Home | History | Annotate | Line # | Download | only in netbt
hci_link.c revision 1.1.2.3
      1  1.1.2.3  yamt /*	$NetBSD: hci_link.c,v 1.1.2.3 2006/12/30 20:50:32 yamt Exp $	*/
      2  1.1.2.2  yamt 
      3  1.1.2.2  yamt /*-
      4  1.1.2.2  yamt  * Copyright (c) 2005 Iain Hibbert.
      5  1.1.2.2  yamt  * Copyright (c) 2006 Itronix Inc.
      6  1.1.2.2  yamt  * All rights reserved.
      7  1.1.2.2  yamt  *
      8  1.1.2.2  yamt  * Redistribution and use in source and binary forms, with or without
      9  1.1.2.2  yamt  * modification, are permitted provided that the following conditions
     10  1.1.2.2  yamt  * are met:
     11  1.1.2.2  yamt  * 1. Redistributions of source code must retain the above copyright
     12  1.1.2.2  yamt  *    notice, this list of conditions and the following disclaimer.
     13  1.1.2.2  yamt  * 2. Redistributions in binary form must reproduce the above copyright
     14  1.1.2.2  yamt  *    notice, this list of conditions and the following disclaimer in the
     15  1.1.2.2  yamt  *    documentation and/or other materials provided with the distribution.
     16  1.1.2.2  yamt  * 3. The name of Itronix Inc. may not be used to endorse
     17  1.1.2.2  yamt  *    or promote products derived from this software without specific
     18  1.1.2.2  yamt  *    prior written permission.
     19  1.1.2.2  yamt  *
     20  1.1.2.2  yamt  * THIS SOFTWARE IS PROVIDED BY ITRONIX INC. ``AS IS'' AND
     21  1.1.2.2  yamt  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     22  1.1.2.2  yamt  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     23  1.1.2.2  yamt  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL ITRONIX INC. BE LIABLE FOR ANY
     24  1.1.2.2  yamt  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
     25  1.1.2.2  yamt  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
     26  1.1.2.2  yamt  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
     27  1.1.2.2  yamt  * ON ANY THEORY OF LIABILITY, WHETHER IN
     28  1.1.2.2  yamt  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     29  1.1.2.2  yamt  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     30  1.1.2.2  yamt  * POSSIBILITY OF SUCH DAMAGE.
     31  1.1.2.2  yamt  */
     32  1.1.2.2  yamt 
     33  1.1.2.2  yamt #include <sys/cdefs.h>
     34  1.1.2.3  yamt __KERNEL_RCSID(0, "$NetBSD: hci_link.c,v 1.1.2.3 2006/12/30 20:50:32 yamt Exp $");
     35  1.1.2.2  yamt 
     36  1.1.2.2  yamt #include <sys/param.h>
     37  1.1.2.2  yamt #include <sys/kernel.h>
     38  1.1.2.2  yamt #include <sys/malloc.h>
     39  1.1.2.2  yamt #include <sys/mbuf.h>
     40  1.1.2.2  yamt #include <sys/proc.h>
     41  1.1.2.2  yamt #include <sys/queue.h>
     42  1.1.2.2  yamt #include <sys/systm.h>
     43  1.1.2.2  yamt 
     44  1.1.2.2  yamt #include <netbt/bluetooth.h>
     45  1.1.2.2  yamt #include <netbt/hci.h>
     46  1.1.2.2  yamt #include <netbt/l2cap.h>
     47  1.1.2.3  yamt #include <netbt/sco.h>
     48  1.1.2.2  yamt 
     49  1.1.2.2  yamt /*******************************************************************************
     50  1.1.2.2  yamt  *
     51  1.1.2.2  yamt  *	HCI ACL Connections
     52  1.1.2.2  yamt  */
     53  1.1.2.2  yamt 
     54  1.1.2.2  yamt /*
     55  1.1.2.2  yamt  * Automatically expire unused ACL connections after this number of
     56  1.1.2.2  yamt  * seconds (if zero, do not expire unused connections) [sysctl]
     57  1.1.2.2  yamt  */
     58  1.1.2.2  yamt int hci_acl_expiry = 10;	/* seconds */
     59  1.1.2.2  yamt 
     60  1.1.2.2  yamt /*
     61  1.1.2.2  yamt  * hci_acl_open(unit, bdaddr)
     62  1.1.2.2  yamt  *
     63  1.1.2.2  yamt  * open ACL connection to remote bdaddr. Only one ACL connection is permitted
     64  1.1.2.2  yamt  * between any two Bluetooth devices, so we look for an existing one before
     65  1.1.2.2  yamt  * trying to start a new one.
     66  1.1.2.2  yamt  */
     67  1.1.2.2  yamt struct hci_link *
     68  1.1.2.2  yamt hci_acl_open(struct hci_unit *unit, bdaddr_t *bdaddr)
     69  1.1.2.2  yamt {
     70  1.1.2.2  yamt 	struct hci_link *link;
     71  1.1.2.3  yamt 	struct hci_memo *memo;
     72  1.1.2.2  yamt 	hci_create_con_cp cp;
     73  1.1.2.2  yamt 	int err;
     74  1.1.2.2  yamt 
     75  1.1.2.2  yamt 	KASSERT(unit);
     76  1.1.2.2  yamt 	KASSERT(bdaddr);
     77  1.1.2.2  yamt 
     78  1.1.2.2  yamt 	link = hci_link_lookup_bdaddr(unit, bdaddr, HCI_LINK_ACL);
     79  1.1.2.2  yamt 	if (link == NULL) {
     80  1.1.2.2  yamt 		link = hci_link_alloc(unit);
     81  1.1.2.2  yamt 		if (link == NULL)
     82  1.1.2.2  yamt 			return NULL;
     83  1.1.2.2  yamt 
     84  1.1.2.2  yamt 		link->hl_type = HCI_LINK_ACL;
     85  1.1.2.2  yamt 		bdaddr_copy(&link->hl_bdaddr, bdaddr);
     86  1.1.2.2  yamt 	}
     87  1.1.2.2  yamt 
     88  1.1.2.2  yamt 	switch(link->hl_state) {
     89  1.1.2.2  yamt 	case HCI_LINK_CLOSED:
     90  1.1.2.2  yamt 		/*
     91  1.1.2.2  yamt 		 * open connection to remote device
     92  1.1.2.2  yamt 		 */
     93  1.1.2.2  yamt 		memset(&cp, 0, sizeof(cp));
     94  1.1.2.2  yamt 		bdaddr_copy(&cp.bdaddr, bdaddr);
     95  1.1.2.2  yamt 		cp.pkt_type = htole16(unit->hci_packet_type);
     96  1.1.2.3  yamt 
     97  1.1.2.3  yamt 		memo = hci_memo_find(unit, bdaddr);
     98  1.1.2.3  yamt 		if (memo != NULL) {
     99  1.1.2.3  yamt 			cp.page_scan_rep_mode = memo->response.page_scan_rep_mode;
    100  1.1.2.3  yamt 			cp.page_scan_mode = memo->response.page_scan_mode;
    101  1.1.2.3  yamt 			cp.clock_offset = htole16(memo->response.clock_offset);
    102  1.1.2.3  yamt 		}
    103  1.1.2.3  yamt 
    104  1.1.2.2  yamt 		if (unit->hci_link_policy & HCI_LINK_POLICY_ENABLE_ROLE_SWITCH)
    105  1.1.2.2  yamt 			cp.accept_role_switch = 1;
    106  1.1.2.2  yamt 
    107  1.1.2.2  yamt 		err = hci_send_cmd(unit, HCI_CMD_CREATE_CON, &cp, sizeof(cp));
    108  1.1.2.2  yamt 		if (err) {
    109  1.1.2.2  yamt 			hci_link_free(link, err);
    110  1.1.2.2  yamt 			return NULL;
    111  1.1.2.2  yamt 		}
    112  1.1.2.2  yamt 
    113  1.1.2.2  yamt 		link->hl_state = HCI_LINK_WAIT_CONNECT;
    114  1.1.2.2  yamt 		break;
    115  1.1.2.2  yamt 
    116  1.1.2.2  yamt 	case HCI_LINK_WAIT_CONNECT:
    117  1.1.2.2  yamt 		/*
    118  1.1.2.2  yamt 		 * somebody else already trying to connect, we just
    119  1.1.2.2  yamt 		 * sit on the bench with them..
    120  1.1.2.2  yamt 		 */
    121  1.1.2.2  yamt 		break;
    122  1.1.2.2  yamt 
    123  1.1.2.2  yamt 	case HCI_LINK_OPEN:
    124  1.1.2.2  yamt 		/*
    125  1.1.2.2  yamt 		 * If already open, halt any expiry timeouts. We dont need
    126  1.1.2.2  yamt 		 * to care about already invoking timeouts since refcnt >0
    127  1.1.2.2  yamt 		 * will keep the link alive.
    128  1.1.2.2  yamt 		 */
    129  1.1.2.2  yamt 		callout_stop(&link->hl_expire);
    130  1.1.2.2  yamt 		break;
    131  1.1.2.2  yamt 
    132  1.1.2.2  yamt 	default:
    133  1.1.2.2  yamt 		UNKNOWN(link->hl_state);
    134  1.1.2.2  yamt 		return NULL;
    135  1.1.2.2  yamt 	}
    136  1.1.2.2  yamt 
    137  1.1.2.2  yamt 	/* open */
    138  1.1.2.2  yamt 	link->hl_refcnt++;
    139  1.1.2.2  yamt 
    140  1.1.2.2  yamt 	return link;
    141  1.1.2.2  yamt }
    142  1.1.2.2  yamt 
    143  1.1.2.2  yamt /*
    144  1.1.2.2  yamt  * Close ACL connection. When there are no more references to this link,
    145  1.1.2.2  yamt  * we can either close it down or schedule a delayed closedown.
    146  1.1.2.2  yamt  */
    147  1.1.2.2  yamt void
    148  1.1.2.2  yamt hci_acl_close(struct hci_link *link, int err)
    149  1.1.2.2  yamt {
    150  1.1.2.2  yamt 
    151  1.1.2.2  yamt 	KASSERT(link);
    152  1.1.2.2  yamt 
    153  1.1.2.2  yamt 	if (--link->hl_refcnt == 0) {
    154  1.1.2.2  yamt 		if (link->hl_state == HCI_LINK_CLOSED)
    155  1.1.2.2  yamt 			hci_link_free(link, err);
    156  1.1.2.2  yamt 		else if (hci_acl_expiry > 0)
    157  1.1.2.2  yamt 			callout_schedule(&link->hl_expire, hci_acl_expiry * hz);
    158  1.1.2.2  yamt 	}
    159  1.1.2.2  yamt }
    160  1.1.2.2  yamt 
    161  1.1.2.2  yamt /*
    162  1.1.2.3  yamt  * Incoming ACL connection.
    163  1.1.2.3  yamt  *
    164  1.1.2.3  yamt  * For now, we accept all connections but it would be better to check
    165  1.1.2.3  yamt  * the L2CAP listen list and only accept when there is a listener
    166  1.1.2.3  yamt  * available.
    167  1.1.2.3  yamt  *
    168  1.1.2.3  yamt  * There should not be a link to the same bdaddr already, we check
    169  1.1.2.3  yamt  * anyway though its left unhandled for now.
    170  1.1.2.2  yamt  */
    171  1.1.2.2  yamt struct hci_link *
    172  1.1.2.2  yamt hci_acl_newconn(struct hci_unit *unit, bdaddr_t *bdaddr)
    173  1.1.2.2  yamt {
    174  1.1.2.2  yamt 	struct hci_link *link;
    175  1.1.2.2  yamt 
    176  1.1.2.3  yamt 	link = hci_link_lookup_bdaddr(unit, bdaddr, HCI_LINK_ACL);
    177  1.1.2.3  yamt 	if (link != NULL)
    178  1.1.2.3  yamt 		return NULL;
    179  1.1.2.3  yamt 
    180  1.1.2.2  yamt 	link = hci_link_alloc(unit);
    181  1.1.2.2  yamt 	if (link != NULL) {
    182  1.1.2.2  yamt 		link->hl_state = HCI_LINK_WAIT_CONNECT;
    183  1.1.2.2  yamt 		link->hl_type = HCI_LINK_ACL;
    184  1.1.2.2  yamt 		bdaddr_copy(&link->hl_bdaddr, bdaddr);
    185  1.1.2.2  yamt 
    186  1.1.2.2  yamt 		if (hci_acl_expiry > 0)
    187  1.1.2.2  yamt 			callout_schedule(&link->hl_expire, hci_acl_expiry * hz);
    188  1.1.2.2  yamt 	}
    189  1.1.2.2  yamt 
    190  1.1.2.2  yamt 	return link;
    191  1.1.2.2  yamt }
    192  1.1.2.2  yamt 
    193  1.1.2.2  yamt void
    194  1.1.2.2  yamt hci_acl_timeout(void *arg)
    195  1.1.2.2  yamt {
    196  1.1.2.2  yamt 	struct hci_link *link = arg;
    197  1.1.2.2  yamt 	hci_discon_cp cp;
    198  1.1.2.2  yamt 	int s, err;
    199  1.1.2.2  yamt 
    200  1.1.2.2  yamt 	s = splsoftnet();
    201  1.1.2.2  yamt 	callout_ack(&link->hl_expire);
    202  1.1.2.2  yamt 
    203  1.1.2.2  yamt 	if (link->hl_refcnt > 0)
    204  1.1.2.2  yamt 		goto out;
    205  1.1.2.2  yamt 
    206  1.1.2.2  yamt 	DPRINTF("link #%d expired\n", link->hl_handle);
    207  1.1.2.2  yamt 
    208  1.1.2.2  yamt 	switch (link->hl_state) {
    209  1.1.2.2  yamt 	case HCI_LINK_CLOSED:
    210  1.1.2.2  yamt 	case HCI_LINK_WAIT_CONNECT:
    211  1.1.2.2  yamt 		hci_link_free(link, ECONNRESET);
    212  1.1.2.2  yamt 		break;
    213  1.1.2.2  yamt 
    214  1.1.2.2  yamt 	case HCI_LINK_OPEN:
    215  1.1.2.2  yamt 		cp.con_handle = htole16(link->hl_handle);
    216  1.1.2.2  yamt 		cp.reason = 0x13; /* "Remote User Terminated Connection" */
    217  1.1.2.2  yamt 
    218  1.1.2.2  yamt 		err = hci_send_cmd(link->hl_unit, HCI_CMD_DISCONNECT,
    219  1.1.2.2  yamt 					&cp, sizeof(cp));
    220  1.1.2.2  yamt 
    221  1.1.2.3  yamt 		if (err) {
    222  1.1.2.2  yamt 			DPRINTF("error %d sending HCI_CMD_DISCONNECT\n",
    223  1.1.2.3  yamt 			    err);
    224  1.1.2.3  yamt 		}
    225  1.1.2.2  yamt 
    226  1.1.2.2  yamt 		break;
    227  1.1.2.2  yamt 
    228  1.1.2.2  yamt 	default:
    229  1.1.2.2  yamt 		UNKNOWN(link->hl_state);
    230  1.1.2.2  yamt 		break;
    231  1.1.2.2  yamt 	}
    232  1.1.2.2  yamt 
    233  1.1.2.2  yamt out:
    234  1.1.2.2  yamt 	splx(s);
    235  1.1.2.2  yamt }
    236  1.1.2.2  yamt 
    237  1.1.2.2  yamt /*
    238  1.1.2.2  yamt  * Receive ACL Data
    239  1.1.2.2  yamt  *
    240  1.1.2.2  yamt  * we accumulate packet fragments on the hci_link structure
    241  1.1.2.2  yamt  * until a full L2CAP frame is ready, then send it on.
    242  1.1.2.2  yamt  */
    243  1.1.2.2  yamt void
    244  1.1.2.2  yamt hci_acl_recv(struct mbuf *m, struct hci_unit *unit)
    245  1.1.2.2  yamt {
    246  1.1.2.2  yamt 	struct hci_link *link;
    247  1.1.2.2  yamt 	hci_acldata_hdr_t hdr;
    248  1.1.2.2  yamt 	uint16_t handle, want;
    249  1.1.2.2  yamt 	int pb, got;
    250  1.1.2.2  yamt 
    251  1.1.2.2  yamt 	KASSERT(m);
    252  1.1.2.2  yamt 	KASSERT(unit);
    253  1.1.2.2  yamt 
    254  1.1.2.2  yamt 	KASSERT(m->m_pkthdr.len >= sizeof(hdr));
    255  1.1.2.2  yamt 	m_copydata(m, 0, sizeof(hdr), &hdr);
    256  1.1.2.2  yamt 	m_adj(m, sizeof(hdr));
    257  1.1.2.2  yamt 
    258  1.1.2.2  yamt #ifdef DIAGNOSTIC
    259  1.1.2.2  yamt 	if (hdr.type != HCI_ACL_DATA_PKT) {
    260  1.1.2.2  yamt 		printf("%s: bad ACL packet type\n", unit->hci_devname);
    261  1.1.2.2  yamt 		goto bad;
    262  1.1.2.2  yamt 	}
    263  1.1.2.2  yamt 
    264  1.1.2.2  yamt 	if (m->m_pkthdr.len != le16toh(hdr.length)) {
    265  1.1.2.3  yamt 		printf("%s: bad ACL packet length (%d != %d)\n",
    266  1.1.2.3  yamt 			unit->hci_devname, m->m_pkthdr.len, le16toh(hdr.length));
    267  1.1.2.2  yamt 		goto bad;
    268  1.1.2.2  yamt 	}
    269  1.1.2.2  yamt #endif
    270  1.1.2.2  yamt 
    271  1.1.2.2  yamt 	hdr.length = le16toh(hdr.length);
    272  1.1.2.2  yamt 	hdr.con_handle = le16toh(hdr.con_handle);
    273  1.1.2.2  yamt 	handle = HCI_CON_HANDLE(hdr.con_handle);
    274  1.1.2.2  yamt 	pb = HCI_PB_FLAG(hdr.con_handle);
    275  1.1.2.2  yamt 
    276  1.1.2.2  yamt 	link = hci_link_lookup_handle(unit, handle);
    277  1.1.2.2  yamt 	if (link == NULL) {
    278  1.1.2.2  yamt 		hci_discon_cp cp;
    279  1.1.2.2  yamt 
    280  1.1.2.2  yamt 		DPRINTF("%s: dumping packet for unknown handle #%d\n",
    281  1.1.2.2  yamt 			unit->hci_devname, handle);
    282  1.1.2.2  yamt 
    283  1.1.2.2  yamt 		/*
    284  1.1.2.2  yamt 		 * There is no way to find out what this connection handle is
    285  1.1.2.2  yamt 		 * for, just get rid of it. This may happen, if a USB dongle
    286  1.1.2.2  yamt 		 * is plugged into a self powered hub and does not reset when
    287  1.1.2.2  yamt 		 * the system is shut down.
    288  1.1.2.2  yamt 		 */
    289  1.1.2.2  yamt 		cp.con_handle = htole16(handle);
    290  1.1.2.2  yamt 		cp.reason = 0x13; /* "Remote User Terminated Connection" */
    291  1.1.2.2  yamt 		hci_send_cmd(unit, HCI_CMD_DISCONNECT, &cp, sizeof(cp));
    292  1.1.2.2  yamt 		goto bad;
    293  1.1.2.2  yamt 	}
    294  1.1.2.2  yamt 
    295  1.1.2.2  yamt 	switch (pb) {
    296  1.1.2.2  yamt 	case HCI_PACKET_START:
    297  1.1.2.2  yamt 		if (link->hl_rxp != NULL)
    298  1.1.2.2  yamt 			printf("%s: dropped incomplete ACL packet\n",
    299  1.1.2.2  yamt 				unit->hci_devname);
    300  1.1.2.2  yamt 
    301  1.1.2.2  yamt 		if (m->m_pkthdr.len < sizeof(l2cap_hdr_t)) {
    302  1.1.2.2  yamt 			printf("%s: short ACL packet\n",
    303  1.1.2.2  yamt 				unit->hci_devname);
    304  1.1.2.2  yamt 
    305  1.1.2.2  yamt 			goto bad;
    306  1.1.2.2  yamt 		}
    307  1.1.2.2  yamt 
    308  1.1.2.2  yamt 		link->hl_rxp = m;
    309  1.1.2.2  yamt 		got = m->m_pkthdr.len;
    310  1.1.2.2  yamt 		break;
    311  1.1.2.2  yamt 
    312  1.1.2.2  yamt 	case HCI_PACKET_FRAGMENT:
    313  1.1.2.2  yamt 		if (link->hl_rxp == NULL) {
    314  1.1.2.2  yamt 			printf("%s: unexpected packet fragment\n",
    315  1.1.2.2  yamt 				unit->hci_devname);
    316  1.1.2.2  yamt 
    317  1.1.2.2  yamt 			goto bad;
    318  1.1.2.2  yamt 		}
    319  1.1.2.2  yamt 
    320  1.1.2.2  yamt 		got = m->m_pkthdr.len + link->hl_rxp->m_pkthdr.len;
    321  1.1.2.2  yamt 		m_cat(link->hl_rxp, m);
    322  1.1.2.2  yamt 		m = link->hl_rxp;
    323  1.1.2.2  yamt 		m->m_pkthdr.len = got;
    324  1.1.2.2  yamt 		break;
    325  1.1.2.2  yamt 
    326  1.1.2.2  yamt 	default:
    327  1.1.2.2  yamt 		printf("%s: unknown packet type\n",
    328  1.1.2.2  yamt 			unit->hci_devname);
    329  1.1.2.2  yamt 
    330  1.1.2.2  yamt 		goto bad;
    331  1.1.2.2  yamt 	}
    332  1.1.2.2  yamt 
    333  1.1.2.2  yamt 	m_copydata(m, 0, sizeof(want), &want);
    334  1.1.2.2  yamt 	want = le16toh(want) + sizeof(l2cap_hdr_t) - got;
    335  1.1.2.2  yamt 
    336  1.1.2.2  yamt 	if (want > 0)
    337  1.1.2.2  yamt 		return;
    338  1.1.2.2  yamt 
    339  1.1.2.2  yamt 	link->hl_rxp = NULL;
    340  1.1.2.2  yamt 
    341  1.1.2.2  yamt 	if (want == 0) {
    342  1.1.2.2  yamt 		l2cap_recv_frame(m, link);
    343  1.1.2.2  yamt 		return;
    344  1.1.2.2  yamt 	}
    345  1.1.2.2  yamt 
    346  1.1.2.2  yamt bad:
    347  1.1.2.2  yamt 	m_freem(m);
    348  1.1.2.2  yamt }
    349  1.1.2.2  yamt 
    350  1.1.2.2  yamt /*
    351  1.1.2.2  yamt  * Send ACL data on link
    352  1.1.2.2  yamt  *
    353  1.1.2.2  yamt  * We must fragment packets into chunks of less than unit->hci_max_acl_size and
    354  1.1.2.2  yamt  * prepend a relevant ACL header to each fragment. We keep a PDU structure
    355  1.1.2.2  yamt  * attached to the link, so that completed fragments can be marked off and
    356  1.1.2.2  yamt  * more data requested from above once the PDU is sent.
    357  1.1.2.2  yamt  */
    358  1.1.2.2  yamt int
    359  1.1.2.2  yamt hci_acl_send(struct mbuf *m, struct hci_link *link,
    360  1.1.2.2  yamt 		struct l2cap_channel *chan)
    361  1.1.2.2  yamt {
    362  1.1.2.2  yamt 	struct l2cap_pdu *pdu;
    363  1.1.2.2  yamt 	struct mbuf *n = NULL;
    364  1.1.2.2  yamt 	int plen, mlen, num = 0;
    365  1.1.2.2  yamt 
    366  1.1.2.2  yamt 	KASSERT(link);
    367  1.1.2.2  yamt 	KASSERT(m);
    368  1.1.2.2  yamt 	KASSERT(m->m_flags & M_PKTHDR);
    369  1.1.2.2  yamt 	KASSERT(m->m_pkthdr.len > 0);
    370  1.1.2.2  yamt 
    371  1.1.2.2  yamt 	if (link->hl_state == HCI_LINK_CLOSED) {
    372  1.1.2.2  yamt 		m_freem(m);
    373  1.1.2.2  yamt 		return ENETDOWN;
    374  1.1.2.2  yamt 	}
    375  1.1.2.2  yamt 
    376  1.1.2.2  yamt 	pdu = pool_get(&l2cap_pdu_pool, PR_NOWAIT);
    377  1.1.2.2  yamt 	if (pdu == NULL)
    378  1.1.2.2  yamt 		goto nomem;
    379  1.1.2.2  yamt 
    380  1.1.2.2  yamt 	pdu->lp_chan = chan;
    381  1.1.2.2  yamt 	pdu->lp_pending = 0;
    382  1.1.2.2  yamt 	MBUFQ_INIT(&pdu->lp_data);
    383  1.1.2.2  yamt 
    384  1.1.2.2  yamt 	plen = m->m_pkthdr.len;
    385  1.1.2.2  yamt 	mlen = link->hl_unit->hci_max_acl_size;
    386  1.1.2.2  yamt 
    387  1.1.2.2  yamt 	DPRINTFN(5, "%s: handle #%d, plen = %d, max = %d\n",
    388  1.1.2.2  yamt 		link->hl_unit->hci_devname, link->hl_handle, plen, mlen);
    389  1.1.2.2  yamt 
    390  1.1.2.2  yamt 	while (plen > 0) {
    391  1.1.2.2  yamt 		if (plen > mlen) {
    392  1.1.2.2  yamt 			n = m_split(m, mlen, M_DONTWAIT);
    393  1.1.2.2  yamt 			if (n == NULL)
    394  1.1.2.2  yamt 				goto nomem;
    395  1.1.2.2  yamt 		} else {
    396  1.1.2.2  yamt 			mlen = plen;
    397  1.1.2.2  yamt 		}
    398  1.1.2.2  yamt 
    399  1.1.2.2  yamt 		if (num++ == 0)
    400  1.1.2.2  yamt 			m->m_flags |= M_PROTO1;	/* tag first fragment */
    401  1.1.2.2  yamt 
    402  1.1.2.2  yamt 		DPRINTFN(10, "chunk of %d (plen = %d) bytes\n", mlen, plen);
    403  1.1.2.2  yamt 		MBUFQ_ENQUEUE(&pdu->lp_data, m);
    404  1.1.2.2  yamt 		m = n;
    405  1.1.2.2  yamt 		plen -= mlen;
    406  1.1.2.2  yamt 	}
    407  1.1.2.2  yamt 
    408  1.1.2.2  yamt 	TAILQ_INSERT_TAIL(&link->hl_txq, pdu, lp_next);
    409  1.1.2.2  yamt 	link->hl_txqlen += num;
    410  1.1.2.2  yamt 
    411  1.1.2.2  yamt 	hci_acl_start(link);
    412  1.1.2.2  yamt 
    413  1.1.2.2  yamt 	return 0;
    414  1.1.2.2  yamt 
    415  1.1.2.2  yamt nomem:
    416  1.1.2.2  yamt 	if (m) m_freem(m);
    417  1.1.2.2  yamt 	if (pdu) {
    418  1.1.2.2  yamt 		MBUFQ_DRAIN(&pdu->lp_data);
    419  1.1.2.2  yamt 		pool_put(&l2cap_pdu_pool, pdu);
    420  1.1.2.2  yamt 	}
    421  1.1.2.2  yamt 
    422  1.1.2.2  yamt 	return ENOMEM;
    423  1.1.2.2  yamt }
    424  1.1.2.2  yamt 
    425  1.1.2.2  yamt /*
    426  1.1.2.2  yamt  * Start sending ACL data on link.
    427  1.1.2.2  yamt  *
    428  1.1.2.2  yamt  *	We may use all the available packet slots. The reason that we add
    429  1.1.2.2  yamt  * the ACL encapsulation here rather than in hci_acl_send() is that L2CAP
    430  1.1.2.2  yamt  * signal packets may be queued before the handle is given to us..
    431  1.1.2.2  yamt  *
    432  1.1.2.2  yamt  * this is called from hci_acl_send() above, and the event processing
    433  1.1.2.2  yamt  * code (for CON_COMPL and NUM_COMPL_PKTS)
    434  1.1.2.2  yamt  */
    435  1.1.2.2  yamt void
    436  1.1.2.2  yamt hci_acl_start(struct hci_link *link)
    437  1.1.2.2  yamt {
    438  1.1.2.2  yamt 	struct hci_unit *unit;
    439  1.1.2.2  yamt 	hci_acldata_hdr_t *hdr;
    440  1.1.2.2  yamt 	struct l2cap_pdu *pdu;
    441  1.1.2.2  yamt 	struct mbuf *m;
    442  1.1.2.2  yamt 	uint16_t handle;
    443  1.1.2.2  yamt 
    444  1.1.2.2  yamt 	KASSERT(link);
    445  1.1.2.2  yamt 
    446  1.1.2.2  yamt 	unit = link->hl_unit;
    447  1.1.2.2  yamt 	KASSERT(unit);
    448  1.1.2.2  yamt 
    449  1.1.2.2  yamt 	/* this is mainly to block ourselves (below) */
    450  1.1.2.2  yamt 	if (link->hl_state != HCI_LINK_OPEN)
    451  1.1.2.2  yamt 		return;
    452  1.1.2.2  yamt 
    453  1.1.2.2  yamt 	if (link->hl_txqlen == 0 || unit->hci_num_acl_pkts == 0)
    454  1.1.2.2  yamt 		return;
    455  1.1.2.2  yamt 
    456  1.1.2.2  yamt 	/* find first PDU with data to send */
    457  1.1.2.2  yamt 	pdu = TAILQ_FIRST(&link->hl_txq);
    458  1.1.2.2  yamt 	for (;;) {
    459  1.1.2.2  yamt 		if (pdu == NULL)
    460  1.1.2.2  yamt 			return;
    461  1.1.2.2  yamt 
    462  1.1.2.2  yamt 		if (MBUFQ_FIRST(&pdu->lp_data) != NULL)
    463  1.1.2.2  yamt 			break;
    464  1.1.2.2  yamt 
    465  1.1.2.2  yamt 		pdu = TAILQ_NEXT(pdu, lp_next);
    466  1.1.2.2  yamt 	}
    467  1.1.2.2  yamt 
    468  1.1.2.2  yamt 	while (unit->hci_num_acl_pkts > 0) {
    469  1.1.2.2  yamt 		MBUFQ_DEQUEUE(&pdu->lp_data, m);
    470  1.1.2.2  yamt 		KASSERT(m != NULL);
    471  1.1.2.2  yamt 
    472  1.1.2.2  yamt 		if (m->m_flags & M_PROTO1)
    473  1.1.2.2  yamt 			handle = HCI_MK_CON_HANDLE(link->hl_handle,
    474  1.1.2.2  yamt 						HCI_PACKET_START, 0);
    475  1.1.2.2  yamt 		else
    476  1.1.2.2  yamt 			handle = HCI_MK_CON_HANDLE(link->hl_handle,
    477  1.1.2.2  yamt 						HCI_PACKET_FRAGMENT, 0);
    478  1.1.2.2  yamt 
    479  1.1.2.2  yamt 		M_PREPEND(m, sizeof(*hdr), M_DONTWAIT);
    480  1.1.2.2  yamt 		if (m == NULL)
    481  1.1.2.2  yamt 			break;
    482  1.1.2.2  yamt 
    483  1.1.2.2  yamt 		hdr = mtod(m, hci_acldata_hdr_t *);
    484  1.1.2.2  yamt 		hdr->type = HCI_ACL_DATA_PKT;
    485  1.1.2.2  yamt 		hdr->con_handle = htole16(handle);
    486  1.1.2.2  yamt 		hdr->length = htole16(m->m_pkthdr.len - sizeof(*hdr));
    487  1.1.2.2  yamt 
    488  1.1.2.2  yamt 		link->hl_txqlen--;
    489  1.1.2.2  yamt 		pdu->lp_pending++;
    490  1.1.2.2  yamt 
    491  1.1.2.2  yamt 		hci_output_acl(unit, m);
    492  1.1.2.2  yamt 
    493  1.1.2.2  yamt 		if (MBUFQ_FIRST(&pdu->lp_data) == NULL) {
    494  1.1.2.2  yamt 			if (pdu->lp_chan) {
    495  1.1.2.2  yamt 				/*
    496  1.1.2.2  yamt 				 * This should enable streaming of PDUs - when
    497  1.1.2.2  yamt 				 * we have placed all the fragments on the acl
    498  1.1.2.2  yamt 				 * output queue, we trigger the L2CAP layer to
    499  1.1.2.2  yamt 				 * send us down one more. Use a false state so
    500  1.1.2.2  yamt 				 * we dont run into ourselves coming back from
    501  1.1.2.2  yamt 				 * the future..
    502  1.1.2.2  yamt 				 */
    503  1.1.2.2  yamt 				link->hl_state = HCI_LINK_BLOCK;
    504  1.1.2.2  yamt 				l2cap_start(pdu->lp_chan);
    505  1.1.2.2  yamt 				link->hl_state = HCI_LINK_OPEN;
    506  1.1.2.2  yamt 			}
    507  1.1.2.2  yamt 
    508  1.1.2.2  yamt 			pdu = TAILQ_NEXT(pdu, lp_next);
    509  1.1.2.2  yamt 			if (pdu == NULL)
    510  1.1.2.2  yamt 				break;
    511  1.1.2.2  yamt 		}
    512  1.1.2.2  yamt 	}
    513  1.1.2.2  yamt 
    514  1.1.2.2  yamt 	/*
    515  1.1.2.2  yamt 	 * We had our turn now, move to the back of the queue to let
    516  1.1.2.2  yamt 	 * other links have a go at the output buffers..
    517  1.1.2.2  yamt 	 */
    518  1.1.2.2  yamt 	if (TAILQ_NEXT(link, hl_next)) {
    519  1.1.2.2  yamt 		TAILQ_REMOVE(&unit->hci_links, link, hl_next);
    520  1.1.2.2  yamt 		TAILQ_INSERT_TAIL(&unit->hci_links, link, hl_next);
    521  1.1.2.2  yamt 	}
    522  1.1.2.2  yamt }
    523  1.1.2.2  yamt 
    524  1.1.2.2  yamt /*
    525  1.1.2.2  yamt  * Confirm ACL packets cleared from Controller buffers. We scan our PDU
    526  1.1.2.2  yamt  * list to clear pending fragments and signal upstream for more data
    527  1.1.2.2  yamt  * when a PDU is complete.
    528  1.1.2.2  yamt  */
    529  1.1.2.2  yamt void
    530  1.1.2.2  yamt hci_acl_complete(struct hci_link *link, int num)
    531  1.1.2.2  yamt {
    532  1.1.2.2  yamt 	struct l2cap_pdu *pdu;
    533  1.1.2.2  yamt 	struct l2cap_channel *chan;
    534  1.1.2.2  yamt 
    535  1.1.2.2  yamt 	DPRINTFN(5, "handle #%d (%d)\n", link->hl_handle, num);
    536  1.1.2.2  yamt 
    537  1.1.2.2  yamt 	while (num > 0) {
    538  1.1.2.2  yamt 		pdu = TAILQ_FIRST(&link->hl_txq);
    539  1.1.2.2  yamt 		if (pdu == NULL) {
    540  1.1.2.2  yamt 			printf("%s: %d packets completed on handle #%x "
    541  1.1.2.2  yamt 				"but none pending!\n",
    542  1.1.2.2  yamt 				link->hl_unit->hci_devname, num,
    543  1.1.2.2  yamt 				link->hl_handle);
    544  1.1.2.2  yamt 			return;
    545  1.1.2.2  yamt 		}
    546  1.1.2.2  yamt 
    547  1.1.2.2  yamt 		if (num >= pdu->lp_pending) {
    548  1.1.2.2  yamt 			num -= pdu->lp_pending;
    549  1.1.2.2  yamt 			pdu->lp_pending = 0;
    550  1.1.2.2  yamt 
    551  1.1.2.2  yamt 			if (MBUFQ_FIRST(&pdu->lp_data) == NULL) {
    552  1.1.2.2  yamt 				TAILQ_REMOVE(&link->hl_txq, pdu, lp_next);
    553  1.1.2.2  yamt 				chan = pdu->lp_chan;
    554  1.1.2.2  yamt 				if (chan != NULL) {
    555  1.1.2.2  yamt 					chan->lc_pending--;
    556  1.1.2.2  yamt 					(*chan->lc_proto->complete)
    557  1.1.2.2  yamt 							(chan->lc_upper, 1);
    558  1.1.2.2  yamt 
    559  1.1.2.2  yamt 					if (chan->lc_pending == 0)
    560  1.1.2.2  yamt 						l2cap_start(chan);
    561  1.1.2.2  yamt 				}
    562  1.1.2.2  yamt 
    563  1.1.2.2  yamt 				pool_put(&l2cap_pdu_pool, pdu);
    564  1.1.2.2  yamt 			}
    565  1.1.2.2  yamt 		} else {
    566  1.1.2.2  yamt 			pdu->lp_pending -= num;
    567  1.1.2.2  yamt 			num = 0;
    568  1.1.2.2  yamt 		}
    569  1.1.2.2  yamt 	}
    570  1.1.2.2  yamt }
    571  1.1.2.2  yamt 
    572  1.1.2.2  yamt /*******************************************************************************
    573  1.1.2.2  yamt  *
    574  1.1.2.2  yamt  *	HCI SCO Connections
    575  1.1.2.2  yamt  */
    576  1.1.2.2  yamt 
    577  1.1.2.2  yamt /*
    578  1.1.2.3  yamt  * Incoming SCO Connection. We check the list for anybody willing
    579  1.1.2.3  yamt  * to take it.
    580  1.1.2.2  yamt  */
    581  1.1.2.2  yamt struct hci_link *
    582  1.1.2.2  yamt hci_sco_newconn(struct hci_unit *unit, bdaddr_t *bdaddr)
    583  1.1.2.2  yamt {
    584  1.1.2.3  yamt 	struct sockaddr_bt laddr, raddr;
    585  1.1.2.3  yamt 	struct sco_pcb *pcb, *new;
    586  1.1.2.3  yamt 	struct hci_link *sco, *acl;
    587  1.1.2.3  yamt 
    588  1.1.2.3  yamt 	memset(&laddr, 0, sizeof(laddr));
    589  1.1.2.3  yamt 	laddr.bt_len = sizeof(laddr);
    590  1.1.2.3  yamt 	laddr.bt_family = AF_BLUETOOTH;
    591  1.1.2.3  yamt 	bdaddr_copy(&laddr.bt_bdaddr, &unit->hci_bdaddr);
    592  1.1.2.3  yamt 
    593  1.1.2.3  yamt 	memset(&raddr, 0, sizeof(raddr));
    594  1.1.2.3  yamt 	raddr.bt_len = sizeof(raddr);
    595  1.1.2.3  yamt 	raddr.bt_family = AF_BLUETOOTH;
    596  1.1.2.3  yamt 	bdaddr_copy(&raddr.bt_bdaddr, bdaddr);
    597  1.1.2.3  yamt 
    598  1.1.2.3  yamt 	/*
    599  1.1.2.3  yamt 	 * There should already be an ACL link up and running before
    600  1.1.2.3  yamt 	 * the controller sends us SCO connection requests, but you
    601  1.1.2.3  yamt 	 * never know..
    602  1.1.2.3  yamt 	 */
    603  1.1.2.3  yamt 	acl = hci_link_lookup_bdaddr(unit, bdaddr, HCI_LINK_ACL);
    604  1.1.2.3  yamt 	if (acl == NULL || acl->hl_state != HCI_LINK_OPEN)
    605  1.1.2.3  yamt 		return NULL;
    606  1.1.2.3  yamt 
    607  1.1.2.3  yamt 	LIST_FOREACH(pcb, &sco_pcb, sp_next) {
    608  1.1.2.3  yamt 		if ((pcb->sp_flags & SP_LISTENING) == 0)
    609  1.1.2.3  yamt 			continue;
    610  1.1.2.3  yamt 
    611  1.1.2.3  yamt 		new = (*pcb->sp_proto->newconn)(pcb->sp_upper, &laddr, &raddr);
    612  1.1.2.3  yamt 		if (new == NULL)
    613  1.1.2.3  yamt 			continue;
    614  1.1.2.3  yamt 
    615  1.1.2.3  yamt 		/*
    616  1.1.2.3  yamt 		 * Ok, got new pcb so we can start a new link and fill
    617  1.1.2.3  yamt 		 * in all the details.
    618  1.1.2.3  yamt 		 */
    619  1.1.2.3  yamt 		bdaddr_copy(&new->sp_laddr, &unit->hci_bdaddr);
    620  1.1.2.3  yamt 		bdaddr_copy(&new->sp_raddr, bdaddr);
    621  1.1.2.3  yamt 
    622  1.1.2.3  yamt 		sco = hci_link_alloc(unit);
    623  1.1.2.3  yamt 		if (sco == NULL) {
    624  1.1.2.3  yamt 			sco_detach(&new);
    625  1.1.2.3  yamt 			return NULL;
    626  1.1.2.3  yamt 		}
    627  1.1.2.3  yamt 
    628  1.1.2.3  yamt 		sco->hl_type = HCI_LINK_SCO;
    629  1.1.2.3  yamt 		bdaddr_copy(&sco->hl_bdaddr, bdaddr);
    630  1.1.2.3  yamt 
    631  1.1.2.3  yamt 		sco->hl_link = hci_acl_open(unit, bdaddr);
    632  1.1.2.3  yamt 		KASSERT(sco->hl_link == acl);
    633  1.1.2.3  yamt 
    634  1.1.2.3  yamt 		sco->hl_sco = new;
    635  1.1.2.3  yamt 		new->sp_link = sco;
    636  1.1.2.3  yamt 
    637  1.1.2.3  yamt 		new->sp_mtu = unit->hci_max_sco_size;
    638  1.1.2.3  yamt 		return sco;
    639  1.1.2.3  yamt 	}
    640  1.1.2.2  yamt 
    641  1.1.2.2  yamt 	return NULL;
    642  1.1.2.2  yamt }
    643  1.1.2.2  yamt 
    644  1.1.2.2  yamt /*
    645  1.1.2.2  yamt  * receive SCO packet, we only need to strip the header and send
    646  1.1.2.2  yamt  * it to the right handler
    647  1.1.2.2  yamt  */
    648  1.1.2.2  yamt void
    649  1.1.2.2  yamt hci_sco_recv(struct mbuf *m, struct hci_unit *unit)
    650  1.1.2.2  yamt {
    651  1.1.2.2  yamt 	struct hci_link *link;
    652  1.1.2.2  yamt 	hci_scodata_hdr_t hdr;
    653  1.1.2.2  yamt 	uint16_t handle;
    654  1.1.2.2  yamt 
    655  1.1.2.2  yamt 	KASSERT(m);
    656  1.1.2.2  yamt 	KASSERT(unit);
    657  1.1.2.2  yamt 
    658  1.1.2.2  yamt 	KASSERT(m->m_pkthdr.len >= sizeof(hdr));
    659  1.1.2.2  yamt 	m_copydata(m, 0, sizeof(hdr), &hdr);
    660  1.1.2.2  yamt 	m_adj(m, sizeof(hdr));
    661  1.1.2.2  yamt 
    662  1.1.2.2  yamt #ifdef DIAGNOSTIC
    663  1.1.2.2  yamt 	if (hdr.type != HCI_SCO_DATA_PKT) {
    664  1.1.2.2  yamt 		printf("%s: bad SCO packet type\n", unit->hci_devname);
    665  1.1.2.2  yamt 		goto bad;
    666  1.1.2.2  yamt 	}
    667  1.1.2.2  yamt 
    668  1.1.2.2  yamt 	if (m->m_pkthdr.len != hdr.length) {
    669  1.1.2.2  yamt 		printf("%s: bad SCO packet length (%d != %d)\n", unit->hci_devname, m->m_pkthdr.len, hdr.length);
    670  1.1.2.2  yamt 		goto bad;
    671  1.1.2.2  yamt 	}
    672  1.1.2.2  yamt #endif
    673  1.1.2.2  yamt 
    674  1.1.2.2  yamt 	hdr.con_handle = le16toh(hdr.con_handle);
    675  1.1.2.2  yamt 	handle = HCI_CON_HANDLE(hdr.con_handle);
    676  1.1.2.2  yamt 
    677  1.1.2.2  yamt 	link = hci_link_lookup_handle(unit, handle);
    678  1.1.2.2  yamt 	if (link == NULL || link->hl_type == HCI_LINK_ACL) {
    679  1.1.2.2  yamt 		DPRINTF("%s: dumping packet for unknown handle #%d\n",
    680  1.1.2.2  yamt 			unit->hci_devname, handle);
    681  1.1.2.2  yamt 
    682  1.1.2.2  yamt 		goto bad;
    683  1.1.2.2  yamt 	}
    684  1.1.2.2  yamt 
    685  1.1.2.2  yamt 	(*link->hl_sco->sp_proto->input)(link->hl_sco->sp_upper, m);
    686  1.1.2.2  yamt 	return;
    687  1.1.2.2  yamt 
    688  1.1.2.2  yamt bad:
    689  1.1.2.2  yamt 	m_freem(m);
    690  1.1.2.2  yamt }
    691  1.1.2.2  yamt 
    692  1.1.2.2  yamt void
    693  1.1.2.2  yamt hci_sco_start(struct hci_link *link)
    694  1.1.2.2  yamt {
    695  1.1.2.2  yamt }
    696  1.1.2.2  yamt 
    697  1.1.2.2  yamt /*
    698  1.1.2.2  yamt  * SCO packets have completed at the controller, so we can
    699  1.1.2.2  yamt  * signal up to free the buffer space.
    700  1.1.2.2  yamt  */
    701  1.1.2.2  yamt void
    702  1.1.2.2  yamt hci_sco_complete(struct hci_link *link, int num)
    703  1.1.2.2  yamt {
    704  1.1.2.2  yamt 
    705  1.1.2.2  yamt 	DPRINTFN(5, "handle #%d (num=%d)\n", link->hl_handle, num);
    706  1.1.2.2  yamt 	link->hl_sco->sp_pending--;
    707  1.1.2.2  yamt 	(*link->hl_sco->sp_proto->complete)(link->hl_sco->sp_upper, num);
    708  1.1.2.2  yamt }
    709  1.1.2.2  yamt 
    710  1.1.2.2  yamt /*******************************************************************************
    711  1.1.2.2  yamt  *
    712  1.1.2.2  yamt  *	Generic HCI Connection alloc/free/lookup etc
    713  1.1.2.2  yamt  */
    714  1.1.2.2  yamt 
    715  1.1.2.2  yamt struct hci_link *
    716  1.1.2.2  yamt hci_link_alloc(struct hci_unit *unit)
    717  1.1.2.2  yamt {
    718  1.1.2.2  yamt 	struct hci_link *link;
    719  1.1.2.2  yamt 
    720  1.1.2.2  yamt 	KASSERT(unit);
    721  1.1.2.2  yamt 
    722  1.1.2.2  yamt 	link = malloc(sizeof(struct hci_link), M_BLUETOOTH, M_NOWAIT | M_ZERO);
    723  1.1.2.2  yamt 	if (link == NULL)
    724  1.1.2.2  yamt 		return NULL;
    725  1.1.2.2  yamt 
    726  1.1.2.2  yamt 	link->hl_unit = unit;
    727  1.1.2.2  yamt 	link->hl_state = HCI_LINK_CLOSED;
    728  1.1.2.2  yamt 
    729  1.1.2.2  yamt 	/* init ACL portion */
    730  1.1.2.2  yamt 	callout_init(&link->hl_expire);
    731  1.1.2.2  yamt 	callout_setfunc(&link->hl_expire, hci_acl_timeout, link);
    732  1.1.2.2  yamt 
    733  1.1.2.2  yamt 	TAILQ_INIT(&link->hl_txq);	/* outgoing packets */
    734  1.1.2.2  yamt 	TAILQ_INIT(&link->hl_reqs);	/* request queue */
    735  1.1.2.2  yamt 
    736  1.1.2.2  yamt 	link->hl_mtu = L2CAP_MTU_DEFAULT;		/* L2CAP signal mtu */
    737  1.1.2.2  yamt 	link->hl_flush = L2CAP_FLUSH_TIMO_DEFAULT;	/* flush timeout */
    738  1.1.2.2  yamt 
    739  1.1.2.2  yamt 	/* init SCO portion */
    740  1.1.2.2  yamt 	MBUFQ_INIT(&link->hl_data);
    741  1.1.2.2  yamt 
    742  1.1.2.2  yamt 	/* attach to unit */
    743  1.1.2.2  yamt 	TAILQ_INSERT_HEAD(&unit->hci_links, link, hl_next);
    744  1.1.2.2  yamt 	return link;
    745  1.1.2.2  yamt }
    746  1.1.2.2  yamt 
    747  1.1.2.2  yamt void
    748  1.1.2.2  yamt hci_link_free(struct hci_link *link, int err)
    749  1.1.2.2  yamt {
    750  1.1.2.2  yamt 	struct l2cap_req *req;
    751  1.1.2.2  yamt 	struct l2cap_pdu *pdu;
    752  1.1.2.3  yamt 	struct l2cap_channel *chan, *next;
    753  1.1.2.2  yamt 
    754  1.1.2.2  yamt 	KASSERT(link);
    755  1.1.2.2  yamt 
    756  1.1.2.2  yamt 	DPRINTF("#%d, type = %d, state = %d, refcnt = %d\n",
    757  1.1.2.2  yamt 		link->hl_handle, link->hl_type,
    758  1.1.2.2  yamt 		link->hl_state, link->hl_refcnt);
    759  1.1.2.2  yamt 
    760  1.1.2.2  yamt 	/* ACL reference count */
    761  1.1.2.2  yamt 	if (link->hl_refcnt > 0) {
    762  1.1.2.3  yamt 		next = LIST_FIRST(&l2cap_active_list);
    763  1.1.2.3  yamt 		while ((chan = next) != NULL) {
    764  1.1.2.3  yamt 			next = LIST_NEXT(chan, lc_ncid);
    765  1.1.2.2  yamt 			if (chan->lc_link == link)
    766  1.1.2.2  yamt 				l2cap_close(chan, err);
    767  1.1.2.2  yamt 		}
    768  1.1.2.2  yamt 	}
    769  1.1.2.2  yamt 	KASSERT(link->hl_refcnt == 0);
    770  1.1.2.2  yamt 
    771  1.1.2.2  yamt 	/* ACL L2CAP requests.. */
    772  1.1.2.2  yamt 	while ((req = TAILQ_FIRST(&link->hl_reqs)) != NULL)
    773  1.1.2.2  yamt 		l2cap_request_free(req);
    774  1.1.2.2  yamt 
    775  1.1.2.2  yamt 	KASSERT(TAILQ_EMPTY(&link->hl_reqs));
    776  1.1.2.2  yamt 
    777  1.1.2.2  yamt 	/* ACL outgoing data queue */
    778  1.1.2.2  yamt 	while ((pdu = TAILQ_FIRST(&link->hl_txq)) != NULL) {
    779  1.1.2.2  yamt 		TAILQ_REMOVE(&link->hl_txq, pdu, lp_next);
    780  1.1.2.2  yamt 		MBUFQ_DRAIN(&pdu->lp_data);
    781  1.1.2.2  yamt 		if (pdu->lp_pending)
    782  1.1.2.2  yamt 			link->hl_unit->hci_num_acl_pkts += pdu->lp_pending;
    783  1.1.2.2  yamt 
    784  1.1.2.2  yamt 		pool_put(&l2cap_pdu_pool, pdu);
    785  1.1.2.2  yamt 	}
    786  1.1.2.2  yamt 
    787  1.1.2.2  yamt 	KASSERT(TAILQ_EMPTY(&link->hl_txq));
    788  1.1.2.2  yamt 
    789  1.1.2.2  yamt 	/* ACL incoming data packet */
    790  1.1.2.2  yamt 	if (link->hl_rxp != NULL) {
    791  1.1.2.2  yamt 		m_freem(link->hl_rxp);
    792  1.1.2.2  yamt 		link->hl_rxp = NULL;
    793  1.1.2.2  yamt 	}
    794  1.1.2.2  yamt 
    795  1.1.2.2  yamt 	/* SCO master ACL link */
    796  1.1.2.2  yamt 	if (link->hl_link != NULL) {
    797  1.1.2.2  yamt 		hci_acl_close(link->hl_link, err);
    798  1.1.2.2  yamt 		link->hl_link = NULL;
    799  1.1.2.2  yamt 	}
    800  1.1.2.2  yamt 
    801  1.1.2.2  yamt 	/* SCO pcb */
    802  1.1.2.2  yamt 	if (link->hl_sco != NULL) {
    803  1.1.2.2  yamt 		struct sco_pcb *pcb;
    804  1.1.2.2  yamt 
    805  1.1.2.2  yamt 		pcb = link->hl_sco;
    806  1.1.2.2  yamt 		pcb->sp_link = NULL;
    807  1.1.2.2  yamt 		link->hl_sco = NULL;
    808  1.1.2.2  yamt 		(*pcb->sp_proto->disconnected)(pcb->sp_upper, err);
    809  1.1.2.2  yamt 	}
    810  1.1.2.2  yamt 
    811  1.1.2.2  yamt 	/* flush any SCO data */
    812  1.1.2.2  yamt 	MBUFQ_DRAIN(&link->hl_data);
    813  1.1.2.2  yamt 
    814  1.1.2.2  yamt 	/*
    815  1.1.2.2  yamt 	 * Halt the callout - if its already running we cannot free the
    816  1.1.2.2  yamt 	 * link structure but the timeout function will call us back in
    817  1.1.2.2  yamt 	 * any case.
    818  1.1.2.2  yamt 	 */
    819  1.1.2.2  yamt 	link->hl_state = HCI_LINK_CLOSED;
    820  1.1.2.2  yamt 	callout_stop(&link->hl_expire);
    821  1.1.2.2  yamt 	if (callout_invoking(&link->hl_expire))
    822  1.1.2.2  yamt 		return;
    823  1.1.2.2  yamt 
    824  1.1.2.2  yamt 	TAILQ_REMOVE(&link->hl_unit->hci_links, link, hl_next);
    825  1.1.2.2  yamt 	free(link, M_BLUETOOTH);
    826  1.1.2.2  yamt }
    827  1.1.2.2  yamt 
    828  1.1.2.2  yamt /*
    829  1.1.2.2  yamt  * Lookup HCI link by address and type. Note that for SCO links there may
    830  1.1.2.2  yamt  * be more than one link per address, so we only return links with no
    831  1.1.2.2  yamt  * handle (ie new links)
    832  1.1.2.2  yamt  */
    833  1.1.2.2  yamt struct hci_link *
    834  1.1.2.2  yamt hci_link_lookup_bdaddr(struct hci_unit *unit, bdaddr_t *bdaddr, uint16_t type)
    835  1.1.2.2  yamt {
    836  1.1.2.2  yamt 	struct hci_link *link;
    837  1.1.2.2  yamt 
    838  1.1.2.2  yamt 	KASSERT(unit);
    839  1.1.2.2  yamt 	KASSERT(bdaddr);
    840  1.1.2.2  yamt 
    841  1.1.2.2  yamt 	TAILQ_FOREACH(link, &unit->hci_links, hl_next) {
    842  1.1.2.2  yamt 		if (link->hl_type != type)
    843  1.1.2.2  yamt 			continue;
    844  1.1.2.2  yamt 
    845  1.1.2.2  yamt 		if (type == HCI_LINK_SCO && link->hl_handle != 0)
    846  1.1.2.2  yamt 			continue;
    847  1.1.2.2  yamt 
    848  1.1.2.2  yamt 		if (bdaddr_same(&link->hl_bdaddr, bdaddr))
    849  1.1.2.2  yamt 			break;
    850  1.1.2.2  yamt 	}
    851  1.1.2.2  yamt 
    852  1.1.2.2  yamt 	return link;
    853  1.1.2.2  yamt }
    854  1.1.2.2  yamt 
    855  1.1.2.2  yamt struct hci_link *
    856  1.1.2.2  yamt hci_link_lookup_handle(struct hci_unit *unit, uint16_t handle)
    857  1.1.2.2  yamt {
    858  1.1.2.2  yamt 	struct hci_link *link;
    859  1.1.2.2  yamt 
    860  1.1.2.2  yamt 	KASSERT(unit);
    861  1.1.2.2  yamt 
    862  1.1.2.2  yamt 	TAILQ_FOREACH(link, &unit->hci_links, hl_next) {
    863  1.1.2.2  yamt 		if (handle == link->hl_handle)
    864  1.1.2.2  yamt 			break;
    865  1.1.2.2  yamt 	}
    866  1.1.2.2  yamt 
    867  1.1.2.2  yamt 	return link;
    868  1.1.2.2  yamt }
    869