMat Martineau 2030d2a7ac5dSMat Martineau static void l2cap_retransmit_all(struct l2cap_chan *chan, 2031d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 2032d2a7ac5dSMat Martineau { 2033e1fbd4c1SMat Martineau struct sk_buff *skb; 2034e1fbd4c1SMat Martineau 2035e1fbd4c1SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2036e1fbd4c1SMat Martineau 2037e1fbd4c1SMat Martineau if (control->poll) 2038e1fbd4c1SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 2039e1fbd4c1SMat Martineau 2040e1fbd4c1SMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 2041e1fbd4c1SMat Martineau 2042e1fbd4c1SMat Martineau if (test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) 2043e1fbd4c1SMat Martineau return; 2044e1fbd4c1SMat Martineau 2045e1fbd4c1SMat Martineau if (chan->unacked_frames) { 2046e1fbd4c1SMat Martineau skb_queue_walk(&chan->tx_q, skb) { 2047e1fbd4c1SMat Martineau if (bt_cb(skb)->control.txseq == control->reqseq || 2048e1fbd4c1SMat Martineau skb == chan->tx_send_head) 2049e1fbd4c1SMat Martineau break; 2050e1fbd4c1SMat Martineau } 2051e1fbd4c1SMat Martineau 2052e1fbd4c1SMat Martineau skb_queue_walk_from(&chan->tx_q, skb) { 2053e1fbd4c1SMat Martineau if (skb == chan->tx_send_head) 2054e1fbd4c1SMat Martineau break; 2055e1fbd4c1SMat Martineau 2056e1fbd4c1SMat Martineau l2cap_seq_list_append(&chan->retrans_list, 2057e1fbd4c1SMat Martineau bt_cb(skb)->control.txseq); 2058e1fbd4c1SMat Martineau } 2059e1fbd4c1SMat Martineau 2060e1fbd4c1SMat Martineau l2cap_ertm_resend(chan); 2061e1fbd4c1SMat Martineau } 2062d2a7ac5dSMat Martineau } 2063d2a7ac5dSMat Martineau 2064b17e73bbSSzymon Janc static void l2cap_send_ack(struct l2cap_chan *chan) 2065b17e73bbSSzymon Janc { 20660a0aba42SMat Martineau struct l2cap_ctrl control; 20670a0aba42SMat Martineau u16 frames_to_ack = __seq_offset(chan, chan->buffer_seq, 20680a0aba42SMat Martineau chan->last_acked_seq); 20690a0aba42SMat Martineau int threshold; 20700a0aba42SMat Martineau 20710a0aba42SMat Martineau BT_DBG("chan %p last_acked_seq %d buffer_seq %d", 20720a0aba42SMat Martineau chan, chan->last_acked_seq, chan->buffer_seq); 20730a0aba42SMat Martineau 20740a0aba42SMat Martineau memset(&control, 0, sizeof(control)); 20750a0aba42SMat Martineau control.sframe = 1; 20760a0aba42SMat Martineau 20770a0aba42SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 20780a0aba42SMat Martineau chan->rx_state == L2CAP_RX_STATE_RECV) { 2079b17e73bbSSzymon Janc __clear_ack_timer(chan); 20800a0aba42SMat Martineau control.super = L2CAP_SUPER_RNR; 20810a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 20820a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 20830a0aba42SMat Martineau } else { 20840a0aba42SMat Martineau if (!test_bit(CONN_REMOTE_BUSY, &chan->conn_state)) { 20850a0aba42SMat Martineau l2cap_ertm_send(chan); 20860a0aba42SMat Martineau /* If any i-frames were sent, they included an ack */ 20870a0aba42SMat Martineau if (chan->buffer_seq == chan->last_acked_seq) 20880a0aba42SMat Martineau frames_to_ack = 0; 20890a0aba42SMat Martineau } 20900a0aba42SMat Martineau 2091c20f8e35SMat Martineau /* Ack now if the window is 3/4ths full. 20920a0aba42SMat Martineau * Calculate without mul or div 20930a0aba42SMat Martineau */ 2094c20f8e35SMat Martineau threshold = chan->ack_win; 20950a0aba42SMat Martineau threshold += threshold << 1; 20960a0aba42SMat Martineau threshold >>= 2; 20970a0aba42SMat Martineau 2098b4400672SAndrei Emeltchenko BT_DBG("frames_to_ack %u, threshold %d", frames_to_ack, 20990a0aba42SMat Martineau threshold); 21000a0aba42SMat Martineau 21010a0aba42SMat Martineau if (frames_to_ack >= threshold) { 21020a0aba42SMat Martineau __clear_ack_timer(chan); 21030a0aba42SMat Martineau control.super = L2CAP_SUPER_RR; 21040a0aba42SMat Martineau control.reqseq = chan->buffer_seq; 21050a0aba42SMat Martineau l2cap_send_sframe(chan, &control); 21060a0aba42SMat Martineau frames_to_ack = 0; 21070a0aba42SMat Martineau } 21080a0aba42SMat Martineau 21090a0aba42SMat Martineau if (frames_to_ack) 21100a0aba42SMat Martineau __set_ack_timer(chan); 21110a0aba42SMat Martineau } 2112b17e73bbSSzymon Janc } 2113b17e73bbSSzymon Janc 211404124681SGustavo F. Padovan static inline int l2cap_skbuff_fromiovec(struct l2cap_chan *chan, 211504124681SGustavo F. Padovan struct msghdr *msg, int len, 211604124681SGustavo F. Padovan int count, struct sk_buff *skb) 21170a708f8fSGustavo F. Padovan { 21180952a57aSAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 21190a708f8fSGustavo F. Padovan struct sk_buff **frag; 212090338947SGustavo Padovan int sent = 0; 21210a708f8fSGustavo F. Padovan 21220498878bSJukka Rissanen if (chan->ops->memcpy_fromiovec(chan, skb_put(skb, count), 21230498878bSJukka Rissanen msg->msg_iov, count)) 21240a708f8fSGustavo F. Padovan return -EFAULT; 21250a708f8fSGustavo F. Padovan 21260a708f8fSGustavo F. Padovan sent += count; 21270a708f8fSGustavo F. Padovan len -= count; 21280a708f8fSGustavo F. Padovan 21290a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 21300a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 21310a708f8fSGustavo F. Padovan while (len) { 2132fbe00700SGustavo Padovan struct sk_buff *tmp; 2133fbe00700SGustavo Padovan 21340a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 21350a708f8fSGustavo F. Padovan 2136d9fbd02bSMarcel Holtmann tmp = chan->ops->alloc_skb(chan, 0, count, 213790338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 2138fbe00700SGustavo Padovan if (IS_ERR(tmp)) 2139fbe00700SGustavo Padovan return PTR_ERR(tmp); 21402f7719ceSAndrei Emeltchenko 2141fbe00700SGustavo Padovan *frag = tmp; 2142fbe00700SGustavo Padovan 21430498878bSJukka Rissanen if (chan->ops->memcpy_fromiovec(chan, skb_put(*frag, count), 21440498878bSJukka Rissanen msg->msg_iov, count)) 21450a708f8fSGustavo F. Padovan return -EFAULT; 21460a708f8fSGustavo F. Padovan 21470a708f8fSGustavo F. Padovan sent += count; 21480a708f8fSGustavo F. Padovan len -= count; 21490a708f8fSGustavo F. Padovan 21502d0ed3d5SGustavo Padovan skb->len += (*frag)->len; 21512d0ed3d5SGustavo Padovan skb->data_len += (*frag)->len; 21522d0ed3d5SGustavo Padovan 21530a708f8fSGustavo F. Padovan frag = &(*frag)->next; 21540a708f8fSGustavo F. Padovan } 21550a708f8fSGustavo F. Padovan 21560a708f8fSGustavo F. Padovan return sent; 21570a708f8fSGustavo F. Padovan } 21580a708f8fSGustavo F. Padovan 21595e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_connless_pdu(struct l2cap_chan *chan, 21608d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21610a708f8fSGustavo F. Padovan { 21628c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21630a708f8fSGustavo F. Padovan struct sk_buff *skb; 216403a51213SAndrei Emeltchenko int err, count, hlen = L2CAP_HDR_SIZE + L2CAP_PSMLEN_SIZE; 21650a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21660a708f8fSGustavo F. Padovan 21678d46321cSMarcel Holtmann BT_DBG("chan %p psm 0x%2.2x len %zu", chan, 21688d46321cSMarcel Holtmann __le16_to_cpu(chan->psm), len); 21690a708f8fSGustavo F. Padovan 21700a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 21712f7719ceSAndrei Emeltchenko 2172d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 217390338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 217490338947SGustavo Padovan if (IS_ERR(skb)) 217590338947SGustavo Padovan return skb; 21760a708f8fSGustavo F. Padovan 21770a708f8fSGustavo F. Padovan /* Create L2CAP header */ 21780a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2179fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 2180daf6a78cSAndrei Emeltchenko lh->len = cpu_to_le16(len + L2CAP_PSMLEN_SIZE); 218143b1b8dfSMarcel Holtmann put_unaligned(chan->psm, (__le16 *) skb_put(skb, L2CAP_PSMLEN_SIZE)); 21820a708f8fSGustavo F. Padovan 21830952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 21840a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 21850a708f8fSGustavo F. Padovan kfree_skb(skb); 21860a708f8fSGustavo F. Padovan return ERR_PTR(err); 21870a708f8fSGustavo F. Padovan } 21880a708f8fSGustavo F. Padovan return skb; 21890a708f8fSGustavo F. Padovan } 21900a708f8fSGustavo F. Padovan 21915e59b791SLuiz Augusto von Dentz static struct sk_buff *l2cap_create_basic_pdu(struct l2cap_chan *chan, 21928d46321cSMarcel Holtmann struct msghdr *msg, size_t len) 21930a708f8fSGustavo F. Padovan { 21948c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 21950a708f8fSGustavo F. Padovan struct sk_buff *skb; 2196f2ba7faeSGustavo Padovan int err, count; 21970a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 21980a708f8fSGustavo F. Padovan 2199b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22000a708f8fSGustavo F. Padovan 2201f2ba7faeSGustavo Padovan count = min_t(unsigned int, (conn->mtu - L2CAP_HDR_SIZE), len); 22022f7719ceSAndrei Emeltchenko 2203d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, L2CAP_HDR_SIZE, count, 220490338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 220590338947SGustavo Padovan if (IS_ERR(skb)) 220690338947SGustavo Padovan return skb; 22070a708f8fSGustavo F. Padovan 22080a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22090a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2210fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22116ff9b5efSGustavo Padovan lh->len = cpu_to_le16(len); 22120a708f8fSGustavo F. Padovan 22130952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22140a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22150a708f8fSGustavo F. Padovan kfree_skb(skb); 22160a708f8fSGustavo F. Padovan return ERR_PTR(err); 22170a708f8fSGustavo F. Padovan } 22180a708f8fSGustavo F. Padovan return skb; 22190a708f8fSGustavo F. Padovan } 22200a708f8fSGustavo F. Padovan 2221ab0ff76dSLuiz Augusto von Dentz static struct sk_buff *l2cap_create_iframe_pdu(struct l2cap_chan *chan, 2222ab0ff76dSLuiz Augusto von Dentz struct msghdr *msg, size_t len, 222394122bbeSMat Martineau u16 sdulen) 22240a708f8fSGustavo F. Padovan { 22258c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 22260a708f8fSGustavo F. Padovan struct sk_buff *skb; 2227e4ca6d98SAndrei Emeltchenko int err, count, hlen; 22280a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 22290a708f8fSGustavo F. Padovan 2230b4400672SAndrei Emeltchenko BT_DBG("chan %p len %zu", chan, len); 22310a708f8fSGustavo F. Padovan 22320a708f8fSGustavo F. Padovan if (!conn) 22330a708f8fSGustavo F. Padovan return ERR_PTR(-ENOTCONN); 22340a708f8fSGustavo F. Padovan 2235ba7aa64fSGustavo Padovan hlen = __ertm_hdr_size(chan); 2236e4ca6d98SAndrei Emeltchenko 22370a708f8fSGustavo F. Padovan if (sdulen) 223803a51213SAndrei Emeltchenko hlen += L2CAP_SDULEN_SIZE; 22390a708f8fSGustavo F. Padovan 224047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 224103a51213SAndrei Emeltchenko hlen += L2CAP_FCS_SIZE; 22420a708f8fSGustavo F. Padovan 22430a708f8fSGustavo F. Padovan count = min_t(unsigned int, (conn->mtu - hlen), len); 22442f7719ceSAndrei Emeltchenko 2245d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 224690338947SGustavo Padovan msg->msg_flags & MSG_DONTWAIT); 224790338947SGustavo Padovan if (IS_ERR(skb)) 224890338947SGustavo Padovan return skb; 22490a708f8fSGustavo F. Padovan 22500a708f8fSGustavo F. Padovan /* Create L2CAP header */ 22510a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2252fe4128e0SGustavo F. Padovan lh->cid = cpu_to_le16(chan->dcid); 22530a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 225488843ab0SAndrei Emeltchenko 225518a48e76SMat Martineau /* Control header is populated later */ 225618a48e76SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 225718a48e76SMat Martineau put_unaligned_le32(0, skb_put(skb, L2CAP_EXT_CTRL_SIZE)); 225818a48e76SMat Martineau else 225918a48e76SMat Martineau put_unaligned_le16(0, skb_put(skb, L2CAP_ENH_CTRL_SIZE)); 226088843ab0SAndrei Emeltchenko 22610a708f8fSGustavo F. Padovan if (sdulen) 226203a51213SAndrei Emeltchenko put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 22630a708f8fSGustavo F. Padovan 22640952a57aSAndrei Emeltchenko err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 22650a708f8fSGustavo F. Padovan if (unlikely(err < 0)) { 22660a708f8fSGustavo F. Padovan kfree_skb(skb); 22670a708f8fSGustavo F. Padovan return ERR_PTR(err); 22680a708f8fSGustavo F. Padovan } 22690a708f8fSGustavo F. Padovan 227018a48e76SMat Martineau bt_cb(skb)->control.fcs = chan->fcs; 22713ce3514fSMat Martineau bt_cb(skb)->control.retries = 0; 22720a708f8fSGustavo F. Padovan return skb; 22730a708f8fSGustavo F. Padovan } 22740a708f8fSGustavo F. Padovan 227594122bbeSMat Martineau static int l2cap_segment_sdu(struct l2cap_chan *chan, 227694122bbeSMat Martineau struct sk_buff_head *seg_queue, 227794122bbeSMat Martineau struct msghdr *msg, size_t len) 22780a708f8fSGustavo F. Padovan { 22790a708f8fSGustavo F. Padovan struct sk_buff *skb; 228094122bbeSMat Martineau u16 sdu_len; 228194122bbeSMat Martineau size_t pdu_len; 228294122bbeSMat Martineau u8 sar; 22830a708f8fSGustavo F. Padovan 2284b4400672SAndrei Emeltchenko BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 22850a708f8fSGustavo F. Padovan 228694122bbeSMat Martineau /* It is critical that ERTM PDUs fit in a single HCI fragment, 228794122bbeSMat Martineau * so fragmented skbs are not used. The HCI layer's handling 228894122bbeSMat Martineau * of fragmented skbs is not compatible with ERTM's queueing. 228994122bbeSMat Martineau */ 229094122bbeSMat Martineau 229194122bbeSMat Martineau /* PDU size is derived from the HCI MTU */ 229294122bbeSMat Martineau pdu_len = chan->conn->mtu; 229394122bbeSMat Martineau 2294a549574dSMat Martineau /* Constrain PDU size for BR/EDR connections */ 2295a549574dSMat Martineau if (!chan->hs_hcon) 229694122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, L2CAP_BREDR_MAX_PAYLOAD); 229794122bbeSMat Martineau 229894122bbeSMat Martineau /* Adjust for largest possible L2CAP overhead. */ 229935d401dfSGustavo Padovan if (chan->fcs) 230035d401dfSGustavo Padovan pdu_len -= L2CAP_FCS_SIZE; 230135d401dfSGustavo Padovan 2302ba7aa64fSGustavo Padovan pdu_len -= __ertm_hdr_size(chan); 230394122bbeSMat Martineau 230494122bbeSMat Martineau /* Remote device may have requested smaller PDUs */ 230594122bbeSMat Martineau pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 230694122bbeSMat Martineau 230794122bbeSMat Martineau if (len <= pdu_len) { 230894122bbeSMat Martineau sar = L2CAP_SAR_UNSEGMENTED; 230994122bbeSMat Martineau sdu_len = 0; 231094122bbeSMat Martineau pdu_len = len; 231194122bbeSMat Martineau } else { 231294122bbeSMat Martineau sar = L2CAP_SAR_START; 231394122bbeSMat Martineau sdu_len = len; 231494122bbeSMat Martineau pdu_len -= L2CAP_SDULEN_SIZE; 231594122bbeSMat Martineau } 23160a708f8fSGustavo F. Padovan 23170a708f8fSGustavo F. Padovan while (len > 0) { 231894122bbeSMat Martineau skb = l2cap_create_iframe_pdu(chan, msg, pdu_len, sdu_len); 23190a708f8fSGustavo F. Padovan 23200a708f8fSGustavo F. Padovan if (IS_ERR(skb)) { 232194122bbeSMat Martineau __skb_queue_purge(seg_queue); 23220a708f8fSGustavo F. Padovan return PTR_ERR(skb); 23230a708f8fSGustavo F. Padovan } 23240a708f8fSGustavo F. Padovan 232594122bbeSMat Martineau bt_cb(skb)->control.sar = sar; 232694122bbeSMat Martineau __skb_queue_tail(seg_queue, skb); 23270a708f8fSGustavo F. Padovan 232894122bbeSMat Martineau len -= pdu_len; 232994122bbeSMat Martineau if (sdu_len) { 233094122bbeSMat Martineau sdu_len = 0; 233194122bbeSMat Martineau pdu_len += L2CAP_SDULEN_SIZE; 233294122bbeSMat Martineau } 233394122bbeSMat Martineau 233494122bbeSMat Martineau if (len <= pdu_len) { 233594122bbeSMat Martineau sar = L2CAP_SAR_END; 233694122bbeSMat Martineau pdu_len = len; 233794122bbeSMat Martineau } else { 233894122bbeSMat Martineau sar = L2CAP_SAR_CONTINUE; 233994122bbeSMat Martineau } 234094122bbeSMat Martineau } 234194122bbeSMat Martineau 2342f0f62799SGustavo Padovan return 0; 23430a708f8fSGustavo F. Padovan } 23440a708f8fSGustavo F. Padovan 2345177f8f2bSJohan Hedberg static struct sk_buff *l2cap_create_le_flowctl_pdu(struct l2cap_chan *chan, 2346177f8f2bSJohan Hedberg struct msghdr *msg, 2347177f8f2bSJohan Hedberg size_t len, u16 sdulen) 2348177f8f2bSJohan Hedberg { 2349177f8f2bSJohan Hedberg struct l2cap_conn *conn = chan->conn; 2350177f8f2bSJohan Hedberg struct sk_buff *skb; 2351177f8f2bSJohan Hedberg int err, count, hlen; 2352177f8f2bSJohan Hedberg struct l2cap_hdr *lh; 2353177f8f2bSJohan Hedberg 2354177f8f2bSJohan Hedberg BT_DBG("chan %p len %zu", chan, len); 2355177f8f2bSJohan Hedberg 2356177f8f2bSJohan Hedberg if (!conn) 2357177f8f2bSJohan Hedberg return ERR_PTR(-ENOTCONN); 2358177f8f2bSJohan Hedberg 2359177f8f2bSJohan Hedberg hlen = L2CAP_HDR_SIZE; 2360177f8f2bSJohan Hedberg 2361177f8f2bSJohan Hedberg if (sdulen) 2362177f8f2bSJohan Hedberg hlen += L2CAP_SDULEN_SIZE; 2363177f8f2bSJohan Hedberg 2364177f8f2bSJohan Hedberg count = min_t(unsigned int, (conn->mtu - hlen), len); 2365177f8f2bSJohan Hedberg 2366d9fbd02bSMarcel Holtmann skb = chan->ops->alloc_skb(chan, hlen, count, 2367177f8f2bSJohan Hedberg msg->msg_flags & MSG_DONTWAIT); 2368177f8f2bSJohan Hedberg if (IS_ERR(skb)) 2369177f8f2bSJohan Hedberg return skb; 2370177f8f2bSJohan Hedberg 2371177f8f2bSJohan Hedberg /* Create L2CAP header */ 2372177f8f2bSJohan Hedberg lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 2373177f8f2bSJohan Hedberg lh->cid = cpu_to_le16(chan->dcid); 2374177f8f2bSJohan Hedberg lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE)); 2375177f8f2bSJohan Hedberg 2376177f8f2bSJohan Hedberg if (sdulen) 2377177f8f2bSJohan Hedberg put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE)); 2378177f8f2bSJohan Hedberg 2379177f8f2bSJohan Hedberg err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb); 2380177f8f2bSJohan Hedberg if (unlikely(err < 0)) { 2381177f8f2bSJohan Hedberg kfree_skb(skb); 2382177f8f2bSJohan Hedberg return ERR_PTR(err); 2383177f8f2bSJohan Hedberg } 2384177f8f2bSJohan Hedberg 2385177f8f2bSJohan Hedberg return skb; 2386177f8f2bSJohan Hedberg } 2387177f8f2bSJohan Hedberg 2388177f8f2bSJohan Hedberg static int l2cap_segment_le_sdu(struct l2cap_chan *chan, 2389177f8f2bSJohan Hedberg struct sk_buff_head *seg_queue, 2390177f8f2bSJohan Hedberg struct msghdr *msg, size_t len) 2391177f8f2bSJohan Hedberg { 2392177f8f2bSJohan Hedberg struct sk_buff *skb; 2393177f8f2bSJohan Hedberg size_t pdu_len; 2394177f8f2bSJohan Hedberg u16 sdu_len; 2395177f8f2bSJohan Hedberg 2396177f8f2bSJohan Hedberg BT_DBG("chan %p, msg %p, len %zu", chan, msg, len); 2397177f8f2bSJohan Hedberg 2398177f8f2bSJohan Hedberg pdu_len = chan->conn->mtu - L2CAP_HDR_SIZE; 2399177f8f2bSJohan Hedberg 2400177f8f2bSJohan Hedberg pdu_len = min_t(size_t, pdu_len, chan->remote_mps); 2401177f8f2bSJohan Hedberg 2402177f8f2bSJohan Hedberg sdu_len = len; 2403177f8f2bSJohan Hedberg pdu_len -= L2CAP_SDULEN_SIZE; 2404177f8f2bSJohan Hedberg 2405177f8f2bSJohan Hedberg while (len > 0) { 2406177f8f2bSJohan Hedberg if (len <= pdu_len) 2407177f8f2bSJohan Hedberg pdu_len = len; 2408177f8f2bSJohan Hedberg 2409177f8f2bSJohan Hedberg skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len); 2410177f8f2bSJohan Hedberg if (IS_ERR(skb)) { 2411177f8f2bSJohan Hedberg __skb_queue_purge(seg_queue); 2412177f8f2bSJohan Hedberg return PTR_ERR(skb); 2413177f8f2bSJohan Hedberg } 2414177f8f2bSJohan Hedberg 2415177f8f2bSJohan Hedberg __skb_queue_tail(seg_queue, skb); 2416177f8f2bSJohan Hedberg 2417177f8f2bSJohan Hedberg len -= pdu_len; 2418177f8f2bSJohan Hedberg 2419177f8f2bSJohan Hedberg if (sdu_len) { 2420177f8f2bSJohan Hedberg sdu_len = 0; 2421177f8f2bSJohan Hedberg pdu_len += L2CAP_SDULEN_SIZE; 2422177f8f2bSJohan Hedberg } 2423177f8f2bSJohan Hedberg } 2424177f8f2bSJohan Hedberg 2425177f8f2bSJohan Hedberg return 0; 2426177f8f2bSJohan Hedberg } 2427177f8f2bSJohan Hedberg 24288d46321cSMarcel Holtmann int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len) 24299a91a04aSGustavo F. Padovan { 24309a91a04aSGustavo F. Padovan struct sk_buff *skb; 24319a91a04aSGustavo F. Padovan int err; 243294122bbeSMat Martineau struct sk_buff_head seg_queue; 24339a91a04aSGustavo F. Padovan 243431e8ce80SSeung-Woo Kim if (!chan->conn) 243531e8ce80SSeung-Woo Kim return -ENOTCONN; 243631e8ce80SSeung-Woo Kim 24379a91a04aSGustavo F. Padovan /* Connectionless channel */ 2438715ec005SGustavo F. Padovan if (chan->chan_type == L2CAP_CHAN_CONN_LESS) { 24398d46321cSMarcel Holtmann skb = l2cap_create_connless_pdu(chan, msg, len); 24409a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24419a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24429a91a04aSGustavo F. Padovan 2443ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2444ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2445ede81a2aSAndrzej Kaczmarek */ 2446ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2447ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2448ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2449ede81a2aSAndrzej Kaczmarek } 2450ede81a2aSAndrzej Kaczmarek 24519a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 24529a91a04aSGustavo F. Padovan return len; 24539a91a04aSGustavo F. Padovan } 24549a91a04aSGustavo F. Padovan 24559a91a04aSGustavo F. Padovan switch (chan->mode) { 245638319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 2457177f8f2bSJohan Hedberg /* Check outgoing MTU */ 2458177f8f2bSJohan Hedberg if (len > chan->omtu) 2459177f8f2bSJohan Hedberg return -EMSGSIZE; 2460177f8f2bSJohan Hedberg 2461fad5fc89SJohan Hedberg if (!chan->tx_credits) 2462fad5fc89SJohan Hedberg return -EAGAIN; 2463fad5fc89SJohan Hedberg 2464177f8f2bSJohan Hedberg __skb_queue_head_init(&seg_queue); 2465177f8f2bSJohan Hedberg 2466177f8f2bSJohan Hedberg err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len); 2467177f8f2bSJohan Hedberg 2468177f8f2bSJohan Hedberg if (chan->state != BT_CONNECTED) { 2469177f8f2bSJohan Hedberg __skb_queue_purge(&seg_queue); 2470177f8f2bSJohan Hedberg err = -ENOTCONN; 2471177f8f2bSJohan Hedberg } 2472177f8f2bSJohan Hedberg 2473177f8f2bSJohan Hedberg if (err) 2474177f8f2bSJohan Hedberg return err; 2475177f8f2bSJohan Hedberg 2476177f8f2bSJohan Hedberg skb_queue_splice_tail_init(&seg_queue, &chan->tx_q); 2477177f8f2bSJohan Hedberg 2478177f8f2bSJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 2479177f8f2bSJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 2480177f8f2bSJohan Hedberg chan->tx_credits--; 2481177f8f2bSJohan Hedberg } 2482177f8f2bSJohan Hedberg 2483177f8f2bSJohan Hedberg if (!chan->tx_credits) 2484177f8f2bSJohan Hedberg chan->ops->suspend(chan); 2485177f8f2bSJohan Hedberg 2486177f8f2bSJohan Hedberg err = len; 2487177f8f2bSJohan Hedberg 2488177f8f2bSJohan Hedberg break; 2489177f8f2bSJohan Hedberg 2490fad5fc89SJohan Hedberg case L2CAP_MODE_BASIC: 24919a91a04aSGustavo F. Padovan /* Check outgoing MTU */ 24929a91a04aSGustavo F. Padovan if (len > chan->omtu) 24939a91a04aSGustavo F. Padovan return -EMSGSIZE; 24949a91a04aSGustavo F. Padovan 24959a91a04aSGustavo F. Padovan /* Create a basic PDU */ 24968d46321cSMarcel Holtmann skb = l2cap_create_basic_pdu(chan, msg, len); 24979a91a04aSGustavo F. Padovan if (IS_ERR(skb)) 24989a91a04aSGustavo F. Padovan return PTR_ERR(skb); 24999a91a04aSGustavo F. Padovan 2500ede81a2aSAndrzej Kaczmarek /* Channel lock is released before requesting new skb and then 2501ede81a2aSAndrzej Kaczmarek * reacquired thus we need to recheck channel state. 2502ede81a2aSAndrzej Kaczmarek */ 2503ede81a2aSAndrzej Kaczmarek if (chan->state != BT_CONNECTED) { 2504ede81a2aSAndrzej Kaczmarek kfree_skb(skb); 2505ede81a2aSAndrzej Kaczmarek return -ENOTCONN; 2506ede81a2aSAndrzej Kaczmarek } 2507ede81a2aSAndrzej Kaczmarek 25089a91a04aSGustavo F. Padovan l2cap_do_send(chan, skb); 25099a91a04aSGustavo F. Padovan err = len; 25109a91a04aSGustavo F. Padovan break; 25119a91a04aSGustavo F. Padovan 25129a91a04aSGustavo F. Padovan case L2CAP_MODE_ERTM: 25139a91a04aSGustavo F. Padovan case L2CAP_MODE_STREAMING: 251494122bbeSMat Martineau /* Check outgoing MTU */ 251594122bbeSMat Martineau if (len > chan->omtu) { 251694122bbeSMat Martineau err = -EMSGSIZE; 25179a91a04aSGustavo F. Padovan break; 25189a91a04aSGustavo F. Padovan } 25199a91a04aSGustavo F. Padovan 252094122bbeSMat Martineau __skb_queue_head_init(&seg_queue); 252194122bbeSMat Martineau 252294122bbeSMat Martineau /* Do segmentation before calling in to the state machine, 252394122bbeSMat Martineau * since it's possible to block while waiting for memory 252494122bbeSMat Martineau * allocation. 252594122bbeSMat Martineau */ 252694122bbeSMat Martineau err = l2cap_segment_sdu(chan, &seg_queue, msg, len); 252794122bbeSMat Martineau 252894122bbeSMat Martineau /* The channel could have been closed while segmenting, 252994122bbeSMat Martineau * check that it is still connected. 253094122bbeSMat Martineau */ 253194122bbeSMat Martineau if (chan->state != BT_CONNECTED) { 253294122bbeSMat Martineau __skb_queue_purge(&seg_queue); 253394122bbeSMat Martineau err = -ENOTCONN; 25349a91a04aSGustavo F. Padovan } 25359a91a04aSGustavo F. Padovan 253694122bbeSMat Martineau if (err) 253794122bbeSMat Martineau break; 253894122bbeSMat Martineau 25393733937dSMat Martineau if (chan->mode == L2CAP_MODE_ERTM) 2540d660366dSGustavo Padovan l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST); 25413733937dSMat Martineau else 2542d660366dSGustavo Padovan l2cap_streaming_send(chan, &seg_queue); 254394122bbeSMat Martineau 25449a91a04aSGustavo F. Padovan err = len; 25459a91a04aSGustavo F. Padovan 254694122bbeSMat Martineau /* If the skbs were not queued for sending, they'll still be in 254794122bbeSMat Martineau * seg_queue and need to be purged. 254894122bbeSMat Martineau */ 254994122bbeSMat Martineau __skb_queue_purge(&seg_queue); 25509a91a04aSGustavo F. Padovan break; 25519a91a04aSGustavo F. Padovan 25529a91a04aSGustavo F. Padovan default: 25539a91a04aSGustavo F. Padovan BT_DBG("bad state %1.1x", chan->mode); 25549a91a04aSGustavo F. Padovan err = -EBADFD; 25559a91a04aSGustavo F. Padovan } 25569a91a04aSGustavo F. Padovan 25579a91a04aSGustavo F. Padovan return err; 25589a91a04aSGustavo F. Padovan } 25596b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_send); 25609a91a04aSGustavo F. Padovan 2561d2a7ac5dSMat Martineau static void l2cap_send_srej(struct l2cap_chan *chan, u16 txseq) 2562d2a7ac5dSMat Martineau { 2563bed68bdeSMat Martineau struct l2cap_ctrl control; 2564bed68bdeSMat Martineau u16 seq; 2565bed68bdeSMat Martineau 2566b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2567bed68bdeSMat Martineau 2568bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2569bed68bdeSMat Martineau control.sframe = 1; 2570bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2571bed68bdeSMat Martineau 2572bed68bdeSMat Martineau for (seq = chan->expected_tx_seq; seq != txseq; 2573bed68bdeSMat Martineau seq = __next_seq(chan, seq)) { 2574bed68bdeSMat Martineau if (!l2cap_ertm_seq_in_queue(&chan->srej_q, seq)) { 2575bed68bdeSMat Martineau control.reqseq = seq; 2576bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2577bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2578bed68bdeSMat Martineau } 2579bed68bdeSMat Martineau } 2580bed68bdeSMat Martineau 2581bed68bdeSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 2582d2a7ac5dSMat Martineau } 2583d2a7ac5dSMat Martineau 2584d2a7ac5dSMat Martineau static void l2cap_send_srej_tail(struct l2cap_chan *chan) 2585d2a7ac5dSMat Martineau { 2586bed68bdeSMat Martineau struct l2cap_ctrl control; 2587bed68bdeSMat Martineau 2588bed68bdeSMat Martineau BT_DBG("chan %p", chan); 2589bed68bdeSMat Martineau 2590bed68bdeSMat Martineau if (chan->srej_list.tail == L2CAP_SEQ_LIST_CLEAR) 2591bed68bdeSMat Martineau return; 2592bed68bdeSMat Martineau 2593bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2594bed68bdeSMat Martineau control.sframe = 1; 2595bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2596bed68bdeSMat Martineau control.reqseq = chan->srej_list.tail; 2597bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2598d2a7ac5dSMat Martineau } 2599d2a7ac5dSMat Martineau 2600d2a7ac5dSMat Martineau static void l2cap_send_srej_list(struct l2cap_chan *chan, u16 txseq) 2601d2a7ac5dSMat Martineau { 2602bed68bdeSMat Martineau struct l2cap_ctrl control; 2603bed68bdeSMat Martineau u16 initial_head; 2604bed68bdeSMat Martineau u16 seq; 2605bed68bdeSMat Martineau 2606b4400672SAndrei Emeltchenko BT_DBG("chan %p, txseq %u", chan, txseq); 2607bed68bdeSMat Martineau 2608bed68bdeSMat Martineau memset(&control, 0, sizeof(control)); 2609bed68bdeSMat Martineau control.sframe = 1; 2610bed68bdeSMat Martineau control.super = L2CAP_SUPER_SREJ; 2611bed68bdeSMat Martineau 2612bed68bdeSMat Martineau /* Capture initial list head to allow only one pass through the list. */ 2613bed68bdeSMat Martineau initial_head = chan->srej_list.head; 2614bed68bdeSMat Martineau 2615bed68bdeSMat Martineau do { 2616bed68bdeSMat Martineau seq = l2cap_seq_list_pop(&chan->srej_list); 2617bed68bdeSMat Martineau if (seq == txseq || seq == L2CAP_SEQ_LIST_CLEAR) 2618bed68bdeSMat Martineau break; 2619bed68bdeSMat Martineau 2620bed68bdeSMat Martineau control.reqseq = seq; 2621bed68bdeSMat Martineau l2cap_send_sframe(chan, &control); 2622bed68bdeSMat Martineau l2cap_seq_list_append(&chan->srej_list, seq); 2623bed68bdeSMat Martineau } while (chan->srej_list.head != initial_head); 2624d2a7ac5dSMat Martineau } 2625d2a7ac5dSMat Martineau 2626608bcc6dSMat Martineau static void l2cap_process_reqseq(struct l2cap_chan *chan, u16 reqseq) 2627608bcc6dSMat Martineau { 2628608bcc6dSMat Martineau struct sk_buff *acked_skb; 2629608bcc6dSMat Martineau u16 ackseq; 2630608bcc6dSMat Martineau 2631b4400672SAndrei Emeltchenko BT_DBG("chan %p, reqseq %u", chan, reqseq); 2632608bcc6dSMat Martineau 2633608bcc6dSMat Martineau if (chan->unacked_frames == 0 || reqseq == chan->expected_ack_seq) 2634608bcc6dSMat Martineau return; 2635608bcc6dSMat Martineau 2636b4400672SAndrei Emeltchenko BT_DBG("expected_ack_seq %u, unacked_frames %u", 2637608bcc6dSMat Martineau chan->expected_ack_seq, chan->unacked_frames); 2638608bcc6dSMat Martineau 2639608bcc6dSMat Martineau for (ackseq = chan->expected_ack_seq; ackseq != reqseq; 2640608bcc6dSMat Martineau ackseq = __next_seq(chan, ackseq)) { 2641608bcc6dSMat Martineau 2642608bcc6dSMat Martineau acked_skb = l2cap_ertm_seq_in_queue(&chan->tx_q, ackseq); 2643608bcc6dSMat Martineau if (acked_skb) { 2644608bcc6dSMat Martineau skb_unlink(acked_skb, &chan->tx_q); 2645608bcc6dSMat Martineau kfree_skb(acked_skb); 2646608bcc6dSMat Martineau chan->unacked_frames--; 2647608bcc6dSMat Martineau } 2648608bcc6dSMat Martineau } 2649608bcc6dSMat Martineau 2650608bcc6dSMat Martineau chan->expected_ack_seq = reqseq; 2651608bcc6dSMat Martineau 2652608bcc6dSMat Martineau if (chan->unacked_frames == 0) 2653608bcc6dSMat Martineau __clear_retrans_timer(chan); 2654608bcc6dSMat Martineau 2655b4400672SAndrei Emeltchenko BT_DBG("unacked_frames %u", chan->unacked_frames); 2656608bcc6dSMat Martineau } 2657608bcc6dSMat Martineau 2658608bcc6dSMat Martineau static void l2cap_abort_rx_srej_sent(struct l2cap_chan *chan) 2659608bcc6dSMat Martineau { 2660608bcc6dSMat Martineau BT_DBG("chan %p", chan); 2661608bcc6dSMat Martineau 2662608bcc6dSMat Martineau chan->expected_tx_seq = chan->buffer_seq; 2663608bcc6dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 2664608bcc6dSMat Martineau skb_queue_purge(&chan->srej_q); 2665608bcc6dSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 2666608bcc6dSMat Martineau } 2667608bcc6dSMat Martineau 2668d660366dSGustavo Padovan static void l2cap_tx_state_xmit(struct l2cap_chan *chan, 2669608bcc6dSMat Martineau struct l2cap_ctrl *control, 2670608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2671608bcc6dSMat Martineau { 2672608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2673608bcc6dSMat Martineau event); 2674608bcc6dSMat Martineau 2675608bcc6dSMat Martineau switch (event) { 2676608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2677608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2678608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2679608bcc6dSMat Martineau 2680608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2681608bcc6dSMat Martineau l2cap_ertm_send(chan); 2682608bcc6dSMat Martineau break; 2683608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2684608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2685608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2686608bcc6dSMat Martineau 2687608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2688608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2689608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2690608bcc6dSMat Martineau */ 2691608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2692608bcc6dSMat Martineau } 2693608bcc6dSMat Martineau 2694608bcc6dSMat Martineau l2cap_send_ack(chan); 2695608bcc6dSMat Martineau 2696608bcc6dSMat Martineau break; 2697608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2698608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2699608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2700608bcc6dSMat Martineau 2701608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2702608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2703608bcc6dSMat Martineau 2704608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2705608bcc6dSMat Martineau local_control.sframe = 1; 2706608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2707608bcc6dSMat Martineau local_control.poll = 1; 2708608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2709a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2710608bcc6dSMat Martineau 2711608bcc6dSMat Martineau chan->retry_count = 1; 2712608bcc6dSMat Martineau __set_monitor_timer(chan); 2713608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2714608bcc6dSMat Martineau } 2715608bcc6dSMat Martineau break; 2716608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2717608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2718608bcc6dSMat Martineau break; 2719608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2720608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2721608bcc6dSMat Martineau chan->retry_count = 1; 2722608bcc6dSMat Martineau __set_monitor_timer(chan); 2723608bcc6dSMat Martineau __clear_ack_timer(chan); 2724608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2725608bcc6dSMat Martineau break; 2726608bcc6dSMat Martineau case L2CAP_EV_RETRANS_TO: 2727608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2728608bcc6dSMat Martineau chan->retry_count = 1; 2729608bcc6dSMat Martineau __set_monitor_timer(chan); 2730608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2731608bcc6dSMat Martineau break; 2732608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2733608bcc6dSMat Martineau /* Nothing to process */ 2734608bcc6dSMat Martineau break; 2735608bcc6dSMat Martineau default: 2736608bcc6dSMat Martineau break; 2737608bcc6dSMat Martineau } 2738608bcc6dSMat Martineau } 2739608bcc6dSMat Martineau 2740d660366dSGustavo Padovan static void l2cap_tx_state_wait_f(struct l2cap_chan *chan, 2741608bcc6dSMat Martineau struct l2cap_ctrl *control, 2742608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2743608bcc6dSMat Martineau { 2744608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d", chan, control, skbs, 2745608bcc6dSMat Martineau event); 2746608bcc6dSMat Martineau 2747608bcc6dSMat Martineau switch (event) { 2748608bcc6dSMat Martineau case L2CAP_EV_DATA_REQUEST: 2749608bcc6dSMat Martineau if (chan->tx_send_head == NULL) 2750608bcc6dSMat Martineau chan->tx_send_head = skb_peek(skbs); 2751608bcc6dSMat Martineau /* Queue data, but don't send. */ 2752608bcc6dSMat Martineau skb_queue_splice_tail_init(skbs, &chan->tx_q); 2753608bcc6dSMat Martineau break; 2754608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_DETECTED: 2755608bcc6dSMat Martineau BT_DBG("Enter LOCAL_BUSY"); 2756608bcc6dSMat Martineau set_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2757608bcc6dSMat Martineau 2758608bcc6dSMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 2759608bcc6dSMat Martineau /* The SREJ_SENT state must be aborted if we are to 2760608bcc6dSMat Martineau * enter the LOCAL_BUSY state. 2761608bcc6dSMat Martineau */ 2762608bcc6dSMat Martineau l2cap_abort_rx_srej_sent(chan); 2763608bcc6dSMat Martineau } 2764608bcc6dSMat Martineau 2765608bcc6dSMat Martineau l2cap_send_ack(chan); 2766608bcc6dSMat Martineau 2767608bcc6dSMat Martineau break; 2768608bcc6dSMat Martineau case L2CAP_EV_LOCAL_BUSY_CLEAR: 2769608bcc6dSMat Martineau BT_DBG("Exit LOCAL_BUSY"); 2770608bcc6dSMat Martineau clear_bit(CONN_LOCAL_BUSY, &chan->conn_state); 2771608bcc6dSMat Martineau 2772608bcc6dSMat Martineau if (test_bit(CONN_RNR_SENT, &chan->conn_state)) { 2773608bcc6dSMat Martineau struct l2cap_ctrl local_control; 2774608bcc6dSMat Martineau memset(&local_control, 0, sizeof(local_control)); 2775608bcc6dSMat Martineau local_control.sframe = 1; 2776608bcc6dSMat Martineau local_control.super = L2CAP_SUPER_RR; 2777608bcc6dSMat Martineau local_control.poll = 1; 2778608bcc6dSMat Martineau local_control.reqseq = chan->buffer_seq; 2779a67d7f6fSMat Martineau l2cap_send_sframe(chan, &local_control); 2780608bcc6dSMat Martineau 2781608bcc6dSMat Martineau chan->retry_count = 1; 2782608bcc6dSMat Martineau __set_monitor_timer(chan); 2783608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_WAIT_F; 2784608bcc6dSMat Martineau } 2785608bcc6dSMat Martineau break; 2786608bcc6dSMat Martineau case L2CAP_EV_RECV_REQSEQ_AND_FBIT: 2787608bcc6dSMat Martineau l2cap_process_reqseq(chan, control->reqseq); 2788608bcc6dSMat Martineau 2789608bcc6dSMat Martineau /* Fall through */ 2790608bcc6dSMat Martineau 2791608bcc6dSMat Martineau case L2CAP_EV_RECV_FBIT: 2792608bcc6dSMat Martineau if (control && control->final) { 2793608bcc6dSMat Martineau __clear_monitor_timer(chan); 2794608bcc6dSMat Martineau if (chan->unacked_frames > 0) 2795608bcc6dSMat Martineau __set_retrans_timer(chan); 2796608bcc6dSMat Martineau chan->retry_count = 0; 2797608bcc6dSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 2798608bcc6dSMat Martineau BT_DBG("recv fbit tx_state 0x2.2%x", chan->tx_state); 2799608bcc6dSMat Martineau } 2800608bcc6dSMat Martineau break; 2801608bcc6dSMat Martineau case L2CAP_EV_EXPLICIT_POLL: 2802608bcc6dSMat Martineau /* Ignore */ 2803608bcc6dSMat Martineau break; 2804608bcc6dSMat Martineau case L2CAP_EV_MONITOR_TO: 2805608bcc6dSMat Martineau if (chan->max_tx == 0 || chan->retry_count < chan->max_tx) { 2806608bcc6dSMat Martineau l2cap_send_rr_or_rnr(chan, 1); 2807608bcc6dSMat Martineau __set_monitor_timer(chan); 2808608bcc6dSMat Martineau chan->retry_count++; 2809608bcc6dSMat Martineau } else { 28105e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNABORTED); 2811608bcc6dSMat Martineau } 2812608bcc6dSMat Martineau break; 2813608bcc6dSMat Martineau default: 2814608bcc6dSMat Martineau break; 2815608bcc6dSMat Martineau } 2816608bcc6dSMat Martineau } 2817608bcc6dSMat Martineau 2818d660366dSGustavo Padovan static void l2cap_tx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 2819608bcc6dSMat Martineau struct sk_buff_head *skbs, u8 event) 2820608bcc6dSMat Martineau { 2821608bcc6dSMat Martineau BT_DBG("chan %p, control %p, skbs %p, event %d, state %d", 2822608bcc6dSMat Martineau chan, control, skbs, event, chan->tx_state); 2823608bcc6dSMat Martineau 2824608bcc6dSMat Martineau switch (chan->tx_state) { 2825608bcc6dSMat Martineau case L2CAP_TX_STATE_XMIT: 2826d660366dSGustavo Padovan l2cap_tx_state_xmit(chan, control, skbs, event); 2827608bcc6dSMat Martineau break; 2828608bcc6dSMat Martineau case L2CAP_TX_STATE_WAIT_F: 2829d660366dSGustavo Padovan l2cap_tx_state_wait_f(chan, control, skbs, event); 2830608bcc6dSMat Martineau break; 2831608bcc6dSMat Martineau default: 2832608bcc6dSMat Martineau /* Ignore event */ 2833608bcc6dSMat Martineau break; 2834608bcc6dSMat Martineau } 2835608bcc6dSMat Martineau } 2836608bcc6dSMat Martineau 28374b51dae9SMat Martineau static void l2cap_pass_to_tx(struct l2cap_chan *chan, 28384b51dae9SMat Martineau struct l2cap_ctrl *control) 28394b51dae9SMat Martineau { 28404b51dae9SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2841401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_REQSEQ_AND_FBIT); 28424b51dae9SMat Martineau } 28434b51dae9SMat Martineau 2844f80842a8SMat Martineau static void l2cap_pass_to_tx_fbit(struct l2cap_chan *chan, 2845f80842a8SMat Martineau struct l2cap_ctrl *control) 2846f80842a8SMat Martineau { 2847f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 2848401bb1f7SAndrei Emeltchenko l2cap_tx(chan, control, NULL, L2CAP_EV_RECV_FBIT); 2849f80842a8SMat Martineau } 2850f80842a8SMat Martineau 28510a708f8fSGustavo F. Padovan /* Copy frame to all raw sockets on that connection */ 28520a708f8fSGustavo F. Padovan static void l2cap_raw_recv(struct l2cap_conn *conn, struct sk_buff *skb) 28530a708f8fSGustavo F. Padovan { 28540a708f8fSGustavo F. Padovan struct sk_buff *nskb; 285548454079SGustavo F. Padovan struct l2cap_chan *chan; 28560a708f8fSGustavo F. Padovan 28570a708f8fSGustavo F. Padovan BT_DBG("conn %p", conn); 28580a708f8fSGustavo F. Padovan 28593df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 28603d57dc68SGustavo F. Padovan 28613df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 2862715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_RAW) 28630a708f8fSGustavo F. Padovan continue; 28640a708f8fSGustavo F. Padovan 28657f5396a7SGustavo Padovan /* Don't send frame to the channel it came from */ 28667f5396a7SGustavo Padovan if (bt_cb(skb)->chan == chan) 28670a708f8fSGustavo F. Padovan continue; 28687f5396a7SGustavo Padovan 28698bcde1f2SGustavo Padovan nskb = skb_clone(skb, GFP_KERNEL); 28700a708f8fSGustavo F. Padovan if (!nskb) 28710a708f8fSGustavo F. Padovan continue; 287280b98027SGustavo Padovan if (chan->ops->recv(chan, nskb)) 28730a708f8fSGustavo F. Padovan kfree_skb(nskb); 28740a708f8fSGustavo F. Padovan } 28753d57dc68SGustavo F. Padovan 28763df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 28770a708f8fSGustavo F. Padovan } 28780a708f8fSGustavo F. Padovan 28790a708f8fSGustavo F. Padovan /* ---- L2CAP signalling commands ---- */ 2880b4400672SAndrei Emeltchenko static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code, 2881b4400672SAndrei Emeltchenko u8 ident, u16 dlen, void *data) 28820a708f8fSGustavo F. Padovan { 28830a708f8fSGustavo F. Padovan struct sk_buff *skb, **frag; 28840a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr *cmd; 28850a708f8fSGustavo F. Padovan struct l2cap_hdr *lh; 28860a708f8fSGustavo F. Padovan int len, count; 28870a708f8fSGustavo F. Padovan 2888b4400672SAndrei Emeltchenko BT_DBG("conn %p, code 0x%2.2x, ident 0x%2.2x, len %u", 28890a708f8fSGustavo F. Padovan conn, code, ident, dlen); 28900a708f8fSGustavo F. Padovan 2891300b962eSAnderson Lizardo if (conn->mtu < L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE) 2892300b962eSAnderson Lizardo return NULL; 2893300b962eSAnderson Lizardo 28940a708f8fSGustavo F. Padovan len = L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE + dlen; 28950a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 28960a708f8fSGustavo F. Padovan 28978bcde1f2SGustavo Padovan skb = bt_skb_alloc(count, GFP_KERNEL); 28980a708f8fSGustavo F. Padovan if (!skb) 28990a708f8fSGustavo F. Padovan return NULL; 29000a708f8fSGustavo F. Padovan 29010a708f8fSGustavo F. Padovan lh = (struct l2cap_hdr *) skb_put(skb, L2CAP_HDR_SIZE); 29020a708f8fSGustavo F. Padovan lh->len = cpu_to_le16(L2CAP_CMD_HDR_SIZE + dlen); 29033300d9a9SClaudio Takahasi 29043300d9a9SClaudio Takahasi if (conn->hcon->type == LE_LINK) 2905dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_LE_SIGNALING); 29063300d9a9SClaudio Takahasi else 2907dcf4adbfSJoe Perches lh->cid = cpu_to_le16(L2CAP_CID_SIGNALING); 29080a708f8fSGustavo F. Padovan 29090a708f8fSGustavo F. Padovan cmd = (struct l2cap_cmd_hdr *) skb_put(skb, L2CAP_CMD_HDR_SIZE); 29100a708f8fSGustavo F. Padovan cmd->code = code; 29110a708f8fSGustavo F. Padovan cmd->ident = ident; 29120a708f8fSGustavo F. Padovan cmd->len = cpu_to_le16(dlen); 29130a708f8fSGustavo F. Padovan 29140a708f8fSGustavo F. Padovan if (dlen) { 29150a708f8fSGustavo F. Padovan count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE; 29160a708f8fSGustavo F. Padovan memcpy(skb_put(skb, count), data, count); 29170a708f8fSGustavo F. Padovan data += count; 29180a708f8fSGustavo F. Padovan } 29190a708f8fSGustavo F. Padovan 29200a708f8fSGustavo F. Padovan len -= skb->len; 29210a708f8fSGustavo F. Padovan 29220a708f8fSGustavo F. Padovan /* Continuation fragments (no L2CAP header) */ 29230a708f8fSGustavo F. Padovan frag = &skb_shinfo(skb)->frag_list; 29240a708f8fSGustavo F. Padovan while (len) { 29250a708f8fSGustavo F. Padovan count = min_t(unsigned int, conn->mtu, len); 29260a708f8fSGustavo F. Padovan 29278bcde1f2SGustavo Padovan *frag = bt_skb_alloc(count, GFP_KERNEL); 29280a708f8fSGustavo F. Padovan if (!*frag) 29290a708f8fSGustavo F. Padovan goto fail; 29300a708f8fSGustavo F. Padovan 29310a708f8fSGustavo F. Padovan memcpy(skb_put(*frag, count), data, count); 29320a708f8fSGustavo F. Padovan 29330a708f8fSGustavo F. Padovan len -= count; 29340a708f8fSGustavo F. Padovan data += count; 29350a708f8fSGustavo F. Padovan 29360a708f8fSGustavo F. Padovan frag = &(*frag)->next; 29370a708f8fSGustavo F. Padovan } 29380a708f8fSGustavo F. Padovan 29390a708f8fSGustavo F. Padovan return skb; 29400a708f8fSGustavo F. Padovan 29410a708f8fSGustavo F. Padovan fail: 29420a708f8fSGustavo F. Padovan kfree_skb(skb); 29430a708f8fSGustavo F. Padovan return NULL; 29440a708f8fSGustavo F. Padovan } 29450a708f8fSGustavo F. Padovan 29462d792818SGustavo Padovan static inline int l2cap_get_conf_opt(void **ptr, int *type, int *olen, 29472d792818SGustavo Padovan unsigned long *val) 29480a708f8fSGustavo F. Padovan { 29490a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29500a708f8fSGustavo F. Padovan int len; 29510a708f8fSGustavo F. Padovan 29520a708f8fSGustavo F. Padovan len = L2CAP_CONF_OPT_SIZE + opt->len; 29530a708f8fSGustavo F. Padovan *ptr += len; 29540a708f8fSGustavo F. Padovan 29550a708f8fSGustavo F. Padovan *type = opt->type; 29560a708f8fSGustavo F. Padovan *olen = opt->len; 29570a708f8fSGustavo F. Padovan 29580a708f8fSGustavo F. Padovan switch (opt->len) { 29590a708f8fSGustavo F. Padovan case 1: 29600a708f8fSGustavo F. Padovan *val = *((u8 *) opt->val); 29610a708f8fSGustavo F. Padovan break; 29620a708f8fSGustavo F. Padovan 29630a708f8fSGustavo F. Padovan case 2: 29640a708f8fSGustavo F. Padovan *val = get_unaligned_le16(opt->val); 29650a708f8fSGustavo F. Padovan break; 29660a708f8fSGustavo F. Padovan 29670a708f8fSGustavo F. Padovan case 4: 29680a708f8fSGustavo F. Padovan *val = get_unaligned_le32(opt->val); 29690a708f8fSGustavo F. Padovan break; 29700a708f8fSGustavo F. Padovan 29710a708f8fSGustavo F. Padovan default: 29720a708f8fSGustavo F. Padovan *val = (unsigned long) opt->val; 29730a708f8fSGustavo F. Padovan break; 29740a708f8fSGustavo F. Padovan } 29750a708f8fSGustavo F. Padovan 2976b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", *type, opt->len, *val); 29770a708f8fSGustavo F. Padovan return len; 29780a708f8fSGustavo F. Padovan } 29790a708f8fSGustavo F. Padovan 29800a708f8fSGustavo F. Padovan static void l2cap_add_conf_opt(void **ptr, u8 type, u8 len, unsigned long val) 29810a708f8fSGustavo F. Padovan { 29820a708f8fSGustavo F. Padovan struct l2cap_conf_opt *opt = *ptr; 29830a708f8fSGustavo F. Padovan 2984b4400672SAndrei Emeltchenko BT_DBG("type 0x%2.2x len %u val 0x%lx", type, len, val); 29850a708f8fSGustavo F. Padovan 29860a708f8fSGustavo F. Padovan opt->type = type; 29870a708f8fSGustavo F. Padovan opt->len = len; 29880a708f8fSGustavo F. Padovan 29890a708f8fSGustavo F. Padovan switch (len) { 29900a708f8fSGustavo F. Padovan case 1: 29910a708f8fSGustavo F. Padovan *((u8 *) opt->val) = val; 29920a708f8fSGustavo F. Padovan break; 29930a708f8fSGustavo F. Padovan 29940a708f8fSGustavo F. Padovan case 2: 29950a708f8fSGustavo F. Padovan put_unaligned_le16(val, opt->val); 29960a708f8fSGustavo F. Padovan break; 29970a708f8fSGustavo F. Padovan 29980a708f8fSGustavo F. Padovan case 4: 29990a708f8fSGustavo F. Padovan put_unaligned_le32(val, opt->val); 30000a708f8fSGustavo F. Padovan break; 30010a708f8fSGustavo F. Padovan 30020a708f8fSGustavo F. Padovan default: 30030a708f8fSGustavo F. Padovan memcpy(opt->val, (void *) val, len); 30040a708f8fSGustavo F. Padovan break; 30050a708f8fSGustavo F. Padovan } 30060a708f8fSGustavo F. Padovan 30070a708f8fSGustavo F. Padovan *ptr += L2CAP_CONF_OPT_SIZE + len; 30080a708f8fSGustavo F. Padovan } 30090a708f8fSGustavo F. Padovan 3010f89cef09SAndrei Emeltchenko static void l2cap_add_opt_efs(void **ptr, struct l2cap_chan *chan) 3011f89cef09SAndrei Emeltchenko { 3012f89cef09SAndrei Emeltchenko struct l2cap_conf_efs efs; 3013f89cef09SAndrei Emeltchenko 3014f89cef09SAndrei Emeltchenko switch (chan->mode) { 3015f89cef09SAndrei Emeltchenko case L2CAP_MODE_ERTM: 3016f89cef09SAndrei Emeltchenko efs.id = chan->local_id; 3017f89cef09SAndrei Emeltchenko efs.stype = chan->local_stype; 3018f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3019f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3020dcf4adbfSJoe Perches efs.acc_lat = cpu_to_le32(L2CAP_DEFAULT_ACC_LAT); 3021dcf4adbfSJoe Perches efs.flush_to = cpu_to_le32(L2CAP_EFS_DEFAULT_FLUSH_TO); 3022f89cef09SAndrei Emeltchenko break; 3023f89cef09SAndrei Emeltchenko 3024f89cef09SAndrei Emeltchenko case L2CAP_MODE_STREAMING: 3025f89cef09SAndrei Emeltchenko efs.id = 1; 3026f89cef09SAndrei Emeltchenko efs.stype = L2CAP_SERV_BESTEFFORT; 3027f89cef09SAndrei Emeltchenko efs.msdu = cpu_to_le16(chan->local_msdu); 3028f89cef09SAndrei Emeltchenko efs.sdu_itime = cpu_to_le32(chan->local_sdu_itime); 3029f89cef09SAndrei Emeltchenko efs.acc_lat = 0; 3030f89cef09SAndrei Emeltchenko efs.flush_to = 0; 3031f89cef09SAndrei Emeltchenko break; 3032f89cef09SAndrei Emeltchenko 3033f89cef09SAndrei Emeltchenko default: 3034f89cef09SAndrei Emeltchenko return; 3035f89cef09SAndrei Emeltchenko } 3036f89cef09SAndrei Emeltchenko 3037f89cef09SAndrei Emeltchenko l2cap_add_conf_opt(ptr, L2CAP_CONF_EFS, sizeof(efs), 3038f89cef09SAndrei Emeltchenko (unsigned long) &efs); 3039f89cef09SAndrei Emeltchenko } 3040f89cef09SAndrei Emeltchenko 3041721c4181SGustavo F. Padovan static void l2cap_ack_timeout(struct work_struct *work) 30420a708f8fSGustavo F. Padovan { 3043721c4181SGustavo F. Padovan struct l2cap_chan *chan = container_of(work, struct l2cap_chan, 3044721c4181SGustavo F. Padovan ack_timer.work); 30450362520bSMat Martineau u16 frames_to_ack; 30460a708f8fSGustavo F. Padovan 30472fb9b3d4SGustavo F. Padovan BT_DBG("chan %p", chan); 30482fb9b3d4SGustavo F. Padovan 30496be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 30506be36555SAndrei Emeltchenko 30510362520bSMat Martineau frames_to_ack = __seq_offset(chan, chan->buffer_seq, 30520362520bSMat Martineau chan->last_acked_seq); 30530362520bSMat Martineau 30540362520bSMat Martineau if (frames_to_ack) 30550362520bSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 30566be36555SAndrei Emeltchenko 30576be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 305809bfb2eeSSzymon Janc l2cap_chan_put(chan); 30590a708f8fSGustavo F. Padovan } 30600a708f8fSGustavo F. Padovan 3061466f8004SAndrei Emeltchenko int l2cap_ertm_init(struct l2cap_chan *chan) 30620a708f8fSGustavo F. Padovan { 30633c588192SMat Martineau int err; 30643c588192SMat Martineau 3065105bdf9eSMat Martineau chan->next_tx_seq = 0; 3066105bdf9eSMat Martineau chan->expected_tx_seq = 0; 306742e5c802SGustavo F. Padovan chan->expected_ack_seq = 0; 30686a026610SGustavo F. Padovan chan->unacked_frames = 0; 306942e5c802SGustavo F. Padovan chan->buffer_seq = 0; 30706a026610SGustavo F. Padovan chan->frames_sent = 0; 3071105bdf9eSMat Martineau chan->last_acked_seq = 0; 3072105bdf9eSMat Martineau chan->sdu = NULL; 3073105bdf9eSMat Martineau chan->sdu_last_frag = NULL; 3074105bdf9eSMat Martineau chan->sdu_len = 0; 3075105bdf9eSMat Martineau 3076d34c34fbSMat Martineau skb_queue_head_init(&chan->tx_q); 3077d34c34fbSMat Martineau 30786ed971caSMarcel Holtmann chan->local_amp_id = AMP_ID_BREDR; 30796ed971caSMarcel Holtmann chan->move_id = AMP_ID_BREDR; 308008333283SMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 308108333283SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 308208333283SMat Martineau 3083105bdf9eSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 3084105bdf9eSMat Martineau return 0; 3085105bdf9eSMat Martineau 3086105bdf9eSMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 3087105bdf9eSMat Martineau chan->tx_state = L2CAP_TX_STATE_XMIT; 30880a708f8fSGustavo F. Padovan 3089721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->retrans_timer, l2cap_retrans_timeout); 3090721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->monitor_timer, l2cap_monitor_timeout); 3091721c4181SGustavo F. Padovan INIT_DELAYED_WORK(&chan->ack_timer, l2cap_ack_timeout); 30920a708f8fSGustavo F. Padovan 3093f1c6775bSGustavo F. Padovan skb_queue_head_init(&chan->srej_q); 30940a708f8fSGustavo F. Padovan 30953c588192SMat Martineau err = l2cap_seq_list_init(&chan->srej_list, chan->tx_win); 30963c588192SMat Martineau if (err < 0) 30973c588192SMat Martineau return err; 30983c588192SMat Martineau 30999dc9affcSMat Martineau err = l2cap_seq_list_init(&chan->retrans_list, chan->remote_tx_win); 31009dc9affcSMat Martineau if (err < 0) 31019dc9affcSMat Martineau l2cap_seq_list_free(&chan->srej_list); 31029dc9affcSMat Martineau 31039dc9affcSMat Martineau return err; 31040a708f8fSGustavo F. Padovan } 31050a708f8fSGustavo F. Padovan 31060a708f8fSGustavo F. Padovan static inline __u8 l2cap_select_mode(__u8 mode, __u16 remote_feat_mask) 31070a708f8fSGustavo F. Padovan { 31080a708f8fSGustavo F. Padovan switch (mode) { 31090a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31100a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 31110a708f8fSGustavo F. Padovan if (l2cap_mode_supported(mode, remote_feat_mask)) 31120a708f8fSGustavo F. Padovan return mode; 31130a708f8fSGustavo F. Padovan /* fall through */ 31140a708f8fSGustavo F. Padovan default: 31150a708f8fSGustavo F. Padovan return L2CAP_MODE_BASIC; 31160a708f8fSGustavo F. Padovan } 31170a708f8fSGustavo F. Padovan } 31180a708f8fSGustavo F. Padovan 3119848566b3SMarcel Holtmann static inline bool __l2cap_ews_supported(struct l2cap_conn *conn) 31206327eb98SAndrei Emeltchenko { 3121848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_WINDOW; 31226327eb98SAndrei Emeltchenko } 31236327eb98SAndrei Emeltchenko 3124848566b3SMarcel Holtmann static inline bool __l2cap_efs_supported(struct l2cap_conn *conn) 3125f89cef09SAndrei Emeltchenko { 3126848566b3SMarcel Holtmann return conn->hs_enabled && conn->feat_mask & L2CAP_FEAT_EXT_FLOW; 3127f89cef09SAndrei Emeltchenko } 3128f89cef09SAndrei Emeltchenko 312936c86c85SMat Martineau static void __l2cap_set_ertm_timeouts(struct l2cap_chan *chan, 313036c86c85SMat Martineau struct l2cap_conf_rfc *rfc) 313136c86c85SMat Martineau { 31326ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR && chan->hs_hcon) { 313336c86c85SMat Martineau u64 ertm_to = chan->hs_hcon->hdev->amp_be_flush_to; 313436c86c85SMat Martineau 313536c86c85SMat Martineau /* Class 1 devices have must have ERTM timeouts 313636c86c85SMat Martineau * exceeding the Link Supervision Timeout. The 313736c86c85SMat Martineau * default Link Supervision Timeout for AMP 313836c86c85SMat Martineau * controllers is 10 seconds. 313936c86c85SMat Martineau * 314036c86c85SMat Martineau * Class 1 devices use 0xffffffff for their 314136c86c85SMat Martineau * best-effort flush timeout, so the clamping logic 314236c86c85SMat Martineau * will result in a timeout that meets the above 314336c86c85SMat Martineau * requirement. ERTM timeouts are 16-bit values, so 314436c86c85SMat Martineau * the maximum timeout is 65.535 seconds. 314536c86c85SMat Martineau */ 314636c86c85SMat Martineau 314736c86c85SMat Martineau /* Convert timeout to milliseconds and round */ 314836c86c85SMat Martineau ertm_to = DIV_ROUND_UP_ULL(ertm_to, 1000); 314936c86c85SMat Martineau 315036c86c85SMat Martineau /* This is the recommended formula for class 2 devices 315136c86c85SMat Martineau * that start ERTM timers when packets are sent to the 315236c86c85SMat Martineau * controller. 315336c86c85SMat Martineau */ 315436c86c85SMat Martineau ertm_to = 3 * ertm_to + 500; 315536c86c85SMat Martineau 315636c86c85SMat Martineau if (ertm_to > 0xffff) 315736c86c85SMat Martineau ertm_to = 0xffff; 315836c86c85SMat Martineau 315936c86c85SMat Martineau rfc->retrans_timeout = cpu_to_le16((u16) ertm_to); 316036c86c85SMat Martineau rfc->monitor_timeout = rfc->retrans_timeout; 316136c86c85SMat Martineau } else { 3162dcf4adbfSJoe Perches rfc->retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO); 3163dcf4adbfSJoe Perches rfc->monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO); 316436c86c85SMat Martineau } 316536c86c85SMat Martineau } 316636c86c85SMat Martineau 31676327eb98SAndrei Emeltchenko static inline void l2cap_txwin_setup(struct l2cap_chan *chan) 31686327eb98SAndrei Emeltchenko { 31696327eb98SAndrei Emeltchenko if (chan->tx_win > L2CAP_DEFAULT_TX_WINDOW && 3170848566b3SMarcel Holtmann __l2cap_ews_supported(chan->conn)) { 31716327eb98SAndrei Emeltchenko /* use extended control field */ 31726327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 3173836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 3174836be934SAndrei Emeltchenko } else { 31756327eb98SAndrei Emeltchenko chan->tx_win = min_t(u16, chan->tx_win, 31766327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 3177836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_TX_WINDOW; 3178836be934SAndrei Emeltchenko } 3179c20f8e35SMat Martineau chan->ack_win = chan->tx_win; 31806327eb98SAndrei Emeltchenko } 31816327eb98SAndrei Emeltchenko 3182710f9b0aSGustavo F. Padovan static int l2cap_build_conf_req(struct l2cap_chan *chan, void *data) 31830a708f8fSGustavo F. Padovan { 31840a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 31850c1bc5c6SGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = chan->mode }; 31860a708f8fSGustavo F. Padovan void *ptr = req->data; 3187c8f79162SAndrei Emeltchenko u16 size; 31880a708f8fSGustavo F. Padovan 318949208c9cSGustavo F. Padovan BT_DBG("chan %p", chan); 31900a708f8fSGustavo F. Padovan 319173ffa904SGustavo F. Padovan if (chan->num_conf_req || chan->num_conf_rsp) 31920a708f8fSGustavo F. Padovan goto done; 31930a708f8fSGustavo F. Padovan 31940c1bc5c6SGustavo F. Padovan switch (chan->mode) { 31950a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 31960a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3197c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) 31980a708f8fSGustavo F. Padovan break; 31990a708f8fSGustavo F. Padovan 3200848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 3201f89cef09SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 3202f89cef09SAndrei Emeltchenko 32030a708f8fSGustavo F. Padovan /* fall through */ 32040a708f8fSGustavo F. Padovan default: 32058c1d787bSGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, chan->conn->feat_mask); 32060a708f8fSGustavo F. Padovan break; 32070a708f8fSGustavo F. Padovan } 32080a708f8fSGustavo F. Padovan 32090a708f8fSGustavo F. Padovan done: 32100c1bc5c6SGustavo F. Padovan if (chan->imtu != L2CAP_DEFAULT_MTU) 32110c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 32120a708f8fSGustavo F. Padovan 32130c1bc5c6SGustavo F. Padovan switch (chan->mode) { 32140a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 32156fea7ad1SMarcel Holtmann if (disable_ertm) 32166fea7ad1SMarcel Holtmann break; 32176fea7ad1SMarcel Holtmann 32188c1d787bSGustavo F. Padovan if (!(chan->conn->feat_mask & L2CAP_FEAT_ERTM) && 32198c1d787bSGustavo F. Padovan !(chan->conn->feat_mask & L2CAP_FEAT_STREAMING)) 32200a708f8fSGustavo F. Padovan break; 32210a708f8fSGustavo F. Padovan 32220a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_BASIC; 32230a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32240a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32250a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32260a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 32270a708f8fSGustavo F. Padovan rfc.max_pdu_size = 0; 32280a708f8fSGustavo F. Padovan 32290a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32300a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32310a708f8fSGustavo F. Padovan break; 32320a708f8fSGustavo F. Padovan 32330a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 32340a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_ERTM; 323547d1ec61SGustavo F. Padovan rfc.max_transmit = chan->max_tx; 323636c86c85SMat Martineau 323736c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 3238c8f79162SAndrei Emeltchenko 3239c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32402d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3241c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3242c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32430a708f8fSGustavo F. Padovan 32446327eb98SAndrei Emeltchenko l2cap_txwin_setup(chan); 32456327eb98SAndrei Emeltchenko 32466327eb98SAndrei Emeltchenko rfc.txwin_size = min_t(u16, chan->tx_win, 32476327eb98SAndrei Emeltchenko L2CAP_DEFAULT_TX_WINDOW); 32480a708f8fSGustavo F. Padovan 32490a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32500a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32510a708f8fSGustavo F. Padovan 3252f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3253f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3254f89cef09SAndrei Emeltchenko 32556327eb98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 32566327eb98SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 32576327eb98SAndrei Emeltchenko chan->tx_win); 325860918918SAndrei Emeltchenko 325960918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 326060918918SAndrei Emeltchenko if (chan->fcs == L2CAP_FCS_NONE || 3261f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 326260918918SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 326360918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 326460918918SAndrei Emeltchenko chan->fcs); 326560918918SAndrei Emeltchenko } 32660a708f8fSGustavo F. Padovan break; 32670a708f8fSGustavo F. Padovan 32680a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3269273759e2SMat Martineau l2cap_txwin_setup(chan); 32700a708f8fSGustavo F. Padovan rfc.mode = L2CAP_MODE_STREAMING; 32710a708f8fSGustavo F. Padovan rfc.txwin_size = 0; 32720a708f8fSGustavo F. Padovan rfc.max_transmit = 0; 32730a708f8fSGustavo F. Padovan rfc.retrans_timeout = 0; 32740a708f8fSGustavo F. Padovan rfc.monitor_timeout = 0; 3275c8f79162SAndrei Emeltchenko 3276c8f79162SAndrei Emeltchenko size = min_t(u16, L2CAP_DEFAULT_MAX_PDU_SIZE, chan->conn->mtu - 32772d792818SGustavo Padovan L2CAP_EXT_HDR_SIZE - L2CAP_SDULEN_SIZE - 3278c8f79162SAndrei Emeltchenko L2CAP_FCS_SIZE); 3279c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 32800a708f8fSGustavo F. Padovan 32810a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 32820a708f8fSGustavo F. Padovan (unsigned long) &rfc); 32830a708f8fSGustavo F. Padovan 3284f89cef09SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) 3285f89cef09SAndrei Emeltchenko l2cap_add_opt_efs(&ptr, chan); 3286f89cef09SAndrei Emeltchenko 328760918918SAndrei Emeltchenko if (chan->conn->feat_mask & L2CAP_FEAT_FCS) 328847d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_NONE || 3289f2592d3eSAndrei Emeltchenko test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) { 329047d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 329160918918SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_FCS, 1, 329260918918SAndrei Emeltchenko chan->fcs); 32930a708f8fSGustavo F. Padovan } 32940a708f8fSGustavo F. Padovan break; 32950a708f8fSGustavo F. Padovan } 32960a708f8fSGustavo F. Padovan 3297fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3298dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 32990a708f8fSGustavo F. Padovan 33000a708f8fSGustavo F. Padovan return ptr - data; 33010a708f8fSGustavo F. Padovan } 33020a708f8fSGustavo F. Padovan 330373ffa904SGustavo F. Padovan static int l2cap_parse_conf_req(struct l2cap_chan *chan, void *data) 33040a708f8fSGustavo F. Padovan { 33050a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 33060a708f8fSGustavo F. Padovan void *ptr = rsp->data; 330773ffa904SGustavo F. Padovan void *req = chan->conf_req; 330873ffa904SGustavo F. Padovan int len = chan->conf_len; 33090a708f8fSGustavo F. Padovan int type, hint, olen; 33100a708f8fSGustavo F. Padovan unsigned long val; 33110a708f8fSGustavo F. Padovan struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 331242dceae2SAndrei Emeltchenko struct l2cap_conf_efs efs; 331342dceae2SAndrei Emeltchenko u8 remote_efs = 0; 33140a708f8fSGustavo F. Padovan u16 mtu = L2CAP_DEFAULT_MTU; 33150a708f8fSGustavo F. Padovan u16 result = L2CAP_CONF_SUCCESS; 3316c8f79162SAndrei Emeltchenko u16 size; 33170a708f8fSGustavo F. Padovan 331873ffa904SGustavo F. Padovan BT_DBG("chan %p", chan); 33190a708f8fSGustavo F. Padovan 33200a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 33210a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&req, &type, &olen, &val); 33220a708f8fSGustavo F. Padovan 33230a708f8fSGustavo F. Padovan hint = type & L2CAP_CONF_HINT; 33240a708f8fSGustavo F. Padovan type &= L2CAP_CONF_MASK; 33250a708f8fSGustavo F. Padovan 33260a708f8fSGustavo F. Padovan switch (type) { 33270a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 33280a708f8fSGustavo F. Padovan mtu = val; 33290a708f8fSGustavo F. Padovan break; 33300a708f8fSGustavo F. Padovan 33310a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 33320c1bc5c6SGustavo F. Padovan chan->flush_to = val; 33330a708f8fSGustavo F. Padovan break; 33340a708f8fSGustavo F. Padovan 33350a708f8fSGustavo F. Padovan case L2CAP_CONF_QOS: 33360a708f8fSGustavo F. Padovan break; 33370a708f8fSGustavo F. Padovan 33380a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 33390a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 33400a708f8fSGustavo F. Padovan memcpy(&rfc, (void *) val, olen); 33410a708f8fSGustavo F. Padovan break; 33420a708f8fSGustavo F. Padovan 33430a708f8fSGustavo F. Padovan case L2CAP_CONF_FCS: 33440a708f8fSGustavo F. Padovan if (val == L2CAP_FCS_NONE) 3345f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, &chan->conf_state); 334642dceae2SAndrei Emeltchenko break; 33470a708f8fSGustavo F. Padovan 334842dceae2SAndrei Emeltchenko case L2CAP_CONF_EFS: 334942dceae2SAndrei Emeltchenko remote_efs = 1; 335042dceae2SAndrei Emeltchenko if (olen == sizeof(efs)) 335142dceae2SAndrei Emeltchenko memcpy(&efs, (void *) val, olen); 33520a708f8fSGustavo F. Padovan break; 33530a708f8fSGustavo F. Padovan 33546327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3355848566b3SMarcel Holtmann if (!chan->conn->hs_enabled) 33566327eb98SAndrei Emeltchenko return -ECONNREFUSED; 33576327eb98SAndrei Emeltchenko 33586327eb98SAndrei Emeltchenko set_bit(FLAG_EXT_CTRL, &chan->flags); 33596327eb98SAndrei Emeltchenko set_bit(CONF_EWS_RECV, &chan->conf_state); 3360836be934SAndrei Emeltchenko chan->tx_win_max = L2CAP_DEFAULT_EXT_WINDOW; 33616327eb98SAndrei Emeltchenko chan->remote_tx_win = val; 33620a708f8fSGustavo F. Padovan break; 33630a708f8fSGustavo F. Padovan 33640a708f8fSGustavo F. Padovan default: 33650a708f8fSGustavo F. Padovan if (hint) 33660a708f8fSGustavo F. Padovan break; 33670a708f8fSGustavo F. Padovan 33680a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNKNOWN; 33690a708f8fSGustavo F. Padovan *((u8 *) ptr++) = type; 33700a708f8fSGustavo F. Padovan break; 33710a708f8fSGustavo F. Padovan } 33720a708f8fSGustavo F. Padovan } 33730a708f8fSGustavo F. Padovan 337473ffa904SGustavo F. Padovan if (chan->num_conf_rsp || chan->num_conf_req > 1) 33750a708f8fSGustavo F. Padovan goto done; 33760a708f8fSGustavo F. Padovan 33770c1bc5c6SGustavo F. Padovan switch (chan->mode) { 33780a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 33790a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 3380c1360a1cSGustavo F. Padovan if (!test_bit(CONF_STATE2_DEVICE, &chan->conf_state)) { 33810c1bc5c6SGustavo F. Padovan chan->mode = l2cap_select_mode(rfc.mode, 33828c1d787bSGustavo F. Padovan chan->conn->feat_mask); 33830a708f8fSGustavo F. Padovan break; 33840a708f8fSGustavo F. Padovan } 33850a708f8fSGustavo F. Padovan 338642dceae2SAndrei Emeltchenko if (remote_efs) { 3387848566b3SMarcel Holtmann if (__l2cap_efs_supported(chan->conn)) 338842dceae2SAndrei Emeltchenko set_bit(FLAG_EFS_ENABLE, &chan->flags); 338942dceae2SAndrei Emeltchenko else 339042dceae2SAndrei Emeltchenko return -ECONNREFUSED; 339142dceae2SAndrei Emeltchenko } 339242dceae2SAndrei Emeltchenko 33930c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) 33940a708f8fSGustavo F. Padovan return -ECONNREFUSED; 33950a708f8fSGustavo F. Padovan 33960a708f8fSGustavo F. Padovan break; 33970a708f8fSGustavo F. Padovan } 33980a708f8fSGustavo F. Padovan 33990a708f8fSGustavo F. Padovan done: 34000c1bc5c6SGustavo F. Padovan if (chan->mode != rfc.mode) { 34010a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34020c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 34030a708f8fSGustavo F. Padovan 340473ffa904SGustavo F. Padovan if (chan->num_conf_rsp == 1) 34050a708f8fSGustavo F. Padovan return -ECONNREFUSED; 34060a708f8fSGustavo F. Padovan 34072d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34082d792818SGustavo Padovan (unsigned long) &rfc); 34090a708f8fSGustavo F. Padovan } 34100a708f8fSGustavo F. Padovan 34110a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) { 34120a708f8fSGustavo F. Padovan /* Configure output options and let the other side know 34130a708f8fSGustavo F. Padovan * which ones we don't like. */ 34140a708f8fSGustavo F. Padovan 34150a708f8fSGustavo F. Padovan if (mtu < L2CAP_DEFAULT_MIN_MTU) 34160a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 34170a708f8fSGustavo F. Padovan else { 34180c1bc5c6SGustavo F. Padovan chan->omtu = mtu; 3419c1360a1cSGustavo F. Padovan set_bit(CONF_MTU_DONE, &chan->conf_state); 34200a708f8fSGustavo F. Padovan } 34210c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->omtu); 34220a708f8fSGustavo F. Padovan 342342dceae2SAndrei Emeltchenko if (remote_efs) { 342442dceae2SAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 342542dceae2SAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 342642dceae2SAndrei Emeltchenko efs.stype != chan->local_stype) { 342742dceae2SAndrei Emeltchenko 342842dceae2SAndrei Emeltchenko result = L2CAP_CONF_UNACCEPT; 342942dceae2SAndrei Emeltchenko 343042dceae2SAndrei Emeltchenko if (chan->num_conf_req >= 1) 343142dceae2SAndrei Emeltchenko return -ECONNREFUSED; 343242dceae2SAndrei Emeltchenko 343342dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 343442dceae2SAndrei Emeltchenko sizeof(efs), 343542dceae2SAndrei Emeltchenko (unsigned long) &efs); 34360e8b207eSAndrei Emeltchenko } else { 34373e6b3b95SGustavo F. Padovan /* Send PENDING Conf Rsp */ 34380e8b207eSAndrei Emeltchenko result = L2CAP_CONF_PENDING; 34390e8b207eSAndrei Emeltchenko set_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 344042dceae2SAndrei Emeltchenko } 344142dceae2SAndrei Emeltchenko } 344242dceae2SAndrei Emeltchenko 34430a708f8fSGustavo F. Padovan switch (rfc.mode) { 34440a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 344547d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3446c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34470a708f8fSGustavo F. Padovan break; 34480a708f8fSGustavo F. Padovan 34490a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 34506327eb98SAndrei Emeltchenko if (!test_bit(CONF_EWS_RECV, &chan->conf_state)) 34512c03a7a4SGustavo F. Padovan chan->remote_tx_win = rfc.txwin_size; 34526327eb98SAndrei Emeltchenko else 34536327eb98SAndrei Emeltchenko rfc.txwin_size = L2CAP_DEFAULT_TX_WINDOW; 34546327eb98SAndrei Emeltchenko 34552c03a7a4SGustavo F. Padovan chan->remote_max_tx = rfc.max_transmit; 34560a708f8fSGustavo F. Padovan 3457c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34582d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34592d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3460c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3461c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34620a708f8fSGustavo F. Padovan 346336c86c85SMat Martineau __l2cap_set_ertm_timeouts(chan, &rfc); 34640a708f8fSGustavo F. Padovan 3465c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34660a708f8fSGustavo F. Padovan 34670a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 34680a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 34690a708f8fSGustavo F. Padovan 347042dceae2SAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 347142dceae2SAndrei Emeltchenko chan->remote_id = efs.id; 347242dceae2SAndrei Emeltchenko chan->remote_stype = efs.stype; 347342dceae2SAndrei Emeltchenko chan->remote_msdu = le16_to_cpu(efs.msdu); 347442dceae2SAndrei Emeltchenko chan->remote_flush_to = 347542dceae2SAndrei Emeltchenko le32_to_cpu(efs.flush_to); 347642dceae2SAndrei Emeltchenko chan->remote_acc_lat = 347742dceae2SAndrei Emeltchenko le32_to_cpu(efs.acc_lat); 347842dceae2SAndrei Emeltchenko chan->remote_sdu_itime = 347942dceae2SAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 348042dceae2SAndrei Emeltchenko l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, 34812d792818SGustavo Padovan sizeof(efs), 34822d792818SGustavo Padovan (unsigned long) &efs); 348342dceae2SAndrei Emeltchenko } 34840a708f8fSGustavo F. Padovan break; 34850a708f8fSGustavo F. Padovan 34860a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 3487c8f79162SAndrei Emeltchenko size = min_t(u16, le16_to_cpu(rfc.max_pdu_size), 34882d792818SGustavo Padovan chan->conn->mtu - L2CAP_EXT_HDR_SIZE - 34892d792818SGustavo Padovan L2CAP_SDULEN_SIZE - L2CAP_FCS_SIZE); 3490c8f79162SAndrei Emeltchenko rfc.max_pdu_size = cpu_to_le16(size); 3491c8f79162SAndrei Emeltchenko chan->remote_mps = size; 34920a708f8fSGustavo F. Padovan 3493c1360a1cSGustavo F. Padovan set_bit(CONF_MODE_DONE, &chan->conf_state); 34940a708f8fSGustavo F. Padovan 34952d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, sizeof(rfc), 34962d792818SGustavo Padovan (unsigned long) &rfc); 34970a708f8fSGustavo F. Padovan 34980a708f8fSGustavo F. Padovan break; 34990a708f8fSGustavo F. Padovan 35000a708f8fSGustavo F. Padovan default: 35010a708f8fSGustavo F. Padovan result = L2CAP_CONF_UNACCEPT; 35020a708f8fSGustavo F. Padovan 35030a708f8fSGustavo F. Padovan memset(&rfc, 0, sizeof(rfc)); 35040c1bc5c6SGustavo F. Padovan rfc.mode = chan->mode; 35050a708f8fSGustavo F. Padovan } 35060a708f8fSGustavo F. Padovan 35070a708f8fSGustavo F. Padovan if (result == L2CAP_CONF_SUCCESS) 3508c1360a1cSGustavo F. Padovan set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 35090a708f8fSGustavo F. Padovan } 3510fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 35110a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 3512dcf4adbfSJoe Perches rsp->flags = cpu_to_le16(0); 35130a708f8fSGustavo F. Padovan 35140a708f8fSGustavo F. Padovan return ptr - data; 35150a708f8fSGustavo F. Padovan } 35160a708f8fSGustavo F. Padovan 35172d792818SGustavo Padovan static int l2cap_parse_conf_rsp(struct l2cap_chan *chan, void *rsp, int len, 35182d792818SGustavo Padovan void *data, u16 *result) 35190a708f8fSGustavo F. Padovan { 35200a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = data; 35210a708f8fSGustavo F. Padovan void *ptr = req->data; 35220a708f8fSGustavo F. Padovan int type, olen; 35230a708f8fSGustavo F. Padovan unsigned long val; 352436e999a8SMat Martineau struct l2cap_conf_rfc rfc = { .mode = L2CAP_MODE_BASIC }; 352566af7aafSAndrei Emeltchenko struct l2cap_conf_efs efs; 35260a708f8fSGustavo F. Padovan 3527fe4128e0SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d, req %p", chan, rsp, len, data); 35280a708f8fSGustavo F. Padovan 35290a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 35300a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 35310a708f8fSGustavo F. Padovan 35320a708f8fSGustavo F. Padovan switch (type) { 35330a708f8fSGustavo F. Padovan case L2CAP_CONF_MTU: 35340a708f8fSGustavo F. Padovan if (val < L2CAP_DEFAULT_MIN_MTU) { 35350a708f8fSGustavo F. Padovan *result = L2CAP_CONF_UNACCEPT; 35360c1bc5c6SGustavo F. Padovan chan->imtu = L2CAP_DEFAULT_MIN_MTU; 35370a708f8fSGustavo F. Padovan } else 35380c1bc5c6SGustavo F. Padovan chan->imtu = val; 35390c1bc5c6SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_MTU, 2, chan->imtu); 35400a708f8fSGustavo F. Padovan break; 35410a708f8fSGustavo F. Padovan 35420a708f8fSGustavo F. Padovan case L2CAP_CONF_FLUSH_TO: 35430c1bc5c6SGustavo F. Padovan chan->flush_to = val; 35440a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_FLUSH_TO, 35450c1bc5c6SGustavo F. Padovan 2, chan->flush_to); 35460a708f8fSGustavo F. Padovan break; 35470a708f8fSGustavo F. Padovan 35480a708f8fSGustavo F. Padovan case L2CAP_CONF_RFC: 35490a708f8fSGustavo F. Padovan if (olen == sizeof(rfc)) 35500a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 35510a708f8fSGustavo F. Padovan 3552c1360a1cSGustavo F. Padovan if (test_bit(CONF_STATE2_DEVICE, &chan->conf_state) && 35530c1bc5c6SGustavo F. Padovan rfc.mode != chan->mode) 35540a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35550a708f8fSGustavo F. Padovan 355647d1ec61SGustavo F. Padovan chan->fcs = 0; 35570a708f8fSGustavo F. Padovan 35580a708f8fSGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_RFC, 35590a708f8fSGustavo F. Padovan sizeof(rfc), (unsigned long) &rfc); 35600a708f8fSGustavo F. Padovan break; 35616327eb98SAndrei Emeltchenko 35626327eb98SAndrei Emeltchenko case L2CAP_CONF_EWS: 3563c20f8e35SMat Martineau chan->ack_win = min_t(u16, val, chan->ack_win); 35643e6b3b95SGustavo F. Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EWS, 2, 35653e6b3b95SGustavo F. Padovan chan->tx_win); 35666327eb98SAndrei Emeltchenko break; 356766af7aafSAndrei Emeltchenko 356866af7aafSAndrei Emeltchenko case L2CAP_CONF_EFS: 356966af7aafSAndrei Emeltchenko if (olen == sizeof(efs)) 357066af7aafSAndrei Emeltchenko memcpy(&efs, (void *)val, olen); 357166af7aafSAndrei Emeltchenko 357266af7aafSAndrei Emeltchenko if (chan->local_stype != L2CAP_SERV_NOTRAFIC && 357366af7aafSAndrei Emeltchenko efs.stype != L2CAP_SERV_NOTRAFIC && 357466af7aafSAndrei Emeltchenko efs.stype != chan->local_stype) 357566af7aafSAndrei Emeltchenko return -ECONNREFUSED; 357666af7aafSAndrei Emeltchenko 35772d792818SGustavo Padovan l2cap_add_conf_opt(&ptr, L2CAP_CONF_EFS, sizeof(efs), 35782d792818SGustavo Padovan (unsigned long) &efs); 357966af7aafSAndrei Emeltchenko break; 3580cbabee78SAndrei Emeltchenko 3581cbabee78SAndrei Emeltchenko case L2CAP_CONF_FCS: 3582cbabee78SAndrei Emeltchenko if (*result == L2CAP_CONF_PENDING) 3583cbabee78SAndrei Emeltchenko if (val == L2CAP_FCS_NONE) 3584f2592d3eSAndrei Emeltchenko set_bit(CONF_RECV_NO_FCS, 3585cbabee78SAndrei Emeltchenko &chan->conf_state); 3586cbabee78SAndrei Emeltchenko break; 35870a708f8fSGustavo F. Padovan } 35880a708f8fSGustavo F. Padovan } 35890a708f8fSGustavo F. Padovan 35900c1bc5c6SGustavo F. Padovan if (chan->mode == L2CAP_MODE_BASIC && chan->mode != rfc.mode) 35910a708f8fSGustavo F. Padovan return -ECONNREFUSED; 35920a708f8fSGustavo F. Padovan 35930c1bc5c6SGustavo F. Padovan chan->mode = rfc.mode; 35940a708f8fSGustavo F. Padovan 35950e8b207eSAndrei Emeltchenko if (*result == L2CAP_CONF_SUCCESS || *result == L2CAP_CONF_PENDING) { 35960a708f8fSGustavo F. Padovan switch (rfc.mode) { 35970a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 359847d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 359947d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 360047d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3601c20f8e35SMat Martineau if (!test_bit(FLAG_EXT_CTRL, &chan->flags)) 3602c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3603c20f8e35SMat Martineau rfc.txwin_size); 360466af7aafSAndrei Emeltchenko 360566af7aafSAndrei Emeltchenko if (test_bit(FLAG_EFS_ENABLE, &chan->flags)) { 360666af7aafSAndrei Emeltchenko chan->local_msdu = le16_to_cpu(efs.msdu); 360766af7aafSAndrei Emeltchenko chan->local_sdu_itime = 360866af7aafSAndrei Emeltchenko le32_to_cpu(efs.sdu_itime); 360966af7aafSAndrei Emeltchenko chan->local_acc_lat = le32_to_cpu(efs.acc_lat); 361066af7aafSAndrei Emeltchenko chan->local_flush_to = 361166af7aafSAndrei Emeltchenko le32_to_cpu(efs.flush_to); 361266af7aafSAndrei Emeltchenko } 36130a708f8fSGustavo F. Padovan break; 361466af7aafSAndrei Emeltchenko 36150a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 361647d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 36170a708f8fSGustavo F. Padovan } 36180a708f8fSGustavo F. Padovan } 36190a708f8fSGustavo F. Padovan 3620fe4128e0SGustavo F. Padovan req->dcid = cpu_to_le16(chan->dcid); 3621dcf4adbfSJoe Perches req->flags = cpu_to_le16(0); 36220a708f8fSGustavo F. Padovan 36230a708f8fSGustavo F. Padovan return ptr - data; 36240a708f8fSGustavo F. Padovan } 36250a708f8fSGustavo F. Padovan 36262d792818SGustavo Padovan static int l2cap_build_conf_rsp(struct l2cap_chan *chan, void *data, 36272d792818SGustavo Padovan u16 result, u16 flags) 36280a708f8fSGustavo F. Padovan { 36290a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = data; 36300a708f8fSGustavo F. Padovan void *ptr = rsp->data; 36310a708f8fSGustavo F. Padovan 3632fe4128e0SGustavo F. Padovan BT_DBG("chan %p", chan); 36330a708f8fSGustavo F. Padovan 3634fe4128e0SGustavo F. Padovan rsp->scid = cpu_to_le16(chan->dcid); 36350a708f8fSGustavo F. Padovan rsp->result = cpu_to_le16(result); 36360a708f8fSGustavo F. Padovan rsp->flags = cpu_to_le16(flags); 36370a708f8fSGustavo F. Padovan 36380a708f8fSGustavo F. Padovan return ptr - data; 36390a708f8fSGustavo F. Padovan } 36400a708f8fSGustavo F. Padovan 364127e2d4c8SJohan Hedberg void __l2cap_le_connect_rsp_defer(struct l2cap_chan *chan) 364227e2d4c8SJohan Hedberg { 364327e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 364427e2d4c8SJohan Hedberg struct l2cap_conn *conn = chan->conn; 364527e2d4c8SJohan Hedberg 364627e2d4c8SJohan Hedberg BT_DBG("chan %p", chan); 364727e2d4c8SJohan Hedberg 364827e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(chan->scid); 364927e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 36503916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 36510cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(chan->rx_credits); 3652dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 365327e2d4c8SJohan Hedberg 365427e2d4c8SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), 365527e2d4c8SJohan Hedberg &rsp); 365627e2d4c8SJohan Hedberg } 365727e2d4c8SJohan Hedberg 36588c1d787bSGustavo F. Padovan void __l2cap_connect_rsp_defer(struct l2cap_chan *chan) 3659710f9b0aSGustavo F. Padovan { 3660710f9b0aSGustavo F. Padovan struct l2cap_conn_rsp rsp; 36618c1d787bSGustavo F. Padovan struct l2cap_conn *conn = chan->conn; 3662710f9b0aSGustavo F. Padovan u8 buf[128]; 3663439f34acSAndrei Emeltchenko u8 rsp_code; 3664710f9b0aSGustavo F. Padovan 3665fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 3666fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 3667dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 3668dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 3669439f34acSAndrei Emeltchenko 3670439f34acSAndrei Emeltchenko if (chan->hs_hcon) 3671439f34acSAndrei Emeltchenko rsp_code = L2CAP_CREATE_CHAN_RSP; 3672439f34acSAndrei Emeltchenko else 3673439f34acSAndrei Emeltchenko rsp_code = L2CAP_CONN_RSP; 3674439f34acSAndrei Emeltchenko 3675439f34acSAndrei Emeltchenko BT_DBG("chan %p rsp_code %u", chan, rsp_code); 3676439f34acSAndrei Emeltchenko 3677439f34acSAndrei Emeltchenko l2cap_send_cmd(conn, chan->ident, rsp_code, sizeof(rsp), &rsp); 3678710f9b0aSGustavo F. Padovan 3679c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 3680710f9b0aSGustavo F. Padovan return; 3681710f9b0aSGustavo F. Padovan 3682710f9b0aSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 3683710f9b0aSGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 3684710f9b0aSGustavo F. Padovan chan->num_conf_req++; 3685710f9b0aSGustavo F. Padovan } 3686710f9b0aSGustavo F. Padovan 368747d1ec61SGustavo F. Padovan static void l2cap_conf_rfc_get(struct l2cap_chan *chan, void *rsp, int len) 36880a708f8fSGustavo F. Padovan { 36890a708f8fSGustavo F. Padovan int type, olen; 36900a708f8fSGustavo F. Padovan unsigned long val; 3691c20f8e35SMat Martineau /* Use sane default values in case a misbehaving remote device 3692c20f8e35SMat Martineau * did not send an RFC or extended window size option. 3693c20f8e35SMat Martineau */ 3694c20f8e35SMat Martineau u16 txwin_ext = chan->ack_win; 3695c20f8e35SMat Martineau struct l2cap_conf_rfc rfc = { 3696c20f8e35SMat Martineau .mode = chan->mode, 3697dcf4adbfSJoe Perches .retrans_timeout = cpu_to_le16(L2CAP_DEFAULT_RETRANS_TO), 3698dcf4adbfSJoe Perches .monitor_timeout = cpu_to_le16(L2CAP_DEFAULT_MONITOR_TO), 3699c20f8e35SMat Martineau .max_pdu_size = cpu_to_le16(chan->imtu), 3700c20f8e35SMat Martineau .txwin_size = min_t(u16, chan->ack_win, L2CAP_DEFAULT_TX_WINDOW), 3701c20f8e35SMat Martineau }; 37020a708f8fSGustavo F. Padovan 370347d1ec61SGustavo F. Padovan BT_DBG("chan %p, rsp %p, len %d", chan, rsp, len); 37040a708f8fSGustavo F. Padovan 37050c1bc5c6SGustavo F. Padovan if ((chan->mode != L2CAP_MODE_ERTM) && (chan->mode != L2CAP_MODE_STREAMING)) 37060a708f8fSGustavo F. Padovan return; 37070a708f8fSGustavo F. Padovan 37080a708f8fSGustavo F. Padovan while (len >= L2CAP_CONF_OPT_SIZE) { 37090a708f8fSGustavo F. Padovan len -= l2cap_get_conf_opt(&rsp, &type, &olen, &val); 37100a708f8fSGustavo F. Padovan 3711c20f8e35SMat Martineau switch (type) { 3712c20f8e35SMat Martineau case L2CAP_CONF_RFC: 3713c20f8e35SMat Martineau if (olen == sizeof(rfc)) 37140a708f8fSGustavo F. Padovan memcpy(&rfc, (void *)val, olen); 3715c20f8e35SMat Martineau break; 3716c20f8e35SMat Martineau case L2CAP_CONF_EWS: 3717c20f8e35SMat Martineau txwin_ext = val; 3718c20f8e35SMat Martineau break; 3719c20f8e35SMat Martineau } 37200a708f8fSGustavo F. Padovan } 37210a708f8fSGustavo F. Padovan 37220a708f8fSGustavo F. Padovan switch (rfc.mode) { 37230a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 372447d1ec61SGustavo F. Padovan chan->retrans_timeout = le16_to_cpu(rfc.retrans_timeout); 372547d1ec61SGustavo F. Padovan chan->monitor_timeout = le16_to_cpu(rfc.monitor_timeout); 372647d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 3727c20f8e35SMat Martineau if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 3728c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, txwin_ext); 3729c20f8e35SMat Martineau else 3730c20f8e35SMat Martineau chan->ack_win = min_t(u16, chan->ack_win, 3731c20f8e35SMat Martineau rfc.txwin_size); 37320a708f8fSGustavo F. Padovan break; 37330a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 373447d1ec61SGustavo F. Padovan chan->mps = le16_to_cpu(rfc.max_pdu_size); 37350a708f8fSGustavo F. Padovan } 37360a708f8fSGustavo F. Padovan } 37370a708f8fSGustavo F. Padovan 37382d792818SGustavo Padovan static inline int l2cap_command_rej(struct l2cap_conn *conn, 3739cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3740cb3b3152SJohan Hedberg u8 *data) 37410a708f8fSGustavo F. Padovan { 3742e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 37430a708f8fSGustavo F. Padovan 3744cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rej)) 3745cb3b3152SJohan Hedberg return -EPROTO; 3746cb3b3152SJohan Hedberg 3747e2fd318eSIlia Kolomisnky if (rej->reason != L2CAP_REJ_NOT_UNDERSTOOD) 37480a708f8fSGustavo F. Padovan return 0; 37490a708f8fSGustavo F. Padovan 37500a708f8fSGustavo F. Padovan if ((conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_SENT) && 37510a708f8fSGustavo F. Padovan cmd->ident == conn->info_ident) { 375217cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 37530a708f8fSGustavo F. Padovan 37540a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 37550a708f8fSGustavo F. Padovan conn->info_ident = 0; 37560a708f8fSGustavo F. Padovan 37570a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 37580a708f8fSGustavo F. Padovan } 37590a708f8fSGustavo F. Padovan 37600a708f8fSGustavo F. Padovan return 0; 37610a708f8fSGustavo F. Padovan } 37620a708f8fSGustavo F. Padovan 37631700915fSMat Martineau static struct l2cap_chan *l2cap_connect(struct l2cap_conn *conn, 37641700915fSMat Martineau struct l2cap_cmd_hdr *cmd, 37654c89b6aaSMat Martineau u8 *data, u8 rsp_code, u8 amp_id) 37660a708f8fSGustavo F. Padovan { 37670a708f8fSGustavo F. Padovan struct l2cap_conn_req *req = (struct l2cap_conn_req *) data; 37680a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 376923691d75SGustavo F. Padovan struct l2cap_chan *chan = NULL, *pchan; 37700a708f8fSGustavo F. Padovan int result, status = L2CAP_CS_NO_INFO; 37710a708f8fSGustavo F. Padovan 37720a708f8fSGustavo F. Padovan u16 dcid = 0, scid = __le16_to_cpu(req->scid); 37730a708f8fSGustavo F. Padovan __le16 psm = req->psm; 37740a708f8fSGustavo F. Padovan 3775097db76cSAndrei Emeltchenko BT_DBG("psm 0x%2.2x scid 0x%4.4x", __le16_to_cpu(psm), scid); 37760a708f8fSGustavo F. Padovan 37770a708f8fSGustavo F. Padovan /* Check if we have socket listening on psm */ 37786f59b904SMarcel Holtmann pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 3779bf20fd4eSJohan Hedberg &conn->hcon->dst, ACL_LINK); 378023691d75SGustavo F. Padovan if (!pchan) { 37810a708f8fSGustavo F. Padovan result = L2CAP_CR_BAD_PSM; 37820a708f8fSGustavo F. Padovan goto sendresp; 37830a708f8fSGustavo F. Padovan } 37840a708f8fSGustavo F. Padovan 37853df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 37868ffb9290SGustavo Padovan l2cap_chan_lock(pchan); 37870a708f8fSGustavo F. Padovan 37880a708f8fSGustavo F. Padovan /* Check if the ACL is secure enough (if not SDP) */ 3789dcf4adbfSJoe Perches if (psm != cpu_to_le16(L2CAP_PSM_SDP) && 37900a708f8fSGustavo F. Padovan !hci_conn_check_link_mode(conn->hcon)) { 37919f5a0d7bSAndrei Emeltchenko conn->disc_reason = HCI_ERROR_AUTH_FAILURE; 37920a708f8fSGustavo F. Padovan result = L2CAP_CR_SEC_BLOCK; 37930a708f8fSGustavo F. Padovan goto response; 37940a708f8fSGustavo F. Padovan } 37950a708f8fSGustavo F. Padovan 37960a708f8fSGustavo F. Padovan result = L2CAP_CR_NO_MEM; 37970a708f8fSGustavo F. Padovan 37982dfa1003SGustavo Padovan /* Check if we already have channel with that dcid */ 37992dfa1003SGustavo Padovan if (__l2cap_get_chan_by_dcid(conn, scid)) 38002dfa1003SGustavo Padovan goto response; 38012dfa1003SGustavo Padovan 380280b98027SGustavo Padovan chan = pchan->ops->new_connection(pchan); 380380808e43SGustavo F. Padovan if (!chan) 38040a708f8fSGustavo F. Padovan goto response; 38050a708f8fSGustavo F. Padovan 3806330b6c15SSyam Sidhardhan /* For certain devices (ex: HID mouse), support for authentication, 3807330b6c15SSyam Sidhardhan * pairing and bonding is optional. For such devices, inorder to avoid 3808330b6c15SSyam Sidhardhan * the ACL alive for too long after L2CAP disconnection, reset the ACL 3809330b6c15SSyam Sidhardhan * disc_timeout back to HCI_DISCONN_TIMEOUT during L2CAP connect. 3810330b6c15SSyam Sidhardhan */ 3811330b6c15SSyam Sidhardhan conn->hcon->disc_timeout = HCI_DISCONN_TIMEOUT; 3812330b6c15SSyam Sidhardhan 38137eafc59eSMarcel Holtmann bacpy(&chan->src, &conn->hcon->src); 38147eafc59eSMarcel Holtmann bacpy(&chan->dst, &conn->hcon->dst); 38154f1654e0SMarcel Holtmann chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 38164f1654e0SMarcel Holtmann chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 3817fe4128e0SGustavo F. Padovan chan->psm = psm; 3818fe4128e0SGustavo F. Padovan chan->dcid = scid; 38191700915fSMat Martineau chan->local_amp_id = amp_id; 38200a708f8fSGustavo F. Padovan 38216be36555SAndrei Emeltchenko __l2cap_chan_add(conn, chan); 382248454079SGustavo F. Padovan 3823fe4128e0SGustavo F. Padovan dcid = chan->scid; 38240a708f8fSGustavo F. Padovan 38258d836d71SGustavo Padovan __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 38260a708f8fSGustavo F. Padovan 3827fc7f8a7eSGustavo F. Padovan chan->ident = cmd->ident; 38280a708f8fSGustavo F. Padovan 38290a708f8fSGustavo F. Padovan if (conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) { 3830e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, false)) { 3831bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 3832f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38330a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38340a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHOR_PEND; 38352dc4e510SGustavo Padovan chan->ops->defer(chan); 38360a708f8fSGustavo F. Padovan } else { 38371700915fSMat Martineau /* Force pending result for AMP controllers. 38381700915fSMat Martineau * The connection will succeed after the 38391700915fSMat Martineau * physical link is up. 38401700915fSMat Martineau */ 38416ed971caSMarcel Holtmann if (amp_id == AMP_ID_BREDR) { 3842f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 38430a708f8fSGustavo F. Padovan result = L2CAP_CR_SUCCESS; 38446ed971caSMarcel Holtmann } else { 3845f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38466ed971caSMarcel Holtmann result = L2CAP_CR_PEND; 38471700915fSMat Martineau } 38480a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38490a708f8fSGustavo F. Padovan } 38500a708f8fSGustavo F. Padovan } else { 3851f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38520a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38530a708f8fSGustavo F. Padovan status = L2CAP_CS_AUTHEN_PEND; 38540a708f8fSGustavo F. Padovan } 38550a708f8fSGustavo F. Padovan } else { 3856f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONNECT2); 38570a708f8fSGustavo F. Padovan result = L2CAP_CR_PEND; 38580a708f8fSGustavo F. Padovan status = L2CAP_CS_NO_INFO; 38590a708f8fSGustavo F. Padovan } 38600a708f8fSGustavo F. Padovan 38610a708f8fSGustavo F. Padovan response: 38628ffb9290SGustavo Padovan l2cap_chan_unlock(pchan); 38633df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 3864a24cce14SJohan Hedberg l2cap_chan_put(pchan); 38650a708f8fSGustavo F. Padovan 38660a708f8fSGustavo F. Padovan sendresp: 38670a708f8fSGustavo F. Padovan rsp.scid = cpu_to_le16(scid); 38680a708f8fSGustavo F. Padovan rsp.dcid = cpu_to_le16(dcid); 38690a708f8fSGustavo F. Padovan rsp.result = cpu_to_le16(result); 38700a708f8fSGustavo F. Padovan rsp.status = cpu_to_le16(status); 38714c89b6aaSMat Martineau l2cap_send_cmd(conn, cmd->ident, rsp_code, sizeof(rsp), &rsp); 38720a708f8fSGustavo F. Padovan 38730a708f8fSGustavo F. Padovan if (result == L2CAP_CR_PEND && status == L2CAP_CS_NO_INFO) { 38740a708f8fSGustavo F. Padovan struct l2cap_info_req info; 3875dcf4adbfSJoe Perches info.type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 38760a708f8fSGustavo F. Padovan 38770a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_SENT; 38780a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 38790a708f8fSGustavo F. Padovan 3880ba13ccd9SMarcel Holtmann schedule_delayed_work(&conn->info_timer, L2CAP_INFO_TIMEOUT); 38810a708f8fSGustavo F. Padovan 38822d792818SGustavo Padovan l2cap_send_cmd(conn, conn->info_ident, L2CAP_INFO_REQ, 38832d792818SGustavo Padovan sizeof(info), &info); 38840a708f8fSGustavo F. Padovan } 38850a708f8fSGustavo F. Padovan 3886c1360a1cSGustavo F. Padovan if (chan && !test_bit(CONF_REQ_SENT, &chan->conf_state) && 38870a708f8fSGustavo F. Padovan result == L2CAP_CR_SUCCESS) { 38880a708f8fSGustavo F. Padovan u8 buf[128]; 3889c1360a1cSGustavo F. Padovan set_bit(CONF_REQ_SENT, &chan->conf_state); 38900a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 389173ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 389273ffa904SGustavo F. Padovan chan->num_conf_req++; 38930a708f8fSGustavo F. Padovan } 38941700915fSMat Martineau 38951700915fSMat Martineau return chan; 38964c89b6aaSMat Martineau } 38970a708f8fSGustavo F. Padovan 38984c89b6aaSMat Martineau static int l2cap_connect_req(struct l2cap_conn *conn, 3899cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data) 39004c89b6aaSMat Martineau { 39017b064edaSJaganath Kanakkassery struct hci_dev *hdev = conn->hcon->hdev; 39027b064edaSJaganath Kanakkassery struct hci_conn *hcon = conn->hcon; 39037b064edaSJaganath Kanakkassery 3904cb3b3152SJohan Hedberg if (cmd_len < sizeof(struct l2cap_conn_req)) 3905cb3b3152SJohan Hedberg return -EPROTO; 3906cb3b3152SJohan Hedberg 39077b064edaSJaganath Kanakkassery hci_dev_lock(hdev); 39087b064edaSJaganath Kanakkassery if (test_bit(HCI_MGMT, &hdev->dev_flags) && 39097b064edaSJaganath Kanakkassery !test_and_set_bit(HCI_CONN_MGMT_CONNECTED, &hcon->flags)) 39107b064edaSJaganath Kanakkassery mgmt_device_connected(hdev, &hcon->dst, hcon->type, 39117b064edaSJaganath Kanakkassery hcon->dst_type, 0, NULL, 0, 39127b064edaSJaganath Kanakkassery hcon->dev_class); 39137b064edaSJaganath Kanakkassery hci_dev_unlock(hdev); 39147b064edaSJaganath Kanakkassery 3915300229f9SGustavo Padovan l2cap_connect(conn, cmd, data, L2CAP_CONN_RSP, 0); 39160a708f8fSGustavo F. Padovan return 0; 39170a708f8fSGustavo F. Padovan } 39180a708f8fSGustavo F. Padovan 39195909cf30SMat Martineau static int l2cap_connect_create_rsp(struct l2cap_conn *conn, 3920cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 3921cb3b3152SJohan Hedberg u8 *data) 39220a708f8fSGustavo F. Padovan { 39230a708f8fSGustavo F. Padovan struct l2cap_conn_rsp *rsp = (struct l2cap_conn_rsp *) data; 39240a708f8fSGustavo F. Padovan u16 scid, dcid, result, status; 392548454079SGustavo F. Padovan struct l2cap_chan *chan; 39260a708f8fSGustavo F. Padovan u8 req[128]; 39273df91ea2SAndrei Emeltchenko int err; 39280a708f8fSGustavo F. Padovan 3929cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 3930cb3b3152SJohan Hedberg return -EPROTO; 3931cb3b3152SJohan Hedberg 39320a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 39330a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 39340a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 39350a708f8fSGustavo F. Padovan status = __le16_to_cpu(rsp->status); 39360a708f8fSGustavo F. Padovan 39371b009c98SAndrei Emeltchenko BT_DBG("dcid 0x%4.4x scid 0x%4.4x result 0x%2.2x status 0x%2.2x", 39381b009c98SAndrei Emeltchenko dcid, scid, result, status); 39390a708f8fSGustavo F. Padovan 39403df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 39413df91ea2SAndrei Emeltchenko 39420a708f8fSGustavo F. Padovan if (scid) { 39433df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 39443df91ea2SAndrei Emeltchenko if (!chan) { 394521870b52SJohan Hedberg err = -EBADSLT; 39463df91ea2SAndrei Emeltchenko goto unlock; 39473df91ea2SAndrei Emeltchenko } 39480a708f8fSGustavo F. Padovan } else { 39493df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 39503df91ea2SAndrei Emeltchenko if (!chan) { 395121870b52SJohan Hedberg err = -EBADSLT; 39523df91ea2SAndrei Emeltchenko goto unlock; 39533df91ea2SAndrei Emeltchenko } 39540a708f8fSGustavo F. Padovan } 39550a708f8fSGustavo F. Padovan 39563df91ea2SAndrei Emeltchenko err = 0; 39573df91ea2SAndrei Emeltchenko 39586be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 395948454079SGustavo F. Padovan 39600a708f8fSGustavo F. Padovan switch (result) { 39610a708f8fSGustavo F. Padovan case L2CAP_CR_SUCCESS: 396289bc500eSGustavo F. Padovan l2cap_state_change(chan, BT_CONFIG); 3963fc7f8a7eSGustavo F. Padovan chan->ident = 0; 3964fe4128e0SGustavo F. Padovan chan->dcid = dcid; 3965c1360a1cSGustavo F. Padovan clear_bit(CONF_CONNECT_PEND, &chan->conf_state); 39660a708f8fSGustavo F. Padovan 3967c1360a1cSGustavo F. Padovan if (test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) 39680a708f8fSGustavo F. Padovan break; 39690a708f8fSGustavo F. Padovan 39700a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 397173ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, req), req); 397273ffa904SGustavo F. Padovan chan->num_conf_req++; 39730a708f8fSGustavo F. Padovan break; 39740a708f8fSGustavo F. Padovan 39750a708f8fSGustavo F. Padovan case L2CAP_CR_PEND: 3976c1360a1cSGustavo F. Padovan set_bit(CONF_CONNECT_PEND, &chan->conf_state); 39770a708f8fSGustavo F. Padovan break; 39780a708f8fSGustavo F. Padovan 39790a708f8fSGustavo F. Padovan default: 398048454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNREFUSED); 39810a708f8fSGustavo F. Padovan break; 39820a708f8fSGustavo F. Padovan } 39830a708f8fSGustavo F. Padovan 39846be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 39853df91ea2SAndrei Emeltchenko 39863df91ea2SAndrei Emeltchenko unlock: 39873df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 39883df91ea2SAndrei Emeltchenko 39893df91ea2SAndrei Emeltchenko return err; 39900a708f8fSGustavo F. Padovan } 39910a708f8fSGustavo F. Padovan 399247d1ec61SGustavo F. Padovan static inline void set_default_fcs(struct l2cap_chan *chan) 39930a708f8fSGustavo F. Padovan { 39940a708f8fSGustavo F. Padovan /* FCS is enabled only in ERTM or streaming mode, if one or both 39950a708f8fSGustavo F. Padovan * sides request it. 39960a708f8fSGustavo F. Padovan */ 39970c1bc5c6SGustavo F. Padovan if (chan->mode != L2CAP_MODE_ERTM && chan->mode != L2CAP_MODE_STREAMING) 399847d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_NONE; 3999f2592d3eSAndrei Emeltchenko else if (!test_bit(CONF_RECV_NO_FCS, &chan->conf_state)) 400047d1ec61SGustavo F. Padovan chan->fcs = L2CAP_FCS_CRC16; 40010a708f8fSGustavo F. Padovan } 40020a708f8fSGustavo F. Padovan 400329d8a590SAndrei Emeltchenko static void l2cap_send_efs_conf_rsp(struct l2cap_chan *chan, void *data, 400429d8a590SAndrei Emeltchenko u8 ident, u16 flags) 400529d8a590SAndrei Emeltchenko { 400629d8a590SAndrei Emeltchenko struct l2cap_conn *conn = chan->conn; 400729d8a590SAndrei Emeltchenko 400829d8a590SAndrei Emeltchenko BT_DBG("conn %p chan %p ident %d flags 0x%4.4x", conn, chan, ident, 400929d8a590SAndrei Emeltchenko flags); 401029d8a590SAndrei Emeltchenko 401129d8a590SAndrei Emeltchenko clear_bit(CONF_LOC_CONF_PEND, &chan->conf_state); 401229d8a590SAndrei Emeltchenko set_bit(CONF_OUTPUT_DONE, &chan->conf_state); 401329d8a590SAndrei Emeltchenko 401429d8a590SAndrei Emeltchenko l2cap_send_cmd(conn, ident, L2CAP_CONF_RSP, 401529d8a590SAndrei Emeltchenko l2cap_build_conf_rsp(chan, data, 401629d8a590SAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), data); 401729d8a590SAndrei Emeltchenko } 401829d8a590SAndrei Emeltchenko 4019662d652dSJohan Hedberg static void cmd_reject_invalid_cid(struct l2cap_conn *conn, u8 ident, 4020662d652dSJohan Hedberg u16 scid, u16 dcid) 4021662d652dSJohan Hedberg { 4022662d652dSJohan Hedberg struct l2cap_cmd_rej_cid rej; 4023662d652dSJohan Hedberg 4024dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_INVALID_CID); 4025662d652dSJohan Hedberg rej.scid = __cpu_to_le16(scid); 4026662d652dSJohan Hedberg rej.dcid = __cpu_to_le16(dcid); 4027662d652dSJohan Hedberg 4028662d652dSJohan Hedberg l2cap_send_cmd(conn, ident, L2CAP_COMMAND_REJ, sizeof(rej), &rej); 4029662d652dSJohan Hedberg } 4030662d652dSJohan Hedberg 40312d792818SGustavo Padovan static inline int l2cap_config_req(struct l2cap_conn *conn, 40322d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 40332d792818SGustavo Padovan u8 *data) 40340a708f8fSGustavo F. Padovan { 40350a708f8fSGustavo F. Padovan struct l2cap_conf_req *req = (struct l2cap_conf_req *) data; 40360a708f8fSGustavo F. Padovan u16 dcid, flags; 40370a708f8fSGustavo F. Padovan u8 rsp[64]; 403848454079SGustavo F. Padovan struct l2cap_chan *chan; 40393c588192SMat Martineau int len, err = 0; 40400a708f8fSGustavo F. Padovan 4041cb3b3152SJohan Hedberg if (cmd_len < sizeof(*req)) 4042cb3b3152SJohan Hedberg return -EPROTO; 4043cb3b3152SJohan Hedberg 40440a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 40450a708f8fSGustavo F. Padovan flags = __le16_to_cpu(req->flags); 40460a708f8fSGustavo F. Padovan 40470a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x flags 0x%2.2x", dcid, flags); 40480a708f8fSGustavo F. Padovan 4049baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, dcid); 4050662d652dSJohan Hedberg if (!chan) { 4051662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, 0); 4052662d652dSJohan Hedberg return 0; 4053662d652dSJohan Hedberg } 40540a708f8fSGustavo F. Padovan 4055033b1142SDavid S. Miller if (chan->state != BT_CONFIG && chan->state != BT_CONNECT2) { 4056662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4057662d652dSJohan Hedberg chan->dcid); 40580a708f8fSGustavo F. Padovan goto unlock; 40590a708f8fSGustavo F. Padovan } 40600a708f8fSGustavo F. Padovan 40610a708f8fSGustavo F. Padovan /* Reject if config buffer is too small. */ 40620a708f8fSGustavo F. Padovan len = cmd_len - sizeof(*req); 4063cb3b3152SJohan Hedberg if (chan->conf_len + len > sizeof(chan->conf_req)) { 40640a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4065fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40660a708f8fSGustavo F. Padovan L2CAP_CONF_REJECT, flags), rsp); 40670a708f8fSGustavo F. Padovan goto unlock; 40680a708f8fSGustavo F. Padovan } 40690a708f8fSGustavo F. Padovan 40700a708f8fSGustavo F. Padovan /* Store config. */ 407173ffa904SGustavo F. Padovan memcpy(chan->conf_req + chan->conf_len, req->data, len); 407273ffa904SGustavo F. Padovan chan->conf_len += len; 40730a708f8fSGustavo F. Padovan 407459e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) { 40750a708f8fSGustavo F. Padovan /* Incomplete config. Send empty response. */ 40760a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, 4077fe4128e0SGustavo F. Padovan l2cap_build_conf_rsp(chan, rsp, 40785325e5bbSAndrei Emeltchenko L2CAP_CONF_SUCCESS, flags), rsp); 40790a708f8fSGustavo F. Padovan goto unlock; 40800a708f8fSGustavo F. Padovan } 40810a708f8fSGustavo F. Padovan 40820a708f8fSGustavo F. Padovan /* Complete config. */ 408373ffa904SGustavo F. Padovan len = l2cap_parse_conf_req(chan, rsp); 40840a708f8fSGustavo F. Padovan if (len < 0) { 40855e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 40860a708f8fSGustavo F. Padovan goto unlock; 40870a708f8fSGustavo F. Padovan } 40880a708f8fSGustavo F. Padovan 40891500109bSMat Martineau chan->ident = cmd->ident; 40900a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_CONF_RSP, len, rsp); 409173ffa904SGustavo F. Padovan chan->num_conf_rsp++; 40920a708f8fSGustavo F. Padovan 40930a708f8fSGustavo F. Padovan /* Reset config buffer. */ 409473ffa904SGustavo F. Padovan chan->conf_len = 0; 40950a708f8fSGustavo F. Padovan 4096c1360a1cSGustavo F. Padovan if (!test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) 40970a708f8fSGustavo F. Padovan goto unlock; 40980a708f8fSGustavo F. Padovan 4099c1360a1cSGustavo F. Padovan if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 410047d1ec61SGustavo F. Padovan set_default_fcs(chan); 41010a708f8fSGustavo F. Padovan 4102105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4103105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 41043c588192SMat Martineau err = l2cap_ertm_init(chan); 41050a708f8fSGustavo F. Padovan 41063c588192SMat Martineau if (err < 0) 41075e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 41083c588192SMat Martineau else 4109cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 41103c588192SMat Martineau 41110a708f8fSGustavo F. Padovan goto unlock; 41120a708f8fSGustavo F. Padovan } 41130a708f8fSGustavo F. Padovan 4114c1360a1cSGustavo F. Padovan if (!test_and_set_bit(CONF_REQ_SENT, &chan->conf_state)) { 41150a708f8fSGustavo F. Padovan u8 buf[64]; 41160a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_CONF_REQ, 411773ffa904SGustavo F. Padovan l2cap_build_conf_req(chan, buf), buf); 411873ffa904SGustavo F. Padovan chan->num_conf_req++; 41190a708f8fSGustavo F. Padovan } 41200a708f8fSGustavo F. Padovan 41210e8b207eSAndrei Emeltchenko /* Got Conf Rsp PENDING from remote side and asume we sent 41220e8b207eSAndrei Emeltchenko Conf Rsp PENDING in the code above */ 41230e8b207eSAndrei Emeltchenko if (test_bit(CONF_REM_CONF_PEND, &chan->conf_state) && 41240e8b207eSAndrei Emeltchenko test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41250e8b207eSAndrei Emeltchenko 41260e8b207eSAndrei Emeltchenko /* check compatibility */ 41270e8b207eSAndrei Emeltchenko 412879de886dSAndrei Emeltchenko /* Send rsp for BR/EDR channel */ 4129f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) 413029d8a590SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, rsp, cmd->ident, flags); 413179de886dSAndrei Emeltchenko else 413279de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41330e8b207eSAndrei Emeltchenko } 41340e8b207eSAndrei Emeltchenko 41350a708f8fSGustavo F. Padovan unlock: 41366be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 41373c588192SMat Martineau return err; 41380a708f8fSGustavo F. Padovan } 41390a708f8fSGustavo F. Padovan 41402d792818SGustavo Padovan static inline int l2cap_config_rsp(struct l2cap_conn *conn, 4141cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4142cb3b3152SJohan Hedberg u8 *data) 41430a708f8fSGustavo F. Padovan { 41440a708f8fSGustavo F. Padovan struct l2cap_conf_rsp *rsp = (struct l2cap_conf_rsp *)data; 41450a708f8fSGustavo F. Padovan u16 scid, flags, result; 414648454079SGustavo F. Padovan struct l2cap_chan *chan; 4147cb3b3152SJohan Hedberg int len = cmd_len - sizeof(*rsp); 41483c588192SMat Martineau int err = 0; 41490a708f8fSGustavo F. Padovan 4150cb3b3152SJohan Hedberg if (cmd_len < sizeof(*rsp)) 4151cb3b3152SJohan Hedberg return -EPROTO; 4152cb3b3152SJohan Hedberg 41530a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 41540a708f8fSGustavo F. Padovan flags = __le16_to_cpu(rsp->flags); 41550a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 41560a708f8fSGustavo F. Padovan 415761386cbaSAndrei Emeltchenko BT_DBG("scid 0x%4.4x flags 0x%2.2x result 0x%2.2x len %d", scid, flags, 415861386cbaSAndrei Emeltchenko result, len); 41590a708f8fSGustavo F. Padovan 4160baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, scid); 416148454079SGustavo F. Padovan if (!chan) 41620a708f8fSGustavo F. Padovan return 0; 41630a708f8fSGustavo F. Padovan 41640a708f8fSGustavo F. Padovan switch (result) { 41650a708f8fSGustavo F. Padovan case L2CAP_CONF_SUCCESS: 416647d1ec61SGustavo F. Padovan l2cap_conf_rfc_get(chan, rsp->data, len); 41670e8b207eSAndrei Emeltchenko clear_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41680a708f8fSGustavo F. Padovan break; 41690a708f8fSGustavo F. Padovan 41700e8b207eSAndrei Emeltchenko case L2CAP_CONF_PENDING: 41710e8b207eSAndrei Emeltchenko set_bit(CONF_REM_CONF_PEND, &chan->conf_state); 41720e8b207eSAndrei Emeltchenko 41730e8b207eSAndrei Emeltchenko if (test_bit(CONF_LOC_CONF_PEND, &chan->conf_state)) { 41740e8b207eSAndrei Emeltchenko char buf[64]; 41750e8b207eSAndrei Emeltchenko 41760e8b207eSAndrei Emeltchenko len = l2cap_parse_conf_rsp(chan, rsp->data, len, 41770e8b207eSAndrei Emeltchenko buf, &result); 41780e8b207eSAndrei Emeltchenko if (len < 0) { 41795e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 41800e8b207eSAndrei Emeltchenko goto done; 41810e8b207eSAndrei Emeltchenko } 41820e8b207eSAndrei Emeltchenko 4183f351bc72SAndrei Emeltchenko if (!chan->hs_hcon) { 418479de886dSAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, buf, cmd->ident, 418579de886dSAndrei Emeltchenko 0); 41865ce66b59SAndrei Emeltchenko } else { 41875ce66b59SAndrei Emeltchenko if (l2cap_check_efs(chan)) { 41885ce66b59SAndrei Emeltchenko amp_create_logical_link(chan); 418979de886dSAndrei Emeltchenko chan->ident = cmd->ident; 41900e8b207eSAndrei Emeltchenko } 41915ce66b59SAndrei Emeltchenko } 41925ce66b59SAndrei Emeltchenko } 41930e8b207eSAndrei Emeltchenko goto done; 41940e8b207eSAndrei Emeltchenko 41950a708f8fSGustavo F. Padovan case L2CAP_CONF_UNACCEPT: 419673ffa904SGustavo F. Padovan if (chan->num_conf_rsp <= L2CAP_CONF_MAX_CONF_RSP) { 41970a708f8fSGustavo F. Padovan char req[64]; 41980a708f8fSGustavo F. Padovan 41990a708f8fSGustavo F. Padovan if (len > sizeof(req) - sizeof(struct l2cap_conf_req)) { 42005e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42010a708f8fSGustavo F. Padovan goto done; 42020a708f8fSGustavo F. Padovan } 42030a708f8fSGustavo F. Padovan 42040a708f8fSGustavo F. Padovan /* throw out any old stored conf requests */ 42050a708f8fSGustavo F. Padovan result = L2CAP_CONF_SUCCESS; 4206b4450035SGustavo F. Padovan len = l2cap_parse_conf_rsp(chan, rsp->data, len, 4207b4450035SGustavo F. Padovan req, &result); 42080a708f8fSGustavo F. Padovan if (len < 0) { 42095e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42100a708f8fSGustavo F. Padovan goto done; 42110a708f8fSGustavo F. Padovan } 42120a708f8fSGustavo F. Padovan 42130a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, l2cap_get_ident(conn), 42140a708f8fSGustavo F. Padovan L2CAP_CONF_REQ, len, req); 421573ffa904SGustavo F. Padovan chan->num_conf_req++; 42160a708f8fSGustavo F. Padovan if (result != L2CAP_CONF_SUCCESS) 42170a708f8fSGustavo F. Padovan goto done; 42180a708f8fSGustavo F. Padovan break; 42190a708f8fSGustavo F. Padovan } 42200a708f8fSGustavo F. Padovan 42210a708f8fSGustavo F. Padovan default: 42226be36555SAndrei Emeltchenko l2cap_chan_set_err(chan, ECONNRESET); 42232e0052e4SAndrei Emeltchenko 4224ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_REJ_TIMEOUT); 42255e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 42260a708f8fSGustavo F. Padovan goto done; 42270a708f8fSGustavo F. Padovan } 42280a708f8fSGustavo F. Padovan 422959e54bd1SAndrei Emeltchenko if (flags & L2CAP_CONF_FLAG_CONTINUATION) 42300a708f8fSGustavo F. Padovan goto done; 42310a708f8fSGustavo F. Padovan 4232c1360a1cSGustavo F. Padovan set_bit(CONF_INPUT_DONE, &chan->conf_state); 42330a708f8fSGustavo F. Padovan 4234c1360a1cSGustavo F. Padovan if (test_bit(CONF_OUTPUT_DONE, &chan->conf_state)) { 423547d1ec61SGustavo F. Padovan set_default_fcs(chan); 42360a708f8fSGustavo F. Padovan 4237105bdf9eSMat Martineau if (chan->mode == L2CAP_MODE_ERTM || 4238105bdf9eSMat Martineau chan->mode == L2CAP_MODE_STREAMING) 42393c588192SMat Martineau err = l2cap_ertm_init(chan); 42400a708f8fSGustavo F. Padovan 42413c588192SMat Martineau if (err < 0) 42425e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 42433c588192SMat Martineau else 4244cf4cd009SAndrei Emeltchenko l2cap_chan_ready(chan); 42450a708f8fSGustavo F. Padovan } 42460a708f8fSGustavo F. Padovan 42470a708f8fSGustavo F. Padovan done: 42486be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42493c588192SMat Martineau return err; 42500a708f8fSGustavo F. Padovan } 42510a708f8fSGustavo F. Padovan 42522d792818SGustavo Padovan static inline int l2cap_disconnect_req(struct l2cap_conn *conn, 4253cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4254cb3b3152SJohan Hedberg u8 *data) 42550a708f8fSGustavo F. Padovan { 42560a708f8fSGustavo F. Padovan struct l2cap_disconn_req *req = (struct l2cap_disconn_req *) data; 42570a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp rsp; 42580a708f8fSGustavo F. Padovan u16 dcid, scid; 425948454079SGustavo F. Padovan struct l2cap_chan *chan; 42600a708f8fSGustavo F. Padovan 4261cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4262cb3b3152SJohan Hedberg return -EPROTO; 4263cb3b3152SJohan Hedberg 42640a708f8fSGustavo F. Padovan scid = __le16_to_cpu(req->scid); 42650a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(req->dcid); 42660a708f8fSGustavo F. Padovan 42670a708f8fSGustavo F. Padovan BT_DBG("scid 0x%4.4x dcid 0x%4.4x", scid, dcid); 42680a708f8fSGustavo F. Padovan 42693df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 42703df91ea2SAndrei Emeltchenko 42713df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, dcid); 42723df91ea2SAndrei Emeltchenko if (!chan) { 42733df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 4274662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, dcid, scid); 4275662d652dSJohan Hedberg return 0; 42763df91ea2SAndrei Emeltchenko } 42770a708f8fSGustavo F. Padovan 42786be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 42796be36555SAndrei Emeltchenko 4280fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 4281fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 42820a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_DISCONN_RSP, sizeof(rsp), &rsp); 42830a708f8fSGustavo F. Padovan 42845ec1bbe5SGustavo Padovan chan->ops->set_shutdown(chan); 42850a708f8fSGustavo F. Padovan 428661d6ef3eSMat Martineau l2cap_chan_hold(chan); 428748454079SGustavo F. Padovan l2cap_chan_del(chan, ECONNRESET); 42886be36555SAndrei Emeltchenko 42896be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 42900a708f8fSGustavo F. Padovan 429180b98027SGustavo Padovan chan->ops->close(chan); 429261d6ef3eSMat Martineau l2cap_chan_put(chan); 42933df91ea2SAndrei Emeltchenko 42943df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 42953df91ea2SAndrei Emeltchenko 42960a708f8fSGustavo F. Padovan return 0; 42970a708f8fSGustavo F. Padovan } 42980a708f8fSGustavo F. Padovan 42992d792818SGustavo Padovan static inline int l2cap_disconnect_rsp(struct l2cap_conn *conn, 4300cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4301cb3b3152SJohan Hedberg u8 *data) 43020a708f8fSGustavo F. Padovan { 43030a708f8fSGustavo F. Padovan struct l2cap_disconn_rsp *rsp = (struct l2cap_disconn_rsp *) data; 43040a708f8fSGustavo F. Padovan u16 dcid, scid; 430548454079SGustavo F. Padovan struct l2cap_chan *chan; 43060a708f8fSGustavo F. Padovan 4307cb3b3152SJohan Hedberg if (cmd_len != sizeof(*rsp)) 4308cb3b3152SJohan Hedberg return -EPROTO; 4309cb3b3152SJohan Hedberg 43100a708f8fSGustavo F. Padovan scid = __le16_to_cpu(rsp->scid); 43110a708f8fSGustavo F. Padovan dcid = __le16_to_cpu(rsp->dcid); 43120a708f8fSGustavo F. Padovan 43130a708f8fSGustavo F. Padovan BT_DBG("dcid 0x%4.4x scid 0x%4.4x", dcid, scid); 43140a708f8fSGustavo F. Padovan 43153df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 43163df91ea2SAndrei Emeltchenko 43173df91ea2SAndrei Emeltchenko chan = __l2cap_get_chan_by_scid(conn, scid); 43183df91ea2SAndrei Emeltchenko if (!chan) { 43193df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43200a708f8fSGustavo F. Padovan return 0; 43213df91ea2SAndrei Emeltchenko } 43220a708f8fSGustavo F. Padovan 43236be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 432448454079SGustavo F. Padovan 432561d6ef3eSMat Martineau l2cap_chan_hold(chan); 432648454079SGustavo F. Padovan l2cap_chan_del(chan, 0); 43276be36555SAndrei Emeltchenko 43286be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 43290a708f8fSGustavo F. Padovan 433080b98027SGustavo Padovan chan->ops->close(chan); 433161d6ef3eSMat Martineau l2cap_chan_put(chan); 43323df91ea2SAndrei Emeltchenko 43333df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 43343df91ea2SAndrei Emeltchenko 43350a708f8fSGustavo F. Padovan return 0; 43360a708f8fSGustavo F. Padovan } 43370a708f8fSGustavo F. Padovan 43382d792818SGustavo Padovan static inline int l2cap_information_req(struct l2cap_conn *conn, 4339cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4340cb3b3152SJohan Hedberg u8 *data) 43410a708f8fSGustavo F. Padovan { 43420a708f8fSGustavo F. Padovan struct l2cap_info_req *req = (struct l2cap_info_req *) data; 43430a708f8fSGustavo F. Padovan u16 type; 43440a708f8fSGustavo F. Padovan 4345cb3b3152SJohan Hedberg if (cmd_len != sizeof(*req)) 4346cb3b3152SJohan Hedberg return -EPROTO; 4347cb3b3152SJohan Hedberg 43480a708f8fSGustavo F. Padovan type = __le16_to_cpu(req->type); 43490a708f8fSGustavo F. Padovan 43500a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x", type); 43510a708f8fSGustavo F. Padovan 43520a708f8fSGustavo F. Padovan if (type == L2CAP_IT_FEAT_MASK) { 43530a708f8fSGustavo F. Padovan u8 buf[8]; 43540a708f8fSGustavo F. Padovan u32 feat_mask = l2cap_feat_mask; 43550a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 4356dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FEAT_MASK); 4357dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 43580a708f8fSGustavo F. Padovan if (!disable_ertm) 43590a708f8fSGustavo F. Padovan feat_mask |= L2CAP_FEAT_ERTM | L2CAP_FEAT_STREAMING 43600a708f8fSGustavo F. Padovan | L2CAP_FEAT_FCS; 4361848566b3SMarcel Holtmann if (conn->hs_enabled) 43626327eb98SAndrei Emeltchenko feat_mask |= L2CAP_FEAT_EXT_FLOW 43636327eb98SAndrei Emeltchenko | L2CAP_FEAT_EXT_WINDOW; 4364a5fd6f30SAndrei Emeltchenko 43650a708f8fSGustavo F. Padovan put_unaligned_le32(feat_mask, rsp->data); 43662d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43672d792818SGustavo Padovan buf); 43680a708f8fSGustavo F. Padovan } else if (type == L2CAP_IT_FIXED_CHAN) { 43690a708f8fSGustavo F. Padovan u8 buf[12]; 43700a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) buf; 437150a147cdSMat Martineau 4372848566b3SMarcel Holtmann if (conn->hs_enabled) 437350a147cdSMat Martineau l2cap_fixed_chan[0] |= L2CAP_FC_A2MP; 437450a147cdSMat Martineau else 437550a147cdSMat Martineau l2cap_fixed_chan[0] &= ~L2CAP_FC_A2MP; 437650a147cdSMat Martineau 4377dcf4adbfSJoe Perches rsp->type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 4378dcf4adbfSJoe Perches rsp->result = cpu_to_le16(L2CAP_IR_SUCCESS); 4379c6337ea6SAndrei Emeltchenko memcpy(rsp->data, l2cap_fixed_chan, sizeof(l2cap_fixed_chan)); 43802d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(buf), 43812d792818SGustavo Padovan buf); 43820a708f8fSGustavo F. Padovan } else { 43830a708f8fSGustavo F. Padovan struct l2cap_info_rsp rsp; 43840a708f8fSGustavo F. Padovan rsp.type = cpu_to_le16(type); 4385dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_IR_NOTSUPP); 43862d792818SGustavo Padovan l2cap_send_cmd(conn, cmd->ident, L2CAP_INFO_RSP, sizeof(rsp), 43872d792818SGustavo Padovan &rsp); 43880a708f8fSGustavo F. Padovan } 43890a708f8fSGustavo F. Padovan 43900a708f8fSGustavo F. Padovan return 0; 43910a708f8fSGustavo F. Padovan } 43920a708f8fSGustavo F. Padovan 43932d792818SGustavo Padovan static inline int l2cap_information_rsp(struct l2cap_conn *conn, 4394cb3b3152SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 4395cb3b3152SJohan Hedberg u8 *data) 43960a708f8fSGustavo F. Padovan { 43970a708f8fSGustavo F. Padovan struct l2cap_info_rsp *rsp = (struct l2cap_info_rsp *) data; 43980a708f8fSGustavo F. Padovan u16 type, result; 43990a708f8fSGustavo F. Padovan 44003f6fa3d4SJaganath Kanakkassery if (cmd_len < sizeof(*rsp)) 4401cb3b3152SJohan Hedberg return -EPROTO; 4402cb3b3152SJohan Hedberg 44030a708f8fSGustavo F. Padovan type = __le16_to_cpu(rsp->type); 44040a708f8fSGustavo F. Padovan result = __le16_to_cpu(rsp->result); 44050a708f8fSGustavo F. Padovan 44060a708f8fSGustavo F. Padovan BT_DBG("type 0x%4.4x result 0x%2.2x", type, result); 44070a708f8fSGustavo F. Padovan 4408e90165beSAndrei Emeltchenko /* L2CAP Info req/rsp are unbound to channels, add extra checks */ 4409e90165beSAndrei Emeltchenko if (cmd->ident != conn->info_ident || 4410e90165beSAndrei Emeltchenko conn->info_state & L2CAP_INFO_FEAT_MASK_REQ_DONE) 4411e90165beSAndrei Emeltchenko return 0; 4412e90165beSAndrei Emeltchenko 441317cd3f37SUlisses Furquim cancel_delayed_work(&conn->info_timer); 44140a708f8fSGustavo F. Padovan 44150a708f8fSGustavo F. Padovan if (result != L2CAP_IR_SUCCESS) { 44160a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44170a708f8fSGustavo F. Padovan conn->info_ident = 0; 44180a708f8fSGustavo F. Padovan 44190a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44200a708f8fSGustavo F. Padovan 44210a708f8fSGustavo F. Padovan return 0; 44220a708f8fSGustavo F. Padovan } 44230a708f8fSGustavo F. Padovan 4424978c93b9SAndrei Emeltchenko switch (type) { 4425978c93b9SAndrei Emeltchenko case L2CAP_IT_FEAT_MASK: 44260a708f8fSGustavo F. Padovan conn->feat_mask = get_unaligned_le32(rsp->data); 44270a708f8fSGustavo F. Padovan 44280a708f8fSGustavo F. Padovan if (conn->feat_mask & L2CAP_FEAT_FIXED_CHAN) { 44290a708f8fSGustavo F. Padovan struct l2cap_info_req req; 4430dcf4adbfSJoe Perches req.type = cpu_to_le16(L2CAP_IT_FIXED_CHAN); 44310a708f8fSGustavo F. Padovan 44320a708f8fSGustavo F. Padovan conn->info_ident = l2cap_get_ident(conn); 44330a708f8fSGustavo F. Padovan 44340a708f8fSGustavo F. Padovan l2cap_send_cmd(conn, conn->info_ident, 44350a708f8fSGustavo F. Padovan L2CAP_INFO_REQ, sizeof(req), &req); 44360a708f8fSGustavo F. Padovan } else { 44370a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44380a708f8fSGustavo F. Padovan conn->info_ident = 0; 44390a708f8fSGustavo F. Padovan 44400a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 44410a708f8fSGustavo F. Padovan } 4442978c93b9SAndrei Emeltchenko break; 4443978c93b9SAndrei Emeltchenko 4444978c93b9SAndrei Emeltchenko case L2CAP_IT_FIXED_CHAN: 4445978c93b9SAndrei Emeltchenko conn->fixed_chan_mask = rsp->data[0]; 44460a708f8fSGustavo F. Padovan conn->info_state |= L2CAP_INFO_FEAT_MASK_REQ_DONE; 44470a708f8fSGustavo F. Padovan conn->info_ident = 0; 44480a708f8fSGustavo F. Padovan 44490a708f8fSGustavo F. Padovan l2cap_conn_start(conn); 4450978c93b9SAndrei Emeltchenko break; 44510a708f8fSGustavo F. Padovan } 44520a708f8fSGustavo F. Padovan 44530a708f8fSGustavo F. Padovan return 0; 44540a708f8fSGustavo F. Padovan } 44550a708f8fSGustavo F. Padovan 44561700915fSMat Martineau static int l2cap_create_channel_req(struct l2cap_conn *conn, 44572d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 44582d792818SGustavo Padovan u16 cmd_len, void *data) 4459f94ff6ffSMat Martineau { 4460f94ff6ffSMat Martineau struct l2cap_create_chan_req *req = data; 44616e1df6a6SAndrei Emeltchenko struct l2cap_create_chan_rsp rsp; 44621700915fSMat Martineau struct l2cap_chan *chan; 44636e1df6a6SAndrei Emeltchenko struct hci_dev *hdev; 4464f94ff6ffSMat Martineau u16 psm, scid; 4465f94ff6ffSMat Martineau 4466f94ff6ffSMat Martineau if (cmd_len != sizeof(*req)) 4467f94ff6ffSMat Martineau return -EPROTO; 4468f94ff6ffSMat Martineau 4469848566b3SMarcel Holtmann if (!conn->hs_enabled) 4470f94ff6ffSMat Martineau return -EINVAL; 4471f94ff6ffSMat Martineau 4472f94ff6ffSMat Martineau psm = le16_to_cpu(req->psm); 4473f94ff6ffSMat Martineau scid = le16_to_cpu(req->scid); 4474f94ff6ffSMat Martineau 4475ad0ac6caSAndrei Emeltchenko BT_DBG("psm 0x%2.2x, scid 0x%4.4x, amp_id %d", psm, scid, req->amp_id); 4476f94ff6ffSMat Martineau 44776e1df6a6SAndrei Emeltchenko /* For controller id 0 make BR/EDR connection */ 44786ed971caSMarcel Holtmann if (req->amp_id == AMP_ID_BREDR) { 44796e1df6a6SAndrei Emeltchenko l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44806e1df6a6SAndrei Emeltchenko req->amp_id); 44816e1df6a6SAndrei Emeltchenko return 0; 44826e1df6a6SAndrei Emeltchenko } 44831700915fSMat Martineau 44841700915fSMat Martineau /* Validate AMP controller id */ 44851700915fSMat Martineau hdev = hci_dev_get(req->amp_id); 44866e1df6a6SAndrei Emeltchenko if (!hdev) 44876e1df6a6SAndrei Emeltchenko goto error; 44881700915fSMat Martineau 44896e1df6a6SAndrei Emeltchenko if (hdev->dev_type != HCI_AMP || !test_bit(HCI_UP, &hdev->flags)) { 44906e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 44916e1df6a6SAndrei Emeltchenko goto error; 44926e1df6a6SAndrei Emeltchenko } 44936e1df6a6SAndrei Emeltchenko 44946e1df6a6SAndrei Emeltchenko chan = l2cap_connect(conn, cmd, data, L2CAP_CREATE_CHAN_RSP, 44956e1df6a6SAndrei Emeltchenko req->amp_id); 44966e1df6a6SAndrei Emeltchenko if (chan) { 44976e1df6a6SAndrei Emeltchenko struct amp_mgr *mgr = conn->hcon->amp_mgr; 44986e1df6a6SAndrei Emeltchenko struct hci_conn *hs_hcon; 44996e1df6a6SAndrei Emeltchenko 450098e0f7eaSMarcel Holtmann hs_hcon = hci_conn_hash_lookup_ba(hdev, AMP_LINK, 450198e0f7eaSMarcel Holtmann &conn->hcon->dst); 45026e1df6a6SAndrei Emeltchenko if (!hs_hcon) { 45036e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 4504662d652dSJohan Hedberg cmd_reject_invalid_cid(conn, cmd->ident, chan->scid, 4505662d652dSJohan Hedberg chan->dcid); 4506662d652dSJohan Hedberg return 0; 45076e1df6a6SAndrei Emeltchenko } 45086e1df6a6SAndrei Emeltchenko 45096e1df6a6SAndrei Emeltchenko BT_DBG("mgr %p bredr_chan %p hs_hcon %p", mgr, chan, hs_hcon); 45106e1df6a6SAndrei Emeltchenko 45116e1df6a6SAndrei Emeltchenko mgr->bredr_chan = chan; 45126e1df6a6SAndrei Emeltchenko chan->hs_hcon = hs_hcon; 4513fd45bf4cSAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 45146e1df6a6SAndrei Emeltchenko conn->mtu = hdev->block_mtu; 45156e1df6a6SAndrei Emeltchenko } 45166e1df6a6SAndrei Emeltchenko 45176e1df6a6SAndrei Emeltchenko hci_dev_put(hdev); 45186e1df6a6SAndrei Emeltchenko 45196e1df6a6SAndrei Emeltchenko return 0; 45206e1df6a6SAndrei Emeltchenko 45216e1df6a6SAndrei Emeltchenko error: 4522f94ff6ffSMat Martineau rsp.dcid = 0; 4523f94ff6ffSMat Martineau rsp.scid = cpu_to_le16(scid); 4524dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_BAD_AMP); 4525dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 4526f94ff6ffSMat Martineau 4527f94ff6ffSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_CREATE_CHAN_RSP, 4528f94ff6ffSMat Martineau sizeof(rsp), &rsp); 4529f94ff6ffSMat Martineau 4530dc280801SJohan Hedberg return 0; 4531f94ff6ffSMat Martineau } 4532f94ff6ffSMat Martineau 45338eb200bdSMat Martineau static void l2cap_send_move_chan_req(struct l2cap_chan *chan, u8 dest_amp_id) 45348eb200bdSMat Martineau { 45358eb200bdSMat Martineau struct l2cap_move_chan_req req; 45368eb200bdSMat Martineau u8 ident; 45378eb200bdSMat Martineau 45388eb200bdSMat Martineau BT_DBG("chan %p, dest_amp_id %d", chan, dest_amp_id); 45398eb200bdSMat Martineau 45408eb200bdSMat Martineau ident = l2cap_get_ident(chan->conn); 45418eb200bdSMat Martineau chan->ident = ident; 45428eb200bdSMat Martineau 45438eb200bdSMat Martineau req.icid = cpu_to_le16(chan->scid); 45448eb200bdSMat Martineau req.dest_amp_id = dest_amp_id; 45458eb200bdSMat Martineau 45468eb200bdSMat Martineau l2cap_send_cmd(chan->conn, ident, L2CAP_MOVE_CHAN_REQ, sizeof(req), 45478eb200bdSMat Martineau &req); 45488eb200bdSMat Martineau 45498eb200bdSMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45508eb200bdSMat Martineau } 45518eb200bdSMat Martineau 45521500109bSMat Martineau static void l2cap_send_move_chan_rsp(struct l2cap_chan *chan, u16 result) 45538d5a04a1SMat Martineau { 45548d5a04a1SMat Martineau struct l2cap_move_chan_rsp rsp; 45558d5a04a1SMat Martineau 45561500109bSMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45578d5a04a1SMat Martineau 45581500109bSMat Martineau rsp.icid = cpu_to_le16(chan->dcid); 45598d5a04a1SMat Martineau rsp.result = cpu_to_le16(result); 45608d5a04a1SMat Martineau 45611500109bSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_RSP, 45621500109bSMat Martineau sizeof(rsp), &rsp); 45638d5a04a1SMat Martineau } 45648d5a04a1SMat Martineau 45655b155ef9SMat Martineau static void l2cap_send_move_chan_cfm(struct l2cap_chan *chan, u16 result) 45668d5a04a1SMat Martineau { 45678d5a04a1SMat Martineau struct l2cap_move_chan_cfm cfm; 45688d5a04a1SMat Martineau 45695b155ef9SMat Martineau BT_DBG("chan %p, result 0x%4.4x", chan, result); 45708d5a04a1SMat Martineau 45715b155ef9SMat Martineau chan->ident = l2cap_get_ident(chan->conn); 45728d5a04a1SMat Martineau 45735b155ef9SMat Martineau cfm.icid = cpu_to_le16(chan->scid); 45748d5a04a1SMat Martineau cfm.result = cpu_to_le16(result); 45758d5a04a1SMat Martineau 45765b155ef9SMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_MOVE_CHAN_CFM, 45775b155ef9SMat Martineau sizeof(cfm), &cfm); 45785b155ef9SMat Martineau 45795b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_TIMEOUT); 45805b155ef9SMat Martineau } 45815b155ef9SMat Martineau 45825b155ef9SMat Martineau static void l2cap_send_move_chan_cfm_icid(struct l2cap_conn *conn, u16 icid) 45835b155ef9SMat Martineau { 45845b155ef9SMat Martineau struct l2cap_move_chan_cfm cfm; 45855b155ef9SMat Martineau 45865b155ef9SMat Martineau BT_DBG("conn %p, icid 0x%4.4x", conn, icid); 45875b155ef9SMat Martineau 45885b155ef9SMat Martineau cfm.icid = cpu_to_le16(icid); 4589dcf4adbfSJoe Perches cfm.result = cpu_to_le16(L2CAP_MC_UNCONFIRMED); 45905b155ef9SMat Martineau 45915b155ef9SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), L2CAP_MOVE_CHAN_CFM, 45925b155ef9SMat Martineau sizeof(cfm), &cfm); 45938d5a04a1SMat Martineau } 45948d5a04a1SMat Martineau 45958d5a04a1SMat Martineau static void l2cap_send_move_chan_cfm_rsp(struct l2cap_conn *conn, u8 ident, 45968d5a04a1SMat Martineau u16 icid) 45978d5a04a1SMat Martineau { 45988d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp rsp; 45998d5a04a1SMat Martineau 4600ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 46018d5a04a1SMat Martineau 46028d5a04a1SMat Martineau rsp.icid = cpu_to_le16(icid); 46038d5a04a1SMat Martineau l2cap_send_cmd(conn, ident, L2CAP_MOVE_CHAN_CFM_RSP, sizeof(rsp), &rsp); 46048d5a04a1SMat Martineau } 46058d5a04a1SMat Martineau 46065f3847a4SMat Martineau static void __release_logical_link(struct l2cap_chan *chan) 46075f3847a4SMat Martineau { 46085f3847a4SMat Martineau chan->hs_hchan = NULL; 46095f3847a4SMat Martineau chan->hs_hcon = NULL; 46105f3847a4SMat Martineau 46115f3847a4SMat Martineau /* Placeholder - release the logical link */ 46125f3847a4SMat Martineau } 46135f3847a4SMat Martineau 46141500109bSMat Martineau static void l2cap_logical_fail(struct l2cap_chan *chan) 46151500109bSMat Martineau { 46161500109bSMat Martineau /* Logical link setup failed */ 46171500109bSMat Martineau if (chan->state != BT_CONNECTED) { 46181500109bSMat Martineau /* Create channel failure, disconnect */ 46195e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 46201500109bSMat Martineau return; 46211500109bSMat Martineau } 46221500109bSMat Martineau 46231500109bSMat Martineau switch (chan->move_role) { 46241500109bSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 46251500109bSMat Martineau l2cap_move_done(chan); 46261500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_SUPP); 46271500109bSMat Martineau break; 46281500109bSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 46291500109bSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_COMP || 46301500109bSMat Martineau chan->move_state == L2CAP_MOVE_WAIT_LOGICAL_CFM) { 46311500109bSMat Martineau /* Remote has only sent pending or 46321500109bSMat Martineau * success responses, clean up 46331500109bSMat Martineau */ 46341500109bSMat Martineau l2cap_move_done(chan); 46351500109bSMat Martineau } 46361500109bSMat Martineau 46371500109bSMat Martineau /* Other amp move states imply that the move 46381500109bSMat Martineau * has already aborted 46391500109bSMat Martineau */ 46401500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 46411500109bSMat Martineau break; 46421500109bSMat Martineau } 46431500109bSMat Martineau } 46441500109bSMat Martineau 46451500109bSMat Martineau static void l2cap_logical_finish_create(struct l2cap_chan *chan, 46461500109bSMat Martineau struct hci_chan *hchan) 46471500109bSMat Martineau { 46481500109bSMat Martineau struct l2cap_conf_rsp rsp; 46491500109bSMat Martineau 4650336178a3SAndrei Emeltchenko chan->hs_hchan = hchan; 46511500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46521500109bSMat Martineau 465335ba9561SAndrei Emeltchenko l2cap_send_efs_conf_rsp(chan, &rsp, chan->ident, 0); 46541500109bSMat Martineau 46551500109bSMat Martineau if (test_bit(CONF_INPUT_DONE, &chan->conf_state)) { 4656fe79c6feSAndrei Emeltchenko int err; 46571500109bSMat Martineau 46581500109bSMat Martineau set_default_fcs(chan); 46591500109bSMat Martineau 46601500109bSMat Martineau err = l2cap_ertm_init(chan); 46611500109bSMat Martineau if (err < 0) 46625e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, -err); 46631500109bSMat Martineau else 46641500109bSMat Martineau l2cap_chan_ready(chan); 46651500109bSMat Martineau } 46661500109bSMat Martineau } 46671500109bSMat Martineau 46681500109bSMat Martineau static void l2cap_logical_finish_move(struct l2cap_chan *chan, 46691500109bSMat Martineau struct hci_chan *hchan) 46701500109bSMat Martineau { 46711500109bSMat Martineau chan->hs_hcon = hchan->conn; 46721500109bSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 46731500109bSMat Martineau 46741500109bSMat Martineau BT_DBG("move_state %d", chan->move_state); 46751500109bSMat Martineau 46761500109bSMat Martineau switch (chan->move_state) { 46771500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 46781500109bSMat Martineau /* Move confirm will be sent after a success 46791500109bSMat Martineau * response is received 46801500109bSMat Martineau */ 46811500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 46821500109bSMat Martineau break; 46831500109bSMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_CFM: 46841500109bSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 46851500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 46861500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 46871500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 46881500109bSMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 46891500109bSMat Martineau } else if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 46901500109bSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 46911500109bSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 46921500109bSMat Martineau } 46931500109bSMat Martineau break; 46941500109bSMat Martineau default: 46951500109bSMat Martineau /* Move was not in expected state, free the channel */ 46961500109bSMat Martineau __release_logical_link(chan); 46971500109bSMat Martineau 46981500109bSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 46991500109bSMat Martineau } 47001500109bSMat Martineau } 47011500109bSMat Martineau 47021500109bSMat Martineau /* Call with chan locked */ 470327695fb4SAndrei Emeltchenko void l2cap_logical_cfm(struct l2cap_chan *chan, struct hci_chan *hchan, 47045b155ef9SMat Martineau u8 status) 47055b155ef9SMat Martineau { 47061500109bSMat Martineau BT_DBG("chan %p, hchan %p, status %d", chan, hchan, status); 47071500109bSMat Martineau 47081500109bSMat Martineau if (status) { 47091500109bSMat Martineau l2cap_logical_fail(chan); 47101500109bSMat Martineau __release_logical_link(chan); 47115b155ef9SMat Martineau return; 47125b155ef9SMat Martineau } 47135b155ef9SMat Martineau 47141500109bSMat Martineau if (chan->state != BT_CONNECTED) { 47151500109bSMat Martineau /* Ignore logical link if channel is on BR/EDR */ 47166ed971caSMarcel Holtmann if (chan->local_amp_id != AMP_ID_BREDR) 47171500109bSMat Martineau l2cap_logical_finish_create(chan, hchan); 47181500109bSMat Martineau } else { 47191500109bSMat Martineau l2cap_logical_finish_move(chan, hchan); 47201500109bSMat Martineau } 47211500109bSMat Martineau } 47221500109bSMat Martineau 47233f7a56c4SMat Martineau void l2cap_move_start(struct l2cap_chan *chan) 47243f7a56c4SMat Martineau { 47253f7a56c4SMat Martineau BT_DBG("chan %p", chan); 47263f7a56c4SMat Martineau 47276ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) { 47283f7a56c4SMat Martineau if (chan->chan_policy != BT_CHANNEL_POLICY_AMP_PREFERRED) 47293f7a56c4SMat Martineau return; 47303f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47313f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 47323f7a56c4SMat Martineau /* Placeholder - start physical link setup */ 47333f7a56c4SMat Martineau } else { 47343f7a56c4SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_INITIATOR; 47353f7a56c4SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 47363f7a56c4SMat Martineau chan->move_id = 0; 47373f7a56c4SMat Martineau l2cap_move_setup(chan); 47383f7a56c4SMat Martineau l2cap_send_move_chan_req(chan, 0); 47393f7a56c4SMat Martineau } 47403f7a56c4SMat Martineau } 47413f7a56c4SMat Martineau 47428eb200bdSMat Martineau static void l2cap_do_create(struct l2cap_chan *chan, int result, 47438eb200bdSMat Martineau u8 local_amp_id, u8 remote_amp_id) 47448eb200bdSMat Martineau { 474562748ca1SAndrei Emeltchenko BT_DBG("chan %p state %s %u -> %u", chan, state_to_string(chan->state), 474662748ca1SAndrei Emeltchenko local_amp_id, remote_amp_id); 474762748ca1SAndrei Emeltchenko 474812d6cc60SAndrei Emeltchenko chan->fcs = L2CAP_FCS_NONE; 474912d6cc60SAndrei Emeltchenko 475062748ca1SAndrei Emeltchenko /* Outgoing channel on AMP */ 475162748ca1SAndrei Emeltchenko if (chan->state == BT_CONNECT) { 475262748ca1SAndrei Emeltchenko if (result == L2CAP_CR_SUCCESS) { 475362748ca1SAndrei Emeltchenko chan->local_amp_id = local_amp_id; 475462748ca1SAndrei Emeltchenko l2cap_send_create_chan_req(chan, remote_amp_id); 475562748ca1SAndrei Emeltchenko } else { 475662748ca1SAndrei Emeltchenko /* Revert to BR/EDR connect */ 475762748ca1SAndrei Emeltchenko l2cap_send_conn_req(chan); 475862748ca1SAndrei Emeltchenko } 475962748ca1SAndrei Emeltchenko 476062748ca1SAndrei Emeltchenko return; 476162748ca1SAndrei Emeltchenko } 476262748ca1SAndrei Emeltchenko 476362748ca1SAndrei Emeltchenko /* Incoming channel on AMP */ 476462748ca1SAndrei Emeltchenko if (__l2cap_no_conn_pending(chan)) { 47658eb200bdSMat Martineau struct l2cap_conn_rsp rsp; 47668eb200bdSMat Martineau char buf[128]; 47678eb200bdSMat Martineau rsp.scid = cpu_to_le16(chan->dcid); 47688eb200bdSMat Martineau rsp.dcid = cpu_to_le16(chan->scid); 47698eb200bdSMat Martineau 47708eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 47718eb200bdSMat Martineau /* Send successful response */ 4772dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_SUCCESS); 4773dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47748eb200bdSMat Martineau } else { 47758eb200bdSMat Martineau /* Send negative response */ 4776dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CR_NO_MEM); 4777dcf4adbfSJoe Perches rsp.status = cpu_to_le16(L2CAP_CS_NO_INFO); 47788eb200bdSMat Martineau } 47798eb200bdSMat Martineau 47808eb200bdSMat Martineau l2cap_send_cmd(chan->conn, chan->ident, L2CAP_CREATE_CHAN_RSP, 47818eb200bdSMat Martineau sizeof(rsp), &rsp); 47828eb200bdSMat Martineau 47838eb200bdSMat Martineau if (result == L2CAP_CR_SUCCESS) { 4784f93fa273SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 47858eb200bdSMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 47868eb200bdSMat Martineau l2cap_send_cmd(chan->conn, l2cap_get_ident(chan->conn), 47878eb200bdSMat Martineau L2CAP_CONF_REQ, 47888eb200bdSMat Martineau l2cap_build_conf_req(chan, buf), buf); 47898eb200bdSMat Martineau chan->num_conf_req++; 47908eb200bdSMat Martineau } 47918eb200bdSMat Martineau } 47928eb200bdSMat Martineau } 47938eb200bdSMat Martineau 47948eb200bdSMat Martineau static void l2cap_do_move_initiate(struct l2cap_chan *chan, u8 local_amp_id, 47958eb200bdSMat Martineau u8 remote_amp_id) 47968eb200bdSMat Martineau { 47978eb200bdSMat Martineau l2cap_move_setup(chan); 47988eb200bdSMat Martineau chan->move_id = local_amp_id; 47998eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP; 48008eb200bdSMat Martineau 48018eb200bdSMat Martineau l2cap_send_move_chan_req(chan, remote_amp_id); 48028eb200bdSMat Martineau } 48038eb200bdSMat Martineau 48048eb200bdSMat Martineau static void l2cap_do_move_respond(struct l2cap_chan *chan, int result) 48058eb200bdSMat Martineau { 48068eb200bdSMat Martineau struct hci_chan *hchan = NULL; 48078eb200bdSMat Martineau 48088eb200bdSMat Martineau /* Placeholder - get hci_chan for logical link */ 48098eb200bdSMat Martineau 48108eb200bdSMat Martineau if (hchan) { 48118eb200bdSMat Martineau if (hchan->state == BT_CONNECTED) { 48128eb200bdSMat Martineau /* Logical link is ready to go */ 48138eb200bdSMat Martineau chan->hs_hcon = hchan->conn; 48148eb200bdSMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 48158eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 48168eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_SUCCESS); 48178eb200bdSMat Martineau 48188eb200bdSMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 48198eb200bdSMat Martineau } else { 48208eb200bdSMat Martineau /* Wait for logical link to be ready */ 48218eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 48228eb200bdSMat Martineau } 48238eb200bdSMat Martineau } else { 48248eb200bdSMat Martineau /* Logical link not available */ 48258eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, L2CAP_MR_NOT_ALLOWED); 48268eb200bdSMat Martineau } 48278eb200bdSMat Martineau } 48288eb200bdSMat Martineau 48298eb200bdSMat Martineau static void l2cap_do_move_cancel(struct l2cap_chan *chan, int result) 48308eb200bdSMat Martineau { 48318eb200bdSMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_RESPONDER) { 48328eb200bdSMat Martineau u8 rsp_result; 48338eb200bdSMat Martineau if (result == -EINVAL) 48348eb200bdSMat Martineau rsp_result = L2CAP_MR_BAD_ID; 48358eb200bdSMat Martineau else 48368eb200bdSMat Martineau rsp_result = L2CAP_MR_NOT_ALLOWED; 48378eb200bdSMat Martineau 48388eb200bdSMat Martineau l2cap_send_move_chan_rsp(chan, rsp_result); 48398eb200bdSMat Martineau } 48408eb200bdSMat Martineau 48418eb200bdSMat Martineau chan->move_role = L2CAP_MOVE_ROLE_NONE; 48428eb200bdSMat Martineau chan->move_state = L2CAP_MOVE_STABLE; 48438eb200bdSMat Martineau 48448eb200bdSMat Martineau /* Restart data transmission */ 48458eb200bdSMat Martineau l2cap_ertm_send(chan); 48468eb200bdSMat Martineau } 48478eb200bdSMat Martineau 4848a514b17fSAndrei Emeltchenko /* Invoke with locked chan */ 4849a514b17fSAndrei Emeltchenko void __l2cap_physical_cfm(struct l2cap_chan *chan, int result) 48508eb200bdSMat Martineau { 4851770bfefaSAndrei Emeltchenko u8 local_amp_id = chan->local_amp_id; 4852fffadc08SAndrei Emeltchenko u8 remote_amp_id = chan->remote_amp_id; 4853770bfefaSAndrei Emeltchenko 48548eb200bdSMat Martineau BT_DBG("chan %p, result %d, local_amp_id %d, remote_amp_id %d", 48558eb200bdSMat Martineau chan, result, local_amp_id, remote_amp_id); 48568eb200bdSMat Martineau 48578eb200bdSMat Martineau if (chan->state == BT_DISCONN || chan->state == BT_CLOSED) { 48588eb200bdSMat Martineau l2cap_chan_unlock(chan); 48598eb200bdSMat Martineau return; 48608eb200bdSMat Martineau } 48618eb200bdSMat Martineau 48628eb200bdSMat Martineau if (chan->state != BT_CONNECTED) { 48638eb200bdSMat Martineau l2cap_do_create(chan, result, local_amp_id, remote_amp_id); 48648eb200bdSMat Martineau } else if (result != L2CAP_MR_SUCCESS) { 48658eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48668eb200bdSMat Martineau } else { 48678eb200bdSMat Martineau switch (chan->move_role) { 48688eb200bdSMat Martineau case L2CAP_MOVE_ROLE_INITIATOR: 48698eb200bdSMat Martineau l2cap_do_move_initiate(chan, local_amp_id, 48708eb200bdSMat Martineau remote_amp_id); 48718eb200bdSMat Martineau break; 48728eb200bdSMat Martineau case L2CAP_MOVE_ROLE_RESPONDER: 48738eb200bdSMat Martineau l2cap_do_move_respond(chan, result); 48748eb200bdSMat Martineau break; 48758eb200bdSMat Martineau default: 48768eb200bdSMat Martineau l2cap_do_move_cancel(chan, result); 48778eb200bdSMat Martineau break; 48788eb200bdSMat Martineau } 48798eb200bdSMat Martineau } 48808eb200bdSMat Martineau } 48818eb200bdSMat Martineau 48828d5a04a1SMat Martineau static inline int l2cap_move_channel_req(struct l2cap_conn *conn, 4883ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 4884ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 48858d5a04a1SMat Martineau { 48868d5a04a1SMat Martineau struct l2cap_move_chan_req *req = data; 48871500109bSMat Martineau struct l2cap_move_chan_rsp rsp; 488802b0fbb9SMat Martineau struct l2cap_chan *chan; 48898d5a04a1SMat Martineau u16 icid = 0; 48908d5a04a1SMat Martineau u16 result = L2CAP_MR_NOT_ALLOWED; 48918d5a04a1SMat Martineau 48928d5a04a1SMat Martineau if (cmd_len != sizeof(*req)) 48938d5a04a1SMat Martineau return -EPROTO; 48948d5a04a1SMat Martineau 48958d5a04a1SMat Martineau icid = le16_to_cpu(req->icid); 48968d5a04a1SMat Martineau 4897ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, dest_amp_id %d", icid, req->dest_amp_id); 48988d5a04a1SMat Martineau 4899848566b3SMarcel Holtmann if (!conn->hs_enabled) 49008d5a04a1SMat Martineau return -EINVAL; 49018d5a04a1SMat Martineau 490202b0fbb9SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 490302b0fbb9SMat Martineau if (!chan) { 49041500109bSMat Martineau rsp.icid = cpu_to_le16(icid); 4905dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_MR_NOT_ALLOWED); 49061500109bSMat Martineau l2cap_send_cmd(conn, cmd->ident, L2CAP_MOVE_CHAN_RSP, 49071500109bSMat Martineau sizeof(rsp), &rsp); 490802b0fbb9SMat Martineau return 0; 490902b0fbb9SMat Martineau } 491002b0fbb9SMat Martineau 49111500109bSMat Martineau chan->ident = cmd->ident; 49121500109bSMat Martineau 491302b0fbb9SMat Martineau if (chan->scid < L2CAP_CID_DYN_START || 491402b0fbb9SMat Martineau chan->chan_policy == BT_CHANNEL_POLICY_BREDR_ONLY || 491502b0fbb9SMat Martineau (chan->mode != L2CAP_MODE_ERTM && 491602b0fbb9SMat Martineau chan->mode != L2CAP_MODE_STREAMING)) { 491702b0fbb9SMat Martineau result = L2CAP_MR_NOT_ALLOWED; 491802b0fbb9SMat Martineau goto send_move_response; 491902b0fbb9SMat Martineau } 492002b0fbb9SMat Martineau 492102b0fbb9SMat Martineau if (chan->local_amp_id == req->dest_amp_id) { 492202b0fbb9SMat Martineau result = L2CAP_MR_SAME_ID; 492302b0fbb9SMat Martineau goto send_move_response; 492402b0fbb9SMat Martineau } 492502b0fbb9SMat Martineau 49266ed971caSMarcel Holtmann if (req->dest_amp_id != AMP_ID_BREDR) { 492702b0fbb9SMat Martineau struct hci_dev *hdev; 492802b0fbb9SMat Martineau hdev = hci_dev_get(req->dest_amp_id); 492902b0fbb9SMat Martineau if (!hdev || hdev->dev_type != HCI_AMP || 493002b0fbb9SMat Martineau !test_bit(HCI_UP, &hdev->flags)) { 493102b0fbb9SMat Martineau if (hdev) 493202b0fbb9SMat Martineau hci_dev_put(hdev); 493302b0fbb9SMat Martineau 493402b0fbb9SMat Martineau result = L2CAP_MR_BAD_ID; 493502b0fbb9SMat Martineau goto send_move_response; 493602b0fbb9SMat Martineau } 493702b0fbb9SMat Martineau hci_dev_put(hdev); 493802b0fbb9SMat Martineau } 493902b0fbb9SMat Martineau 494002b0fbb9SMat Martineau /* Detect a move collision. Only send a collision response 494102b0fbb9SMat Martineau * if this side has "lost", otherwise proceed with the move. 494202b0fbb9SMat Martineau * The winner has the larger bd_addr. 494302b0fbb9SMat Martineau */ 494402b0fbb9SMat Martineau if ((__chan_is_moving(chan) || 494502b0fbb9SMat Martineau chan->move_role != L2CAP_MOVE_ROLE_NONE) && 49466f59b904SMarcel Holtmann bacmp(&conn->hcon->src, &conn->hcon->dst) > 0) { 494702b0fbb9SMat Martineau result = L2CAP_MR_COLLISION; 494802b0fbb9SMat Martineau goto send_move_response; 494902b0fbb9SMat Martineau } 495002b0fbb9SMat Martineau 495102b0fbb9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 495202b0fbb9SMat Martineau l2cap_move_setup(chan); 495302b0fbb9SMat Martineau chan->move_id = req->dest_amp_id; 495402b0fbb9SMat Martineau icid = chan->dcid; 495502b0fbb9SMat Martineau 49566ed971caSMarcel Holtmann if (req->dest_amp_id == AMP_ID_BREDR) { 495702b0fbb9SMat Martineau /* Moving to BR/EDR */ 495802b0fbb9SMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 495902b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 496002b0fbb9SMat Martineau result = L2CAP_MR_PEND; 496102b0fbb9SMat Martineau } else { 496202b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM; 496302b0fbb9SMat Martineau result = L2CAP_MR_SUCCESS; 496402b0fbb9SMat Martineau } 496502b0fbb9SMat Martineau } else { 496602b0fbb9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_PREPARE; 496702b0fbb9SMat Martineau /* Placeholder - uncomment when amp functions are available */ 496802b0fbb9SMat Martineau /*amp_accept_physical(chan, req->dest_amp_id);*/ 496902b0fbb9SMat Martineau result = L2CAP_MR_PEND; 497002b0fbb9SMat Martineau } 497102b0fbb9SMat Martineau 497202b0fbb9SMat Martineau send_move_response: 49731500109bSMat Martineau l2cap_send_move_chan_rsp(chan, result); 49748d5a04a1SMat Martineau 497502b0fbb9SMat Martineau l2cap_chan_unlock(chan); 497602b0fbb9SMat Martineau 49778d5a04a1SMat Martineau return 0; 49788d5a04a1SMat Martineau } 49798d5a04a1SMat Martineau 49805b155ef9SMat Martineau static void l2cap_move_continue(struct l2cap_conn *conn, u16 icid, u16 result) 49815b155ef9SMat Martineau { 49825b155ef9SMat Martineau struct l2cap_chan *chan; 49835b155ef9SMat Martineau struct hci_chan *hchan = NULL; 49845b155ef9SMat Martineau 49855b155ef9SMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 49865b155ef9SMat Martineau if (!chan) { 49875b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 49885b155ef9SMat Martineau return; 49895b155ef9SMat Martineau } 49905b155ef9SMat Martineau 49915b155ef9SMat Martineau __clear_chan_timer(chan); 49925b155ef9SMat Martineau if (result == L2CAP_MR_PEND) 49935b155ef9SMat Martineau __set_chan_timer(chan, L2CAP_MOVE_ERTX_TIMEOUT); 49945b155ef9SMat Martineau 49955b155ef9SMat Martineau switch (chan->move_state) { 49965b155ef9SMat Martineau case L2CAP_MOVE_WAIT_LOGICAL_COMP: 49975b155ef9SMat Martineau /* Move confirm will be sent when logical link 49985b155ef9SMat Martineau * is complete. 49995b155ef9SMat Martineau */ 50005b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50015b155ef9SMat Martineau break; 50025b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP_SUCCESS: 50035b155ef9SMat Martineau if (result == L2CAP_MR_PEND) { 50045b155ef9SMat Martineau break; 50055b155ef9SMat Martineau } else if (test_bit(CONN_LOCAL_BUSY, 50065b155ef9SMat Martineau &chan->conn_state)) { 50075b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOCAL_BUSY; 50085b155ef9SMat Martineau } else { 50095b155ef9SMat Martineau /* Logical link is up or moving to BR/EDR, 50105b155ef9SMat Martineau * proceed with move 50115b155ef9SMat Martineau */ 50125b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_CONFIRM_RSP; 50135b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50145b155ef9SMat Martineau } 50155b155ef9SMat Martineau break; 50165b155ef9SMat Martineau case L2CAP_MOVE_WAIT_RSP: 50175b155ef9SMat Martineau /* Moving to AMP */ 50185b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50195b155ef9SMat Martineau /* Remote is ready, send confirm immediately 50205b155ef9SMat Martineau * after logical link is ready 50215b155ef9SMat Martineau */ 50225b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_CFM; 50235b155ef9SMat Martineau } else { 50245b155ef9SMat Martineau /* Both logical link and move success 50255b155ef9SMat Martineau * are required to confirm 50265b155ef9SMat Martineau */ 50275b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_LOGICAL_COMP; 50285b155ef9SMat Martineau } 50295b155ef9SMat Martineau 50305b155ef9SMat Martineau /* Placeholder - get hci_chan for logical link */ 50315b155ef9SMat Martineau if (!hchan) { 50325b155ef9SMat Martineau /* Logical link not available */ 50335b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50345b155ef9SMat Martineau break; 50355b155ef9SMat Martineau } 50365b155ef9SMat Martineau 50375b155ef9SMat Martineau /* If the logical link is not yet connected, do not 50385b155ef9SMat Martineau * send confirmation. 50395b155ef9SMat Martineau */ 50405b155ef9SMat Martineau if (hchan->state != BT_CONNECTED) 50415b155ef9SMat Martineau break; 50425b155ef9SMat Martineau 50435b155ef9SMat Martineau /* Logical link is already ready to go */ 50445b155ef9SMat Martineau 50455b155ef9SMat Martineau chan->hs_hcon = hchan->conn; 50465b155ef9SMat Martineau chan->hs_hcon->l2cap_data = chan->conn; 50475b155ef9SMat Martineau 50485b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS) { 50495b155ef9SMat Martineau /* Can confirm now */ 50505b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_CONFIRMED); 50515b155ef9SMat Martineau } else { 50525b155ef9SMat Martineau /* Now only need move success 50535b155ef9SMat Martineau * to confirm 50545b155ef9SMat Martineau */ 50555b155ef9SMat Martineau chan->move_state = L2CAP_MOVE_WAIT_RSP_SUCCESS; 50565b155ef9SMat Martineau } 50575b155ef9SMat Martineau 50585b155ef9SMat Martineau l2cap_logical_cfm(chan, hchan, L2CAP_MR_SUCCESS); 50595b155ef9SMat Martineau break; 50605b155ef9SMat Martineau default: 50615b155ef9SMat Martineau /* Any other amp move state means the move failed. */ 50625b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50635b155ef9SMat Martineau l2cap_move_done(chan); 50645b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50655b155ef9SMat Martineau } 50665b155ef9SMat Martineau 50675b155ef9SMat Martineau l2cap_chan_unlock(chan); 50685b155ef9SMat Martineau } 50695b155ef9SMat Martineau 50705b155ef9SMat Martineau static void l2cap_move_fail(struct l2cap_conn *conn, u8 ident, u16 icid, 50715b155ef9SMat Martineau u16 result) 50725b155ef9SMat Martineau { 50735b155ef9SMat Martineau struct l2cap_chan *chan; 50745b155ef9SMat Martineau 50755b155ef9SMat Martineau chan = l2cap_get_chan_by_ident(conn, ident); 50765b155ef9SMat Martineau if (!chan) { 50775b155ef9SMat Martineau /* Could not locate channel, icid is best guess */ 50785b155ef9SMat Martineau l2cap_send_move_chan_cfm_icid(conn, icid); 50795b155ef9SMat Martineau return; 50805b155ef9SMat Martineau } 50815b155ef9SMat Martineau 50825b155ef9SMat Martineau __clear_chan_timer(chan); 50835b155ef9SMat Martineau 50845b155ef9SMat Martineau if (chan->move_role == L2CAP_MOVE_ROLE_INITIATOR) { 50855b155ef9SMat Martineau if (result == L2CAP_MR_COLLISION) { 50865b155ef9SMat Martineau chan->move_role = L2CAP_MOVE_ROLE_RESPONDER; 50875b155ef9SMat Martineau } else { 50885b155ef9SMat Martineau /* Cleanup - cancel move */ 50895b155ef9SMat Martineau chan->move_id = chan->local_amp_id; 50905b155ef9SMat Martineau l2cap_move_done(chan); 50915b155ef9SMat Martineau } 50925b155ef9SMat Martineau } 50935b155ef9SMat Martineau 50945b155ef9SMat Martineau l2cap_send_move_chan_cfm(chan, L2CAP_MC_UNCONFIRMED); 50955b155ef9SMat Martineau 50965b155ef9SMat Martineau l2cap_chan_unlock(chan); 50975b155ef9SMat Martineau } 50985b155ef9SMat Martineau 50995b155ef9SMat Martineau static int l2cap_move_channel_rsp(struct l2cap_conn *conn, 5100ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5101ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51028d5a04a1SMat Martineau { 51038d5a04a1SMat Martineau struct l2cap_move_chan_rsp *rsp = data; 51048d5a04a1SMat Martineau u16 icid, result; 51058d5a04a1SMat Martineau 51068d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51078d5a04a1SMat Martineau return -EPROTO; 51088d5a04a1SMat Martineau 51098d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51108d5a04a1SMat Martineau result = le16_to_cpu(rsp->result); 51118d5a04a1SMat Martineau 5112ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51138d5a04a1SMat Martineau 51145b155ef9SMat Martineau if (result == L2CAP_MR_SUCCESS || result == L2CAP_MR_PEND) 51155b155ef9SMat Martineau l2cap_move_continue(conn, icid, result); 51165b155ef9SMat Martineau else 51175b155ef9SMat Martineau l2cap_move_fail(conn, cmd->ident, icid, result); 51188d5a04a1SMat Martineau 51198d5a04a1SMat Martineau return 0; 51208d5a04a1SMat Martineau } 51218d5a04a1SMat Martineau 51225f3847a4SMat Martineau static int l2cap_move_channel_confirm(struct l2cap_conn *conn, 5123ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5124ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51258d5a04a1SMat Martineau { 51268d5a04a1SMat Martineau struct l2cap_move_chan_cfm *cfm = data; 51275f3847a4SMat Martineau struct l2cap_chan *chan; 51288d5a04a1SMat Martineau u16 icid, result; 51298d5a04a1SMat Martineau 51308d5a04a1SMat Martineau if (cmd_len != sizeof(*cfm)) 51318d5a04a1SMat Martineau return -EPROTO; 51328d5a04a1SMat Martineau 51338d5a04a1SMat Martineau icid = le16_to_cpu(cfm->icid); 51348d5a04a1SMat Martineau result = le16_to_cpu(cfm->result); 51358d5a04a1SMat Martineau 5136ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x, result 0x%4.4x", icid, result); 51378d5a04a1SMat Martineau 51385f3847a4SMat Martineau chan = l2cap_get_chan_by_dcid(conn, icid); 51395f3847a4SMat Martineau if (!chan) { 51405f3847a4SMat Martineau /* Spec requires a response even if the icid was not found */ 51418d5a04a1SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51425f3847a4SMat Martineau return 0; 51435f3847a4SMat Martineau } 51445f3847a4SMat Martineau 51455f3847a4SMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM) { 51465f3847a4SMat Martineau if (result == L2CAP_MC_CONFIRMED) { 51475f3847a4SMat Martineau chan->local_amp_id = chan->move_id; 51486ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR) 51495f3847a4SMat Martineau __release_logical_link(chan); 51505f3847a4SMat Martineau } else { 51515f3847a4SMat Martineau chan->move_id = chan->local_amp_id; 51525f3847a4SMat Martineau } 51535f3847a4SMat Martineau 51545f3847a4SMat Martineau l2cap_move_done(chan); 51555f3847a4SMat Martineau } 51565f3847a4SMat Martineau 51575f3847a4SMat Martineau l2cap_send_move_chan_cfm_rsp(conn, cmd->ident, icid); 51585f3847a4SMat Martineau 51595f3847a4SMat Martineau l2cap_chan_unlock(chan); 51608d5a04a1SMat Martineau 51618d5a04a1SMat Martineau return 0; 51628d5a04a1SMat Martineau } 51638d5a04a1SMat Martineau 51648d5a04a1SMat Martineau static inline int l2cap_move_channel_confirm_rsp(struct l2cap_conn *conn, 5165ad0ac6caSAndrei Emeltchenko struct l2cap_cmd_hdr *cmd, 5166ad0ac6caSAndrei Emeltchenko u16 cmd_len, void *data) 51678d5a04a1SMat Martineau { 51688d5a04a1SMat Martineau struct l2cap_move_chan_cfm_rsp *rsp = data; 51693fd71a0aSMat Martineau struct l2cap_chan *chan; 51708d5a04a1SMat Martineau u16 icid; 51718d5a04a1SMat Martineau 51728d5a04a1SMat Martineau if (cmd_len != sizeof(*rsp)) 51738d5a04a1SMat Martineau return -EPROTO; 51748d5a04a1SMat Martineau 51758d5a04a1SMat Martineau icid = le16_to_cpu(rsp->icid); 51768d5a04a1SMat Martineau 5177ad0ac6caSAndrei Emeltchenko BT_DBG("icid 0x%4.4x", icid); 51788d5a04a1SMat Martineau 51793fd71a0aSMat Martineau chan = l2cap_get_chan_by_scid(conn, icid); 51803fd71a0aSMat Martineau if (!chan) 51813fd71a0aSMat Martineau return 0; 51823fd71a0aSMat Martineau 51833fd71a0aSMat Martineau __clear_chan_timer(chan); 51843fd71a0aSMat Martineau 51853fd71a0aSMat Martineau if (chan->move_state == L2CAP_MOVE_WAIT_CONFIRM_RSP) { 51863fd71a0aSMat Martineau chan->local_amp_id = chan->move_id; 51873fd71a0aSMat Martineau 51886ed971caSMarcel Holtmann if (chan->local_amp_id == AMP_ID_BREDR && chan->hs_hchan) 51893fd71a0aSMat Martineau __release_logical_link(chan); 51903fd71a0aSMat Martineau 51913fd71a0aSMat Martineau l2cap_move_done(chan); 51923fd71a0aSMat Martineau } 51933fd71a0aSMat Martineau 51943fd71a0aSMat Martineau l2cap_chan_unlock(chan); 51953fd71a0aSMat Martineau 51968d5a04a1SMat Martineau return 0; 51978d5a04a1SMat Martineau } 51988d5a04a1SMat Martineau 5199de73115aSClaudio Takahasi static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn, 52002d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, 5201203e639eSJohan Hedberg u16 cmd_len, u8 *data) 5202de73115aSClaudio Takahasi { 5203de73115aSClaudio Takahasi struct hci_conn *hcon = conn->hcon; 5204de73115aSClaudio Takahasi struct l2cap_conn_param_update_req *req; 5205de73115aSClaudio Takahasi struct l2cap_conn_param_update_rsp rsp; 5206203e639eSJohan Hedberg u16 min, max, latency, to_multiplier; 52072ce603ebSClaudio Takahasi int err; 5208de73115aSClaudio Takahasi 520940bef302SJohan Hedberg if (hcon->role != HCI_ROLE_MASTER) 5210de73115aSClaudio Takahasi return -EINVAL; 5211de73115aSClaudio Takahasi 5212de73115aSClaudio Takahasi if (cmd_len != sizeof(struct l2cap_conn_param_update_req)) 5213de73115aSClaudio Takahasi return -EPROTO; 5214de73115aSClaudio Takahasi 5215de73115aSClaudio Takahasi req = (struct l2cap_conn_param_update_req *) data; 5216de73115aSClaudio Takahasi min = __le16_to_cpu(req->min); 5217de73115aSClaudio Takahasi max = __le16_to_cpu(req->max); 5218de73115aSClaudio Takahasi latency = __le16_to_cpu(req->latency); 5219de73115aSClaudio Takahasi to_multiplier = __le16_to_cpu(req->to_multiplier); 5220de73115aSClaudio Takahasi 5221de73115aSClaudio Takahasi BT_DBG("min 0x%4.4x max 0x%4.4x latency: 0x%4.4x Timeout: 0x%4.4x", 5222de73115aSClaudio Takahasi min, max, latency, to_multiplier); 5223de73115aSClaudio Takahasi 5224de73115aSClaudio Takahasi memset(&rsp, 0, sizeof(rsp)); 52252ce603ebSClaudio Takahasi 5226d4905f24SAndre Guedes err = hci_check_conn_params(min, max, latency, to_multiplier); 52272ce603ebSClaudio Takahasi if (err) 5228dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_REJECTED); 5229de73115aSClaudio Takahasi else 5230dcf4adbfSJoe Perches rsp.result = cpu_to_le16(L2CAP_CONN_PARAM_ACCEPTED); 5231de73115aSClaudio Takahasi 5232de73115aSClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_CONN_PARAM_UPDATE_RSP, 5233de73115aSClaudio Takahasi sizeof(rsp), &rsp); 5234de73115aSClaudio Takahasi 5235ffb5a827SAndre Guedes if (!err) { 5236f4869e2aSJohan Hedberg u8 store_hint; 5237ffb5a827SAndre Guedes 5238f4869e2aSJohan Hedberg store_hint = hci_le_conn_update(hcon, min, max, latency, 5239f4869e2aSJohan Hedberg to_multiplier); 5240f4869e2aSJohan Hedberg mgmt_new_conn_param(hcon->hdev, &hcon->dst, hcon->dst_type, 5241f4869e2aSJohan Hedberg store_hint, min, max, latency, 5242f4869e2aSJohan Hedberg to_multiplier); 5243f4869e2aSJohan Hedberg 5244ffb5a827SAndre Guedes } 52452ce603ebSClaudio Takahasi 5246de73115aSClaudio Takahasi return 0; 5247de73115aSClaudio Takahasi } 5248de73115aSClaudio Takahasi 5249f1496deeSJohan Hedberg static int l2cap_le_connect_rsp(struct l2cap_conn *conn, 5250f1496deeSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5251f1496deeSJohan Hedberg u8 *data) 5252f1496deeSJohan Hedberg { 5253f1496deeSJohan Hedberg struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data; 5254f1496deeSJohan Hedberg u16 dcid, mtu, mps, credits, result; 5255f1496deeSJohan Hedberg struct l2cap_chan *chan; 5256f1496deeSJohan Hedberg int err; 5257f1496deeSJohan Hedberg 5258f1496deeSJohan Hedberg if (cmd_len < sizeof(*rsp)) 5259f1496deeSJohan Hedberg return -EPROTO; 5260f1496deeSJohan Hedberg 5261f1496deeSJohan Hedberg dcid = __le16_to_cpu(rsp->dcid); 5262f1496deeSJohan Hedberg mtu = __le16_to_cpu(rsp->mtu); 5263f1496deeSJohan Hedberg mps = __le16_to_cpu(rsp->mps); 5264f1496deeSJohan Hedberg credits = __le16_to_cpu(rsp->credits); 5265f1496deeSJohan Hedberg result = __le16_to_cpu(rsp->result); 5266f1496deeSJohan Hedberg 5267f1496deeSJohan Hedberg if (result == L2CAP_CR_SUCCESS && (mtu < 23 || mps < 23)) 5268f1496deeSJohan Hedberg return -EPROTO; 5269f1496deeSJohan Hedberg 5270f1496deeSJohan Hedberg BT_DBG("dcid 0x%4.4x mtu %u mps %u credits %u result 0x%2.2x", 5271f1496deeSJohan Hedberg dcid, mtu, mps, credits, result); 5272f1496deeSJohan Hedberg 5273f1496deeSJohan Hedberg mutex_lock(&conn->chan_lock); 5274f1496deeSJohan Hedberg 5275f1496deeSJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 5276f1496deeSJohan Hedberg if (!chan) { 5277f1496deeSJohan Hedberg err = -EBADSLT; 5278f1496deeSJohan Hedberg goto unlock; 5279f1496deeSJohan Hedberg } 5280f1496deeSJohan Hedberg 5281f1496deeSJohan Hedberg err = 0; 5282f1496deeSJohan Hedberg 5283f1496deeSJohan Hedberg l2cap_chan_lock(chan); 5284f1496deeSJohan Hedberg 5285f1496deeSJohan Hedberg switch (result) { 5286f1496deeSJohan Hedberg case L2CAP_CR_SUCCESS: 5287f1496deeSJohan Hedberg chan->ident = 0; 5288f1496deeSJohan Hedberg chan->dcid = dcid; 5289f1496deeSJohan Hedberg chan->omtu = mtu; 5290f1496deeSJohan Hedberg chan->remote_mps = mps; 52910cd75f7eSJohan Hedberg chan->tx_credits = credits; 5292f1496deeSJohan Hedberg l2cap_chan_ready(chan); 5293f1496deeSJohan Hedberg break; 5294f1496deeSJohan Hedberg 5295f1496deeSJohan Hedberg default: 5296f1496deeSJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 5297f1496deeSJohan Hedberg break; 5298f1496deeSJohan Hedberg } 5299f1496deeSJohan Hedberg 5300f1496deeSJohan Hedberg l2cap_chan_unlock(chan); 5301f1496deeSJohan Hedberg 5302f1496deeSJohan Hedberg unlock: 5303f1496deeSJohan Hedberg mutex_unlock(&conn->chan_lock); 5304f1496deeSJohan Hedberg 5305f1496deeSJohan Hedberg return err; 5306f1496deeSJohan Hedberg } 5307f1496deeSJohan Hedberg 53083300d9a9SClaudio Takahasi static inline int l2cap_bredr_sig_cmd(struct l2cap_conn *conn, 53092d792818SGustavo Padovan struct l2cap_cmd_hdr *cmd, u16 cmd_len, 53102d792818SGustavo Padovan u8 *data) 53113300d9a9SClaudio Takahasi { 53123300d9a9SClaudio Takahasi int err = 0; 53133300d9a9SClaudio Takahasi 53143300d9a9SClaudio Takahasi switch (cmd->code) { 53153300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 5316cb3b3152SJohan Hedberg l2cap_command_rej(conn, cmd, cmd_len, data); 53173300d9a9SClaudio Takahasi break; 53183300d9a9SClaudio Takahasi 53193300d9a9SClaudio Takahasi case L2CAP_CONN_REQ: 5320cb3b3152SJohan Hedberg err = l2cap_connect_req(conn, cmd, cmd_len, data); 53213300d9a9SClaudio Takahasi break; 53223300d9a9SClaudio Takahasi 53233300d9a9SClaudio Takahasi case L2CAP_CONN_RSP: 5324f5a2598dSMat Martineau case L2CAP_CREATE_CHAN_RSP: 53259245e737SJohan Hedberg l2cap_connect_create_rsp(conn, cmd, cmd_len, data); 53263300d9a9SClaudio Takahasi break; 53273300d9a9SClaudio Takahasi 53283300d9a9SClaudio Takahasi case L2CAP_CONF_REQ: 53293300d9a9SClaudio Takahasi err = l2cap_config_req(conn, cmd, cmd_len, data); 53303300d9a9SClaudio Takahasi break; 53313300d9a9SClaudio Takahasi 53323300d9a9SClaudio Takahasi case L2CAP_CONF_RSP: 53339245e737SJohan Hedberg l2cap_config_rsp(conn, cmd, cmd_len, data); 53343300d9a9SClaudio Takahasi break; 53353300d9a9SClaudio Takahasi 53363300d9a9SClaudio Takahasi case L2CAP_DISCONN_REQ: 5337cb3b3152SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 53383300d9a9SClaudio Takahasi break; 53393300d9a9SClaudio Takahasi 53403300d9a9SClaudio Takahasi case L2CAP_DISCONN_RSP: 53419245e737SJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 53423300d9a9SClaudio Takahasi break; 53433300d9a9SClaudio Takahasi 53443300d9a9SClaudio Takahasi case L2CAP_ECHO_REQ: 53453300d9a9SClaudio Takahasi l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data); 53463300d9a9SClaudio Takahasi break; 53473300d9a9SClaudio Takahasi 53483300d9a9SClaudio Takahasi case L2CAP_ECHO_RSP: 53493300d9a9SClaudio Takahasi break; 53503300d9a9SClaudio Takahasi 53513300d9a9SClaudio Takahasi case L2CAP_INFO_REQ: 5352cb3b3152SJohan Hedberg err = l2cap_information_req(conn, cmd, cmd_len, data); 53533300d9a9SClaudio Takahasi break; 53543300d9a9SClaudio Takahasi 53553300d9a9SClaudio Takahasi case L2CAP_INFO_RSP: 53569245e737SJohan Hedberg l2cap_information_rsp(conn, cmd, cmd_len, data); 53573300d9a9SClaudio Takahasi break; 53583300d9a9SClaudio Takahasi 5359f94ff6ffSMat Martineau case L2CAP_CREATE_CHAN_REQ: 5360f94ff6ffSMat Martineau err = l2cap_create_channel_req(conn, cmd, cmd_len, data); 5361f94ff6ffSMat Martineau break; 5362f94ff6ffSMat Martineau 53638d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_REQ: 53648d5a04a1SMat Martineau err = l2cap_move_channel_req(conn, cmd, cmd_len, data); 53658d5a04a1SMat Martineau break; 53668d5a04a1SMat Martineau 53678d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_RSP: 53689245e737SJohan Hedberg l2cap_move_channel_rsp(conn, cmd, cmd_len, data); 53698d5a04a1SMat Martineau break; 53708d5a04a1SMat Martineau 53718d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM: 53728d5a04a1SMat Martineau err = l2cap_move_channel_confirm(conn, cmd, cmd_len, data); 53738d5a04a1SMat Martineau break; 53748d5a04a1SMat Martineau 53758d5a04a1SMat Martineau case L2CAP_MOVE_CHAN_CFM_RSP: 53769245e737SJohan Hedberg l2cap_move_channel_confirm_rsp(conn, cmd, cmd_len, data); 53778d5a04a1SMat Martineau break; 53788d5a04a1SMat Martineau 53793300d9a9SClaudio Takahasi default: 53803300d9a9SClaudio Takahasi BT_ERR("Unknown BR/EDR signaling command 0x%2.2x", cmd->code); 53813300d9a9SClaudio Takahasi err = -EINVAL; 53823300d9a9SClaudio Takahasi break; 53833300d9a9SClaudio Takahasi } 53843300d9a9SClaudio Takahasi 53853300d9a9SClaudio Takahasi return err; 53863300d9a9SClaudio Takahasi } 53873300d9a9SClaudio Takahasi 538827e2d4c8SJohan Hedberg static int l2cap_le_connect_req(struct l2cap_conn *conn, 538927e2d4c8SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 539027e2d4c8SJohan Hedberg u8 *data) 539127e2d4c8SJohan Hedberg { 539227e2d4c8SJohan Hedberg struct l2cap_le_conn_req *req = (struct l2cap_le_conn_req *) data; 539327e2d4c8SJohan Hedberg struct l2cap_le_conn_rsp rsp; 539427e2d4c8SJohan Hedberg struct l2cap_chan *chan, *pchan; 53950cd75f7eSJohan Hedberg u16 dcid, scid, credits, mtu, mps; 539627e2d4c8SJohan Hedberg __le16 psm; 539727e2d4c8SJohan Hedberg u8 result; 539827e2d4c8SJohan Hedberg 539927e2d4c8SJohan Hedberg if (cmd_len != sizeof(*req)) 540027e2d4c8SJohan Hedberg return -EPROTO; 540127e2d4c8SJohan Hedberg 540227e2d4c8SJohan Hedberg scid = __le16_to_cpu(req->scid); 540327e2d4c8SJohan Hedberg mtu = __le16_to_cpu(req->mtu); 540427e2d4c8SJohan Hedberg mps = __le16_to_cpu(req->mps); 540527e2d4c8SJohan Hedberg psm = req->psm; 540627e2d4c8SJohan Hedberg dcid = 0; 54070cd75f7eSJohan Hedberg credits = 0; 540827e2d4c8SJohan Hedberg 540927e2d4c8SJohan Hedberg if (mtu < 23 || mps < 23) 541027e2d4c8SJohan Hedberg return -EPROTO; 541127e2d4c8SJohan Hedberg 541227e2d4c8SJohan Hedberg BT_DBG("psm 0x%2.2x scid 0x%4.4x mtu %u mps %u", __le16_to_cpu(psm), 541327e2d4c8SJohan Hedberg scid, mtu, mps); 541427e2d4c8SJohan Hedberg 541527e2d4c8SJohan Hedberg /* Check if we have socket listening on psm */ 541627e2d4c8SJohan Hedberg pchan = l2cap_global_chan_by_psm(BT_LISTEN, psm, &conn->hcon->src, 541727e2d4c8SJohan Hedberg &conn->hcon->dst, LE_LINK); 541827e2d4c8SJohan Hedberg if (!pchan) { 541927e2d4c8SJohan Hedberg result = L2CAP_CR_BAD_PSM; 542027e2d4c8SJohan Hedberg chan = NULL; 542127e2d4c8SJohan Hedberg goto response; 542227e2d4c8SJohan Hedberg } 542327e2d4c8SJohan Hedberg 542427e2d4c8SJohan Hedberg mutex_lock(&conn->chan_lock); 542527e2d4c8SJohan Hedberg l2cap_chan_lock(pchan); 542627e2d4c8SJohan Hedberg 542727e2d4c8SJohan Hedberg if (!smp_sufficient_security(conn->hcon, pchan->sec_level)) { 542827e2d4c8SJohan Hedberg result = L2CAP_CR_AUTHENTICATION; 542927e2d4c8SJohan Hedberg chan = NULL; 543027e2d4c8SJohan Hedberg goto response_unlock; 543127e2d4c8SJohan Hedberg } 543227e2d4c8SJohan Hedberg 543327e2d4c8SJohan Hedberg /* Check if we already have channel with that dcid */ 543427e2d4c8SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, scid)) { 543527e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 543627e2d4c8SJohan Hedberg chan = NULL; 543727e2d4c8SJohan Hedberg goto response_unlock; 543827e2d4c8SJohan Hedberg } 543927e2d4c8SJohan Hedberg 544027e2d4c8SJohan Hedberg chan = pchan->ops->new_connection(pchan); 544127e2d4c8SJohan Hedberg if (!chan) { 544227e2d4c8SJohan Hedberg result = L2CAP_CR_NO_MEM; 544327e2d4c8SJohan Hedberg goto response_unlock; 544427e2d4c8SJohan Hedberg } 544527e2d4c8SJohan Hedberg 54460ce43ce6SJohan Hedberg l2cap_le_flowctl_init(chan); 54470ce43ce6SJohan Hedberg 544827e2d4c8SJohan Hedberg bacpy(&chan->src, &conn->hcon->src); 544927e2d4c8SJohan Hedberg bacpy(&chan->dst, &conn->hcon->dst); 545027e2d4c8SJohan Hedberg chan->src_type = bdaddr_type(conn->hcon, conn->hcon->src_type); 545127e2d4c8SJohan Hedberg chan->dst_type = bdaddr_type(conn->hcon, conn->hcon->dst_type); 545227e2d4c8SJohan Hedberg chan->psm = psm; 545327e2d4c8SJohan Hedberg chan->dcid = scid; 545427e2d4c8SJohan Hedberg chan->omtu = mtu; 545527e2d4c8SJohan Hedberg chan->remote_mps = mps; 54560cd75f7eSJohan Hedberg chan->tx_credits = __le16_to_cpu(req->credits); 545727e2d4c8SJohan Hedberg 545827e2d4c8SJohan Hedberg __l2cap_chan_add(conn, chan); 545927e2d4c8SJohan Hedberg dcid = chan->scid; 54600cd75f7eSJohan Hedberg credits = chan->rx_credits; 546127e2d4c8SJohan Hedberg 546227e2d4c8SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 546327e2d4c8SJohan Hedberg 546427e2d4c8SJohan Hedberg chan->ident = cmd->ident; 546527e2d4c8SJohan Hedberg 546627e2d4c8SJohan Hedberg if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 546727e2d4c8SJohan Hedberg l2cap_state_change(chan, BT_CONNECT2); 546827e2d4c8SJohan Hedberg result = L2CAP_CR_PEND; 546927e2d4c8SJohan Hedberg chan->ops->defer(chan); 547027e2d4c8SJohan Hedberg } else { 547127e2d4c8SJohan Hedberg l2cap_chan_ready(chan); 547227e2d4c8SJohan Hedberg result = L2CAP_CR_SUCCESS; 547327e2d4c8SJohan Hedberg } 547427e2d4c8SJohan Hedberg 547527e2d4c8SJohan Hedberg response_unlock: 547627e2d4c8SJohan Hedberg l2cap_chan_unlock(pchan); 547727e2d4c8SJohan Hedberg mutex_unlock(&conn->chan_lock); 5478a24cce14SJohan Hedberg l2cap_chan_put(pchan); 547927e2d4c8SJohan Hedberg 548027e2d4c8SJohan Hedberg if (result == L2CAP_CR_PEND) 548127e2d4c8SJohan Hedberg return 0; 548227e2d4c8SJohan Hedberg 548327e2d4c8SJohan Hedberg response: 548427e2d4c8SJohan Hedberg if (chan) { 548527e2d4c8SJohan Hedberg rsp.mtu = cpu_to_le16(chan->imtu); 54863916aed8SJohan Hedberg rsp.mps = cpu_to_le16(chan->mps); 548727e2d4c8SJohan Hedberg } else { 548827e2d4c8SJohan Hedberg rsp.mtu = 0; 548927e2d4c8SJohan Hedberg rsp.mps = 0; 549027e2d4c8SJohan Hedberg } 549127e2d4c8SJohan Hedberg 549227e2d4c8SJohan Hedberg rsp.dcid = cpu_to_le16(dcid); 54930cd75f7eSJohan Hedberg rsp.credits = cpu_to_le16(credits); 549427e2d4c8SJohan Hedberg rsp.result = cpu_to_le16(result); 549527e2d4c8SJohan Hedberg 549627e2d4c8SJohan Hedberg l2cap_send_cmd(conn, cmd->ident, L2CAP_LE_CONN_RSP, sizeof(rsp), &rsp); 549727e2d4c8SJohan Hedberg 549827e2d4c8SJohan Hedberg return 0; 549927e2d4c8SJohan Hedberg } 550027e2d4c8SJohan Hedberg 5501fad5fc89SJohan Hedberg static inline int l2cap_le_credits(struct l2cap_conn *conn, 5502fad5fc89SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5503fad5fc89SJohan Hedberg u8 *data) 5504fad5fc89SJohan Hedberg { 5505fad5fc89SJohan Hedberg struct l2cap_le_credits *pkt; 5506fad5fc89SJohan Hedberg struct l2cap_chan *chan; 55070f1bfe4eSJohan Hedberg u16 cid, credits, max_credits; 5508fad5fc89SJohan Hedberg 5509fad5fc89SJohan Hedberg if (cmd_len != sizeof(*pkt)) 5510fad5fc89SJohan Hedberg return -EPROTO; 5511fad5fc89SJohan Hedberg 5512fad5fc89SJohan Hedberg pkt = (struct l2cap_le_credits *) data; 5513fad5fc89SJohan Hedberg cid = __le16_to_cpu(pkt->cid); 5514fad5fc89SJohan Hedberg credits = __le16_to_cpu(pkt->credits); 5515fad5fc89SJohan Hedberg 5516fad5fc89SJohan Hedberg BT_DBG("cid 0x%4.4x credits 0x%4.4x", cid, credits); 5517fad5fc89SJohan Hedberg 5518fad5fc89SJohan Hedberg chan = l2cap_get_chan_by_dcid(conn, cid); 5519fad5fc89SJohan Hedberg if (!chan) 5520fad5fc89SJohan Hedberg return -EBADSLT; 5521fad5fc89SJohan Hedberg 55220f1bfe4eSJohan Hedberg max_credits = LE_FLOWCTL_MAX_CREDITS - chan->tx_credits; 55230f1bfe4eSJohan Hedberg if (credits > max_credits) { 55240f1bfe4eSJohan Hedberg BT_ERR("LE credits overflow"); 55250f1bfe4eSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 55260f1bfe4eSJohan Hedberg 55270f1bfe4eSJohan Hedberg /* Return 0 so that we don't trigger an unnecessary 55280f1bfe4eSJohan Hedberg * command reject packet. 55290f1bfe4eSJohan Hedberg */ 55300f1bfe4eSJohan Hedberg return 0; 55310f1bfe4eSJohan Hedberg } 55320f1bfe4eSJohan Hedberg 5533fad5fc89SJohan Hedberg chan->tx_credits += credits; 5534fad5fc89SJohan Hedberg 5535fad5fc89SJohan Hedberg while (chan->tx_credits && !skb_queue_empty(&chan->tx_q)) { 5536fad5fc89SJohan Hedberg l2cap_do_send(chan, skb_dequeue(&chan->tx_q)); 5537fad5fc89SJohan Hedberg chan->tx_credits--; 5538fad5fc89SJohan Hedberg } 5539fad5fc89SJohan Hedberg 5540fad5fc89SJohan Hedberg if (chan->tx_credits) 5541fad5fc89SJohan Hedberg chan->ops->resume(chan); 5542fad5fc89SJohan Hedberg 5543fad5fc89SJohan Hedberg l2cap_chan_unlock(chan); 5544fad5fc89SJohan Hedberg 5545fad5fc89SJohan Hedberg return 0; 5546fad5fc89SJohan Hedberg } 5547fad5fc89SJohan Hedberg 554871fb4197SJohan Hedberg static inline int l2cap_le_command_rej(struct l2cap_conn *conn, 554971fb4197SJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 555071fb4197SJohan Hedberg u8 *data) 555171fb4197SJohan Hedberg { 555271fb4197SJohan Hedberg struct l2cap_cmd_rej_unk *rej = (struct l2cap_cmd_rej_unk *) data; 555371fb4197SJohan Hedberg struct l2cap_chan *chan; 555471fb4197SJohan Hedberg 555571fb4197SJohan Hedberg if (cmd_len < sizeof(*rej)) 555671fb4197SJohan Hedberg return -EPROTO; 555771fb4197SJohan Hedberg 555871fb4197SJohan Hedberg mutex_lock(&conn->chan_lock); 555971fb4197SJohan Hedberg 556071fb4197SJohan Hedberg chan = __l2cap_get_chan_by_ident(conn, cmd->ident); 556171fb4197SJohan Hedberg if (!chan) 556271fb4197SJohan Hedberg goto done; 556371fb4197SJohan Hedberg 556471fb4197SJohan Hedberg l2cap_chan_lock(chan); 556571fb4197SJohan Hedberg l2cap_chan_del(chan, ECONNREFUSED); 556671fb4197SJohan Hedberg l2cap_chan_unlock(chan); 556771fb4197SJohan Hedberg 556871fb4197SJohan Hedberg done: 556971fb4197SJohan Hedberg mutex_unlock(&conn->chan_lock); 557071fb4197SJohan Hedberg return 0; 557171fb4197SJohan Hedberg } 557271fb4197SJohan Hedberg 55733300d9a9SClaudio Takahasi static inline int l2cap_le_sig_cmd(struct l2cap_conn *conn, 5574203e639eSJohan Hedberg struct l2cap_cmd_hdr *cmd, u16 cmd_len, 5575203e639eSJohan Hedberg u8 *data) 55763300d9a9SClaudio Takahasi { 5577b5ecba64SJohan Hedberg int err = 0; 5578b5ecba64SJohan Hedberg 55793300d9a9SClaudio Takahasi switch (cmd->code) { 55803300d9a9SClaudio Takahasi case L2CAP_COMMAND_REJ: 558171fb4197SJohan Hedberg l2cap_le_command_rej(conn, cmd, cmd_len, data); 5582b5ecba64SJohan Hedberg break; 55833300d9a9SClaudio Takahasi 55843300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_REQ: 5585b5ecba64SJohan Hedberg err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data); 5586b5ecba64SJohan Hedberg break; 55873300d9a9SClaudio Takahasi 55883300d9a9SClaudio Takahasi case L2CAP_CONN_PARAM_UPDATE_RSP: 5589b5ecba64SJohan Hedberg break; 55903300d9a9SClaudio Takahasi 5591f1496deeSJohan Hedberg case L2CAP_LE_CONN_RSP: 5592f1496deeSJohan Hedberg l2cap_le_connect_rsp(conn, cmd, cmd_len, data); 5593b5ecba64SJohan Hedberg break; 5594f1496deeSJohan Hedberg 559527e2d4c8SJohan Hedberg case L2CAP_LE_CONN_REQ: 5596b5ecba64SJohan Hedberg err = l2cap_le_connect_req(conn, cmd, cmd_len, data); 5597b5ecba64SJohan Hedberg break; 559827e2d4c8SJohan Hedberg 5599fad5fc89SJohan Hedberg case L2CAP_LE_CREDITS: 5600fad5fc89SJohan Hedberg err = l2cap_le_credits(conn, cmd, cmd_len, data); 5601fad5fc89SJohan Hedberg break; 5602fad5fc89SJohan Hedberg 56033defe01aSJohan Hedberg case L2CAP_DISCONN_REQ: 5604b5ecba64SJohan Hedberg err = l2cap_disconnect_req(conn, cmd, cmd_len, data); 5605b5ecba64SJohan Hedberg break; 56063defe01aSJohan Hedberg 56073defe01aSJohan Hedberg case L2CAP_DISCONN_RSP: 56083defe01aSJohan Hedberg l2cap_disconnect_rsp(conn, cmd, cmd_len, data); 5609b5ecba64SJohan Hedberg break; 56103defe01aSJohan Hedberg 56113300d9a9SClaudio Takahasi default: 56123300d9a9SClaudio Takahasi BT_ERR("Unknown LE signaling command 0x%2.2x", cmd->code); 5613b5ecba64SJohan Hedberg err = -EINVAL; 5614b5ecba64SJohan Hedberg break; 56153300d9a9SClaudio Takahasi } 5616b5ecba64SJohan Hedberg 5617b5ecba64SJohan Hedberg return err; 56183300d9a9SClaudio Takahasi } 56193300d9a9SClaudio Takahasi 5620c5623556SJohan Hedberg static inline void l2cap_le_sig_channel(struct l2cap_conn *conn, 5621c5623556SJohan Hedberg struct sk_buff *skb) 5622c5623556SJohan Hedberg { 562369c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56244f3e219dSMarcel Holtmann struct l2cap_cmd_hdr *cmd; 56254f3e219dSMarcel Holtmann u16 len; 5626c5623556SJohan Hedberg int err; 5627c5623556SJohan Hedberg 562869c4e4e8SJohan Hedberg if (hcon->type != LE_LINK) 56293b166295SMarcel Holtmann goto drop; 563069c4e4e8SJohan Hedberg 56314f3e219dSMarcel Holtmann if (skb->len < L2CAP_CMD_HDR_SIZE) 56324f3e219dSMarcel Holtmann goto drop; 5633c5623556SJohan Hedberg 56344f3e219dSMarcel Holtmann cmd = (void *) skb->data; 56354f3e219dSMarcel Holtmann skb_pull(skb, L2CAP_CMD_HDR_SIZE); 5636c5623556SJohan Hedberg 56374f3e219dSMarcel Holtmann len = le16_to_cpu(cmd->len); 5638c5623556SJohan Hedberg 56394f3e219dSMarcel Holtmann BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd->code, len, cmd->ident); 56404f3e219dSMarcel Holtmann 56414f3e219dSMarcel Holtmann if (len != skb->len || !cmd->ident) { 5642c5623556SJohan Hedberg BT_DBG("corrupted command"); 56434f3e219dSMarcel Holtmann goto drop; 5644c5623556SJohan Hedberg } 5645c5623556SJohan Hedberg 5646203e639eSJohan Hedberg err = l2cap_le_sig_cmd(conn, cmd, len, skb->data); 5647c5623556SJohan Hedberg if (err) { 5648c5623556SJohan Hedberg struct l2cap_cmd_rej_unk rej; 5649c5623556SJohan Hedberg 5650c5623556SJohan Hedberg BT_ERR("Wrong link type (%d)", err); 5651c5623556SJohan Hedberg 5652dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56534f3e219dSMarcel Holtmann l2cap_send_cmd(conn, cmd->ident, L2CAP_COMMAND_REJ, 5654c5623556SJohan Hedberg sizeof(rej), &rej); 5655c5623556SJohan Hedberg } 5656c5623556SJohan Hedberg 56573b166295SMarcel Holtmann drop: 5658c5623556SJohan Hedberg kfree_skb(skb); 5659c5623556SJohan Hedberg } 5660c5623556SJohan Hedberg 56613300d9a9SClaudio Takahasi static inline void l2cap_sig_channel(struct l2cap_conn *conn, 56623300d9a9SClaudio Takahasi struct sk_buff *skb) 56630a708f8fSGustavo F. Padovan { 566469c4e4e8SJohan Hedberg struct hci_conn *hcon = conn->hcon; 56650a708f8fSGustavo F. Padovan u8 *data = skb->data; 56660a708f8fSGustavo F. Padovan int len = skb->len; 56670a708f8fSGustavo F. Padovan struct l2cap_cmd_hdr cmd; 56683300d9a9SClaudio Takahasi int err; 56690a708f8fSGustavo F. Padovan 56700a708f8fSGustavo F. Padovan l2cap_raw_recv(conn, skb); 56710a708f8fSGustavo F. Padovan 567269c4e4e8SJohan Hedberg if (hcon->type != ACL_LINK) 56733b166295SMarcel Holtmann goto drop; 567469c4e4e8SJohan Hedberg 56750a708f8fSGustavo F. Padovan while (len >= L2CAP_CMD_HDR_SIZE) { 56760a708f8fSGustavo F. Padovan u16 cmd_len; 56770a708f8fSGustavo F. Padovan memcpy(&cmd, data, L2CAP_CMD_HDR_SIZE); 56780a708f8fSGustavo F. Padovan data += L2CAP_CMD_HDR_SIZE; 56790a708f8fSGustavo F. Padovan len -= L2CAP_CMD_HDR_SIZE; 56800a708f8fSGustavo F. Padovan 56810a708f8fSGustavo F. Padovan cmd_len = le16_to_cpu(cmd.len); 56820a708f8fSGustavo F. Padovan 56832d792818SGustavo Padovan BT_DBG("code 0x%2.2x len %d id 0x%2.2x", cmd.code, cmd_len, 56842d792818SGustavo Padovan cmd.ident); 56850a708f8fSGustavo F. Padovan 56860a708f8fSGustavo F. Padovan if (cmd_len > len || !cmd.ident) { 56870a708f8fSGustavo F. Padovan BT_DBG("corrupted command"); 56880a708f8fSGustavo F. Padovan break; 56890a708f8fSGustavo F. Padovan } 56900a708f8fSGustavo F. Padovan 56913300d9a9SClaudio Takahasi err = l2cap_bredr_sig_cmd(conn, &cmd, cmd_len, data); 56920a708f8fSGustavo F. Padovan if (err) { 5693e2fd318eSIlia Kolomisnky struct l2cap_cmd_rej_unk rej; 56942c6d1a2eSGustavo F. Padovan 56952c6d1a2eSGustavo F. Padovan BT_ERR("Wrong link type (%d)", err); 56960a708f8fSGustavo F. Padovan 5697dcf4adbfSJoe Perches rej.reason = cpu_to_le16(L2CAP_REJ_NOT_UNDERSTOOD); 56982d792818SGustavo Padovan l2cap_send_cmd(conn, cmd.ident, L2CAP_COMMAND_REJ, 56992d792818SGustavo Padovan sizeof(rej), &rej); 57000a708f8fSGustavo F. Padovan } 57010a708f8fSGustavo F. Padovan 57020a708f8fSGustavo F. Padovan data += cmd_len; 57030a708f8fSGustavo F. Padovan len -= cmd_len; 57040a708f8fSGustavo F. Padovan } 57050a708f8fSGustavo F. Padovan 57063b166295SMarcel Holtmann drop: 57070a708f8fSGustavo F. Padovan kfree_skb(skb); 57080a708f8fSGustavo F. Padovan } 57090a708f8fSGustavo F. Padovan 571047d1ec61SGustavo F. Padovan static int l2cap_check_fcs(struct l2cap_chan *chan, struct sk_buff *skb) 57110a708f8fSGustavo F. Padovan { 57120a708f8fSGustavo F. Padovan u16 our_fcs, rcv_fcs; 5713e4ca6d98SAndrei Emeltchenko int hdr_size; 5714e4ca6d98SAndrei Emeltchenko 5715e4ca6d98SAndrei Emeltchenko if (test_bit(FLAG_EXT_CTRL, &chan->flags)) 5716e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_EXT_HDR_SIZE; 5717e4ca6d98SAndrei Emeltchenko else 5718e4ca6d98SAndrei Emeltchenko hdr_size = L2CAP_ENH_HDR_SIZE; 57190a708f8fSGustavo F. Padovan 572047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) { 572103a51213SAndrei Emeltchenko skb_trim(skb, skb->len - L2CAP_FCS_SIZE); 57220a708f8fSGustavo F. Padovan rcv_fcs = get_unaligned_le16(skb->data + skb->len); 57230a708f8fSGustavo F. Padovan our_fcs = crc16(0, skb->data - hdr_size, skb->len + hdr_size); 57240a708f8fSGustavo F. Padovan 57250a708f8fSGustavo F. Padovan if (our_fcs != rcv_fcs) 57260a708f8fSGustavo F. Padovan return -EBADMSG; 57270a708f8fSGustavo F. Padovan } 57280a708f8fSGustavo F. Padovan return 0; 57290a708f8fSGustavo F. Padovan } 57300a708f8fSGustavo F. Padovan 57316ea00485SMat Martineau static void l2cap_send_i_or_rr_or_rnr(struct l2cap_chan *chan) 57320a708f8fSGustavo F. Padovan { 5733e31f7633SMat Martineau struct l2cap_ctrl control; 57340a708f8fSGustavo F. Padovan 5735e31f7633SMat Martineau BT_DBG("chan %p", chan); 57360a708f8fSGustavo F. Padovan 5737e31f7633SMat Martineau memset(&control, 0, sizeof(control)); 5738e31f7633SMat Martineau control.sframe = 1; 5739e31f7633SMat Martineau control.final = 1; 5740e31f7633SMat Martineau control.reqseq = chan->buffer_seq; 5741e31f7633SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 57420a708f8fSGustavo F. Padovan 5743e2ab4353SGustavo F. Padovan if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 5744e31f7633SMat Martineau control.super = L2CAP_SUPER_RNR; 5745e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57460a708f8fSGustavo F. Padovan } 57470a708f8fSGustavo F. Padovan 5748e31f7633SMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, &chan->conn_state) && 5749e31f7633SMat Martineau chan->unacked_frames > 0) 5750e31f7633SMat Martineau __set_retrans_timer(chan); 57510a708f8fSGustavo F. Padovan 5752e31f7633SMat Martineau /* Send pending iframes */ 5753525cd185SGustavo F. Padovan l2cap_ertm_send(chan); 57540a708f8fSGustavo F. Padovan 5755e2ab4353SGustavo F. Padovan if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state) && 5756e31f7633SMat Martineau test_bit(CONN_SEND_FBIT, &chan->conn_state)) { 5757e31f7633SMat Martineau /* F-bit wasn't sent in an s-frame or i-frame yet, so 5758e31f7633SMat Martineau * send it now. 5759e31f7633SMat Martineau */ 5760e31f7633SMat Martineau control.super = L2CAP_SUPER_RR; 5761e31f7633SMat Martineau l2cap_send_sframe(chan, &control); 57620a708f8fSGustavo F. Padovan } 57630a708f8fSGustavo F. Padovan } 57640a708f8fSGustavo F. Padovan 57652d792818SGustavo Padovan static void append_skb_frag(struct sk_buff *skb, struct sk_buff *new_frag, 57662d792818SGustavo Padovan struct sk_buff **last_frag) 57670a708f8fSGustavo F. Padovan { 576884084a31SMat Martineau /* skb->len reflects data in skb as well as all fragments 576984084a31SMat Martineau * skb->data_len reflects only data in fragments 577084084a31SMat Martineau */ 577184084a31SMat Martineau if (!skb_has_frag_list(skb)) 577284084a31SMat Martineau skb_shinfo(skb)->frag_list = new_frag; 577384084a31SMat Martineau 577484084a31SMat Martineau new_frag->next = NULL; 577584084a31SMat Martineau 577684084a31SMat Martineau (*last_frag)->next = new_frag; 577784084a31SMat Martineau *last_frag = new_frag; 577884084a31SMat Martineau 577984084a31SMat Martineau skb->len += new_frag->len; 578084084a31SMat Martineau skb->data_len += new_frag->len; 578184084a31SMat Martineau skb->truesize += new_frag->truesize; 578284084a31SMat Martineau } 578384084a31SMat Martineau 57844b51dae9SMat Martineau static int l2cap_reassemble_sdu(struct l2cap_chan *chan, struct sk_buff *skb, 57854b51dae9SMat Martineau struct l2cap_ctrl *control) 578684084a31SMat Martineau { 578784084a31SMat Martineau int err = -EINVAL; 57880a708f8fSGustavo F. Padovan 57894b51dae9SMat Martineau switch (control->sar) { 57907e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_UNSEGMENTED: 579184084a31SMat Martineau if (chan->sdu) 579284084a31SMat Martineau break; 57930a708f8fSGustavo F. Padovan 579480b98027SGustavo Padovan err = chan->ops->recv(chan, skb); 579584084a31SMat Martineau break; 57960a708f8fSGustavo F. Padovan 57977e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_START: 579884084a31SMat Martineau if (chan->sdu) 579984084a31SMat Martineau break; 58000a708f8fSGustavo F. Padovan 58016f61fd47SGustavo F. Padovan chan->sdu_len = get_unaligned_le16(skb->data); 580203a51213SAndrei Emeltchenko skb_pull(skb, L2CAP_SDULEN_SIZE); 58030a708f8fSGustavo F. Padovan 580484084a31SMat Martineau if (chan->sdu_len > chan->imtu) { 580584084a31SMat Martineau err = -EMSGSIZE; 580684084a31SMat Martineau break; 580784084a31SMat Martineau } 58080a708f8fSGustavo F. Padovan 580984084a31SMat Martineau if (skb->len >= chan->sdu_len) 581084084a31SMat Martineau break; 581184084a31SMat Martineau 581284084a31SMat Martineau chan->sdu = skb; 581384084a31SMat Martineau chan->sdu_last_frag = skb; 581484084a31SMat Martineau 581584084a31SMat Martineau skb = NULL; 581684084a31SMat Martineau err = 0; 58170a708f8fSGustavo F. Padovan break; 58180a708f8fSGustavo F. Padovan 58197e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_CONTINUE: 58206f61fd47SGustavo F. Padovan if (!chan->sdu) 582184084a31SMat Martineau break; 58220a708f8fSGustavo F. Padovan 582384084a31SMat Martineau append_skb_frag(chan->sdu, skb, 582484084a31SMat Martineau &chan->sdu_last_frag); 582584084a31SMat Martineau skb = NULL; 58260a708f8fSGustavo F. Padovan 582784084a31SMat Martineau if (chan->sdu->len >= chan->sdu_len) 582884084a31SMat Martineau break; 58290a708f8fSGustavo F. Padovan 583084084a31SMat Martineau err = 0; 58310a708f8fSGustavo F. Padovan break; 58320a708f8fSGustavo F. Padovan 58337e0ef6eeSAndrei Emeltchenko case L2CAP_SAR_END: 58346f61fd47SGustavo F. Padovan if (!chan->sdu) 583584084a31SMat Martineau break; 58360a708f8fSGustavo F. Padovan 583784084a31SMat Martineau append_skb_frag(chan->sdu, skb, 583884084a31SMat Martineau &chan->sdu_last_frag); 583984084a31SMat Martineau skb = NULL; 58400a708f8fSGustavo F. Padovan 584184084a31SMat Martineau if (chan->sdu->len != chan->sdu_len) 584284084a31SMat Martineau break; 58430a708f8fSGustavo F. Padovan 584480b98027SGustavo Padovan err = chan->ops->recv(chan, chan->sdu); 58450a708f8fSGustavo F. Padovan 584684084a31SMat Martineau if (!err) { 584784084a31SMat Martineau /* Reassembly complete */ 584884084a31SMat Martineau chan->sdu = NULL; 584984084a31SMat Martineau chan->sdu_last_frag = NULL; 585084084a31SMat Martineau chan->sdu_len = 0; 58510a708f8fSGustavo F. Padovan } 58520a708f8fSGustavo F. Padovan break; 58530a708f8fSGustavo F. Padovan } 58540a708f8fSGustavo F. Padovan 585584084a31SMat Martineau if (err) { 58560a708f8fSGustavo F. Padovan kfree_skb(skb); 58576f61fd47SGustavo F. Padovan kfree_skb(chan->sdu); 58586f61fd47SGustavo F. Padovan chan->sdu = NULL; 585984084a31SMat Martineau chan->sdu_last_frag = NULL; 586084084a31SMat Martineau chan->sdu_len = 0; 586184084a31SMat Martineau } 58620a708f8fSGustavo F. Padovan 586384084a31SMat Martineau return err; 58640a708f8fSGustavo F. Padovan } 58650a708f8fSGustavo F. Padovan 586632b32735SMat Martineau static int l2cap_resegment(struct l2cap_chan *chan) 586732b32735SMat Martineau { 586832b32735SMat Martineau /* Placeholder */ 586932b32735SMat Martineau return 0; 587032b32735SMat Martineau } 587132b32735SMat Martineau 5872e328140fSMat Martineau void l2cap_chan_busy(struct l2cap_chan *chan, int busy) 58730a708f8fSGustavo F. Padovan { 587461aa4f5bSMat Martineau u8 event; 587561aa4f5bSMat Martineau 587661aa4f5bSMat Martineau if (chan->mode != L2CAP_MODE_ERTM) 587761aa4f5bSMat Martineau return; 587861aa4f5bSMat Martineau 587961aa4f5bSMat Martineau event = busy ? L2CAP_EV_LOCAL_BUSY_DETECTED : L2CAP_EV_LOCAL_BUSY_CLEAR; 5880401bb1f7SAndrei Emeltchenko l2cap_tx(chan, NULL, NULL, event); 58810a708f8fSGustavo F. Padovan } 58820a708f8fSGustavo F. Padovan 5883d2a7ac5dSMat Martineau static int l2cap_rx_queued_iframes(struct l2cap_chan *chan) 5884d2a7ac5dSMat Martineau { 588563838725SMat Martineau int err = 0; 588663838725SMat Martineau /* Pass sequential frames to l2cap_reassemble_sdu() 588763838725SMat Martineau * until a gap is encountered. 588863838725SMat Martineau */ 588963838725SMat Martineau 589063838725SMat Martineau BT_DBG("chan %p", chan); 589163838725SMat Martineau 589263838725SMat Martineau while (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 589363838725SMat Martineau struct sk_buff *skb; 589463838725SMat Martineau BT_DBG("Searching for skb with txseq %d (queue len %d)", 589563838725SMat Martineau chan->buffer_seq, skb_queue_len(&chan->srej_q)); 589663838725SMat Martineau 589763838725SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->srej_q, chan->buffer_seq); 589863838725SMat Martineau 589963838725SMat Martineau if (!skb) 590063838725SMat Martineau break; 590163838725SMat Martineau 590263838725SMat Martineau skb_unlink(skb, &chan->srej_q); 590363838725SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 590463838725SMat Martineau err = l2cap_reassemble_sdu(chan, skb, &bt_cb(skb)->control); 590563838725SMat Martineau if (err) 590663838725SMat Martineau break; 590763838725SMat Martineau } 590863838725SMat Martineau 590963838725SMat Martineau if (skb_queue_empty(&chan->srej_q)) { 591063838725SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 591163838725SMat Martineau l2cap_send_ack(chan); 591263838725SMat Martineau } 591363838725SMat Martineau 591463838725SMat Martineau return err; 5915d2a7ac5dSMat Martineau } 5916d2a7ac5dSMat Martineau 5917d2a7ac5dSMat Martineau static void l2cap_handle_srej(struct l2cap_chan *chan, 5918d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5919d2a7ac5dSMat Martineau { 5920f80842a8SMat Martineau struct sk_buff *skb; 5921f80842a8SMat Martineau 5922f80842a8SMat Martineau BT_DBG("chan %p, control %p", chan, control); 5923f80842a8SMat Martineau 5924f80842a8SMat Martineau if (control->reqseq == chan->next_tx_seq) { 5925f80842a8SMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59265e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5927f80842a8SMat Martineau return; 5928f80842a8SMat Martineau } 5929f80842a8SMat Martineau 5930f80842a8SMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5931f80842a8SMat Martineau 5932f80842a8SMat Martineau if (skb == NULL) { 5933f80842a8SMat Martineau BT_DBG("Seq %d not available for retransmission", 5934f80842a8SMat Martineau control->reqseq); 5935f80842a8SMat Martineau return; 5936f80842a8SMat Martineau } 5937f80842a8SMat Martineau 5938f80842a8SMat Martineau if (chan->max_tx != 0 && bt_cb(skb)->control.retries >= chan->max_tx) { 5939f80842a8SMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59405e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5941f80842a8SMat Martineau return; 5942f80842a8SMat Martineau } 5943f80842a8SMat Martineau 5944f80842a8SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5945f80842a8SMat Martineau 5946f80842a8SMat Martineau if (control->poll) { 5947f80842a8SMat Martineau l2cap_pass_to_tx(chan, control); 5948f80842a8SMat Martineau 5949f80842a8SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 5950f80842a8SMat Martineau l2cap_retransmit(chan, control); 5951f80842a8SMat Martineau l2cap_ertm_send(chan); 5952f80842a8SMat Martineau 5953f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5954f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5955f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5956f80842a8SMat Martineau } 5957f80842a8SMat Martineau } else { 5958f80842a8SMat Martineau l2cap_pass_to_tx_fbit(chan, control); 5959f80842a8SMat Martineau 5960f80842a8SMat Martineau if (control->final) { 5961f80842a8SMat Martineau if (chan->srej_save_reqseq != control->reqseq || 5962f80842a8SMat Martineau !test_and_clear_bit(CONN_SREJ_ACT, 5963f80842a8SMat Martineau &chan->conn_state)) 5964f80842a8SMat Martineau l2cap_retransmit(chan, control); 5965f80842a8SMat Martineau } else { 5966f80842a8SMat Martineau l2cap_retransmit(chan, control); 5967f80842a8SMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) { 5968f80842a8SMat Martineau set_bit(CONN_SREJ_ACT, &chan->conn_state); 5969f80842a8SMat Martineau chan->srej_save_reqseq = control->reqseq; 5970f80842a8SMat Martineau } 5971f80842a8SMat Martineau } 5972f80842a8SMat Martineau } 5973d2a7ac5dSMat Martineau } 5974d2a7ac5dSMat Martineau 5975d2a7ac5dSMat Martineau static void l2cap_handle_rej(struct l2cap_chan *chan, 5976d2a7ac5dSMat Martineau struct l2cap_ctrl *control) 5977d2a7ac5dSMat Martineau { 5978fcd289dfSMat Martineau struct sk_buff *skb; 5979fcd289dfSMat Martineau 5980fcd289dfSMat Martineau BT_DBG("chan %p, control %p", chan, control); 5981fcd289dfSMat Martineau 5982fcd289dfSMat Martineau if (control->reqseq == chan->next_tx_seq) { 5983fcd289dfSMat Martineau BT_DBG("Invalid reqseq %d, disconnecting", control->reqseq); 59845e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5985fcd289dfSMat Martineau return; 5986fcd289dfSMat Martineau } 5987fcd289dfSMat Martineau 5988fcd289dfSMat Martineau skb = l2cap_ertm_seq_in_queue(&chan->tx_q, control->reqseq); 5989fcd289dfSMat Martineau 5990fcd289dfSMat Martineau if (chan->max_tx && skb && 5991fcd289dfSMat Martineau bt_cb(skb)->control.retries >= chan->max_tx) { 5992fcd289dfSMat Martineau BT_DBG("Retry limit exceeded (%d)", chan->max_tx); 59935e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 5994fcd289dfSMat Martineau return; 5995fcd289dfSMat Martineau } 5996fcd289dfSMat Martineau 5997fcd289dfSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 5998fcd289dfSMat Martineau 5999fcd289dfSMat Martineau l2cap_pass_to_tx(chan, control); 6000fcd289dfSMat Martineau 6001fcd289dfSMat Martineau if (control->final) { 6002fcd289dfSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state)) 6003fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6004fcd289dfSMat Martineau } else { 6005fcd289dfSMat Martineau l2cap_retransmit_all(chan, control); 6006fcd289dfSMat Martineau l2cap_ertm_send(chan); 6007fcd289dfSMat Martineau if (chan->tx_state == L2CAP_TX_STATE_WAIT_F) 6008fcd289dfSMat Martineau set_bit(CONN_REJ_ACT, &chan->conn_state); 6009fcd289dfSMat Martineau } 6010d2a7ac5dSMat Martineau } 6011d2a7ac5dSMat Martineau 60124b51dae9SMat Martineau static u8 l2cap_classify_txseq(struct l2cap_chan *chan, u16 txseq) 60134b51dae9SMat Martineau { 60144b51dae9SMat Martineau BT_DBG("chan %p, txseq %d", chan, txseq); 60154b51dae9SMat Martineau 60164b51dae9SMat Martineau BT_DBG("last_acked_seq %d, expected_tx_seq %d", chan->last_acked_seq, 60174b51dae9SMat Martineau chan->expected_tx_seq); 60184b51dae9SMat Martineau 60194b51dae9SMat Martineau if (chan->rx_state == L2CAP_RX_STATE_SREJ_SENT) { 60204b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60214b51dae9SMat Martineau chan->tx_win) { 60224b51dae9SMat Martineau /* See notes below regarding "double poll" and 60234b51dae9SMat Martineau * invalid packets. 60244b51dae9SMat Martineau */ 60254b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60264b51dae9SMat Martineau BT_DBG("Invalid/Ignore - after SREJ"); 60274b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60284b51dae9SMat Martineau } else { 60294b51dae9SMat Martineau BT_DBG("Invalid - in window after SREJ sent"); 60304b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60314b51dae9SMat Martineau } 60324b51dae9SMat Martineau } 60334b51dae9SMat Martineau 60344b51dae9SMat Martineau if (chan->srej_list.head == txseq) { 60354b51dae9SMat Martineau BT_DBG("Expected SREJ"); 60364b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED_SREJ; 60374b51dae9SMat Martineau } 60384b51dae9SMat Martineau 60394b51dae9SMat Martineau if (l2cap_ertm_seq_in_queue(&chan->srej_q, txseq)) { 60404b51dae9SMat Martineau BT_DBG("Duplicate SREJ - txseq already stored"); 60414b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE_SREJ; 60424b51dae9SMat Martineau } 60434b51dae9SMat Martineau 60444b51dae9SMat Martineau if (l2cap_seq_list_contains(&chan->srej_list, txseq)) { 60454b51dae9SMat Martineau BT_DBG("Unexpected SREJ - not requested"); 60464b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED_SREJ; 60474b51dae9SMat Martineau } 60484b51dae9SMat Martineau } 60494b51dae9SMat Martineau 60504b51dae9SMat Martineau if (chan->expected_tx_seq == txseq) { 60514b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= 60524b51dae9SMat Martineau chan->tx_win) { 60534b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60544b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60554b51dae9SMat Martineau } else { 60564b51dae9SMat Martineau BT_DBG("Expected"); 60574b51dae9SMat Martineau return L2CAP_TXSEQ_EXPECTED; 60584b51dae9SMat Martineau } 60594b51dae9SMat Martineau } 60604b51dae9SMat Martineau 60614b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) < 60622d792818SGustavo Padovan __seq_offset(chan, chan->expected_tx_seq, chan->last_acked_seq)) { 60634b51dae9SMat Martineau BT_DBG("Duplicate - expected_tx_seq later than txseq"); 60644b51dae9SMat Martineau return L2CAP_TXSEQ_DUPLICATE; 60654b51dae9SMat Martineau } 60664b51dae9SMat Martineau 60674b51dae9SMat Martineau if (__seq_offset(chan, txseq, chan->last_acked_seq) >= chan->tx_win) { 60684b51dae9SMat Martineau /* A source of invalid packets is a "double poll" condition, 60694b51dae9SMat Martineau * where delays cause us to send multiple poll packets. If 60704b51dae9SMat Martineau * the remote stack receives and processes both polls, 60714b51dae9SMat Martineau * sequence numbers can wrap around in such a way that a 60724b51dae9SMat Martineau * resent frame has a sequence number that looks like new data 60734b51dae9SMat Martineau * with a sequence gap. This would trigger an erroneous SREJ 60744b51dae9SMat Martineau * request. 60754b51dae9SMat Martineau * 60764b51dae9SMat Martineau * Fortunately, this is impossible with a tx window that's 60774b51dae9SMat Martineau * less than half of the maximum sequence number, which allows 60784b51dae9SMat Martineau * invalid frames to be safely ignored. 60794b51dae9SMat Martineau * 60804b51dae9SMat Martineau * With tx window sizes greater than half of the tx window 60814b51dae9SMat Martineau * maximum, the frame is invalid and cannot be ignored. This 60824b51dae9SMat Martineau * causes a disconnect. 60834b51dae9SMat Martineau */ 60844b51dae9SMat Martineau 60854b51dae9SMat Martineau if (chan->tx_win <= ((chan->tx_win_max + 1) >> 1)) { 60864b51dae9SMat Martineau BT_DBG("Invalid/Ignore - txseq outside tx window"); 60874b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID_IGNORE; 60884b51dae9SMat Martineau } else { 60894b51dae9SMat Martineau BT_DBG("Invalid - txseq outside tx window"); 60904b51dae9SMat Martineau return L2CAP_TXSEQ_INVALID; 60914b51dae9SMat Martineau } 60924b51dae9SMat Martineau } else { 60934b51dae9SMat Martineau BT_DBG("Unexpected - txseq indicates missing frames"); 60944b51dae9SMat Martineau return L2CAP_TXSEQ_UNEXPECTED; 60954b51dae9SMat Martineau } 60964b51dae9SMat Martineau } 60974b51dae9SMat Martineau 6098d2a7ac5dSMat Martineau static int l2cap_rx_state_recv(struct l2cap_chan *chan, 6099d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6100d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6101d2a7ac5dSMat Martineau { 6102d2a7ac5dSMat Martineau int err = 0; 6103941247f9SPeter Senna Tschudin bool skb_in_use = false; 6104d2a7ac5dSMat Martineau 6105d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6106d2a7ac5dSMat Martineau event); 6107d2a7ac5dSMat Martineau 6108d2a7ac5dSMat Martineau switch (event) { 6109d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6110d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, control->txseq)) { 6111d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6112d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6113d2a7ac5dSMat Martineau 6114d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6115d2a7ac5dSMat Martineau BT_DBG("Busy, discarding expected seq %d", 6116d2a7ac5dSMat Martineau control->txseq); 6117d2a7ac5dSMat Martineau break; 6118d2a7ac5dSMat Martineau } 6119d2a7ac5dSMat Martineau 6120d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, 6121d2a7ac5dSMat Martineau control->txseq); 6122d2a7ac5dSMat Martineau 6123d2a7ac5dSMat Martineau chan->buffer_seq = chan->expected_tx_seq; 6124941247f9SPeter Senna Tschudin skb_in_use = true; 6125d2a7ac5dSMat Martineau 6126d2a7ac5dSMat Martineau err = l2cap_reassemble_sdu(chan, skb, control); 6127d2a7ac5dSMat Martineau if (err) 6128d2a7ac5dSMat Martineau break; 6129d2a7ac5dSMat Martineau 6130d2a7ac5dSMat Martineau if (control->final) { 6131d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6132d2a7ac5dSMat Martineau &chan->conn_state)) { 6133d2a7ac5dSMat Martineau control->final = 0; 6134d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6135d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6136d2a7ac5dSMat Martineau } 6137d2a7ac5dSMat Martineau } 6138d2a7ac5dSMat Martineau 6139d2a7ac5dSMat Martineau if (!test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) 6140d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6141d2a7ac5dSMat Martineau break; 6142d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6143d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6144d2a7ac5dSMat Martineau 6145d2a7ac5dSMat Martineau /* Can't issue SREJ frames in the local busy state. 6146d2a7ac5dSMat Martineau * Drop this frame, it will be seen as missing 6147d2a7ac5dSMat Martineau * when local busy is exited. 6148d2a7ac5dSMat Martineau */ 6149d2a7ac5dSMat Martineau if (test_bit(CONN_LOCAL_BUSY, &chan->conn_state)) { 6150d2a7ac5dSMat Martineau BT_DBG("Busy, discarding unexpected seq %d", 6151d2a7ac5dSMat Martineau control->txseq); 6152d2a7ac5dSMat Martineau break; 6153d2a7ac5dSMat Martineau } 6154d2a7ac5dSMat Martineau 6155d2a7ac5dSMat Martineau /* There was a gap in the sequence, so an SREJ 6156d2a7ac5dSMat Martineau * must be sent for each missing frame. The 6157d2a7ac5dSMat Martineau * current frame is stored for later use. 6158d2a7ac5dSMat Martineau */ 6159d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6160941247f9SPeter Senna Tschudin skb_in_use = true; 6161d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6162d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6163d2a7ac5dSMat Martineau 6164d2a7ac5dSMat Martineau clear_bit(CONN_SREJ_ACT, &chan->conn_state); 6165d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->srej_list); 6166d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6167d2a7ac5dSMat Martineau 6168d2a7ac5dSMat Martineau chan->rx_state = L2CAP_RX_STATE_SREJ_SENT; 6169d2a7ac5dSMat Martineau break; 6170d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6171d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6172d2a7ac5dSMat Martineau break; 6173d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6174d2a7ac5dSMat Martineau break; 6175d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6176d2a7ac5dSMat Martineau default: 61775e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6178d2a7ac5dSMat Martineau break; 6179d2a7ac5dSMat Martineau } 6180d2a7ac5dSMat Martineau break; 6181d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6182d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6183d2a7ac5dSMat Martineau if (control->final) { 6184d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6185d2a7ac5dSMat Martineau 6186e6a3ee6eSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, &chan->conn_state) && 6187e6a3ee6eSMat Martineau !__chan_is_moving(chan)) { 6188d2a7ac5dSMat Martineau control->final = 0; 6189d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6190d2a7ac5dSMat Martineau } 6191d2a7ac5dSMat Martineau 6192d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6193d2a7ac5dSMat Martineau } else if (control->poll) { 6194d2a7ac5dSMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 6195d2a7ac5dSMat Martineau } else { 6196d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6197d2a7ac5dSMat Martineau &chan->conn_state) && 6198d2a7ac5dSMat Martineau chan->unacked_frames) 6199d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6200d2a7ac5dSMat Martineau 6201d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6202d2a7ac5dSMat Martineau } 6203d2a7ac5dSMat Martineau break; 6204d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6205d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6206d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6207d2a7ac5dSMat Martineau if (control && control->poll) { 6208d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6209d2a7ac5dSMat Martineau l2cap_send_rr_or_rnr(chan, 0); 6210d2a7ac5dSMat Martineau } 6211d2a7ac5dSMat Martineau __clear_retrans_timer(chan); 6212d2a7ac5dSMat Martineau l2cap_seq_list_clear(&chan->retrans_list); 6213d2a7ac5dSMat Martineau break; 6214d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6215d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6216d2a7ac5dSMat Martineau break; 6217d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6218d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6219d2a7ac5dSMat Martineau break; 6220d2a7ac5dSMat Martineau default: 6221d2a7ac5dSMat Martineau break; 6222d2a7ac5dSMat Martineau } 6223d2a7ac5dSMat Martineau 6224d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6225d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6226d2a7ac5dSMat Martineau kfree_skb(skb); 6227d2a7ac5dSMat Martineau } 6228d2a7ac5dSMat Martineau 6229d2a7ac5dSMat Martineau return err; 6230d2a7ac5dSMat Martineau } 6231d2a7ac5dSMat Martineau 6232d2a7ac5dSMat Martineau static int l2cap_rx_state_srej_sent(struct l2cap_chan *chan, 6233d2a7ac5dSMat Martineau struct l2cap_ctrl *control, 6234d2a7ac5dSMat Martineau struct sk_buff *skb, u8 event) 6235d2a7ac5dSMat Martineau { 6236d2a7ac5dSMat Martineau int err = 0; 6237d2a7ac5dSMat Martineau u16 txseq = control->txseq; 6238941247f9SPeter Senna Tschudin bool skb_in_use = false; 6239d2a7ac5dSMat Martineau 6240d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 6241d2a7ac5dSMat Martineau event); 6242d2a7ac5dSMat Martineau 6243d2a7ac5dSMat Martineau switch (event) { 6244d2a7ac5dSMat Martineau case L2CAP_EV_RECV_IFRAME: 6245d2a7ac5dSMat Martineau switch (l2cap_classify_txseq(chan, txseq)) { 6246d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED: 6247d2a7ac5dSMat Martineau /* Keep frame for reassembly later */ 6248d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6249d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6250941247f9SPeter Senna Tschudin skb_in_use = true; 6251d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6252d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6253d2a7ac5dSMat Martineau 6254d2a7ac5dSMat Martineau chan->expected_tx_seq = __next_seq(chan, txseq); 6255d2a7ac5dSMat Martineau break; 6256d2a7ac5dSMat Martineau case L2CAP_TXSEQ_EXPECTED_SREJ: 6257d2a7ac5dSMat Martineau l2cap_seq_list_pop(&chan->srej_list); 6258d2a7ac5dSMat Martineau 6259d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6260d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6261941247f9SPeter Senna Tschudin skb_in_use = true; 6262d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6263d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6264d2a7ac5dSMat Martineau 6265d2a7ac5dSMat Martineau err = l2cap_rx_queued_iframes(chan); 6266d2a7ac5dSMat Martineau if (err) 6267d2a7ac5dSMat Martineau break; 6268d2a7ac5dSMat Martineau 6269d2a7ac5dSMat Martineau break; 6270d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED: 6271d2a7ac5dSMat Martineau /* Got a frame that can't be reassembled yet. 6272d2a7ac5dSMat Martineau * Save it for later, and send SREJs to cover 6273d2a7ac5dSMat Martineau * the missing frames. 6274d2a7ac5dSMat Martineau */ 6275d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6276941247f9SPeter Senna Tschudin skb_in_use = true; 6277d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6278d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6279d2a7ac5dSMat Martineau 6280d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6281d2a7ac5dSMat Martineau l2cap_send_srej(chan, control->txseq); 6282d2a7ac5dSMat Martineau break; 6283d2a7ac5dSMat Martineau case L2CAP_TXSEQ_UNEXPECTED_SREJ: 6284d2a7ac5dSMat Martineau /* This frame was requested with an SREJ, but 6285d2a7ac5dSMat Martineau * some expected retransmitted frames are 6286d2a7ac5dSMat Martineau * missing. Request retransmission of missing 6287d2a7ac5dSMat Martineau * SREJ'd frames. 6288d2a7ac5dSMat Martineau */ 6289d2a7ac5dSMat Martineau skb_queue_tail(&chan->srej_q, skb); 6290941247f9SPeter Senna Tschudin skb_in_use = true; 6291d2a7ac5dSMat Martineau BT_DBG("Queued %p (queue len %d)", skb, 6292d2a7ac5dSMat Martineau skb_queue_len(&chan->srej_q)); 6293d2a7ac5dSMat Martineau 6294d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6295d2a7ac5dSMat Martineau l2cap_send_srej_list(chan, control->txseq); 6296d2a7ac5dSMat Martineau break; 6297d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE_SREJ: 6298d2a7ac5dSMat Martineau /* We've already queued this frame. Drop this copy. */ 6299d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6300d2a7ac5dSMat Martineau break; 6301d2a7ac5dSMat Martineau case L2CAP_TXSEQ_DUPLICATE: 6302d2a7ac5dSMat Martineau /* Expecting a later sequence number, so this frame 6303d2a7ac5dSMat Martineau * was already received. Ignore it completely. 6304d2a7ac5dSMat Martineau */ 6305d2a7ac5dSMat Martineau break; 6306d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID_IGNORE: 6307d2a7ac5dSMat Martineau break; 6308d2a7ac5dSMat Martineau case L2CAP_TXSEQ_INVALID: 6309d2a7ac5dSMat Martineau default: 63105e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6311d2a7ac5dSMat Martineau break; 6312d2a7ac5dSMat Martineau } 6313d2a7ac5dSMat Martineau break; 6314d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RR: 6315d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6316d2a7ac5dSMat Martineau if (control->final) { 6317d2a7ac5dSMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6318d2a7ac5dSMat Martineau 6319d2a7ac5dSMat Martineau if (!test_and_clear_bit(CONN_REJ_ACT, 6320d2a7ac5dSMat Martineau &chan->conn_state)) { 6321d2a7ac5dSMat Martineau control->final = 0; 6322d2a7ac5dSMat Martineau l2cap_retransmit_all(chan, control); 6323d2a7ac5dSMat Martineau } 6324d2a7ac5dSMat Martineau 6325d2a7ac5dSMat Martineau l2cap_ertm_send(chan); 6326d2a7ac5dSMat Martineau } else if (control->poll) { 6327d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6328d2a7ac5dSMat Martineau &chan->conn_state) && 6329d2a7ac5dSMat Martineau chan->unacked_frames) { 6330d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6331d2a7ac5dSMat Martineau } 6332d2a7ac5dSMat Martineau 6333d2a7ac5dSMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 6334d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6335d2a7ac5dSMat Martineau } else { 6336d2a7ac5dSMat Martineau if (test_and_clear_bit(CONN_REMOTE_BUSY, 6337d2a7ac5dSMat Martineau &chan->conn_state) && 6338d2a7ac5dSMat Martineau chan->unacked_frames) 6339d2a7ac5dSMat Martineau __set_retrans_timer(chan); 6340d2a7ac5dSMat Martineau 6341d2a7ac5dSMat Martineau l2cap_send_ack(chan); 6342d2a7ac5dSMat Martineau } 6343d2a7ac5dSMat Martineau break; 6344d2a7ac5dSMat Martineau case L2CAP_EV_RECV_RNR: 6345d2a7ac5dSMat Martineau set_bit(CONN_REMOTE_BUSY, &chan->conn_state); 6346d2a7ac5dSMat Martineau l2cap_pass_to_tx(chan, control); 6347d2a7ac5dSMat Martineau if (control->poll) { 6348d2a7ac5dSMat Martineau l2cap_send_srej_tail(chan); 6349d2a7ac5dSMat Martineau } else { 6350d2a7ac5dSMat Martineau struct l2cap_ctrl rr_control; 6351d2a7ac5dSMat Martineau memset(&rr_control, 0, sizeof(rr_control)); 6352d2a7ac5dSMat Martineau rr_control.sframe = 1; 6353d2a7ac5dSMat Martineau rr_control.super = L2CAP_SUPER_RR; 6354d2a7ac5dSMat Martineau rr_control.reqseq = chan->buffer_seq; 6355d2a7ac5dSMat Martineau l2cap_send_sframe(chan, &rr_control); 6356d2a7ac5dSMat Martineau } 6357d2a7ac5dSMat Martineau 6358d2a7ac5dSMat Martineau break; 6359d2a7ac5dSMat Martineau case L2CAP_EV_RECV_REJ: 6360d2a7ac5dSMat Martineau l2cap_handle_rej(chan, control); 6361d2a7ac5dSMat Martineau break; 6362d2a7ac5dSMat Martineau case L2CAP_EV_RECV_SREJ: 6363d2a7ac5dSMat Martineau l2cap_handle_srej(chan, control); 6364d2a7ac5dSMat Martineau break; 6365d2a7ac5dSMat Martineau } 6366d2a7ac5dSMat Martineau 6367d2a7ac5dSMat Martineau if (skb && !skb_in_use) { 6368d2a7ac5dSMat Martineau BT_DBG("Freeing %p", skb); 6369d2a7ac5dSMat Martineau kfree_skb(skb); 6370d2a7ac5dSMat Martineau } 6371d2a7ac5dSMat Martineau 6372d2a7ac5dSMat Martineau return err; 6373d2a7ac5dSMat Martineau } 6374d2a7ac5dSMat Martineau 637532b32735SMat Martineau static int l2cap_finish_move(struct l2cap_chan *chan) 637632b32735SMat Martineau { 637732b32735SMat Martineau BT_DBG("chan %p", chan); 637832b32735SMat Martineau 637932b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 638032b32735SMat Martineau 638132b32735SMat Martineau if (chan->hs_hcon) 638232b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 638332b32735SMat Martineau else 638432b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 638532b32735SMat Martineau 638632b32735SMat Martineau return l2cap_resegment(chan); 638732b32735SMat Martineau } 638832b32735SMat Martineau 638932b32735SMat Martineau static int l2cap_rx_state_wait_p(struct l2cap_chan *chan, 639032b32735SMat Martineau struct l2cap_ctrl *control, 639132b32735SMat Martineau struct sk_buff *skb, u8 event) 639232b32735SMat Martineau { 639332b32735SMat Martineau int err; 639432b32735SMat Martineau 639532b32735SMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d", chan, control, skb, 639632b32735SMat Martineau event); 639732b32735SMat Martineau 639832b32735SMat Martineau if (!control->poll) 639932b32735SMat Martineau return -EPROTO; 640032b32735SMat Martineau 640132b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 640232b32735SMat Martineau 640332b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 640432b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 640532b32735SMat Martineau else 640632b32735SMat Martineau chan->tx_send_head = NULL; 640732b32735SMat Martineau 640832b32735SMat Martineau /* Rewind next_tx_seq to the point expected 640932b32735SMat Martineau * by the receiver. 641032b32735SMat Martineau */ 641132b32735SMat Martineau chan->next_tx_seq = control->reqseq; 641232b32735SMat Martineau chan->unacked_frames = 0; 641332b32735SMat Martineau 641432b32735SMat Martineau err = l2cap_finish_move(chan); 641532b32735SMat Martineau if (err) 641632b32735SMat Martineau return err; 641732b32735SMat Martineau 641832b32735SMat Martineau set_bit(CONN_SEND_FBIT, &chan->conn_state); 641932b32735SMat Martineau l2cap_send_i_or_rr_or_rnr(chan); 642032b32735SMat Martineau 642132b32735SMat Martineau if (event == L2CAP_EV_RECV_IFRAME) 642232b32735SMat Martineau return -EPROTO; 642332b32735SMat Martineau 642432b32735SMat Martineau return l2cap_rx_state_recv(chan, control, NULL, event); 642532b32735SMat Martineau } 642632b32735SMat Martineau 642732b32735SMat Martineau static int l2cap_rx_state_wait_f(struct l2cap_chan *chan, 642832b32735SMat Martineau struct l2cap_ctrl *control, 642932b32735SMat Martineau struct sk_buff *skb, u8 event) 643032b32735SMat Martineau { 643132b32735SMat Martineau int err; 643232b32735SMat Martineau 643332b32735SMat Martineau if (!control->final) 643432b32735SMat Martineau return -EPROTO; 643532b32735SMat Martineau 643632b32735SMat Martineau clear_bit(CONN_REMOTE_BUSY, &chan->conn_state); 643732b32735SMat Martineau 643832b32735SMat Martineau chan->rx_state = L2CAP_RX_STATE_RECV; 643932b32735SMat Martineau l2cap_process_reqseq(chan, control->reqseq); 644032b32735SMat Martineau 644132b32735SMat Martineau if (!skb_queue_empty(&chan->tx_q)) 644232b32735SMat Martineau chan->tx_send_head = skb_peek(&chan->tx_q); 644332b32735SMat Martineau else 644432b32735SMat Martineau chan->tx_send_head = NULL; 644532b32735SMat Martineau 644632b32735SMat Martineau /* Rewind next_tx_seq to the point expected 644732b32735SMat Martineau * by the receiver. 644832b32735SMat Martineau */ 644932b32735SMat Martineau chan->next_tx_seq = control->reqseq; 645032b32735SMat Martineau chan->unacked_frames = 0; 645132b32735SMat Martineau 645232b32735SMat Martineau if (chan->hs_hcon) 645332b32735SMat Martineau chan->conn->mtu = chan->hs_hcon->hdev->block_mtu; 645432b32735SMat Martineau else 645532b32735SMat Martineau chan->conn->mtu = chan->conn->hcon->hdev->acl_mtu; 645632b32735SMat Martineau 645732b32735SMat Martineau err = l2cap_resegment(chan); 645832b32735SMat Martineau 645932b32735SMat Martineau if (!err) 646032b32735SMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 646132b32735SMat Martineau 646232b32735SMat Martineau return err; 646332b32735SMat Martineau } 646432b32735SMat Martineau 6465d2a7ac5dSMat Martineau static bool __valid_reqseq(struct l2cap_chan *chan, u16 reqseq) 6466d2a7ac5dSMat Martineau { 6467d2a7ac5dSMat Martineau /* Make sure reqseq is for a packet that has been sent but not acked */ 6468d2a7ac5dSMat Martineau u16 unacked; 6469d2a7ac5dSMat Martineau 6470d2a7ac5dSMat Martineau unacked = __seq_offset(chan, chan->next_tx_seq, chan->expected_ack_seq); 6471d2a7ac5dSMat Martineau return __seq_offset(chan, chan->next_tx_seq, reqseq) <= unacked; 6472d2a7ac5dSMat Martineau } 6473d2a7ac5dSMat Martineau 6474cec8ab6eSMat Martineau static int l2cap_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6475cec8ab6eSMat Martineau struct sk_buff *skb, u8 event) 64760a708f8fSGustavo F. Padovan { 6477d2a7ac5dSMat Martineau int err = 0; 6478d2a7ac5dSMat Martineau 6479d2a7ac5dSMat Martineau BT_DBG("chan %p, control %p, skb %p, event %d, state %d", chan, 6480d2a7ac5dSMat Martineau control, skb, event, chan->rx_state); 6481d2a7ac5dSMat Martineau 6482d2a7ac5dSMat Martineau if (__valid_reqseq(chan, control->reqseq)) { 6483d2a7ac5dSMat Martineau switch (chan->rx_state) { 6484d2a7ac5dSMat Martineau case L2CAP_RX_STATE_RECV: 6485d2a7ac5dSMat Martineau err = l2cap_rx_state_recv(chan, control, skb, event); 6486d2a7ac5dSMat Martineau break; 6487d2a7ac5dSMat Martineau case L2CAP_RX_STATE_SREJ_SENT: 6488d2a7ac5dSMat Martineau err = l2cap_rx_state_srej_sent(chan, control, skb, 6489d2a7ac5dSMat Martineau event); 6490d2a7ac5dSMat Martineau break; 649132b32735SMat Martineau case L2CAP_RX_STATE_WAIT_P: 649232b32735SMat Martineau err = l2cap_rx_state_wait_p(chan, control, skb, event); 649332b32735SMat Martineau break; 649432b32735SMat Martineau case L2CAP_RX_STATE_WAIT_F: 649532b32735SMat Martineau err = l2cap_rx_state_wait_f(chan, control, skb, event); 649632b32735SMat Martineau break; 6497d2a7ac5dSMat Martineau default: 6498d2a7ac5dSMat Martineau /* shut it down */ 6499d2a7ac5dSMat Martineau break; 6500d2a7ac5dSMat Martineau } 6501d2a7ac5dSMat Martineau } else { 6502d2a7ac5dSMat Martineau BT_DBG("Invalid reqseq %d (next_tx_seq %d, expected_ack_seq %d", 6503d2a7ac5dSMat Martineau control->reqseq, chan->next_tx_seq, 6504d2a7ac5dSMat Martineau chan->expected_ack_seq); 65055e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6506d2a7ac5dSMat Martineau } 6507d2a7ac5dSMat Martineau 6508d2a7ac5dSMat Martineau return err; 6509cec8ab6eSMat Martineau } 6510cec8ab6eSMat Martineau 6511cec8ab6eSMat Martineau static int l2cap_stream_rx(struct l2cap_chan *chan, struct l2cap_ctrl *control, 6512cec8ab6eSMat Martineau struct sk_buff *skb) 6513cec8ab6eSMat Martineau { 65144b51dae9SMat Martineau int err = 0; 65154b51dae9SMat Martineau 65164b51dae9SMat Martineau BT_DBG("chan %p, control %p, skb %p, state %d", chan, control, skb, 65174b51dae9SMat Martineau chan->rx_state); 65184b51dae9SMat Martineau 65194b51dae9SMat Martineau if (l2cap_classify_txseq(chan, control->txseq) == 65204b51dae9SMat Martineau L2CAP_TXSEQ_EXPECTED) { 65214b51dae9SMat Martineau l2cap_pass_to_tx(chan, control); 65224b51dae9SMat Martineau 65234b51dae9SMat Martineau BT_DBG("buffer_seq %d->%d", chan->buffer_seq, 65244b51dae9SMat Martineau __next_seq(chan, chan->buffer_seq)); 65254b51dae9SMat Martineau 65264b51dae9SMat Martineau chan->buffer_seq = __next_seq(chan, chan->buffer_seq); 65274b51dae9SMat Martineau 65284b51dae9SMat Martineau l2cap_reassemble_sdu(chan, skb, control); 65294b51dae9SMat Martineau } else { 65304b51dae9SMat Martineau if (chan->sdu) { 65314b51dae9SMat Martineau kfree_skb(chan->sdu); 65324b51dae9SMat Martineau chan->sdu = NULL; 65334b51dae9SMat Martineau } 65344b51dae9SMat Martineau chan->sdu_last_frag = NULL; 65354b51dae9SMat Martineau chan->sdu_len = 0; 65364b51dae9SMat Martineau 65374b51dae9SMat Martineau if (skb) { 65384b51dae9SMat Martineau BT_DBG("Freeing %p", skb); 65394b51dae9SMat Martineau kfree_skb(skb); 65404b51dae9SMat Martineau } 65414b51dae9SMat Martineau } 65424b51dae9SMat Martineau 65434b51dae9SMat Martineau chan->last_acked_seq = control->txseq; 65444b51dae9SMat Martineau chan->expected_tx_seq = __next_seq(chan, control->txseq); 65454b51dae9SMat Martineau 65464b51dae9SMat Martineau return err; 6547cec8ab6eSMat Martineau } 6548cec8ab6eSMat Martineau 6549cec8ab6eSMat Martineau static int l2cap_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6550cec8ab6eSMat Martineau { 6551cec8ab6eSMat Martineau struct l2cap_ctrl *control = &bt_cb(skb)->control; 6552cec8ab6eSMat Martineau u16 len; 6553cec8ab6eSMat Martineau u8 event; 65540a708f8fSGustavo F. Padovan 6555b76bbd66SMat Martineau __unpack_control(chan, skb); 6556b76bbd66SMat Martineau 65570a708f8fSGustavo F. Padovan len = skb->len; 65580a708f8fSGustavo F. Padovan 65590a708f8fSGustavo F. Padovan /* 65600a708f8fSGustavo F. Padovan * We can just drop the corrupted I-frame here. 65610a708f8fSGustavo F. Padovan * Receiver will miss it and start proper recovery 6562cec8ab6eSMat Martineau * procedures and ask for retransmission. 65630a708f8fSGustavo F. Padovan */ 656447d1ec61SGustavo F. Padovan if (l2cap_check_fcs(chan, skb)) 65650a708f8fSGustavo F. Padovan goto drop; 65660a708f8fSGustavo F. Padovan 6567cec8ab6eSMat Martineau if (!control->sframe && control->sar == L2CAP_SAR_START) 656803a51213SAndrei Emeltchenko len -= L2CAP_SDULEN_SIZE; 65690a708f8fSGustavo F. Padovan 657047d1ec61SGustavo F. Padovan if (chan->fcs == L2CAP_FCS_CRC16) 657103a51213SAndrei Emeltchenko len -= L2CAP_FCS_SIZE; 65720a708f8fSGustavo F. Padovan 657347d1ec61SGustavo F. Padovan if (len > chan->mps) { 65745e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 65750a708f8fSGustavo F. Padovan goto drop; 65760a708f8fSGustavo F. Padovan } 65770a708f8fSGustavo F. Padovan 6578cec8ab6eSMat Martineau if (!control->sframe) { 6579cec8ab6eSMat Martineau int err; 65800a708f8fSGustavo F. Padovan 6581cec8ab6eSMat Martineau BT_DBG("iframe sar %d, reqseq %d, final %d, txseq %d", 6582cec8ab6eSMat Martineau control->sar, control->reqseq, control->final, 6583cec8ab6eSMat Martineau control->txseq); 6584836be934SAndrei Emeltchenko 6585cec8ab6eSMat Martineau /* Validate F-bit - F=0 always valid, F=1 only 6586cec8ab6eSMat Martineau * valid in TX WAIT_F 6587cec8ab6eSMat Martineau */ 6588cec8ab6eSMat Martineau if (control->final && chan->tx_state != L2CAP_TX_STATE_WAIT_F) 65890a708f8fSGustavo F. Padovan goto drop; 65900a708f8fSGustavo F. Padovan 6591cec8ab6eSMat Martineau if (chan->mode != L2CAP_MODE_STREAMING) { 6592cec8ab6eSMat Martineau event = L2CAP_EV_RECV_IFRAME; 6593cec8ab6eSMat Martineau err = l2cap_rx(chan, control, skb, event); 65940a708f8fSGustavo F. Padovan } else { 6595cec8ab6eSMat Martineau err = l2cap_stream_rx(chan, control, skb); 6596cec8ab6eSMat Martineau } 6597cec8ab6eSMat Martineau 6598cec8ab6eSMat Martineau if (err) 65995e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 6600cec8ab6eSMat Martineau } else { 6601cec8ab6eSMat Martineau const u8 rx_func_to_event[4] = { 6602cec8ab6eSMat Martineau L2CAP_EV_RECV_RR, L2CAP_EV_RECV_REJ, 6603cec8ab6eSMat Martineau L2CAP_EV_RECV_RNR, L2CAP_EV_RECV_SREJ 6604cec8ab6eSMat Martineau }; 6605cec8ab6eSMat Martineau 6606cec8ab6eSMat Martineau /* Only I-frames are expected in streaming mode */ 6607cec8ab6eSMat Martineau if (chan->mode == L2CAP_MODE_STREAMING) 6608cec8ab6eSMat Martineau goto drop; 6609cec8ab6eSMat Martineau 6610cec8ab6eSMat Martineau BT_DBG("sframe reqseq %d, final %d, poll %d, super %d", 6611cec8ab6eSMat Martineau control->reqseq, control->final, control->poll, 6612cec8ab6eSMat Martineau control->super); 6613cec8ab6eSMat Martineau 66140a708f8fSGustavo F. Padovan if (len != 0) { 66151bb166e6SAndrei Emeltchenko BT_ERR("Trailing bytes: %d in sframe", len); 66165e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66170a708f8fSGustavo F. Padovan goto drop; 66180a708f8fSGustavo F. Padovan } 66190a708f8fSGustavo F. Padovan 6620cec8ab6eSMat Martineau /* Validate F and P bits */ 6621cec8ab6eSMat Martineau if (control->final && (control->poll || 6622cec8ab6eSMat Martineau chan->tx_state != L2CAP_TX_STATE_WAIT_F)) 6623cec8ab6eSMat Martineau goto drop; 6624cec8ab6eSMat Martineau 6625cec8ab6eSMat Martineau event = rx_func_to_event[control->super]; 6626cec8ab6eSMat Martineau if (l2cap_rx(chan, control, skb, event)) 66275e4e3972SAndrei Emeltchenko l2cap_send_disconn_req(chan, ECONNRESET); 66280a708f8fSGustavo F. Padovan } 66290a708f8fSGustavo F. Padovan 66300a708f8fSGustavo F. Padovan return 0; 66310a708f8fSGustavo F. Padovan 66320a708f8fSGustavo F. Padovan drop: 66330a708f8fSGustavo F. Padovan kfree_skb(skb); 66340a708f8fSGustavo F. Padovan return 0; 66350a708f8fSGustavo F. Padovan } 66360a708f8fSGustavo F. Padovan 6637b1c325c2SJohan Hedberg static void l2cap_chan_le_send_credits(struct l2cap_chan *chan) 6638b1c325c2SJohan Hedberg { 6639b1c325c2SJohan Hedberg struct l2cap_conn *conn = chan->conn; 6640b1c325c2SJohan Hedberg struct l2cap_le_credits pkt; 6641b1c325c2SJohan Hedberg u16 return_credits; 6642b1c325c2SJohan Hedberg 6643b1c325c2SJohan Hedberg /* We return more credits to the sender only after the amount of 6644b1c325c2SJohan Hedberg * credits falls below half of the initial amount. 6645b1c325c2SJohan Hedberg */ 6646f15b8ecfSJohan Hedberg if (chan->rx_credits >= (le_max_credits + 1) / 2) 6647b1c325c2SJohan Hedberg return; 6648b1c325c2SJohan Hedberg 6649f15b8ecfSJohan Hedberg return_credits = le_max_credits - chan->rx_credits; 6650b1c325c2SJohan Hedberg 6651b1c325c2SJohan Hedberg BT_DBG("chan %p returning %u credits to sender", chan, return_credits); 6652b1c325c2SJohan Hedberg 6653b1c325c2SJohan Hedberg chan->rx_credits += return_credits; 6654b1c325c2SJohan Hedberg 6655b1c325c2SJohan Hedberg pkt.cid = cpu_to_le16(chan->scid); 6656b1c325c2SJohan Hedberg pkt.credits = cpu_to_le16(return_credits); 6657b1c325c2SJohan Hedberg 6658b1c325c2SJohan Hedberg chan->ident = l2cap_get_ident(conn); 6659b1c325c2SJohan Hedberg 6660b1c325c2SJohan Hedberg l2cap_send_cmd(conn, chan->ident, L2CAP_LE_CREDITS, sizeof(pkt), &pkt); 6661b1c325c2SJohan Hedberg } 6662b1c325c2SJohan Hedberg 6663fad5fc89SJohan Hedberg static int l2cap_le_data_rcv(struct l2cap_chan *chan, struct sk_buff *skb) 6664fad5fc89SJohan Hedberg { 6665aac23bf6SJohan Hedberg int err; 6666fad5fc89SJohan Hedberg 6667aac23bf6SJohan Hedberg if (!chan->rx_credits) { 6668aac23bf6SJohan Hedberg BT_ERR("No credits to receive LE L2CAP data"); 6669dfd9774cSJohan Hedberg l2cap_send_disconn_req(chan, ECONNRESET); 6670fad5fc89SJohan Hedberg return -ENOBUFS; 6671aac23bf6SJohan Hedberg } 6672aac23bf6SJohan Hedberg 6673aac23bf6SJohan Hedberg if (chan->imtu < skb->len) { 6674aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP PDU"); 6675aac23bf6SJohan Hedberg return -ENOBUFS; 6676aac23bf6SJohan Hedberg } 6677fad5fc89SJohan Hedberg 6678fad5fc89SJohan Hedberg chan->rx_credits--; 6679fad5fc89SJohan Hedberg BT_DBG("rx_credits %u -> %u", chan->rx_credits + 1, chan->rx_credits); 6680fad5fc89SJohan Hedberg 6681fad5fc89SJohan Hedberg l2cap_chan_le_send_credits(chan); 6682fad5fc89SJohan Hedberg 6683aac23bf6SJohan Hedberg err = 0; 6684aac23bf6SJohan Hedberg 6685aac23bf6SJohan Hedberg if (!chan->sdu) { 6686aac23bf6SJohan Hedberg u16 sdu_len; 6687aac23bf6SJohan Hedberg 6688aac23bf6SJohan Hedberg sdu_len = get_unaligned_le16(skb->data); 6689aac23bf6SJohan Hedberg skb_pull(skb, L2CAP_SDULEN_SIZE); 6690aac23bf6SJohan Hedberg 6691aac23bf6SJohan Hedberg BT_DBG("Start of new SDU. sdu_len %u skb->len %u imtu %u", 6692aac23bf6SJohan Hedberg sdu_len, skb->len, chan->imtu); 6693aac23bf6SJohan Hedberg 6694aac23bf6SJohan Hedberg if (sdu_len > chan->imtu) { 6695aac23bf6SJohan Hedberg BT_ERR("Too big LE L2CAP SDU length received"); 6696aac23bf6SJohan Hedberg err = -EMSGSIZE; 6697aac23bf6SJohan Hedberg goto failed; 6698aac23bf6SJohan Hedberg } 6699aac23bf6SJohan Hedberg 6700aac23bf6SJohan Hedberg if (skb->len > sdu_len) { 6701aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6702aac23bf6SJohan Hedberg err = -EINVAL; 6703aac23bf6SJohan Hedberg goto failed; 6704aac23bf6SJohan Hedberg } 6705aac23bf6SJohan Hedberg 6706aac23bf6SJohan Hedberg if (skb->len == sdu_len) 6707fad5fc89SJohan Hedberg return chan->ops->recv(chan, skb); 6708aac23bf6SJohan Hedberg 6709aac23bf6SJohan Hedberg chan->sdu = skb; 6710aac23bf6SJohan Hedberg chan->sdu_len = sdu_len; 6711aac23bf6SJohan Hedberg chan->sdu_last_frag = skb; 6712aac23bf6SJohan Hedberg 6713aac23bf6SJohan Hedberg return 0; 6714aac23bf6SJohan Hedberg } 6715aac23bf6SJohan Hedberg 6716aac23bf6SJohan Hedberg BT_DBG("SDU fragment. chan->sdu->len %u skb->len %u chan->sdu_len %u", 6717aac23bf6SJohan Hedberg chan->sdu->len, skb->len, chan->sdu_len); 6718aac23bf6SJohan Hedberg 6719aac23bf6SJohan Hedberg if (chan->sdu->len + skb->len > chan->sdu_len) { 6720aac23bf6SJohan Hedberg BT_ERR("Too much LE L2CAP data received"); 6721aac23bf6SJohan Hedberg err = -EINVAL; 6722aac23bf6SJohan Hedberg goto failed; 6723aac23bf6SJohan Hedberg } 6724aac23bf6SJohan Hedberg 6725aac23bf6SJohan Hedberg append_skb_frag(chan->sdu, skb, &chan->sdu_last_frag); 6726aac23bf6SJohan Hedberg skb = NULL; 6727aac23bf6SJohan Hedberg 6728aac23bf6SJohan Hedberg if (chan->sdu->len == chan->sdu_len) { 6729aac23bf6SJohan Hedberg err = chan->ops->recv(chan, chan->sdu); 6730aac23bf6SJohan Hedberg if (!err) { 6731aac23bf6SJohan Hedberg chan->sdu = NULL; 6732aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6733aac23bf6SJohan Hedberg chan->sdu_len = 0; 6734aac23bf6SJohan Hedberg } 6735aac23bf6SJohan Hedberg } 6736aac23bf6SJohan Hedberg 6737aac23bf6SJohan Hedberg failed: 6738aac23bf6SJohan Hedberg if (err) { 6739aac23bf6SJohan Hedberg kfree_skb(skb); 6740aac23bf6SJohan Hedberg kfree_skb(chan->sdu); 6741aac23bf6SJohan Hedberg chan->sdu = NULL; 6742aac23bf6SJohan Hedberg chan->sdu_last_frag = NULL; 6743aac23bf6SJohan Hedberg chan->sdu_len = 0; 6744aac23bf6SJohan Hedberg } 6745aac23bf6SJohan Hedberg 6746aac23bf6SJohan Hedberg /* We can't return an error here since we took care of the skb 6747aac23bf6SJohan Hedberg * freeing internally. An error return would cause the caller to 6748aac23bf6SJohan Hedberg * do a double-free of the skb. 6749aac23bf6SJohan Hedberg */ 6750aac23bf6SJohan Hedberg return 0; 6751fad5fc89SJohan Hedberg } 6752fad5fc89SJohan Hedberg 675313ca56e0SAndrei Emeltchenko static void l2cap_data_channel(struct l2cap_conn *conn, u16 cid, 675413ca56e0SAndrei Emeltchenko struct sk_buff *skb) 67550a708f8fSGustavo F. Padovan { 675648454079SGustavo F. Padovan struct l2cap_chan *chan; 67570a708f8fSGustavo F. Padovan 6758baa7e1faSGustavo F. Padovan chan = l2cap_get_chan_by_scid(conn, cid); 675948454079SGustavo F. Padovan if (!chan) { 676097e8e89dSAndrei Emeltchenko if (cid == L2CAP_CID_A2MP) { 676197e8e89dSAndrei Emeltchenko chan = a2mp_channel_create(conn, skb); 676297e8e89dSAndrei Emeltchenko if (!chan) { 676397e8e89dSAndrei Emeltchenko kfree_skb(skb); 676413ca56e0SAndrei Emeltchenko return; 676597e8e89dSAndrei Emeltchenko } 676697e8e89dSAndrei Emeltchenko 676797e8e89dSAndrei Emeltchenko l2cap_chan_lock(chan); 676897e8e89dSAndrei Emeltchenko } else { 67690a708f8fSGustavo F. Padovan BT_DBG("unknown cid 0x%4.4x", cid); 67706be36555SAndrei Emeltchenko /* Drop packet and return */ 67713379013bSDan Carpenter kfree_skb(skb); 677213ca56e0SAndrei Emeltchenko return; 67730a708f8fSGustavo F. Padovan } 677497e8e89dSAndrei Emeltchenko } 67750a708f8fSGustavo F. Padovan 677649208c9cSGustavo F. Padovan BT_DBG("chan %p, len %d", chan, skb->len); 67770a708f8fSGustavo F. Padovan 677889bc500eSGustavo F. Padovan if (chan->state != BT_CONNECTED) 67790a708f8fSGustavo F. Padovan goto drop; 67800a708f8fSGustavo F. Padovan 67810c1bc5c6SGustavo F. Padovan switch (chan->mode) { 678238319713SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 6783fad5fc89SJohan Hedberg if (l2cap_le_data_rcv(chan, skb) < 0) 6784fad5fc89SJohan Hedberg goto drop; 6785fad5fc89SJohan Hedberg 6786fad5fc89SJohan Hedberg goto done; 6787fad5fc89SJohan Hedberg 67880a708f8fSGustavo F. Padovan case L2CAP_MODE_BASIC: 67890a708f8fSGustavo F. Padovan /* If socket recv buffers overflows we drop data here 67900a708f8fSGustavo F. Padovan * which is *bad* because L2CAP has to be reliable. 67910a708f8fSGustavo F. Padovan * But we don't have any other choice. L2CAP doesn't 67920a708f8fSGustavo F. Padovan * provide flow control mechanism. */ 67930a708f8fSGustavo F. Padovan 67942c96e03dSSzymon Janc if (chan->imtu < skb->len) { 67952c96e03dSSzymon Janc BT_ERR("Dropping L2CAP data: receive buffer overflow"); 67960a708f8fSGustavo F. Padovan goto drop; 67972c96e03dSSzymon Janc } 67980a708f8fSGustavo F. Padovan 679980b98027SGustavo Padovan if (!chan->ops->recv(chan, skb)) 68000a708f8fSGustavo F. Padovan goto done; 68010a708f8fSGustavo F. Padovan break; 68020a708f8fSGustavo F. Padovan 68030a708f8fSGustavo F. Padovan case L2CAP_MODE_ERTM: 68040a708f8fSGustavo F. Padovan case L2CAP_MODE_STREAMING: 6805cec8ab6eSMat Martineau l2cap_data_rcv(chan, skb); 68060a708f8fSGustavo F. Padovan goto done; 68070a708f8fSGustavo F. Padovan 68080a708f8fSGustavo F. Padovan default: 68090c1bc5c6SGustavo F. Padovan BT_DBG("chan %p: bad mode 0x%2.2x", chan, chan->mode); 68100a708f8fSGustavo F. Padovan break; 68110a708f8fSGustavo F. Padovan } 68120a708f8fSGustavo F. Padovan 68130a708f8fSGustavo F. Padovan drop: 68140a708f8fSGustavo F. Padovan kfree_skb(skb); 68150a708f8fSGustavo F. Padovan 68160a708f8fSGustavo F. Padovan done: 68176be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 68180a708f8fSGustavo F. Padovan } 68190a708f8fSGustavo F. Padovan 682084104b24SAndrei Emeltchenko static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm, 682184104b24SAndrei Emeltchenko struct sk_buff *skb) 68220a708f8fSGustavo F. Padovan { 6823ae4fd2d3SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 682423691d75SGustavo F. Padovan struct l2cap_chan *chan; 68250a708f8fSGustavo F. Padovan 6826ae4fd2d3SMarcel Holtmann if (hcon->type != ACL_LINK) 6827a24cce14SJohan Hedberg goto free_skb; 6828ae4fd2d3SMarcel Holtmann 6829bf20fd4eSJohan Hedberg chan = l2cap_global_chan_by_psm(0, psm, &hcon->src, &hcon->dst, 6830bf20fd4eSJohan Hedberg ACL_LINK); 683123691d75SGustavo F. Padovan if (!chan) 6832a24cce14SJohan Hedberg goto free_skb; 68330a708f8fSGustavo F. Padovan 68345b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68350a708f8fSGustavo F. Padovan 683689bc500eSGustavo F. Padovan if (chan->state != BT_BOUND && chan->state != BT_CONNECTED) 68370a708f8fSGustavo F. Padovan goto drop; 68380a708f8fSGustavo F. Padovan 6839e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68400a708f8fSGustavo F. Padovan goto drop; 68410a708f8fSGustavo F. Padovan 68422edf870dSMarcel Holtmann /* Store remote BD_ADDR and PSM for msg_name */ 684306ae3314SMarcel Holtmann bacpy(&bt_cb(skb)->bdaddr, &hcon->dst); 68442edf870dSMarcel Holtmann bt_cb(skb)->psm = psm; 68452edf870dSMarcel Holtmann 6846a24cce14SJohan Hedberg if (!chan->ops->recv(chan, skb)) { 6847a24cce14SJohan Hedberg l2cap_chan_put(chan); 684884104b24SAndrei Emeltchenko return; 6849a24cce14SJohan Hedberg } 68500a708f8fSGustavo F. Padovan 68510a708f8fSGustavo F. Padovan drop: 6852a24cce14SJohan Hedberg l2cap_chan_put(chan); 6853a24cce14SJohan Hedberg free_skb: 68540a708f8fSGustavo F. Padovan kfree_skb(skb); 68550a708f8fSGustavo F. Padovan } 68560a708f8fSGustavo F. Padovan 685772f78356SMarcel Holtmann static void l2cap_att_channel(struct l2cap_conn *conn, 6858d9b88702SAndrei Emeltchenko struct sk_buff *skb) 68599f69bda6SGustavo F. Padovan { 6860b99707d7SMarcel Holtmann struct hci_conn *hcon = conn->hcon; 686123691d75SGustavo F. Padovan struct l2cap_chan *chan; 68629f69bda6SGustavo F. Padovan 6863b99707d7SMarcel Holtmann if (hcon->type != LE_LINK) 6864a24cce14SJohan Hedberg goto free_skb; 6865b99707d7SMarcel Holtmann 6866af1c0134SJohan Hedberg chan = l2cap_global_chan_by_scid(BT_CONNECTED, L2CAP_CID_ATT, 686706ae3314SMarcel Holtmann &hcon->src, &hcon->dst); 686823691d75SGustavo F. Padovan if (!chan) 6869a24cce14SJohan Hedberg goto free_skb; 68709f69bda6SGustavo F. Padovan 68715b4cedaaSAndrei Emeltchenko BT_DBG("chan %p, len %d", chan, skb->len); 68729f69bda6SGustavo F. Padovan 6873e13e21dcSVinicius Costa Gomes if (chan->imtu < skb->len) 68749f69bda6SGustavo F. Padovan goto drop; 68759f69bda6SGustavo F. Padovan 6876a24cce14SJohan Hedberg if (!chan->ops->recv(chan, skb)) { 6877a24cce14SJohan Hedberg l2cap_chan_put(chan); 68786810fca7SAndrei Emeltchenko return; 6879a24cce14SJohan Hedberg } 68809f69bda6SGustavo F. Padovan 68819f69bda6SGustavo F. Padovan drop: 6882a24cce14SJohan Hedberg l2cap_chan_put(chan); 6883a24cce14SJohan Hedberg free_skb: 68849f69bda6SGustavo F. Padovan kfree_skb(skb); 68859f69bda6SGustavo F. Padovan } 68869f69bda6SGustavo F. Padovan 68870a708f8fSGustavo F. Padovan static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb) 68880a708f8fSGustavo F. Padovan { 68890a708f8fSGustavo F. Padovan struct l2cap_hdr *lh = (void *) skb->data; 689061a939c6SJohan Hedberg struct hci_conn *hcon = conn->hcon; 68910a708f8fSGustavo F. Padovan u16 cid, len; 68920a708f8fSGustavo F. Padovan __le16 psm; 68930a708f8fSGustavo F. Padovan 689461a939c6SJohan Hedberg if (hcon->state != BT_CONNECTED) { 689561a939c6SJohan Hedberg BT_DBG("queueing pending rx skb"); 689661a939c6SJohan Hedberg skb_queue_tail(&conn->pending_rx, skb); 689761a939c6SJohan Hedberg return; 689861a939c6SJohan Hedberg } 689961a939c6SJohan Hedberg 69000a708f8fSGustavo F. Padovan skb_pull(skb, L2CAP_HDR_SIZE); 69010a708f8fSGustavo F. Padovan cid = __le16_to_cpu(lh->cid); 69020a708f8fSGustavo F. Padovan len = __le16_to_cpu(lh->len); 69030a708f8fSGustavo F. Padovan 69040a708f8fSGustavo F. Padovan if (len != skb->len) { 69050a708f8fSGustavo F. Padovan kfree_skb(skb); 69060a708f8fSGustavo F. Padovan return; 69070a708f8fSGustavo F. Padovan } 69080a708f8fSGustavo F. Padovan 69099e1d7e15SJohan Hedberg /* Since we can't actively block incoming LE connections we must 69109e1d7e15SJohan Hedberg * at least ensure that we ignore incoming data from them. 69119e1d7e15SJohan Hedberg */ 69129e1d7e15SJohan Hedberg if (hcon->type == LE_LINK && 6913dcc36c16SJohan Hedberg hci_bdaddr_list_lookup(&hcon->hdev->blacklist, &hcon->dst, 6914e493150eSJohan Hedberg bdaddr_type(hcon, hcon->dst_type))) { 6915e493150eSJohan Hedberg kfree_skb(skb); 6916e493150eSJohan Hedberg return; 6917e493150eSJohan Hedberg } 6918e493150eSJohan Hedberg 69190a708f8fSGustavo F. Padovan BT_DBG("len %d, cid 0x%4.4x", len, cid); 69200a708f8fSGustavo F. Padovan 69210a708f8fSGustavo F. Padovan switch (cid) { 69220a708f8fSGustavo F. Padovan case L2CAP_CID_SIGNALING: 69230a708f8fSGustavo F. Padovan l2cap_sig_channel(conn, skb); 69240a708f8fSGustavo F. Padovan break; 69250a708f8fSGustavo F. Padovan 69260a708f8fSGustavo F. Padovan case L2CAP_CID_CONN_LESS: 6927097db76cSAndrei Emeltchenko psm = get_unaligned((__le16 *) skb->data); 69280181a70fSAndrei Emeltchenko skb_pull(skb, L2CAP_PSMLEN_SIZE); 69290a708f8fSGustavo F. Padovan l2cap_conless_channel(conn, psm, skb); 69300a708f8fSGustavo F. Padovan break; 69310a708f8fSGustavo F. Padovan 6932073d1cf3SJohan Hedberg case L2CAP_CID_ATT: 693372f78356SMarcel Holtmann l2cap_att_channel(conn, skb); 69349f69bda6SGustavo F. Padovan break; 69359f69bda6SGustavo F. Padovan 6936a2877629SMarcel Holtmann case L2CAP_CID_LE_SIGNALING: 6937a2877629SMarcel Holtmann l2cap_le_sig_channel(conn, skb); 6938a2877629SMarcel Holtmann break; 6939a2877629SMarcel Holtmann 6940b501d6a1SAnderson Briglia case L2CAP_CID_SMP: 6941b501d6a1SAnderson Briglia if (smp_sig_channel(conn, skb)) 6942b501d6a1SAnderson Briglia l2cap_conn_del(conn->hcon, EACCES); 6943b501d6a1SAnderson Briglia break; 6944b501d6a1SAnderson Briglia 69450a708f8fSGustavo F. Padovan default: 69460a708f8fSGustavo F. Padovan l2cap_data_channel(conn, cid, skb); 69470a708f8fSGustavo F. Padovan break; 69480a708f8fSGustavo F. Padovan } 69490a708f8fSGustavo F. Padovan } 69500a708f8fSGustavo F. Padovan 695161a939c6SJohan Hedberg static void process_pending_rx(struct work_struct *work) 695261a939c6SJohan Hedberg { 695361a939c6SJohan Hedberg struct l2cap_conn *conn = container_of(work, struct l2cap_conn, 695461a939c6SJohan Hedberg pending_rx_work); 695561a939c6SJohan Hedberg struct sk_buff *skb; 695661a939c6SJohan Hedberg 695761a939c6SJohan Hedberg BT_DBG(""); 695861a939c6SJohan Hedberg 695961a939c6SJohan Hedberg while ((skb = skb_dequeue(&conn->pending_rx))) 696061a939c6SJohan Hedberg l2cap_recv_frame(conn, skb); 696161a939c6SJohan Hedberg } 696261a939c6SJohan Hedberg 6963162b49e7SJohan Hedberg static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon) 6964162b49e7SJohan Hedberg { 6965162b49e7SJohan Hedberg struct l2cap_conn *conn = hcon->l2cap_data; 6966162b49e7SJohan Hedberg struct hci_chan *hchan; 6967162b49e7SJohan Hedberg 6968162b49e7SJohan Hedberg if (conn) 6969162b49e7SJohan Hedberg return conn; 6970162b49e7SJohan Hedberg 6971162b49e7SJohan Hedberg hchan = hci_chan_create(hcon); 6972162b49e7SJohan Hedberg if (!hchan) 6973162b49e7SJohan Hedberg return NULL; 6974162b49e7SJohan Hedberg 697527f70f3eSJohan Hedberg conn = kzalloc(sizeof(*conn), GFP_KERNEL); 6976162b49e7SJohan Hedberg if (!conn) { 6977162b49e7SJohan Hedberg hci_chan_del(hchan); 6978162b49e7SJohan Hedberg return NULL; 6979162b49e7SJohan Hedberg } 6980162b49e7SJohan Hedberg 6981162b49e7SJohan Hedberg kref_init(&conn->ref); 6982162b49e7SJohan Hedberg hcon->l2cap_data = conn; 6983162b49e7SJohan Hedberg conn->hcon = hcon; 6984162b49e7SJohan Hedberg hci_conn_get(conn->hcon); 6985162b49e7SJohan Hedberg conn->hchan = hchan; 6986162b49e7SJohan Hedberg 6987162b49e7SJohan Hedberg BT_DBG("hcon %p conn %p hchan %p", hcon, conn, hchan); 6988162b49e7SJohan Hedberg 6989162b49e7SJohan Hedberg switch (hcon->type) { 6990162b49e7SJohan Hedberg case LE_LINK: 6991162b49e7SJohan Hedberg if (hcon->hdev->le_mtu) { 6992162b49e7SJohan Hedberg conn->mtu = hcon->hdev->le_mtu; 6993162b49e7SJohan Hedberg break; 6994162b49e7SJohan Hedberg } 6995162b49e7SJohan Hedberg /* fall through */ 6996162b49e7SJohan Hedberg default: 6997162b49e7SJohan Hedberg conn->mtu = hcon->hdev->acl_mtu; 6998162b49e7SJohan Hedberg break; 6999162b49e7SJohan Hedberg } 7000162b49e7SJohan Hedberg 7001162b49e7SJohan Hedberg conn->feat_mask = 0; 7002162b49e7SJohan Hedberg 7003162b49e7SJohan Hedberg if (hcon->type == ACL_LINK) 7004162b49e7SJohan Hedberg conn->hs_enabled = test_bit(HCI_HS_ENABLED, 7005162b49e7SJohan Hedberg &hcon->hdev->dev_flags); 7006162b49e7SJohan Hedberg 70075a54e7c8SMarcel Holtmann mutex_init(&conn->ident_lock); 7008162b49e7SJohan Hedberg mutex_init(&conn->chan_lock); 7009162b49e7SJohan Hedberg 7010162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->chan_l); 7011162b49e7SJohan Hedberg INIT_LIST_HEAD(&conn->users); 7012162b49e7SJohan Hedberg 7013162b49e7SJohan Hedberg if (hcon->type == LE_LINK) 7014162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->security_timer, security_timeout); 7015162b49e7SJohan Hedberg else 7016162b49e7SJohan Hedberg INIT_DELAYED_WORK(&conn->info_timer, l2cap_info_timeout); 7017162b49e7SJohan Hedberg 701861a939c6SJohan Hedberg skb_queue_head_init(&conn->pending_rx); 701961a939c6SJohan Hedberg INIT_WORK(&conn->pending_rx_work, process_pending_rx); 702061a939c6SJohan Hedberg 7021162b49e7SJohan Hedberg conn->disc_reason = HCI_ERROR_REMOTE_USER_TERM; 7022162b49e7SJohan Hedberg 7023162b49e7SJohan Hedberg return conn; 7024162b49e7SJohan Hedberg } 7025162b49e7SJohan Hedberg 7026162b49e7SJohan Hedberg static bool is_valid_psm(u16 psm, u8 dst_type) { 7027162b49e7SJohan Hedberg if (!psm) 7028162b49e7SJohan Hedberg return false; 7029162b49e7SJohan Hedberg 7030162b49e7SJohan Hedberg if (bdaddr_type_is_le(dst_type)) 7031162b49e7SJohan Hedberg return (psm <= 0x00ff); 7032162b49e7SJohan Hedberg 7033162b49e7SJohan Hedberg /* PSM must be odd and lsb of upper byte must be 0 */ 7034162b49e7SJohan Hedberg return ((psm & 0x0101) == 0x0001); 7035162b49e7SJohan Hedberg } 7036162b49e7SJohan Hedberg 7037162b49e7SJohan Hedberg int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid, 7038162b49e7SJohan Hedberg bdaddr_t *dst, u8 dst_type) 7039162b49e7SJohan Hedberg { 7040162b49e7SJohan Hedberg struct l2cap_conn *conn; 7041162b49e7SJohan Hedberg struct hci_conn *hcon; 7042162b49e7SJohan Hedberg struct hci_dev *hdev; 7043162b49e7SJohan Hedberg int err; 7044162b49e7SJohan Hedberg 7045162b49e7SJohan Hedberg BT_DBG("%pMR -> %pMR (type %u) psm 0x%2.2x", &chan->src, dst, 7046162b49e7SJohan Hedberg dst_type, __le16_to_cpu(psm)); 7047162b49e7SJohan Hedberg 7048162b49e7SJohan Hedberg hdev = hci_get_route(dst, &chan->src); 7049162b49e7SJohan Hedberg if (!hdev) 7050162b49e7SJohan Hedberg return -EHOSTUNREACH; 7051162b49e7SJohan Hedberg 7052162b49e7SJohan Hedberg hci_dev_lock(hdev); 7053162b49e7SJohan Hedberg 7054162b49e7SJohan Hedberg l2cap_chan_lock(chan); 7055162b49e7SJohan Hedberg 7056162b49e7SJohan Hedberg if (!is_valid_psm(__le16_to_cpu(psm), dst_type) && !cid && 7057162b49e7SJohan Hedberg chan->chan_type != L2CAP_CHAN_RAW) { 7058162b49e7SJohan Hedberg err = -EINVAL; 7059162b49e7SJohan Hedberg goto done; 7060162b49e7SJohan Hedberg } 7061162b49e7SJohan Hedberg 706221626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_CONN_ORIENTED && !psm) { 706321626e62SJohan Hedberg err = -EINVAL; 706421626e62SJohan Hedberg goto done; 706521626e62SJohan Hedberg } 706621626e62SJohan Hedberg 706721626e62SJohan Hedberg if (chan->chan_type == L2CAP_CHAN_FIXED && !cid) { 7068162b49e7SJohan Hedberg err = -EINVAL; 7069162b49e7SJohan Hedberg goto done; 7070162b49e7SJohan Hedberg } 7071162b49e7SJohan Hedberg 7072162b49e7SJohan Hedberg switch (chan->mode) { 7073162b49e7SJohan Hedberg case L2CAP_MODE_BASIC: 7074162b49e7SJohan Hedberg break; 7075162b49e7SJohan Hedberg case L2CAP_MODE_LE_FLOWCTL: 7076162b49e7SJohan Hedberg l2cap_le_flowctl_init(chan); 7077162b49e7SJohan Hedberg break; 7078162b49e7SJohan Hedberg case L2CAP_MODE_ERTM: 7079162b49e7SJohan Hedberg case L2CAP_MODE_STREAMING: 7080162b49e7SJohan Hedberg if (!disable_ertm) 7081162b49e7SJohan Hedberg break; 7082162b49e7SJohan Hedberg /* fall through */ 7083162b49e7SJohan Hedberg default: 7084beb19e4cSJohan Hedberg err = -EOPNOTSUPP; 7085162b49e7SJohan Hedberg goto done; 7086162b49e7SJohan Hedberg } 7087162b49e7SJohan Hedberg 7088162b49e7SJohan Hedberg switch (chan->state) { 7089162b49e7SJohan Hedberg case BT_CONNECT: 7090162b49e7SJohan Hedberg case BT_CONNECT2: 7091162b49e7SJohan Hedberg case BT_CONFIG: 7092162b49e7SJohan Hedberg /* Already connecting */ 7093162b49e7SJohan Hedberg err = 0; 7094162b49e7SJohan Hedberg goto done; 7095162b49e7SJohan Hedberg 7096162b49e7SJohan Hedberg case BT_CONNECTED: 7097162b49e7SJohan Hedberg /* Already connected */ 7098162b49e7SJohan Hedberg err = -EISCONN; 7099162b49e7SJohan Hedberg goto done; 7100162b49e7SJohan Hedberg 7101162b49e7SJohan Hedberg case BT_OPEN: 7102162b49e7SJohan Hedberg case BT_BOUND: 7103162b49e7SJohan Hedberg /* Can connect */ 7104162b49e7SJohan Hedberg break; 7105162b49e7SJohan Hedberg 7106162b49e7SJohan Hedberg default: 7107162b49e7SJohan Hedberg err = -EBADFD; 7108162b49e7SJohan Hedberg goto done; 7109162b49e7SJohan Hedberg } 7110162b49e7SJohan Hedberg 7111162b49e7SJohan Hedberg /* Set destination address and psm */ 7112162b49e7SJohan Hedberg bacpy(&chan->dst, dst); 7113162b49e7SJohan Hedberg chan->dst_type = dst_type; 7114162b49e7SJohan Hedberg 7115162b49e7SJohan Hedberg chan->psm = psm; 7116162b49e7SJohan Hedberg chan->dcid = cid; 7117162b49e7SJohan Hedberg 71186f77d8c7SAndre Guedes if (bdaddr_type_is_le(dst_type)) { 7119e804d25dSJohan Hedberg u8 role; 7120cdd6275eSJohan Hedberg 71216f77d8c7SAndre Guedes /* Convert from L2CAP channel address type to HCI address type 71226f77d8c7SAndre Guedes */ 71236f77d8c7SAndre Guedes if (dst_type == BDADDR_LE_PUBLIC) 71246f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_PUBLIC; 71256f77d8c7SAndre Guedes else 71266f77d8c7SAndre Guedes dst_type = ADDR_LE_DEV_RANDOM; 71276f77d8c7SAndre Guedes 7128e804d25dSJohan Hedberg if (test_bit(HCI_ADVERTISING, &hdev->dev_flags)) 7129e804d25dSJohan Hedberg role = HCI_ROLE_SLAVE; 7130e804d25dSJohan Hedberg else 7131e804d25dSJohan Hedberg role = HCI_ROLE_MASTER; 7132cdd6275eSJohan Hedberg 713304a6c589SAndre Guedes hcon = hci_connect_le(hdev, dst, dst_type, chan->sec_level, 7134e804d25dSJohan Hedberg HCI_LE_CONN_TIMEOUT, role); 71356f77d8c7SAndre Guedes } else { 7136d93375a8SJohan Hedberg u8 auth_type = l2cap_get_auth_type(chan); 713704a6c589SAndre Guedes hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type); 71386f77d8c7SAndre Guedes } 7139162b49e7SJohan Hedberg 7140162b49e7SJohan Hedberg if (IS_ERR(hcon)) { 7141162b49e7SJohan Hedberg err = PTR_ERR(hcon); 7142162b49e7SJohan Hedberg goto done; 7143162b49e7SJohan Hedberg } 7144162b49e7SJohan Hedberg 7145162b49e7SJohan Hedberg conn = l2cap_conn_add(hcon); 7146162b49e7SJohan Hedberg if (!conn) { 7147162b49e7SJohan Hedberg hci_conn_drop(hcon); 7148162b49e7SJohan Hedberg err = -ENOMEM; 7149162b49e7SJohan Hedberg goto done; 7150162b49e7SJohan Hedberg } 7151162b49e7SJohan Hedberg 7152162b49e7SJohan Hedberg if (cid && __l2cap_get_chan_by_dcid(conn, cid)) { 7153162b49e7SJohan Hedberg hci_conn_drop(hcon); 7154162b49e7SJohan Hedberg err = -EBUSY; 7155162b49e7SJohan Hedberg goto done; 7156162b49e7SJohan Hedberg } 7157162b49e7SJohan Hedberg 7158162b49e7SJohan Hedberg /* Update source addr of the socket */ 7159162b49e7SJohan Hedberg bacpy(&chan->src, &hcon->src); 7160162b49e7SJohan Hedberg chan->src_type = bdaddr_type(hcon, hcon->src_type); 7161162b49e7SJohan Hedberg 7162162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 7163162b49e7SJohan Hedberg l2cap_chan_add(conn, chan); 7164162b49e7SJohan Hedberg l2cap_chan_lock(chan); 7165162b49e7SJohan Hedberg 7166162b49e7SJohan Hedberg /* l2cap_chan_add takes its own ref so we can drop this one */ 7167162b49e7SJohan Hedberg hci_conn_drop(hcon); 7168162b49e7SJohan Hedberg 7169162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECT); 7170162b49e7SJohan Hedberg __set_chan_timer(chan, chan->ops->get_sndtimeo(chan)); 7171162b49e7SJohan Hedberg 717261202e4dSJohan Hedberg /* Release chan->sport so that it can be reused by other 717361202e4dSJohan Hedberg * sockets (as it's only used for listening sockets). 717461202e4dSJohan Hedberg */ 717561202e4dSJohan Hedberg write_lock(&chan_list_lock); 717661202e4dSJohan Hedberg chan->sport = 0; 717761202e4dSJohan Hedberg write_unlock(&chan_list_lock); 717861202e4dSJohan Hedberg 7179162b49e7SJohan Hedberg if (hcon->state == BT_CONNECTED) { 7180162b49e7SJohan Hedberg if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) { 7181162b49e7SJohan Hedberg __clear_chan_timer(chan); 7182e7cafc45SJohan Hedberg if (l2cap_chan_check_security(chan, true)) 7183162b49e7SJohan Hedberg l2cap_state_change(chan, BT_CONNECTED); 7184162b49e7SJohan Hedberg } else 7185162b49e7SJohan Hedberg l2cap_do_start(chan); 7186162b49e7SJohan Hedberg } 7187162b49e7SJohan Hedberg 7188162b49e7SJohan Hedberg err = 0; 7189162b49e7SJohan Hedberg 7190162b49e7SJohan Hedberg done: 7191162b49e7SJohan Hedberg l2cap_chan_unlock(chan); 7192162b49e7SJohan Hedberg hci_dev_unlock(hdev); 7193162b49e7SJohan Hedberg hci_dev_put(hdev); 7194162b49e7SJohan Hedberg return err; 7195162b49e7SJohan Hedberg } 71966b8d4a6aSJukka Rissanen EXPORT_SYMBOL_GPL(l2cap_chan_connect); 7197162b49e7SJohan Hedberg 71980a708f8fSGustavo F. Padovan /* ---- L2CAP interface with lower layer (HCI) ---- */ 71990a708f8fSGustavo F. Padovan 7200686ebf28SUlisses Furquim int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr) 72010a708f8fSGustavo F. Padovan { 72020a708f8fSGustavo F. Padovan int exact = 0, lm1 = 0, lm2 = 0; 720323691d75SGustavo F. Padovan struct l2cap_chan *c; 72040a708f8fSGustavo F. Padovan 72056ed93dc6SAndrei Emeltchenko BT_DBG("hdev %s, bdaddr %pMR", hdev->name, bdaddr); 72060a708f8fSGustavo F. Padovan 72070a708f8fSGustavo F. Padovan /* Find listening sockets and check their link_mode */ 720823691d75SGustavo F. Padovan read_lock(&chan_list_lock); 720923691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 721089bc500eSGustavo F. Padovan if (c->state != BT_LISTEN) 72110a708f8fSGustavo F. Padovan continue; 72120a708f8fSGustavo F. Padovan 72137eafc59eSMarcel Holtmann if (!bacmp(&c->src, &hdev->bdaddr)) { 72140a708f8fSGustavo F. Padovan lm1 |= HCI_LM_ACCEPT; 721543bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72160a708f8fSGustavo F. Padovan lm1 |= HCI_LM_MASTER; 72170a708f8fSGustavo F. Padovan exact++; 72187eafc59eSMarcel Holtmann } else if (!bacmp(&c->src, BDADDR_ANY)) { 72190a708f8fSGustavo F. Padovan lm2 |= HCI_LM_ACCEPT; 722043bd0f32SAndrei Emeltchenko if (test_bit(FLAG_ROLE_SWITCH, &c->flags)) 72210a708f8fSGustavo F. Padovan lm2 |= HCI_LM_MASTER; 72220a708f8fSGustavo F. Padovan } 72230a708f8fSGustavo F. Padovan } 722423691d75SGustavo F. Padovan read_unlock(&chan_list_lock); 72250a708f8fSGustavo F. Padovan 72260a708f8fSGustavo F. Padovan return exact ? lm1 : lm2; 72270a708f8fSGustavo F. Padovan } 72280a708f8fSGustavo F. Padovan 7229*e760ec12SJohan Hedberg /* Find the next fixed channel in BT_LISTEN state, continue iteration 7230*e760ec12SJohan Hedberg * from an existing channel in the list or from the beginning of the 7231*e760ec12SJohan Hedberg * global list (by passing NULL as first parameter). 7232*e760ec12SJohan Hedberg */ 7233*e760ec12SJohan Hedberg static struct l2cap_chan *l2cap_global_fixed_chan(struct l2cap_chan *c, 7234*e760ec12SJohan Hedberg bdaddr_t *src) 7235*e760ec12SJohan Hedberg { 7236*e760ec12SJohan Hedberg read_lock(&chan_list_lock); 7237*e760ec12SJohan Hedberg 7238*e760ec12SJohan Hedberg if (c) 7239*e760ec12SJohan Hedberg c = list_next_entry(c, global_l); 7240*e760ec12SJohan Hedberg else 7241*e760ec12SJohan Hedberg c = list_entry(chan_list.next, typeof(*c), global_l); 7242*e760ec12SJohan Hedberg 7243*e760ec12SJohan Hedberg list_for_each_entry_from(c, &chan_list, global_l) { 7244*e760ec12SJohan Hedberg if (c->chan_type != L2CAP_CHAN_FIXED) 7245*e760ec12SJohan Hedberg continue; 7246*e760ec12SJohan Hedberg if (c->state != BT_LISTEN) 7247*e760ec12SJohan Hedberg continue; 7248*e760ec12SJohan Hedberg if (bacmp(&c->src, src) && bacmp(&c->src, BDADDR_ANY)) 7249*e760ec12SJohan Hedberg continue; 7250*e760ec12SJohan Hedberg 7251*e760ec12SJohan Hedberg l2cap_chan_hold(c); 7252*e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7253*e760ec12SJohan Hedberg return c; 7254*e760ec12SJohan Hedberg } 7255*e760ec12SJohan Hedberg 7256*e760ec12SJohan Hedberg read_unlock(&chan_list_lock); 7257*e760ec12SJohan Hedberg 7258*e760ec12SJohan Hedberg return NULL; 7259*e760ec12SJohan Hedberg } 7260*e760ec12SJohan Hedberg 72619e664631SAndrei Emeltchenko void l2cap_connect_cfm(struct hci_conn *hcon, u8 status) 72620a708f8fSGustavo F. Padovan { 7263*e760ec12SJohan Hedberg struct hci_dev *hdev = hcon->hdev; 72640a708f8fSGustavo F. Padovan struct l2cap_conn *conn; 7265*e760ec12SJohan Hedberg struct l2cap_chan *pchan; 7266*e760ec12SJohan Hedberg u8 dst_type; 72670a708f8fSGustavo F. Padovan 72686ed93dc6SAndrei Emeltchenko BT_DBG("hcon %p bdaddr %pMR status %d", hcon, &hcon->dst, status); 72690a708f8fSGustavo F. Padovan 7270dc0f5088SJohan Hedberg if (status) { 7271e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(status)); 7272dc0f5088SJohan Hedberg return; 7273ba6fc317SAndrei Emeltchenko } 7274dc0f5088SJohan Hedberg 7275dc0f5088SJohan Hedberg conn = l2cap_conn_add(hcon); 7276dc0f5088SJohan Hedberg if (!conn) 7277dc0f5088SJohan Hedberg return; 7278dc0f5088SJohan Hedberg 7279*e760ec12SJohan Hedberg dst_type = bdaddr_type(hcon, hcon->dst_type); 7280*e760ec12SJohan Hedberg 7281*e760ec12SJohan Hedberg /* If device is blocked, do not create channels for it */ 7282*e760ec12SJohan Hedberg if (hci_bdaddr_list_lookup(&hdev->blacklist, &hcon->dst, dst_type)) 7283*e760ec12SJohan Hedberg return; 7284*e760ec12SJohan Hedberg 7285*e760ec12SJohan Hedberg /* Find fixed channels and notify them of the new connection. We 7286*e760ec12SJohan Hedberg * use multiple individual lookups, continuing each time where 7287*e760ec12SJohan Hedberg * we left off, because the list lock would prevent calling the 7288*e760ec12SJohan Hedberg * potentially sleeping l2cap_chan_lock() function. 7289*e760ec12SJohan Hedberg */ 7290*e760ec12SJohan Hedberg pchan = l2cap_global_fixed_chan(NULL, &hdev->bdaddr); 7291*e760ec12SJohan Hedberg while (pchan) { 7292*e760ec12SJohan Hedberg struct l2cap_chan *chan, *next; 7293*e760ec12SJohan Hedberg 7294*e760ec12SJohan Hedberg /* Client fixed channels should override server ones */ 7295*e760ec12SJohan Hedberg if (__l2cap_get_chan_by_dcid(conn, pchan->scid)) 7296*e760ec12SJohan Hedberg goto next; 7297*e760ec12SJohan Hedberg 7298*e760ec12SJohan Hedberg l2cap_chan_lock(pchan); 7299*e760ec12SJohan Hedberg chan = pchan->ops->new_connection(pchan); 7300*e760ec12SJohan Hedberg if (chan) { 7301*e760ec12SJohan Hedberg bacpy(&chan->src, &hcon->src); 7302*e760ec12SJohan Hedberg bacpy(&chan->dst, &hcon->dst); 7303*e760ec12SJohan Hedberg chan->src_type = bdaddr_type(hcon, hcon->src_type); 7304*e760ec12SJohan Hedberg chan->dst_type = dst_type; 7305*e760ec12SJohan Hedberg 7306*e760ec12SJohan Hedberg __l2cap_chan_add(conn, chan); 7307*e760ec12SJohan Hedberg } 7308*e760ec12SJohan Hedberg 7309*e760ec12SJohan Hedberg l2cap_chan_unlock(pchan); 7310*e760ec12SJohan Hedberg next: 7311*e760ec12SJohan Hedberg next = l2cap_global_fixed_chan(pchan, &hdev->bdaddr); 7312*e760ec12SJohan Hedberg l2cap_chan_put(pchan); 7313*e760ec12SJohan Hedberg pchan = next; 7314*e760ec12SJohan Hedberg } 7315*e760ec12SJohan Hedberg 7316dc0f5088SJohan Hedberg l2cap_conn_ready(conn); 73170a708f8fSGustavo F. Padovan } 73180a708f8fSGustavo F. Padovan 7319686ebf28SUlisses Furquim int l2cap_disconn_ind(struct hci_conn *hcon) 73200a708f8fSGustavo F. Padovan { 73210a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 73220a708f8fSGustavo F. Padovan 73230a708f8fSGustavo F. Padovan BT_DBG("hcon %p", hcon); 73240a708f8fSGustavo F. Padovan 7325686ebf28SUlisses Furquim if (!conn) 73269f5a0d7bSAndrei Emeltchenko return HCI_ERROR_REMOTE_USER_TERM; 73270a708f8fSGustavo F. Padovan return conn->disc_reason; 73280a708f8fSGustavo F. Padovan } 73290a708f8fSGustavo F. Padovan 73309e664631SAndrei Emeltchenko void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason) 73310a708f8fSGustavo F. Padovan { 73320a708f8fSGustavo F. Padovan BT_DBG("hcon %p reason %d", hcon, reason); 73330a708f8fSGustavo F. Padovan 7334e175072fSJoe Perches l2cap_conn_del(hcon, bt_to_errno(reason)); 73350a708f8fSGustavo F. Padovan } 73360a708f8fSGustavo F. Padovan 73374343478fSGustavo F. Padovan static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt) 73380a708f8fSGustavo F. Padovan { 7339715ec005SGustavo F. Padovan if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED) 73400a708f8fSGustavo F. Padovan return; 73410a708f8fSGustavo F. Padovan 73420a708f8fSGustavo F. Padovan if (encrypt == 0x00) { 73434343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) { 7344ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_ENC_TIMEOUT); 73457d513e92SMarcel Holtmann } else if (chan->sec_level == BT_SECURITY_HIGH || 73467d513e92SMarcel Holtmann chan->sec_level == BT_SECURITY_FIPS) 73470f852724SGustavo F. Padovan l2cap_chan_close(chan, ECONNREFUSED); 73480a708f8fSGustavo F. Padovan } else { 73494343478fSGustavo F. Padovan if (chan->sec_level == BT_SECURITY_MEDIUM) 7350c9b66675SGustavo F. Padovan __clear_chan_timer(chan); 73510a708f8fSGustavo F. Padovan } 73520a708f8fSGustavo F. Padovan } 73530a708f8fSGustavo F. Padovan 7354686ebf28SUlisses Furquim int l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt) 73550a708f8fSGustavo F. Padovan { 73560a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 735748454079SGustavo F. Padovan struct l2cap_chan *chan; 73580a708f8fSGustavo F. Padovan 73590a708f8fSGustavo F. Padovan if (!conn) 73600a708f8fSGustavo F. Padovan return 0; 73610a708f8fSGustavo F. Padovan 736289d8b407SAndrei Emeltchenko BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt); 73630a708f8fSGustavo F. Padovan 7364160dc6acSVinicius Costa Gomes if (hcon->type == LE_LINK) { 736535d4adccSHemant Gupta if (!status && encrypt) 73664bd6d38eSJohan Hedberg smp_distribute_keys(conn); 736717cd3f37SUlisses Furquim cancel_delayed_work(&conn->security_timer); 7368160dc6acSVinicius Costa Gomes } 7369160dc6acSVinicius Costa Gomes 73703df91ea2SAndrei Emeltchenko mutex_lock(&conn->chan_lock); 73710a708f8fSGustavo F. Padovan 73723df91ea2SAndrei Emeltchenko list_for_each_entry(chan, &conn->chan_l, list) { 73736be36555SAndrei Emeltchenko l2cap_chan_lock(chan); 73740a708f8fSGustavo F. Padovan 737589d8b407SAndrei Emeltchenko BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid, 737689d8b407SAndrei Emeltchenko state_to_string(chan->state)); 7377f1cb9af5SVinicius Costa Gomes 73782338a7e0SJohan Hedberg if (chan->scid == L2CAP_CID_A2MP) { 737978eb2f98SAndrei Emeltchenko l2cap_chan_unlock(chan); 738078eb2f98SAndrei Emeltchenko continue; 738178eb2f98SAndrei Emeltchenko } 738278eb2f98SAndrei Emeltchenko 7383191eb398SJohan Hedberg if (!status && encrypt) 7384f1cb9af5SVinicius Costa Gomes chan->sec_level = hcon->sec_level; 7385f1cb9af5SVinicius Costa Gomes 738696eff46eSAndrei Emeltchenko if (!__l2cap_no_conn_pending(chan)) { 73876be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73880a708f8fSGustavo F. Padovan continue; 73890a708f8fSGustavo F. Padovan } 73900a708f8fSGustavo F. Padovan 739189bc500eSGustavo F. Padovan if (!status && (chan->state == BT_CONNECTED || 739289bc500eSGustavo F. Padovan chan->state == BT_CONFIG)) { 7393d97c899bSMarcel Holtmann chan->ops->resume(chan); 73944343478fSGustavo F. Padovan l2cap_check_encryption(chan, encrypt); 73956be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 73960a708f8fSGustavo F. Padovan continue; 73970a708f8fSGustavo F. Padovan } 73980a708f8fSGustavo F. Padovan 739989bc500eSGustavo F. Padovan if (chan->state == BT_CONNECT) { 74006d3c15daSJohan Hedberg if (!status) 740193c3e8f5SAndrei Emeltchenko l2cap_start_connection(chan); 74026d3c15daSJohan Hedberg else 7403ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 740489bc500eSGustavo F. Padovan } else if (chan->state == BT_CONNECT2) { 74050a708f8fSGustavo F. Padovan struct l2cap_conn_rsp rsp; 7406df3c3931SJohan Hedberg __u16 res, stat; 74070a708f8fSGustavo F. Padovan 74080a708f8fSGustavo F. Padovan if (!status) { 7409bdc25783SMarcel Holtmann if (test_bit(FLAG_DEFER_SETUP, &chan->flags)) { 7410df3c3931SJohan Hedberg res = L2CAP_CR_PEND; 7411df3c3931SJohan Hedberg stat = L2CAP_CS_AUTHOR_PEND; 74122dc4e510SGustavo Padovan chan->ops->defer(chan); 7413df3c3931SJohan Hedberg } else { 7414acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_CONFIG); 7415df3c3931SJohan Hedberg res = L2CAP_CR_SUCCESS; 7416df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 7417df3c3931SJohan Hedberg } 74180a708f8fSGustavo F. Padovan } else { 7419acdcabf5SGustavo Padovan l2cap_state_change(chan, BT_DISCONN); 7420ba13ccd9SMarcel Holtmann __set_chan_timer(chan, L2CAP_DISC_TIMEOUT); 7421df3c3931SJohan Hedberg res = L2CAP_CR_SEC_BLOCK; 7422df3c3931SJohan Hedberg stat = L2CAP_CS_NO_INFO; 74230a708f8fSGustavo F. Padovan } 74240a708f8fSGustavo F. Padovan 7425fe4128e0SGustavo F. Padovan rsp.scid = cpu_to_le16(chan->dcid); 7426fe4128e0SGustavo F. Padovan rsp.dcid = cpu_to_le16(chan->scid); 7427df3c3931SJohan Hedberg rsp.result = cpu_to_le16(res); 7428df3c3931SJohan Hedberg rsp.status = cpu_to_le16(stat); 7429fc7f8a7eSGustavo F. Padovan l2cap_send_cmd(conn, chan->ident, L2CAP_CONN_RSP, 7430fc7f8a7eSGustavo F. Padovan sizeof(rsp), &rsp); 74312d369359SMat Martineau 74322d369359SMat Martineau if (!test_bit(CONF_REQ_SENT, &chan->conf_state) && 74332d369359SMat Martineau res == L2CAP_CR_SUCCESS) { 74342d369359SMat Martineau char buf[128]; 74352d369359SMat Martineau set_bit(CONF_REQ_SENT, &chan->conf_state); 74362d369359SMat Martineau l2cap_send_cmd(conn, l2cap_get_ident(conn), 74372d369359SMat Martineau L2CAP_CONF_REQ, 74382d369359SMat Martineau l2cap_build_conf_req(chan, buf), 74392d369359SMat Martineau buf); 74402d369359SMat Martineau chan->num_conf_req++; 74412d369359SMat Martineau } 74420a708f8fSGustavo F. Padovan } 74430a708f8fSGustavo F. Padovan 74446be36555SAndrei Emeltchenko l2cap_chan_unlock(chan); 74450a708f8fSGustavo F. Padovan } 74460a708f8fSGustavo F. Padovan 74473df91ea2SAndrei Emeltchenko mutex_unlock(&conn->chan_lock); 74480a708f8fSGustavo F. Padovan 74490a708f8fSGustavo F. Padovan return 0; 74500a708f8fSGustavo F. Padovan } 74510a708f8fSGustavo F. Padovan 7452686ebf28SUlisses Furquim int l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags) 74530a708f8fSGustavo F. Padovan { 74540a708f8fSGustavo F. Padovan struct l2cap_conn *conn = hcon->l2cap_data; 7455d73a0988SAndrei Emeltchenko struct l2cap_hdr *hdr; 7456d73a0988SAndrei Emeltchenko int len; 74570a708f8fSGustavo F. Padovan 74581d13a254SAndrei Emeltchenko /* For AMP controller do not create l2cap conn */ 74591d13a254SAndrei Emeltchenko if (!conn && hcon->hdev->dev_type != HCI_BREDR) 74601d13a254SAndrei Emeltchenko goto drop; 74610a708f8fSGustavo F. Padovan 74620a708f8fSGustavo F. Padovan if (!conn) 7463baf43251SClaudio Takahasi conn = l2cap_conn_add(hcon); 74640a708f8fSGustavo F. Padovan 74650a708f8fSGustavo F. Padovan if (!conn) 74660a708f8fSGustavo F. Padovan goto drop; 74670a708f8fSGustavo F. Padovan 74680a708f8fSGustavo F. Padovan BT_DBG("conn %p len %d flags 0x%x", conn, skb->len, flags); 74690a708f8fSGustavo F. Padovan 7470d73a0988SAndrei Emeltchenko switch (flags) { 7471d73a0988SAndrei Emeltchenko case ACL_START: 7472d73a0988SAndrei Emeltchenko case ACL_START_NO_FLUSH: 7473d73a0988SAndrei Emeltchenko case ACL_COMPLETE: 74740a708f8fSGustavo F. Padovan if (conn->rx_len) { 74750a708f8fSGustavo F. Padovan BT_ERR("Unexpected start frame (len %d)", skb->len); 74760a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 74770a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 74780a708f8fSGustavo F. Padovan conn->rx_len = 0; 74790a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74800a708f8fSGustavo F. Padovan } 74810a708f8fSGustavo F. Padovan 74820a708f8fSGustavo F. Padovan /* Start fragment always begin with Basic L2CAP header */ 74830a708f8fSGustavo F. Padovan if (skb->len < L2CAP_HDR_SIZE) { 74840a708f8fSGustavo F. Padovan BT_ERR("Frame is too short (len %d)", skb->len); 74850a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 74860a708f8fSGustavo F. Padovan goto drop; 74870a708f8fSGustavo F. Padovan } 74880a708f8fSGustavo F. Padovan 74890a708f8fSGustavo F. Padovan hdr = (struct l2cap_hdr *) skb->data; 74900a708f8fSGustavo F. Padovan len = __le16_to_cpu(hdr->len) + L2CAP_HDR_SIZE; 74910a708f8fSGustavo F. Padovan 74920a708f8fSGustavo F. Padovan if (len == skb->len) { 74930a708f8fSGustavo F. Padovan /* Complete frame received */ 74940a708f8fSGustavo F. Padovan l2cap_recv_frame(conn, skb); 74950a708f8fSGustavo F. Padovan return 0; 74960a708f8fSGustavo F. Padovan } 74970a708f8fSGustavo F. Padovan 74980a708f8fSGustavo F. Padovan BT_DBG("Start: total len %d, frag len %d", len, skb->len); 74990a708f8fSGustavo F. Padovan 75000a708f8fSGustavo F. Padovan if (skb->len > len) { 75010a708f8fSGustavo F. Padovan BT_ERR("Frame is too long (len %d, expected len %d)", 75020a708f8fSGustavo F. Padovan skb->len, len); 75030a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75040a708f8fSGustavo F. Padovan goto drop; 75050a708f8fSGustavo F. Padovan } 75060a708f8fSGustavo F. Padovan 75070a708f8fSGustavo F. Padovan /* Allocate skb for the complete frame (with header) */ 75088bcde1f2SGustavo Padovan conn->rx_skb = bt_skb_alloc(len, GFP_KERNEL); 75090a708f8fSGustavo F. Padovan if (!conn->rx_skb) 75100a708f8fSGustavo F. Padovan goto drop; 75110a708f8fSGustavo F. Padovan 75120a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 75130a708f8fSGustavo F. Padovan skb->len); 75140a708f8fSGustavo F. Padovan conn->rx_len = len - skb->len; 7515d73a0988SAndrei Emeltchenko break; 7516d73a0988SAndrei Emeltchenko 7517d73a0988SAndrei Emeltchenko case ACL_CONT: 75180a708f8fSGustavo F. Padovan BT_DBG("Cont: frag len %d (expecting %d)", skb->len, conn->rx_len); 75190a708f8fSGustavo F. Padovan 75200a708f8fSGustavo F. Padovan if (!conn->rx_len) { 75210a708f8fSGustavo F. Padovan BT_ERR("Unexpected continuation frame (len %d)", skb->len); 75220a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75230a708f8fSGustavo F. Padovan goto drop; 75240a708f8fSGustavo F. Padovan } 75250a708f8fSGustavo F. Padovan 75260a708f8fSGustavo F. Padovan if (skb->len > conn->rx_len) { 75270a708f8fSGustavo F. Padovan BT_ERR("Fragment is too long (len %d, expected %d)", 75280a708f8fSGustavo F. Padovan skb->len, conn->rx_len); 75290a708f8fSGustavo F. Padovan kfree_skb(conn->rx_skb); 75300a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 75310a708f8fSGustavo F. Padovan conn->rx_len = 0; 75320a708f8fSGustavo F. Padovan l2cap_conn_unreliable(conn, ECOMM); 75330a708f8fSGustavo F. Padovan goto drop; 75340a708f8fSGustavo F. Padovan } 75350a708f8fSGustavo F. Padovan 75360a708f8fSGustavo F. Padovan skb_copy_from_linear_data(skb, skb_put(conn->rx_skb, skb->len), 75370a708f8fSGustavo F. Padovan skb->len); 75380a708f8fSGustavo F. Padovan conn->rx_len -= skb->len; 75390a708f8fSGustavo F. Padovan 75400a708f8fSGustavo F. Padovan if (!conn->rx_len) { 7541c4e5bafaSJohan Hedberg /* Complete frame received. l2cap_recv_frame 7542c4e5bafaSJohan Hedberg * takes ownership of the skb so set the global 7543c4e5bafaSJohan Hedberg * rx_skb pointer to NULL first. 7544c4e5bafaSJohan Hedberg */ 7545c4e5bafaSJohan Hedberg struct sk_buff *rx_skb = conn->rx_skb; 75460a708f8fSGustavo F. Padovan conn->rx_skb = NULL; 7547c4e5bafaSJohan Hedberg l2cap_recv_frame(conn, rx_skb); 75480a708f8fSGustavo F. Padovan } 7549d73a0988SAndrei Emeltchenko break; 75500a708f8fSGustavo F. Padovan } 75510a708f8fSGustavo F. Padovan 75520a708f8fSGustavo F. Padovan drop: 75530a708f8fSGustavo F. Padovan kfree_skb(skb); 75540a708f8fSGustavo F. Padovan return 0; 75550a708f8fSGustavo F. Padovan } 75560a708f8fSGustavo F. Padovan 75570a708f8fSGustavo F. Padovan static int l2cap_debugfs_show(struct seq_file *f, void *p) 75580a708f8fSGustavo F. Padovan { 755923691d75SGustavo F. Padovan struct l2cap_chan *c; 75600a708f8fSGustavo F. Padovan 7561333055f2SGustavo F. Padovan read_lock(&chan_list_lock); 75620a708f8fSGustavo F. Padovan 756323691d75SGustavo F. Padovan list_for_each_entry(c, &chan_list, global_l) { 7564fcb73338SAndrei Emeltchenko seq_printf(f, "%pMR %pMR %d %d 0x%4.4x 0x%4.4x %d %d %d %d\n", 75657eafc59eSMarcel Holtmann &c->src, &c->dst, 756689bc500eSGustavo F. Padovan c->state, __le16_to_cpu(c->psm), 756723691d75SGustavo F. Padovan c->scid, c->dcid, c->imtu, c->omtu, 756823691d75SGustavo F. Padovan c->sec_level, c->mode); 75690a708f8fSGustavo F. Padovan } 75700a708f8fSGustavo F. Padovan 7571333055f2SGustavo F. Padovan read_unlock(&chan_list_lock); 75720a708f8fSGustavo F. Padovan 75730a708f8fSGustavo F. Padovan return 0; 75740a708f8fSGustavo F. Padovan } 75750a708f8fSGustavo F. Padovan 75760a708f8fSGustavo F. Padovan static int l2cap_debugfs_open(struct inode *inode, struct file *file) 75770a708f8fSGustavo F. Padovan { 75780a708f8fSGustavo F. Padovan return single_open(file, l2cap_debugfs_show, inode->i_private); 75790a708f8fSGustavo F. Padovan } 75800a708f8fSGustavo F. Padovan 75810a708f8fSGustavo F. Padovan static const struct file_operations l2cap_debugfs_fops = { 75820a708f8fSGustavo F. Padovan .open = l2cap_debugfs_open, 75830a708f8fSGustavo F. Padovan .read = seq_read, 75840a708f8fSGustavo F. Padovan .llseek = seq_lseek, 75850a708f8fSGustavo F. Padovan .release = single_release, 75860a708f8fSGustavo F. Padovan }; 75870a708f8fSGustavo F. Padovan 75880a708f8fSGustavo F. Padovan static struct dentry *l2cap_debugfs; 75890a708f8fSGustavo F. Padovan 759064274518SGustavo F. Padovan int __init l2cap_init(void) 75910a708f8fSGustavo F. Padovan { 75920a708f8fSGustavo F. Padovan int err; 75930a708f8fSGustavo F. Padovan 7594bb58f747SGustavo F. Padovan err = l2cap_init_sockets(); 75950a708f8fSGustavo F. Padovan if (err < 0) 75960a708f8fSGustavo F. Padovan return err; 75970a708f8fSGustavo F. Padovan 75981120e4bfSMarcel Holtmann if (IS_ERR_OR_NULL(bt_debugfs)) 75991120e4bfSMarcel Holtmann return 0; 76001120e4bfSMarcel Holtmann 76012d792818SGustavo Padovan l2cap_debugfs = debugfs_create_file("l2cap", 0444, bt_debugfs, 76022d792818SGustavo Padovan NULL, &l2cap_debugfs_fops); 76030a708f8fSGustavo F. Padovan 760440b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_max_credits", 0644, bt_debugfs, 7605f15b8ecfSJohan Hedberg &le_max_credits); 760640b9397aSSamuel Ortiz debugfs_create_u16("l2cap_le_default_mps", 0644, bt_debugfs, 7607f15b8ecfSJohan Hedberg &le_default_mps); 7608f15b8ecfSJohan Hedberg 76090a708f8fSGustavo F. Padovan return 0; 76100a708f8fSGustavo F. Padovan } 76110a708f8fSGustavo F. Padovan 761264274518SGustavo F. Padovan void l2cap_exit(void) 76130a708f8fSGustavo F. Padovan { 76140a708f8fSGustavo F. Padovan debugfs_remove(l2cap_debugfs); 7615bb58f747SGustavo F. Padovan l2cap_cleanup_sockets(); 76160a708f8fSGustavo F. Padovan } 76170a708f8fSGustavo F. Padovan 76180a708f8fSGustavo F. Padovan module_param(disable_ertm, bool, 0644); 76190a708f8fSGustavo F. Padovan MODULE_PARM_DESC(disable_ertm, "Disable enhanced retransmission mode"); 7620