343 lines
12 KiB
C
343 lines
12 KiB
C
|
/******************************************************************************
|
||
|
|
*
|
||
|
|
* Copyright (C) 1999-2012 Broadcom Corporation
|
||
|
|
*
|
||
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
* you may not use this file except in compliance with the License.
|
||
|
|
* You may obtain a copy of the License at:
|
||
|
|
*
|
||
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
*
|
||
|
|
* Unless required by applicable law or agreed to in writing, software
|
||
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
* See the License for the specific language governing permissions and
|
||
|
|
* limitations under the License.
|
||
|
|
*
|
||
|
|
******************************************************************************/
|
||
|
|
|
||
|
|
/******************************************************************************
|
||
|
|
*
|
||
|
|
* This file contains functions for the SMP L2Cap interface
|
||
|
|
*
|
||
|
|
******************************************************************************/
|
||
|
|
|
||
|
|
#include "bt_target.h"
|
||
|
|
|
||
|
|
#if SMP_INCLUDED == TRUE
|
||
|
|
|
||
|
|
#include <string.h>
|
||
|
|
#include "btm_ble_api.h"
|
||
|
|
#include "l2c_api.h"
|
||
|
|
|
||
|
|
#include "smp_int.h"
|
||
|
|
|
||
|
|
|
||
|
|
static void smp_tx_complete_callback(UINT16 cid, UINT16 num_pkt);
|
||
|
|
|
||
|
|
static void smp_connect_callback(UINT16 channel, BD_ADDR bd_addr, BOOLEAN connected, UINT16 reason,
|
||
|
|
tBT_TRANSPORT transport);
|
||
|
|
static void smp_data_received(UINT16 channel, BD_ADDR bd_addr, BT_HDR *p_buf);
|
||
|
|
|
||
|
|
static void smp_br_connect_callback(UINT16 channel, BD_ADDR bd_addr, BOOLEAN connected, UINT16 reason,
|
||
|
|
tBT_TRANSPORT transport);
|
||
|
|
static void smp_br_data_received(UINT16 channel, BD_ADDR bd_addr, BT_HDR *p_buf);
|
||
|
|
|
||
|
|
/*******************************************************************************
|
||
|
|
**
|
||
|
|
** Function smp_l2cap_if_init
|
||
|
|
**
|
||
|
|
** Description This function is called during the SMP task startup
|
||
|
|
** to register interface functions with L2CAP.
|
||
|
|
**
|
||
|
|
*******************************************************************************/
|
||
|
|
void smp_l2cap_if_init (void)
|
||
|
|
{
|
||
|
|
tL2CAP_FIXED_CHNL_REG fixed_reg;
|
||
|
|
SMP_TRACE_EVENT ("SMDBG l2c %s", __func__);
|
||
|
|
fixed_reg.fixed_chnl_opts.mode = L2CAP_FCR_BASIC_MODE;
|
||
|
|
fixed_reg.fixed_chnl_opts.max_transmit = 0;
|
||
|
|
fixed_reg.fixed_chnl_opts.rtrans_tout = 0;
|
||
|
|
fixed_reg.fixed_chnl_opts.mon_tout = 0;
|
||
|
|
fixed_reg.fixed_chnl_opts.mps = 0;
|
||
|
|
fixed_reg.fixed_chnl_opts.tx_win_sz = 0;
|
||
|
|
|
||
|
|
fixed_reg.pL2CA_FixedConn_Cb = smp_connect_callback;
|
||
|
|
fixed_reg.pL2CA_FixedData_Cb = smp_data_received;
|
||
|
|
fixed_reg.pL2CA_FixedTxComplete_Cb = smp_tx_complete_callback;
|
||
|
|
|
||
|
|
fixed_reg.pL2CA_FixedCong_Cb = NULL; /* do not handle congestion on this channel */
|
||
|
|
fixed_reg.default_idle_tout = 60; /* set 60 seconds timeout, 0xffff default idle timeout */
|
||
|
|
|
||
|
|
L2CA_RegisterFixedChannel (L2CAP_SMP_CID, &fixed_reg);
|
||
|
|
|
||
|
|
fixed_reg.pL2CA_FixedConn_Cb = smp_br_connect_callback;
|
||
|
|
fixed_reg.pL2CA_FixedData_Cb = smp_br_data_received;
|
||
|
|
|
||
|
|
L2CA_RegisterFixedChannel (L2CAP_SMP_BR_CID, &fixed_reg);
|
||
|
|
}
|
||
|
|
|
||
|
|
/*******************************************************************************
|
||
|
|
**
|
||
|
|
** Function smp_connect_callback
|
||
|
|
**
|
||
|
|
** Description This callback function is called by L2CAP to indicate that
|
||
|
|
** SMP channel is
|
||
|
|
** connected (conn = TRUE)/disconnected (conn = FALSE).
|
||
|
|
**
|
||
|
|
*******************************************************************************/
|
||
|
|
static void smp_connect_callback (UINT16 channel, BD_ADDR bd_addr, BOOLEAN connected, UINT16 reason,
|
||
|
|
tBT_TRANSPORT transport)
|
||
|
|
{
|
||
|
|
tSMP_CB *p_cb = &smp_cb;
|
||
|
|
tSMP_INT_DATA int_data;
|
||
|
|
BD_ADDR dummy_bda = {0};
|
||
|
|
|
||
|
|
SMP_TRACE_EVENT ("SMDBG l2c %s", __FUNCTION__);
|
||
|
|
|
||
|
|
if (transport == BT_TRANSPORT_BR_EDR || memcmp(bd_addr, dummy_bda, BD_ADDR_LEN) == 0)
|
||
|
|
return;
|
||
|
|
|
||
|
|
if (memcmp(bd_addr, p_cb->pairing_bda, BD_ADDR_LEN) == 0)
|
||
|
|
{
|
||
|
|
SMP_TRACE_EVENT ("%s() for pairing BDA: %08x%04x Event: %s",
|
||
|
|
__FUNCTION__,
|
||
|
|
(bd_addr[0]<<24)+(bd_addr[1]<<16)+(bd_addr[2]<<8) + bd_addr[3],
|
||
|
|
(bd_addr[4]<<8)+bd_addr[5],
|
||
|
|
(connected) ? "connected" : "disconnected");
|
||
|
|
|
||
|
|
if (connected)
|
||
|
|
{
|
||
|
|
if(!p_cb->connect_initialized)
|
||
|
|
{
|
||
|
|
p_cb->connect_initialized = TRUE;
|
||
|
|
/* initiating connection established */
|
||
|
|
p_cb->role = L2CA_GetBleConnRole(bd_addr);
|
||
|
|
|
||
|
|
/* initialize local i/r key to be default keys */
|
||
|
|
p_cb->local_r_key = p_cb->local_i_key = SMP_SEC_DEFAULT_KEY;
|
||
|
|
p_cb->loc_auth_req = p_cb->peer_auth_req = SMP_DEFAULT_AUTH_REQ;
|
||
|
|
p_cb->cb_evt = SMP_IO_CAP_REQ_EVT;
|
||
|
|
smp_sm_event(p_cb, SMP_L2CAP_CONN_EVT, NULL);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
int_data.reason = reason;
|
||
|
|
/* Disconnected while doing security */
|
||
|
|
smp_sm_event(p_cb, SMP_L2CAP_DISCONN_EVT, &int_data);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/*******************************************************************************
|
||
|
|
**
|
||
|
|
** Function smp_data_received
|
||
|
|
**
|
||
|
|
** Description This function is called when data is received from L2CAP on
|
||
|
|
** SMP channel.
|
||
|
|
**
|
||
|
|
**
|
||
|
|
** Returns void
|
||
|
|
**
|
||
|
|
*******************************************************************************/
|
||
|
|
static void smp_data_received(UINT16 channel, BD_ADDR bd_addr, BT_HDR *p_buf)
|
||
|
|
{
|
||
|
|
tSMP_CB *p_cb = &smp_cb;
|
||
|
|
UINT8 *p = (UINT8 *)(p_buf + 1) + p_buf->offset;
|
||
|
|
UINT8 cmd ;
|
||
|
|
SMP_TRACE_EVENT ("SMDBG l2c %s", __FUNCTION__);
|
||
|
|
|
||
|
|
STREAM_TO_UINT8(cmd, p);
|
||
|
|
|
||
|
|
/* sanity check */
|
||
|
|
if ((SMP_OPCODE_MAX < cmd) || (SMP_OPCODE_MIN > cmd))
|
||
|
|
{
|
||
|
|
SMP_TRACE_WARNING( "Ignore received command with RESERVED code 0x%02x", cmd);
|
||
|
|
GKI_freebuf (p_buf);
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
/* reject the pairing request if there is an on-going SMP pairing */
|
||
|
|
if (SMP_OPCODE_PAIRING_REQ == cmd || SMP_OPCODE_SEC_REQ == cmd)
|
||
|
|
{
|
||
|
|
if ((p_cb->state == SMP_STATE_IDLE) && (p_cb->br_state == SMP_BR_STATE_IDLE))
|
||
|
|
{
|
||
|
|
p_cb->role = L2CA_GetBleConnRole(bd_addr);
|
||
|
|
memcpy(&p_cb->pairing_bda[0], bd_addr, BD_ADDR_LEN);
|
||
|
|
}
|
||
|
|
else if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN))
|
||
|
|
{
|
||
|
|
GKI_freebuf (p_buf);
|
||
|
|
smp_reject_unexpected_pairing_command(bd_addr);
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
/* else, out of state pairing request/security request received, passed into SM */
|
||
|
|
}
|
||
|
|
|
||
|
|
if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN) == 0)
|
||
|
|
{
|
||
|
|
btu_stop_timer (&p_cb->rsp_timer_ent);
|
||
|
|
btu_start_timer (&p_cb->rsp_timer_ent, BTU_TTYPE_SMP_PAIRING_CMD,
|
||
|
|
SMP_WAIT_FOR_RSP_TOUT);
|
||
|
|
|
||
|
|
if (cmd == SMP_OPCODE_CONFIRM)
|
||
|
|
{
|
||
|
|
SMP_TRACE_DEBUG ("in %s cmd = 0x%02x, peer_auth_req = 0x%02x,"
|
||
|
|
"loc_auth_req = 0x%02x",
|
||
|
|
__FUNCTION__, cmd, p_cb->peer_auth_req, p_cb->loc_auth_req);
|
||
|
|
|
||
|
|
if ((p_cb->peer_auth_req & SMP_SC_SUPPORT_BIT) &&
|
||
|
|
(p_cb->loc_auth_req & SMP_SC_SUPPORT_BIT))
|
||
|
|
{
|
||
|
|
cmd = SMP_OPCODE_PAIR_COMMITM;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
p_cb->rcvd_cmd_code = cmd;
|
||
|
|
p_cb->rcvd_cmd_len = (UINT8) p_buf->len;
|
||
|
|
smp_sm_event(p_cb, cmd, p);
|
||
|
|
}
|
||
|
|
|
||
|
|
GKI_freebuf (p_buf);
|
||
|
|
}
|
||
|
|
|
||
|
|
/*******************************************************************************
|
||
|
|
**
|
||
|
|
** Function smp_tx_complete_callback
|
||
|
|
**
|
||
|
|
** Description SMP channel tx complete callback
|
||
|
|
**
|
||
|
|
*******************************************************************************/
|
||
|
|
static void smp_tx_complete_callback (UINT16 cid, UINT16 num_pkt)
|
||
|
|
{
|
||
|
|
tSMP_CB *p_cb = &smp_cb;
|
||
|
|
|
||
|
|
if (p_cb->total_tx_unacked >= num_pkt)
|
||
|
|
p_cb->total_tx_unacked -= num_pkt;
|
||
|
|
else
|
||
|
|
SMP_TRACE_ERROR("Unexpected %s: num_pkt = %d", __func__,num_pkt);
|
||
|
|
|
||
|
|
UINT8 reason = SMP_SUCCESS;
|
||
|
|
if (p_cb->total_tx_unacked == 0 && p_cb->wait_for_authorization_complete)
|
||
|
|
{
|
||
|
|
if (cid == L2CAP_SMP_CID)
|
||
|
|
smp_sm_event(p_cb, SMP_AUTH_CMPL_EVT, &reason);
|
||
|
|
else
|
||
|
|
smp_br_state_machine_event(p_cb, SMP_BR_AUTH_CMPL_EVT, &reason);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/*******************************************************************************
|
||
|
|
**
|
||
|
|
** Function smp_br_connect_callback
|
||
|
|
**
|
||
|
|
** Description This callback function is called by L2CAP to indicate that
|
||
|
|
** SMP BR channel is
|
||
|
|
** connected (conn = TRUE)/disconnected (conn = FALSE).
|
||
|
|
**
|
||
|
|
*******************************************************************************/
|
||
|
|
static void smp_br_connect_callback(UINT16 channel, BD_ADDR bd_addr, BOOLEAN connected,
|
||
|
|
UINT16 reason, tBT_TRANSPORT transport)
|
||
|
|
{
|
||
|
|
tSMP_CB *p_cb = &smp_cb;
|
||
|
|
tSMP_INT_DATA int_data;
|
||
|
|
|
||
|
|
SMP_TRACE_EVENT ("%s", __func__);
|
||
|
|
|
||
|
|
if (transport != BT_TRANSPORT_BR_EDR)
|
||
|
|
{
|
||
|
|
SMP_TRACE_WARNING("%s is called on unexpected transport %d",
|
||
|
|
__func__, transport);
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!(memcmp(bd_addr, p_cb->pairing_bda, BD_ADDR_LEN) == 0))
|
||
|
|
return;
|
||
|
|
|
||
|
|
SMP_TRACE_EVENT ("%s for pairing BDA: %08x%04x Event: %s",
|
||
|
|
__func__,
|
||
|
|
(bd_addr[0]<<24)+(bd_addr[1]<<16)+(bd_addr[2]<<8) + bd_addr[3],
|
||
|
|
(bd_addr[4]<<8)+bd_addr[5],
|
||
|
|
(connected) ? "connected" : "disconnected");
|
||
|
|
|
||
|
|
if (connected)
|
||
|
|
{
|
||
|
|
if(!p_cb->connect_initialized)
|
||
|
|
{
|
||
|
|
p_cb->connect_initialized = TRUE;
|
||
|
|
/* initialize local i/r key to be default keys */
|
||
|
|
p_cb->local_r_key = p_cb->local_i_key = SMP_BR_SEC_DEFAULT_KEY;
|
||
|
|
p_cb->loc_auth_req = p_cb->peer_auth_req = 0;
|
||
|
|
p_cb->cb_evt = SMP_BR_KEYS_REQ_EVT;
|
||
|
|
smp_br_state_machine_event(p_cb, SMP_BR_L2CAP_CONN_EVT, NULL);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
int_data.reason = reason;
|
||
|
|
/* Disconnected while doing security */
|
||
|
|
smp_br_state_machine_event(p_cb, SMP_BR_L2CAP_DISCONN_EVT, &int_data);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
/*******************************************************************************
|
||
|
|
**
|
||
|
|
** Function smp_br_data_received
|
||
|
|
**
|
||
|
|
** Description This function is called when data is received from L2CAP on
|
||
|
|
** SMP BR channel.
|
||
|
|
**
|
||
|
|
** Returns void
|
||
|
|
**
|
||
|
|
*******************************************************************************/
|
||
|
|
static void smp_br_data_received(UINT16 channel, BD_ADDR bd_addr, BT_HDR *p_buf)
|
||
|
|
{
|
||
|
|
tSMP_CB *p_cb = &smp_cb;
|
||
|
|
UINT8 *p = (UINT8 *)(p_buf + 1) + p_buf->offset;
|
||
|
|
UINT8 cmd ;
|
||
|
|
SMP_TRACE_EVENT ("SMDBG l2c %s", __func__);
|
||
|
|
|
||
|
|
STREAM_TO_UINT8(cmd, p);
|
||
|
|
|
||
|
|
/* sanity check */
|
||
|
|
if ((SMP_OPCODE_MAX < cmd) || (SMP_OPCODE_MIN > cmd))
|
||
|
|
{
|
||
|
|
SMP_TRACE_WARNING( "Ignore received command with RESERVED code 0x%02x", cmd);
|
||
|
|
GKI_freebuf(p_buf);
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
/* reject the pairing request if there is an on-going SMP pairing */
|
||
|
|
if (SMP_OPCODE_PAIRING_REQ == cmd)
|
||
|
|
{
|
||
|
|
if ((p_cb->state == SMP_STATE_IDLE) && (p_cb->br_state == SMP_BR_STATE_IDLE))
|
||
|
|
{
|
||
|
|
p_cb->role = HCI_ROLE_SLAVE;
|
||
|
|
p_cb->smp_over_br = TRUE;
|
||
|
|
memcpy(&p_cb->pairing_bda[0], bd_addr, BD_ADDR_LEN);
|
||
|
|
}
|
||
|
|
else if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN))
|
||
|
|
{
|
||
|
|
GKI_freebuf (p_buf);
|
||
|
|
smp_reject_unexpected_pairing_command(bd_addr);
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
/* else, out of state pairing request received, passed into State Machine */
|
||
|
|
}
|
||
|
|
|
||
|
|
if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN) == 0)
|
||
|
|
{
|
||
|
|
btu_stop_timer (&p_cb->rsp_timer_ent);
|
||
|
|
btu_start_timer (&p_cb->rsp_timer_ent, BTU_TTYPE_SMP_PAIRING_CMD,
|
||
|
|
SMP_WAIT_FOR_RSP_TOUT);
|
||
|
|
|
||
|
|
p_cb->rcvd_cmd_code = cmd;
|
||
|
|
p_cb->rcvd_cmd_len = (UINT8) p_buf->len;
|
||
|
|
smp_br_state_machine_event(p_cb, cmd, p);
|
||
|
|
}
|
||
|
|
|
||
|
|
GKI_freebuf (p_buf);
|
||
|
|
}
|
||
|
|
#endif /* SMP_INCLUDED == TRUE */
|