• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /******************************************************************************
2  *
3  *  Copyright (C) 2009-2012 Broadcom Corporation
4  *
5  *  Licensed under the Apache License, Version 2.0 (the "License");
6  *  you may not use this file except in compliance with the License.
7  *  You may obtain a copy of the License at:
8  *
9  *  http://www.apache.org/licenses/LICENSE-2.0
10  *
11  *  Unless required by applicable law or agreed to in writing, software
12  *  distributed under the License is distributed on an "AS IS" BASIS,
13  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14  *  See the License for the specific language governing permissions and
15  *  limitations under the License.
16  *
17  ******************************************************************************/
18 
19 /************************************************************************************
20  *
21  *  Filename:      btif_dm.c
22  *
23  *  Description:   Contains Device Management (DM) related functionality
24  *
25  *
26  ***********************************************************************************/
27 #include <stdio.h>
28 #include <stdlib.h>
29 #include <unistd.h>
30 
31 #include <hardware/bluetooth.h>
32 
33 #include <utils/Log.h>
34 #include <cutils/properties.h>
35 #include "gki.h"
36 #include "btu.h"
37 #include "bd.h"
38 #include "bta_api.h"
39 #include "btif_api.h"
40 #include "btif_util.h"
41 #include "btif_dm.h"
42 #include "btif_storage.h"
43 #include "btif_hh.h"
44 #include "btif_config.h"
45 
46 #include "bta_gatt_api.h"
47 
48 /******************************************************************************
49 **  Device specific workarounds
50 ******************************************************************************/
51 
52 /**
53  * The devices below have proven problematic during the pairing process, often
54  * requiring multiple retries to complete pairing. To avoid degrading the user
55  * experience for other devices, explicitely blacklist troubled devices here.
56  */
57 static const UINT8 blacklist_pairing_retries[][3] = {
58     {0x9C, 0xDF, 0x03} // BMW car kits (Harman/Becker)
59 };
60 
blacklistPairingRetries(BD_ADDR bd_addr)61 BOOLEAN blacklistPairingRetries(BD_ADDR bd_addr)
62 {
63     const unsigned blacklist_size = sizeof(blacklist_pairing_retries)
64         / sizeof(blacklist_pairing_retries[0]);
65     for (unsigned i = 0; i != blacklist_size; ++i)
66     {
67         if (blacklist_pairing_retries[i][0] == bd_addr[0] &&
68             blacklist_pairing_retries[i][1] == bd_addr[1] &&
69             blacklist_pairing_retries[i][2] == bd_addr[2])
70             return TRUE;
71     }
72     return FALSE;
73 }
74 
75 /******************************************************************************
76 **  Constants & Macros
77 ******************************************************************************/
78 
79 #define COD_UNCLASSIFIED ((0x1F) << 8)
80 #define COD_HID_KEYBOARD                    0x0540
81 #define COD_HID_POINTING                    0x0580
82 #define COD_HID_COMBO                       0x05C0
83 #define COD_HID_MAJOR                       0x0500
84 #define COD_AV_HEADSETS                     0x0404
85 #define COD_AV_HANDSFREE                    0x0408
86 #define COD_AV_HEADPHONES                   0x0418
87 #define COD_AV_PORTABLE_AUDIO               0x041C
88 #define COD_AV_HIFI_AUDIO                   0x0428
89 
90 
91 #define BTIF_DM_DEFAULT_INQ_MAX_RESULTS     0
92 #define BTIF_DM_DEFAULT_INQ_MAX_DURATION    10
93 #define BTIF_DM_MAX_SDP_ATTEMPTS_AFTER_PAIRING 2
94 
95 #define NUM_TIMEOUT_RETRIES                 5
96 
97 #define PROPERTY_PRODUCT_MODEL "ro.product.model"
98 #define DEFAULT_LOCAL_NAME_MAX  31
99 #if (DEFAULT_LOCAL_NAME_MAX > BTM_MAX_LOC_BD_NAME_LEN)
100     #error "default btif local name size exceeds stack supported length"
101 #endif
102 
103 #if (defined(BTA_HOST_INTERLEAVE_SEARCH) && BTA_HOST_INTERLEAVE_SEARCH == TRUE)
104 #define BTIF_DM_INTERLEAVE_DURATION_BR_ONE    2
105 #define BTIF_DM_INTERLEAVE_DURATION_LE_ONE    2
106 #define BTIF_DM_INTERLEAVE_DURATION_BR_TWO    3
107 #define BTIF_DM_INTERLEAVE_DURATION_LE_TWO    4
108 #endif
109 
110 #define MAX_SDP_BL_ENTRIES 3
111 
112 #define BOND_TYPE_UNKNOWN     0
113 #define BOND_TYPE_PERSISTENT  1
114 #define BOND_TYPE_TEMPORARY   2
115 
116 #define ENCRYPTED_BREDR       2
117 #define ENCRYPTED_LE          4
118 
119 typedef struct
120 {
121     bt_bond_state_t state;
122     BD_ADDR bd_addr;
123     UINT8   bond_type;
124     UINT8   pin_code_len;
125     UINT8   is_ssp;
126     UINT8   auth_req;
127     UINT8   io_cap;
128     UINT8   autopair_attempts;
129     UINT8   timeout_retries;
130     UINT8   is_local_initiated;
131     UINT8   sdp_attempts;
132 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
133     BOOLEAN          is_le_only;
134     btif_dm_ble_cb_t ble;
135 #endif
136 } btif_dm_pairing_cb_t;
137 
138 
139 typedef struct
140 {
141     UINT8       ir[BT_OCTET16_LEN];
142     UINT8       irk[BT_OCTET16_LEN];
143     UINT8       dhk[BT_OCTET16_LEN];
144 }btif_dm_local_key_id_t;
145 
146 typedef struct
147 {
148     BOOLEAN                 is_er_rcvd;
149     UINT8                   er[BT_OCTET16_LEN];
150     BOOLEAN                 is_id_keys_rcvd;
151     btif_dm_local_key_id_t  id_keys;  /* ID kyes */
152 
153 }btif_dm_local_key_cb_t;
154 
155 typedef struct
156 {
157     BD_ADDR bd_addr;
158     BD_NAME bd_name;
159 } btif_dm_remote_name_t;
160 
161 typedef struct
162 {
163     BT_OCTET16 sp_c;
164     BT_OCTET16 sp_r;
165     BD_ADDR  oob_bdaddr;  /* peer bdaddr*/
166 } btif_dm_oob_cb_t;
167 
168 typedef struct
169 {
170     bt_bdaddr_t  bdaddr;
171     UINT8        transport; /* 0=Unknown, 1=BR/EDR, 2=LE */
172 } btif_dm_create_bond_cb_t;
173 
174 typedef struct
175 {
176     uint8_t  status;
177     uint8_t  ctrl_state;
178     uint64_t tx_time;
179     uint64_t rx_time;
180     uint64_t idle_time;
181     uint64_t energy_used;
182 } btif_activity_energy_info_cb_t;
183 
184 typedef struct
185 {
186     unsigned int   manufact_id;
187 }skip_sdp_entry_t;
188 
189 #define BTA_SERVICE_ID_TO_SERVICE_MASK(id)       (1 << (id))
190 
191 #define MAX_SDP_BL_ENTRIES 3
192 #define UUID_HUMAN_INTERFACE_DEVICE "00001124-0000-1000-8000-00805f9b34fb"
193 
194 static skip_sdp_entry_t sdp_blacklist[] = {{76}}; //Apple Mouse and Keyboard
195 
196 
197 /* This flag will be true if HCI_Inquiry is in progress */
198 static BOOLEAN btif_dm_inquiry_in_progress = FALSE;
199 
200 
201 
202 /************************************************************************************
203 **  Static variables
204 ************************************************************************************/
205 static char btif_default_local_name[DEFAULT_LOCAL_NAME_MAX+1] = {'\0'};
206 
207 /******************************************************************************
208 **  Static functions
209 ******************************************************************************/
210 static btif_dm_pairing_cb_t pairing_cb;
211 static btif_dm_oob_cb_t     oob_cb;
212 static void btif_dm_generic_evt(UINT16 event, char* p_param);
213 static void btif_dm_cb_create_bond(bt_bdaddr_t *bd_addr, tBTA_TRANSPORT transport);
214 static void btif_dm_cb_hid_remote_name(tBTM_REMOTE_DEV_NAME *p_remote_name);
215 static void btif_update_remote_properties(BD_ADDR bd_addr, BD_NAME bd_name,
216                                           DEV_CLASS dev_class, tBT_DEVICE_TYPE dev_type);
217 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
218 static btif_dm_local_key_cb_t ble_local_key_cb;
219 static void btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF *p_ssp_key_notif);
220 static void btif_dm_ble_auth_cmpl_evt (tBTA_DM_AUTH_CMPL *p_auth_cmpl);
221 static void btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ *p_pin_req);
222 #endif
223 
224 static void bte_scan_filt_param_cfg_evt(UINT8 action_type,
225                                            tBTA_DM_BLE_PF_AVBL_SPACE avbl_space,
226                                            tBTA_DM_BLE_REF_VALUE ref_value, tBTA_STATUS status);
227 
228 static char* btif_get_default_local_name();
229 /******************************************************************************
230 **  Externs
231 ******************************************************************************/
232 extern UINT16 bta_service_id_to_uuid_lkup_tbl [BTA_MAX_SERVICE_ID];
233 extern bt_status_t btif_hf_execute_service(BOOLEAN b_enable);
234 extern bt_status_t btif_av_execute_service(BOOLEAN b_enable);
235 extern bt_status_t btif_hh_execute_service(BOOLEAN b_enable);
236 extern bt_status_t btif_hf_client_execute_service(BOOLEAN b_enable);
237 extern bt_status_t btif_mce_execute_service(BOOLEAN b_enable);
238 extern int btif_hh_connect(bt_bdaddr_t *bd_addr);
239 extern void bta_gatt_convert_uuid16_to_uuid128(UINT8 uuid_128[LEN_UUID_128], UINT16 uuid_16);
240 
241 
242 /******************************************************************************
243 **  Functions
244 ******************************************************************************/
245 
btif_in_execute_service_request(tBTA_SERVICE_ID service_id,BOOLEAN b_enable)246 bt_status_t btif_in_execute_service_request(tBTA_SERVICE_ID service_id,
247                                                 BOOLEAN b_enable)
248 {
249     /* Check the service_ID and invoke the profile's BT state changed API */
250     switch (service_id)
251     {
252          case BTA_HFP_SERVICE_ID:
253          case BTA_HSP_SERVICE_ID:
254          {
255               btif_hf_execute_service(b_enable);
256          }break;
257          case BTA_A2DP_SERVICE_ID:
258          {
259               btif_av_execute_service(b_enable);
260          }break;
261          case BTA_HID_SERVICE_ID:
262          {
263               btif_hh_execute_service(b_enable);
264          }break;
265          case BTA_HFP_HS_SERVICE_ID:
266          {
267              btif_hf_client_execute_service(b_enable);
268          }break;
269          case BTA_MAP_SERVICE_ID:
270          {
271              btif_mce_execute_service(b_enable);
272          }break;
273          default:
274               BTIF_TRACE_ERROR("%s: Unknown service being enabled", __FUNCTION__);
275               return BT_STATUS_FAIL;
276     }
277     return BT_STATUS_SUCCESS;
278 }
279 
280 /*******************************************************************************
281 **
282 ** Function         check_eir_remote_name
283 **
284 ** Description      Check if remote name is in the EIR data
285 **
286 ** Returns          TRUE if remote name found
287 **                  Populate p_remote_name, if provided and remote name found
288 **
289 *******************************************************************************/
check_eir_remote_name(tBTA_DM_SEARCH * p_search_data,UINT8 * p_remote_name,UINT8 * p_remote_name_len)290 static BOOLEAN check_eir_remote_name(tBTA_DM_SEARCH *p_search_data,
291                             UINT8 *p_remote_name, UINT8 *p_remote_name_len)
292 {
293     UINT8 *p_eir_remote_name = NULL;
294     UINT8 remote_name_len = 0;
295 
296     /* Check EIR for remote name and services */
297     if (p_search_data->inq_res.p_eir)
298     {
299         p_eir_remote_name = BTA_CheckEirData(p_search_data->inq_res.p_eir,
300                 BTM_EIR_COMPLETE_LOCAL_NAME_TYPE, &remote_name_len);
301         if (!p_eir_remote_name)
302         {
303             p_eir_remote_name = BTA_CheckEirData(p_search_data->inq_res.p_eir,
304                     BTM_EIR_SHORTENED_LOCAL_NAME_TYPE, &remote_name_len);
305         }
306 
307         if (p_eir_remote_name)
308         {
309             if (remote_name_len > BD_NAME_LEN)
310                 remote_name_len = BD_NAME_LEN;
311 
312             if (p_remote_name && p_remote_name_len)
313             {
314                 memcpy(p_remote_name, p_eir_remote_name, remote_name_len);
315                 *(p_remote_name + remote_name_len) = 0;
316                 *p_remote_name_len = remote_name_len;
317             }
318 
319             return TRUE;
320         }
321     }
322 
323     return FALSE;
324 
325 }
326 
327 /*******************************************************************************
328 **
329 ** Function         check_cached_remote_name
330 **
331 ** Description      Check if remote name is in the NVRAM cache
332 **
333 ** Returns          TRUE if remote name found
334 **                  Populate p_remote_name, if provided and remote name found
335 **
336 *******************************************************************************/
check_cached_remote_name(tBTA_DM_SEARCH * p_search_data,UINT8 * p_remote_name,UINT8 * p_remote_name_len)337 static BOOLEAN check_cached_remote_name(tBTA_DM_SEARCH *p_search_data,
338                                 UINT8 *p_remote_name, UINT8 *p_remote_name_len)
339 {
340     bt_bdname_t bdname;
341     bt_bdaddr_t remote_bdaddr;
342     bt_property_t prop_name;
343 
344     /* check if we already have it in our btif_storage cache */
345     bdcpy(remote_bdaddr.address, p_search_data->inq_res.bd_addr);
346     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_BDNAME,
347                                sizeof(bt_bdname_t), &bdname);
348     if (btif_storage_get_remote_device_property(
349         &remote_bdaddr, &prop_name) == BT_STATUS_SUCCESS)
350     {
351         if (p_remote_name && p_remote_name_len)
352         {
353             strcpy((char *)p_remote_name, (char *)bdname.name);
354             *p_remote_name_len = strlen((char *)p_remote_name);
355         }
356         return TRUE;
357     }
358 
359     return FALSE;
360 }
361 
check_cod(const bt_bdaddr_t * remote_bdaddr,uint32_t cod)362 BOOLEAN check_cod(const bt_bdaddr_t *remote_bdaddr, uint32_t cod)
363 {
364     uint32_t    remote_cod;
365     bt_property_t prop_name;
366 
367     /* check if we already have it in our btif_storage cache */
368     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_CLASS_OF_DEVICE,
369                                sizeof(uint32_t), &remote_cod);
370     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr, &prop_name) == BT_STATUS_SUCCESS)
371     {
372         BTIF_TRACE_ERROR("%s: remote_cod = 0x%06x", __FUNCTION__, remote_cod);
373         if ((remote_cod & 0x7ff) == cod)
374             return TRUE;
375     }
376 
377     return FALSE;
378 }
379 
check_cod_hid(const bt_bdaddr_t * remote_bdaddr,uint32_t cod)380 BOOLEAN check_cod_hid(const bt_bdaddr_t *remote_bdaddr, uint32_t cod)
381 {
382     uint32_t    remote_cod;
383     bt_property_t prop_name;
384 
385     /* check if we already have it in our btif_storage cache */
386     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_CLASS_OF_DEVICE,
387                                sizeof(uint32_t), &remote_cod);
388     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr,
389                                 &prop_name) == BT_STATUS_SUCCESS)
390     {
391         BTIF_TRACE_DEBUG("%s: remote_cod = 0x%06x", __FUNCTION__, remote_cod);
392         if ((remote_cod & 0x700) == cod)
393             return TRUE;
394     }
395     return FALSE;
396 }
397 
check_hid_le(const bt_bdaddr_t * remote_bdaddr)398 BOOLEAN check_hid_le(const bt_bdaddr_t *remote_bdaddr)
399 {
400     uint32_t    remote_dev_type;
401     bt_property_t prop_name;
402 
403     /* check if we already have it in our btif_storage cache */
404     BTIF_STORAGE_FILL_PROPERTY(&prop_name,BT_PROPERTY_TYPE_OF_DEVICE,
405                                sizeof(uint32_t), &remote_dev_type);
406     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr,
407                                 &prop_name) == BT_STATUS_SUCCESS)
408     {
409         if (remote_dev_type == BT_DEVICE_DEVTYPE_BLE)
410         {
411             bdstr_t bdstr;
412             bd2str(remote_bdaddr, &bdstr);
413             if(btif_config_exist("Remote", bdstr, "HidAppId"))
414                 return TRUE;
415         }
416     }
417     return FALSE;
418 }
419 
420 /*****************************************************************************
421 **
422 ** Function        check_sdp_bl
423 **
424 ** Description     Checks if a given device is blacklisted to skip sdp
425 **
426 ** Parameters     skip_sdp_entry
427 **
428 ** Returns         TRUE if the device is present in blacklist, else FALSE
429 **
430 *******************************************************************************/
check_sdp_bl(const bt_bdaddr_t * remote_bdaddr)431 BOOLEAN check_sdp_bl(const bt_bdaddr_t *remote_bdaddr)
432 {
433     UINT8 i = 0;
434     UINT16 manufacturer = 0;
435     UINT8 lmp_ver = 0;
436     UINT16 lmp_subver = 0;
437     tBTM_STATUS btm_status;
438     bt_property_t prop_name;
439     bt_remote_version_t info;
440     bt_status_t status;
441 
442 
443     if (remote_bdaddr == NULL)
444         return FALSE;
445 
446 /* fetch additional info about remote device used in iop query */
447     btm_status = BTM_ReadRemoteVersion(*(BD_ADDR*)remote_bdaddr, &lmp_ver,
448                     &manufacturer, &lmp_subver);
449 
450 
451 
452  /* if not available yet, try fetching from config database */
453     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_REMOTE_VERSION_INFO,
454                             sizeof(bt_remote_version_t), &info);
455 
456     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr,
457                                               &prop_name) != BT_STATUS_SUCCESS)
458     {
459 
460         return FALSE;
461     }
462     manufacturer = info.manufacturer;
463 
464     for (int i = 0; i < MAX_SDP_BL_ENTRIES; i++)
465     {
466         if (manufacturer == sdp_blacklist[i].manufact_id)
467             return TRUE;
468     }
469     return FALSE;
470 }
471 
472 
bond_state_changed(bt_status_t status,bt_bdaddr_t * bd_addr,bt_bond_state_t state)473 static void bond_state_changed(bt_status_t status, bt_bdaddr_t *bd_addr, bt_bond_state_t state)
474 {
475     /* Send bonding state only once - based on outgoing/incoming we may receive duplicates */
476     if ( (pairing_cb.state == state) && (state == BT_BOND_STATE_BONDING) )
477         return;
478 
479     if (pairing_cb.bond_type == BOND_TYPE_TEMPORARY)
480     {
481        state = BT_BOND_STATE_NONE;
482     }
483     BTIF_TRACE_DEBUG("%s: state=%d prev_state=%d", __FUNCTION__, state, pairing_cb.state);
484 
485     HAL_CBACK(bt_hal_cbacks, bond_state_changed_cb, status, bd_addr, state);
486 
487     if (state == BT_BOND_STATE_BONDING)
488     {
489         pairing_cb.state = state;
490         bdcpy(pairing_cb.bd_addr, bd_addr->address);
491     }
492     else
493     {
494         memset(&pairing_cb, 0, sizeof(pairing_cb));
495     }
496 
497 }
498 
499 /* store remote version in bt config to always have access
500    to it post pairing*/
btif_update_remote_version_property(bt_bdaddr_t * p_bd)501 static void btif_update_remote_version_property(bt_bdaddr_t *p_bd)
502 {
503     bt_property_t property;
504     UINT8 lmp_ver = 0;
505     UINT16 lmp_subver = 0;
506     UINT16 mfct_set = 0;
507     tBTM_STATUS btm_status;
508     bt_remote_version_t info;
509     bt_status_t status;
510     bdstr_t bdstr;
511 
512     btm_status = BTM_ReadRemoteVersion(*(BD_ADDR*)p_bd, &lmp_ver,
513                           &mfct_set, &lmp_subver);
514 
515     ALOGD("remote version info [%s]: %x, %x, %x", bd2str(p_bd, &bdstr),
516                lmp_ver, mfct_set, lmp_subver);
517 
518     if (btm_status == BTM_SUCCESS)
519     {
520         /* always update cache to ensure we have availability whenever BTM API
521            is not populated */
522         info.manufacturer = mfct_set;
523         info.sub_ver = lmp_subver;
524         info.version = lmp_ver;
525         BTIF_STORAGE_FILL_PROPERTY(&property,
526                             BT_PROPERTY_REMOTE_VERSION_INFO, sizeof(bt_remote_version_t),
527                             &info);
528         status = btif_storage_set_remote_device_property(p_bd, &property);
529         ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote version", status);
530     }
531 }
532 
533 
btif_update_remote_properties(BD_ADDR bd_addr,BD_NAME bd_name,DEV_CLASS dev_class,tBT_DEVICE_TYPE device_type)534 static void btif_update_remote_properties(BD_ADDR bd_addr, BD_NAME bd_name,
535                                           DEV_CLASS dev_class, tBT_DEVICE_TYPE device_type)
536 {
537     int num_properties = 0;
538     bt_property_t properties[3];
539     bt_bdaddr_t bdaddr;
540     bt_status_t status;
541     UINT32 cod;
542     bt_device_type_t dev_type;
543 
544     memset(properties, 0, sizeof(properties));
545     bdcpy(bdaddr.address, bd_addr);
546 
547     /* remote name */
548     if (strlen((const char *) bd_name))
549     {
550         BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
551                             BT_PROPERTY_BDNAME, strlen((char *)bd_name), bd_name);
552         status = btif_storage_set_remote_device_property(&bdaddr, &properties[num_properties]);
553         ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device name", status);
554         num_properties++;
555     }
556 
557     /* class of device */
558     cod = devclass2uint(dev_class);
559     BTIF_TRACE_DEBUG("%s():cod is 0x%06x", __FUNCTION__, cod);
560     if ( cod == 0) {
561        /* Try to retrieve cod from storage */
562         BTIF_TRACE_DEBUG("%s():cod is 0, checking cod from storage", __FUNCTION__);
563         BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
564             BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod);
565         status = btif_storage_get_remote_device_property(&bdaddr, &properties[num_properties]);
566         BTIF_TRACE_DEBUG("%s():cod retreived from storage is 0x%06x", __FUNCTION__, cod);
567         if ( cod == 0) {
568             BTIF_TRACE_DEBUG("%s():cod is again 0, set as unclassified", __FUNCTION__);
569             cod = COD_UNCLASSIFIED;
570         }
571     }
572 
573     BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
574                         BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod);
575     status = btif_storage_set_remote_device_property(&bdaddr, &properties[num_properties]);
576     ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device class", status);
577     num_properties++;
578 
579     /* device type */
580     dev_type = device_type;
581     BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
582                         BT_PROPERTY_TYPE_OF_DEVICE, sizeof(dev_type), &dev_type);
583     status = btif_storage_set_remote_device_property(&bdaddr, &properties[num_properties]);
584     ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device type", status);
585     num_properties++;
586 
587     HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
588                      status, &bdaddr, num_properties, properties);
589 }
590 
591 /*******************************************************************************
592 **
593 ** Function         btif_dm_cb_hid_remote_name
594 **
595 ** Description      Remote name callback for HID device. Called in btif context
596 **                  Special handling for HID devices
597 **
598 ** Returns          void
599 **
600 *******************************************************************************/
btif_dm_cb_hid_remote_name(tBTM_REMOTE_DEV_NAME * p_remote_name)601 static void btif_dm_cb_hid_remote_name(tBTM_REMOTE_DEV_NAME *p_remote_name)
602 {
603     BTIF_TRACE_DEBUG("%s: status=%d pairing_cb.state=%d", __FUNCTION__, p_remote_name->status, pairing_cb.state);
604     if (pairing_cb.state == BT_BOND_STATE_BONDING)
605     {
606         bt_bdaddr_t remote_bd;
607 
608         bdcpy(remote_bd.address, pairing_cb.bd_addr);
609 
610         if (p_remote_name->status == BTM_SUCCESS)
611         {
612             bond_state_changed(BT_STATUS_SUCCESS, &remote_bd, BT_BOND_STATE_BONDED);
613         }
614         else
615             bond_state_changed(BT_STATUS_FAIL, &remote_bd, BT_BOND_STATE_NONE);
616     }
617 }
618 
619 /*******************************************************************************
620 **
621 ** Function         btif_dm_cb_create_bond
622 **
623 ** Description      Create bond initiated from the BTIF thread context
624 **                  Special handling for HID devices
625 **
626 ** Returns          void
627 **
628 *******************************************************************************/
btif_dm_cb_create_bond(bt_bdaddr_t * bd_addr,tBTA_TRANSPORT transport)629 static void btif_dm_cb_create_bond(bt_bdaddr_t *bd_addr, tBTA_TRANSPORT transport)
630 {
631     BOOLEAN is_hid = check_cod(bd_addr, COD_HID_POINTING);
632     bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING);
633 
634 #if BLE_INCLUDED == TRUE
635     int device_type;
636     int addr_type;
637     bdstr_t bdstr;
638     bd2str(bd_addr, &bdstr);
639     if (transport == BT_TRANSPORT_LE)
640     {
641         if (!btif_config_get_int("Remote", (char const *)&bdstr,"DevType", &device_type))
642         {
643             btif_config_set_int("Remote", bdstr, "DevType", BT_DEVICE_TYPE_BLE);
644         }
645         if (btif_storage_get_remote_addr_type(bd_addr, &addr_type) != BT_STATUS_SUCCESS)
646         {
647             btif_storage_set_remote_addr_type(bd_addr, BLE_ADDR_PUBLIC);
648         }
649     }
650     if((btif_config_get_int("Remote", (char const *)&bdstr,"DevType", &device_type) &&
651        (btif_storage_get_remote_addr_type(bd_addr, &addr_type) == BT_STATUS_SUCCESS) &&
652        (device_type == BT_DEVICE_TYPE_BLE)) || (transport == BT_TRANSPORT_LE))
653     {
654         BTA_DmAddBleDevice(bd_addr->address, addr_type, BT_DEVICE_TYPE_BLE);
655     }
656 #endif
657 
658 #if BLE_INCLUDED == TRUE
659     if(is_hid && device_type != BT_DEVICE_TYPE_BLE)
660 #else
661     if(is_hid)
662 #endif
663     {
664         int status;
665         status = btif_hh_connect(bd_addr);
666         if(status != BT_STATUS_SUCCESS)
667             bond_state_changed(status, bd_addr, BT_BOND_STATE_NONE);
668     }
669     else
670     {
671         BTA_DmBondByTransport((UINT8 *)bd_addr->address, transport);
672     }
673     /*  Track  originator of bond creation  */
674     pairing_cb.is_local_initiated = TRUE;
675 
676 }
677 
678 /*******************************************************************************
679 **
680 ** Function         btif_dm_cb_remove_bond
681 **
682 ** Description      remove bond initiated from the BTIF thread context
683 **                  Special handling for HID devices
684 **
685 ** Returns          void
686 **
687 *******************************************************************************/
btif_dm_cb_remove_bond(bt_bdaddr_t * bd_addr)688 void btif_dm_cb_remove_bond(bt_bdaddr_t *bd_addr)
689 {
690      bdstr_t bdstr;
691      /*special handling for HID devices */
692      /*  VUP needs to be sent if its a HID Device. The HID HOST module will check if there
693      is a valid hid connection with this bd_addr. If yes VUP will be issued.*/
694 #if (defined(BTA_HH_INCLUDED) && (BTA_HH_INCLUDED == TRUE))
695     if (btif_hh_virtual_unplug(bd_addr) != BT_STATUS_SUCCESS)
696 #endif
697     {
698          BTA_DmRemoveDevice((UINT8 *)bd_addr->address);
699     }
700 }
701 
702 /*******************************************************************************
703 **
704 ** Function         btif_dm_get_connection_state
705 **
706 ** Description      Returns whether the remote device is currently connected
707 **                  and whether encryption is active for the connection
708 **
709 ** Returns          0 if not connected; 1 if connected and > 1 if connection is
710 **                  encrypted
711 **
712 *******************************************************************************/
btif_dm_get_connection_state(const bt_bdaddr_t * bd_addr)713 uint16_t btif_dm_get_connection_state(const bt_bdaddr_t *bd_addr)
714 {
715     uint8_t *bda = (uint8_t*)bd_addr->address;
716     uint16_t rc = BTA_DmGetConnectionState(bda);
717 
718     if (rc != 0)
719     {
720         uint8_t flags = 0;
721 
722         BTM_GetSecurityFlagsByTransport(bda, &flags, BT_TRANSPORT_BR_EDR);
723         BTIF_TRACE_DEBUG("%s: security flags (BR/EDR)=0x%02x", __FUNCTION__, flags);
724         if (flags & BTM_SEC_FLAG_ENCRYPTED)
725             rc |= ENCRYPTED_BREDR;
726 
727         BTM_GetSecurityFlagsByTransport(bda, &flags, BT_TRANSPORT_LE);
728         BTIF_TRACE_DEBUG("%s: security flags (LE)=0x%02x", __FUNCTION__, flags);
729         if (flags & BTM_SEC_FLAG_ENCRYPTED)
730             rc |= ENCRYPTED_LE;
731     }
732 
733     return rc;
734 }
735 
736 /*******************************************************************************
737 **
738 ** Function         search_devices_copy_cb
739 **
740 ** Description      Deep copy callback for search devices event
741 **
742 ** Returns          void
743 **
744 *******************************************************************************/
search_devices_copy_cb(UINT16 event,char * p_dest,char * p_src)745 static void search_devices_copy_cb(UINT16 event, char *p_dest, char *p_src)
746 {
747     tBTA_DM_SEARCH *p_dest_data =  (tBTA_DM_SEARCH *) p_dest;
748     tBTA_DM_SEARCH *p_src_data =  (tBTA_DM_SEARCH *) p_src;
749 
750     if (!p_src)
751         return;
752 
753     BTIF_TRACE_DEBUG("%s: event=%s", __FUNCTION__, dump_dm_search_event(event));
754     memcpy(p_dest_data, p_src_data, sizeof(tBTA_DM_SEARCH));
755     switch (event)
756     {
757         case BTA_DM_INQ_RES_EVT:
758         {
759             if (p_src_data->inq_res.p_eir)
760             {
761                 p_dest_data->inq_res.p_eir = (UINT8 *)(p_dest + sizeof(tBTA_DM_SEARCH));
762                 memcpy(p_dest_data->inq_res.p_eir, p_src_data->inq_res.p_eir, HCI_EXT_INQ_RESPONSE_LEN);
763             }
764         }
765         break;
766 
767         case BTA_DM_DISC_RES_EVT:
768         {
769             if (p_src_data->disc_res.raw_data_size && p_src_data->disc_res.p_raw_data)
770             {
771                 p_dest_data->disc_res.p_raw_data = (UINT8 *)(p_dest + sizeof(tBTA_DM_SEARCH));
772                 memcpy(p_dest_data->disc_res.p_raw_data,
773                     p_src_data->disc_res.p_raw_data, p_src_data->disc_res.raw_data_size);
774             }
775         }
776         break;
777     }
778 }
779 
search_services_copy_cb(UINT16 event,char * p_dest,char * p_src)780 static void search_services_copy_cb(UINT16 event, char *p_dest, char *p_src)
781 {
782     tBTA_DM_SEARCH *p_dest_data =  (tBTA_DM_SEARCH *) p_dest;
783     tBTA_DM_SEARCH *p_src_data =  (tBTA_DM_SEARCH *) p_src;
784 
785     if (!p_src)
786         return;
787     memcpy(p_dest_data, p_src_data, sizeof(tBTA_DM_SEARCH));
788     switch (event)
789     {
790          case BTA_DM_DISC_RES_EVT:
791          {
792               if (p_src_data->disc_res.result == BTA_SUCCESS)
793               {
794                   if (p_src_data->disc_res.num_uuids > 0)
795                   {
796                        p_dest_data->disc_res.p_uuid_list =
797                                                         (UINT8*)(p_dest + sizeof(tBTA_DM_SEARCH));
798                        memcpy(p_dest_data->disc_res.p_uuid_list, p_src_data->disc_res.p_uuid_list,
799                               p_src_data->disc_res.num_uuids*MAX_UUID_SIZE);
800                        GKI_freebuf(p_src_data->disc_res.p_uuid_list);
801                   }
802                   if (p_src_data->disc_res.p_raw_data != NULL)
803                   {
804                       GKI_freebuf(p_src_data->disc_res.p_raw_data);
805                   }
806               }
807          } break;
808     }
809 }
810 /******************************************************************************
811 **
812 **  BTIF DM callback events
813 **
814 *****************************************************************************/
815 
816 /*******************************************************************************
817 **
818 ** Function         btif_dm_pin_req_evt
819 **
820 ** Description      Executes pin request event in btif context
821 **
822 ** Returns          void
823 **
824 *******************************************************************************/
btif_dm_pin_req_evt(tBTA_DM_PIN_REQ * p_pin_req)825 static void btif_dm_pin_req_evt(tBTA_DM_PIN_REQ *p_pin_req)
826 {
827     bt_bdaddr_t bd_addr;
828     bt_bdname_t bd_name;
829     UINT32 cod;
830     bt_pin_code_t pin_code;
831     int dev_type;
832 
833     /* Remote properties update */
834     if (!btif_get_device_type(p_pin_req->bd_addr, &dev_type))
835     {
836         dev_type = BT_DEVICE_TYPE_BREDR;
837     }
838     btif_update_remote_properties(p_pin_req->bd_addr, p_pin_req->bd_name,
839                                   p_pin_req->dev_class, (tBT_DEVICE_TYPE) dev_type);
840 
841     bdcpy(bd_addr.address, p_pin_req->bd_addr);
842     memcpy(bd_name.name, p_pin_req->bd_name, BD_NAME_LEN);
843 
844     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
845 
846     cod = devclass2uint(p_pin_req->dev_class);
847 
848     if ( cod == 0) {
849         BTIF_TRACE_DEBUG("%s():cod is 0, set as unclassified", __FUNCTION__);
850         cod = COD_UNCLASSIFIED;
851     }
852 
853     /* check for auto pair possiblity only if bond was initiated by local device */
854     if (pairing_cb.is_local_initiated)
855     {
856         if (check_cod(&bd_addr, COD_AV_HEADSETS) ||
857             check_cod(&bd_addr, COD_AV_HANDSFREE) ||
858             check_cod(&bd_addr, COD_AV_HEADPHONES) ||
859             check_cod(&bd_addr, COD_AV_PORTABLE_AUDIO) ||
860             check_cod(&bd_addr, COD_AV_HIFI_AUDIO) ||
861             check_cod(&bd_addr, COD_HID_POINTING))
862         {
863             BTIF_TRACE_DEBUG("%s()cod matches for auto pair", __FUNCTION__);
864             /*  Check if this device can be auto paired  */
865             if ((btif_storage_is_device_autopair_blacklisted(&bd_addr) == FALSE) &&
866                 (pairing_cb.autopair_attempts == 0))
867             {
868                 BTIF_TRACE_DEBUG("%s() Attempting auto pair", __FUNCTION__);
869                 pin_code.pin[0] = 0x30;
870                 pin_code.pin[1] = 0x30;
871                 pin_code.pin[2] = 0x30;
872                 pin_code.pin[3] = 0x30;
873 
874                 pairing_cb.autopair_attempts++;
875                 BTA_DmPinReply( (UINT8*)bd_addr.address, TRUE, 4, pin_code.pin);
876                 return;
877             }
878         }
879         else if (check_cod(&bd_addr, COD_HID_KEYBOARD) ||
880                  check_cod(&bd_addr, COD_HID_COMBO))
881         {
882             if(( btif_storage_is_fixed_pin_zeros_keyboard (&bd_addr) == TRUE) &&
883                (pairing_cb.autopair_attempts == 0))
884             {
885                 BTIF_TRACE_DEBUG("%s() Attempting auto pair", __FUNCTION__);
886                 pin_code.pin[0] = 0x30;
887                 pin_code.pin[1] = 0x30;
888                 pin_code.pin[2] = 0x30;
889                 pin_code.pin[3] = 0x30;
890 
891                 pairing_cb.autopair_attempts++;
892                 BTA_DmPinReply( (UINT8*)bd_addr.address, TRUE, 4, pin_code.pin);
893                 return;
894             }
895         }
896     }
897     HAL_CBACK(bt_hal_cbacks, pin_request_cb,
898                      &bd_addr, &bd_name, cod);
899 }
900 
901 /*******************************************************************************
902 **
903 ** Function         btif_dm_ssp_cfm_req_evt
904 **
905 ** Description      Executes SSP confirm request event in btif context
906 **
907 ** Returns          void
908 **
909 *******************************************************************************/
btif_dm_ssp_cfm_req_evt(tBTA_DM_SP_CFM_REQ * p_ssp_cfm_req)910 static void btif_dm_ssp_cfm_req_evt(tBTA_DM_SP_CFM_REQ *p_ssp_cfm_req)
911 {
912     bt_bdaddr_t bd_addr;
913     bt_bdname_t bd_name;
914     UINT32 cod;
915     BOOLEAN is_incoming = !(pairing_cb.state == BT_BOND_STATE_BONDING);
916     int dev_type;
917 
918     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
919 
920     /* Remote properties update */
921     if (!btif_get_device_type(p_ssp_cfm_req->bd_addr, &dev_type))
922     {
923         dev_type = BT_DEVICE_TYPE_BREDR;
924     }
925     btif_update_remote_properties(p_ssp_cfm_req->bd_addr, p_ssp_cfm_req->bd_name,
926                                   p_ssp_cfm_req->dev_class, (tBT_DEVICE_TYPE) dev_type);
927 
928     bdcpy(bd_addr.address, p_ssp_cfm_req->bd_addr);
929     memcpy(bd_name.name, p_ssp_cfm_req->bd_name, BD_NAME_LEN);
930 
931     /* Set the pairing_cb based on the local & remote authentication requirements */
932     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
933 
934     /* if just_works and bonding bit is not set treat this as temporary */
935     if (p_ssp_cfm_req->just_works && !(p_ssp_cfm_req->loc_auth_req & BTM_AUTH_BONDS) &&
936         !(p_ssp_cfm_req->rmt_auth_req & BTM_AUTH_BONDS) &&
937         !(check_cod((bt_bdaddr_t*)&p_ssp_cfm_req->bd_addr, COD_HID_POINTING)))
938         pairing_cb.bond_type = BOND_TYPE_TEMPORARY;
939     else
940         pairing_cb.bond_type = BOND_TYPE_PERSISTENT;
941 
942     pairing_cb.is_ssp = TRUE;
943 
944     /* If JustWorks auto-accept */
945     if (p_ssp_cfm_req->just_works)
946     {
947         /* Pairing consent for JustWorks needed if:
948          * 1. Incoming pairing is detected AND
949          * 2. local IO capabilities are DisplayYesNo AND
950          * 3. remote IO capabiltiies are DisplayOnly or NoInputNoOutput;
951          */
952         if ((is_incoming) && ((p_ssp_cfm_req->loc_io_caps == 0x01) &&
953                 (p_ssp_cfm_req->rmt_io_caps == 0x00 || p_ssp_cfm_req->rmt_io_caps == 0x03)))
954         {
955             BTIF_TRACE_EVENT("%s: User consent needed for incoming pairing request. loc_io_caps: %d, rmt_io_caps: %d",
956                 __FUNCTION__, p_ssp_cfm_req->loc_io_caps, p_ssp_cfm_req->rmt_io_caps);
957         }
958         else
959         {
960             BTIF_TRACE_EVENT("%s: Auto-accept JustWorks pairing", __FUNCTION__);
961             btif_dm_ssp_reply(&bd_addr, BT_SSP_VARIANT_CONSENT, TRUE, 0);
962             return;
963         }
964     }
965 
966     cod = devclass2uint(p_ssp_cfm_req->dev_class);
967 
968     if ( cod == 0) {
969         ALOGD("cod is 0, set as unclassified");
970         cod = COD_UNCLASSIFIED;
971     }
972 
973     pairing_cb.sdp_attempts = 0;
974     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name, cod,
975                      (p_ssp_cfm_req->just_works ? BT_SSP_VARIANT_CONSENT : BT_SSP_VARIANT_PASSKEY_CONFIRMATION),
976                      p_ssp_cfm_req->num_val);
977 }
978 
btif_dm_ssp_key_notif_evt(tBTA_DM_SP_KEY_NOTIF * p_ssp_key_notif)979 static void btif_dm_ssp_key_notif_evt(tBTA_DM_SP_KEY_NOTIF *p_ssp_key_notif)
980 {
981     bt_bdaddr_t bd_addr;
982     bt_bdname_t bd_name;
983     UINT32 cod;
984     int dev_type;
985 
986     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
987 
988     /* Remote properties update */
989     if (!btif_get_device_type(p_ssp_key_notif->bd_addr, &dev_type))
990     {
991         dev_type = BT_DEVICE_TYPE_BREDR;
992     }
993     btif_update_remote_properties(p_ssp_key_notif->bd_addr, p_ssp_key_notif->bd_name,
994                                   p_ssp_key_notif->dev_class, (tBT_DEVICE_TYPE) dev_type);
995 
996     bdcpy(bd_addr.address, p_ssp_key_notif->bd_addr);
997     memcpy(bd_name.name, p_ssp_key_notif->bd_name, BD_NAME_LEN);
998 
999     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
1000     pairing_cb.is_ssp = TRUE;
1001     cod = devclass2uint(p_ssp_key_notif->dev_class);
1002 
1003     if ( cod == 0) {
1004         ALOGD("cod is 0, set as unclassified");
1005         cod = COD_UNCLASSIFIED;
1006     }
1007 
1008     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name,
1009                      cod, BT_SSP_VARIANT_PASSKEY_NOTIFICATION,
1010                      p_ssp_key_notif->passkey);
1011 }
1012 /*******************************************************************************
1013 **
1014 ** Function         btif_dm_auth_cmpl_evt
1015 **
1016 ** Description      Executes authentication complete event in btif context
1017 **
1018 ** Returns          void
1019 **
1020 *******************************************************************************/
btif_dm_auth_cmpl_evt(tBTA_DM_AUTH_CMPL * p_auth_cmpl)1021 static void btif_dm_auth_cmpl_evt (tBTA_DM_AUTH_CMPL *p_auth_cmpl)
1022 {
1023     /* Save link key, if not temporary */
1024     bt_bdaddr_t bd_addr;
1025     bt_status_t status = BT_STATUS_FAIL;
1026     bt_bond_state_t state = BT_BOND_STATE_NONE;
1027     BOOLEAN skip_sdp = FALSE;
1028 
1029     bdcpy(bd_addr.address, p_auth_cmpl->bd_addr);
1030     if ( (p_auth_cmpl->success == TRUE) && (p_auth_cmpl->key_present) )
1031     {
1032         if ((p_auth_cmpl->key_type < HCI_LKEY_TYPE_DEBUG_COMB)  || (p_auth_cmpl->key_type == HCI_LKEY_TYPE_AUTH_COMB) ||
1033             (p_auth_cmpl->key_type == HCI_LKEY_TYPE_CHANGED_COMB) || pairing_cb.bond_type == BOND_TYPE_PERSISTENT)
1034         {
1035             bt_status_t ret;
1036             BTIF_TRACE_DEBUG("%s: Storing link key. key_type=0x%x, bond_type=%d",
1037                 __FUNCTION__, p_auth_cmpl->key_type, pairing_cb.bond_type);
1038             ret = btif_storage_add_bonded_device(&bd_addr,
1039                                 p_auth_cmpl->key, p_auth_cmpl->key_type,
1040                                 pairing_cb.pin_code_len);
1041             ASSERTC(ret == BT_STATUS_SUCCESS, "storing link key failed", ret);
1042         }
1043         else
1044         {
1045             BTIF_TRACE_DEBUG("%s: Temporary key. Not storing. key_type=0x%x, bond_type=%d",
1046                 __FUNCTION__, p_auth_cmpl->key_type, pairing_cb.bond_type);
1047             if(pairing_cb.bond_type == BOND_TYPE_TEMPORARY)
1048             {
1049                 BTIF_TRACE_DEBUG("%s: sending BT_BOND_STATE_NONE for Temp pairing",
1050                         __FUNCTION__);
1051                 bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_NONE);
1052                 return;
1053             }
1054         }
1055     }
1056 
1057     // Skip SDP for certain  HID Devices
1058     if (p_auth_cmpl->success)
1059     {
1060         pairing_cb.timeout_retries = 0;
1061         status = BT_STATUS_SUCCESS;
1062         state = BT_BOND_STATE_BONDED;
1063         bdcpy(bd_addr.address, p_auth_cmpl->bd_addr);
1064 
1065         if (check_sdp_bl(&bd_addr) && check_cod_hid(&bd_addr, COD_HID_MAJOR))
1066         {
1067             ALOGW("%s:skip SDP",
1068                               __FUNCTION__);
1069             skip_sdp = TRUE;
1070         }
1071         if(!pairing_cb.is_local_initiated && skip_sdp)
1072         {
1073             bond_state_changed(status, &bd_addr, state);
1074 
1075             ALOGW("%s: Incoming HID Connection",__FUNCTION__);
1076             bt_property_t prop;
1077             bt_bdaddr_t bd_addr;
1078             bt_uuid_t  uuid;
1079             char uuid_str[128] = UUID_HUMAN_INTERFACE_DEVICE;
1080 
1081             string_to_uuid(uuid_str, &uuid);
1082 
1083             prop.type = BT_PROPERTY_UUIDS;
1084             prop.val = uuid.uu;
1085             prop.len = MAX_UUID_SIZE;
1086 
1087             /* Send the event to the BTIF */
1088             HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1089                              BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1090         }
1091         else
1092         {
1093             /* Trigger SDP on the device */
1094             pairing_cb.sdp_attempts = 1;;
1095 
1096             if(btif_dm_inquiry_in_progress)
1097                 btif_dm_cancel_discovery();
1098 
1099             btif_dm_get_remote_services(&bd_addr);
1100             }
1101             /* Do not call bond_state_changed_cb yet. Wait till fetch remote service is complete */
1102     }
1103     else
1104     {
1105          /*Map the HCI fail reason  to  bt status  */
1106         switch(p_auth_cmpl->fail_reason)
1107         {
1108             case HCI_ERR_PAGE_TIMEOUT:
1109                 if (blacklistPairingRetries(bd_addr.address) && pairing_cb.timeout_retries)
1110                 {
1111                     BTIF_TRACE_WARNING("%s() - Pairing timeout; retrying (%d) ...", __FUNCTION__, pairing_cb.timeout_retries);
1112                     --pairing_cb.timeout_retries;
1113                     btif_dm_cb_create_bond (&bd_addr, BTA_TRANSPORT_UNKNOWN);
1114                     return;
1115                 }
1116                 /* Fall-through */
1117             case HCI_ERR_CONNECTION_TOUT:
1118                 status =  BT_STATUS_RMT_DEV_DOWN;
1119                 break;
1120 
1121             case HCI_ERR_PAIRING_NOT_ALLOWED:
1122                 status = BT_STATUS_AUTH_REJECTED;
1123                 break;
1124 
1125             case HCI_ERR_LMP_RESPONSE_TIMEOUT:
1126                 status =  BT_STATUS_AUTH_FAILURE;
1127                 break;
1128 
1129             /* map the auth failure codes, so we can retry pairing if necessary */
1130             case HCI_ERR_AUTH_FAILURE:
1131             case HCI_ERR_KEY_MISSING:
1132                 btif_storage_remove_bonded_device(&bd_addr);
1133             case HCI_ERR_HOST_REJECT_SECURITY:
1134             case HCI_ERR_ENCRY_MODE_NOT_ACCEPTABLE:
1135             case HCI_ERR_UNIT_KEY_USED:
1136             case HCI_ERR_PAIRING_WITH_UNIT_KEY_NOT_SUPPORTED:
1137             case HCI_ERR_INSUFFCIENT_SECURITY:
1138             case HCI_ERR_PEER_USER:
1139             case HCI_ERR_UNSPECIFIED:
1140                 BTIF_TRACE_DEBUG(" %s() Authentication fail reason %d",
1141                     __FUNCTION__, p_auth_cmpl->fail_reason);
1142                 if (pairing_cb.autopair_attempts  == 1)
1143                 {
1144                     BTIF_TRACE_DEBUG("%s(): Adding device to blacklist ", __FUNCTION__);
1145 
1146                     /* Add the device to dynamic black list only if this device belongs to Audio/pointing dev class  */
1147                     if (check_cod(&bd_addr, COD_AV_HEADSETS) ||
1148                         check_cod(&bd_addr, COD_AV_HANDSFREE) ||
1149                         check_cod(&bd_addr, COD_AV_HEADPHONES) ||
1150                         check_cod(&bd_addr, COD_AV_PORTABLE_AUDIO) ||
1151                         check_cod(&bd_addr, COD_AV_HIFI_AUDIO) ||
1152                         check_cod(&bd_addr, COD_HID_POINTING))
1153                     {
1154                         btif_storage_add_device_to_autopair_blacklist (&bd_addr);
1155                     }
1156                     pairing_cb.autopair_attempts++;
1157 
1158                     /* Create the Bond once again */
1159                     BTIF_TRACE_DEBUG("%s() auto pair failed. Reinitiate Bond", __FUNCTION__);
1160                     btif_dm_cb_create_bond (&bd_addr, BTA_TRANSPORT_UNKNOWN);
1161                     return;
1162                 }
1163                 else
1164                 {
1165                     /* if autopair attempts are more than 1, or not attempted */
1166                     status =  BT_STATUS_AUTH_FAILURE;
1167                 }
1168                 break;
1169 
1170             default:
1171                 status =  BT_STATUS_FAIL;
1172         }
1173         /* Special Handling for HID Devices */
1174         if (check_cod(&bd_addr, COD_HID_POINTING)) {
1175             /* Remove Device as bonded in nvram as authentication failed */
1176             BTIF_TRACE_DEBUG("%s(): removing hid pointing device from nvram", __FUNCTION__);
1177             btif_storage_remove_bonded_device(&bd_addr);
1178         }
1179         bond_state_changed(status, &bd_addr, state);
1180     }
1181 }
1182 
1183 /******************************************************************************
1184 **
1185 ** Function         btif_dm_search_devices_evt
1186 **
1187 ** Description      Executes search devices callback events in btif context
1188 **
1189 ** Returns          void
1190 **
1191 ******************************************************************************/
btif_dm_search_devices_evt(UINT16 event,char * p_param)1192 static void btif_dm_search_devices_evt (UINT16 event, char *p_param)
1193 {
1194     tBTA_DM_SEARCH *p_search_data;
1195     BTIF_TRACE_EVENT("%s event=%s", __FUNCTION__, dump_dm_search_event(event));
1196 
1197     switch (event)
1198     {
1199         case BTA_DM_DISC_RES_EVT:
1200         {
1201             p_search_data = (tBTA_DM_SEARCH *)p_param;
1202             /* Remote name update */
1203             if (strlen((const char *) p_search_data->disc_res.bd_name))
1204             {
1205                 bt_property_t properties[1];
1206                 bt_bdaddr_t bdaddr;
1207                 bt_status_t status;
1208 
1209                 properties[0].type = BT_PROPERTY_BDNAME;
1210                 properties[0].val = p_search_data->disc_res.bd_name;
1211                 properties[0].len = strlen((char *)p_search_data->disc_res.bd_name);
1212                 bdcpy(bdaddr.address, p_search_data->disc_res.bd_addr);
1213 
1214                 status = btif_storage_set_remote_device_property(&bdaddr, &properties[0]);
1215                 ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device property", status);
1216                 HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1217                                  status, &bdaddr, 1, properties);
1218             }
1219             /* TODO: Services? */
1220         }
1221         break;
1222 
1223         case BTA_DM_INQ_RES_EVT:
1224         {
1225             /* inquiry result */
1226             UINT32 cod;
1227             UINT8 *p_eir_remote_name = NULL;
1228             bt_bdname_t bdname;
1229             bt_bdaddr_t bdaddr;
1230             UINT8 remote_name_len;
1231             UINT8 *p_cached_name = NULL;
1232             tBTA_SERVICE_MASK services = 0;
1233             bdstr_t bdstr;
1234 
1235             p_search_data = (tBTA_DM_SEARCH *)p_param;
1236             bdcpy(bdaddr.address, p_search_data->inq_res.bd_addr);
1237 
1238             BTIF_TRACE_DEBUG("%s() %s device_type = 0x%x\n", __FUNCTION__, bd2str(&bdaddr, &bdstr),
1239 #if (BLE_INCLUDED == TRUE)
1240                     p_search_data->inq_res.device_type);
1241 #else
1242                     BT_DEVICE_TYPE_BREDR);
1243 #endif
1244             bdname.name[0] = 0;
1245 
1246             cod = devclass2uint (p_search_data->inq_res.dev_class);
1247 
1248             if ( cod == 0) {
1249                 ALOGD("cod is 0, set as unclassified");
1250                 cod = COD_UNCLASSIFIED;
1251             }
1252 
1253             if (!check_eir_remote_name(p_search_data, bdname.name, &remote_name_len))
1254                 check_cached_remote_name(p_search_data, bdname.name, &remote_name_len);
1255 
1256             /* Check EIR for remote name and services */
1257             if (p_search_data->inq_res.p_eir)
1258             {
1259                 BTA_GetEirService(p_search_data->inq_res.p_eir, &services);
1260                 BTIF_TRACE_DEBUG("%s()EIR BTA services = %08X", __FUNCTION__, (UINT32)services);
1261                 /* TODO:  Get the service list and check to see which uuids we got and send it back to the client. */
1262             }
1263 
1264 
1265             {
1266                 bt_property_t properties[5];
1267                 bt_device_type_t dev_type;
1268                 UINT8 addr_type;
1269                 uint32_t num_properties = 0;
1270                 bt_status_t status;
1271 
1272                 memset(properties, 0, sizeof(properties));
1273                 /* BD_ADDR */
1274                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1275                                     BT_PROPERTY_BDADDR, sizeof(bdaddr), &bdaddr);
1276                 num_properties++;
1277                 /* BD_NAME */
1278                 /* Don't send BDNAME if it is empty */
1279                 if (bdname.name[0])
1280                 {
1281                     BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1282                                                BT_PROPERTY_BDNAME,
1283                                                strlen((char *)bdname.name), &bdname);
1284                     num_properties++;
1285                 }
1286 
1287                 /* DEV_CLASS */
1288                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1289                                     BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod);
1290                 num_properties++;
1291                 /* DEV_TYPE */
1292 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1293                 /* FixMe: Assumption is that bluetooth.h and BTE enums match */
1294                 dev_type = p_search_data->inq_res.device_type;
1295                 addr_type = p_search_data->inq_res.ble_addr_type;
1296 #else
1297                 dev_type = BT_DEVICE_TYPE_BREDR;
1298 #endif
1299                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1300                                     BT_PROPERTY_TYPE_OF_DEVICE, sizeof(dev_type), &dev_type);
1301                 num_properties++;
1302                 /* RSSI */
1303                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1304                                     BT_PROPERTY_REMOTE_RSSI, sizeof(int8_t),
1305                                     &(p_search_data->inq_res.rssi));
1306                 num_properties++;
1307 
1308                 status = btif_storage_add_remote_device(&bdaddr, num_properties, properties);
1309                 ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device (inquiry)", status);
1310 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1311                 status = btif_storage_set_remote_addr_type(&bdaddr, addr_type);
1312                 if (( dev_type == BT_DEVICE_TYPE_DUMO)&&
1313                    (p_search_data->inq_res.flag & BTA_BLE_DMT_CONTROLLER_SPT) &&
1314                    (p_search_data->inq_res.flag & BTA_BLE_DMT_HOST_SPT))
1315                  {
1316                     btif_storage_set_dmt_support_type (&bdaddr, TRUE);
1317                  }
1318                 ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote addr type (inquiry)", status);
1319 #endif
1320                 /* Callback to notify upper layer of device */
1321                 HAL_CBACK(bt_hal_cbacks, device_found_cb,
1322                                  num_properties, properties);
1323             }
1324         }
1325         break;
1326 
1327         case BTA_DM_INQ_CMPL_EVT:
1328         {
1329 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1330             tBTA_DM_BLE_PF_FILT_PARAMS adv_filt_param;
1331             memset(&adv_filt_param, 0, sizeof(tBTA_DM_BLE_PF_FILT_PARAMS));
1332             BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_DELETE, 0, &adv_filt_param, NULL,
1333                                      bte_scan_filt_param_cfg_evt, 0);
1334 #endif
1335         }
1336         break;
1337         case BTA_DM_DISC_CMPL_EVT:
1338         {
1339             HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb, BT_DISCOVERY_STOPPED);
1340         }
1341         break;
1342         case BTA_DM_SEARCH_CANCEL_CMPL_EVT:
1343         {
1344            /* if inquiry is not in progress and we get a cancel event, then
1345             * it means we are done with inquiry, but remote_name fetches are in
1346             * progress
1347             *
1348             * if inquiry  is in progress, then we don't want to act on this cancel_cmpl_evt
1349             * but instead wait for the cancel_cmpl_evt via the Busy Level
1350             *
1351             */
1352            if (btif_dm_inquiry_in_progress == FALSE)
1353            {
1354                HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb, BT_DISCOVERY_STOPPED);
1355            }
1356         }
1357         break;
1358     }
1359 }
1360 
1361 /*******************************************************************************
1362 **
1363 ** Function         btif_dm_search_services_evt
1364 **
1365 ** Description      Executes search services event in btif context
1366 **
1367 ** Returns          void
1368 **
1369 *******************************************************************************/
btif_dm_search_services_evt(UINT16 event,char * p_param)1370 static void btif_dm_search_services_evt(UINT16 event, char *p_param)
1371 {
1372     tBTA_DM_SEARCH *p_data = (tBTA_DM_SEARCH*)p_param;
1373 
1374     BTIF_TRACE_EVENT("%s:  event = %d", __FUNCTION__, event);
1375     switch (event)
1376     {
1377         case BTA_DM_DISC_RES_EVT:
1378         {
1379             bt_uuid_t uuid_arr[BT_MAX_NUM_UUIDS]; /* Max 32 services */
1380             bt_property_t prop;
1381             uint32_t i = 0,  j = 0;
1382             bt_bdaddr_t bd_addr;
1383             bt_status_t ret;
1384 
1385             bdcpy(bd_addr.address, p_data->disc_res.bd_addr);
1386 
1387             BTIF_TRACE_DEBUG("%s:(result=0x%x, services 0x%x)", __FUNCTION__,
1388                     p_data->disc_res.result, p_data->disc_res.services);
1389             if  ((p_data->disc_res.result != BTA_SUCCESS) &&
1390                  (pairing_cb.state == BT_BOND_STATE_BONDING ) &&
1391                  (pairing_cb.sdp_attempts < BTIF_DM_MAX_SDP_ATTEMPTS_AFTER_PAIRING))
1392             {
1393                 BTIF_TRACE_WARNING("%s:SDP failed after bonding re-attempting", __FUNCTION__);
1394                 pairing_cb.sdp_attempts++;
1395                 btif_dm_get_remote_services(&bd_addr);
1396                 return;
1397             }
1398             prop.type = BT_PROPERTY_UUIDS;
1399             prop.len = 0;
1400             if ((p_data->disc_res.result == BTA_SUCCESS) && (p_data->disc_res.num_uuids > 0))
1401             {
1402                  prop.val = p_data->disc_res.p_uuid_list;
1403                  prop.len = p_data->disc_res.num_uuids * MAX_UUID_SIZE;
1404                  for (i=0; i < p_data->disc_res.num_uuids; i++)
1405                  {
1406                       char temp[256];
1407                       uuid_to_string((bt_uuid_t*)(p_data->disc_res.p_uuid_list + (i*MAX_UUID_SIZE)), temp);
1408                       BTIF_TRACE_ERROR("Index: %d uuid:%s", i, temp);
1409                  }
1410             }
1411 
1412             /* onUuidChanged requires getBondedDevices to be populated.
1413             ** bond_state_changed needs to be sent prior to remote_device_property
1414             */
1415             if ((pairing_cb.state == BT_BOND_STATE_BONDING) &&
1416                 (bdcmp(p_data->disc_res.bd_addr, pairing_cb.bd_addr) == 0)&&
1417                 pairing_cb.sdp_attempts > 0)
1418             {
1419                  BTIF_TRACE_DEBUG("%s Remote Service SDP done. Call bond_state_changed_cb BONDED",
1420                                    __FUNCTION__);
1421                  pairing_cb.sdp_attempts  = 0;
1422                  bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDED);
1423             }
1424 
1425             if(p_data->disc_res.num_uuids != 0)
1426             {
1427                 /* Also write this to the NVRAM */
1428                 ret = btif_storage_set_remote_device_property(&bd_addr, &prop);
1429                 ASSERTC(ret == BT_STATUS_SUCCESS, "storing remote services failed", ret);
1430                 /* Send the event to the BTIF */
1431                 HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1432                                  BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1433             }
1434         }
1435         break;
1436 
1437         case BTA_DM_DISC_CMPL_EVT:
1438             /* fixme */
1439         break;
1440 
1441 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1442         case BTA_DM_DISC_BLE_RES_EVT:
1443              BTIF_TRACE_DEBUG("%s:, services 0x%x)", __FUNCTION__,
1444                                 p_data->disc_ble_res.service.uu.uuid16);
1445              bt_uuid_t  uuid;
1446              int i = 0;
1447              int j = 15;
1448              if (p_data->disc_ble_res.service.uu.uuid16 == UUID_SERVCLASS_LE_HID)
1449              {
1450                 BTIF_TRACE_DEBUG("%s: Found HOGP UUID",__FUNCTION__);
1451                 bt_property_t prop;
1452                 bt_bdaddr_t bd_addr;
1453                 char temp[256];
1454                 bt_status_t ret;
1455 
1456                 bta_gatt_convert_uuid16_to_uuid128(uuid.uu,p_data->disc_ble_res.service.uu.uuid16);
1457 
1458                 while(i < j )
1459                 {
1460                     unsigned char c = uuid.uu[j];
1461                     uuid.uu[j] = uuid.uu[i];
1462                     uuid.uu[i] = c;
1463                     i++;
1464                     j--;
1465                 }
1466 
1467                 uuid_to_string(&uuid, temp);
1468                 BTIF_TRACE_ERROR(" uuid:%s", temp);
1469 
1470                 bdcpy(bd_addr.address, p_data->disc_ble_res.bd_addr);
1471                 prop.type = BT_PROPERTY_UUIDS;
1472                 prop.val = uuid.uu;
1473                 prop.len = MAX_UUID_SIZE;
1474 
1475                 /* Also write this to the NVRAM */
1476                 ret = btif_storage_set_remote_device_property(&bd_addr, &prop);
1477                 ASSERTC(ret == BT_STATUS_SUCCESS, "storing remote services failed", ret);
1478 
1479                 /* Send the event to the BTIF */
1480                 HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1481                                  BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1482 
1483             }
1484         break;
1485 #endif /* BLE_INCLUDED */
1486 
1487         default:
1488         {
1489             ASSERTC(0, "unhandled search services event", event);
1490         }
1491         break;
1492     }
1493 }
1494 
1495 /*******************************************************************************
1496 **
1497 ** Function         btif_dm_remote_service_record_evt
1498 **
1499 ** Description      Executes search service record event in btif context
1500 **
1501 ** Returns          void
1502 **
1503 *******************************************************************************/
btif_dm_remote_service_record_evt(UINT16 event,char * p_param)1504 static void btif_dm_remote_service_record_evt(UINT16 event, char *p_param)
1505 {
1506     tBTA_DM_SEARCH *p_data = (tBTA_DM_SEARCH*)p_param;
1507 
1508     BTIF_TRACE_EVENT("%s:  event = %d", __FUNCTION__, event);
1509     switch (event)
1510     {
1511         case BTA_DM_DISC_RES_EVT:
1512         {
1513             bt_service_record_t rec;
1514             bt_property_t prop;
1515             uint32_t i = 0;
1516             bt_bdaddr_t bd_addr;
1517 
1518             memset(&rec, 0, sizeof(bt_service_record_t));
1519             bdcpy(bd_addr.address, p_data->disc_res.bd_addr);
1520 
1521             BTIF_TRACE_DEBUG("%s:(result=0x%x, services 0x%x)", __FUNCTION__,
1522                     p_data->disc_res.result, p_data->disc_res.services);
1523             prop.type = BT_PROPERTY_SERVICE_RECORD;
1524             prop.val = (void*)&rec;
1525             prop.len = sizeof(rec);
1526 
1527             /* disc_res.result is overloaded with SCN. Cannot check result */
1528             p_data->disc_res.services &= ~BTA_USER_SERVICE_MASK;
1529             /* TODO: Get the UUID as well */
1530             rec.channel = p_data->disc_res.result - 3;
1531             /* TODO: Need to get the service name using p_raw_data */
1532             rec.name[0] = 0;
1533 
1534             HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1535                              BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1536         }
1537         break;
1538 
1539         default:
1540         {
1541            ASSERTC(0, "unhandled remote service record event", event);
1542         }
1543         break;
1544     }
1545 }
1546 
1547 /*******************************************************************************
1548 **
1549 ** Function         btif_dm_upstreams_cback
1550 **
1551 ** Description      Executes UPSTREAMS events in btif context
1552 **
1553 ** Returns          void
1554 **
1555 *******************************************************************************/
btif_dm_upstreams_evt(UINT16 event,char * p_param)1556 static void btif_dm_upstreams_evt(UINT16 event, char* p_param)
1557 {
1558     tBTA_DM_SEC_EVT dm_event = (tBTA_DM_SEC_EVT)event;
1559     tBTA_DM_SEC *p_data = (tBTA_DM_SEC*)p_param;
1560     tBTA_SERVICE_MASK service_mask;
1561     uint32_t i;
1562     bt_bdaddr_t bd_addr;
1563 
1564     BTIF_TRACE_EVENT("btif_dm_upstreams_cback  ev: %s", dump_dm_event(event));
1565 
1566     switch (event)
1567     {
1568         case BTA_DM_ENABLE_EVT:
1569         {
1570              BD_NAME bdname;
1571              bt_status_t status;
1572              bt_property_t prop;
1573              prop.type = BT_PROPERTY_BDNAME;
1574              prop.len = BD_NAME_LEN;
1575              prop.val = (void*)bdname;
1576 
1577              status = btif_storage_get_adapter_property(&prop);
1578              if (status == BT_STATUS_SUCCESS)
1579              {
1580                  /* A name exists in the storage. Make this the device name */
1581                  BTA_DmSetDeviceName((char*)prop.val);
1582              }
1583              else
1584              {
1585                  /* Storage does not have a name yet.
1586                   * Use the default name and write it to the chip
1587                   */
1588                  BTA_DmSetDeviceName(btif_get_default_local_name());
1589              }
1590 
1591 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1592              /* Enable local privacy */
1593              BTA_DmBleConfigLocalPrivacy(BLE_LOCAL_PRIVACY_ENABLED);
1594 #endif
1595 
1596              /* for each of the enabled services in the mask, trigger the profile
1597               * enable */
1598              service_mask = btif_get_enabled_services_mask();
1599              for (i=0; i <= BTA_MAX_SERVICE_ID; i++)
1600              {
1601                  if (service_mask &
1602                      (tBTA_SERVICE_MASK)(BTA_SERVICE_ID_TO_SERVICE_MASK(i)))
1603                  {
1604                      btif_in_execute_service_request(i, TRUE);
1605                  }
1606              }
1607              /* clear control blocks */
1608              memset(&pairing_cb, 0, sizeof(btif_dm_pairing_cb_t));
1609 
1610              /* This function will also trigger the adapter_properties_cb
1611              ** and bonded_devices_info_cb
1612              */
1613              btif_storage_load_bonded_devices();
1614 
1615              btif_storage_load_autopair_device_list();
1616 
1617              btif_enable_bluetooth_evt(p_data->enable.status, p_data->enable.bd_addr);
1618         }
1619         break;
1620 
1621         case BTA_DM_DISABLE_EVT:
1622             /* for each of the enabled services in the mask, trigger the profile
1623              * disable */
1624             service_mask = btif_get_enabled_services_mask();
1625             for (i=0; i <= BTA_MAX_SERVICE_ID; i++)
1626             {
1627                 if (service_mask &
1628                     (tBTA_SERVICE_MASK)(BTA_SERVICE_ID_TO_SERVICE_MASK(i)))
1629                 {
1630                     btif_in_execute_service_request(i, FALSE);
1631                 }
1632             }
1633             btif_disable_bluetooth_evt();
1634             break;
1635 
1636         case BTA_DM_PIN_REQ_EVT:
1637             btif_dm_pin_req_evt(&p_data->pin_req);
1638             break;
1639 
1640         case BTA_DM_AUTH_CMPL_EVT:
1641             btif_dm_auth_cmpl_evt(&p_data->auth_cmpl);
1642             break;
1643 
1644         case BTA_DM_BOND_CANCEL_CMPL_EVT:
1645             if (pairing_cb.state == BT_BOND_STATE_BONDING)
1646             {
1647                 bdcpy(bd_addr.address, pairing_cb.bd_addr);
1648                 bond_state_changed(p_data->bond_cancel_cmpl.result, &bd_addr, BT_BOND_STATE_NONE);
1649             }
1650             break;
1651 
1652         case BTA_DM_SP_CFM_REQ_EVT:
1653             btif_dm_ssp_cfm_req_evt(&p_data->cfm_req);
1654             break;
1655         case BTA_DM_SP_KEY_NOTIF_EVT:
1656             btif_dm_ssp_key_notif_evt(&p_data->key_notif);
1657             break;
1658 
1659         case BTA_DM_DEV_UNPAIRED_EVT:
1660             bdcpy(bd_addr.address, p_data->link_down.bd_addr);
1661 
1662             /*special handling for HID devices */
1663             #if (defined(BTA_HH_INCLUDED) && (BTA_HH_INCLUDED == TRUE))
1664             btif_hh_remove_device(bd_addr);
1665             #endif
1666             #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1667             btif_storage_remove_ble_bonding_keys(&bd_addr);
1668             #endif
1669             btif_storage_remove_bonded_device(&bd_addr);
1670             bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_NONE);
1671             break;
1672 
1673         case BTA_DM_BUSY_LEVEL_EVT:
1674         {
1675 
1676             if (p_data->busy_level.level_flags & BTM_BL_INQUIRY_PAGING_MASK)
1677             {
1678                 if (p_data->busy_level.level_flags == BTM_BL_INQUIRY_STARTED)
1679                 {
1680                        HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb,
1681                                                 BT_DISCOVERY_STARTED);
1682                        btif_dm_inquiry_in_progress = TRUE;
1683                 }
1684                 else if (p_data->busy_level.level_flags == BTM_BL_INQUIRY_CANCELLED)
1685                 {
1686                        HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb,
1687                                                 BT_DISCOVERY_STOPPED);
1688                        btif_dm_inquiry_in_progress = FALSE;
1689                 }
1690                 else if (p_data->busy_level.level_flags == BTM_BL_INQUIRY_COMPLETE)
1691                 {
1692                        btif_dm_inquiry_in_progress = FALSE;
1693                 }
1694             }
1695         }break;
1696 
1697         case BTA_DM_LINK_UP_EVT:
1698             bdcpy(bd_addr.address, p_data->link_up.bd_addr);
1699             BTIF_TRACE_DEBUG("BTA_DM_LINK_UP_EVT. Sending BT_ACL_STATE_CONNECTED");
1700 
1701             btif_update_remote_version_property(&bd_addr);
1702 
1703             HAL_CBACK(bt_hal_cbacks, acl_state_changed_cb, BT_STATUS_SUCCESS,
1704                       &bd_addr, BT_ACL_STATE_CONNECTED);
1705             break;
1706 
1707         case BTA_DM_LINK_DOWN_EVT:
1708             bdcpy(bd_addr.address, p_data->link_down.bd_addr);
1709             BTIF_TRACE_DEBUG("BTA_DM_LINK_DOWN_EVT. Sending BT_ACL_STATE_DISCONNECTED");
1710             HAL_CBACK(bt_hal_cbacks, acl_state_changed_cb, BT_STATUS_SUCCESS,
1711                       &bd_addr, BT_ACL_STATE_DISCONNECTED);
1712             break;
1713 
1714         case BTA_DM_HW_ERROR_EVT:
1715             BTIF_TRACE_ERROR("Received H/W Error. ");
1716             /* Flush storage data */
1717             btif_config_flush();
1718             usleep(100000); /* 100milliseconds */
1719             /* Killing the process to force a restart as part of fault tolerance */
1720             kill(getpid(), SIGKILL);
1721             break;
1722 
1723 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1724         case BTA_DM_BLE_KEY_EVT:
1725             BTIF_TRACE_DEBUG("BTA_DM_BLE_KEY_EVT key_type=0x%02x ", p_data->ble_key.key_type);
1726 
1727             /* If this pairing is by-product of local initiated GATT client Read or Write,
1728             BTA would not have sent BTA_DM_BLE_SEC_REQ_EVT event and Bond state would not
1729             have setup properly. Setup pairing_cb and notify App about Bonding state now*/
1730             if (pairing_cb.state != BT_BOND_STATE_BONDING)
1731             {
1732                 BTIF_TRACE_DEBUG("Bond state not sent to App so far.Notify the app now");
1733                 bond_state_changed(BT_STATUS_SUCCESS, (bt_bdaddr_t*)p_data->ble_key.bd_addr,
1734                                    BT_BOND_STATE_BONDING);
1735             }
1736             else if (memcmp (pairing_cb.bd_addr, p_data->ble_key.bd_addr, BD_ADDR_LEN)!=0)
1737             {
1738                 BTIF_TRACE_ERROR("BD mismatch discard BLE key_type=%d ",p_data->ble_key.key_type);
1739                 break;
1740             }
1741 
1742             switch (p_data->ble_key.key_type)
1743             {
1744                 case BTA_LE_KEY_PENC:
1745                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_PENC");
1746                     pairing_cb.ble.is_penc_key_rcvd = TRUE;
1747                     memcpy(pairing_cb.ble.penc_key.ltk,p_data->ble_key.key_value.penc_key.ltk, 16);
1748                     memcpy(pairing_cb.ble.penc_key.rand, p_data->ble_key.key_value.penc_key.rand,8);
1749                     pairing_cb.ble.penc_key.ediv = p_data->ble_key.key_value.penc_key.ediv;
1750                     pairing_cb.ble.penc_key.sec_level = p_data->ble_key.key_value.penc_key.sec_level;
1751 
1752                     for (i=0; i<16; i++)
1753                     {
1754                         BTIF_TRACE_DEBUG("pairing_cb.ble.penc_key.ltk[%d]=0x%02x",i,pairing_cb.ble.penc_key.ltk[i]);
1755                     }
1756                     for (i=0; i<8; i++)
1757                     {
1758                         BTIF_TRACE_DEBUG("pairing_cb.ble.penc_key.rand[%d]=0x%02x",i,pairing_cb.ble.penc_key.rand[i]);
1759                     }
1760                     BTIF_TRACE_DEBUG("pairing_cb.ble.penc_key.ediv=0x%04x",pairing_cb.ble.penc_key.ediv);
1761                     BTIF_TRACE_DEBUG("pairing_cb.ble.penc_key.sec_level=0x%02x",pairing_cb.ble.penc_key.sec_level);
1762                     BTIF_TRACE_DEBUG("pairing_cb.ble.penc_key.key_size=0x%02x",pairing_cb.ble.penc_key.key_size);
1763                     break;
1764 
1765                 case BTA_LE_KEY_PID:
1766                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_PID");
1767                     pairing_cb.ble.is_pid_key_rcvd = TRUE;
1768                     pairing_cb.ble.pid_key.addr_type = p_data->ble_key.key_value.pid_key.addr_type;
1769                     memcpy(pairing_cb.ble.pid_key.irk, p_data->ble_key.key_value.pid_key.irk, 16);
1770                     memcpy(pairing_cb.ble.pid_key.static_addr,
1771                             p_data->ble_key.key_value.pid_key.static_addr,BD_ADDR_LEN);
1772                     for (i=0; i<16; i++)
1773                     {
1774                         BTIF_TRACE_DEBUG("pairing_cb.ble.pid_key.irk[%d]=0x%02x"
1775                                             ,i,pairing_cb.ble.pid_key.irk[i]);
1776                     }
1777                     for (i=0; i<BD_ADDR_LEN; i++)
1778                     {
1779                         BTIF_TRACE_DEBUG("piaring_cb.ble.pid_address[%d] = %x"
1780                                             ,i, pairing_cb.ble.pid_key.static_addr[i]);
1781                     }
1782                     break;
1783 
1784                 case BTA_LE_KEY_PCSRK:
1785                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_PCSRK");
1786                     pairing_cb.ble.is_pcsrk_key_rcvd = TRUE;
1787                     pairing_cb.ble.pcsrk_key.counter = p_data->ble_key.key_value.pcsrk_key.counter;
1788                     pairing_cb.ble.pcsrk_key.sec_level = p_data->ble_key.key_value.pcsrk_key.sec_level;
1789                     memcpy(pairing_cb.ble.pcsrk_key.csrk,p_data->ble_key.key_value.pcsrk_key.csrk,16);
1790 
1791                     for (i=0; i<16; i++)
1792                     {
1793                         BTIF_TRACE_DEBUG("pairing_cb.ble.pcsrk_key.csrk[%d]=0x%02x",i,pairing_cb.ble.pcsrk_key.csrk[i]);
1794                     }
1795                     BTIF_TRACE_DEBUG("pairing_cb.ble.pcsrk_key.counter=0x%08x",pairing_cb.ble.pcsrk_key.counter);
1796                     BTIF_TRACE_DEBUG("pairing_cb.ble.pcsrk_key.sec_level=0x%02x",pairing_cb.ble.pcsrk_key.sec_level);
1797                     break;
1798 
1799                 case BTA_LE_KEY_LENC:
1800                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_LENC");
1801                     pairing_cb.ble.is_lenc_key_rcvd = TRUE;
1802                     pairing_cb.ble.lenc_key.div = p_data->ble_key.key_value.lenc_key.div;
1803                     pairing_cb.ble.lenc_key.key_size = p_data->ble_key.key_value.lenc_key.key_size;
1804                     pairing_cb.ble.lenc_key.sec_level = p_data->ble_key.key_value.lenc_key.sec_level;
1805 
1806                     BTIF_TRACE_DEBUG("pairing_cb.ble.lenc_key.div=0x%04x",pairing_cb.ble.lenc_key.div);
1807                     BTIF_TRACE_DEBUG("pairing_cb.ble.lenc_key.key_size=0x%02x",pairing_cb.ble.lenc_key.key_size);
1808                     BTIF_TRACE_DEBUG("pairing_cb.ble.lenc_key.sec_level=0x%02x",pairing_cb.ble.lenc_key.sec_level);
1809                     break;
1810 
1811 
1812 
1813                 case BTA_LE_KEY_LCSRK:
1814                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_LCSRK");
1815                     pairing_cb.ble.is_lcsrk_key_rcvd = TRUE;
1816                     pairing_cb.ble.lcsrk_key.counter = p_data->ble_key.key_value.lcsrk_key.counter;
1817                     pairing_cb.ble.lcsrk_key.div = p_data->ble_key.key_value.lcsrk_key.div;
1818                     pairing_cb.ble.lcsrk_key.sec_level = p_data->ble_key.key_value.lcsrk_key.sec_level;
1819 
1820                     BTIF_TRACE_DEBUG("pairing_cb.ble.lcsrk_key.div=0x%04x",pairing_cb.ble.lcsrk_key.div);
1821                     BTIF_TRACE_DEBUG("pairing_cb.ble.lcsrk_key.counter=0x%08x",pairing_cb.ble.lcsrk_key.counter);
1822                     BTIF_TRACE_DEBUG("pairing_cb.ble.lcsrk_key.sec_level=0x%02x",pairing_cb.ble.lcsrk_key.sec_level);
1823 
1824                     break;
1825 
1826                 default:
1827                     BTIF_TRACE_ERROR("unknown BLE key type (0x%02x)", p_data->ble_key.key_type);
1828                     break;
1829             }
1830 
1831             break;
1832         case BTA_DM_BLE_SEC_REQ_EVT:
1833             BTIF_TRACE_DEBUG("BTA_DM_BLE_SEC_REQ_EVT. ");
1834             btif_dm_ble_sec_req_evt(&p_data->ble_req);
1835             break;
1836         case BTA_DM_BLE_PASSKEY_NOTIF_EVT:
1837             BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_NOTIF_EVT. ");
1838             btif_dm_ble_key_notif_evt(&p_data->key_notif);
1839             break;
1840         case BTA_DM_BLE_PASSKEY_REQ_EVT:
1841             BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_REQ_EVT. ");
1842             btif_dm_ble_passkey_req_evt(&p_data->pin_req);
1843             break;
1844         case BTA_DM_BLE_OOB_REQ_EVT:
1845             BTIF_TRACE_DEBUG("BTA_DM_BLE_OOB_REQ_EVT. ");
1846             break;
1847         case BTA_DM_BLE_LOCAL_IR_EVT:
1848             BTIF_TRACE_DEBUG("BTA_DM_BLE_LOCAL_IR_EVT. ");
1849             ble_local_key_cb.is_id_keys_rcvd = TRUE;
1850             memcpy(&ble_local_key_cb.id_keys.irk[0], &p_data->ble_id_keys.irk[0], sizeof(BT_OCTET16));
1851             memcpy(&ble_local_key_cb.id_keys.ir[0], &p_data->ble_id_keys.ir[0], sizeof(BT_OCTET16));
1852             memcpy(&ble_local_key_cb.id_keys.dhk[0], &p_data->ble_id_keys.dhk[0], sizeof(BT_OCTET16));
1853             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.id_keys.irk[0],
1854                                             BTIF_DM_LE_LOCAL_KEY_IR,
1855                                             BT_OCTET16_LEN);
1856             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.id_keys.ir[0],
1857                                             BTIF_DM_LE_LOCAL_KEY_IRK,
1858                                             BT_OCTET16_LEN);
1859             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.id_keys.dhk[0],
1860                                             BTIF_DM_LE_LOCAL_KEY_DHK,
1861                                             BT_OCTET16_LEN);
1862             break;
1863         case BTA_DM_BLE_LOCAL_ER_EVT:
1864             BTIF_TRACE_DEBUG("BTA_DM_BLE_LOCAL_ER_EVT. ");
1865             ble_local_key_cb.is_er_rcvd = TRUE;
1866             memcpy(&ble_local_key_cb.er[0], &p_data->ble_er[0], sizeof(BT_OCTET16));
1867             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.er[0],
1868                                             BTIF_DM_LE_LOCAL_KEY_ER,
1869                                             BT_OCTET16_LEN);
1870             break;
1871 
1872         case BTA_DM_BLE_AUTH_CMPL_EVT:
1873             BTIF_TRACE_DEBUG("BTA_DM_BLE_KEY_EVT. ");
1874             btif_dm_ble_auth_cmpl_evt(&p_data->auth_cmpl);
1875             break;
1876 
1877         case BTA_DM_LE_FEATURES_READ:
1878         {
1879             tBTM_BLE_VSC_CB cmn_vsc_cb;
1880             bt_local_le_features_t local_le_features;
1881             char buf[512];
1882             bt_property_t prop;
1883             prop.type = BT_PROPERTY_LOCAL_LE_FEATURES;
1884             prop.val = (void*)buf;
1885             prop.len = sizeof(buf);
1886 
1887            /* LE features are not stored in storage. Should be retrived from stack */
1888             BTM_BleGetVendorCapabilities(&cmn_vsc_cb);
1889             local_le_features.local_privacy_enabled = BTM_BleLocalPrivacyEnabled();
1890 
1891             prop.len = sizeof (bt_local_le_features_t);
1892             if (cmn_vsc_cb.filter_support == 1)
1893                 local_le_features.max_adv_filter_supported = cmn_vsc_cb.max_filter;
1894              else
1895                 local_le_features.max_adv_filter_supported = 0;
1896             local_le_features.max_adv_instance = cmn_vsc_cb.adv_inst_max;
1897             local_le_features.max_irk_list_size = cmn_vsc_cb.max_irk_list_sz;
1898             local_le_features.rpa_offload_supported = cmn_vsc_cb.rpa_offloading;
1899             local_le_features.scan_result_storage_size_hibyte =
1900                 (cmn_vsc_cb.tot_scan_results_strg >> 8) & (0xFF);
1901             local_le_features.scan_result_storage_size_lobyte =
1902                 (cmn_vsc_cb.tot_scan_results_strg) & (0xFF);
1903             local_le_features.activity_energy_info_supported = cmn_vsc_cb.energy_support;
1904             memcpy(prop.val, &local_le_features, prop.len);
1905             HAL_CBACK(bt_hal_cbacks, adapter_properties_cb, BT_STATUS_SUCCESS, 1, &prop);
1906             break;
1907          }
1908 
1909         case BTA_DM_ENER_INFO_READ:
1910         {
1911             btif_activity_energy_info_cb_t *p_ener_data = (btif_activity_energy_info_cb_t*) p_param;
1912             bt_activity_energy_info energy_info;
1913             energy_info.status = p_ener_data->status;
1914             energy_info.ctrl_state = p_ener_data->ctrl_state;
1915             energy_info.rx_time = p_ener_data->rx_time;
1916             energy_info.tx_time = p_ener_data->tx_time;
1917             energy_info.idle_time = p_ener_data->idle_time;
1918             energy_info.energy_used = p_ener_data->energy_used;
1919             HAL_CBACK(bt_hal_cbacks, energy_info_cb, &energy_info);
1920             break;
1921         }
1922 #endif
1923 
1924         case BTA_DM_AUTHORIZE_EVT:
1925         case BTA_DM_SIG_STRENGTH_EVT:
1926         case BTA_DM_SP_RMT_OOB_EVT:
1927         case BTA_DM_SP_KEYPRESS_EVT:
1928         case BTA_DM_ROLE_CHG_EVT:
1929 
1930         default:
1931             BTIF_TRACE_WARNING( "btif_dm_cback : unhandled event (%d)", event );
1932             break;
1933     }
1934 } /* btui_security_cback() */
1935 
1936 
1937 /*******************************************************************************
1938 **
1939 ** Function         btif_dm_generic_evt
1940 **
1941 ** Description      Executes non-BTA upstream events in BTIF context
1942 **
1943 ** Returns          void
1944 **
1945 *******************************************************************************/
btif_dm_generic_evt(UINT16 event,char * p_param)1946 static void btif_dm_generic_evt(UINT16 event, char* p_param)
1947 {
1948     BTIF_TRACE_EVENT("%s: event=%d", __FUNCTION__, event);
1949     switch(event)
1950     {
1951         case BTIF_DM_CB_DISCOVERY_STARTED:
1952         {
1953             HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb, BT_DISCOVERY_STARTED);
1954         }
1955         break;
1956 
1957         case BTIF_DM_CB_CREATE_BOND:
1958         {
1959             pairing_cb.timeout_retries = NUM_TIMEOUT_RETRIES;
1960             btif_dm_create_bond_cb_t *create_bond_cb = (btif_dm_create_bond_cb_t*)p_param;
1961             btif_dm_cb_create_bond(&create_bond_cb->bdaddr, create_bond_cb->transport);
1962         }
1963         break;
1964 
1965         case BTIF_DM_CB_REMOVE_BOND:
1966         {
1967             btif_dm_cb_remove_bond((bt_bdaddr_t *)p_param);
1968         }
1969         break;
1970 
1971         case BTIF_DM_CB_HID_REMOTE_NAME:
1972         {
1973             btif_dm_cb_hid_remote_name((tBTM_REMOTE_DEV_NAME *)p_param);
1974         }
1975         break;
1976 
1977         case BTIF_DM_CB_BOND_STATE_BONDING:
1978             {
1979                 bond_state_changed(BT_STATUS_SUCCESS, (bt_bdaddr_t *)p_param, BT_BOND_STATE_BONDING);
1980             }
1981             break;
1982         case BTIF_DM_CB_LE_TX_TEST:
1983         case BTIF_DM_CB_LE_RX_TEST:
1984             {
1985                 uint8_t status;
1986                 STREAM_TO_UINT8(status, p_param);
1987                 HAL_CBACK(bt_hal_cbacks, le_test_mode_cb,
1988                       (status == 0) ? BT_STATUS_SUCCESS : BT_STATUS_FAIL, 0);
1989             }
1990             break;
1991         case BTIF_DM_CB_LE_TEST_END:
1992             {
1993                 uint8_t status;
1994                 uint16_t count = 0;
1995                 STREAM_TO_UINT8(status, p_param);
1996                 if (status == 0)
1997                     STREAM_TO_UINT16(count, p_param);
1998                 HAL_CBACK(bt_hal_cbacks, le_test_mode_cb,
1999                       (status == 0) ? BT_STATUS_SUCCESS : BT_STATUS_FAIL, count);
2000             }
2001             break;
2002         default:
2003         {
2004             BTIF_TRACE_WARNING("%s : Unknown event 0x%x", __FUNCTION__, event);
2005         }
2006         break;
2007     }
2008 }
2009 
2010 /*******************************************************************************
2011 **
2012 ** Function         bte_dm_evt
2013 **
2014 ** Description      Switches context from BTE to BTIF for all DM events
2015 **
2016 ** Returns          void
2017 **
2018 *******************************************************************************/
2019 
bte_dm_evt(tBTA_DM_SEC_EVT event,tBTA_DM_SEC * p_data)2020 void bte_dm_evt(tBTA_DM_SEC_EVT event, tBTA_DM_SEC *p_data)
2021 {
2022     bt_status_t status;
2023 
2024     /* switch context to btif task context (copy full union size for convenience) */
2025     status = btif_transfer_context(btif_dm_upstreams_evt, (uint16_t)event, (void*)p_data, sizeof(tBTA_DM_SEC), NULL);
2026 
2027     /* catch any failed context transfers */
2028     ASSERTC(status == BT_STATUS_SUCCESS, "context transfer failed", status);
2029 }
2030 
2031 /*******************************************************************************
2032 **
2033 ** Function         bte_search_devices_evt
2034 **
2035 ** Description      Switches context from BTE to BTIF for DM search events
2036 **
2037 ** Returns          void
2038 **
2039 *******************************************************************************/
bte_search_devices_evt(tBTA_DM_SEARCH_EVT event,tBTA_DM_SEARCH * p_data)2040 static void bte_search_devices_evt(tBTA_DM_SEARCH_EVT event, tBTA_DM_SEARCH *p_data)
2041 {
2042     UINT16 param_len = 0;
2043 
2044     if (p_data)
2045         param_len += sizeof(tBTA_DM_SEARCH);
2046     /* Allocate buffer to hold the pointers (deep copy). The pointers will point to the end of the tBTA_DM_SEARCH */
2047     switch (event)
2048     {
2049         case BTA_DM_INQ_RES_EVT:
2050         {
2051             if (p_data->inq_res.p_eir)
2052                 param_len += HCI_EXT_INQ_RESPONSE_LEN;
2053         }
2054         break;
2055 
2056         case BTA_DM_DISC_RES_EVT:
2057         {
2058             if (p_data->disc_res.raw_data_size && p_data->disc_res.p_raw_data)
2059                 param_len += p_data->disc_res.raw_data_size;
2060         }
2061         break;
2062     }
2063     BTIF_TRACE_DEBUG("%s event=%s param_len=%d", __FUNCTION__, dump_dm_search_event(event), param_len);
2064 
2065     /* if remote name is available in EIR, set teh flag so that stack doesnt trigger RNR */
2066     if (event == BTA_DM_INQ_RES_EVT)
2067         p_data->inq_res.remt_name_not_required = check_eir_remote_name(p_data, NULL, NULL);
2068 
2069     btif_transfer_context (btif_dm_search_devices_evt , (UINT16) event, (void *)p_data, param_len,
2070         (param_len > sizeof(tBTA_DM_SEARCH)) ? search_devices_copy_cb : NULL);
2071 }
2072 
2073 /*******************************************************************************
2074 **
2075 ** Function         bte_dm_search_services_evt
2076 **
2077 ** Description      Switches context from BTE to BTIF for DM search services
2078 **                  event
2079 **
2080 ** Returns          void
2081 **
2082 *******************************************************************************/
bte_dm_search_services_evt(tBTA_DM_SEARCH_EVT event,tBTA_DM_SEARCH * p_data)2083 static void bte_dm_search_services_evt(tBTA_DM_SEARCH_EVT event, tBTA_DM_SEARCH *p_data)
2084 {
2085     UINT16 param_len = 0;
2086    if (p_data)
2087        param_len += sizeof(tBTA_DM_SEARCH);
2088    switch (event)
2089    {
2090          case BTA_DM_DISC_RES_EVT:
2091          {
2092              if ((p_data->disc_res.result == BTA_SUCCESS) && (p_data->disc_res.num_uuids > 0)) {
2093                   param_len += (p_data->disc_res.num_uuids * MAX_UUID_SIZE);
2094              }
2095          } break;
2096    }
2097    /* TODO: The only other member that needs a deep copy is the p_raw_data. But not sure
2098     * if raw_data is needed. */
2099    btif_transfer_context(btif_dm_search_services_evt, event, (char*)p_data, param_len,
2100          (param_len > sizeof(tBTA_DM_SEARCH)) ? search_services_copy_cb : NULL);
2101 }
2102 
2103 /*******************************************************************************
2104 **
2105 ** Function         bte_dm_remote_service_record_evt
2106 **
2107 ** Description      Switches context from BTE to BTIF for DM search service
2108 **                  record event
2109 **
2110 ** Returns          void
2111 **
2112 *******************************************************************************/
bte_dm_remote_service_record_evt(tBTA_DM_SEARCH_EVT event,tBTA_DM_SEARCH * p_data)2113 static void bte_dm_remote_service_record_evt(tBTA_DM_SEARCH_EVT event, tBTA_DM_SEARCH *p_data)
2114 {
2115    /* TODO: The only member that needs a deep copy is the p_raw_data. But not sure yet if this is needed. */
2116    btif_transfer_context(btif_dm_remote_service_record_evt, event, (char*)p_data, sizeof(tBTA_DM_SEARCH), NULL);
2117 }
2118 
2119 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2120 /*******************************************************************************
2121 **
2122 ** Function         bta_energy_info_cb
2123 **
2124 ** Description      Switches context from BTE to BTIF for DM energy info event
2125 **
2126 ** Returns          void
2127 **
2128 *******************************************************************************/
bta_energy_info_cb(tBTA_DM_BLE_TX_TIME_MS tx_time,tBTA_DM_BLE_RX_TIME_MS rx_time,tBTA_DM_BLE_IDLE_TIME_MS idle_time,tBTA_DM_BLE_ENERGY_USED energy_used,tBTA_DM_CONTRL_STATE ctrl_state,tBTA_STATUS status)2129 static void bta_energy_info_cb(tBTA_DM_BLE_TX_TIME_MS tx_time, tBTA_DM_BLE_RX_TIME_MS rx_time,
2130                                     tBTA_DM_BLE_IDLE_TIME_MS idle_time,
2131                                     tBTA_DM_BLE_ENERGY_USED energy_used,
2132                                     tBTA_DM_CONTRL_STATE ctrl_state, tBTA_STATUS status)
2133 {
2134     BTIF_TRACE_DEBUG("energy_info_cb-Status:%d,state=%d,tx_t=%ld, rx_t=%ld, idle_time=%ld,used=%ld",
2135         status, ctrl_state, tx_time, rx_time, idle_time, energy_used);
2136 
2137     btif_activity_energy_info_cb_t btif_cb;
2138     btif_cb.status = status;
2139     btif_cb.ctrl_state = ctrl_state;
2140     btif_cb.tx_time = (uint64_t) tx_time;
2141     btif_cb.rx_time = (uint64_t) rx_time;
2142     btif_cb.idle_time =(uint64_t) idle_time;
2143     btif_cb.energy_used =(uint64_t) energy_used;
2144     btif_transfer_context(btif_dm_upstreams_evt, BTA_DM_ENER_INFO_READ,
2145                           (char*) &btif_cb, sizeof(btif_activity_energy_info_cb_t), NULL);
2146 }
2147 #endif
2148 
2149 /*******************************************************************************
2150 **
2151 ** Function         bte_scan_filt_param_cfg_evt
2152 **
2153 ** Description      Scan filter param config event
2154 **
2155 ** Returns          void
2156 **
2157 *******************************************************************************/
bte_scan_filt_param_cfg_evt(UINT8 action_type,tBTA_DM_BLE_PF_AVBL_SPACE avbl_space,tBTA_DM_BLE_REF_VALUE ref_value,tBTA_STATUS status)2158 static void bte_scan_filt_param_cfg_evt(UINT8 action_type,
2159                                         tBTA_DM_BLE_PF_AVBL_SPACE avbl_space,
2160                                         tBTA_DM_BLE_REF_VALUE ref_value, tBTA_STATUS status)
2161 {
2162     /* This event occurs on calling BTA_DmBleCfgFilterCondition internally,
2163     ** and that is why there is no HAL callback
2164     */
2165     if(BTA_SUCCESS != status)
2166     {
2167         BTIF_TRACE_ERROR("%s, %d", __FUNCTION__, status);
2168     }
2169     else
2170     {
2171         BTIF_TRACE_DEBUG("%s", __FUNCTION__);
2172     }
2173 }
2174 
2175 /*****************************************************************************
2176 **
2177 **   btif api functions (no context switch)
2178 **
2179 *****************************************************************************/
2180 
2181 /*******************************************************************************
2182 **
2183 ** Function         btif_dm_start_discovery
2184 **
2185 ** Description      Start device discovery/inquiry
2186 **
2187 ** Returns          bt_status_t
2188 **
2189 *******************************************************************************/
btif_dm_start_discovery(void)2190 bt_status_t btif_dm_start_discovery(void)
2191 {
2192     tBTA_DM_INQ inq_params;
2193     tBTA_SERVICE_MASK services = 0;
2194     tBTA_DM_BLE_PF_FILT_PARAMS adv_filt_param;
2195 
2196     BTIF_TRACE_EVENT("%s", __FUNCTION__);
2197 
2198 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2199     memset(&adv_filt_param, 0, sizeof(tBTA_DM_BLE_PF_FILT_PARAMS));
2200     /* Cleanup anything remaining on index 0 */
2201     BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_DELETE, 0, &adv_filt_param, NULL,
2202                              bte_scan_filt_param_cfg_evt, 0);
2203 
2204     /* Add an allow-all filter on index 0*/
2205     adv_filt_param.dely_mode = IMMEDIATE_DELY_MODE;
2206     adv_filt_param.feat_seln = ALLOW_ALL_FILTER;
2207     adv_filt_param.filt_logic_type = BTA_DM_BLE_PF_FILT_LOGIC_OR;
2208     adv_filt_param.list_logic_type = BTA_DM_BLE_PF_LIST_LOGIC_OR;
2209     adv_filt_param.rssi_low_thres = LOWEST_RSSI_VALUE;
2210     adv_filt_param.rssi_high_thres = LOWEST_RSSI_VALUE;
2211     BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_ADD, 0, &adv_filt_param, NULL,
2212                              bte_scan_filt_param_cfg_evt, 0);
2213 
2214     /* TODO: Do we need to handle multiple inquiries at the same time? */
2215 
2216     /* Set inquiry params and call API */
2217     inq_params.mode = BTA_DM_GENERAL_INQUIRY|BTA_BLE_GENERAL_INQUIRY;
2218 #if (defined(BTA_HOST_INTERLEAVE_SEARCH) && BTA_HOST_INTERLEAVE_SEARCH == TRUE)
2219     inq_params.intl_duration[0]= BTIF_DM_INTERLEAVE_DURATION_BR_ONE;
2220     inq_params.intl_duration[1]= BTIF_DM_INTERLEAVE_DURATION_LE_ONE;
2221     inq_params.intl_duration[2]= BTIF_DM_INTERLEAVE_DURATION_BR_TWO;
2222     inq_params.intl_duration[3]= BTIF_DM_INTERLEAVE_DURATION_LE_TWO;
2223 #endif
2224 #else
2225     inq_params.mode = BTA_DM_GENERAL_INQUIRY;
2226 #endif
2227     inq_params.duration = BTIF_DM_DEFAULT_INQ_MAX_DURATION;
2228 
2229     inq_params.max_resps = BTIF_DM_DEFAULT_INQ_MAX_RESULTS;
2230     inq_params.report_dup = TRUE;
2231 
2232     inq_params.filter_type = BTA_DM_INQ_CLR;
2233     /* TODO: Filter device by BDA needs to be implemented here */
2234 
2235     /* Will be enabled to TRUE once inquiry busy level has been received */
2236     btif_dm_inquiry_in_progress = FALSE;
2237     /* find nearby devices */
2238     BTA_DmSearch(&inq_params, services, bte_search_devices_evt);
2239 
2240     return BT_STATUS_SUCCESS;
2241 }
2242 
2243 /*******************************************************************************
2244 **
2245 ** Function         btif_dm_cancel_discovery
2246 **
2247 ** Description      Cancels search
2248 **
2249 ** Returns          bt_status_t
2250 **
2251 *******************************************************************************/
btif_dm_cancel_discovery(void)2252 bt_status_t btif_dm_cancel_discovery(void)
2253 {
2254     BTIF_TRACE_EVENT("%s", __FUNCTION__);
2255     BTA_DmSearchCancel();
2256     return BT_STATUS_SUCCESS;
2257 }
2258 
2259 /*******************************************************************************
2260 **
2261 ** Function         btif_dm_create_bond
2262 **
2263 ** Description      Initiate bonding with the specified device
2264 **
2265 ** Returns          bt_status_t
2266 **
2267 *******************************************************************************/
btif_dm_create_bond(const bt_bdaddr_t * bd_addr,int transport)2268 bt_status_t btif_dm_create_bond(const bt_bdaddr_t *bd_addr, int transport)
2269 {
2270     btif_dm_create_bond_cb_t create_bond_cb;
2271     create_bond_cb.transport = transport;
2272     bdcpy(create_bond_cb.bdaddr.address, bd_addr->address);
2273 
2274     bdstr_t bdstr;
2275     BTIF_TRACE_EVENT("%s: bd_addr=%s, transport=%d", __FUNCTION__,
2276             bd2str((bt_bdaddr_t *) bd_addr, &bdstr), transport);
2277     if (pairing_cb.state != BT_BOND_STATE_NONE)
2278         return BT_STATUS_BUSY;
2279 
2280     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_CREATE_BOND,
2281                           (char *)&create_bond_cb, sizeof(btif_dm_create_bond_cb_t), NULL);
2282 
2283     return BT_STATUS_SUCCESS;
2284 }
2285 
2286 /*******************************************************************************
2287 **
2288 ** Function         btif_dm_cancel_bond
2289 **
2290 ** Description      Initiate bonding with the specified device
2291 **
2292 ** Returns          bt_status_t
2293 **
2294 *******************************************************************************/
2295 
btif_dm_cancel_bond(const bt_bdaddr_t * bd_addr)2296 bt_status_t btif_dm_cancel_bond(const bt_bdaddr_t *bd_addr)
2297 {
2298     bdstr_t bdstr;
2299 
2300     BTIF_TRACE_EVENT("%s: bd_addr=%s", __FUNCTION__, bd2str((bt_bdaddr_t *)bd_addr, &bdstr));
2301 
2302     /* TODO:
2303     **  1. Restore scan modes
2304     **  2. special handling for HID devices
2305     */
2306     if (pairing_cb.state == BT_BOND_STATE_BONDING)
2307     {
2308 
2309 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2310 
2311         if (pairing_cb.is_ssp)
2312         {
2313             if (pairing_cb.is_le_only)
2314             {
2315                 BTA_DmBleSecurityGrant((UINT8 *)bd_addr->address,BTA_DM_SEC_PAIR_NOT_SPT);
2316             }
2317             else
2318             {
2319                 BTA_DmConfirm( (UINT8 *)bd_addr->address, FALSE);
2320                 BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2321                 btif_storage_remove_bonded_device((bt_bdaddr_t *)bd_addr);
2322             }
2323         }
2324         else
2325         {
2326             if (pairing_cb.is_le_only)
2327             {
2328                 BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2329             }
2330             else
2331             {
2332                 BTA_DmPinReply( (UINT8 *)bd_addr->address, FALSE, 0, NULL);
2333             }
2334         /* Cancel bonding, in case it is in ACL connection setup state */
2335         BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2336         }
2337 
2338 #else
2339         if (pairing_cb.is_ssp)
2340         {
2341             BTA_DmConfirm( (UINT8 *)bd_addr->address, FALSE);
2342         }
2343         else
2344         {
2345             BTA_DmPinReply( (UINT8 *)bd_addr->address, FALSE, 0, NULL);
2346         }
2347         /* Cancel bonding, in case it is in ACL connection setup state */
2348         BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2349         btif_storage_remove_bonded_device((bt_bdaddr_t *)bd_addr);
2350 #endif
2351     }
2352 
2353     return BT_STATUS_SUCCESS;
2354 }
2355 
2356 /*******************************************************************************
2357 **
2358 ** Function         btif_dm_hh_open_failed
2359 **
2360 ** Description      informs the upper layers if the HH have failed during bonding
2361 **
2362 ** Returns          none
2363 **
2364 *******************************************************************************/
2365 
btif_dm_hh_open_failed(bt_bdaddr_t * bdaddr)2366 void btif_dm_hh_open_failed(bt_bdaddr_t *bdaddr)
2367 {
2368     if (pairing_cb.state == BT_BOND_STATE_BONDING &&
2369             bdcmp(bdaddr->address, pairing_cb.bd_addr) == 0)
2370     {
2371         bond_state_changed(BT_STATUS_FAIL, bdaddr, BT_BOND_STATE_NONE);
2372     }
2373 }
2374 
2375 /*******************************************************************************
2376 **
2377 ** Function         btif_dm_remove_bond
2378 **
2379 ** Description      Removes bonding with the specified device
2380 **
2381 ** Returns          bt_status_t
2382 **
2383 *******************************************************************************/
2384 
btif_dm_remove_bond(const bt_bdaddr_t * bd_addr)2385 bt_status_t btif_dm_remove_bond(const bt_bdaddr_t *bd_addr)
2386 {
2387     bdstr_t bdstr;
2388 
2389     BTIF_TRACE_EVENT("%s: bd_addr=%s", __FUNCTION__, bd2str((bt_bdaddr_t *)bd_addr, &bdstr));
2390     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_REMOVE_BOND,
2391                           (char *)bd_addr, sizeof(bt_bdaddr_t), NULL);
2392 
2393     return BT_STATUS_SUCCESS;
2394 }
2395 
2396 /*******************************************************************************
2397 **
2398 ** Function         btif_dm_pin_reply
2399 **
2400 ** Description      BT legacy pairing - PIN code reply
2401 **
2402 ** Returns          bt_status_t
2403 **
2404 *******************************************************************************/
2405 
btif_dm_pin_reply(const bt_bdaddr_t * bd_addr,uint8_t accept,uint8_t pin_len,bt_pin_code_t * pin_code)2406 bt_status_t btif_dm_pin_reply( const bt_bdaddr_t *bd_addr, uint8_t accept,
2407                                uint8_t pin_len, bt_pin_code_t *pin_code)
2408 {
2409     BTIF_TRACE_EVENT("%s: accept=%d", __FUNCTION__, accept);
2410     if (pin_code == NULL)
2411         return BT_STATUS_FAIL;
2412 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2413 
2414     if (pairing_cb.is_le_only)
2415     {
2416         int i;
2417         UINT32 passkey = 0;
2418         int multi[] = {100000, 10000, 1000, 100, 10,1};
2419         BD_ADDR remote_bd_addr;
2420         bdcpy(remote_bd_addr, bd_addr->address);
2421         for (i = 0; i < 6; i++)
2422         {
2423             passkey += (multi[i] * (pin_code->pin[i] - '0'));
2424         }
2425         BTIF_TRACE_DEBUG("btif_dm_pin_reply: passkey: %d", passkey);
2426         BTA_DmBlePasskeyReply(remote_bd_addr, accept, passkey);
2427 
2428     }
2429     else
2430     {
2431         BTA_DmPinReply( (UINT8 *)bd_addr->address, accept, pin_len, pin_code->pin);
2432         if (accept)
2433             pairing_cb.pin_code_len = pin_len;
2434     }
2435 #else
2436     BTA_DmPinReply( (UINT8 *)bd_addr->address, accept, pin_len, pin_code->pin);
2437 
2438     if (accept)
2439         pairing_cb.pin_code_len = pin_len;
2440 #endif
2441     return BT_STATUS_SUCCESS;
2442 }
2443 
2444 /*******************************************************************************
2445 **
2446 ** Function         btif_dm_ssp_reply
2447 **
2448 ** Description      BT SSP Reply - Just Works, Numeric Comparison & Passkey Entry
2449 **
2450 ** Returns          bt_status_t
2451 **
2452 *******************************************************************************/
btif_dm_ssp_reply(const bt_bdaddr_t * bd_addr,bt_ssp_variant_t variant,uint8_t accept,uint32_t passkey)2453 bt_status_t btif_dm_ssp_reply(const bt_bdaddr_t *bd_addr,
2454                                  bt_ssp_variant_t variant, uint8_t accept,
2455                                  uint32_t passkey)
2456 {
2457     UNUSED(passkey);
2458 
2459     if (variant == BT_SSP_VARIANT_PASSKEY_ENTRY)
2460     {
2461         /* This is not implemented in the stack.
2462          * For devices with display, this is not needed
2463         */
2464         BTIF_TRACE_WARNING("%s: Not implemented", __FUNCTION__);
2465         return BT_STATUS_FAIL;
2466     }
2467     /* BT_SSP_VARIANT_CONSENT & BT_SSP_VARIANT_PASSKEY_CONFIRMATION supported */
2468     BTIF_TRACE_EVENT("%s: accept=%d", __FUNCTION__, accept);
2469 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2470     if (pairing_cb.is_le_only)
2471     {
2472         if (accept)
2473             BTA_DmBleSecurityGrant((UINT8 *)bd_addr->address,BTA_DM_SEC_GRANTED);
2474         else
2475             BTA_DmBleSecurityGrant((UINT8 *)bd_addr->address,BTA_DM_SEC_PAIR_NOT_SPT);
2476     }
2477     else
2478         BTA_DmConfirm( (UINT8 *)bd_addr->address, accept);
2479 
2480 #else
2481     BTA_DmConfirm( (UINT8 *)bd_addr->address, accept);
2482 #endif
2483     return BT_STATUS_SUCCESS;
2484 }
2485 
2486 /*******************************************************************************
2487 **
2488 ** Function         btif_dm_get_adapter_property
2489 **
2490 ** Description     Queries the BTA for the adapter property
2491 **
2492 ** Returns          bt_status_t
2493 **
2494 *******************************************************************************/
btif_dm_get_adapter_property(bt_property_t * prop)2495 bt_status_t btif_dm_get_adapter_property(bt_property_t *prop)
2496 {
2497     bt_status_t status;
2498 
2499     BTIF_TRACE_EVENT("%s: type=0x%x", __FUNCTION__, prop->type);
2500     switch (prop->type)
2501     {
2502         case BT_PROPERTY_BDNAME:
2503         {
2504             bt_bdname_t *bd_name = (bt_bdname_t*)prop->val;
2505             strcpy((char *)bd_name->name, btif_get_default_local_name());
2506             prop->len = strlen((char *)bd_name->name);
2507         }
2508         break;
2509 
2510         case BT_PROPERTY_ADAPTER_SCAN_MODE:
2511         {
2512             /* if the storage does not have it. Most likely app never set it. Default is NONE */
2513             bt_scan_mode_t *mode = (bt_scan_mode_t*)prop->val;
2514             *mode = BT_SCAN_MODE_NONE;
2515             prop->len = sizeof(bt_scan_mode_t);
2516         }
2517         break;
2518 
2519         case BT_PROPERTY_ADAPTER_DISCOVERY_TIMEOUT:
2520         {
2521             uint32_t *tmt = (uint32_t*)prop->val;
2522             *tmt = 120; /* default to 120s, if not found in NV */
2523             prop->len = sizeof(uint32_t);
2524         }
2525         break;
2526 
2527         default:
2528             prop->len = 0;
2529             return BT_STATUS_FAIL;
2530     }
2531     return BT_STATUS_SUCCESS;
2532 }
2533 
2534 /*******************************************************************************
2535 **
2536 ** Function         btif_dm_get_remote_services
2537 **
2538 ** Description      Start SDP to get remote services
2539 **
2540 ** Returns          bt_status_t
2541 **
2542 *******************************************************************************/
btif_dm_get_remote_services(bt_bdaddr_t * remote_addr)2543 bt_status_t btif_dm_get_remote_services(bt_bdaddr_t *remote_addr)
2544 {
2545     bdstr_t bdstr;
2546 
2547     BTIF_TRACE_EVENT("%s: remote_addr=%s", __FUNCTION__, bd2str(remote_addr, &bdstr));
2548 
2549     BTA_DmDiscover(remote_addr->address, BTA_ALL_SERVICE_MASK,
2550                    bte_dm_search_services_evt, TRUE);
2551 
2552     return BT_STATUS_SUCCESS;
2553 }
2554 
2555 /*******************************************************************************
2556 **
2557 ** Function         btif_dm_get_remote_service_record
2558 **
2559 ** Description      Start SDP to get remote service record
2560 **
2561 **
2562 ** Returns          bt_status_t
2563 *******************************************************************************/
btif_dm_get_remote_service_record(bt_bdaddr_t * remote_addr,bt_uuid_t * uuid)2564 bt_status_t btif_dm_get_remote_service_record(bt_bdaddr_t *remote_addr,
2565                                                     bt_uuid_t *uuid)
2566 {
2567     tSDP_UUID sdp_uuid;
2568     bdstr_t bdstr;
2569 
2570     BTIF_TRACE_EVENT("%s: remote_addr=%s", __FUNCTION__, bd2str(remote_addr, &bdstr));
2571 
2572     sdp_uuid.len = MAX_UUID_SIZE;
2573     memcpy(sdp_uuid.uu.uuid128, uuid->uu, MAX_UUID_SIZE);
2574 
2575     BTA_DmDiscoverUUID(remote_addr->address, &sdp_uuid,
2576                        bte_dm_remote_service_record_evt, TRUE);
2577 
2578     return BT_STATUS_SUCCESS;
2579 }
2580 
btif_dm_execute_service_request(UINT16 event,char * p_param)2581 void btif_dm_execute_service_request(UINT16 event, char *p_param)
2582 {
2583     BOOLEAN b_enable = FALSE;
2584     bt_status_t status;
2585     if (event == BTIF_DM_ENABLE_SERVICE)
2586     {
2587         b_enable = TRUE;
2588     }
2589     status = btif_in_execute_service_request(*((tBTA_SERVICE_ID*)p_param), b_enable);
2590     if (status == BT_STATUS_SUCCESS)
2591     {
2592         bt_property_t property;
2593         bt_uuid_t local_uuids[BT_MAX_NUM_UUIDS];
2594 
2595         /* Now send the UUID_PROPERTY_CHANGED event to the upper layer */
2596         BTIF_STORAGE_FILL_PROPERTY(&property, BT_PROPERTY_UUIDS,
2597                                     sizeof(local_uuids), local_uuids);
2598         btif_storage_get_adapter_property(&property);
2599         HAL_CBACK(bt_hal_cbacks, adapter_properties_cb,
2600                           BT_STATUS_SUCCESS, 1, &property);
2601     }
2602     return;
2603 }
2604 
btif_dm_proc_io_req(BD_ADDR bd_addr,tBTA_IO_CAP * p_io_cap,tBTA_OOB_DATA * p_oob_data,tBTA_AUTH_REQ * p_auth_req,BOOLEAN is_orig)2605 void btif_dm_proc_io_req(BD_ADDR bd_addr, tBTA_IO_CAP *p_io_cap, tBTA_OOB_DATA *p_oob_data,
2606                       tBTA_AUTH_REQ *p_auth_req, BOOLEAN is_orig)
2607 {
2608     UINT8   yes_no_bit = BTA_AUTH_SP_YES & *p_auth_req;
2609     /* if local initiated:
2610     **      1. set DD + MITM
2611     ** if remote initiated:
2612     **      1. Copy over the auth_req from peer's io_rsp
2613     **      2. Set the MITM if peer has it set or if peer has DisplayYesNo (iPhone)
2614     ** as a fallback set MITM+GB if peer had MITM set
2615     */
2616     UNUSED (bd_addr);
2617     UNUSED (p_io_cap);
2618     UNUSED (p_oob_data);
2619 
2620 
2621     BTIF_TRACE_DEBUG("+%s: p_auth_req=%d", __FUNCTION__, *p_auth_req);
2622     if(pairing_cb.is_local_initiated)
2623     {
2624         /* if initing/responding to a dedicated bonding, use dedicate bonding bit */
2625         *p_auth_req = BTA_AUTH_DD_BOND | BTA_AUTH_SP_YES;
2626     }
2627     else if (!is_orig)
2628     {
2629         /* peer initiated paring. They probably know what they want.
2630         ** Copy the mitm from peer device.
2631         */
2632         BTIF_TRACE_DEBUG("%s: setting p_auth_req to peer's: %d",
2633                 __FUNCTION__, pairing_cb.auth_req);
2634         *p_auth_req = (pairing_cb.auth_req & BTA_AUTH_BONDS);
2635 
2636         /* copy over the MITM bit as well. In addition if the peer has DisplayYesNo, force MITM */
2637         if ((yes_no_bit) || (pairing_cb.io_cap & BTM_IO_CAP_IO) )
2638             *p_auth_req |= BTA_AUTH_SP_YES;
2639     }
2640     else if (yes_no_bit)
2641     {
2642         /* set the general bonding bit for stored device */
2643         *p_auth_req = BTA_AUTH_GEN_BOND | yes_no_bit;
2644     }
2645     BTIF_TRACE_DEBUG("-%s: p_auth_req=%d", __FUNCTION__, *p_auth_req);
2646 }
2647 
btif_dm_proc_io_rsp(BD_ADDR bd_addr,tBTA_IO_CAP io_cap,tBTA_OOB_DATA oob_data,tBTA_AUTH_REQ auth_req)2648 void btif_dm_proc_io_rsp(BD_ADDR bd_addr, tBTA_IO_CAP io_cap,
2649                       tBTA_OOB_DATA oob_data, tBTA_AUTH_REQ auth_req)
2650 {
2651     UNUSED (bd_addr);
2652     UNUSED (oob_data);
2653 
2654     if(auth_req & BTA_AUTH_BONDS)
2655     {
2656         BTIF_TRACE_DEBUG("%s auth_req:%d", __FUNCTION__, auth_req);
2657         pairing_cb.auth_req = auth_req;
2658         pairing_cb.io_cap = io_cap;
2659     }
2660 }
2661 
2662 #if (BTM_OOB_INCLUDED == TRUE)
btif_dm_set_oob_for_io_req(tBTA_OOB_DATA * p_oob_data)2663 void btif_dm_set_oob_for_io_req(tBTA_OOB_DATA  *p_oob_data)
2664 {
2665     if (oob_cb.sp_c[0] == 0 && oob_cb.sp_c[1] == 0 &&
2666         oob_cb.sp_c[2] == 0 && oob_cb.sp_c[3] == 0 )
2667     {
2668         *p_oob_data = FALSE;
2669     }
2670     else
2671     {
2672         *p_oob_data = TRUE;
2673     }
2674     BTIF_TRACE_DEBUG("btif_dm_set_oob_for_io_req *p_oob_data=%d", *p_oob_data);
2675 }
2676 #endif /* BTM_OOB_INCLUDED */
2677 
2678 #ifdef BTIF_DM_OOB_TEST
btif_dm_load_local_oob(void)2679 void btif_dm_load_local_oob(void)
2680 {
2681     char prop_oob[PROPERTY_VALUE_MAX];
2682     property_get("service.brcm.bt.oob", prop_oob, "3");
2683     BTIF_TRACE_DEBUG("btif_dm_load_local_oob prop_oob = %s",prop_oob);
2684     if (prop_oob[0] != '3')
2685     {
2686 #if (BTM_OOB_INCLUDED == TRUE)
2687         if (oob_cb.sp_c[0] == 0 && oob_cb.sp_c[1] == 0 &&
2688             oob_cb.sp_c[2] == 0 && oob_cb.sp_c[3] == 0 )
2689         {
2690             BTIF_TRACE_DEBUG("btif_dm_load_local_oob: read OOB, call BTA_DmLocalOob()");
2691             BTA_DmLocalOob();
2692         }
2693 #else
2694         BTIF_TRACE_ERROR("BTM_OOB_INCLUDED is FALSE!!(btif_dm_load_local_oob)");
2695 #endif
2696     }
2697 }
2698 
btif_dm_proc_loc_oob(BOOLEAN valid,BT_OCTET16 c,BT_OCTET16 r)2699 void btif_dm_proc_loc_oob(BOOLEAN valid, BT_OCTET16 c, BT_OCTET16 r)
2700 {
2701     FILE *fp;
2702     char *path_a = "/data/misc/bluedroid/LOCAL/a.key";
2703     char *path_b = "/data/misc/bluedroid/LOCAL/b.key";
2704     char *path = NULL;
2705     char prop_oob[PROPERTY_VALUE_MAX];
2706     BTIF_TRACE_DEBUG("btif_dm_proc_loc_oob: valid=%d", valid);
2707     if (oob_cb.sp_c[0] == 0 && oob_cb.sp_c[1] == 0 &&
2708         oob_cb.sp_c[2] == 0 && oob_cb.sp_c[3] == 0 &&
2709         valid)
2710     {
2711         BTIF_TRACE_DEBUG("save local OOB data in memory");
2712         memcpy(oob_cb.sp_c, c, BT_OCTET16_LEN);
2713         memcpy(oob_cb.sp_r, r, BT_OCTET16_LEN);
2714         property_get("service.brcm.bt.oob", prop_oob, "3");
2715         BTIF_TRACE_DEBUG("btif_dm_proc_loc_oob prop_oob = %s",prop_oob);
2716         if (prop_oob[0] == '1')
2717             path = path_a;
2718         else if (prop_oob[0] == '2')
2719             path = path_b;
2720         if (path)
2721         {
2722             fp = fopen(path, "wb+");
2723             if (fp == NULL)
2724             {
2725                 BTIF_TRACE_DEBUG("btif_dm_proc_loc_oob: failed to save local OOB data to %s", path);
2726             }
2727             else
2728             {
2729                 BTIF_TRACE_DEBUG("btif_dm_proc_loc_oob: save local OOB data into file %s",path);
2730                 fwrite (c , 1 , BT_OCTET16_LEN , fp );
2731                 fwrite (r , 1 , BT_OCTET16_LEN , fp );
2732                 fclose(fp);
2733             }
2734         }
2735     }
2736 }
btif_dm_proc_rmt_oob(BD_ADDR bd_addr,BT_OCTET16 p_c,BT_OCTET16 p_r)2737 BOOLEAN btif_dm_proc_rmt_oob(BD_ADDR bd_addr,  BT_OCTET16 p_c, BT_OCTET16 p_r)
2738 {
2739     char t[128];
2740     FILE *fp;
2741     char *path_a = "/data/misc/bluedroid/LOCAL/a.key";
2742     char *path_b = "/data/misc/bluedroid/LOCAL/b.key";
2743     char *path = NULL;
2744     char prop_oob[PROPERTY_VALUE_MAX];
2745     BOOLEAN result = FALSE;
2746     bt_bdaddr_t bt_bd_addr;
2747     bdcpy(oob_cb.oob_bdaddr, bd_addr);
2748     property_get("service.brcm.bt.oob", prop_oob, "3");
2749     BTIF_TRACE_DEBUG("btif_dm_proc_rmt_oob prop_oob = %s",prop_oob);
2750     if (prop_oob[0] == '1')
2751         path = path_b;
2752     else if (prop_oob[0] == '2')
2753         path = path_a;
2754     if (path)
2755     {
2756         fp = fopen(path, "rb");
2757         if (fp == NULL)
2758         {
2759             BTIF_TRACE_DEBUG("btapp_dm_rmt_oob_reply: failed to read OOB keys from %s",path);
2760             return FALSE;
2761         }
2762         else
2763         {
2764             BTIF_TRACE_DEBUG("btif_dm_proc_rmt_oob: read OOB data from %s",path);
2765             fread (p_c , 1 , BT_OCTET16_LEN , fp );
2766             fread (p_r , 1 , BT_OCTET16_LEN , fp );
2767             fclose(fp);
2768         }
2769         BTIF_TRACE_DEBUG("----btif_dm_proc_rmt_oob: TRUE");
2770         sprintf(t, "%02x:%02x:%02x:%02x:%02x:%02x",
2771                 oob_cb.oob_bdaddr[0], oob_cb.oob_bdaddr[1], oob_cb.oob_bdaddr[2],
2772                 oob_cb.oob_bdaddr[3], oob_cb.oob_bdaddr[4], oob_cb.oob_bdaddr[5]);
2773         BTIF_TRACE_DEBUG("----btif_dm_proc_rmt_oob: peer_bdaddr = %s", t);
2774         sprintf(t, "%02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x",
2775                 p_c[0], p_c[1], p_c[2],  p_c[3],  p_c[4],  p_c[5],  p_c[6],  p_c[7],
2776                 p_c[8], p_c[9], p_c[10], p_c[11], p_c[12], p_c[13], p_c[14], p_c[15]);
2777         BTIF_TRACE_DEBUG("----btif_dm_proc_rmt_oob: c = %s",t);
2778         sprintf(t, "%02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x",
2779                 p_r[0], p_r[1], p_r[2],  p_r[3],  p_r[4],  p_r[5],  p_r[6],  p_r[7],
2780                 p_r[8], p_r[9], p_r[10], p_r[11], p_r[12], p_r[13], p_r[14], p_r[15]);
2781         BTIF_TRACE_DEBUG("----btif_dm_proc_rmt_oob: r = %s",t);
2782         bdcpy(bt_bd_addr.address, bd_addr);
2783         btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_BOND_STATE_BONDING,
2784                               (char *)&bt_bd_addr, sizeof(bt_bdaddr_t), NULL);
2785         result = TRUE;
2786     }
2787     BTIF_TRACE_DEBUG("btif_dm_proc_rmt_oob result=%d",result);
2788     return result;
2789 }
2790 #endif /*  BTIF_DM_OOB_TEST */
2791 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2792 
btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF * p_ssp_key_notif)2793 static void btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF *p_ssp_key_notif)
2794 {
2795     bt_bdaddr_t bd_addr;
2796     bt_bdname_t bd_name;
2797     UINT32 cod;
2798     int dev_type;
2799 
2800     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
2801 
2802     /* Remote name update */
2803     if (!btif_get_device_type(p_ssp_key_notif->bd_addr, &dev_type))
2804     {
2805         dev_type = BT_DEVICE_TYPE_BLE;
2806     }
2807     btif_dm_update_ble_remote_properties(p_ssp_key_notif->bd_addr , p_ssp_key_notif->bd_name,
2808                                          (tBT_DEVICE_TYPE) dev_type);
2809     bdcpy(bd_addr.address, p_ssp_key_notif->bd_addr);
2810     memcpy(bd_name.name, p_ssp_key_notif->bd_name, BD_NAME_LEN);
2811 
2812     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
2813     pairing_cb.is_ssp = FALSE;
2814     cod = COD_UNCLASSIFIED;
2815 
2816     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name,
2817               cod, BT_SSP_VARIANT_PASSKEY_NOTIFICATION,
2818               p_ssp_key_notif->passkey);
2819 }
2820 
2821 /*******************************************************************************
2822 **
2823 ** Function         btif_dm_ble_auth_cmpl_evt
2824 **
2825 ** Description      Executes authentication complete event in btif context
2826 **
2827 ** Returns          void
2828 **
2829 *******************************************************************************/
btif_dm_ble_auth_cmpl_evt(tBTA_DM_AUTH_CMPL * p_auth_cmpl)2830 static void btif_dm_ble_auth_cmpl_evt (tBTA_DM_AUTH_CMPL *p_auth_cmpl)
2831 {
2832     /* Save link key, if not temporary */
2833     bt_bdaddr_t bd_addr;
2834     bt_status_t status = BT_STATUS_FAIL;
2835     bt_bond_state_t state = BT_BOND_STATE_NONE;
2836 
2837     bdcpy(bd_addr.address, p_auth_cmpl->bd_addr);
2838     if ( (p_auth_cmpl->success == TRUE) && (p_auth_cmpl->key_present) )
2839     {
2840         /* store keys */
2841     }
2842     if (p_auth_cmpl->success)
2843     {
2844         status = BT_STATUS_SUCCESS;
2845         state = BT_BOND_STATE_BONDED;
2846 
2847         btif_dm_save_ble_bonding_keys();
2848         BTA_GATTC_Refresh(bd_addr.address);
2849         btif_dm_get_remote_services(&bd_addr);
2850     }
2851     else
2852     {
2853         /*Map the HCI fail reason  to  bt status  */
2854         switch (p_auth_cmpl->fail_reason)
2855         {
2856             case BTA_DM_AUTH_SMP_PAIR_AUTH_FAIL:
2857             case BTA_DM_AUTH_SMP_CONFIRM_VALUE_FAIL:
2858                 btif_dm_remove_ble_bonding_keys();
2859                 status = BT_STATUS_AUTH_FAILURE;
2860                 break;
2861             case BTA_DM_AUTH_SMP_PAIR_NOT_SUPPORT:
2862                 status = BT_STATUS_AUTH_REJECTED;
2863                 break;
2864             default:
2865                 btif_dm_remove_ble_bonding_keys();
2866                 status =  BT_STATUS_FAIL;
2867                 break;
2868         }
2869     }
2870     bond_state_changed(status, &bd_addr, state);
2871 }
2872 
2873 
2874 
btif_dm_load_ble_local_keys(void)2875 void    btif_dm_load_ble_local_keys(void)
2876 {
2877     bt_status_t bt_status;
2878 
2879     memset(&ble_local_key_cb, 0, sizeof(btif_dm_local_key_cb_t));
2880 
2881     if (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_ER,(char*)&ble_local_key_cb.er[0],
2882                                        BT_OCTET16_LEN)== BT_STATUS_SUCCESS)
2883     {
2884         ble_local_key_cb.is_er_rcvd = TRUE;
2885         BTIF_TRACE_DEBUG("%s BLE ER key loaded",__FUNCTION__ );
2886     }
2887 
2888     if ((btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_IR,(char*)&ble_local_key_cb.id_keys.ir[0],
2889                                         BT_OCTET16_LEN)== BT_STATUS_SUCCESS )&&
2890         (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_IRK, (char*)&ble_local_key_cb.id_keys.irk[0],
2891                                         BT_OCTET16_LEN)== BT_STATUS_SUCCESS)&&
2892         (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_DHK,(char*)&ble_local_key_cb.id_keys.dhk[0],
2893                                         BT_OCTET16_LEN)== BT_STATUS_SUCCESS))
2894     {
2895         ble_local_key_cb.is_id_keys_rcvd = TRUE;
2896         BTIF_TRACE_DEBUG("%s BLE ID keys loaded",__FUNCTION__ );
2897     }
2898 
2899 }
btif_dm_get_ble_local_keys(tBTA_DM_BLE_LOCAL_KEY_MASK * p_key_mask,BT_OCTET16 er,tBTA_BLE_LOCAL_ID_KEYS * p_id_keys)2900 void    btif_dm_get_ble_local_keys(tBTA_DM_BLE_LOCAL_KEY_MASK *p_key_mask, BT_OCTET16 er,
2901                                    tBTA_BLE_LOCAL_ID_KEYS *p_id_keys)
2902 {
2903     if (ble_local_key_cb.is_er_rcvd )
2904     {
2905         memcpy(&er[0], &ble_local_key_cb.er[0], sizeof(BT_OCTET16));
2906         *p_key_mask |= BTA_BLE_LOCAL_KEY_TYPE_ER;
2907     }
2908 
2909     if (ble_local_key_cb.is_id_keys_rcvd)
2910     {
2911         memcpy(&p_id_keys->ir[0], &ble_local_key_cb.id_keys.ir[0], sizeof(BT_OCTET16));
2912         memcpy(&p_id_keys->irk[0],  &ble_local_key_cb.id_keys.irk[0], sizeof(BT_OCTET16));
2913         memcpy(&p_id_keys->dhk[0],  &ble_local_key_cb.id_keys.dhk[0], sizeof(BT_OCTET16));
2914         *p_key_mask |= BTA_BLE_LOCAL_KEY_TYPE_ID;
2915     }
2916     BTIF_TRACE_DEBUG("%s  *p_key_mask=0x%02x",__FUNCTION__,   *p_key_mask);
2917 }
2918 
btif_dm_save_ble_bonding_keys(void)2919 void btif_dm_save_ble_bonding_keys(void)
2920 {
2921 
2922     bt_bdaddr_t bd_addr;
2923 
2924     BTIF_TRACE_DEBUG("%s",__FUNCTION__ );
2925 
2926     bdcpy(bd_addr.address, pairing_cb.bd_addr);
2927 
2928     if (pairing_cb.ble.is_penc_key_rcvd)
2929     {
2930         btif_storage_add_ble_bonding_key(&bd_addr,
2931                                          (char *) &pairing_cb.ble.penc_key,
2932                                          BTIF_DM_LE_KEY_PENC,
2933                                          sizeof(btif_dm_ble_penc_keys_t));
2934     }
2935 
2936     if (pairing_cb.ble.is_pid_key_rcvd)
2937     {
2938         btif_storage_add_ble_bonding_key(&bd_addr,
2939                                          (char *) &pairing_cb.ble.pid_key,
2940                                          BTIF_DM_LE_KEY_PID,
2941                                          sizeof(btif_dm_ble_pid_keys_t));
2942     }
2943 
2944 
2945     if (pairing_cb.ble.is_pcsrk_key_rcvd)
2946     {
2947         btif_storage_add_ble_bonding_key(&bd_addr,
2948                                          (char *) &pairing_cb.ble.pcsrk_key,
2949                                          BTIF_DM_LE_KEY_PCSRK,
2950                                          sizeof(btif_dm_ble_pcsrk_keys_t));
2951     }
2952 
2953 
2954     if (pairing_cb.ble.is_lenc_key_rcvd)
2955     {
2956         btif_storage_add_ble_bonding_key(&bd_addr,
2957                                          (char *) &pairing_cb.ble.lenc_key,
2958                                          BTIF_DM_LE_KEY_LENC,
2959                                          sizeof(btif_dm_ble_lenc_keys_t));
2960     }
2961 
2962     if (pairing_cb.ble.is_lcsrk_key_rcvd)
2963     {
2964         btif_storage_add_ble_bonding_key(&bd_addr,
2965                                          (char *) &pairing_cb.ble.lcsrk_key,
2966                                          BTIF_DM_LE_KEY_LCSRK,
2967                                          sizeof(btif_dm_ble_lcsrk_keys_t));
2968     }
2969 
2970 }
2971 
2972 
btif_dm_remove_ble_bonding_keys(void)2973 void btif_dm_remove_ble_bonding_keys(void)
2974 {
2975     bt_bdaddr_t bd_addr;
2976 
2977     BTIF_TRACE_DEBUG("%s",__FUNCTION__ );
2978 
2979     bdcpy(bd_addr.address, pairing_cb.bd_addr);
2980     btif_storage_remove_ble_bonding_keys(&bd_addr);
2981 }
2982 
2983 
2984 /*******************************************************************************
2985 **
2986 ** Function         btif_dm_ble_sec_req_evt
2987 **
2988 ** Description      Eprocess security request event in btif context
2989 **
2990 ** Returns          void
2991 **
2992 *******************************************************************************/
btif_dm_ble_sec_req_evt(tBTA_DM_BLE_SEC_REQ * p_ble_req)2993 void btif_dm_ble_sec_req_evt(tBTA_DM_BLE_SEC_REQ *p_ble_req)
2994 {
2995     bt_bdaddr_t bd_addr;
2996     bt_bdname_t bd_name;
2997     UINT32 cod;
2998     int dev_type;
2999 
3000     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
3001 
3002     if (pairing_cb.state == BT_BOND_STATE_BONDING)
3003     {
3004         BTIF_TRACE_DEBUG("%s Discard security request", __FUNCTION__);
3005         return;
3006     }
3007 
3008     /* Remote name update */
3009     if (!btif_get_device_type(p_ble_req->bd_addr, &dev_type))
3010     {
3011         dev_type = BT_DEVICE_TYPE_BLE;
3012     }
3013     btif_dm_update_ble_remote_properties(p_ble_req->bd_addr, p_ble_req->bd_name,
3014                                          (tBT_DEVICE_TYPE) dev_type);
3015 
3016     bdcpy(bd_addr.address, p_ble_req->bd_addr);
3017     memcpy(bd_name.name, p_ble_req->bd_name, BD_NAME_LEN);
3018 
3019     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3020 
3021     pairing_cb.bond_type = BOND_TYPE_PERSISTENT;
3022     pairing_cb.is_le_only = TRUE;
3023     pairing_cb.is_ssp = TRUE;
3024 
3025     cod = COD_UNCLASSIFIED;
3026 
3027     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name, cod,
3028               BT_SSP_VARIANT_CONSENT, 0);
3029 }
3030 
3031 
3032 
3033 /*******************************************************************************
3034 **
3035 ** Function         btif_dm_ble_passkey_req_evt
3036 **
3037 ** Description      Executes pin request event in btif context
3038 **
3039 ** Returns          void
3040 **
3041 *******************************************************************************/
btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ * p_pin_req)3042 static void btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ *p_pin_req)
3043 {
3044     bt_bdaddr_t bd_addr;
3045     bt_bdname_t bd_name;
3046     UINT32 cod;
3047     int dev_type;
3048 
3049     /* Remote name update */
3050     if (!btif_get_device_type(p_pin_req->bd_addr, &dev_type))
3051     {
3052         dev_type = BT_DEVICE_TYPE_BLE;
3053     }
3054     btif_dm_update_ble_remote_properties(p_pin_req->bd_addr,p_pin_req->bd_name,
3055                                          (tBT_DEVICE_TYPE) dev_type);
3056 
3057     bdcpy(bd_addr.address, p_pin_req->bd_addr);
3058     memcpy(bd_name.name, p_pin_req->bd_name, BD_NAME_LEN);
3059 
3060     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3061     pairing_cb.is_le_only = TRUE;
3062 
3063     cod = COD_UNCLASSIFIED;
3064 
3065     HAL_CBACK(bt_hal_cbacks, pin_request_cb,
3066               &bd_addr, &bd_name, cod);
3067 }
3068 
3069 
btif_dm_update_ble_remote_properties(BD_ADDR bd_addr,BD_NAME bd_name,tBT_DEVICE_TYPE dev_type)3070 void btif_dm_update_ble_remote_properties( BD_ADDR bd_addr, BD_NAME bd_name,
3071                                            tBT_DEVICE_TYPE dev_type)
3072 {
3073    btif_update_remote_properties(bd_addr,bd_name,NULL,dev_type);
3074 }
3075 
btif_dm_ble_tx_test_cback(void * p)3076 static void btif_dm_ble_tx_test_cback(void *p)
3077 {
3078     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_LE_TX_TEST,
3079                           (char *)p, 1, NULL);
3080 }
3081 
btif_dm_ble_rx_test_cback(void * p)3082 static void btif_dm_ble_rx_test_cback(void *p)
3083 {
3084     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_LE_RX_TEST,
3085                           (char *)p, 1, NULL);
3086 }
3087 
btif_dm_ble_test_end_cback(void * p)3088 static void btif_dm_ble_test_end_cback(void *p)
3089 {
3090     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_LE_TEST_END,
3091                           (char *)p, 3, NULL);
3092 }
3093 /*******************************************************************************
3094 **
3095 ** Function         btif_le_test_mode
3096 **
3097 ** Description     Sends a HCI BLE Test command to the Controller
3098 **
3099 ** Returns          BT_STATUS_SUCCESS on success
3100 **
3101 *******************************************************************************/
btif_le_test_mode(uint16_t opcode,uint8_t * buf,uint8_t len)3102 bt_status_t btif_le_test_mode(uint16_t opcode, uint8_t *buf, uint8_t len)
3103 {
3104      switch (opcode) {
3105          case HCI_BLE_TRANSMITTER_TEST:
3106              if (len != 3) return BT_STATUS_PARM_INVALID;
3107              BTM_BleTransmitterTest(buf[0],buf[1],buf[2], btif_dm_ble_tx_test_cback);
3108              break;
3109          case HCI_BLE_RECEIVER_TEST:
3110              if (len != 1) return BT_STATUS_PARM_INVALID;
3111              BTM_BleReceiverTest(buf[0], btif_dm_ble_rx_test_cback);
3112              break;
3113          case HCI_BLE_TEST_END:
3114              BTM_BleTestEnd((tBTM_CMPL_CB*) btif_dm_ble_test_end_cback);
3115              break;
3116          default:
3117              BTIF_TRACE_ERROR("%s: Unknown LE Test Mode Command 0x%x", __FUNCTION__, opcode);
3118              return BT_STATUS_UNSUPPORTED;
3119      }
3120      return BT_STATUS_SUCCESS;
3121 }
3122 
3123 #endif
3124 
btif_dm_on_disable()3125 void btif_dm_on_disable()
3126 {
3127     /* cancel any pending pairing requests */
3128     if (pairing_cb.state == BT_BOND_STATE_BONDING)
3129     {
3130         bt_bdaddr_t bd_addr;
3131 
3132         BTIF_TRACE_DEBUG("%s: Cancel pending pairing request", __FUNCTION__);
3133         bdcpy(bd_addr.address, pairing_cb.bd_addr);
3134         btif_dm_cancel_bond(&bd_addr);
3135     }
3136 }
3137 
3138 /*******************************************************************************
3139 **
3140 ** Function         btif_dm_read_energy_info
3141 **
3142 ** Description     Reads the energy info from controller
3143 **
3144 ** Returns         void
3145 **
3146 *******************************************************************************/
btif_dm_read_energy_info()3147 void btif_dm_read_energy_info()
3148 {
3149 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
3150     BTA_DmBleGetEnergyInfo(bta_energy_info_cb);
3151 #endif
3152 }
3153 
btif_get_default_local_name()3154 static char* btif_get_default_local_name() {
3155     if (btif_default_local_name[0] == '\0')
3156     {
3157         int max_len = sizeof(btif_default_local_name) - 1;
3158         if (BTM_DEF_LOCAL_NAME[0] != '\0')
3159         {
3160             strncpy(btif_default_local_name, BTM_DEF_LOCAL_NAME, max_len);
3161         }
3162         else
3163         {
3164             char prop_model[PROPERTY_VALUE_MAX];
3165             property_get(PROPERTY_PRODUCT_MODEL, prop_model, "");
3166             strncpy(btif_default_local_name, prop_model, max_len);
3167         }
3168         btif_default_local_name[max_len] = '\0';
3169     }
3170     return btif_default_local_name;
3171 }
3172