1 /******************************************************************************
2 *
3 * Copyright (C) 1999-2012 Broadcom Corporation
4 *
5 * Licensed under the Apache License, Version 2.0 (the "License");
6 * you may not use this file except in compliance with the License.
7 * You may obtain a copy of the License at:
8 *
9 * http://www.apache.org/licenses/LICENSE-2.0
10 *
11 * Unless required by applicable law or agreed to in writing, software
12 * distributed under the License is distributed on an "AS IS" BASIS,
13 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 * See the License for the specific language governing permissions and
15 * limitations under the License.
16 *
17 ******************************************************************************/
18
19 /******************************************************************************
20 *
21 * This file contains L2CAP interface functions
22 *
23 ******************************************************************************/
24
25 #include <stddef.h>
26 #include "bt_target.h"
27
28 #include "bt_common.h"
29 #include "osi/include/osi.h"
30 #include "osi/include/time.h"
31
32 #include "bt_utils.h"
33 #include "l2c_api.h"
34 #include "l2cdefs.h"
35 #include "port_api.h"
36 #include "port_int.h"
37 #include "rfc_int.h"
38 #include "rfcdefs.h"
39
40 /*
41 * Define Callback functions to be called by L2CAP
42 */
43 static void RFCOMM_ConnectInd(BD_ADDR bd_addr, uint16_t lcid, uint16_t psm,
44 uint8_t id);
45 static void RFCOMM_ConnectCnf(uint16_t lcid, uint16_t err);
46 static void RFCOMM_ConfigInd(uint16_t lcid, tL2CAP_CFG_INFO* p_cfg);
47 static void RFCOMM_ConfigCnf(uint16_t lcid, tL2CAP_CFG_INFO* p_cfg);
48 static void RFCOMM_DisconnectInd(uint16_t lcid, bool is_clear);
49 static void RFCOMM_QoSViolationInd(UNUSED_ATTR BD_ADDR bd_addr);
50 static void RFCOMM_BufDataInd(uint16_t lcid, BT_HDR* p_buf);
51 static void RFCOMM_CongestionStatusInd(uint16_t lcid, bool is_congested);
52
53 /*******************************************************************************
54 *
55 * Function rfcomm_l2cap_if_init
56 *
57 * Description This function is called during the RFCOMM task startup
58 * to register interface functions with L2CAP.
59 *
60 ******************************************************************************/
rfcomm_l2cap_if_init(void)61 void rfcomm_l2cap_if_init(void) {
62 tL2CAP_APPL_INFO* p_l2c = &rfc_cb.rfc.reg_info;
63
64 p_l2c->pL2CA_ConnectInd_Cb = RFCOMM_ConnectInd;
65 p_l2c->pL2CA_ConnectCfm_Cb = RFCOMM_ConnectCnf;
66 p_l2c->pL2CA_ConnectPnd_Cb = NULL;
67 p_l2c->pL2CA_ConfigInd_Cb = RFCOMM_ConfigInd;
68 p_l2c->pL2CA_ConfigCfm_Cb = RFCOMM_ConfigCnf;
69 p_l2c->pL2CA_DisconnectInd_Cb = RFCOMM_DisconnectInd;
70 p_l2c->pL2CA_DisconnectCfm_Cb = NULL;
71 p_l2c->pL2CA_QoSViolationInd_Cb = RFCOMM_QoSViolationInd;
72 p_l2c->pL2CA_DataInd_Cb = RFCOMM_BufDataInd;
73 p_l2c->pL2CA_CongestionStatus_Cb = RFCOMM_CongestionStatusInd;
74 p_l2c->pL2CA_TxComplete_Cb = NULL;
75
76 L2CA_Register(BT_PSM_RFCOMM, p_l2c);
77 }
78
79 /*******************************************************************************
80 *
81 * Function RFCOMM_ConnectInd
82 *
83 * Description This is a callback function called by L2CAP when
84 * L2CA_ConnectInd received. Allocate multiplexer control
85 * block and dispatch the event to it.
86 *
87 ******************************************************************************/
RFCOMM_ConnectInd(BD_ADDR bd_addr,uint16_t lcid,UNUSED_ATTR uint16_t psm,uint8_t id)88 void RFCOMM_ConnectInd(BD_ADDR bd_addr, uint16_t lcid, UNUSED_ATTR uint16_t psm,
89 uint8_t id) {
90 tRFC_MCB* p_mcb = rfc_alloc_multiplexer_channel(bd_addr, false);
91
92 if ((p_mcb) && (p_mcb->state != RFC_MX_STATE_IDLE)) {
93 /* if this is collision case */
94 if ((p_mcb->is_initiator) && (p_mcb->state == RFC_MX_STATE_WAIT_CONN_CNF)) {
95 p_mcb->pending_lcid = lcid;
96 p_mcb->pending_id = id;
97
98 /* wait random timeout (2 - 12) to resolve collision */
99 /* if peer gives up then local device rejects incoming connection and
100 * continues as initiator */
101 /* if timeout, local device disconnects outgoing connection and continues
102 * as acceptor */
103 RFCOMM_TRACE_DEBUG(
104 "RFCOMM_ConnectInd start timer for collision, initiator's "
105 "LCID(0x%x), acceptor's LCID(0x%x)",
106 p_mcb->lcid, p_mcb->pending_lcid);
107
108 rfc_timer_start(p_mcb, (uint16_t)(time_get_os_boottime_ms() % 10 + 2));
109 return;
110 } else {
111 /* we cannot accept connection request from peer at this state */
112 /* don't update lcid */
113 p_mcb = NULL;
114 }
115 } else {
116 /* store mcb even if null */
117 rfc_save_lcid_mcb(p_mcb, lcid);
118 }
119
120 if (p_mcb == NULL) {
121 L2CA_ConnectRsp(bd_addr, id, lcid, L2CAP_CONN_NO_RESOURCES, 0);
122 return;
123 }
124 p_mcb->lcid = lcid;
125
126 rfc_mx_sm_execute(p_mcb, RFC_MX_EVENT_CONN_IND, &id);
127 }
128
129 /*******************************************************************************
130 *
131 * Function RFCOMM_ConnectCnf
132 *
133 * Description This is a callback function called by L2CAP when
134 * L2CA_ConnectCnf received. Save L2CAP handle and dispatch
135 * event to the FSM.
136 *
137 ******************************************************************************/
RFCOMM_ConnectCnf(uint16_t lcid,uint16_t result)138 void RFCOMM_ConnectCnf(uint16_t lcid, uint16_t result) {
139 tRFC_MCB* p_mcb = rfc_find_lcid_mcb(lcid);
140
141 if (!p_mcb) {
142 RFCOMM_TRACE_ERROR("RFCOMM_ConnectCnf LCID:0x%x", lcid);
143 return;
144 }
145
146 if (p_mcb->pending_lcid) {
147 /* if peer rejects our connect request but peer's connect request is pending
148 */
149 if (result != L2CAP_CONN_OK) {
150 uint16_t i;
151 uint8_t idx;
152
153 RFCOMM_TRACE_DEBUG(
154 "RFCOMM_ConnectCnf retry as acceptor on pending LCID(0x%x)",
155 p_mcb->pending_lcid);
156
157 /* remove mcb from mapping table */
158 rfc_save_lcid_mcb(NULL, p_mcb->lcid);
159
160 p_mcb->lcid = p_mcb->pending_lcid;
161 p_mcb->is_initiator = false;
162 p_mcb->state = RFC_MX_STATE_IDLE;
163
164 /* store mcb into mapping table */
165 rfc_save_lcid_mcb(p_mcb, p_mcb->lcid);
166
167 /* update direction bit */
168 for (i = 0; i < RFCOMM_MAX_DLCI; i += 2) {
169 idx = p_mcb->port_inx[i];
170 if (idx != 0) {
171 p_mcb->port_inx[i] = 0;
172 p_mcb->port_inx[i + 1] = idx;
173 rfc_cb.port.port[idx - 1].dlci += 1;
174 RFCOMM_TRACE_DEBUG("RFCOMM MX - DLCI:%d -> %d", i,
175 rfc_cb.port.port[idx - 1].dlci);
176 }
177 }
178
179 rfc_mx_sm_execute(p_mcb, RFC_MX_EVENT_CONN_IND, &(p_mcb->pending_id));
180 return;
181 } else {
182 RFCOMM_TRACE_DEBUG("RFCOMM_ConnectCnf peer gave up pending LCID(0x%x)",
183 p_mcb->pending_lcid);
184
185 /* Peer gave up his connection request, make sure cleaning up L2CAP
186 * channel */
187 L2CA_ConnectRsp(p_mcb->bd_addr, p_mcb->pending_id, p_mcb->pending_lcid,
188 L2CAP_CONN_NO_RESOURCES, 0);
189
190 p_mcb->pending_lcid = 0;
191 }
192 }
193
194 /* Save LCID to be used in all consecutive calls to L2CAP */
195 p_mcb->lcid = lcid;
196
197 rfc_mx_sm_execute(p_mcb, RFC_MX_EVENT_CONN_CNF, &result);
198 }
199
200 /*******************************************************************************
201 *
202 * Function RFCOMM_ConfigInd
203 *
204 * Description This is a callback function called by L2CAP when
205 * L2CA_ConfigInd received. Save parameters in the control
206 * block and dispatch event to the FSM.
207 *
208 ******************************************************************************/
RFCOMM_ConfigInd(uint16_t lcid,tL2CAP_CFG_INFO * p_cfg)209 void RFCOMM_ConfigInd(uint16_t lcid, tL2CAP_CFG_INFO* p_cfg) {
210 tRFC_MCB* p_mcb = rfc_find_lcid_mcb(lcid);
211
212 if (!p_mcb) {
213 RFCOMM_TRACE_ERROR("RFCOMM_ConfigInd LCID:0x%x", lcid);
214 return;
215 }
216
217 rfc_mx_sm_execute(p_mcb, RFC_MX_EVENT_CONF_IND, (void*)p_cfg);
218 }
219
220 /*******************************************************************************
221 *
222 * Function RFCOMM_ConfigCnf
223 *
224 * Description This is a callback function called by L2CAP when
225 * L2CA_ConfigCnf received. Save L2CAP handle and dispatch
226 * event to the FSM.
227 *
228 ******************************************************************************/
RFCOMM_ConfigCnf(uint16_t lcid,tL2CAP_CFG_INFO * p_cfg)229 void RFCOMM_ConfigCnf(uint16_t lcid, tL2CAP_CFG_INFO* p_cfg) {
230 tRFC_MCB* p_mcb = rfc_find_lcid_mcb(lcid);
231
232 if (!p_mcb) {
233 RFCOMM_TRACE_ERROR("RFCOMM_ConfigCnf no MCB LCID:0x%x", lcid);
234 return;
235 }
236
237 rfc_mx_sm_execute(p_mcb, RFC_MX_EVENT_CONF_CNF, (void*)p_cfg);
238 }
239
240 /*******************************************************************************
241 *
242 * Function RFCOMM_QoSViolationInd
243 *
244 * Description This is a callback function called by L2CAP when
245 * L2CA_QoSViolationIndInd received. Dispatch event to the
246 * FSM.
247 *
248 ******************************************************************************/
RFCOMM_QoSViolationInd(UNUSED_ATTR BD_ADDR bd_addr)249 void RFCOMM_QoSViolationInd(UNUSED_ATTR BD_ADDR bd_addr) {}
250
251 /*******************************************************************************
252 *
253 * Function RFCOMM_DisconnectInd
254 *
255 * Description This is a callback function called by L2CAP when
256 * L2CA_DisconnectInd received. Dispatch event to the FSM.
257 *
258 ******************************************************************************/
RFCOMM_DisconnectInd(uint16_t lcid,bool is_conf_needed)259 void RFCOMM_DisconnectInd(uint16_t lcid, bool is_conf_needed) {
260 tRFC_MCB* p_mcb = rfc_find_lcid_mcb(lcid);
261
262 if (is_conf_needed) {
263 L2CA_DisconnectRsp(lcid);
264 }
265
266 if (!p_mcb) {
267 RFCOMM_TRACE_WARNING("RFCOMM_DisconnectInd LCID:0x%x", lcid);
268 return;
269 }
270
271 rfc_mx_sm_execute(p_mcb, RFC_MX_EVENT_DISC_IND, NULL);
272 }
273
274 /*******************************************************************************
275 *
276 * Function RFCOMM_BufDataInd
277 *
278 * Description This is a callback function called by L2CAP when
279 * data RFCOMM frame is received. Parse the frames, check
280 * the checksum and dispatch event to multiplexer or port
281 * state machine depending on the frame destination.
282 *
283 ******************************************************************************/
RFCOMM_BufDataInd(uint16_t lcid,BT_HDR * p_buf)284 void RFCOMM_BufDataInd(uint16_t lcid, BT_HDR* p_buf) {
285 tRFC_MCB* p_mcb = rfc_find_lcid_mcb(lcid);
286 tPORT* p_port;
287 uint8_t event;
288
289 if (!p_mcb) {
290 RFCOMM_TRACE_WARNING("RFCOMM_BufDataInd LCID:0x%x", lcid);
291 osi_free(p_buf);
292 return;
293 }
294
295 event = rfc_parse_data(p_mcb, &rfc_cb.rfc.rx_frame, p_buf);
296
297 /* If the frame did not pass validation just ignore it */
298 if (event == RFC_EVENT_BAD_FRAME) {
299 osi_free(p_buf);
300 return;
301 }
302
303 if (rfc_cb.rfc.rx_frame.dlci == RFCOMM_MX_DLCI) {
304 /* Take special care of the Multiplexer Control Messages */
305 if (event == RFC_EVENT_UIH) {
306 rfc_process_mx_message(p_mcb, p_buf);
307 return;
308 }
309
310 /* Other multiplexer events go to state machine */
311 rfc_mx_sm_execute(p_mcb, event, NULL);
312 osi_free(p_buf);
313 return;
314 }
315
316 /* The frame was received on the data channel DLCI, verify that DLC exists */
317 if (((p_port = port_find_mcb_dlci_port(p_mcb, rfc_cb.rfc.rx_frame.dlci)) ==
318 NULL) ||
319 (!p_port->rfc.p_mcb)) {
320 /* If this is a SABME on the new port, check if any appl is waiting for it
321 */
322 if (event != RFC_EVENT_SABME) {
323 if ((p_mcb->is_initiator && !rfc_cb.rfc.rx_frame.cr) ||
324 (!p_mcb->is_initiator && rfc_cb.rfc.rx_frame.cr))
325 rfc_send_dm(p_mcb, rfc_cb.rfc.rx_frame.dlci, rfc_cb.rfc.rx_frame.pf);
326 osi_free(p_buf);
327 return;
328 }
329
330 p_port = port_find_dlci_port(rfc_cb.rfc.rx_frame.dlci);
331 if (p_port == NULL) {
332 rfc_send_dm(p_mcb, rfc_cb.rfc.rx_frame.dlci, true);
333 osi_free(p_buf);
334 return;
335 }
336 p_mcb->port_inx[rfc_cb.rfc.rx_frame.dlci] = p_port->inx;
337 p_port->rfc.p_mcb = p_mcb;
338 }
339
340 if (event == RFC_EVENT_UIH) {
341 if (p_buf->len > 0)
342 rfc_port_sm_execute(p_port, event, p_buf);
343 else
344 osi_free(p_buf);
345
346 if (rfc_cb.rfc.rx_frame.credit != 0)
347 rfc_inc_credit(p_port, rfc_cb.rfc.rx_frame.credit);
348
349 return;
350 }
351 rfc_port_sm_execute(p_port, event, NULL);
352 osi_free(p_buf);
353 }
354
355 /*******************************************************************************
356 *
357 * Function RFCOMM_CongestionStatusInd
358 *
359 * Description This is a callback function called by L2CAP when
360 * data RFCOMM L2CAP congestion status changes
361 *
362 ******************************************************************************/
RFCOMM_CongestionStatusInd(uint16_t lcid,bool is_congested)363 void RFCOMM_CongestionStatusInd(uint16_t lcid, bool is_congested) {
364 tRFC_MCB* p_mcb = rfc_find_lcid_mcb(lcid);
365
366 if (!p_mcb) {
367 RFCOMM_TRACE_ERROR("RFCOMM_CongestionStatusInd dropped LCID:0x%x", lcid);
368 return;
369 } else {
370 RFCOMM_TRACE_EVENT("RFCOMM_CongestionStatusInd LCID:0x%x", lcid);
371 }
372 rfc_process_l2cap_congestion(p_mcb, is_congested);
373 }
374
375 /*******************************************************************************
376 *
377 * Function rfc_find_lcid_mcb
378 *
379 * Description This function returns MCB block supporting local cid
380 *
381 ******************************************************************************/
rfc_find_lcid_mcb(uint16_t lcid)382 tRFC_MCB* rfc_find_lcid_mcb(uint16_t lcid) {
383 tRFC_MCB* p_mcb;
384
385 if (lcid - L2CAP_BASE_APPL_CID >= MAX_L2CAP_CHANNELS) {
386 RFCOMM_TRACE_ERROR("rfc_find_lcid_mcb LCID:0x%x", lcid);
387 return (NULL);
388 } else {
389 p_mcb = rfc_cb.rfc.p_rfc_lcid_mcb[lcid - L2CAP_BASE_APPL_CID];
390 if (p_mcb != NULL) {
391 if (p_mcb->lcid != lcid) {
392 RFCOMM_TRACE_WARNING(
393 "rfc_find_lcid_mcb LCID reused LCID:0x%x current:0x%x", lcid,
394 p_mcb->lcid);
395 return (NULL);
396 }
397 }
398 }
399 return (p_mcb);
400 }
401
402 /*******************************************************************************
403 *
404 * Function rfc_save_lcid_mcb
405 *
406 * Description This function returns MCB block supporting local cid
407 *
408 ******************************************************************************/
rfc_save_lcid_mcb(tRFC_MCB * p_mcb,uint16_t lcid)409 void rfc_save_lcid_mcb(tRFC_MCB* p_mcb, uint16_t lcid) {
410 if (lcid < L2CAP_BASE_APPL_CID) return;
411 rfc_cb.rfc.p_rfc_lcid_mcb[lcid - L2CAP_BASE_APPL_CID] = p_mcb;
412 }
413