l2cap_signal.c revision 1.1.2.5
1 1.1.2.5 yamt /* $NetBSD: l2cap_signal.c,v 1.1.2.5 2007/11/15 11:45:05 yamt Exp $ */ 2 1.1.2.2 yamt 3 1.1.2.2 yamt /*- 4 1.1.2.2 yamt * Copyright (c) 2005 Iain Hibbert. 5 1.1.2.2 yamt * Copyright (c) 2006 Itronix Inc. 6 1.1.2.2 yamt * All rights reserved. 7 1.1.2.2 yamt * 8 1.1.2.2 yamt * Redistribution and use in source and binary forms, with or without 9 1.1.2.2 yamt * modification, are permitted provided that the following conditions 10 1.1.2.2 yamt * are met: 11 1.1.2.2 yamt * 1. Redistributions of source code must retain the above copyright 12 1.1.2.2 yamt * notice, this list of conditions and the following disclaimer. 13 1.1.2.2 yamt * 2. Redistributions in binary form must reproduce the above copyright 14 1.1.2.2 yamt * notice, this list of conditions and the following disclaimer in the 15 1.1.2.2 yamt * documentation and/or other materials provided with the distribution. 16 1.1.2.2 yamt * 3. The name of Itronix Inc. may not be used to endorse 17 1.1.2.2 yamt * or promote products derived from this software without specific 18 1.1.2.2 yamt * prior written permission. 19 1.1.2.2 yamt * 20 1.1.2.2 yamt * THIS SOFTWARE IS PROVIDED BY ITRONIX INC. ``AS IS'' AND 21 1.1.2.2 yamt * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 22 1.1.2.2 yamt * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 23 1.1.2.2 yamt * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL ITRONIX INC. BE LIABLE FOR ANY 24 1.1.2.2 yamt * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 25 1.1.2.2 yamt * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 26 1.1.2.2 yamt * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND 27 1.1.2.2 yamt * ON ANY THEORY OF LIABILITY, WHETHER IN 28 1.1.2.2 yamt * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 29 1.1.2.2 yamt * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 30 1.1.2.2 yamt * POSSIBILITY OF SUCH DAMAGE. 31 1.1.2.2 yamt */ 32 1.1.2.2 yamt 33 1.1.2.2 yamt #include <sys/cdefs.h> 34 1.1.2.5 yamt __KERNEL_RCSID(0, "$NetBSD: l2cap_signal.c,v 1.1.2.5 2007/11/15 11:45:05 yamt Exp $"); 35 1.1.2.2 yamt 36 1.1.2.2 yamt #include <sys/param.h> 37 1.1.2.2 yamt #include <sys/kernel.h> 38 1.1.2.2 yamt #include <sys/mbuf.h> 39 1.1.2.2 yamt #include <sys/proc.h> 40 1.1.2.2 yamt #include <sys/queue.h> 41 1.1.2.2 yamt #include <sys/systm.h> 42 1.1.2.2 yamt 43 1.1.2.2 yamt #include <machine/stdarg.h> 44 1.1.2.2 yamt 45 1.1.2.2 yamt #include <netbt/bluetooth.h> 46 1.1.2.2 yamt #include <netbt/hci.h> 47 1.1.2.2 yamt #include <netbt/l2cap.h> 48 1.1.2.2 yamt 49 1.1.2.2 yamt /******************************************************************************* 50 1.1.2.2 yamt * 51 1.1.2.2 yamt * L2CAP Signal processing 52 1.1.2.2 yamt */ 53 1.1.2.2 yamt 54 1.1.2.2 yamt static void l2cap_recv_command_rej(struct mbuf *, struct hci_link *); 55 1.1.2.2 yamt static void l2cap_recv_connect_req(struct mbuf *, struct hci_link *); 56 1.1.2.2 yamt static void l2cap_recv_connect_rsp(struct mbuf *, struct hci_link *); 57 1.1.2.2 yamt static void l2cap_recv_config_req(struct mbuf *, struct hci_link *); 58 1.1.2.2 yamt static void l2cap_recv_config_rsp(struct mbuf *, struct hci_link *); 59 1.1.2.2 yamt static void l2cap_recv_disconnect_req(struct mbuf *, struct hci_link *); 60 1.1.2.2 yamt static void l2cap_recv_disconnect_rsp(struct mbuf *, struct hci_link *); 61 1.1.2.2 yamt static void l2cap_recv_info_req(struct mbuf *, struct hci_link *); 62 1.1.2.2 yamt static int l2cap_send_signal(struct hci_link *, uint8_t, uint8_t, uint16_t, void *); 63 1.1.2.2 yamt static int l2cap_send_command_rej(struct hci_link *, uint8_t, uint16_t, ...); 64 1.1.2.2 yamt 65 1.1.2.2 yamt /* 66 1.1.2.2 yamt * process incoming signal packets (CID 0x0001). Can contain multiple 67 1.1.2.2 yamt * requests/responses. 68 1.1.2.2 yamt */ 69 1.1.2.2 yamt void 70 1.1.2.2 yamt l2cap_recv_signal(struct mbuf *m, struct hci_link *link) 71 1.1.2.2 yamt { 72 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 73 1.1.2.2 yamt 74 1.1.2.2 yamt for(;;) { 75 1.1.2.2 yamt if (m->m_pkthdr.len == 0) 76 1.1.2.2 yamt goto finish; 77 1.1.2.2 yamt 78 1.1.2.2 yamt if (m->m_pkthdr.len < sizeof(cmd)) 79 1.1.2.2 yamt goto reject; 80 1.1.2.2 yamt 81 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 82 1.1.2.2 yamt cmd.length = le16toh(cmd.length); 83 1.1.2.2 yamt 84 1.1.2.2 yamt if (m->m_pkthdr.len < sizeof(cmd) + cmd.length) 85 1.1.2.2 yamt goto reject; 86 1.1.2.2 yamt 87 1.1.2.2 yamt DPRINTFN(2, "(%s) code %d, ident %d, len %d\n", 88 1.1.2.5 yamt device_xname(link->hl_unit->hci_dev), 89 1.1.2.2 yamt cmd.code, cmd.ident, cmd.length); 90 1.1.2.2 yamt 91 1.1.2.2 yamt switch (cmd.code) { 92 1.1.2.2 yamt case L2CAP_COMMAND_REJ: 93 1.1.2.2 yamt if (cmd.length > sizeof(l2cap_cmd_rej_cp)) 94 1.1.2.2 yamt goto finish; 95 1.1.2.2 yamt 96 1.1.2.2 yamt l2cap_recv_command_rej(m, link); 97 1.1.2.2 yamt break; 98 1.1.2.2 yamt 99 1.1.2.2 yamt case L2CAP_CONNECT_REQ: 100 1.1.2.2 yamt if (cmd.length != sizeof(l2cap_con_req_cp)) 101 1.1.2.2 yamt goto reject; 102 1.1.2.2 yamt 103 1.1.2.2 yamt l2cap_recv_connect_req(m, link); 104 1.1.2.2 yamt break; 105 1.1.2.2 yamt 106 1.1.2.2 yamt case L2CAP_CONNECT_RSP: 107 1.1.2.2 yamt if (cmd.length != sizeof(l2cap_con_rsp_cp)) 108 1.1.2.2 yamt goto finish; 109 1.1.2.2 yamt 110 1.1.2.2 yamt l2cap_recv_connect_rsp(m, link); 111 1.1.2.2 yamt break; 112 1.1.2.2 yamt 113 1.1.2.2 yamt case L2CAP_CONFIG_REQ: 114 1.1.2.2 yamt l2cap_recv_config_req(m, link); 115 1.1.2.2 yamt break; 116 1.1.2.2 yamt 117 1.1.2.2 yamt case L2CAP_CONFIG_RSP: 118 1.1.2.2 yamt l2cap_recv_config_rsp(m, link); 119 1.1.2.2 yamt break; 120 1.1.2.2 yamt 121 1.1.2.2 yamt case L2CAP_DISCONNECT_REQ: 122 1.1.2.2 yamt if (cmd.length != sizeof(l2cap_discon_req_cp)) 123 1.1.2.2 yamt goto reject; 124 1.1.2.2 yamt 125 1.1.2.2 yamt l2cap_recv_disconnect_req(m, link); 126 1.1.2.2 yamt break; 127 1.1.2.2 yamt 128 1.1.2.2 yamt case L2CAP_DISCONNECT_RSP: 129 1.1.2.2 yamt if (cmd.length != sizeof(l2cap_discon_rsp_cp)) 130 1.1.2.2 yamt goto finish; 131 1.1.2.2 yamt 132 1.1.2.2 yamt l2cap_recv_disconnect_rsp(m, link); 133 1.1.2.2 yamt break; 134 1.1.2.2 yamt 135 1.1.2.2 yamt case L2CAP_ECHO_REQ: 136 1.1.2.2 yamt m_adj(m, sizeof(cmd) + cmd.length); 137 1.1.2.2 yamt l2cap_send_signal(link, L2CAP_ECHO_RSP, cmd.ident, 138 1.1.2.2 yamt 0, NULL); 139 1.1.2.2 yamt break; 140 1.1.2.2 yamt 141 1.1.2.2 yamt case L2CAP_ECHO_RSP: 142 1.1.2.2 yamt m_adj(m, sizeof(cmd) + cmd.length); 143 1.1.2.2 yamt break; 144 1.1.2.2 yamt 145 1.1.2.2 yamt case L2CAP_INFO_REQ: 146 1.1.2.2 yamt if (cmd.length != sizeof(l2cap_info_req_cp)) 147 1.1.2.2 yamt goto reject; 148 1.1.2.2 yamt 149 1.1.2.2 yamt l2cap_recv_info_req(m, link); 150 1.1.2.2 yamt break; 151 1.1.2.2 yamt 152 1.1.2.2 yamt case L2CAP_INFO_RSP: 153 1.1.2.2 yamt m_adj(m, sizeof(cmd) + cmd.length); 154 1.1.2.2 yamt break; 155 1.1.2.2 yamt 156 1.1.2.2 yamt default: 157 1.1.2.2 yamt goto reject; 158 1.1.2.2 yamt } 159 1.1.2.2 yamt } 160 1.1.2.2 yamt 161 1.1.2.2 yamt #ifdef DIAGNOSTIC 162 1.1.2.2 yamt panic("impossible!"); 163 1.1.2.2 yamt #endif 164 1.1.2.2 yamt 165 1.1.2.2 yamt reject: 166 1.1.2.2 yamt l2cap_send_command_rej(link, cmd.ident, L2CAP_REJ_NOT_UNDERSTOOD); 167 1.1.2.2 yamt finish: 168 1.1.2.2 yamt m_freem(m); 169 1.1.2.2 yamt } 170 1.1.2.2 yamt 171 1.1.2.2 yamt /* 172 1.1.2.2 yamt * Process Received Command Reject. For now we dont try to recover gracefully 173 1.1.2.2 yamt * from this, it probably means that the link is garbled or the other end is 174 1.1.2.2 yamt * insufficiently capable of handling normal traffic. (not *my* fault, no way!) 175 1.1.2.2 yamt */ 176 1.1.2.2 yamt static void 177 1.1.2.2 yamt l2cap_recv_command_rej(struct mbuf *m, struct hci_link *link) 178 1.1.2.2 yamt { 179 1.1.2.2 yamt struct l2cap_req *req; 180 1.1.2.2 yamt struct l2cap_channel *chan; 181 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 182 1.1.2.2 yamt l2cap_cmd_rej_cp cp; 183 1.1.2.2 yamt 184 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 185 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 186 1.1.2.2 yamt 187 1.1.2.2 yamt cmd.length = le16toh(cmd.length); 188 1.1.2.2 yamt 189 1.1.2.2 yamt m_copydata(m, 0, cmd.length, &cp); 190 1.1.2.2 yamt m_adj(m, cmd.length); 191 1.1.2.2 yamt 192 1.1.2.2 yamt req = l2cap_request_lookup(link, cmd.ident); 193 1.1.2.2 yamt if (req == NULL) 194 1.1.2.2 yamt return; 195 1.1.2.2 yamt 196 1.1.2.2 yamt switch (le16toh(cp.reason)) { 197 1.1.2.2 yamt case L2CAP_REJ_NOT_UNDERSTOOD: 198 1.1.2.2 yamt /* 199 1.1.2.2 yamt * I dont know what to do, just move up the timeout 200 1.1.2.2 yamt */ 201 1.1.2.2 yamt callout_schedule(&req->lr_rtx, 0); 202 1.1.2.2 yamt break; 203 1.1.2.2 yamt 204 1.1.2.2 yamt case L2CAP_REJ_MTU_EXCEEDED: 205 1.1.2.2 yamt /* 206 1.1.2.2 yamt * I didnt send any commands over L2CAP_MTU_MINIMUM size, but.. 207 1.1.2.4 yamt * 208 1.1.2.4 yamt * XXX maybe we should resend this, instead? 209 1.1.2.2 yamt */ 210 1.1.2.2 yamt link->hl_mtu = le16toh(cp.data[0]); 211 1.1.2.4 yamt callout_schedule(&req->lr_rtx, 0); 212 1.1.2.2 yamt break; 213 1.1.2.2 yamt 214 1.1.2.2 yamt case L2CAP_REJ_INVALID_CID: 215 1.1.2.2 yamt /* 216 1.1.2.2 yamt * Well, if they dont have such a channel then our channel is 217 1.1.2.2 yamt * most likely closed. Make it so. 218 1.1.2.2 yamt */ 219 1.1.2.2 yamt chan = req->lr_chan; 220 1.1.2.2 yamt l2cap_request_free(req); 221 1.1.2.2 yamt if (chan != NULL && chan->lc_state != L2CAP_CLOSED) 222 1.1.2.2 yamt l2cap_close(chan, ECONNABORTED); 223 1.1.2.2 yamt 224 1.1.2.2 yamt break; 225 1.1.2.2 yamt 226 1.1.2.2 yamt default: 227 1.1.2.2 yamt UNKNOWN(le16toh(cp.reason)); 228 1.1.2.2 yamt break; 229 1.1.2.2 yamt } 230 1.1.2.2 yamt } 231 1.1.2.2 yamt 232 1.1.2.2 yamt /* 233 1.1.2.2 yamt * Process Received Connect Request. Find listening channel matching 234 1.1.2.2 yamt * psm & addr and ask upper layer for a new channel. 235 1.1.2.2 yamt */ 236 1.1.2.2 yamt static void 237 1.1.2.2 yamt l2cap_recv_connect_req(struct mbuf *m, struct hci_link *link) 238 1.1.2.2 yamt { 239 1.1.2.2 yamt struct sockaddr_bt laddr, raddr; 240 1.1.2.2 yamt struct l2cap_channel *chan, *new; 241 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 242 1.1.2.2 yamt l2cap_con_req_cp cp; 243 1.1.2.2 yamt int err; 244 1.1.2.2 yamt 245 1.1.2.2 yamt /* extract cmd */ 246 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 247 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 248 1.1.2.2 yamt 249 1.1.2.2 yamt /* extract request */ 250 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 251 1.1.2.2 yamt m_adj(m, sizeof(cp)); 252 1.1.2.2 yamt 253 1.1.2.4 yamt cp.scid = le16toh(cp.scid); 254 1.1.2.4 yamt cp.psm = le16toh(cp.psm); 255 1.1.2.2 yamt 256 1.1.2.2 yamt memset(&laddr, 0, sizeof(struct sockaddr_bt)); 257 1.1.2.2 yamt laddr.bt_len = sizeof(struct sockaddr_bt); 258 1.1.2.2 yamt laddr.bt_family = AF_BLUETOOTH; 259 1.1.2.4 yamt laddr.bt_psm = cp.psm; 260 1.1.2.2 yamt bdaddr_copy(&laddr.bt_bdaddr, &link->hl_unit->hci_bdaddr); 261 1.1.2.2 yamt 262 1.1.2.2 yamt memset(&raddr, 0, sizeof(struct sockaddr_bt)); 263 1.1.2.2 yamt raddr.bt_len = sizeof(struct sockaddr_bt); 264 1.1.2.2 yamt raddr.bt_family = AF_BLUETOOTH; 265 1.1.2.4 yamt raddr.bt_psm = cp.psm; 266 1.1.2.2 yamt bdaddr_copy(&raddr.bt_bdaddr, &link->hl_bdaddr); 267 1.1.2.2 yamt 268 1.1.2.2 yamt LIST_FOREACH(chan, &l2cap_listen_list, lc_ncid) { 269 1.1.2.2 yamt if (chan->lc_laddr.bt_psm != laddr.bt_psm 270 1.1.2.2 yamt && chan->lc_laddr.bt_psm != L2CAP_PSM_ANY) 271 1.1.2.2 yamt continue; 272 1.1.2.2 yamt 273 1.1.2.2 yamt if (!bdaddr_same(&laddr.bt_bdaddr, &chan->lc_laddr.bt_bdaddr) 274 1.1.2.2 yamt && bdaddr_any(&chan->lc_laddr.bt_bdaddr) == 0) 275 1.1.2.2 yamt continue; 276 1.1.2.2 yamt 277 1.1.2.2 yamt new= (*chan->lc_proto->newconn)(chan->lc_upper, &laddr, &raddr); 278 1.1.2.2 yamt if (new == NULL) 279 1.1.2.2 yamt continue; 280 1.1.2.2 yamt 281 1.1.2.2 yamt err = l2cap_cid_alloc(new); 282 1.1.2.2 yamt if (err) { 283 1.1.2.4 yamt l2cap_send_connect_rsp(link, cmd.ident, 284 1.1.2.4 yamt 0, cp.scid, 285 1.1.2.4 yamt L2CAP_NO_RESOURCES); 286 1.1.2.4 yamt 287 1.1.2.2 yamt (*new->lc_proto->disconnected)(new->lc_upper, err); 288 1.1.2.2 yamt return; 289 1.1.2.2 yamt } 290 1.1.2.2 yamt 291 1.1.2.2 yamt new->lc_link = hci_acl_open(link->hl_unit, &link->hl_bdaddr); 292 1.1.2.2 yamt KASSERT(new->lc_link == link); 293 1.1.2.2 yamt 294 1.1.2.4 yamt new->lc_rcid = cp.scid; 295 1.1.2.4 yamt new->lc_ident = cmd.ident; 296 1.1.2.2 yamt 297 1.1.2.2 yamt memcpy(&new->lc_laddr, &laddr, sizeof(struct sockaddr_bt)); 298 1.1.2.2 yamt memcpy(&new->lc_raddr, &raddr, sizeof(struct sockaddr_bt)); 299 1.1.2.2 yamt 300 1.1.2.4 yamt new->lc_mode = chan->lc_mode; 301 1.1.2.4 yamt 302 1.1.2.4 yamt err = l2cap_setmode(new); 303 1.1.2.4 yamt if (err == EINPROGRESS) { 304 1.1.2.4 yamt new->lc_state = L2CAP_WAIT_SEND_CONNECT_RSP; 305 1.1.2.4 yamt (*new->lc_proto->connecting)(new->lc_upper); 306 1.1.2.4 yamt return; 307 1.1.2.4 yamt } 308 1.1.2.4 yamt if (err) { 309 1.1.2.4 yamt new->lc_state = L2CAP_CLOSED; 310 1.1.2.4 yamt hci_acl_close(link, err); 311 1.1.2.4 yamt new->lc_link = NULL; 312 1.1.2.4 yamt 313 1.1.2.4 yamt l2cap_send_connect_rsp(link, cmd.ident, 314 1.1.2.4 yamt 0, cp.scid, 315 1.1.2.4 yamt L2CAP_NO_RESOURCES); 316 1.1.2.4 yamt 317 1.1.2.4 yamt (*new->lc_proto->disconnected)(new->lc_upper, err); 318 1.1.2.4 yamt return; 319 1.1.2.4 yamt } 320 1.1.2.4 yamt 321 1.1.2.4 yamt err = l2cap_send_connect_rsp(link, cmd.ident, 322 1.1.2.4 yamt new->lc_lcid, new->lc_rcid, 323 1.1.2.4 yamt L2CAP_SUCCESS); 324 1.1.2.4 yamt if (err) { 325 1.1.2.4 yamt l2cap_close(new, err); 326 1.1.2.4 yamt return; 327 1.1.2.4 yamt } 328 1.1.2.4 yamt 329 1.1.2.4 yamt new->lc_state = L2CAP_WAIT_CONFIG; 330 1.1.2.4 yamt new->lc_flags |= (L2CAP_WAIT_CONFIG_REQ | L2CAP_WAIT_CONFIG_RSP); 331 1.1.2.4 yamt err = l2cap_send_config_req(new); 332 1.1.2.4 yamt if (err) 333 1.1.2.4 yamt l2cap_close(new, err); 334 1.1.2.2 yamt 335 1.1.2.2 yamt return; 336 1.1.2.2 yamt } 337 1.1.2.2 yamt 338 1.1.2.4 yamt l2cap_send_connect_rsp(link, cmd.ident, 339 1.1.2.4 yamt 0, cp.scid, 340 1.1.2.4 yamt L2CAP_PSM_NOT_SUPPORTED); 341 1.1.2.2 yamt } 342 1.1.2.2 yamt 343 1.1.2.2 yamt /* 344 1.1.2.2 yamt * Process Received Connect Response. 345 1.1.2.2 yamt */ 346 1.1.2.2 yamt static void 347 1.1.2.2 yamt l2cap_recv_connect_rsp(struct mbuf *m, struct hci_link *link) 348 1.1.2.2 yamt { 349 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 350 1.1.2.2 yamt l2cap_con_rsp_cp cp; 351 1.1.2.2 yamt struct l2cap_req *req; 352 1.1.2.2 yamt struct l2cap_channel *chan; 353 1.1.2.2 yamt 354 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 355 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 356 1.1.2.2 yamt 357 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 358 1.1.2.2 yamt m_adj(m, sizeof(cp)); 359 1.1.2.2 yamt 360 1.1.2.2 yamt cp.scid = le16toh(cp.scid); 361 1.1.2.2 yamt cp.dcid = le16toh(cp.dcid); 362 1.1.2.2 yamt cp.result = le16toh(cp.result); 363 1.1.2.2 yamt 364 1.1.2.2 yamt req = l2cap_request_lookup(link, cmd.ident); 365 1.1.2.2 yamt if (req == NULL || req->lr_code != L2CAP_CONNECT_REQ) 366 1.1.2.2 yamt return; 367 1.1.2.2 yamt 368 1.1.2.2 yamt chan = req->lr_chan; 369 1.1.2.2 yamt if (chan != NULL && chan->lc_lcid != cp.scid) 370 1.1.2.2 yamt return; 371 1.1.2.2 yamt 372 1.1.2.4 yamt if (chan == NULL || chan->lc_state != L2CAP_WAIT_RECV_CONNECT_RSP) { 373 1.1.2.2 yamt l2cap_request_free(req); 374 1.1.2.2 yamt return; 375 1.1.2.2 yamt } 376 1.1.2.2 yamt 377 1.1.2.2 yamt switch (cp.result) { 378 1.1.2.2 yamt case L2CAP_SUCCESS: 379 1.1.2.2 yamt /* 380 1.1.2.2 yamt * Ok, at this point we have a connection to the other party. We 381 1.1.2.2 yamt * could indicate upstream that we are ready for business and 382 1.1.2.2 yamt * wait for a "Configure Channel Request" but I'm not so sure 383 1.1.2.2 yamt * that is required in our case - we will proceed directly to 384 1.1.2.2 yamt * sending our config request. We set two state bits because in 385 1.1.2.2 yamt * the config state we are waiting for requests and responses. 386 1.1.2.2 yamt */ 387 1.1.2.2 yamt l2cap_request_free(req); 388 1.1.2.2 yamt chan->lc_rcid = cp.dcid; 389 1.1.2.4 yamt chan->lc_state = L2CAP_WAIT_CONFIG; 390 1.1.2.4 yamt chan->lc_flags |= (L2CAP_WAIT_CONFIG_REQ | L2CAP_WAIT_CONFIG_RSP); 391 1.1.2.2 yamt l2cap_send_config_req(chan); 392 1.1.2.2 yamt break; 393 1.1.2.2 yamt 394 1.1.2.2 yamt case L2CAP_PENDING: 395 1.1.2.4 yamt /* XXX dont release request, should start eRTX timeout? */ 396 1.1.2.2 yamt (*chan->lc_proto->connecting)(chan->lc_upper); 397 1.1.2.2 yamt break; 398 1.1.2.2 yamt 399 1.1.2.2 yamt case L2CAP_PSM_NOT_SUPPORTED: 400 1.1.2.2 yamt case L2CAP_SECURITY_BLOCK: 401 1.1.2.2 yamt case L2CAP_NO_RESOURCES: 402 1.1.2.2 yamt default: 403 1.1.2.2 yamt l2cap_request_free(req); 404 1.1.2.2 yamt l2cap_close(chan, ECONNREFUSED); 405 1.1.2.2 yamt break; 406 1.1.2.2 yamt } 407 1.1.2.2 yamt } 408 1.1.2.2 yamt 409 1.1.2.2 yamt /* 410 1.1.2.2 yamt * Process Received Config Reqest. 411 1.1.2.2 yamt */ 412 1.1.2.2 yamt static void 413 1.1.2.2 yamt l2cap_recv_config_req(struct mbuf *m, struct hci_link *link) 414 1.1.2.2 yamt { 415 1.1.2.2 yamt uint8_t buf[L2CAP_MTU_MINIMUM]; 416 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 417 1.1.2.2 yamt l2cap_cfg_req_cp cp; 418 1.1.2.3 yamt l2cap_cfg_opt_t opt; 419 1.1.2.3 yamt l2cap_cfg_opt_val_t val; 420 1.1.2.3 yamt l2cap_cfg_rsp_cp rp; 421 1.1.2.2 yamt struct l2cap_channel *chan; 422 1.1.2.2 yamt int left, len; 423 1.1.2.2 yamt 424 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 425 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 426 1.1.2.2 yamt left = le16toh(cmd.length); 427 1.1.2.2 yamt 428 1.1.2.2 yamt if (left < sizeof(cp)) 429 1.1.2.2 yamt goto reject; 430 1.1.2.2 yamt 431 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 432 1.1.2.2 yamt m_adj(m, sizeof(cp)); 433 1.1.2.2 yamt left -= sizeof(cp); 434 1.1.2.2 yamt 435 1.1.2.2 yamt cp.dcid = le16toh(cp.dcid); 436 1.1.2.2 yamt cp.flags = le16toh(cp.flags); 437 1.1.2.2 yamt 438 1.1.2.2 yamt chan = l2cap_cid_lookup(cp.dcid); 439 1.1.2.4 yamt if (chan == NULL || chan->lc_link != link 440 1.1.2.4 yamt || chan->lc_state != L2CAP_WAIT_CONFIG 441 1.1.2.4 yamt || (chan->lc_flags & L2CAP_WAIT_CONFIG_REQ) == 0) { 442 1.1.2.4 yamt /* XXX we should really accept reconfiguration requests */ 443 1.1.2.2 yamt l2cap_send_command_rej(link, cmd.ident, L2CAP_REJ_INVALID_CID, 444 1.1.2.2 yamt L2CAP_NULL_CID, cp.dcid); 445 1.1.2.2 yamt goto out; 446 1.1.2.2 yamt } 447 1.1.2.2 yamt 448 1.1.2.2 yamt /* ready our response packet */ 449 1.1.2.3 yamt rp.scid = htole16(chan->lc_rcid); 450 1.1.2.3 yamt rp.flags = 0; /* "No Continuation" */ 451 1.1.2.3 yamt rp.result = L2CAP_SUCCESS; 452 1.1.2.3 yamt len = sizeof(rp); 453 1.1.2.2 yamt 454 1.1.2.2 yamt /* 455 1.1.2.2 yamt * Process the packet. We build the return packet on the fly adding any 456 1.1.2.2 yamt * unacceptable parameters as we go. As we can only return one result, 457 1.1.2.2 yamt * unknown option takes precedence so we start our return packet anew 458 1.1.2.2 yamt * and ignore option values thereafter as they will be re-sent. 459 1.1.2.2 yamt * 460 1.1.2.2 yamt * Since we do not support enough options to make overflowing the min 461 1.1.2.2 yamt * MTU size an issue in normal use, we just reject config requests that 462 1.1.2.3 yamt * make that happen. This could be because options are repeated or the 463 1.1.2.3 yamt * packet is corrupted in some way. 464 1.1.2.2 yamt * 465 1.1.2.3 yamt * If unknown option types threaten to overflow the packet, we just 466 1.1.2.3 yamt * ignore them. We can deny them next time. 467 1.1.2.2 yamt */ 468 1.1.2.2 yamt while (left > 0) { 469 1.1.2.3 yamt if (left < sizeof(opt)) 470 1.1.2.2 yamt goto reject; 471 1.1.2.2 yamt 472 1.1.2.3 yamt m_copydata(m, 0, sizeof(opt), &opt); 473 1.1.2.3 yamt m_adj(m, sizeof(opt)); 474 1.1.2.3 yamt left -= sizeof(opt); 475 1.1.2.2 yamt 476 1.1.2.3 yamt if (left < opt.length) 477 1.1.2.2 yamt goto reject; 478 1.1.2.2 yamt 479 1.1.2.3 yamt switch(opt.type & L2CAP_OPT_HINT_MASK) { 480 1.1.2.2 yamt case L2CAP_OPT_MTU: 481 1.1.2.3 yamt if (rp.result == L2CAP_UNKNOWN_OPTION) 482 1.1.2.2 yamt break; 483 1.1.2.2 yamt 484 1.1.2.3 yamt if (opt.length != L2CAP_OPT_MTU_SIZE) 485 1.1.2.2 yamt goto reject; 486 1.1.2.2 yamt 487 1.1.2.3 yamt m_copydata(m, 0, L2CAP_OPT_MTU_SIZE, &val); 488 1.1.2.3 yamt val.mtu = le16toh(val.mtu); 489 1.1.2.2 yamt 490 1.1.2.2 yamt /* 491 1.1.2.2 yamt * XXX how do we know what the minimum acceptable MTU is 492 1.1.2.2 yamt * for a channel? Spec says some profiles have a higher 493 1.1.2.2 yamt * minimum but I have no way to find that out at this 494 1.1.2.2 yamt * juncture.. 495 1.1.2.2 yamt */ 496 1.1.2.3 yamt if (val.mtu < L2CAP_MTU_MINIMUM) { 497 1.1.2.3 yamt if (len + sizeof(opt) + L2CAP_OPT_MTU_SIZE > sizeof(buf)) 498 1.1.2.3 yamt goto reject; 499 1.1.2.3 yamt 500 1.1.2.3 yamt rp.result = L2CAP_UNACCEPTABLE_PARAMS; 501 1.1.2.3 yamt memcpy(buf + len, &opt, sizeof(opt)); 502 1.1.2.3 yamt len += sizeof(opt); 503 1.1.2.3 yamt val.mtu = htole16(L2CAP_MTU_MINIMUM); 504 1.1.2.3 yamt memcpy(buf + len, &val, L2CAP_OPT_MTU_SIZE); 505 1.1.2.3 yamt len += L2CAP_OPT_MTU_SIZE; 506 1.1.2.2 yamt } else 507 1.1.2.3 yamt chan->lc_omtu = val.mtu; 508 1.1.2.2 yamt 509 1.1.2.2 yamt break; 510 1.1.2.2 yamt 511 1.1.2.2 yamt case L2CAP_OPT_FLUSH_TIMO: 512 1.1.2.3 yamt if (rp.result == L2CAP_UNKNOWN_OPTION) 513 1.1.2.2 yamt break; 514 1.1.2.2 yamt 515 1.1.2.3 yamt if (opt.length != L2CAP_OPT_FLUSH_TIMO_SIZE) 516 1.1.2.2 yamt goto reject; 517 1.1.2.2 yamt 518 1.1.2.2 yamt /* 519 1.1.2.2 yamt * I think that this is informational only - he is 520 1.1.2.2 yamt * informing us of the flush timeout he will be using. 521 1.1.2.2 yamt * I dont think this affects us in any significant way, 522 1.1.2.2 yamt * so just ignore this value for now. 523 1.1.2.2 yamt */ 524 1.1.2.2 yamt break; 525 1.1.2.2 yamt 526 1.1.2.2 yamt case L2CAP_OPT_QOS: 527 1.1.2.2 yamt default: 528 1.1.2.2 yamt /* ignore hints */ 529 1.1.2.3 yamt if (opt.type & L2CAP_OPT_HINT_BIT) 530 1.1.2.2 yamt break; 531 1.1.2.2 yamt 532 1.1.2.2 yamt /* unknown options supercede all else */ 533 1.1.2.3 yamt if (rp.result != L2CAP_UNKNOWN_OPTION) { 534 1.1.2.3 yamt rp.result = L2CAP_UNKNOWN_OPTION; 535 1.1.2.3 yamt len = sizeof(rp); 536 1.1.2.2 yamt } 537 1.1.2.2 yamt 538 1.1.2.3 yamt /* ignore if it don't fit */ 539 1.1.2.3 yamt if (len + sizeof(opt) > sizeof(buf)) 540 1.1.2.3 yamt break; 541 1.1.2.3 yamt 542 1.1.2.3 yamt /* return unknown option type, but no data */ 543 1.1.2.3 yamt buf[len++] = opt.type; 544 1.1.2.3 yamt buf[len++] = 0; 545 1.1.2.2 yamt break; 546 1.1.2.2 yamt } 547 1.1.2.2 yamt 548 1.1.2.3 yamt m_adj(m, opt.length); 549 1.1.2.3 yamt left -= opt.length; 550 1.1.2.2 yamt } 551 1.1.2.2 yamt 552 1.1.2.3 yamt rp.result = htole16(rp.result); 553 1.1.2.3 yamt memcpy(buf, &rp, sizeof(rp)); 554 1.1.2.2 yamt l2cap_send_signal(link, L2CAP_CONFIG_RSP, cmd.ident, len, buf); 555 1.1.2.2 yamt 556 1.1.2.2 yamt if ((cp.flags & L2CAP_OPT_CFLAG_BIT) == 0 557 1.1.2.3 yamt && rp.result == le16toh(L2CAP_SUCCESS)) { 558 1.1.2.2 yamt 559 1.1.2.4 yamt chan->lc_flags &= ~L2CAP_WAIT_CONFIG_REQ; 560 1.1.2.2 yamt 561 1.1.2.4 yamt if ((chan->lc_flags & L2CAP_WAIT_CONFIG_RSP) == 0) { 562 1.1.2.2 yamt chan->lc_state = L2CAP_OPEN; 563 1.1.2.4 yamt /* XXX how to distinguish REconfiguration? */ 564 1.1.2.2 yamt (*chan->lc_proto->connected)(chan->lc_upper); 565 1.1.2.2 yamt } 566 1.1.2.2 yamt } 567 1.1.2.2 yamt return; 568 1.1.2.2 yamt 569 1.1.2.2 yamt reject: 570 1.1.2.2 yamt l2cap_send_command_rej(link, cmd.ident, L2CAP_REJ_NOT_UNDERSTOOD); 571 1.1.2.2 yamt out: 572 1.1.2.2 yamt m_adj(m, left); 573 1.1.2.2 yamt } 574 1.1.2.2 yamt 575 1.1.2.2 yamt /* 576 1.1.2.2 yamt * Process Received Config Response. 577 1.1.2.2 yamt */ 578 1.1.2.2 yamt static void 579 1.1.2.2 yamt l2cap_recv_config_rsp(struct mbuf *m, struct hci_link *link) 580 1.1.2.2 yamt { 581 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 582 1.1.2.2 yamt l2cap_cfg_rsp_cp cp; 583 1.1.2.2 yamt l2cap_cfg_opt_t opt; 584 1.1.2.2 yamt l2cap_cfg_opt_val_t val; 585 1.1.2.2 yamt struct l2cap_req *req; 586 1.1.2.2 yamt struct l2cap_channel *chan; 587 1.1.2.2 yamt int left; 588 1.1.2.2 yamt 589 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 590 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 591 1.1.2.2 yamt left = le16toh(cmd.length); 592 1.1.2.2 yamt 593 1.1.2.2 yamt if (left < sizeof(cp)) 594 1.1.2.2 yamt goto out; 595 1.1.2.2 yamt 596 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 597 1.1.2.2 yamt m_adj(m, sizeof(cp)); 598 1.1.2.2 yamt left -= sizeof(cp); 599 1.1.2.2 yamt 600 1.1.2.2 yamt cp.scid = le16toh(cp.scid); 601 1.1.2.2 yamt cp.flags = le16toh(cp.flags); 602 1.1.2.2 yamt cp.result = le16toh(cp.result); 603 1.1.2.2 yamt 604 1.1.2.2 yamt req = l2cap_request_lookup(link, cmd.ident); 605 1.1.2.2 yamt if (req == NULL || req->lr_code != L2CAP_CONFIG_REQ) 606 1.1.2.2 yamt goto out; 607 1.1.2.2 yamt 608 1.1.2.2 yamt chan = req->lr_chan; 609 1.1.2.2 yamt if (chan != NULL && chan->lc_lcid != cp.scid) 610 1.1.2.2 yamt goto out; 611 1.1.2.2 yamt 612 1.1.2.2 yamt l2cap_request_free(req); 613 1.1.2.2 yamt 614 1.1.2.4 yamt if (chan == NULL || chan->lc_state != L2CAP_WAIT_CONFIG 615 1.1.2.4 yamt || (chan->lc_flags & L2CAP_WAIT_CONFIG_RSP) == 0) 616 1.1.2.2 yamt goto out; 617 1.1.2.2 yamt 618 1.1.2.2 yamt if ((cp.flags & L2CAP_OPT_CFLAG_BIT)) { 619 1.1.2.2 yamt l2cap_cfg_req_cp rp; 620 1.1.2.2 yamt 621 1.1.2.2 yamt /* 622 1.1.2.2 yamt * They have more to tell us and want another ID to 623 1.1.2.2 yamt * use, so send an empty config request 624 1.1.2.2 yamt */ 625 1.1.2.2 yamt if (l2cap_request_alloc(chan, L2CAP_CONFIG_REQ)) 626 1.1.2.2 yamt goto discon; 627 1.1.2.2 yamt 628 1.1.2.2 yamt rp.dcid = htole16(cp.scid); 629 1.1.2.2 yamt rp.flags = 0; 630 1.1.2.2 yamt 631 1.1.2.2 yamt if (l2cap_send_signal(link, L2CAP_CONFIG_REQ, link->hl_lastid, 632 1.1.2.2 yamt sizeof(rp), &rp)) 633 1.1.2.2 yamt goto discon; 634 1.1.2.2 yamt } 635 1.1.2.2 yamt 636 1.1.2.2 yamt switch(cp.result) { 637 1.1.2.2 yamt case L2CAP_SUCCESS: 638 1.1.2.2 yamt /* 639 1.1.2.2 yamt * If continuation flag was not set, our config request was 640 1.1.2.2 yamt * accepted. We may have to wait for their config request to 641 1.1.2.2 yamt * complete, so check that but otherwise we are open 642 1.1.2.2 yamt * 643 1.1.2.2 yamt * There may be 'advisory' values in the packet but we just 644 1.1.2.2 yamt * ignore those.. 645 1.1.2.2 yamt */ 646 1.1.2.2 yamt if ((cp.flags & L2CAP_OPT_CFLAG_BIT) == 0) { 647 1.1.2.4 yamt chan->lc_flags &= ~L2CAP_WAIT_CONFIG_RSP; 648 1.1.2.2 yamt 649 1.1.2.4 yamt if ((chan->lc_flags & L2CAP_WAIT_CONFIG_REQ) == 0) { 650 1.1.2.2 yamt chan->lc_state = L2CAP_OPEN; 651 1.1.2.4 yamt /* XXX how to distinguish REconfiguration? */ 652 1.1.2.2 yamt (*chan->lc_proto->connected)(chan->lc_upper); 653 1.1.2.2 yamt } 654 1.1.2.2 yamt } 655 1.1.2.2 yamt goto out; 656 1.1.2.2 yamt 657 1.1.2.2 yamt case L2CAP_UNACCEPTABLE_PARAMS: 658 1.1.2.2 yamt /* 659 1.1.2.2 yamt * Packet contains unacceptable parameters with preferred values 660 1.1.2.2 yamt */ 661 1.1.2.2 yamt while (left > 0) { 662 1.1.2.2 yamt if (left < sizeof(opt)) 663 1.1.2.2 yamt goto discon; 664 1.1.2.2 yamt 665 1.1.2.2 yamt m_copydata(m, 0, sizeof(opt), &opt); 666 1.1.2.2 yamt m_adj(m, sizeof(opt)); 667 1.1.2.2 yamt left -= sizeof(opt); 668 1.1.2.2 yamt 669 1.1.2.2 yamt if (left < opt.length) 670 1.1.2.2 yamt goto discon; 671 1.1.2.2 yamt 672 1.1.2.2 yamt switch (opt.type) { 673 1.1.2.2 yamt case L2CAP_OPT_MTU: 674 1.1.2.2 yamt if (opt.length != L2CAP_OPT_MTU_SIZE) 675 1.1.2.2 yamt goto discon; 676 1.1.2.2 yamt 677 1.1.2.2 yamt m_copydata(m, 0, L2CAP_OPT_MTU_SIZE, &val); 678 1.1.2.2 yamt chan->lc_imtu = le16toh(val.mtu); 679 1.1.2.2 yamt if (chan->lc_imtu < L2CAP_MTU_MINIMUM) 680 1.1.2.2 yamt chan->lc_imtu = L2CAP_MTU_DEFAULT; 681 1.1.2.2 yamt break; 682 1.1.2.2 yamt 683 1.1.2.2 yamt case L2CAP_OPT_FLUSH_TIMO: 684 1.1.2.2 yamt if (opt.length != L2CAP_OPT_FLUSH_TIMO_SIZE) 685 1.1.2.2 yamt goto discon; 686 1.1.2.2 yamt 687 1.1.2.2 yamt /* 688 1.1.2.2 yamt * Spec says: If we cannot honor proposed value, 689 1.1.2.2 yamt * either disconnect or try again with original 690 1.1.2.2 yamt * value. I can't really see why they want to 691 1.1.2.2 yamt * interfere with OUR flush timeout in any case 692 1.1.2.2 yamt * so we just punt for now. 693 1.1.2.2 yamt */ 694 1.1.2.2 yamt goto discon; 695 1.1.2.2 yamt 696 1.1.2.2 yamt case L2CAP_OPT_QOS: 697 1.1.2.2 yamt break; 698 1.1.2.2 yamt 699 1.1.2.2 yamt default: 700 1.1.2.2 yamt UNKNOWN(opt.type); 701 1.1.2.2 yamt goto discon; 702 1.1.2.2 yamt } 703 1.1.2.2 yamt 704 1.1.2.2 yamt m_adj(m, opt.length); 705 1.1.2.2 yamt left -= opt.length; 706 1.1.2.2 yamt } 707 1.1.2.2 yamt 708 1.1.2.2 yamt if ((cp.flags & L2CAP_OPT_CFLAG_BIT) == 0) 709 1.1.2.4 yamt l2cap_send_config_req(chan); /* no state change */ 710 1.1.2.2 yamt 711 1.1.2.2 yamt goto out; 712 1.1.2.2 yamt 713 1.1.2.2 yamt case L2CAP_REJECT: 714 1.1.2.2 yamt goto discon; 715 1.1.2.2 yamt 716 1.1.2.2 yamt case L2CAP_UNKNOWN_OPTION: 717 1.1.2.2 yamt /* 718 1.1.2.2 yamt * Packet contains options not understood. Turn off unknown 719 1.1.2.2 yamt * options by setting them to default values (means they will 720 1.1.2.2 yamt * not be requested again). 721 1.1.2.2 yamt * 722 1.1.2.2 yamt * If our option was already off then fail (paranoia?) 723 1.1.2.2 yamt * 724 1.1.2.2 yamt * XXX Should we consider that options were set for a reason? 725 1.1.2.2 yamt */ 726 1.1.2.2 yamt while (left > 0) { 727 1.1.2.2 yamt if (left < sizeof(opt)) 728 1.1.2.2 yamt goto discon; 729 1.1.2.2 yamt 730 1.1.2.2 yamt m_copydata(m, 0, sizeof(opt), &opt); 731 1.1.2.2 yamt m_adj(m, sizeof(opt)); 732 1.1.2.2 yamt left -= sizeof(opt); 733 1.1.2.2 yamt 734 1.1.2.2 yamt if (left < opt.length) 735 1.1.2.2 yamt goto discon; 736 1.1.2.2 yamt 737 1.1.2.2 yamt m_adj(m, opt.length); 738 1.1.2.2 yamt left -= opt.length; 739 1.1.2.2 yamt 740 1.1.2.2 yamt switch(opt.type) { 741 1.1.2.2 yamt case L2CAP_OPT_MTU: 742 1.1.2.2 yamt if (chan->lc_imtu == L2CAP_MTU_DEFAULT) 743 1.1.2.2 yamt goto discon; 744 1.1.2.2 yamt 745 1.1.2.2 yamt chan->lc_imtu = L2CAP_MTU_DEFAULT; 746 1.1.2.2 yamt break; 747 1.1.2.2 yamt 748 1.1.2.2 yamt case L2CAP_OPT_FLUSH_TIMO: 749 1.1.2.2 yamt if (chan->lc_flush == L2CAP_FLUSH_TIMO_DEFAULT) 750 1.1.2.2 yamt goto discon; 751 1.1.2.2 yamt 752 1.1.2.2 yamt chan->lc_flush = L2CAP_FLUSH_TIMO_DEFAULT; 753 1.1.2.2 yamt break; 754 1.1.2.2 yamt 755 1.1.2.2 yamt case L2CAP_OPT_QOS: 756 1.1.2.2 yamt break; 757 1.1.2.2 yamt 758 1.1.2.2 yamt default: 759 1.1.2.2 yamt UNKNOWN(opt.type); 760 1.1.2.2 yamt goto discon; 761 1.1.2.2 yamt } 762 1.1.2.2 yamt } 763 1.1.2.2 yamt 764 1.1.2.2 yamt if ((cp.flags & L2CAP_OPT_CFLAG_BIT) == 0) 765 1.1.2.2 yamt l2cap_send_config_req(chan); /* no state change */ 766 1.1.2.2 yamt 767 1.1.2.2 yamt goto out; 768 1.1.2.2 yamt 769 1.1.2.2 yamt default: 770 1.1.2.2 yamt UNKNOWN(cp.result); 771 1.1.2.2 yamt goto discon; 772 1.1.2.2 yamt } 773 1.1.2.2 yamt 774 1.1.2.2 yamt DPRINTF("how did I get here!?\n"); 775 1.1.2.2 yamt 776 1.1.2.2 yamt discon: 777 1.1.2.2 yamt l2cap_send_disconnect_req(chan); 778 1.1.2.2 yamt l2cap_close(chan, ECONNABORTED); 779 1.1.2.2 yamt 780 1.1.2.2 yamt out: 781 1.1.2.2 yamt m_adj(m, left); 782 1.1.2.2 yamt } 783 1.1.2.2 yamt 784 1.1.2.2 yamt /* 785 1.1.2.2 yamt * Process Received Disconnect Request. We must validate scid and dcid 786 1.1.2.2 yamt * just in case but otherwise this connection is finished. 787 1.1.2.2 yamt */ 788 1.1.2.2 yamt static void 789 1.1.2.2 yamt l2cap_recv_disconnect_req(struct mbuf *m, struct hci_link *link) 790 1.1.2.2 yamt { 791 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 792 1.1.2.2 yamt l2cap_discon_req_cp cp; 793 1.1.2.2 yamt l2cap_discon_rsp_cp rp; 794 1.1.2.2 yamt struct l2cap_channel *chan; 795 1.1.2.2 yamt 796 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 797 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 798 1.1.2.2 yamt 799 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 800 1.1.2.2 yamt m_adj(m, sizeof(cp)); 801 1.1.2.2 yamt 802 1.1.2.2 yamt cp.scid = le16toh(cp.scid); 803 1.1.2.2 yamt cp.dcid = le16toh(cp.dcid); 804 1.1.2.2 yamt 805 1.1.2.2 yamt chan = l2cap_cid_lookup(cp.dcid); 806 1.1.2.4 yamt if (chan == NULL || chan->lc_link != link || chan->lc_rcid != cp.scid) { 807 1.1.2.2 yamt l2cap_send_command_rej(link, cmd.ident, L2CAP_REJ_INVALID_CID, 808 1.1.2.2 yamt cp.dcid, cp.scid); 809 1.1.2.2 yamt return; 810 1.1.2.2 yamt } 811 1.1.2.2 yamt 812 1.1.2.2 yamt rp.dcid = htole16(chan->lc_lcid); 813 1.1.2.2 yamt rp.scid = htole16(chan->lc_rcid); 814 1.1.2.2 yamt l2cap_send_signal(link, L2CAP_DISCONNECT_RSP, cmd.ident, 815 1.1.2.2 yamt sizeof(rp), &rp); 816 1.1.2.2 yamt 817 1.1.2.2 yamt if (chan->lc_state != L2CAP_CLOSED) 818 1.1.2.2 yamt l2cap_close(chan, ECONNRESET); 819 1.1.2.2 yamt } 820 1.1.2.2 yamt 821 1.1.2.2 yamt /* 822 1.1.2.2 yamt * Process Received Disconnect Response. We must validate scid and dcid but 823 1.1.2.2 yamt * unless we were waiting for this signal, ignore it. 824 1.1.2.2 yamt */ 825 1.1.2.2 yamt static void 826 1.1.2.2 yamt l2cap_recv_disconnect_rsp(struct mbuf *m, struct hci_link *link) 827 1.1.2.2 yamt { 828 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 829 1.1.2.2 yamt l2cap_discon_rsp_cp cp; 830 1.1.2.2 yamt struct l2cap_req *req; 831 1.1.2.2 yamt struct l2cap_channel *chan; 832 1.1.2.2 yamt 833 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 834 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 835 1.1.2.2 yamt 836 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 837 1.1.2.2 yamt m_adj(m, sizeof(cp)); 838 1.1.2.2 yamt 839 1.1.2.2 yamt cp.scid = le16toh(cp.scid); 840 1.1.2.2 yamt cp.dcid = le16toh(cp.dcid); 841 1.1.2.2 yamt 842 1.1.2.2 yamt req = l2cap_request_lookup(link, cmd.ident); 843 1.1.2.2 yamt if (req == NULL || req->lr_code != L2CAP_DISCONNECT_REQ) 844 1.1.2.2 yamt return; 845 1.1.2.2 yamt 846 1.1.2.2 yamt chan = req->lr_chan; 847 1.1.2.2 yamt if (chan == NULL 848 1.1.2.2 yamt || chan->lc_lcid != cp.scid 849 1.1.2.2 yamt || chan->lc_rcid != cp.dcid) 850 1.1.2.2 yamt return; 851 1.1.2.2 yamt 852 1.1.2.2 yamt l2cap_request_free(req); 853 1.1.2.2 yamt 854 1.1.2.2 yamt if (chan->lc_state != L2CAP_WAIT_DISCONNECT) 855 1.1.2.2 yamt return; 856 1.1.2.2 yamt 857 1.1.2.2 yamt l2cap_close(chan, 0); 858 1.1.2.2 yamt } 859 1.1.2.2 yamt 860 1.1.2.2 yamt /* 861 1.1.2.2 yamt * Process Received Info Request. We must respond but alas dont 862 1.1.2.2 yamt * support anything as yet so thats easy. 863 1.1.2.2 yamt */ 864 1.1.2.2 yamt static void 865 1.1.2.2 yamt l2cap_recv_info_req(struct mbuf *m, struct hci_link *link) 866 1.1.2.2 yamt { 867 1.1.2.2 yamt l2cap_cmd_hdr_t cmd; 868 1.1.2.2 yamt l2cap_info_req_cp cp; 869 1.1.2.2 yamt l2cap_info_rsp_cp rp; 870 1.1.2.2 yamt 871 1.1.2.2 yamt m_copydata(m, 0, sizeof(cmd), &cmd); 872 1.1.2.2 yamt m_adj(m, sizeof(cmd)); 873 1.1.2.2 yamt 874 1.1.2.2 yamt m_copydata(m, 0, sizeof(cp), &cp); 875 1.1.2.2 yamt m_adj(m, sizeof(cp)); 876 1.1.2.2 yamt 877 1.1.2.2 yamt switch(le16toh(cp.type)) { 878 1.1.2.2 yamt case L2CAP_CONNLESS_MTU: 879 1.1.2.2 yamt case L2CAP_EXTENDED_FEATURES: 880 1.1.2.2 yamt default: 881 1.1.2.2 yamt rp.type = cp.type; 882 1.1.2.2 yamt rp.result = htole16(L2CAP_NOT_SUPPORTED); 883 1.1.2.2 yamt 884 1.1.2.2 yamt l2cap_send_signal(link, L2CAP_INFO_RSP, cmd.ident, 885 1.1.2.2 yamt sizeof(rp), &rp); 886 1.1.2.2 yamt break; 887 1.1.2.2 yamt } 888 1.1.2.2 yamt } 889 1.1.2.2 yamt 890 1.1.2.2 yamt /* 891 1.1.2.2 yamt * Construct signal and wrap in C-Frame for link. 892 1.1.2.2 yamt */ 893 1.1.2.2 yamt static int 894 1.1.2.2 yamt l2cap_send_signal(struct hci_link *link, uint8_t code, uint8_t ident, 895 1.1.2.2 yamt uint16_t length, void *data) 896 1.1.2.2 yamt { 897 1.1.2.2 yamt struct mbuf *m; 898 1.1.2.2 yamt l2cap_hdr_t *hdr; 899 1.1.2.2 yamt l2cap_cmd_hdr_t *cmd; 900 1.1.2.2 yamt 901 1.1.2.2 yamt #ifdef DIAGNOSTIC 902 1.1.2.2 yamt if (link == NULL) 903 1.1.2.2 yamt return ENETDOWN; 904 1.1.2.2 yamt 905 1.1.2.2 yamt if (sizeof(l2cap_cmd_hdr_t) + length > link->hl_mtu) 906 1.1.2.5 yamt aprint_error_dev(link->hl_unit->hci_dev, 907 1.1.2.5 yamt "exceeding L2CAP Signal MTU for link!\n"); 908 1.1.2.2 yamt #endif 909 1.1.2.2 yamt 910 1.1.2.2 yamt m = m_gethdr(M_DONTWAIT, MT_DATA); 911 1.1.2.2 yamt if (m == NULL) 912 1.1.2.2 yamt return ENOMEM; 913 1.1.2.2 yamt 914 1.1.2.2 yamt hdr = mtod(m, l2cap_hdr_t *); 915 1.1.2.2 yamt cmd = (l2cap_cmd_hdr_t *)(hdr + 1); 916 1.1.2.2 yamt 917 1.1.2.2 yamt m->m_len = m->m_pkthdr.len = MHLEN; 918 1.1.2.2 yamt 919 1.1.2.2 yamt /* Command Data */ 920 1.1.2.2 yamt if (length > 0) 921 1.1.2.4 yamt m_copyback(m, sizeof(*hdr) + sizeof(*cmd), length, data); 922 1.1.2.2 yamt 923 1.1.2.2 yamt /* Command Header */ 924 1.1.2.2 yamt cmd->code = code; 925 1.1.2.2 yamt cmd->ident = ident; 926 1.1.2.2 yamt cmd->length = htole16(length); 927 1.1.2.4 yamt length += sizeof(*cmd); 928 1.1.2.2 yamt 929 1.1.2.2 yamt /* C-Frame Header */ 930 1.1.2.2 yamt hdr->length = htole16(length); 931 1.1.2.2 yamt hdr->dcid = htole16(L2CAP_SIGNAL_CID); 932 1.1.2.4 yamt length += sizeof(*hdr); 933 1.1.2.2 yamt 934 1.1.2.2 yamt if (m->m_pkthdr.len != MAX(MHLEN, length)) { 935 1.1.2.2 yamt m_freem(m); 936 1.1.2.2 yamt return ENOMEM; 937 1.1.2.2 yamt } 938 1.1.2.2 yamt 939 1.1.2.2 yamt m->m_pkthdr.len = length; 940 1.1.2.2 yamt m->m_len = MIN(length, MHLEN); 941 1.1.2.2 yamt 942 1.1.2.2 yamt DPRINTFN(2, "(%s) code %d, ident %d, len %d\n", 943 1.1.2.5 yamt device_xname(link->hl_unit->hci_dev), code, ident, length); 944 1.1.2.2 yamt 945 1.1.2.2 yamt return hci_acl_send(m, link, NULL); 946 1.1.2.2 yamt } 947 1.1.2.2 yamt 948 1.1.2.2 yamt /* 949 1.1.2.2 yamt * Send Command Reject packet. 950 1.1.2.2 yamt */ 951 1.1.2.2 yamt static int 952 1.1.2.2 yamt l2cap_send_command_rej(struct hci_link *link, uint8_t ident, 953 1.1.2.2 yamt uint16_t reason, ...) 954 1.1.2.2 yamt { 955 1.1.2.2 yamt l2cap_cmd_rej_cp cp; 956 1.1.2.2 yamt int len = 0; 957 1.1.2.2 yamt va_list ap; 958 1.1.2.2 yamt 959 1.1.2.2 yamt va_start(ap, reason); 960 1.1.2.2 yamt 961 1.1.2.2 yamt cp.reason = htole16(reason); 962 1.1.2.2 yamt 963 1.1.2.2 yamt switch (reason) { 964 1.1.2.2 yamt case L2CAP_REJ_NOT_UNDERSTOOD: 965 1.1.2.2 yamt len = 2; 966 1.1.2.2 yamt break; 967 1.1.2.2 yamt 968 1.1.2.2 yamt case L2CAP_REJ_MTU_EXCEEDED: 969 1.1.2.2 yamt len = 4; 970 1.1.2.2 yamt cp.data[0] = va_arg(ap, int); /* SigMTU */ 971 1.1.2.2 yamt cp.data[0] = htole16(cp.data[0]); 972 1.1.2.2 yamt break; 973 1.1.2.2 yamt 974 1.1.2.2 yamt case L2CAP_REJ_INVALID_CID: 975 1.1.2.2 yamt len = 6; 976 1.1.2.2 yamt cp.data[0] = va_arg(ap, int); /* dcid */ 977 1.1.2.2 yamt cp.data[0] = htole16(cp.data[0]); 978 1.1.2.2 yamt cp.data[1] = va_arg(ap, int); /* scid */ 979 1.1.2.2 yamt cp.data[1] = htole16(cp.data[1]); 980 1.1.2.2 yamt break; 981 1.1.2.2 yamt 982 1.1.2.2 yamt default: 983 1.1.2.2 yamt UNKNOWN(reason); 984 1.1.2.2 yamt return EINVAL; 985 1.1.2.2 yamt } 986 1.1.2.2 yamt 987 1.1.2.2 yamt va_end(ap); 988 1.1.2.2 yamt 989 1.1.2.2 yamt return l2cap_send_signal(link, L2CAP_COMMAND_REJ, ident, len, &cp); 990 1.1.2.2 yamt } 991 1.1.2.2 yamt 992 1.1.2.2 yamt /* 993 1.1.2.2 yamt * Send Connect Request 994 1.1.2.2 yamt */ 995 1.1.2.2 yamt int 996 1.1.2.2 yamt l2cap_send_connect_req(struct l2cap_channel *chan) 997 1.1.2.2 yamt { 998 1.1.2.2 yamt l2cap_con_req_cp cp; 999 1.1.2.2 yamt int err; 1000 1.1.2.2 yamt 1001 1.1.2.2 yamt err = l2cap_request_alloc(chan, L2CAP_CONNECT_REQ); 1002 1.1.2.2 yamt if (err) 1003 1.1.2.2 yamt return err; 1004 1.1.2.2 yamt 1005 1.1.2.2 yamt cp.psm = htole16(chan->lc_raddr.bt_psm); 1006 1.1.2.2 yamt cp.scid = htole16(chan->lc_lcid); 1007 1.1.2.2 yamt 1008 1.1.2.2 yamt return l2cap_send_signal(chan->lc_link, L2CAP_CONNECT_REQ, 1009 1.1.2.2 yamt chan->lc_link->hl_lastid, sizeof(cp), &cp); 1010 1.1.2.2 yamt } 1011 1.1.2.2 yamt 1012 1.1.2.2 yamt /* 1013 1.1.2.2 yamt * Send Config Request 1014 1.1.2.2 yamt * 1015 1.1.2.2 yamt * For outgoing config request, we only put options in the packet if they 1016 1.1.2.2 yamt * differ from the default and would have to be actioned. We dont support 1017 1.1.2.2 yamt * enough option types to make overflowing SigMTU an issue so it can all 1018 1.1.2.2 yamt * go in one packet. 1019 1.1.2.2 yamt */ 1020 1.1.2.2 yamt int 1021 1.1.2.2 yamt l2cap_send_config_req(struct l2cap_channel *chan) 1022 1.1.2.2 yamt { 1023 1.1.2.2 yamt l2cap_cfg_req_cp *cp; 1024 1.1.2.2 yamt l2cap_cfg_opt_t *opt; 1025 1.1.2.2 yamt l2cap_cfg_opt_val_t *val; 1026 1.1.2.2 yamt uint8_t *next, buf[L2CAP_MTU_MINIMUM]; 1027 1.1.2.2 yamt int err; 1028 1.1.2.2 yamt 1029 1.1.2.2 yamt err = l2cap_request_alloc(chan, L2CAP_CONFIG_REQ); 1030 1.1.2.2 yamt if (err) 1031 1.1.2.2 yamt return err; 1032 1.1.2.2 yamt 1033 1.1.2.2 yamt /* Config Header (4 octets) */ 1034 1.1.2.2 yamt cp = (l2cap_cfg_req_cp *)buf; 1035 1.1.2.2 yamt cp->dcid = htole16(chan->lc_rcid); 1036 1.1.2.2 yamt cp->flags = 0; /* "No Continuation" */ 1037 1.1.2.2 yamt 1038 1.1.2.2 yamt next = buf + sizeof(l2cap_cfg_req_cp); 1039 1.1.2.2 yamt 1040 1.1.2.2 yamt /* Incoming MTU (4 octets) */ 1041 1.1.2.2 yamt if (chan->lc_imtu != L2CAP_MTU_DEFAULT) { 1042 1.1.2.2 yamt opt = (l2cap_cfg_opt_t *)next; 1043 1.1.2.2 yamt opt->type = L2CAP_OPT_MTU; 1044 1.1.2.2 yamt opt->length = L2CAP_OPT_MTU_SIZE; 1045 1.1.2.2 yamt 1046 1.1.2.2 yamt val = (l2cap_cfg_opt_val_t *)(opt + 1); 1047 1.1.2.2 yamt val->mtu = htole16(chan->lc_imtu); 1048 1.1.2.2 yamt 1049 1.1.2.2 yamt next += sizeof(l2cap_cfg_opt_t) + L2CAP_OPT_MTU_SIZE; 1050 1.1.2.2 yamt } 1051 1.1.2.2 yamt 1052 1.1.2.2 yamt /* Flush Timeout (4 octets) */ 1053 1.1.2.2 yamt if (chan->lc_flush != L2CAP_FLUSH_TIMO_DEFAULT) { 1054 1.1.2.2 yamt opt = (l2cap_cfg_opt_t *)next; 1055 1.1.2.2 yamt opt->type = L2CAP_OPT_FLUSH_TIMO; 1056 1.1.2.2 yamt opt->length = L2CAP_OPT_FLUSH_TIMO_SIZE; 1057 1.1.2.2 yamt 1058 1.1.2.2 yamt val = (l2cap_cfg_opt_val_t *)(opt + 1); 1059 1.1.2.2 yamt val->flush_timo = htole16(chan->lc_flush); 1060 1.1.2.2 yamt 1061 1.1.2.2 yamt next += sizeof(l2cap_cfg_opt_t) + L2CAP_OPT_FLUSH_TIMO_SIZE; 1062 1.1.2.2 yamt } 1063 1.1.2.2 yamt 1064 1.1.2.2 yamt /* Outgoing QoS Flow (24 octets) */ 1065 1.1.2.2 yamt /* Retransmission & Flow Control (11 octets) */ 1066 1.1.2.2 yamt /* 1067 1.1.2.2 yamt * From here we need to start paying attention to SigMTU as we have 1068 1.1.2.2 yamt * possibly overflowed the minimum supported.. 1069 1.1.2.2 yamt */ 1070 1.1.2.2 yamt 1071 1.1.2.2 yamt return l2cap_send_signal(chan->lc_link, L2CAP_CONFIG_REQ, 1072 1.1.2.2 yamt chan->lc_link->hl_lastid, (int)(next - buf), buf); 1073 1.1.2.2 yamt } 1074 1.1.2.2 yamt 1075 1.1.2.2 yamt /* 1076 1.1.2.2 yamt * Send Disconnect Request 1077 1.1.2.2 yamt */ 1078 1.1.2.2 yamt int 1079 1.1.2.2 yamt l2cap_send_disconnect_req(struct l2cap_channel *chan) 1080 1.1.2.2 yamt { 1081 1.1.2.2 yamt l2cap_discon_req_cp cp; 1082 1.1.2.2 yamt int err; 1083 1.1.2.2 yamt 1084 1.1.2.2 yamt err = l2cap_request_alloc(chan, L2CAP_DISCONNECT_REQ); 1085 1.1.2.2 yamt if (err) 1086 1.1.2.2 yamt return err; 1087 1.1.2.2 yamt 1088 1.1.2.2 yamt cp.dcid = htole16(chan->lc_rcid); 1089 1.1.2.2 yamt cp.scid = htole16(chan->lc_lcid); 1090 1.1.2.2 yamt 1091 1.1.2.2 yamt return l2cap_send_signal(chan->lc_link, L2CAP_DISCONNECT_REQ, 1092 1.1.2.2 yamt chan->lc_link->hl_lastid, sizeof(cp), &cp); 1093 1.1.2.2 yamt } 1094 1.1.2.4 yamt 1095 1.1.2.4 yamt /* 1096 1.1.2.4 yamt * Send Connect Response 1097 1.1.2.4 yamt */ 1098 1.1.2.4 yamt int 1099 1.1.2.4 yamt l2cap_send_connect_rsp(struct hci_link *link, uint8_t ident, uint16_t dcid, uint16_t scid, uint16_t result) 1100 1.1.2.4 yamt { 1101 1.1.2.4 yamt l2cap_con_rsp_cp cp; 1102 1.1.2.4 yamt 1103 1.1.2.4 yamt memset(&cp, 0, sizeof(cp)); 1104 1.1.2.4 yamt cp.dcid = htole16(dcid); 1105 1.1.2.4 yamt cp.scid = htole16(scid); 1106 1.1.2.4 yamt cp.result = htole16(result); 1107 1.1.2.4 yamt 1108 1.1.2.4 yamt return l2cap_send_signal(link, L2CAP_CONNECT_RSP, ident, sizeof(cp), &cp); 1109 1.1.2.4 yamt } 1110
Indexes created Tue Sep 30 20:09:53 GMT 2025