btif_hh.c revision bf6cab9332f81f7bcd4b3040c2c1edd3062ecb40
1/******************************************************************************
2 *
3 *  Copyright (C) 2009-2012 Broadcom Corporation
4 *
5 *  Licensed under the Apache License, Version 2.0 (the "License");
6 *  you may not use this file except in compliance with the License.
7 *  You may obtain a copy of the License at:
8 *
9 *  http://www.apache.org/licenses/LICENSE-2.0
10 *
11 *  Unless required by applicable law or agreed to in writing, software
12 *  distributed under the License is distributed on an "AS IS" BASIS,
13 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 *  See the License for the specific language governing permissions and
15 *  limitations under the License.
16 *
17 ******************************************************************************/
18
19/************************************************************************************
20 *
21 *  Filename:      btif_hh.c
22 *
23 *  Description:   HID Host Profile Bluetooth Interface
24 *
25 *
26 ***********************************************************************************/
27#include <hardware/bluetooth.h>
28#include <hardware/bt_hh.h>
29#include <stdio.h>
30#include <stdlib.h>
31#include <errno.h>
32#include <string.h>
33
34#define LOG_TAG "BTIF_HH"
35
36#include "bta_api.h"
37#include "bta_hh_api.h"
38#include "bd.h"
39#include "btif_storage.h"
40
41#include "btif_common.h"
42#include "btif_util.h"
43#include "btif_hh.h"
44#include "gki.h"
45#include "l2c_api.h"
46
47
48#define BTIF_HH_APP_ID_MI       0x01
49#define BTIF_HH_APP_ID_KB       0x02
50
51#define COD_HID_KEYBOARD        0x0540
52#define COD_HID_POINTING        0x0580
53#define COD_HID_COMBO           0x05C0
54#define COD_HID_MAJOR           0x0500
55
56#define KEYSTATE_FILEPATH "/data/misc/bluedroid/bt_hh_ks" //keep this in sync with HID host jni
57
58#define HID_REPORT_CAPSLOCK   0x39
59#define HID_REPORT_NUMLOCK    0x53
60#define HID_REPORT_SCROLLLOCK 0x47
61
62//For Apple Magic Mouse
63#define MAGICMOUSE_VENDOR_ID 0x05ac
64#define MAGICMOUSE_PRODUCT_ID 0x030d
65
66#define LOGITECH_KB_MX5500_VENDOR_ID  0x046D
67#define LOGITECH_KB_MX5500_PRODUCT_ID 0xB30B
68
69extern const int BT_UID;
70extern const int BT_GID;
71static int btif_hh_prev_keyevents=0; //The previous key events
72static int btif_hh_keylockstates=0; //The current key state of each key
73
74#define BTIF_HH_ID_1        0
75#define BTIF_HH_DEV_DISCONNECTED 3
76
77#define BTIF_TIMEOUT_VUP_SECS   3
78
79
80#ifndef BTUI_HH_SECURITY
81#define BTUI_HH_SECURITY (BTA_SEC_AUTHENTICATE | BTA_SEC_ENCRYPT)
82#endif
83
84#ifndef BTUI_HH_MOUSE_SECURITY
85#define BTUI_HH_MOUSE_SECURITY (BTA_SEC_NONE)
86#endif
87
88/* HH request events */
89typedef enum
90{
91    BTIF_HH_CONNECT_REQ_EVT = 0,
92    BTIF_HH_DISCONNECT_REQ_EVT,
93    BTIF_HH_VUP_REQ_EVT
94} btif_hh_req_evt_t;
95
96
97/************************************************************************************
98**  Constants & Macros
99************************************************************************************/
100#define BTIF_HH_SERVICES    (BTA_HID_SERVICE_MASK)
101
102
103
104/************************************************************************************
105**  Local type definitions
106************************************************************************************/
107
108typedef struct hid_kb_list
109{
110    UINT16 product_id;
111    UINT16 version_id;
112    char*  kb_name;
113} tHID_KB_LIST;
114
115/************************************************************************************
116**  Static variables
117************************************************************************************/
118btif_hh_cb_t btif_hh_cb;
119
120static bthh_callbacks_t *bt_hh_callbacks = NULL;
121
122/* List of HID keyboards for which the NUMLOCK state needs to be
123 * turned ON by default. Add devices to this list to apply the
124 * NUMLOCK state toggle on fpr first connect.*/
125static tHID_KB_LIST hid_kb_numlock_on_list[] =
126{
127    {LOGITECH_KB_MX5500_PRODUCT_ID,
128    LOGITECH_KB_MX5500_VENDOR_ID,
129    "Logitech MX5500 Keyboard"}
130};
131
132
133#define CHECK_BTHH_INIT() if (bt_hh_callbacks == NULL)\
134    {\
135        BTIF_TRACE_WARNING1("BTHH: %s: BTHH not initialized", __FUNCTION__);\
136        return BT_STATUS_NOT_READY;\
137    }\
138    else\
139    {\
140        BTIF_TRACE_EVENT1("BTHH: %s", __FUNCTION__);\
141    }
142
143
144
145/************************************************************************************
146**  Static functions
147************************************************************************************/
148
149/************************************************************************************
150**  Externs
151************************************************************************************/
152extern void bta_hh_co_destroy(int fd);
153extern void bta_hh_co_write(int fd, UINT8* rpt, UINT16 len);
154extern bt_status_t btif_dm_remove_bond(const bt_bdaddr_t *bd_addr);
155extern void bta_hh_co_send_hid_info(btif_hh_device_t *p_dev, char *dev_name, UINT16 vendor_id,
156                                    UINT16 product_id, UINT16 version, UINT8 ctry_code,
157                                    int dscp_len, UINT8 *p_dscp);
158extern BOOLEAN check_cod(const bt_bdaddr_t *remote_bdaddr, uint32_t cod);
159extern void btif_dm_cb_remove_bond(bt_bdaddr_t *bd_addr);
160extern BOOLEAN check_cod_hid(const bt_bdaddr_t *remote_bdaddr, uint32_t cod);
161extern int  scru_ascii_2_hex(char *p_ascii, int len, UINT8 *p_hex);
162extern void btif_dm_hh_open_failed(bt_bdaddr_t *bdaddr);
163
164/*****************************************************************************
165**  Local Function prototypes
166*****************************************************************************/
167static void set_keylockstate(int keymask, BOOLEAN isSet);
168static void toggle_os_keylockstates(int fd, int changedkeystates);
169static void sync_lockstate_on_connect(btif_hh_device_t *p_dev);
170//static void hh_update_keyboard_lockstates(btif_hh_device_t *p_dev);
171void btif_hh_tmr_hdlr(TIMER_LIST_ENT *tle);
172
173
174/************************************************************************************
175**  Functions
176************************************************************************************/
177
178static int get_keylockstates()
179{
180    return btif_hh_keylockstates;
181}
182
183static void set_keylockstate(int keymask, BOOLEAN isSet)
184{
185    if(isSet)
186        btif_hh_keylockstates |= keymask;
187}
188
189/*******************************************************************************
190**
191** Function         toggle_os_keylockstates
192**
193** Description      Function to toggle the keyboard lock states managed by the linux.
194**                  This function is used in by two call paths
195**                  (1) if the lock state change occurred from an onscreen keyboard,
196**                  this function is called to update the lock state maintained
197                    for the HID keyboard(s)
198**                  (2) if a HID keyboard is disconnected and reconnected,
199**                  this function is called to update the lock state maintained
200                    for the HID keyboard(s)
201** Returns          void
202*******************************************************************************/
203
204static void toggle_os_keylockstates(int fd, int changedlockstates)
205{
206    BTIF_TRACE_EVENT3("%s: fd = %d, changedlockstates = 0x%x",
207        __FUNCTION__, fd, changedlockstates);
208    UINT8 hidreport[9];
209    int reportIndex;
210    memset(hidreport,0,9);
211    hidreport[0]=1;
212    reportIndex=4;
213
214    if (changedlockstates & BTIF_HH_KEYSTATE_MASK_CAPSLOCK) {
215        BTIF_TRACE_DEBUG1("%s Setting CAPSLOCK", __FUNCTION__);
216        hidreport[reportIndex++] = (UINT8)HID_REPORT_CAPSLOCK;
217    }
218
219    if (changedlockstates & BTIF_HH_KEYSTATE_MASK_NUMLOCK)  {
220        BTIF_TRACE_DEBUG1("%s Setting NUMLOCK", __FUNCTION__);
221        hidreport[reportIndex++] = (UINT8)HID_REPORT_NUMLOCK;
222    }
223
224    if (changedlockstates & BTIF_HH_KEYSTATE_MASK_SCROLLLOCK) {
225        BTIF_TRACE_DEBUG1("%s Setting SCROLLLOCK", __FUNCTION__);
226        hidreport[reportIndex++] = (UINT8) HID_REPORT_SCROLLLOCK;
227    }
228
229     BTIF_TRACE_DEBUG4("Writing hidreport #1 to os: "\
230        "%s:  %x %x %x", __FUNCTION__,
231         hidreport[0], hidreport[1], hidreport[2]);
232    BTIF_TRACE_DEBUG4("%s:  %x %x %x", __FUNCTION__,
233         hidreport[3], hidreport[4], hidreport[5]);
234    BTIF_TRACE_DEBUG4("%s:  %x %x %x", __FUNCTION__,
235         hidreport[6], hidreport[7], hidreport[8]);
236    bta_hh_co_write(fd , hidreport, sizeof(hidreport));
237    usleep(200000);
238    memset(hidreport,0,9);
239    hidreport[0]=1;
240    BTIF_TRACE_DEBUG4("Writing hidreport #2 to os: "\
241       "%s:  %x %x %x", __FUNCTION__,
242         hidreport[0], hidreport[1], hidreport[2]);
243    BTIF_TRACE_DEBUG4("%s:  %x %x %x", __FUNCTION__,
244         hidreport[3], hidreport[4], hidreport[5]);
245    BTIF_TRACE_DEBUG4("%s:  %x %x %x ", __FUNCTION__,
246         hidreport[6], hidreport[7], hidreport[8]);
247    bta_hh_co_write(fd , hidreport, sizeof(hidreport));
248}
249
250/*******************************************************************************
251**
252** Function         update_keyboard_lockstates
253**
254** Description      Sends a report to the keyboard to set the lock states of keys
255**
256*******************************************************************************/
257static void update_keyboard_lockstates(btif_hh_device_t *p_dev)
258{
259    UINT8 len = 2;  /* reportid + 1 byte report*/
260    BD_ADDR* bda;
261
262    /* Set report for other keyboards */
263    BTIF_TRACE_EVENT3("%s: setting report on dev_handle %d to 0x%x",
264         __FUNCTION__, p_dev->dev_handle, btif_hh_keylockstates);
265
266    if (p_dev->p_buf != NULL) {
267        GKI_freebuf(p_dev->p_buf);
268    }
269    /* Get SetReport buffer */
270    p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET +
271        sizeof(BT_HDR)));
272    if (p_dev->p_buf != NULL) {
273        p_dev->p_buf->len = len;
274        p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
275        p_dev->p_buf->layer_specific = BTA_HH_RPTT_OUTPUT;
276
277        /* LED status updated by data event */
278        UINT8 *pbuf_data  = (UINT8 *)(p_dev->p_buf + 1)
279            + p_dev->p_buf->offset;
280        pbuf_data[0]=0x01; /*report id */
281        pbuf_data[1]=btif_hh_keylockstates; /*keystate*/
282        bda = (BD_ADDR*) (&p_dev->bd_addr);
283        BTA_HhSendData(p_dev->dev_handle, *bda,
284            p_dev->p_buf);
285    }
286}
287
288/*******************************************************************************
289**
290** Function         sync_lockstate_on_connect
291**
292** Description      Function to update the keyboard lock states managed by the OS
293**                  when a HID keyboard is connected or disconnected and reconnected
294** Returns          void
295*******************************************************************************/
296static void sync_lockstate_on_connect(btif_hh_device_t *p_dev)
297{
298    int keylockstates;
299
300    BTIF_TRACE_EVENT1("%s: Syncing keyboard lock states after "\
301        "reconnect...",__FUNCTION__);
302    /*If the device is connected, update keyboard state */
303    update_keyboard_lockstates(p_dev);
304
305    /*Check if the lockstate of caps,scroll,num is set.
306     If so, send a report to the kernel
307    so the lockstate is in sync */
308    keylockstates = get_keylockstates();
309    if (keylockstates)
310    {
311        BTIF_TRACE_DEBUG2("%s: Sending hid report to kernel "\
312            "indicating lock key state 0x%x",__FUNCTION__,
313            keylockstates);
314        usleep(200000);
315        toggle_os_keylockstates(p_dev->fd, keylockstates);
316    }
317    else
318    {
319        BTIF_TRACE_DEBUG2("%s: NOT sending hid report to kernel "\
320            "indicating lock key state 0x%x",__FUNCTION__,
321            keylockstates);
322    }
323}
324
325/*******************************************************************************
326**
327** Function         btif_hh_find_dev_by_handle
328**
329** Description      Return the device pointer of the specified device handle
330**
331** Returns          Device entry pointer in the device table
332*******************************************************************************/
333static btif_hh_device_t *btif_hh_find_dev_by_handle(UINT8 handle)
334{
335    UINT32 i;
336    // LOGV("%s: handle = %d", __FUNCTION__, handle);
337    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
338        if (btif_hh_cb.devices[i].dev_status != BTHH_CONN_STATE_UNKNOWN &&
339            btif_hh_cb.devices[i].dev_handle == handle)
340        {
341            return &btif_hh_cb.devices[i];
342        }
343    }
344    return NULL;
345}
346
347
348/*******************************************************************************
349**
350** Function         btif_hh_find_connected_dev_by_handle
351**
352** Description      Return the connected device pointer of the specified device handle
353**
354** Returns          Device entry pointer in the device table
355*******************************************************************************/
356btif_hh_device_t *btif_hh_find_connected_dev_by_handle(UINT8 handle)
357{
358    UINT32 i;
359    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
360        if (btif_hh_cb.devices[i].dev_status == BTHH_CONN_STATE_CONNECTED &&
361            btif_hh_cb.devices[i].dev_handle == handle)
362        {
363            return &btif_hh_cb.devices[i];
364        }
365    }
366    return NULL;
367}
368
369/*******************************************************************************
370**
371** Function         btif_hh_find_dev_by_bda
372**
373** Description      Return the device pointer of the specified bt_bdaddr_t.
374**
375** Returns          Device entry pointer in the device table
376*******************************************************************************/
377static btif_hh_device_t *btif_hh_find_dev_by_bda(bt_bdaddr_t *bd_addr)
378{
379    UINT32 i;
380    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
381        if (btif_hh_cb.devices[i].dev_status != BTHH_CONN_STATE_UNKNOWN &&
382            memcmp(&(btif_hh_cb.devices[i].bd_addr), bd_addr, BD_ADDR_LEN) == 0)
383        {
384            return &btif_hh_cb.devices[i];
385        }
386    }
387    return NULL;
388}
389
390/*******************************************************************************
391**
392** Function         btif_hh_find_connected_dev_by_bda
393**
394** Description      Return the connected device pointer of the specified bt_bdaddr_t.
395**
396** Returns          Device entry pointer in the device table
397*******************************************************************************/
398static btif_hh_device_t *btif_hh_find_connected_dev_by_bda(bt_bdaddr_t *bd_addr)
399{
400    UINT32 i;
401    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
402        if (btif_hh_cb.devices[i].dev_status == BTHH_CONN_STATE_CONNECTED &&
403            memcmp(&(btif_hh_cb.devices[i].bd_addr), bd_addr, BD_ADDR_LEN) == 0)
404        {
405            return &btif_hh_cb.devices[i];
406        }
407    }
408    return NULL;
409}
410
411/*******************************************************************************
412**
413** Function      btif_hh_stop_vup_timer
414**
415** Description  stop vitual unplug timer
416**
417** Returns      void
418*******************************************************************************/
419void btif_hh_stop_vup_timer(bt_bdaddr_t *bd_addr)
420{
421    btif_hh_device_t *p_dev  = btif_hh_find_connected_dev_by_bda(bd_addr);
422    if(p_dev != NULL)
423    {
424        if (p_dev->vup_timer_active)
425        {
426            BTIF_TRACE_DEBUG0("stop VUP timer ");
427            btu_stop_timer(&p_dev->vup_timer);
428        }
429        p_dev->vup_timer_active = FALSE;
430    }
431}
432/*******************************************************************************
433**
434** Function      btif_hh_start_vup_timer
435**
436** Description  start virtual unplug timer
437**
438** Returns      void
439*******************************************************************************/
440void btif_hh_start_vup_timer(bt_bdaddr_t *bd_addr)
441{
442    btif_hh_device_t *p_dev  = btif_hh_find_connected_dev_by_bda(bd_addr);
443
444    if (p_dev->vup_timer_active == FALSE)
445    {
446        BTIF_TRACE_DEBUG0("Start VUP timer ");
447        memset(&p_dev->vup_timer, 0, sizeof(TIMER_LIST_ENT));
448        p_dev->vup_timer.param = (UINT32)btif_hh_tmr_hdlr;
449        btu_start_timer(&p_dev->vup_timer, BTU_TTYPE_USER_FUNC,
450                        BTIF_TIMEOUT_VUP_SECS);
451    }
452    else
453    {
454        BTIF_TRACE_DEBUG0("Restart VUP timer ");
455        btu_stop_timer(&p_dev->vup_timer);
456        btu_start_timer(&p_dev->vup_timer, BTU_TTYPE_USER_FUNC,
457                        BTIF_TIMEOUT_VUP_SECS);
458    }
459        p_dev->vup_timer_active = TRUE;
460
461}
462
463/*******************************************************************************
464**
465** Function         btif_hh_add_added_dev
466**
467** Description      Add a new device to the added device list.
468**
469** Returns          TRUE if add successfully, otherwise FALSE.
470*******************************************************************************/
471BOOLEAN btif_hh_add_added_dev(bt_bdaddr_t bda, tBTA_HH_ATTR_MASK attr_mask)
472{
473    int i;
474    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
475        if (memcmp(&(btif_hh_cb.added_devices[i].bd_addr), &bda, BD_ADDR_LEN) == 0) {
476            BTIF_TRACE_WARNING6(" Device %02X:%02X:%02X:%02X:%02X:%02X already added",
477                  bda.address[0], bda.address[1], bda.address[2], bda.address[3], bda.address[4], bda.address[5]);
478            return FALSE;
479        }
480    }
481    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
482        if (btif_hh_cb.added_devices[i].bd_addr.address[0] == 0 &&
483            btif_hh_cb.added_devices[i].bd_addr.address[1] == 0 &&
484            btif_hh_cb.added_devices[i].bd_addr.address[2] == 0 &&
485            btif_hh_cb.added_devices[i].bd_addr.address[3] == 0 &&
486            btif_hh_cb.added_devices[i].bd_addr.address[4] == 0 &&
487            btif_hh_cb.added_devices[i].bd_addr.address[5] == 0)
488        {
489            BTIF_TRACE_WARNING6(" Added device %02X:%02X:%02X:%02X:%02X:%02X",
490                  bda.address[0], bda.address[1], bda.address[2], bda.address[3], bda.address[4], bda.address[5]);
491            memcpy(&(btif_hh_cb.added_devices[i].bd_addr), &bda, BD_ADDR_LEN);
492            btif_hh_cb.added_devices[i].dev_handle = BTA_HH_INVALID_HANDLE;
493            btif_hh_cb.added_devices[i].attr_mask  = attr_mask;
494            return TRUE;
495        }
496    }
497
498    BTIF_TRACE_WARNING1("%s: Error, out of space to add device",__FUNCTION__);
499    return FALSE;
500}
501
502/*******************************************************************************
503 **
504 ** Function         btif_hh_remove_device
505 **
506 ** Description      Remove an added device from the stack.
507 **
508 ** Returns          void
509 *******************************************************************************/
510void btif_hh_remove_device(bt_bdaddr_t bd_addr)
511{
512    int                    i;
513    btif_hh_device_t       *p_dev;
514    btif_hh_added_device_t *p_added_dev;
515
516    ALOGI("%s: bda = %02x:%02x:%02x:%02x:%02x:%02x", __FUNCTION__,
517         bd_addr.address[0], bd_addr.address[1], bd_addr.address[2], bd_addr.address[3], bd_addr.address[4], bd_addr.address[5]);
518
519    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
520        p_added_dev = &btif_hh_cb.added_devices[i];
521        if (memcmp(&(p_added_dev->bd_addr),&bd_addr, 6) == 0) {
522            BTA_HhRemoveDev(p_added_dev->dev_handle);
523            btif_storage_remove_hid_info(&(p_added_dev->bd_addr));
524            memset(&(p_added_dev->bd_addr), 0, 6);
525            p_added_dev->dev_handle = BTA_HH_INVALID_HANDLE;
526            break;
527        }
528    }
529
530    p_dev = btif_hh_find_dev_by_bda(&bd_addr);
531    if (p_dev == NULL) {
532        BTIF_TRACE_WARNING6(" Oops, can't find device [%02x:%02x:%02x:%02x:%02x:%02x]",
533             bd_addr.address[0], bd_addr.address[1], bd_addr.address[2], bd_addr.address[3], bd_addr.address[4], bd_addr.address[5]);
534        return;
535    }
536
537    /* need to notify up-layer device is disconnected to avoid state out of sync with up-layer */
538    HAL_CBACK(bt_hh_callbacks, connection_state_cb, &(p_dev->bd_addr), BTHH_CONN_STATE_DISCONNECTED);
539
540    p_dev->dev_status = BTHH_CONN_STATE_UNKNOWN;
541    p_dev->dev_handle = BTA_HH_INVALID_HANDLE;
542    if (btif_hh_cb.device_num > 0) {
543        btif_hh_cb.device_num--;
544    }
545    else {
546        BTIF_TRACE_WARNING1("%s: device_num = 0", __FUNCTION__);
547    }
548    if (p_dev->p_buf != NULL) {
549        GKI_freebuf(p_dev->p_buf);
550        p_dev->p_buf = NULL;
551    }
552
553    p_dev->hh_keep_polling = 0;
554    p_dev->hh_poll_thread_id = -1;
555    BTIF_TRACE_DEBUG2("%s: uhid fd = %d", __FUNCTION__, p_dev->fd);
556    if (p_dev->fd >= 0) {
557        bta_hh_co_destroy(p_dev->fd);
558        p_dev->fd = -1;
559    }
560}
561
562
563BOOLEAN btif_hh_copy_hid_info(tBTA_HH_DEV_DSCP_INFO* dest , tBTA_HH_DEV_DSCP_INFO* src)
564{
565    dest->descriptor.dl_len = 0;
566    if (src->descriptor.dl_len >0)
567    {
568        dest->descriptor.dsc_list = (UINT8 *) GKI_getbuf(src->descriptor.dl_len);
569        if (dest->descriptor.dsc_list == NULL)
570        {
571            BTIF_TRACE_WARNING1("%s: Failed to allocate DSCP for CB", __FUNCTION__);
572            return FALSE;
573        }
574    }
575    memcpy(dest->descriptor.dsc_list, src->descriptor.dsc_list, src->descriptor.dl_len);
576    dest->descriptor.dl_len = src->descriptor.dl_len;
577    dest->vendor_id  = src->vendor_id;
578    dest->product_id = src->product_id;
579    dest->version    = src->version;
580    dest->ctry_code  = src->ctry_code;
581    return TRUE;
582}
583
584
585/*******************************************************************************
586**
587** Function         btif_hh_virtual_unplug
588**
589** Description      Virtual unplug initiated from the BTIF thread context
590**                  Special handling for HID mouse-
591**
592** Returns          void
593**
594*******************************************************************************/
595
596bt_status_t btif_hh_virtual_unplug(bt_bdaddr_t *bd_addr)
597{
598    BTIF_TRACE_DEBUG1("%s", __FUNCTION__);
599    btif_hh_device_t *p_dev;
600    char bd_str[18];
601    sprintf(bd_str, "%02X:%02X:%02X:%02X:%02X:%02X",
602            bd_addr->address[0],  bd_addr->address[1],  bd_addr->address[2],  bd_addr->address[3],
603            bd_addr->address[4], bd_addr->address[5]);
604    p_dev = btif_hh_find_dev_by_bda(bd_addr);
605    if ((p_dev != NULL) && (p_dev->dev_status == BTHH_CONN_STATE_CONNECTED)
606        && (p_dev->attr_mask & HID_VIRTUAL_CABLE))
607    {
608        BTIF_TRACE_DEBUG1("%s Sending BTA_HH_CTRL_VIRTUAL_CABLE_UNPLUG", __FUNCTION__);
609        /* start the timer */
610        btif_hh_start_vup_timer(bd_addr);
611        p_dev->local_vup = TRUE;
612        BTA_HhSendCtrl(p_dev->dev_handle, BTA_HH_CTRL_VIRTUAL_CABLE_UNPLUG);
613        return BT_STATUS_SUCCESS;
614    }
615    else
616    {
617        BTIF_TRACE_ERROR2("%s: Error, device %s not opened.", __FUNCTION__, bd_str);
618        return BT_STATUS_FAIL;
619    }
620}
621
622/*******************************************************************************
623**
624** Function         btif_hh_connect
625**
626** Description      connection initiated from the BTIF thread context
627**
628** Returns          int status
629**
630*******************************************************************************/
631
632bt_status_t btif_hh_connect(bt_bdaddr_t *bd_addr)
633{
634    btif_hh_device_t *dev;
635    btif_hh_added_device_t *added_dev = NULL;
636    char bda_str[20];
637    int i;
638    BD_ADDR *bda = (BD_ADDR*)bd_addr;
639    tBTA_HH_CONN conn;
640    CHECK_BTHH_INIT();
641    dev = btif_hh_find_dev_by_bda(bd_addr);
642    BTIF_TRACE_DEBUG0("Connect _hh");
643    sprintf(bda_str, "%02X:%02X:%02X:%02X:%02X:%02X",
644            (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
645    if (dev == NULL && btif_hh_cb.device_num >= BTIF_HH_MAX_HID) {
646        // No space for more HID device now.
647         BTIF_TRACE_WARNING2("%s: Error, exceeded the maximum supported HID device number %d",
648             __FUNCTION__, BTIF_HH_MAX_HID);
649        return BT_STATUS_FAIL;
650    }
651
652    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
653        if (memcmp(&(btif_hh_cb.added_devices[i].bd_addr), bd_addr, BD_ADDR_LEN) == 0) {
654            added_dev = &btif_hh_cb.added_devices[i];
655             BTIF_TRACE_WARNING3("%s: Device %s already added, attr_mask = 0x%x",
656                 __FUNCTION__, bda_str, added_dev->attr_mask);
657        }
658    }
659
660    if (added_dev != NULL) {
661        if (added_dev->dev_handle == BTA_HH_INVALID_HANDLE) {
662            // No space for more HID device now.
663            BTIF_TRACE_ERROR2("%s: Error, device %s added but addition failed", __FUNCTION__, bda_str);
664            memset(&(added_dev->bd_addr), 0, 6);
665            added_dev->dev_handle = BTA_HH_INVALID_HANDLE;
666            return BT_STATUS_FAIL;
667        }
668    }
669
670    if (added_dev == NULL ||
671        (added_dev->attr_mask & HID_NORMALLY_CONNECTABLE) != 0 ||
672        (added_dev->attr_mask & HID_RECONN_INIT) == 0)
673    {
674        tBTA_SEC sec_mask = BTUI_HH_SECURITY;
675        btif_hh_cb.status = BTIF_HH_DEV_CONNECTING;
676        BD_ADDR *bda = (BD_ADDR*)bd_addr;
677        BTA_HhOpen(*bda, BTA_HH_PROTO_RPT_MODE, sec_mask);
678    }
679    else
680    {
681        // This device shall be connected from the host side.
682        BTIF_TRACE_ERROR2("%s: Error, device %s can only be reconnected from device side",
683             __FUNCTION__, bda_str);
684        return BT_STATUS_FAIL;
685    }
686
687    HAL_CBACK(bt_hh_callbacks, connection_state_cb, bd_addr, BTHH_CONN_STATE_CONNECTING);
688    return BT_STATUS_SUCCESS;
689}
690
691/*******************************************************************************
692**
693** Function         btif_hh_disconnect
694**
695** Description      disconnection initiated from the BTIF thread context
696**
697** Returns          void
698**
699*******************************************************************************/
700
701void btif_hh_disconnect(bt_bdaddr_t *bd_addr)
702{
703    BD_ADDR *bda = (BD_ADDR*)bd_addr;
704    btif_hh_device_t *p_dev;
705    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
706    if (p_dev != NULL)
707    {
708        BTA_HhClose(p_dev->dev_handle);
709    }
710    else
711        BTIF_TRACE_DEBUG1("%s-- Error: device not connected:",__FUNCTION__);
712}
713
714/*******************************************************************************
715**
716** Function         btif_btif_hh_setreport
717**
718** Description      setreport initiated from the BTIF thread context
719**
720** Returns          void
721**
722*******************************************************************************/
723
724void btif_hh_setreport(btif_hh_device_t *p_dev, bthh_report_type_t r_type, UINT16 size,
725                            UINT8* report)
726{
727    UINT8  hexbuf[20];
728    UINT16 len = size;
729    int i = 0;
730    if (p_dev->p_buf != NULL) {
731        GKI_freebuf(p_dev->p_buf);
732    }
733    p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET + sizeof(BT_HDR)));
734    if (p_dev->p_buf == NULL) {
735        APPL_TRACE_ERROR2("%s: Error, failed to allocate RPT buffer, len = %d", __FUNCTION__, len);
736        return;
737    }
738
739    p_dev->p_buf->len = len;
740    p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
741
742    //Build a SetReport data buffer
743    memset(hexbuf, 0, 20);
744    for(i=0; i<len; i++)
745        hexbuf[i] = report[i];
746
747    UINT8* pbuf_data;
748    pbuf_data = (UINT8*) (p_dev->p_buf + 1) + p_dev->p_buf->offset;
749    memcpy(pbuf_data, hexbuf, len);
750    BTA_HhSetReport(p_dev->dev_handle, r_type, p_dev->p_buf);
751
752}
753
754/*****************************************************************************
755**   Section name (Group of functions)
756*****************************************************************************/
757
758/*****************************************************************************
759**
760**   btif hh api functions (no context switch)
761**
762*****************************************************************************/
763
764
765/*******************************************************************************
766**
767** Function         btif_hh_upstreams_evt
768**
769** Description      Executes HH UPSTREAMS events in btif context
770**
771** Returns          void
772**
773*******************************************************************************/
774static void btif_hh_upstreams_evt(UINT16 event, char* p_param)
775{
776    tBTA_HH *p_data = (tBTA_HH *)p_param;
777    bdstr_t bdstr;
778    btif_hh_device_t *p_dev = NULL;
779    int i;
780    int len, tmplen;
781
782    BTIF_TRACE_DEBUG2("%s: event=%s", __FUNCTION__, dump_hh_event(event));
783
784    switch (event)
785    {
786        case BTA_HH_ENABLE_EVT:
787            BTIF_TRACE_DEBUG2("%s: BTA_HH_ENABLE_EVT: status =%d",__FUNCTION__, p_data->status);
788            if (p_data->status == BTA_HH_OK) {
789                btif_hh_cb.status = BTIF_HH_ENABLED;
790                BTIF_TRACE_DEBUG1("%s--Loading added devices",__FUNCTION__);
791                /* Add hid descriptors for already bonded hid devices*/
792                btif_storage_load_bonded_hid_info();
793            }
794            else {
795                btif_hh_cb.status = BTIF_HH_DISABLED;
796                BTIF_TRACE_WARNING1("BTA_HH_ENABLE_EVT: Error, HH enabling failed, status = %d", p_data->status);
797            }
798            break;
799
800        case BTA_HH_DISABLE_EVT:
801            btif_hh_cb.status = BTIF_HH_DISABLED;
802            if (p_data->status == BTA_HH_OK) {
803                int i;
804                //Clear the control block
805                memset(&btif_hh_cb, 0, sizeof(btif_hh_cb));
806                for (i = 0; i < BTIF_HH_MAX_HID; i++){
807                    btif_hh_cb.devices[i].dev_status = BTHH_CONN_STATE_UNKNOWN;
808                }
809            }
810            else
811                BTIF_TRACE_WARNING1("BTA_HH_DISABLE_EVT: Error, HH disabling failed, status = %d", p_data->status);
812            break;
813
814        case BTA_HH_OPEN_EVT:
815            BTIF_TRACE_WARNING3("%s: BTA_HH_OPN_EVT: handle=%d, status =%d",__FUNCTION__, p_data->conn.handle, p_data->conn.status);
816            if (p_data->conn.status == BTA_HH_OK) {
817                p_dev = btif_hh_find_connected_dev_by_handle(p_data->conn.handle);
818                if (p_dev == NULL) {
819                    BTIF_TRACE_WARNING1("BTA_HH_OPEN_EVT: Error, cannot find device with handle %d", p_data->conn.handle);
820                    btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
821                    // The connect request must come from device side and exceeded the connected
822                                   // HID device number.
823                    BTA_HhClose(p_data->conn.handle);
824                    HAL_CBACK(bt_hh_callbacks, connection_state_cb, (bt_bdaddr_t*) &p_data->conn.bda,BTHH_CONN_STATE_DISCONNECTED);
825                }
826                else if (p_dev->fd < 0) {
827                    BTIF_TRACE_WARNING0("BTA_HH_OPEN_EVT: Error, failed to find the uhid driver...");
828                    memcpy(&(p_dev->bd_addr), p_data->conn.bda, BD_ADDR_LEN);
829                    //remove the connection  and then try again to reconnect from the mouse side to recover
830                    btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
831                    BTA_HhClose(p_data->conn.handle);
832                }
833                else {
834                    BTIF_TRACE_WARNING1("BTA_HH_OPEN_EVT: Found device...Getting dscp info for handle ... %d",p_data->conn.handle);
835                    memcpy(&(p_dev->bd_addr), p_data->conn.bda, BD_ADDR_LEN);
836                    btif_hh_cb.status = BTIF_HH_DEV_CONNECTED;
837                    // Send set_idle if the peer_device is a keyboard
838                    if (check_cod((bt_bdaddr_t*)p_data->conn.bda, COD_HID_KEYBOARD )||
839                                check_cod((bt_bdaddr_t*)p_data->conn.bda, COD_HID_COMBO))
840                        BTA_HhSetIdle(p_data->conn.handle, 0);
841                    btif_hh_cb.p_curr_dev = btif_hh_find_connected_dev_by_handle(p_data->conn.handle);
842                    BTA_HhGetDscpInfo(p_data->conn.handle);
843                    p_dev->dev_status = BTHH_CONN_STATE_CONNECTED;
844                    HAL_CBACK(bt_hh_callbacks, connection_state_cb,&(p_dev->bd_addr), p_dev->dev_status);
845                }
846            }
847            else {
848                bt_bdaddr_t *bdaddr = (bt_bdaddr_t*)p_data->conn.bda;
849                btif_dm_hh_open_failed(bdaddr);
850                HAL_CBACK(bt_hh_callbacks, connection_state_cb, (bt_bdaddr_t*) &p_data->conn.bda,BTHH_CONN_STATE_DISCONNECTED);
851                btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
852            }
853            break;
854        case BTA_HH_CLOSE_EVT:
855            BTIF_TRACE_DEBUG2("BTA_HH_CLOSE_EVT: status = %d, handle = %d",
856            p_data->dev_status.status, p_data->dev_status.handle);
857            p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
858            if (p_dev != NULL) {
859                BTIF_TRACE_DEBUG2("%s: uhid fd = %d", __FUNCTION__, p_dev->fd);
860                if(p_dev->vup_timer_active)
861                {
862                    btif_hh_stop_vup_timer(&(p_dev->bd_addr));
863                }
864                btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
865                p_dev->dev_status = BTHH_CONN_STATE_DISCONNECTED;
866                HAL_CBACK(bt_hh_callbacks, connection_state_cb,&(p_dev->bd_addr), p_dev->dev_status);
867                BTIF_TRACE_DEBUG2("%s: Closing uhid fd = %d", __FUNCTION__, p_dev->fd);
868                bta_hh_co_destroy(p_dev->fd);
869                p_dev->fd = -1;
870            }
871            else {
872                BTIF_TRACE_WARNING1("Error: cannot find device with handle %d", p_data->dev_status.handle);
873            }
874            break;
875        case BTA_HH_GET_RPT_EVT: {
876            BT_HDR *hdr = p_data->hs_data.rsp_data.p_rpt_data;
877            UINT8 *data = NULL;
878            UINT16 len = 0;
879
880            BTIF_TRACE_DEBUG2("BTA_HH_GET_RPT_EVT: status = %d, handle = %d",
881                 p_data->hs_data.status, p_data->hs_data.handle);
882            /* p_rpt_data in HANDSHAKE response case */
883            if (hdr) {
884                data = (UINT8 *)(hdr + 1) + hdr->offset;
885                len = hdr->len;
886            }
887            p_dev = btif_hh_find_connected_dev_by_handle(p_data->hs_data.handle);
888            if (p_dev) {
889                HAL_CBACK(bt_hh_callbacks, get_report_cb,
890                          (bt_bdaddr_t*) &(p_dev->bd_addr),
891                          (bthh_status_t) p_data->hs_data.status, data, len);
892            } else {
893                BTIF_TRACE_WARNING1("Error: cannot find device with handle %d", p_data->hs_data.handle);
894            }
895            break;
896        }
897        case BTA_HH_SET_RPT_EVT:
898            BTIF_TRACE_DEBUG2("BTA_HH_SET_RPT_EVT: status = %d, handle = %d",
899            p_data->dev_status.status, p_data->dev_status.handle);
900            p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
901            if (p_dev != NULL && p_dev->p_buf != NULL) {
902                BTIF_TRACE_DEBUG0("Freeing buffer..." );
903                GKI_freebuf(p_dev->p_buf);
904                p_dev->p_buf = NULL;
905            }
906            break;
907
908        case BTA_HH_GET_PROTO_EVT:
909            p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
910            BTIF_TRACE_WARNING4("BTA_HH_GET_PROTO_EVT: status = %d, handle = %d, proto = [%d], %s",
911                 p_data->hs_data.status, p_data->hs_data.handle,
912                 p_data->hs_data.rsp_data.proto_mode,
913                 (p_data->hs_data.rsp_data.proto_mode == BTA_HH_PROTO_RPT_MODE) ? "Report Mode" :
914                 (p_data->hs_data.rsp_data.proto_mode == BTA_HH_PROTO_BOOT_MODE) ? "Boot Mode" : "Unsupported");
915            HAL_CBACK(bt_hh_callbacks, protocol_mode_cb,(bt_bdaddr_t*) &(p_dev->bd_addr), (bthh_status_t)p_data->hs_data.status,
916                             (bthh_protocol_mode_t) p_data->hs_data.rsp_data.proto_mode);
917            break;
918
919        case BTA_HH_SET_PROTO_EVT:
920            BTIF_TRACE_DEBUG2("BTA_HH_SET_PROTO_EVT: status = %d, handle = %d",
921                 p_data->dev_status.status, p_data->dev_status.handle);
922            break;
923
924        case BTA_HH_GET_IDLE_EVT:
925            BTIF_TRACE_DEBUG3("BTA_HH_GET_IDLE_EVT: handle = %d, status = %d, rate = %d",
926                 p_data->hs_data.handle, p_data->hs_data.status,
927                 p_data->hs_data.rsp_data.idle_rate);
928            break;
929
930        case BTA_HH_SET_IDLE_EVT:
931            BTIF_TRACE_DEBUG2("BTA_HH_SET_IDLE_EVT: status = %d, handle = %d",
932            p_data->dev_status.status, p_data->dev_status.handle);
933            break;
934
935        case BTA_HH_GET_DSCP_EVT:
936            BTIF_TRACE_WARNING2("BTA_HH_GET_DSCP_EVT: status = %d, handle = %d",
937                p_data->dev_status.status, p_data->dev_status.handle);
938                len = p_data->dscp_info.descriptor.dl_len;
939                BTIF_TRACE_DEBUG1("BTA_HH_GET_DSCP_EVT: len = %d", len);
940            p_dev = btif_hh_cb.p_curr_dev;
941            if (p_dev == NULL) {
942                BTIF_TRACE_ERROR0("BTA_HH_GET_DSCP_EVT: No HID device is currently connected");
943                return;
944            }
945            if (p_dev->fd < 0) {
946                ALOGE("BTA_HH_GET_DSCP_EVT: Error, failed to find the uhid driver...");
947                return;
948            }
949            {
950                char *cached_name = NULL;
951                bt_bdname_t bdname;
952                bt_property_t prop_name;
953                BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_BDNAME,
954                                           sizeof(bt_bdname_t), &bdname);
955                if (btif_storage_get_remote_device_property(
956                    &p_dev->bd_addr, &prop_name) == BT_STATUS_SUCCESS)
957                {
958                    cached_name = (char *)bdname.name;
959                }
960                else
961                {
962                    cached_name = "Bluetooth HID";
963                }
964
965                BTIF_TRACE_WARNING2("%s: name = %s", __FUNCTION__, cached_name);
966                bta_hh_co_send_hid_info(p_dev, cached_name,
967                    p_data->dscp_info.vendor_id, p_data->dscp_info.product_id,
968                    p_data->dscp_info.version,   p_data->dscp_info.ctry_code,
969                    len, p_data->dscp_info.descriptor.dsc_list);
970                if (btif_hh_add_added_dev(p_dev->bd_addr, p_dev->attr_mask)) {
971                    BD_ADDR bda;
972                    bdcpy(bda, p_dev->bd_addr.address);
973                    tBTA_HH_DEV_DSCP_INFO dscp_info;
974                    bt_status_t ret;
975                    bdcpy(bda, p_dev->bd_addr.address);
976                    btif_hh_copy_hid_info(&dscp_info, &p_data->dscp_info);
977                    BTIF_TRACE_DEBUG6("BTA_HH_GET_DSCP_EVT:bda = %02x:%02x:%02x:%02x:%02x:%02x",
978                              p_dev->bd_addr.address[0], p_dev->bd_addr.address[1],
979                              p_dev->bd_addr.address[2],p_dev->bd_addr.address[3],
980                              p_dev->bd_addr.address[4], p_dev->bd_addr.address[5]);
981                    BTA_HhAddDev(bda, p_dev->attr_mask,p_dev->sub_class,p_dev->app_id, dscp_info);
982                    // write hid info to nvram
983                    ret = btif_storage_add_hid_device_info(&(p_dev->bd_addr), p_dev->attr_mask,p_dev->sub_class,p_dev->app_id,
984                                                        p_data->dscp_info.vendor_id, p_data->dscp_info.product_id,
985                                                        p_data->dscp_info.version,   p_data->dscp_info.ctry_code,
986                                                        len, p_data->dscp_info.descriptor.dsc_list);
987
988                    ASSERTC(ret == BT_STATUS_SUCCESS, "storing hid info failed", ret);
989                    BTIF_TRACE_WARNING0("BTA_HH_GET_DSCP_EVT: Called add device");
990
991                    //Free buffer created for dscp_info;
992                    if (dscp_info.descriptor.dl_len >0 && dscp_info.descriptor.dsc_list != NULL)
993                    {
994                      GKI_freebuf(dscp_info.descriptor.dsc_list);
995                      dscp_info.descriptor.dsc_list = NULL;
996                      dscp_info.descriptor.dl_len=0;
997                    }
998                }
999                else {
1000                    //Device already added.
1001                    BTIF_TRACE_WARNING1("%s: Device already added ",__FUNCTION__);
1002                }
1003                /*Sync HID Keyboard lockstates */
1004                tmplen = sizeof(hid_kb_numlock_on_list)
1005                            / sizeof(tHID_KB_LIST);
1006                for(i = 0; i< tmplen; i++)
1007                {
1008                    if(p_data->dscp_info.vendor_id
1009                        == hid_kb_numlock_on_list[i].version_id &&
1010                        p_data->dscp_info.product_id
1011                        == hid_kb_numlock_on_list[i].product_id)
1012                    {
1013                        BTIF_TRACE_DEBUG3("%s() idx[%d] Enabling "\
1014                            "NUMLOCK for device :: %s", __FUNCTION__,
1015                            i, hid_kb_numlock_on_list[i].kb_name);
1016                        /* Enable NUMLOCK by default so that numeric
1017                            keys work from first keyboard connect */
1018                        set_keylockstate(BTIF_HH_KEYSTATE_MASK_NUMLOCK,
1019                                        TRUE);
1020                        sync_lockstate_on_connect(p_dev);
1021                        /* End Sync HID Keyboard lockstates */
1022                        break;
1023                    }
1024                }
1025            }
1026            break;
1027
1028        case BTA_HH_ADD_DEV_EVT:
1029            BTIF_TRACE_WARNING2("BTA_HH_ADD_DEV_EVT: status = %d, handle = %d",p_data->dev_info.status, p_data->dev_info.handle);
1030            int i;
1031            for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
1032                if (memcmp(btif_hh_cb.added_devices[i].bd_addr.address, p_data->dev_info.bda, 6) == 0) {
1033                    if (p_data->dev_info.status == BTA_HH_OK) {
1034                        btif_hh_cb.added_devices[i].dev_handle = p_data->dev_info.handle;
1035                    }
1036                    else {
1037                        memset(btif_hh_cb.added_devices[i].bd_addr.address, 0, 6);
1038                        btif_hh_cb.added_devices[i].dev_handle = BTA_HH_INVALID_HANDLE;
1039                    }
1040                    break;
1041                }
1042            }
1043            break;
1044        case BTA_HH_RMV_DEV_EVT:
1045                BTIF_TRACE_DEBUG2("BTA_HH_RMV_DEV_EVT: status = %d, handle = %d",
1046                     p_data->dev_info.status, p_data->dev_info.handle);
1047                BTIF_TRACE_DEBUG6("BTA_HH_RMV_DEV_EVT:bda = %02x:%02x:%02x:%02x:%02x:%02x",
1048                     p_data->dev_info.bda[0], p_data->dev_info.bda[1], p_data->dev_info.bda[2],
1049                     p_data->dev_info.bda[3], p_data->dev_info.bda[4], p_data->dev_info.bda[5]);
1050                break;
1051
1052
1053        case BTA_HH_VC_UNPLUG_EVT:
1054                BTIF_TRACE_DEBUG2("BTA_HH_VC_UNPLUG_EVT: status = %d, handle = %d",
1055                     p_data->dev_status.status, p_data->dev_status.handle);
1056                p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
1057                btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
1058                if (p_dev != NULL) {
1059                    BTIF_TRACE_DEBUG6("BTA_HH_VC_UNPLUG_EVT:bda = %02x:%02x:%02x:%02x:%02x:%02x",
1060                         p_dev->bd_addr.address[0], p_dev->bd_addr.address[1],
1061                         p_dev->bd_addr.address[2],p_dev->bd_addr.address[3],
1062                         p_dev->bd_addr.address[4], p_dev->bd_addr.address[5]);
1063                    /* Stop the VUP timer */
1064                    if(p_dev->vup_timer_active)
1065                    {
1066                        btif_hh_stop_vup_timer(&(p_dev->bd_addr));
1067                    }
1068                    p_dev->dev_status = BTHH_CONN_STATE_DISCONNECTED;
1069                    BTIF_TRACE_DEBUG1("%s---Sending connection state change", __FUNCTION__);
1070                    HAL_CBACK(bt_hh_callbacks, connection_state_cb,&(p_dev->bd_addr), p_dev->dev_status);
1071                    BTIF_TRACE_DEBUG1("%s---Removing HID bond", __FUNCTION__);
1072                    /* If it is locally initiated VUP or remote device has its major COD as
1073                    Peripheral removed the bond.*/
1074                    if (p_dev->local_vup  || check_cod_hid(&(p_dev->bd_addr), COD_HID_MAJOR))
1075                    {
1076                        p_dev->local_vup = FALSE;
1077                        BTA_DmRemoveDevice((UINT8 *)p_dev->bd_addr.address);
1078                    }
1079                    else
1080                        btif_hh_remove_device(p_dev->bd_addr);
1081                    HAL_CBACK(bt_hh_callbacks, virtual_unplug_cb,&(p_dev->bd_addr),
1082                                    p_data->dev_status.status);
1083                }
1084                break;
1085
1086        case BTA_HH_API_ERR_EVT  :
1087                ALOGI("BTA_HH API_ERR");
1088                break;
1089
1090
1091
1092            default:
1093                BTIF_TRACE_WARNING2("%s: Unhandled event: %d", __FUNCTION__, event);
1094                break;
1095        }
1096}
1097
1098/*******************************************************************************
1099**
1100** Function         bte_hh_evt
1101**
1102** Description      Switches context from BTE to BTIF for all HH events
1103**
1104** Returns          void
1105**
1106*******************************************************************************/
1107
1108static void bte_hh_evt(tBTA_HH_EVT event, tBTA_HH *p_data)
1109{
1110    bt_status_t status;
1111    int param_len = 0;
1112
1113    if (BTA_HH_ENABLE_EVT == event)
1114        param_len = sizeof(tBTA_HH_STATUS);
1115    else if (BTA_HH_OPEN_EVT == event)
1116        param_len = sizeof(tBTA_HH_CONN);
1117    else if (BTA_HH_DISABLE_EVT == event)
1118        param_len = sizeof(tBTA_HH_STATUS);
1119    else if (BTA_HH_CLOSE_EVT == event)
1120        param_len = sizeof(tBTA_HH_CBDATA);
1121    else if (BTA_HH_GET_DSCP_EVT == event)
1122        param_len = sizeof(tBTA_HH_DEV_DSCP_INFO);
1123    else if ((BTA_HH_GET_PROTO_EVT == event) || (BTA_HH_GET_RPT_EVT == event)|| (BTA_HH_GET_IDLE_EVT == event))
1124        param_len = sizeof(tBTA_HH_HSDATA);
1125    else if ((BTA_HH_SET_PROTO_EVT == event) || (BTA_HH_SET_RPT_EVT == event) || (BTA_HH_VC_UNPLUG_EVT == event) || (BTA_HH_SET_IDLE_EVT == event))
1126        param_len = sizeof(tBTA_HH_CBDATA);
1127    else if ((BTA_HH_ADD_DEV_EVT == event) || (BTA_HH_RMV_DEV_EVT == event) )
1128        param_len = sizeof(tBTA_HH_DEV_INFO);
1129    else if (BTA_HH_API_ERR_EVT == event)
1130        param_len = 0;
1131    /* switch context to btif task context (copy full union size for convenience) */
1132    status = btif_transfer_context(btif_hh_upstreams_evt, (uint16_t)event, (void*)p_data, param_len, NULL);
1133
1134    /* catch any failed context transfers */
1135    ASSERTC(status == BT_STATUS_SUCCESS, "context transfer failed", status);
1136}
1137
1138/*******************************************************************************
1139**
1140** Function         btif_hh_handle_evt
1141**
1142** Description      Switches context for immediate callback
1143**
1144** Returns          void
1145**
1146*******************************************************************************/
1147
1148static void btif_hh_handle_evt(UINT16 event, char *p_param)
1149{
1150    bt_bdaddr_t *bd_addr = (bt_bdaddr_t*)p_param;
1151    BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
1152    int ret;
1153    switch(event)
1154    {
1155        case BTIF_HH_CONNECT_REQ_EVT:
1156        {
1157            ret = btif_hh_connect(bd_addr);
1158            if(ret == BT_STATUS_SUCCESS)
1159            {
1160                HAL_CBACK(bt_hh_callbacks, connection_state_cb,bd_addr,BTHH_CONN_STATE_CONNECTING);
1161            }
1162            else
1163                HAL_CBACK(bt_hh_callbacks, connection_state_cb,bd_addr,BTHH_CONN_STATE_DISCONNECTED);
1164        }
1165        break;
1166
1167        case BTIF_HH_DISCONNECT_REQ_EVT:
1168        {
1169            BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
1170            btif_hh_disconnect(bd_addr);
1171            HAL_CBACK(bt_hh_callbacks, connection_state_cb,bd_addr,BTHH_CONN_STATE_DISCONNECTING);
1172        }
1173        break;
1174
1175        case BTIF_HH_VUP_REQ_EVT:
1176        {
1177            BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
1178            ret = btif_hh_virtual_unplug(bd_addr);
1179        }
1180        break;
1181
1182        default:
1183        {
1184            BTIF_TRACE_WARNING2("%s : Unknown event 0x%x", __FUNCTION__, event);
1185        }
1186        break;
1187    }
1188}
1189
1190/*******************************************************************************
1191**
1192** Function      btif_hh_tmr_hdlr
1193**
1194** Description   Process timer timeout
1195**
1196** Returns      void
1197*******************************************************************************/
1198void btif_hh_tmr_hdlr(TIMER_LIST_ENT *tle)
1199{
1200    btif_hh_device_t *p_dev;
1201    UINT8               i,j;
1202    tBTA_HH_EVT event;
1203    tBTA_HH p_data;
1204    int param_len = 0;
1205    memset(&p_data, 0, sizeof(tBTA_HH));
1206
1207    BTIF_TRACE_DEBUG2("%s timer_in_use=%d",  __FUNCTION__, tle->in_use );
1208
1209    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
1210        if (btif_hh_cb.devices[i].dev_status == BTHH_CONN_STATE_CONNECTED)
1211        {
1212
1213            p_dev = &btif_hh_cb.devices[i];
1214
1215            if (p_dev->vup_timer_active)
1216            {
1217                p_dev->vup_timer_active = FALSE;
1218                event = BTA_HH_VC_UNPLUG_EVT;
1219                p_data.dev_status.status = BTHH_ERR;
1220                p_data.dev_status.handle = p_dev->dev_handle;
1221                param_len = sizeof(tBTA_HH_CBDATA);
1222
1223                /* switch context to btif task context */
1224                btif_transfer_context(btif_hh_upstreams_evt, (uint16_t)event, (void*)&p_data,
1225                            param_len, NULL);
1226            }
1227        }
1228    }
1229}
1230
1231/*******************************************************************************
1232**
1233** Function         btif_hh_init
1234**
1235** Description     initializes the hh interface
1236**
1237** Returns         bt_status_t
1238**
1239*******************************************************************************/
1240static bt_status_t init( bthh_callbacks_t* callbacks )
1241{
1242    UINT32 i;
1243    BTIF_TRACE_EVENT1("%s", __FUNCTION__);
1244
1245    bt_hh_callbacks = callbacks;
1246    memset(&btif_hh_cb, 0, sizeof(btif_hh_cb));
1247    for (i = 0; i < BTIF_HH_MAX_HID; i++){
1248        btif_hh_cb.devices[i].dev_status = BTHH_CONN_STATE_UNKNOWN;
1249    }
1250    /* Invoke the enable service API to the core to set the appropriate service_id */
1251    btif_enable_service(BTA_HID_SERVICE_ID);
1252    return BT_STATUS_SUCCESS;
1253}
1254
1255/*******************************************************************************
1256**
1257** Function        connect
1258**
1259** Description     connect to hid device
1260**
1261** Returns         bt_status_t
1262**
1263*******************************************************************************/
1264static bt_status_t connect( bt_bdaddr_t *bd_addr)
1265{
1266    if(btif_hh_cb.status != BTIF_HH_DEV_CONNECTING)
1267    {
1268        btif_transfer_context(btif_hh_handle_evt, BTIF_HH_CONNECT_REQ_EVT,
1269                                 (char*)bd_addr, sizeof(bt_bdaddr_t), NULL);
1270        return BT_STATUS_SUCCESS;
1271    }
1272    else
1273        return BT_STATUS_BUSY;
1274}
1275
1276/*******************************************************************************
1277**
1278** Function         disconnect
1279**
1280** Description      disconnect from hid device
1281**
1282** Returns         bt_status_t
1283**
1284*******************************************************************************/
1285static bt_status_t disconnect( bt_bdaddr_t *bd_addr )
1286{
1287    CHECK_BTHH_INIT();
1288    btif_hh_device_t *p_dev;
1289
1290    if (btif_hh_cb.status == BTIF_HH_DISABLED)
1291    {
1292        BTIF_TRACE_WARNING2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1293        return BT_STATUS_FAIL;
1294    }
1295    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1296    if (p_dev != NULL)
1297    {
1298        return btif_transfer_context(btif_hh_handle_evt, BTIF_HH_DISCONNECT_REQ_EVT,
1299                     (char*)bd_addr, sizeof(bt_bdaddr_t), NULL);
1300    }
1301    else
1302    {
1303        BTIF_TRACE_WARNING1("%s: Error, device  not opened.", __FUNCTION__);
1304        return BT_STATUS_FAIL;
1305    }
1306}
1307
1308/*******************************************************************************
1309**
1310** Function         virtual_unplug
1311**
1312** Description      Virtual UnPlug (VUP) the specified HID device.
1313**
1314** Returns         bt_status_t
1315**
1316*******************************************************************************/
1317static bt_status_t virtual_unplug (bt_bdaddr_t *bd_addr)
1318{
1319    CHECK_BTHH_INIT();
1320    btif_hh_device_t *p_dev;
1321    char bd_str[18];
1322    sprintf(bd_str, "%02X:%02X:%02X:%02X:%02X:%02X",
1323            bd_addr->address[0],  bd_addr->address[1],  bd_addr->address[2],  bd_addr->address[3],
1324            bd_addr->address[4], bd_addr->address[5]);
1325    if (btif_hh_cb.status == BTIF_HH_DISABLED)
1326    {
1327        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1328        return BT_STATUS_FAIL;
1329    }
1330    p_dev = btif_hh_find_dev_by_bda(bd_addr);
1331    if (!p_dev)
1332    {
1333        BTIF_TRACE_ERROR2("%s: Error, device %s not opened.", __FUNCTION__, bd_str);
1334        return BT_STATUS_FAIL;
1335    }
1336    btif_transfer_context(btif_hh_handle_evt, BTIF_HH_VUP_REQ_EVT,
1337                                 (char*)bd_addr, sizeof(bt_bdaddr_t), NULL);
1338    return BT_STATUS_SUCCESS;
1339}
1340
1341
1342/*******************************************************************************
1343**
1344** Function         set_info
1345**
1346** Description      Set the HID device descriptor for the specified HID device.
1347**
1348** Returns         bt_status_t
1349**
1350*******************************************************************************/
1351static bt_status_t set_info (bt_bdaddr_t *bd_addr, bthh_hid_info_t hid_info )
1352{
1353    CHECK_BTHH_INIT();
1354    tBTA_HH_DEV_DSCP_INFO dscp_info;
1355    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1356
1357    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1358         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1359    BTIF_TRACE_DEBUG6("%s: sub_class = 0x%02x, app_id = %d, vendor_id = 0x%04x, "
1360         "product_id = 0x%04x, version= 0x%04x",
1361         __FUNCTION__, hid_info.sub_class,
1362         hid_info.app_id, hid_info.vendor_id, hid_info.product_id,
1363         hid_info.version);
1364
1365    if (btif_hh_cb.status == BTIF_HH_DISABLED)
1366    {
1367        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1368        return BT_STATUS_FAIL;
1369    }
1370
1371    dscp_info.vendor_id  = hid_info.vendor_id;
1372    dscp_info.product_id = hid_info.product_id;
1373    dscp_info.version    = hid_info.version;
1374    dscp_info.ctry_code  = hid_info.ctry_code;
1375
1376    dscp_info.descriptor.dl_len = hid_info.dl_len;
1377    dscp_info.descriptor.dsc_list = (UINT8 *) GKI_getbuf(dscp_info.descriptor.dl_len);
1378    if (dscp_info.descriptor.dsc_list == NULL)
1379    {
1380        ALOGE("%s: Failed to allocate DSCP for CB", __FUNCTION__);
1381        return BT_STATUS_FAIL;
1382    }
1383    memcpy(dscp_info.descriptor.dsc_list, &(hid_info.dsc_list), hid_info.dl_len);
1384
1385    if (btif_hh_add_added_dev(*bd_addr, hid_info.attr_mask))
1386    {
1387        BTA_HhAddDev(*bda, hid_info.attr_mask, hid_info.sub_class,
1388                     hid_info.app_id, dscp_info);
1389    }
1390
1391    GKI_freebuf(dscp_info.descriptor.dsc_list);
1392
1393    return BT_STATUS_SUCCESS;
1394}
1395/*******************************************************************************
1396**
1397** Function         get_idle_time
1398**
1399** Description      Get the HID idle time
1400**
1401** Returns         bt_status_t
1402**
1403*******************************************************************************/
1404static bt_status_t get_idle_time(bt_bdaddr_t *bd_addr)
1405{
1406    CHECK_BTHH_INIT();
1407    btif_hh_device_t *p_dev;
1408    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1409
1410    BTIF_TRACE_DEBUG6(" addr = %02X:%02X:%02X:%02X:%02X:%02X",
1411         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1412
1413    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1414        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1415        return BT_STATUS_FAIL;
1416    }
1417
1418    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1419    if (p_dev != NULL) {
1420        //BTA_HhGetIdle(p_dev->dev_handle);
1421    }
1422    else {
1423        return BT_STATUS_FAIL;
1424    }
1425    return BT_STATUS_SUCCESS;
1426}
1427
1428/*******************************************************************************
1429**
1430** Function         set_idle_time
1431**
1432** Description      Set the HID idle time
1433**
1434** Returns         bt_status_t
1435**
1436*******************************************************************************/
1437static bt_status_t set_idle_time (bt_bdaddr_t *bd_addr, uint8_t idle_time)
1438{
1439    UNUSED(idle_time);
1440
1441    CHECK_BTHH_INIT();
1442    btif_hh_device_t *p_dev;
1443    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1444
1445    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1446         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1447
1448    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1449        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1450        return BT_STATUS_FAIL;
1451    }
1452
1453    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1454    if (p_dev == NULL) {
1455        BTIF_TRACE_WARNING6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1456             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1457        return BT_STATUS_FAIL;
1458    }
1459    else {
1460        //BTA_HhSetIdle(p_dev->dev_handle, idle_time);
1461    }
1462    return BT_STATUS_SUCCESS;
1463}
1464
1465/*******************************************************************************
1466**
1467** Function         get_protocol
1468**
1469** Description      Get the HID proto mode.
1470**
1471** Returns         bt_status_t
1472**
1473*******************************************************************************/
1474static bt_status_t get_protocol (bt_bdaddr_t *bd_addr, bthh_protocol_mode_t protocolMode)
1475{
1476    CHECK_BTHH_INIT();
1477    btif_hh_device_t *p_dev;
1478    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1479    UNUSED(protocolMode);
1480
1481    BTIF_TRACE_DEBUG6(" addr = %02X:%02X:%02X:%02X:%02X:%02X",
1482         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1483
1484    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1485        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1486        return BT_STATUS_FAIL;
1487    }
1488
1489    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1490    if (p_dev != NULL) {
1491
1492        BTA_HhGetProtoMode(p_dev->dev_handle);
1493    }
1494    else {
1495        return BT_STATUS_FAIL;
1496    }
1497    return BT_STATUS_SUCCESS;
1498}
1499
1500/*******************************************************************************
1501**
1502** Function         set_protocol
1503**
1504** Description      Set the HID proto mode.
1505**
1506** Returns         bt_status_t
1507**
1508*******************************************************************************/
1509static bt_status_t set_protocol (bt_bdaddr_t *bd_addr, bthh_protocol_mode_t protocolMode)
1510{
1511    CHECK_BTHH_INIT();
1512    btif_hh_device_t *p_dev;
1513    UINT8 proto_mode = protocolMode;
1514    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1515
1516    BTIF_TRACE_DEBUG2("%s:proto_mode = %d", __FUNCTION__,protocolMode);
1517
1518    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1519         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1520
1521    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1522        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1523        return BT_STATUS_FAIL;
1524    }
1525
1526    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1527    if (p_dev == NULL) {
1528        BTIF_TRACE_WARNING6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1529             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1530        return BT_STATUS_FAIL;
1531    }
1532    else if (protocolMode != BTA_HH_PROTO_RPT_MODE && protocolMode != BTA_HH_PROTO_BOOT_MODE) {
1533        BTIF_TRACE_WARNING2("s: Error, device proto_mode = %d.", __FUNCTION__, proto_mode);
1534        return BT_STATUS_FAIL;
1535    }
1536    else {
1537        BTA_HhSetProtoMode(p_dev->dev_handle, protocolMode);
1538    }
1539
1540
1541    return BT_STATUS_SUCCESS;
1542}
1543
1544/*******************************************************************************
1545**
1546** Function         get_report
1547**
1548** Description      Send a GET_REPORT to HID device.
1549**
1550** Returns         bt_status_t
1551**
1552*******************************************************************************/
1553static bt_status_t get_report (bt_bdaddr_t *bd_addr, bthh_report_type_t reportType, uint8_t reportId, int bufferSize)
1554{
1555    CHECK_BTHH_INIT();
1556    btif_hh_device_t *p_dev;
1557    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1558
1559    BTIF_TRACE_DEBUG4("%s:proto_mode = %dr_type = %d, rpt_id = %d, buf_size = %d", __FUNCTION__,
1560          reportType, reportId, bufferSize);
1561
1562    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1563         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1564
1565    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1566        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1567        return BT_STATUS_FAIL;
1568    }
1569
1570
1571    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1572    if (p_dev == NULL) {
1573        BTIF_TRACE_ERROR6("%s: Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1574             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1575        return BT_STATUS_FAIL;
1576    }
1577    else if ( ((int) reportType) <= BTA_HH_RPTT_RESRV || ((int) reportType) > BTA_HH_RPTT_FEATURE) {
1578        BTIF_TRACE_ERROR6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1579             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1580        return BT_STATUS_FAIL;
1581    }
1582    else {
1583        BTA_HhGetReport(p_dev->dev_handle, reportType,
1584                        reportId, bufferSize);
1585    }
1586
1587    return BT_STATUS_SUCCESS;
1588}
1589
1590/*******************************************************************************
1591**
1592** Function         set_report
1593**
1594** Description      Send a SET_REPORT to HID device.
1595**
1596** Returns         bt_status_t
1597**
1598*******************************************************************************/
1599static bt_status_t set_report (bt_bdaddr_t *bd_addr, bthh_report_type_t reportType, char* report)
1600{
1601    CHECK_BTHH_INIT();
1602    btif_hh_device_t *p_dev;
1603    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1604
1605    BTIF_TRACE_DEBUG2("%s:reportType = %d", __FUNCTION__,reportType);
1606
1607    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1608         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1609
1610
1611    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1612        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1613        return BT_STATUS_FAIL;
1614    }
1615
1616    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1617    if (p_dev == NULL) {
1618        BTIF_TRACE_ERROR6("%s: Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1619             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1620        return BT_STATUS_FAIL;
1621    }
1622    else if ( ( (int) reportType) <= BTA_HH_RPTT_RESRV || ( (int) reportType) > BTA_HH_RPTT_FEATURE) {
1623        BTIF_TRACE_ERROR6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1624             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1625        return BT_STATUS_FAIL;
1626    }
1627    else {
1628        int    hex_bytes_filled;
1629        UINT8  hexbuf[200];
1630        UINT16 len = (strlen(report) + 1) / 2;
1631
1632        if (p_dev->p_buf != NULL) {
1633            GKI_freebuf(p_dev->p_buf);
1634        }
1635        p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET + sizeof(BT_HDR)));
1636        if (p_dev->p_buf == NULL) {
1637            BTIF_TRACE_ERROR2("%s: Error, failed to allocate RPT buffer, len = %d", __FUNCTION__, len);
1638            return BT_STATUS_FAIL;
1639        }
1640
1641        p_dev->p_buf->len = len;
1642        p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
1643
1644        /* Build a SetReport data buffer */
1645        memset(hexbuf, 0, 200);
1646        //TODO
1647        hex_bytes_filled = ascii_2_hex(report, len, hexbuf);
1648        ALOGI("Hex bytes filled, hex value: %d", hex_bytes_filled);
1649        if (hex_bytes_filled) {
1650            UINT8* pbuf_data;
1651            pbuf_data = (UINT8*) (p_dev->p_buf + 1) + p_dev->p_buf->offset;
1652            memcpy(pbuf_data, hexbuf, hex_bytes_filled);
1653            BTA_HhSetReport(p_dev->dev_handle, reportType, p_dev->p_buf);
1654        }
1655        return BT_STATUS_SUCCESS;
1656    }
1657
1658
1659}
1660
1661/*******************************************************************************
1662**
1663** Function         send_data
1664**
1665** Description      Send a SEND_DATA to HID device.
1666**
1667** Returns         bt_status_t
1668**
1669*******************************************************************************/
1670static bt_status_t send_data (bt_bdaddr_t *bd_addr, char* data)
1671{
1672    CHECK_BTHH_INIT();
1673    btif_hh_device_t *p_dev;
1674    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1675
1676    BTIF_TRACE_DEBUG1("%s", __FUNCTION__);
1677
1678    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1679         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1680
1681    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1682        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1683        return BT_STATUS_FAIL;
1684    }
1685
1686    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1687    if (p_dev == NULL) {
1688        BTIF_TRACE_ERROR6("%s: Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1689             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1690        return BT_STATUS_FAIL;
1691    }
1692
1693    else {
1694        int    hex_bytes_filled;
1695        UINT8  hexbuf[200];
1696        UINT16 len = (strlen(data) + 1) / 2;
1697
1698        if (p_dev->p_buf != NULL) {
1699            GKI_freebuf(p_dev->p_buf);
1700        }
1701        p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET + sizeof(BT_HDR)));
1702        if (p_dev->p_buf == NULL) {
1703            BTIF_TRACE_ERROR2("%s: Error, failed to allocate RPT buffer, len = %d", __FUNCTION__, len);
1704            return BT_STATUS_FAIL;
1705        }
1706
1707        p_dev->p_buf->len = len;
1708        p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
1709
1710        /* Build a SetReport data buffer */
1711        memset(hexbuf, 0, 200);
1712        hex_bytes_filled = ascii_2_hex(data, len, hexbuf);
1713        BTIF_TRACE_ERROR2("Hex bytes filled, hex value: %d, %d", hex_bytes_filled, len);
1714
1715        if (hex_bytes_filled) {
1716            UINT8* pbuf_data;
1717            pbuf_data = (UINT8*) (p_dev->p_buf + 1) + p_dev->p_buf->offset;
1718            memcpy(pbuf_data, hexbuf, hex_bytes_filled);
1719            p_dev->p_buf->layer_specific = BTA_HH_RPTT_OUTPUT;
1720            BTA_HhSendData(p_dev->dev_handle, *bda, p_dev->p_buf);
1721            return BT_STATUS_SUCCESS;
1722        }
1723
1724    }
1725    return BT_STATUS_FAIL;
1726}
1727
1728
1729/*******************************************************************************
1730**
1731** Function         cleanup
1732**
1733** Description      Closes the HH interface
1734**
1735** Returns          bt_status_t
1736**
1737*******************************************************************************/
1738static void  cleanup( void )
1739{
1740    BTIF_TRACE_EVENT1("%s", __FUNCTION__);
1741    btif_hh_device_t *p_dev;
1742    int i;
1743    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1744        BTIF_TRACE_WARNING2("%s: HH disabling or disabled already, status = %d", __FUNCTION__, btif_hh_cb.status);
1745        return;
1746    }
1747    btif_hh_cb.status = BTIF_HH_DISABLING;
1748    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
1749         p_dev = &btif_hh_cb.devices[i];
1750         if (p_dev->dev_status != BTHH_CONN_STATE_UNKNOWN && p_dev->fd >= 0) {
1751             BTIF_TRACE_DEBUG2("%s: Closing uhid fd = %d", __FUNCTION__, p_dev->fd);
1752             bta_hh_co_destroy(p_dev->fd);
1753             p_dev->fd = -1;
1754             p_dev->hh_keep_polling = 0;
1755             p_dev->hh_poll_thread_id = -1;
1756         }
1757     }
1758
1759    if (bt_hh_callbacks)
1760    {
1761        btif_disable_service(BTA_HID_SERVICE_ID);
1762        bt_hh_callbacks = NULL;
1763    }
1764
1765}
1766
1767static const bthh_interface_t bthhInterface = {
1768    sizeof(bthhInterface),
1769    init,
1770    connect,
1771    disconnect,
1772    virtual_unplug,
1773    set_info,
1774    get_protocol,
1775    set_protocol,
1776//    get_idle_time,
1777//    set_idle_time,
1778    get_report,
1779    set_report,
1780    send_data,
1781    cleanup,
1782};
1783
1784/*******************************************************************************
1785**
1786** Function         btif_hh_execute_service
1787**
1788** Description      Initializes/Shuts down the service
1789**
1790** Returns          BT_STATUS_SUCCESS on success, BT_STATUS_FAIL otherwise
1791**
1792*******************************************************************************/
1793bt_status_t btif_hh_execute_service(BOOLEAN b_enable)
1794{
1795     if (b_enable)
1796     {
1797          /* Enable and register with BTA-HH */
1798          BTA_HhEnable(BTA_SEC_NONE, bte_hh_evt);
1799     }
1800     else {
1801         /* Disable HH */
1802         BTA_HhDisable();
1803     }
1804     return BT_STATUS_SUCCESS;
1805}
1806
1807/*******************************************************************************
1808**
1809** Function         btif_hh_get_interface
1810**
1811** Description      Get the hh callback interface
1812**
1813** Returns          bthh_interface_t
1814**
1815*******************************************************************************/
1816const bthh_interface_t *btif_hh_get_interface()
1817{
1818    BTIF_TRACE_EVENT1("%s", __FUNCTION__);
1819    return &bthhInterface;
1820}
1821