btif_hh.c revision 0b93f5ce4df14aa3d3100a8f9609a1c7ea4cdbd9
1/******************************************************************************
2 *
3 *  Copyright (C) 2009-2012 Broadcom Corporation
4 *
5 *  Licensed under the Apache License, Version 2.0 (the "License");
6 *  you may not use this file except in compliance with the License.
7 *  You may obtain a copy of the License at:
8 *
9 *  http://www.apache.org/licenses/LICENSE-2.0
10 *
11 *  Unless required by applicable law or agreed to in writing, software
12 *  distributed under the License is distributed on an "AS IS" BASIS,
13 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 *  See the License for the specific language governing permissions and
15 *  limitations under the License.
16 *
17 ******************************************************************************/
18
19/************************************************************************************
20 *
21 *  Filename:      btif_hh.c
22 *
23 *  Description:   HID Host Profile Bluetooth Interface
24 *
25 *
26 ***********************************************************************************/
27#include <hardware/bluetooth.h>
28#include <hardware/bt_hh.h>
29#include <stdio.h>
30#include <stdlib.h>
31#include <errno.h>
32#include <string.h>
33
34#define LOG_TAG "BTIF_HH"
35
36#include "bta_api.h"
37#include "bta_hh_api.h"
38#include "bd.h"
39#include "btif_storage.h"
40
41#include "btif_common.h"
42#include "btif_util.h"
43#include "btif_hh.h"
44#include "gki.h"
45#include "l2c_api.h"
46
47
48#define BTIF_HH_APP_ID_MI       0x01
49#define BTIF_HH_APP_ID_KB       0x02
50
51#define COD_HID_KEYBOARD        0x0540
52#define COD_HID_POINTING        0x0580
53#define COD_HID_COMBO           0x05C0
54#define COD_HID_MAJOR           0x0500
55
56#define KEYSTATE_FILEPATH "/data/misc/bluedroid/bt_hh_ks" //keep this in sync with HID host jni
57
58#define HID_REPORT_CAPSLOCK   0x39
59#define HID_REPORT_NUMLOCK    0x53
60#define HID_REPORT_SCROLLLOCK 0x47
61
62//For Apple Magic Mouse
63#define MAGICMOUSE_VENDOR_ID 0x05ac
64#define MAGICMOUSE_PRODUCT_ID 0x030d
65
66#define LOGITECH_KB_MX5500_VENDOR_ID  0x046D
67#define LOGITECH_KB_MX5500_PRODUCT_ID 0xB30B
68
69extern const int BT_UID;
70extern const int BT_GID;
71static int btif_hh_prev_keyevents=0; //The previous key events
72static int btif_hh_keylockstates=0; //The current key state of each key
73
74#define BTIF_HH_ID_1        0
75#define BTIF_HH_DEV_DISCONNECTED 3
76
77#define BTIF_TIMEOUT_VUP_SECS   3
78
79
80#ifndef BTUI_HH_SECURITY
81#define BTUI_HH_SECURITY (BTA_SEC_AUTHENTICATE | BTA_SEC_ENCRYPT)
82#endif
83
84#ifndef BTUI_HH_MOUSE_SECURITY
85#define BTUI_HH_MOUSE_SECURITY (BTA_SEC_NONE)
86#endif
87
88/* HH request events */
89typedef enum
90{
91    BTIF_HH_CONNECT_REQ_EVT = 0,
92    BTIF_HH_DISCONNECT_REQ_EVT,
93    BTIF_HH_VUP_REQ_EVT
94} btif_hh_req_evt_t;
95
96
97/************************************************************************************
98**  Constants & Macros
99************************************************************************************/
100#define BTIF_HH_SERVICES    (BTA_HID_SERVICE_MASK)
101
102
103
104/************************************************************************************
105**  Local type definitions
106************************************************************************************/
107
108typedef struct hid_kb_list
109{
110    UINT16 product_id;
111    UINT16 version_id;
112    char*  kb_name;
113} tHID_KB_LIST;
114
115/************************************************************************************
116**  Static variables
117************************************************************************************/
118btif_hh_cb_t btif_hh_cb;
119
120static bthh_callbacks_t *bt_hh_callbacks = NULL;
121
122/* List of HID keyboards for which the NUMLOCK state needs to be
123 * turned ON by default. Add devices to this list to apply the
124 * NUMLOCK state toggle on fpr first connect.*/
125static tHID_KB_LIST hid_kb_numlock_on_list[] =
126{
127    {LOGITECH_KB_MX5500_PRODUCT_ID,
128    LOGITECH_KB_MX5500_VENDOR_ID,
129    "Logitech MX5500 Keyboard"}
130};
131
132
133#define CHECK_BTHH_INIT() if (bt_hh_callbacks == NULL)\
134    {\
135        BTIF_TRACE_WARNING1("BTHH: %s: BTHH not initialized", __FUNCTION__);\
136        return BT_STATUS_NOT_READY;\
137    }\
138    else\
139    {\
140        BTIF_TRACE_EVENT1("BTHH: %s", __FUNCTION__);\
141    }
142
143
144
145/************************************************************************************
146**  Static functions
147************************************************************************************/
148
149/************************************************************************************
150**  Externs
151************************************************************************************/
152extern void bta_hh_co_destroy(int fd);
153extern void bta_hh_co_write(int fd, UINT8* rpt, UINT16 len);
154extern bt_status_t btif_dm_remove_bond(const bt_bdaddr_t *bd_addr);
155extern void bta_hh_co_send_hid_info(btif_hh_device_t *p_dev, char *dev_name, UINT16 vendor_id,
156                                    UINT16 product_id, UINT16 version, UINT8 ctry_code,
157                                    int dscp_len, UINT8 *p_dscp);
158extern BOOLEAN check_cod(const bt_bdaddr_t *remote_bdaddr, uint32_t cod);
159extern void btif_dm_cb_remove_bond(bt_bdaddr_t *bd_addr);
160extern BOOLEAN check_cod_hid(const bt_bdaddr_t *remote_bdaddr, uint32_t cod);
161extern int  scru_ascii_2_hex(char *p_ascii, int len, UINT8 *p_hex);
162extern void btif_dm_hh_open_failed(bt_bdaddr_t *bdaddr);
163
164/*****************************************************************************
165**  Local Function prototypes
166*****************************************************************************/
167static void set_keylockstate(int keymask, BOOLEAN isSet);
168static void toggle_os_keylockstates(int fd, int changedkeystates);
169static void sync_lockstate_on_connect(btif_hh_device_t *p_dev);
170//static void hh_update_keyboard_lockstates(btif_hh_device_t *p_dev);
171void btif_hh_tmr_hdlr(TIMER_LIST_ENT *tle);
172
173
174/************************************************************************************
175**  Functions
176************************************************************************************/
177
178static int get_keylockstates()
179{
180    return btif_hh_keylockstates;
181}
182
183static void set_keylockstate(int keymask, BOOLEAN isSet)
184{
185    if(isSet)
186        btif_hh_keylockstates |= keymask;
187}
188
189/*******************************************************************************
190**
191** Function         toggle_os_keylockstates
192**
193** Description      Function to toggle the keyboard lock states managed by the linux.
194**                  This function is used in by two call paths
195**                  (1) if the lock state change occurred from an onscreen keyboard,
196**                  this function is called to update the lock state maintained
197                    for the HID keyboard(s)
198**                  (2) if a HID keyboard is disconnected and reconnected,
199**                  this function is called to update the lock state maintained
200                    for the HID keyboard(s)
201** Returns          void
202*******************************************************************************/
203
204static void toggle_os_keylockstates(int fd, int changedlockstates)
205{
206    BTIF_TRACE_EVENT3("%s: fd = %d, changedlockstates = 0x%x",
207        __FUNCTION__, fd, changedlockstates);
208    UINT8 hidreport[9];
209    int reportIndex;
210    memset(hidreport,0,9);
211    hidreport[0]=1;
212    reportIndex=4;
213
214    if (changedlockstates & BTIF_HH_KEYSTATE_MASK_CAPSLOCK) {
215        BTIF_TRACE_DEBUG1("%s Setting CAPSLOCK", __FUNCTION__);
216        hidreport[reportIndex++] = (UINT8)HID_REPORT_CAPSLOCK;
217    }
218
219    if (changedlockstates & BTIF_HH_KEYSTATE_MASK_NUMLOCK)  {
220        BTIF_TRACE_DEBUG1("%s Setting NUMLOCK", __FUNCTION__);
221        hidreport[reportIndex++] = (UINT8)HID_REPORT_NUMLOCK;
222    }
223
224    if (changedlockstates & BTIF_HH_KEYSTATE_MASK_SCROLLLOCK) {
225        BTIF_TRACE_DEBUG1("%s Setting SCROLLLOCK", __FUNCTION__);
226        hidreport[reportIndex++] = (UINT8) HID_REPORT_SCROLLLOCK;
227    }
228
229     BTIF_TRACE_DEBUG4("Writing hidreport #1 to os: "\
230        "%s:  %x %x %x", __FUNCTION__,
231         hidreport[0], hidreport[1], hidreport[2]);
232    BTIF_TRACE_DEBUG4("%s:  %x %x %x", __FUNCTION__,
233         hidreport[3], hidreport[4], hidreport[5]);
234    BTIF_TRACE_DEBUG4("%s:  %x %x %x", __FUNCTION__,
235         hidreport[6], hidreport[7], hidreport[8]);
236    bta_hh_co_write(fd , hidreport, sizeof(hidreport));
237    usleep(200000);
238    memset(hidreport,0,9);
239    hidreport[0]=1;
240    BTIF_TRACE_DEBUG4("Writing hidreport #2 to os: "\
241       "%s:  %x %x %x", __FUNCTION__,
242         hidreport[0], hidreport[1], hidreport[2]);
243    BTIF_TRACE_DEBUG4("%s:  %x %x %x", __FUNCTION__,
244         hidreport[3], hidreport[4], hidreport[5]);
245    BTIF_TRACE_DEBUG4("%s:  %x %x %x ", __FUNCTION__,
246         hidreport[6], hidreport[7], hidreport[8]);
247    bta_hh_co_write(fd , hidreport, sizeof(hidreport));
248}
249
250/*******************************************************************************
251**
252** Function         update_keyboard_lockstates
253**
254** Description      Sends a report to the keyboard to set the lock states of keys
255**
256*******************************************************************************/
257static void update_keyboard_lockstates(btif_hh_device_t *p_dev)
258{
259    UINT8 len = 2;  /* reportid + 1 byte report*/
260    BD_ADDR* bda;
261
262    /* Set report for other keyboards */
263    BTIF_TRACE_EVENT3("%s: setting report on dev_handle %d to 0x%x",
264         __FUNCTION__, p_dev->dev_handle, btif_hh_keylockstates);
265
266    if (p_dev->p_buf != NULL) {
267        GKI_freebuf(p_dev->p_buf);
268    }
269    /* Get SetReport buffer */
270    p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET +
271        sizeof(BT_HDR)));
272    if (p_dev->p_buf != NULL) {
273        p_dev->p_buf->len = len;
274        p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
275        p_dev->p_buf->layer_specific = BTA_HH_RPTT_OUTPUT;
276
277        /* LED status updated by data event */
278        UINT8 *pbuf_data  = (UINT8 *)(p_dev->p_buf + 1)
279            + p_dev->p_buf->offset;
280        pbuf_data[0]=0x01; /*report id */
281        pbuf_data[1]=btif_hh_keylockstates; /*keystate*/
282        bda = (BD_ADDR*) (&p_dev->bd_addr);
283        BTA_HhSendData(p_dev->dev_handle, *bda,
284            p_dev->p_buf);
285    }
286}
287
288/*******************************************************************************
289**
290** Function         sync_lockstate_on_connect
291**
292** Description      Function to update the keyboard lock states managed by the OS
293**                  when a HID keyboard is connected or disconnected and reconnected
294** Returns          void
295*******************************************************************************/
296static void sync_lockstate_on_connect(btif_hh_device_t *p_dev)
297{
298    int keylockstates;
299
300    BTIF_TRACE_EVENT1("%s: Syncing keyboard lock states after "\
301        "reconnect...",__FUNCTION__);
302    /*If the device is connected, update keyboard state */
303    update_keyboard_lockstates(p_dev);
304
305    /*Check if the lockstate of caps,scroll,num is set.
306     If so, send a report to the kernel
307    so the lockstate is in sync */
308    keylockstates = get_keylockstates();
309    if (keylockstates)
310    {
311        BTIF_TRACE_DEBUG2("%s: Sending hid report to kernel "\
312            "indicating lock key state 0x%x",__FUNCTION__,
313            keylockstates);
314        usleep(200000);
315        toggle_os_keylockstates(p_dev->fd, keylockstates);
316    }
317    else
318    {
319        BTIF_TRACE_DEBUG2("%s: NOT sending hid report to kernel "\
320            "indicating lock key state 0x%x",__FUNCTION__,
321            keylockstates);
322    }
323}
324
325/*******************************************************************************
326**
327** Function         btif_hh_find_dev_by_handle
328**
329** Description      Return the device pointer of the specified device handle
330**
331** Returns          Device entry pointer in the device table
332*******************************************************************************/
333static btif_hh_device_t *btif_hh_find_dev_by_handle(UINT8 handle)
334{
335    UINT32 i;
336    // LOGV("%s: handle = %d", __FUNCTION__, handle);
337    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
338        if (btif_hh_cb.devices[i].dev_status != BTHH_CONN_STATE_UNKNOWN &&
339            btif_hh_cb.devices[i].dev_handle == handle)
340        {
341            return &btif_hh_cb.devices[i];
342        }
343    }
344    return NULL;
345}
346
347
348/*******************************************************************************
349**
350** Function         btif_hh_find_connected_dev_by_handle
351**
352** Description      Return the connected device pointer of the specified device handle
353**
354** Returns          Device entry pointer in the device table
355*******************************************************************************/
356btif_hh_device_t *btif_hh_find_connected_dev_by_handle(UINT8 handle)
357{
358    UINT32 i;
359    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
360        if (btif_hh_cb.devices[i].dev_status == BTHH_CONN_STATE_CONNECTED &&
361            btif_hh_cb.devices[i].dev_handle == handle)
362        {
363            return &btif_hh_cb.devices[i];
364        }
365    }
366    return NULL;
367}
368
369/*******************************************************************************
370**
371** Function         btif_hh_find_dev_by_bda
372**
373** Description      Return the device pointer of the specified bt_bdaddr_t.
374**
375** Returns          Device entry pointer in the device table
376*******************************************************************************/
377static btif_hh_device_t *btif_hh_find_dev_by_bda(bt_bdaddr_t *bd_addr)
378{
379    UINT32 i;
380    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
381        if (btif_hh_cb.devices[i].dev_status != BTHH_CONN_STATE_UNKNOWN &&
382            memcmp(&(btif_hh_cb.devices[i].bd_addr), bd_addr, BD_ADDR_LEN) == 0)
383        {
384            return &btif_hh_cb.devices[i];
385        }
386    }
387    return NULL;
388}
389
390/*******************************************************************************
391**
392** Function         btif_hh_find_connected_dev_by_bda
393**
394** Description      Return the connected device pointer of the specified bt_bdaddr_t.
395**
396** Returns          Device entry pointer in the device table
397*******************************************************************************/
398static btif_hh_device_t *btif_hh_find_connected_dev_by_bda(bt_bdaddr_t *bd_addr)
399{
400    UINT32 i;
401    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
402        if (btif_hh_cb.devices[i].dev_status == BTHH_CONN_STATE_CONNECTED &&
403            memcmp(&(btif_hh_cb.devices[i].bd_addr), bd_addr, BD_ADDR_LEN) == 0)
404        {
405            return &btif_hh_cb.devices[i];
406        }
407    }
408    return NULL;
409}
410
411/*******************************************************************************
412**
413** Function      btif_hh_stop_vup_timer
414**
415** Description  stop vitual unplug timer
416**
417** Returns      void
418*******************************************************************************/
419void btif_hh_stop_vup_timer(bt_bdaddr_t *bd_addr)
420{
421    btif_hh_device_t *p_dev  = btif_hh_find_connected_dev_by_bda(bd_addr);
422    if(p_dev != NULL)
423    {
424        if (p_dev->vup_timer_active)
425        {
426            BTIF_TRACE_DEBUG0("stop VUP timer ");
427            btu_stop_timer(&p_dev->vup_timer);
428        }
429        p_dev->vup_timer_active = FALSE;
430    }
431}
432/*******************************************************************************
433**
434** Function      btif_hh_start_vup_timer
435**
436** Description  start virtual unplug timer
437**
438** Returns      void
439*******************************************************************************/
440void btif_hh_start_vup_timer(bt_bdaddr_t *bd_addr)
441{
442    btif_hh_device_t *p_dev  = btif_hh_find_connected_dev_by_bda(bd_addr);
443
444    if (p_dev->vup_timer_active == FALSE)
445    {
446        BTIF_TRACE_DEBUG0("Start VUP timer ");
447        memset(&p_dev->vup_timer, 0, sizeof(TIMER_LIST_ENT));
448        p_dev->vup_timer.param = (UINT32)btif_hh_tmr_hdlr;
449        btu_start_timer(&p_dev->vup_timer, BTU_TTYPE_USER_FUNC,
450                        BTIF_TIMEOUT_VUP_SECS);
451    }
452    else
453    {
454        BTIF_TRACE_DEBUG0("Restart VUP timer ");
455        btu_stop_timer(&p_dev->vup_timer);
456        btu_start_timer(&p_dev->vup_timer, BTU_TTYPE_USER_FUNC,
457                        BTIF_TIMEOUT_VUP_SECS);
458    }
459        p_dev->vup_timer_active = TRUE;
460
461}
462
463/*******************************************************************************
464**
465** Function         btif_hh_add_added_dev
466**
467** Description      Add a new device to the added device list.
468**
469** Returns          TRUE if add successfully, otherwise FALSE.
470*******************************************************************************/
471BOOLEAN btif_hh_add_added_dev(bt_bdaddr_t bda, tBTA_HH_ATTR_MASK attr_mask)
472{
473    int i;
474    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
475        if (memcmp(&(btif_hh_cb.added_devices[i].bd_addr), &bda, BD_ADDR_LEN) == 0) {
476            BTIF_TRACE_WARNING6(" Device %02X:%02X:%02X:%02X:%02X:%02X already added",
477                  bda.address[0], bda.address[1], bda.address[2], bda.address[3], bda.address[4], bda.address[5]);
478            return FALSE;
479        }
480    }
481    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
482        if (btif_hh_cb.added_devices[i].bd_addr.address[0] == 0 &&
483            btif_hh_cb.added_devices[i].bd_addr.address[1] == 0 &&
484            btif_hh_cb.added_devices[i].bd_addr.address[2] == 0 &&
485            btif_hh_cb.added_devices[i].bd_addr.address[3] == 0 &&
486            btif_hh_cb.added_devices[i].bd_addr.address[4] == 0 &&
487            btif_hh_cb.added_devices[i].bd_addr.address[5] == 0)
488        {
489            BTIF_TRACE_WARNING6(" Added device %02X:%02X:%02X:%02X:%02X:%02X",
490                  bda.address[0], bda.address[1], bda.address[2], bda.address[3], bda.address[4], bda.address[5]);
491            memcpy(&(btif_hh_cb.added_devices[i].bd_addr), &bda, BD_ADDR_LEN);
492            btif_hh_cb.added_devices[i].dev_handle = BTA_HH_INVALID_HANDLE;
493            btif_hh_cb.added_devices[i].attr_mask  = attr_mask;
494            return TRUE;
495        }
496    }
497
498    BTIF_TRACE_WARNING1("%s: Error, out of space to add device",__FUNCTION__);
499    return FALSE;
500}
501
502/*******************************************************************************
503 **
504 ** Function         btif_hh_remove_device
505 **
506 ** Description      Remove an added device from the stack.
507 **
508 ** Returns          void
509 *******************************************************************************/
510void btif_hh_remove_device(bt_bdaddr_t bd_addr)
511{
512    int                    i;
513    btif_hh_device_t       *p_dev;
514    btif_hh_added_device_t *p_added_dev;
515
516    ALOGI("%s: bda = %02x:%02x:%02x:%02x:%02x:%02x", __FUNCTION__,
517         bd_addr.address[0], bd_addr.address[1], bd_addr.address[2], bd_addr.address[3], bd_addr.address[4], bd_addr.address[5]);
518
519    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
520        p_added_dev = &btif_hh_cb.added_devices[i];
521        if (memcmp(&(p_added_dev->bd_addr),&bd_addr, 6) == 0) {
522            BTA_HhRemoveDev(p_added_dev->dev_handle);
523            btif_storage_remove_hid_info(&(p_added_dev->bd_addr));
524            memset(&(p_added_dev->bd_addr), 0, 6);
525            p_added_dev->dev_handle = BTA_HH_INVALID_HANDLE;
526            break;
527        }
528    }
529
530    p_dev = btif_hh_find_dev_by_bda(&bd_addr);
531    if (p_dev == NULL) {
532        BTIF_TRACE_WARNING6(" Oops, can't find device [%02x:%02x:%02x:%02x:%02x:%02x]",
533             bd_addr.address[0], bd_addr.address[1], bd_addr.address[2], bd_addr.address[3], bd_addr.address[4], bd_addr.address[5]);
534        return;
535    }
536
537    p_dev->dev_status = BTHH_CONN_STATE_UNKNOWN;
538    p_dev->dev_handle = BTA_HH_INVALID_HANDLE;
539    if (btif_hh_cb.device_num > 0) {
540        btif_hh_cb.device_num--;
541    }
542    else {
543        BTIF_TRACE_WARNING1("%s: device_num = 0", __FUNCTION__);
544    }
545    if (p_dev->p_buf != NULL) {
546        GKI_freebuf(p_dev->p_buf);
547        p_dev->p_buf = NULL;
548    }
549
550    p_dev->hh_keep_polling = 0;
551    p_dev->hh_poll_thread_id = -1;
552    BTIF_TRACE_DEBUG2("%s: uhid fd = %d", __FUNCTION__, p_dev->fd);
553    if (p_dev->fd >= 0) {
554        bta_hh_co_destroy(p_dev->fd);
555        p_dev->fd = -1;
556    }
557}
558
559
560BOOLEAN btif_hh_copy_hid_info(tBTA_HH_DEV_DSCP_INFO* dest , tBTA_HH_DEV_DSCP_INFO* src)
561{
562    dest->descriptor.dl_len = 0;
563    if (src->descriptor.dl_len >0)
564    {
565        dest->descriptor.dsc_list = (UINT8 *) GKI_getbuf(src->descriptor.dl_len);
566        if (dest->descriptor.dsc_list == NULL)
567        {
568            BTIF_TRACE_WARNING1("%s: Failed to allocate DSCP for CB", __FUNCTION__);
569            return FALSE;
570        }
571    }
572    memcpy(dest->descriptor.dsc_list, src->descriptor.dsc_list, src->descriptor.dl_len);
573    dest->descriptor.dl_len = src->descriptor.dl_len;
574    dest->vendor_id  = src->vendor_id;
575    dest->product_id = src->product_id;
576    dest->version    = src->version;
577    dest->ctry_code  = src->ctry_code;
578    return TRUE;
579}
580
581
582/*******************************************************************************
583**
584** Function         btif_hh_virtual_unplug
585**
586** Description      Virtual unplug initiated from the BTIF thread context
587**                  Special handling for HID mouse-
588**
589** Returns          void
590**
591*******************************************************************************/
592
593bt_status_t btif_hh_virtual_unplug(bt_bdaddr_t *bd_addr)
594{
595    BTIF_TRACE_DEBUG1("%s", __FUNCTION__);
596    btif_hh_device_t *p_dev;
597    char bd_str[18];
598    sprintf(bd_str, "%02X:%02X:%02X:%02X:%02X:%02X",
599            bd_addr->address[0],  bd_addr->address[1],  bd_addr->address[2],  bd_addr->address[3],
600            bd_addr->address[4], bd_addr->address[5]);
601    p_dev = btif_hh_find_dev_by_bda(bd_addr);
602    if ((p_dev != NULL) && (p_dev->dev_status == BTHH_CONN_STATE_CONNECTED)
603        && (p_dev->attr_mask & HID_VIRTUAL_CABLE))
604    {
605        BTIF_TRACE_DEBUG1("%s Sending BTA_HH_CTRL_VIRTUAL_CABLE_UNPLUG", __FUNCTION__);
606        /* start the timer */
607        btif_hh_start_vup_timer(bd_addr);
608        p_dev->local_vup = TRUE;
609        BTA_HhSendCtrl(p_dev->dev_handle, BTA_HH_CTRL_VIRTUAL_CABLE_UNPLUG);
610        return BT_STATUS_SUCCESS;
611    }
612    else
613    {
614        BTIF_TRACE_ERROR2("%s: Error, device %s not opened.", __FUNCTION__, bd_str);
615        return BT_STATUS_FAIL;
616    }
617}
618
619/*******************************************************************************
620**
621** Function         btif_hh_connect
622**
623** Description      connection initiated from the BTIF thread context
624**
625** Returns          int status
626**
627*******************************************************************************/
628
629bt_status_t btif_hh_connect(bt_bdaddr_t *bd_addr)
630{
631    btif_hh_device_t *dev;
632    btif_hh_added_device_t *added_dev = NULL;
633    char bda_str[20];
634    int i;
635    BD_ADDR *bda = (BD_ADDR*)bd_addr;
636    tBTA_HH_CONN conn;
637    CHECK_BTHH_INIT();
638    dev = btif_hh_find_dev_by_bda(bd_addr);
639    BTIF_TRACE_DEBUG0("Connect _hh");
640    sprintf(bda_str, "%02X:%02X:%02X:%02X:%02X:%02X",
641            (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
642    if (dev == NULL && btif_hh_cb.device_num >= BTIF_HH_MAX_HID) {
643        // No space for more HID device now.
644         BTIF_TRACE_WARNING2("%s: Error, exceeded the maximum supported HID device number %d",
645             __FUNCTION__, BTIF_HH_MAX_HID);
646        return BT_STATUS_FAIL;
647    }
648
649    for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
650        if (memcmp(&(btif_hh_cb.added_devices[i].bd_addr), bd_addr, BD_ADDR_LEN) == 0) {
651            added_dev = &btif_hh_cb.added_devices[i];
652             BTIF_TRACE_WARNING3("%s: Device %s already added, attr_mask = 0x%x",
653                 __FUNCTION__, bda_str, added_dev->attr_mask);
654        }
655    }
656
657    if (added_dev != NULL) {
658        if (added_dev->dev_handle == BTA_HH_INVALID_HANDLE) {
659            // No space for more HID device now.
660            BTIF_TRACE_ERROR2("%s: Error, device %s added but addition failed", __FUNCTION__, bda_str);
661            memset(&(added_dev->bd_addr), 0, 6);
662            added_dev->dev_handle = BTA_HH_INVALID_HANDLE;
663            return BT_STATUS_FAIL;
664        }
665    }
666
667    if (added_dev == NULL ||
668        (added_dev->attr_mask & HID_NORMALLY_CONNECTABLE) != 0 ||
669        (added_dev->attr_mask & HID_RECONN_INIT) == 0)
670    {
671        tBTA_SEC sec_mask = BTUI_HH_SECURITY;
672        btif_hh_cb.status = BTIF_HH_DEV_CONNECTING;
673        BD_ADDR *bda = (BD_ADDR*)bd_addr;
674        BTA_HhOpen(*bda, BTA_HH_PROTO_RPT_MODE, sec_mask);
675    }
676    else
677    {
678        // This device shall be connected from the host side.
679        BTIF_TRACE_ERROR2("%s: Error, device %s can only be reconnected from device side",
680             __FUNCTION__, bda_str);
681        return BT_STATUS_FAIL;
682    }
683
684    HAL_CBACK(bt_hh_callbacks, connection_state_cb, bd_addr, BTHH_CONN_STATE_CONNECTING);
685    return BT_STATUS_SUCCESS;
686}
687
688/*******************************************************************************
689**
690** Function         btif_hh_disconnect
691**
692** Description      disconnection initiated from the BTIF thread context
693**
694** Returns          void
695**
696*******************************************************************************/
697
698void btif_hh_disconnect(bt_bdaddr_t *bd_addr)
699{
700    BD_ADDR *bda = (BD_ADDR*)bd_addr;
701    btif_hh_device_t *p_dev;
702    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
703    if (p_dev != NULL)
704    {
705        BTA_HhClose(p_dev->dev_handle);
706    }
707    else
708        BTIF_TRACE_DEBUG1("%s-- Error: device not connected:",__FUNCTION__);
709}
710
711/*******************************************************************************
712**
713** Function         btif_btif_hh_setreport
714**
715** Description      setreport initiated from the BTIF thread context
716**
717** Returns          void
718**
719*******************************************************************************/
720
721void btif_hh_setreport(btif_hh_device_t *p_dev, bthh_report_type_t r_type, UINT16 size,
722                            UINT8* report)
723{
724    UINT8  hexbuf[20];
725    UINT16 len = size;
726    int i = 0;
727    if (p_dev->p_buf != NULL) {
728        GKI_freebuf(p_dev->p_buf);
729    }
730    p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET + sizeof(BT_HDR)));
731    if (p_dev->p_buf == NULL) {
732        APPL_TRACE_ERROR2("%s: Error, failed to allocate RPT buffer, len = %d", __FUNCTION__, len);
733        return;
734    }
735
736    p_dev->p_buf->len = len;
737    p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
738
739    //Build a SetReport data buffer
740    memset(hexbuf, 0, 20);
741    for(i=0; i<len; i++)
742        hexbuf[i] = report[i];
743
744    UINT8* pbuf_data;
745    pbuf_data = (UINT8*) (p_dev->p_buf + 1) + p_dev->p_buf->offset;
746    memcpy(pbuf_data, hexbuf, len);
747    BTA_HhSetReport(p_dev->dev_handle, r_type, p_dev->p_buf);
748
749}
750
751/*****************************************************************************
752**   Section name (Group of functions)
753*****************************************************************************/
754
755/*****************************************************************************
756**
757**   btif hh api functions (no context switch)
758**
759*****************************************************************************/
760
761
762/*******************************************************************************
763**
764** Function         btif_hh_upstreams_evt
765**
766** Description      Executes HH UPSTREAMS events in btif context
767**
768** Returns          void
769**
770*******************************************************************************/
771static void btif_hh_upstreams_evt(UINT16 event, char* p_param)
772{
773    tBTA_HH *p_data = (tBTA_HH *)p_param;
774    bdstr_t bdstr;
775    btif_hh_device_t *p_dev = NULL;
776    int i;
777    int len, tmplen;
778
779    BTIF_TRACE_DEBUG2("%s: event=%s", __FUNCTION__, dump_hh_event(event));
780
781    switch (event)
782    {
783        case BTA_HH_ENABLE_EVT:
784            BTIF_TRACE_DEBUG2("%s: BTA_HH_ENABLE_EVT: status =%d",__FUNCTION__, p_data->status);
785            if (p_data->status == BTA_HH_OK) {
786                btif_hh_cb.status = BTIF_HH_ENABLED;
787                BTIF_TRACE_DEBUG1("%s--Loading added devices",__FUNCTION__);
788                /* Add hid descriptors for already bonded hid devices*/
789                btif_storage_load_bonded_hid_info();
790            }
791            else {
792                btif_hh_cb.status = BTIF_HH_DISABLED;
793                BTIF_TRACE_WARNING1("BTA_HH_ENABLE_EVT: Error, HH enabling failed, status = %d", p_data->status);
794            }
795            break;
796
797        case BTA_HH_DISABLE_EVT:
798            btif_hh_cb.status = BTIF_HH_DISABLED;
799            if (p_data->status == BTA_HH_OK) {
800                int i;
801                //Clear the control block
802                memset(&btif_hh_cb, 0, sizeof(btif_hh_cb));
803                for (i = 0; i < BTIF_HH_MAX_HID; i++){
804                    btif_hh_cb.devices[i].dev_status = BTHH_CONN_STATE_UNKNOWN;
805                }
806            }
807            else
808                BTIF_TRACE_WARNING1("BTA_HH_DISABLE_EVT: Error, HH disabling failed, status = %d", p_data->status);
809            break;
810
811        case BTA_HH_OPEN_EVT:
812            BTIF_TRACE_WARNING3("%s: BTA_HH_OPN_EVT: handle=%d, status =%d",__FUNCTION__, p_data->conn.handle, p_data->conn.status);
813            if (p_data->conn.status == BTA_HH_OK) {
814                p_dev = btif_hh_find_connected_dev_by_handle(p_data->conn.handle);
815                if (p_dev == NULL) {
816                    BTIF_TRACE_WARNING1("BTA_HH_OPEN_EVT: Error, cannot find device with handle %d", p_data->conn.handle);
817                    btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
818                    // The connect request must come from device side and exceeded the connected
819                                   // HID device number.
820                    BTA_HhClose(p_data->conn.handle);
821                    HAL_CBACK(bt_hh_callbacks, connection_state_cb, (bt_bdaddr_t*) &p_data->conn.bda,BTHH_CONN_STATE_DISCONNECTED);
822                }
823                else if (p_dev->fd < 0) {
824                    BTIF_TRACE_WARNING0("BTA_HH_OPEN_EVT: Error, failed to find the uhid driver...");
825                    memcpy(&(p_dev->bd_addr), p_data->conn.bda, BD_ADDR_LEN);
826                    //remove the connection  and then try again to reconnect from the mouse side to recover
827                    btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
828                    BTA_HhClose(p_data->conn.handle);
829                }
830                else {
831                    BTIF_TRACE_WARNING1("BTA_HH_OPEN_EVT: Found device...Getting dscp info for handle ... %d",p_data->conn.handle);
832                    memcpy(&(p_dev->bd_addr), p_data->conn.bda, BD_ADDR_LEN);
833                    btif_hh_cb.status = BTIF_HH_DEV_CONNECTED;
834                    // Send set_idle if the peer_device is a keyboard
835                    if (check_cod((bt_bdaddr_t*)p_data->conn.bda, COD_HID_KEYBOARD )||
836                                check_cod((bt_bdaddr_t*)p_data->conn.bda, COD_HID_COMBO))
837                        BTA_HhSetIdle(p_data->conn.handle, 0);
838                    btif_hh_cb.p_curr_dev = btif_hh_find_connected_dev_by_handle(p_data->conn.handle);
839                    BTA_HhGetDscpInfo(p_data->conn.handle);
840                    p_dev->dev_status = BTHH_CONN_STATE_CONNECTED;
841                    HAL_CBACK(bt_hh_callbacks, connection_state_cb,&(p_dev->bd_addr), p_dev->dev_status);
842                }
843            }
844            else {
845                bt_bdaddr_t *bdaddr = (bt_bdaddr_t*)p_data->conn.bda;
846                btif_dm_hh_open_failed(bdaddr);
847                HAL_CBACK(bt_hh_callbacks, connection_state_cb, (bt_bdaddr_t*) &p_data->conn.bda,BTHH_CONN_STATE_DISCONNECTED);
848                btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
849            }
850            break;
851        case BTA_HH_CLOSE_EVT:
852            BTIF_TRACE_DEBUG2("BTA_HH_CLOSE_EVT: status = %d, handle = %d",
853            p_data->dev_status.status, p_data->dev_status.handle);
854            p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
855            if (p_dev != NULL) {
856                BTIF_TRACE_DEBUG2("%s: uhid fd = %d", __FUNCTION__, p_dev->fd);
857                if (p_dev->fd >= 0){
858                    UINT8 hidreport[9];
859                    memset(hidreport,0,9);
860                    hidreport[0]=1;
861                    bta_hh_co_write(p_dev->fd , hidreport, sizeof(hidreport));
862                }
863                if(p_dev->vup_timer_active)
864                {
865                    btif_hh_stop_vup_timer(&(p_dev->bd_addr));
866                }
867                btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
868                p_dev->dev_status = BTHH_CONN_STATE_DISCONNECTED;
869                HAL_CBACK(bt_hh_callbacks, connection_state_cb,&(p_dev->bd_addr), p_dev->dev_status);
870                BTIF_TRACE_DEBUG2("%s: Closing uhid fd = %d", __FUNCTION__, p_dev->fd);
871                bta_hh_co_destroy(p_dev->fd);
872                p_dev->fd = -1;
873            }
874            else {
875                BTIF_TRACE_WARNING1("Error: cannot find device with handle %d", p_data->dev_status.handle);
876            }
877            break;
878        case BTA_HH_GET_RPT_EVT:
879            BTIF_TRACE_DEBUG2("BTA_HH_GET_RPT_EVT: status = %d, handle = %d",
880                 p_data->hs_data.status, p_data->hs_data.handle);
881            p_dev = btif_hh_find_connected_dev_by_handle(p_data->conn.handle);
882            HAL_CBACK(bt_hh_callbacks, get_report_cb,(bt_bdaddr_t*) &(p_dev->bd_addr), (bthh_status_t) p_data->hs_data.status,
883                (uint8_t*) p_data->hs_data.rsp_data.p_rpt_data, BT_HDR_SIZE);
884            break;
885
886        case BTA_HH_SET_RPT_EVT:
887            BTIF_TRACE_DEBUG2("BTA_HH_SET_RPT_EVT: status = %d, handle = %d",
888            p_data->dev_status.status, p_data->dev_status.handle);
889            p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
890            if (p_dev != NULL && p_dev->p_buf != NULL) {
891                BTIF_TRACE_DEBUG0("Freeing buffer..." );
892                GKI_freebuf(p_dev->p_buf);
893                p_dev->p_buf = NULL;
894            }
895            break;
896
897        case BTA_HH_GET_PROTO_EVT:
898            p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
899            BTIF_TRACE_WARNING4("BTA_HH_GET_PROTO_EVT: status = %d, handle = %d, proto = [%d], %s",
900                 p_data->hs_data.status, p_data->hs_data.handle,
901                 p_data->hs_data.rsp_data.proto_mode,
902                 (p_data->hs_data.rsp_data.proto_mode == BTA_HH_PROTO_RPT_MODE) ? "Report Mode" :
903                 (p_data->hs_data.rsp_data.proto_mode == BTA_HH_PROTO_BOOT_MODE) ? "Boot Mode" : "Unsupported");
904            HAL_CBACK(bt_hh_callbacks, protocol_mode_cb,(bt_bdaddr_t*) &(p_dev->bd_addr), (bthh_status_t)p_data->hs_data.status,
905                             (bthh_protocol_mode_t) p_data->hs_data.rsp_data.proto_mode);
906            break;
907
908        case BTA_HH_SET_PROTO_EVT:
909            BTIF_TRACE_DEBUG2("BTA_HH_SET_PROTO_EVT: status = %d, handle = %d",
910                 p_data->dev_status.status, p_data->dev_status.handle);
911            break;
912
913        case BTA_HH_GET_IDLE_EVT:
914            BTIF_TRACE_DEBUG3("BTA_HH_GET_IDLE_EVT: handle = %d, status = %d, rate = %d",
915                 p_data->hs_data.handle, p_data->hs_data.status,
916                 p_data->hs_data.rsp_data.idle_rate);
917            break;
918
919        case BTA_HH_SET_IDLE_EVT:
920            BTIF_TRACE_DEBUG2("BTA_HH_SET_IDLE_EVT: status = %d, handle = %d",
921            p_data->dev_status.status, p_data->dev_status.handle);
922            break;
923
924        case BTA_HH_GET_DSCP_EVT:
925            BTIF_TRACE_WARNING2("BTA_HH_GET_DSCP_EVT: status = %d, handle = %d",
926                p_data->dev_status.status, p_data->dev_status.handle);
927                len = p_data->dscp_info.descriptor.dl_len;
928                BTIF_TRACE_DEBUG1("BTA_HH_GET_DSCP_EVT: len = %d", len);
929            p_dev = btif_hh_cb.p_curr_dev;
930            if (p_dev == NULL) {
931                BTIF_TRACE_ERROR0("BTA_HH_GET_DSCP_EVT: No HID device is currently connected");
932                return;
933            }
934            if (p_dev->fd < 0) {
935                ALOGE("BTA_HH_GET_DSCP_EVT: Error, failed to find the uhid driver...");
936                return;
937            }
938            {
939                char *cached_name = NULL;
940                bt_bdname_t bdname;
941                bt_property_t prop_name;
942                BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_BDNAME,
943                                           sizeof(bt_bdname_t), &bdname);
944                if (btif_storage_get_remote_device_property(
945                    &p_dev->bd_addr, &prop_name) == BT_STATUS_SUCCESS)
946                {
947                    cached_name = (char *)bdname.name;
948                }
949                else
950                {
951                    cached_name = "Bluetooth HID";
952                }
953
954                BTIF_TRACE_WARNING2("%s: name = %s", __FUNCTION__, cached_name);
955                bta_hh_co_send_hid_info(p_dev, cached_name,
956                    p_data->dscp_info.vendor_id, p_data->dscp_info.product_id,
957                    p_data->dscp_info.version,   p_data->dscp_info.ctry_code,
958                    len, p_data->dscp_info.descriptor.dsc_list);
959                if (btif_hh_add_added_dev(p_dev->bd_addr, p_dev->attr_mask)) {
960                    BD_ADDR bda;
961                    bdcpy(bda, p_dev->bd_addr.address);
962                    tBTA_HH_DEV_DSCP_INFO dscp_info;
963                    bt_status_t ret;
964                    bdcpy(bda, p_dev->bd_addr.address);
965                    btif_hh_copy_hid_info(&dscp_info, &p_data->dscp_info);
966                    BTIF_TRACE_DEBUG6("BTA_HH_GET_DSCP_EVT:bda = %02x:%02x:%02x:%02x:%02x:%02x",
967                              p_dev->bd_addr.address[0], p_dev->bd_addr.address[1],
968                              p_dev->bd_addr.address[2],p_dev->bd_addr.address[3],
969                              p_dev->bd_addr.address[4], p_dev->bd_addr.address[5]);
970                    BTA_HhAddDev(bda, p_dev->attr_mask,p_dev->sub_class,p_dev->app_id, dscp_info);
971                    // write hid info to nvram
972                    ret = btif_storage_add_hid_device_info(&(p_dev->bd_addr), p_dev->attr_mask,p_dev->sub_class,p_dev->app_id,
973                                                        p_data->dscp_info.vendor_id, p_data->dscp_info.product_id,
974                                                        p_data->dscp_info.version,   p_data->dscp_info.ctry_code,
975                                                        len, p_data->dscp_info.descriptor.dsc_list);
976
977                    ASSERTC(ret == BT_STATUS_SUCCESS, "storing hid info failed", ret);
978                    BTIF_TRACE_WARNING0("BTA_HH_GET_DSCP_EVT: Called add device");
979
980                    //Free buffer created for dscp_info;
981                    if (dscp_info.descriptor.dl_len >0 && dscp_info.descriptor.dsc_list != NULL)
982                    {
983                      GKI_freebuf(dscp_info.descriptor.dsc_list);
984                      dscp_info.descriptor.dsc_list = NULL;
985                      dscp_info.descriptor.dl_len=0;
986                    }
987                }
988                else {
989                    //Device already added.
990                    BTIF_TRACE_WARNING1("%s: Device already added ",__FUNCTION__);
991                }
992                /*Sync HID Keyboard lockstates */
993                tmplen = sizeof(hid_kb_numlock_on_list)
994                            / sizeof(tHID_KB_LIST);
995                for(i = 0; i< tmplen; i++)
996                {
997                    if(p_data->dscp_info.vendor_id
998                        == hid_kb_numlock_on_list[i].version_id &&
999                        p_data->dscp_info.product_id
1000                        == hid_kb_numlock_on_list[i].product_id)
1001                    {
1002                        BTIF_TRACE_DEBUG3("%s() idx[%d] Enabling "\
1003                            "NUMLOCK for device :: %s", __FUNCTION__,
1004                            i, hid_kb_numlock_on_list[i].kb_name);
1005                        /* Enable NUMLOCK by default so that numeric
1006                            keys work from first keyboard connect */
1007                        set_keylockstate(BTIF_HH_KEYSTATE_MASK_NUMLOCK,
1008                                        TRUE);
1009                        sync_lockstate_on_connect(p_dev);
1010                        /* End Sync HID Keyboard lockstates */
1011                        break;
1012                    }
1013                }
1014            }
1015            break;
1016
1017        case BTA_HH_ADD_DEV_EVT:
1018            BTIF_TRACE_WARNING2("BTA_HH_ADD_DEV_EVT: status = %d, handle = %d",p_data->dev_info.status, p_data->dev_info.handle);
1019            int i;
1020            for (i = 0; i < BTIF_HH_MAX_ADDED_DEV; i++) {
1021                if (memcmp(btif_hh_cb.added_devices[i].bd_addr.address, p_data->dev_info.bda, 6) == 0) {
1022                    if (p_data->dev_info.status == BTA_HH_OK) {
1023                        btif_hh_cb.added_devices[i].dev_handle = p_data->dev_info.handle;
1024                    }
1025                    else {
1026                        memset(btif_hh_cb.added_devices[i].bd_addr.address, 0, 6);
1027                        btif_hh_cb.added_devices[i].dev_handle = BTA_HH_INVALID_HANDLE;
1028                    }
1029                    break;
1030                }
1031            }
1032            break;
1033        case BTA_HH_RMV_DEV_EVT:
1034                BTIF_TRACE_DEBUG2("BTA_HH_RMV_DEV_EVT: status = %d, handle = %d",
1035                     p_data->dev_info.status, p_data->dev_info.handle);
1036                BTIF_TRACE_DEBUG6("BTA_HH_RMV_DEV_EVT:bda = %02x:%02x:%02x:%02x:%02x:%02x",
1037                     p_data->dev_info.bda[0], p_data->dev_info.bda[1], p_data->dev_info.bda[2],
1038                     p_data->dev_info.bda[3], p_data->dev_info.bda[4], p_data->dev_info.bda[5]);
1039                break;
1040
1041
1042        case BTA_HH_VC_UNPLUG_EVT:
1043                BTIF_TRACE_DEBUG2("BTA_HH_VC_UNPLUG_EVT: status = %d, handle = %d",
1044                     p_data->dev_status.status, p_data->dev_status.handle);
1045                p_dev = btif_hh_find_connected_dev_by_handle(p_data->dev_status.handle);
1046                btif_hh_cb.status = BTIF_HH_DEV_DISCONNECTED;
1047                if (p_dev != NULL) {
1048                    BTIF_TRACE_DEBUG6("BTA_HH_VC_UNPLUG_EVT:bda = %02x:%02x:%02x:%02x:%02x:%02x",
1049                         p_dev->bd_addr.address[0], p_dev->bd_addr.address[1],
1050                         p_dev->bd_addr.address[2],p_dev->bd_addr.address[3],
1051                         p_dev->bd_addr.address[4], p_dev->bd_addr.address[5]);
1052                    /* Stop the VUP timer */
1053                    if(p_dev->vup_timer_active)
1054                    {
1055                        btif_hh_stop_vup_timer(&(p_dev->bd_addr));
1056                    }
1057                    p_dev->dev_status = BTHH_CONN_STATE_DISCONNECTED;
1058                    BTIF_TRACE_DEBUG1("%s---Sending connection state change", __FUNCTION__);
1059                    HAL_CBACK(bt_hh_callbacks, connection_state_cb,&(p_dev->bd_addr), p_dev->dev_status);
1060                    BTIF_TRACE_DEBUG1("%s---Removing HID bond", __FUNCTION__);
1061                    /* If it is locally initiated VUP or remote device has its major COD as
1062                    Peripheral removed the bond.*/
1063                    if (p_dev->local_vup  || check_cod_hid(&(p_dev->bd_addr), COD_HID_MAJOR))
1064                    {
1065                        p_dev->local_vup = FALSE;
1066                        BTA_DmRemoveDevice((UINT8 *)p_dev->bd_addr.address);
1067                    }
1068                    else
1069                        btif_hh_remove_device(p_dev->bd_addr);
1070                    HAL_CBACK(bt_hh_callbacks, virtual_unplug_cb,&(p_dev->bd_addr),
1071                                    p_data->dev_status.status);
1072                }
1073                break;
1074
1075        case BTA_HH_API_ERR_EVT  :
1076                ALOGI("BTA_HH API_ERR");
1077                break;
1078
1079
1080
1081            default:
1082                BTIF_TRACE_WARNING2("%s: Unhandled event: %d", __FUNCTION__, event);
1083                break;
1084        }
1085}
1086
1087/*******************************************************************************
1088**
1089** Function         bte_hh_evt
1090**
1091** Description      Switches context from BTE to BTIF for all HH events
1092**
1093** Returns          void
1094**
1095*******************************************************************************/
1096
1097static void bte_hh_evt(tBTA_HH_EVT event, tBTA_HH *p_data)
1098{
1099    bt_status_t status;
1100    int param_len = 0;
1101
1102    if (BTA_HH_ENABLE_EVT == event)
1103        param_len = sizeof(tBTA_HH_STATUS);
1104    else if (BTA_HH_OPEN_EVT == event)
1105        param_len = sizeof(tBTA_HH_CONN);
1106    else if (BTA_HH_DISABLE_EVT == event)
1107        param_len = sizeof(tBTA_HH_STATUS);
1108    else if (BTA_HH_CLOSE_EVT == event)
1109        param_len = sizeof(tBTA_HH_CBDATA);
1110    else if (BTA_HH_GET_DSCP_EVT == event)
1111        param_len = sizeof(tBTA_HH_DEV_DSCP_INFO);
1112    else if ((BTA_HH_GET_PROTO_EVT == event) || (BTA_HH_GET_RPT_EVT == event)|| (BTA_HH_GET_IDLE_EVT == event))
1113        param_len = sizeof(tBTA_HH_HSDATA);
1114    else if ((BTA_HH_SET_PROTO_EVT == event) || (BTA_HH_SET_RPT_EVT == event) || (BTA_HH_VC_UNPLUG_EVT == event) || (BTA_HH_SET_IDLE_EVT == event))
1115        param_len = sizeof(tBTA_HH_CBDATA);
1116    else if ((BTA_HH_ADD_DEV_EVT == event) || (BTA_HH_RMV_DEV_EVT == event) )
1117        param_len = sizeof(tBTA_HH_DEV_INFO);
1118    else if (BTA_HH_API_ERR_EVT == event)
1119        param_len = 0;
1120    /* switch context to btif task context (copy full union size for convenience) */
1121    status = btif_transfer_context(btif_hh_upstreams_evt, (uint16_t)event, (void*)p_data, param_len, NULL);
1122
1123    /* catch any failed context transfers */
1124    ASSERTC(status == BT_STATUS_SUCCESS, "context transfer failed", status);
1125}
1126
1127/*******************************************************************************
1128**
1129** Function         btif_hh_handle_evt
1130**
1131** Description      Switches context for immediate callback
1132**
1133** Returns          void
1134**
1135*******************************************************************************/
1136
1137static void btif_hh_handle_evt(UINT16 event, char *p_param)
1138{
1139    bt_bdaddr_t *bd_addr = (bt_bdaddr_t*)p_param;
1140    BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
1141    int ret;
1142    switch(event)
1143    {
1144        case BTIF_HH_CONNECT_REQ_EVT:
1145        {
1146            ret = btif_hh_connect(bd_addr);
1147            if(ret == BT_STATUS_SUCCESS)
1148            {
1149                HAL_CBACK(bt_hh_callbacks, connection_state_cb,bd_addr,BTHH_CONN_STATE_CONNECTING);
1150            }
1151            else
1152                HAL_CBACK(bt_hh_callbacks, connection_state_cb,bd_addr,BTHH_CONN_STATE_DISCONNECTED);
1153        }
1154        break;
1155
1156        case BTIF_HH_DISCONNECT_REQ_EVT:
1157        {
1158            BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
1159            btif_hh_disconnect(bd_addr);
1160            HAL_CBACK(bt_hh_callbacks, connection_state_cb,bd_addr,BTHH_CONN_STATE_DISCONNECTING);
1161        }
1162        break;
1163
1164        case BTIF_HH_VUP_REQ_EVT:
1165        {
1166            BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
1167            ret = btif_hh_virtual_unplug(bd_addr);
1168        }
1169        break;
1170
1171        default:
1172        {
1173            BTIF_TRACE_WARNING2("%s : Unknown event 0x%x", __FUNCTION__, event);
1174        }
1175        break;
1176    }
1177}
1178
1179/*******************************************************************************
1180**
1181** Function      btif_hh_tmr_hdlr
1182**
1183** Description   Process timer timeout
1184**
1185** Returns      void
1186*******************************************************************************/
1187void btif_hh_tmr_hdlr(TIMER_LIST_ENT *tle)
1188{
1189    btif_hh_device_t *p_dev;
1190    UINT8               i,j;
1191    tBTA_HH_EVT event;
1192    tBTA_HH p_data;
1193    int param_len = 0;
1194    memset(&p_data, 0, sizeof(tBTA_HH));
1195
1196    BTIF_TRACE_DEBUG2("%s timer_in_use=%d",  __FUNCTION__, tle->in_use );
1197
1198    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
1199        if (btif_hh_cb.devices[i].dev_status == BTHH_CONN_STATE_CONNECTED)
1200        {
1201
1202            p_dev = &btif_hh_cb.devices[i];
1203
1204            if (p_dev->vup_timer_active)
1205            {
1206                p_dev->vup_timer_active = FALSE;
1207                event = BTA_HH_VC_UNPLUG_EVT;
1208                p_data.dev_status.status = BTHH_ERR;
1209                p_data.dev_status.handle = p_dev->dev_handle;
1210                param_len = sizeof(tBTA_HH_CBDATA);
1211
1212                /* switch context to btif task context */
1213                btif_transfer_context(btif_hh_upstreams_evt, (uint16_t)event, (void*)&p_data,
1214                            param_len, NULL);
1215            }
1216        }
1217    }
1218}
1219
1220/*******************************************************************************
1221**
1222** Function         btif_hh_init
1223**
1224** Description     initializes the hh interface
1225**
1226** Returns         bt_status_t
1227**
1228*******************************************************************************/
1229static bt_status_t init( bthh_callbacks_t* callbacks )
1230{
1231    UINT32 i;
1232    BTIF_TRACE_EVENT1("%s", __FUNCTION__);
1233
1234    bt_hh_callbacks = callbacks;
1235    memset(&btif_hh_cb, 0, sizeof(btif_hh_cb));
1236    for (i = 0; i < BTIF_HH_MAX_HID; i++){
1237        btif_hh_cb.devices[i].dev_status = BTHH_CONN_STATE_UNKNOWN;
1238    }
1239    /* Invoke the enable service API to the core to set the appropriate service_id */
1240    btif_enable_service(BTA_HID_SERVICE_ID);
1241    return BT_STATUS_SUCCESS;
1242}
1243
1244/*******************************************************************************
1245**
1246** Function        connect
1247**
1248** Description     connect to hid device
1249**
1250** Returns         bt_status_t
1251**
1252*******************************************************************************/
1253static bt_status_t connect( bt_bdaddr_t *bd_addr)
1254{
1255    if(btif_hh_cb.status != BTIF_HH_DEV_CONNECTING)
1256    {
1257        btif_transfer_context(btif_hh_handle_evt, BTIF_HH_CONNECT_REQ_EVT,
1258                                 (char*)bd_addr, sizeof(bt_bdaddr_t), NULL);
1259        return BT_STATUS_SUCCESS;
1260    }
1261    else
1262        return BT_STATUS_BUSY;
1263}
1264
1265/*******************************************************************************
1266**
1267** Function         disconnect
1268**
1269** Description      disconnect from hid device
1270**
1271** Returns         bt_status_t
1272**
1273*******************************************************************************/
1274static bt_status_t disconnect( bt_bdaddr_t *bd_addr )
1275{
1276    CHECK_BTHH_INIT();
1277    btif_hh_device_t *p_dev;
1278
1279    if (btif_hh_cb.status == BTIF_HH_DISABLED)
1280    {
1281        BTIF_TRACE_WARNING2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1282        return BT_STATUS_FAIL;
1283    }
1284    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1285    if (p_dev != NULL)
1286    {
1287        return btif_transfer_context(btif_hh_handle_evt, BTIF_HH_DISCONNECT_REQ_EVT,
1288                     (char*)bd_addr, sizeof(bt_bdaddr_t), NULL);
1289    }
1290    else
1291    {
1292        BTIF_TRACE_WARNING1("%s: Error, device  not opened.", __FUNCTION__);
1293        return BT_STATUS_FAIL;
1294    }
1295}
1296
1297/*******************************************************************************
1298**
1299** Function         virtual_unplug
1300**
1301** Description      Virtual UnPlug (VUP) the specified HID device.
1302**
1303** Returns         bt_status_t
1304**
1305*******************************************************************************/
1306static bt_status_t virtual_unplug (bt_bdaddr_t *bd_addr)
1307{
1308    CHECK_BTHH_INIT();
1309    btif_hh_device_t *p_dev;
1310    char bd_str[18];
1311    sprintf(bd_str, "%02X:%02X:%02X:%02X:%02X:%02X",
1312            bd_addr->address[0],  bd_addr->address[1],  bd_addr->address[2],  bd_addr->address[3],
1313            bd_addr->address[4], bd_addr->address[5]);
1314    if (btif_hh_cb.status == BTIF_HH_DISABLED)
1315    {
1316        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1317        return BT_STATUS_FAIL;
1318    }
1319    p_dev = btif_hh_find_dev_by_bda(bd_addr);
1320    if (!p_dev)
1321    {
1322        BTIF_TRACE_ERROR2("%s: Error, device %s not opened.", __FUNCTION__, bd_str);
1323        return BT_STATUS_FAIL;
1324    }
1325    btif_transfer_context(btif_hh_handle_evt, BTIF_HH_VUP_REQ_EVT,
1326                                 (char*)bd_addr, sizeof(bt_bdaddr_t), NULL);
1327    return BT_STATUS_SUCCESS;
1328}
1329
1330
1331/*******************************************************************************
1332**
1333** Function         set_info
1334**
1335** Description      Set the HID device descriptor for the specified HID device.
1336**
1337** Returns         bt_status_t
1338**
1339*******************************************************************************/
1340static bt_status_t set_info (bt_bdaddr_t *bd_addr, bthh_hid_info_t hid_info )
1341{
1342    CHECK_BTHH_INIT();
1343    tBTA_HH_DEV_DSCP_INFO dscp_info;
1344    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1345
1346    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1347         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1348    BTIF_TRACE_DEBUG6("%s: sub_class = 0x%02x, app_id = %d, vendor_id = 0x%04x, "
1349         "product_id = 0x%04x, version= 0x%04x",
1350         __FUNCTION__, hid_info.sub_class,
1351         hid_info.app_id, hid_info.vendor_id, hid_info.product_id,
1352         hid_info.version);
1353
1354    if (btif_hh_cb.status == BTIF_HH_DISABLED)
1355    {
1356        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1357        return BT_STATUS_FAIL;
1358    }
1359
1360    dscp_info.vendor_id  = hid_info.vendor_id;
1361    dscp_info.product_id = hid_info.product_id;
1362    dscp_info.version    = hid_info.version;
1363    dscp_info.ctry_code  = hid_info.ctry_code;
1364
1365    dscp_info.descriptor.dl_len = hid_info.dl_len;
1366    dscp_info.descriptor.dsc_list = (UINT8 *) GKI_getbuf(dscp_info.descriptor.dl_len);
1367    if (dscp_info.descriptor.dsc_list == NULL)
1368    {
1369        ALOGE("%s: Failed to allocate DSCP for CB", __FUNCTION__);
1370        return BT_STATUS_FAIL;
1371    }
1372    memcpy(dscp_info.descriptor.dsc_list, &(hid_info.dsc_list), hid_info.dl_len);
1373
1374    if (btif_hh_add_added_dev(*bd_addr, hid_info.attr_mask))
1375    {
1376        BTA_HhAddDev(*bda, hid_info.attr_mask, hid_info.sub_class,
1377                     hid_info.app_id, dscp_info);
1378    }
1379
1380    GKI_freebuf(dscp_info.descriptor.dsc_list);
1381
1382    return BT_STATUS_SUCCESS;
1383}
1384/*******************************************************************************
1385**
1386** Function         get_idle_time
1387**
1388** Description      Get the HID idle time
1389**
1390** Returns         bt_status_t
1391**
1392*******************************************************************************/
1393static bt_status_t get_idle_time(bt_bdaddr_t *bd_addr)
1394{
1395    CHECK_BTHH_INIT();
1396    btif_hh_device_t *p_dev;
1397    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1398
1399    BTIF_TRACE_DEBUG6(" addr = %02X:%02X:%02X:%02X:%02X:%02X",
1400         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1401
1402    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1403        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1404        return BT_STATUS_FAIL;
1405    }
1406
1407    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1408    if (p_dev != NULL) {
1409        //BTA_HhGetIdle(p_dev->dev_handle);
1410    }
1411    else {
1412        return BT_STATUS_FAIL;
1413    }
1414    return BT_STATUS_SUCCESS;
1415}
1416
1417/*******************************************************************************
1418**
1419** Function         set_idle_time
1420**
1421** Description      Set the HID idle time
1422**
1423** Returns         bt_status_t
1424**
1425*******************************************************************************/
1426static bt_status_t set_idle_time (bt_bdaddr_t *bd_addr, uint8_t idle_time)
1427{
1428    CHECK_BTHH_INIT();
1429    btif_hh_device_t *p_dev;
1430    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1431
1432    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1433         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1434
1435    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1436        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1437        return BT_STATUS_FAIL;
1438    }
1439
1440    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1441    if (p_dev == NULL) {
1442        BTIF_TRACE_WARNING6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1443             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1444        return BT_STATUS_FAIL;
1445    }
1446    else {
1447        //BTA_HhSetIdle(p_dev->dev_handle, idle_time);
1448    }
1449    return BT_STATUS_SUCCESS;
1450}
1451
1452/*******************************************************************************
1453**
1454** Function         get_protocol
1455**
1456** Description      Get the HID proto mode.
1457**
1458** Returns         bt_status_t
1459**
1460*******************************************************************************/
1461static bt_status_t get_protocol (bt_bdaddr_t *bd_addr, bthh_protocol_mode_t protocolMode)
1462{
1463    CHECK_BTHH_INIT();
1464    btif_hh_device_t *p_dev;
1465    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1466
1467    BTIF_TRACE_DEBUG6(" addr = %02X:%02X:%02X:%02X:%02X:%02X",
1468         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1469
1470    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1471        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1472        return BT_STATUS_FAIL;
1473    }
1474
1475    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1476    if (p_dev != NULL) {
1477        BTA_HhGetProtoMode(p_dev->dev_handle);
1478    }
1479    else {
1480        return BT_STATUS_FAIL;
1481    }
1482    return BT_STATUS_SUCCESS;
1483}
1484
1485/*******************************************************************************
1486**
1487** Function         set_protocol
1488**
1489** Description      Set the HID proto mode.
1490**
1491** Returns         bt_status_t
1492**
1493*******************************************************************************/
1494static bt_status_t set_protocol (bt_bdaddr_t *bd_addr, bthh_protocol_mode_t protocolMode)
1495{
1496    CHECK_BTHH_INIT();
1497    btif_hh_device_t *p_dev;
1498    UINT8 proto_mode = protocolMode;
1499    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1500
1501    BTIF_TRACE_DEBUG2("%s:proto_mode = %d", __FUNCTION__,protocolMode);
1502
1503    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1504         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1505
1506    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1507        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1508        return BT_STATUS_FAIL;
1509    }
1510
1511    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1512    if (p_dev == NULL) {
1513        BTIF_TRACE_WARNING6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1514             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1515        return BT_STATUS_FAIL;
1516    }
1517    else if (protocolMode != BTA_HH_PROTO_RPT_MODE && protocolMode != BTA_HH_PROTO_BOOT_MODE) {
1518        BTIF_TRACE_WARNING2("s: Error, device proto_mode = %d.", __FUNCTION__, proto_mode);
1519        return BT_STATUS_FAIL;
1520    }
1521    else {
1522        BTA_HhSetProtoMode(p_dev->dev_handle, protocolMode);
1523    }
1524
1525
1526    return BT_STATUS_SUCCESS;
1527}
1528
1529/*******************************************************************************
1530**
1531** Function         get_report
1532**
1533** Description      Send a GET_REPORT to HID device.
1534**
1535** Returns         bt_status_t
1536**
1537*******************************************************************************/
1538static bt_status_t get_report (bt_bdaddr_t *bd_addr, bthh_report_type_t reportType, uint8_t reportId, int bufferSize)
1539{
1540    CHECK_BTHH_INIT();
1541    btif_hh_device_t *p_dev;
1542    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1543
1544    BTIF_TRACE_DEBUG4("%s:proto_mode = %dr_type = %d, rpt_id = %d, buf_size = %d", __FUNCTION__,
1545          reportType, reportId, bufferSize);
1546
1547    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1548         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1549
1550    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1551        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1552        return BT_STATUS_FAIL;
1553    }
1554
1555
1556    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1557    if (p_dev == NULL) {
1558        BTIF_TRACE_ERROR6("%s: Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1559             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1560        return BT_STATUS_FAIL;
1561    }
1562    else if ( ((int) reportType) <= BTA_HH_RPTT_RESRV || ((int) reportType) > BTA_HH_RPTT_FEATURE) {
1563        BTIF_TRACE_ERROR6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1564             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1565        return BT_STATUS_FAIL;
1566    }
1567    else {
1568        BTA_HhGetReport(p_dev->dev_handle, reportType,
1569                        reportId, bufferSize);
1570    }
1571
1572    return BT_STATUS_SUCCESS;
1573}
1574
1575/*******************************************************************************
1576**
1577** Function         set_report
1578**
1579** Description      Send a SET_REPORT to HID device.
1580**
1581** Returns         bt_status_t
1582**
1583*******************************************************************************/
1584static bt_status_t set_report (bt_bdaddr_t *bd_addr, bthh_report_type_t reportType, char* report)
1585{
1586    CHECK_BTHH_INIT();
1587    btif_hh_device_t *p_dev;
1588    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1589
1590    BTIF_TRACE_DEBUG2("%s:reportType = %d", __FUNCTION__,reportType);
1591
1592    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1593         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1594
1595
1596    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1597        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1598        return BT_STATUS_FAIL;
1599    }
1600
1601    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1602    if (p_dev == NULL) {
1603        BTIF_TRACE_ERROR6("%s: Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1604             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1605        return BT_STATUS_FAIL;
1606    }
1607    else if ( ( (int) reportType) <= BTA_HH_RPTT_RESRV || ( (int) reportType) > BTA_HH_RPTT_FEATURE) {
1608        BTIF_TRACE_ERROR6(" Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1609             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1610        return BT_STATUS_FAIL;
1611    }
1612    else {
1613        int    hex_bytes_filled;
1614        UINT8  hexbuf[200];
1615        UINT16 len = (strlen(report) + 1) / 2;
1616
1617        if (p_dev->p_buf != NULL) {
1618            GKI_freebuf(p_dev->p_buf);
1619        }
1620        p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET + sizeof(BT_HDR)));
1621        if (p_dev->p_buf == NULL) {
1622            BTIF_TRACE_ERROR2("%s: Error, failed to allocate RPT buffer, len = %d", __FUNCTION__, len);
1623            return BT_STATUS_FAIL;
1624        }
1625
1626        p_dev->p_buf->len = len;
1627        p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
1628
1629        /* Build a SetReport data buffer */
1630        memset(hexbuf, 0, 200);
1631        //TODO
1632        hex_bytes_filled = ascii_2_hex(report, len, hexbuf);
1633        ALOGI("Hex bytes filled, hex value: %d", hex_bytes_filled);
1634
1635        if (hex_bytes_filled) {
1636            UINT8* pbuf_data;
1637            pbuf_data = (UINT8*) (p_dev->p_buf + 1) + p_dev->p_buf->offset;
1638            memcpy(pbuf_data, hexbuf, hex_bytes_filled);
1639            BTA_HhSetReport(p_dev->dev_handle, reportType, p_dev->p_buf);
1640        }
1641        return BT_STATUS_SUCCESS;
1642    }
1643
1644
1645}
1646
1647/*******************************************************************************
1648**
1649** Function         send_data
1650**
1651** Description      Send a SEND_DATA to HID device.
1652**
1653** Returns         bt_status_t
1654**
1655*******************************************************************************/
1656static bt_status_t send_data (bt_bdaddr_t *bd_addr, char* data)
1657{
1658    CHECK_BTHH_INIT();
1659    btif_hh_device_t *p_dev;
1660    BD_ADDR* bda = (BD_ADDR*) bd_addr;
1661
1662    BTIF_TRACE_DEBUG1("%s", __FUNCTION__);
1663
1664    BTIF_TRACE_DEBUG6("addr = %02X:%02X:%02X:%02X:%02X:%02X",
1665         (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1666
1667    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1668        BTIF_TRACE_ERROR2("%s: Error, HH status = %d", __FUNCTION__, btif_hh_cb.status);
1669        return BT_STATUS_FAIL;
1670    }
1671
1672    p_dev = btif_hh_find_connected_dev_by_bda(bd_addr);
1673    if (p_dev == NULL) {
1674        BTIF_TRACE_ERROR6("%s: Error, device %02X:%02X:%02X:%02X:%02X:%02X not opened.",
1675             (*bda)[0], (*bda)[1], (*bda)[2], (*bda)[3], (*bda)[4], (*bda)[5]);
1676        return BT_STATUS_FAIL;
1677    }
1678
1679    else {
1680        int    hex_bytes_filled;
1681        UINT8  hexbuf[200];
1682        UINT16 len = (strlen(data) + 1) / 2;
1683
1684        if (p_dev->p_buf != NULL) {
1685            GKI_freebuf(p_dev->p_buf);
1686        }
1687        p_dev->p_buf = GKI_getbuf((UINT16) (len + BTA_HH_MIN_OFFSET + sizeof(BT_HDR)));
1688        if (p_dev->p_buf == NULL) {
1689            BTIF_TRACE_ERROR2("%s: Error, failed to allocate RPT buffer, len = %d", __FUNCTION__, len);
1690            return BT_STATUS_FAIL;
1691        }
1692
1693        p_dev->p_buf->len = len;
1694        p_dev->p_buf->offset = BTA_HH_MIN_OFFSET;
1695
1696        /* Build a SetReport data buffer */
1697        memset(hexbuf, 0, 200);
1698        hex_bytes_filled = ascii_2_hex(data, len, hexbuf);
1699        BTIF_TRACE_ERROR2("Hex bytes filled, hex value: %d, %d", hex_bytes_filled, len);
1700
1701        if (hex_bytes_filled) {
1702            UINT8* pbuf_data;
1703            pbuf_data = (UINT8*) (p_dev->p_buf + 1) + p_dev->p_buf->offset;
1704            memcpy(pbuf_data, hexbuf, hex_bytes_filled);
1705            p_dev->p_buf->layer_specific = BTA_HH_RPTT_OUTPUT;
1706            BTA_HhSendData(p_dev->dev_handle, *bda, p_dev->p_buf);
1707            return BT_STATUS_SUCCESS;
1708        }
1709
1710    }
1711    return BT_STATUS_FAIL;
1712}
1713
1714
1715/*******************************************************************************
1716**
1717** Function         cleanup
1718**
1719** Description      Closes the HH interface
1720**
1721** Returns          bt_status_t
1722**
1723*******************************************************************************/
1724static void  cleanup( void )
1725{
1726    BTIF_TRACE_EVENT1("%s", __FUNCTION__);
1727    btif_hh_device_t *p_dev;
1728    int i;
1729    if (btif_hh_cb.status == BTIF_HH_DISABLED) {
1730        BTIF_TRACE_WARNING2("%s: HH disabling or disabled already, status = %d", __FUNCTION__, btif_hh_cb.status);
1731        return;
1732    }
1733    btif_hh_cb.status = BTIF_HH_DISABLING;
1734    for (i = 0; i < BTIF_HH_MAX_HID; i++) {
1735         p_dev = &btif_hh_cb.devices[i];
1736         if (p_dev->dev_status != BTHH_CONN_STATE_UNKNOWN && p_dev->fd >= 0) {
1737             BTIF_TRACE_DEBUG2("%s: Closing uhid fd = %d", __FUNCTION__, p_dev->fd);
1738             bta_hh_co_destroy(p_dev->fd);
1739             p_dev->fd = -1;
1740             p_dev->hh_keep_polling = 0;
1741             p_dev->hh_poll_thread_id = -1;
1742         }
1743     }
1744
1745    if (bt_hh_callbacks)
1746    {
1747        btif_disable_service(BTA_HID_SERVICE_ID);
1748        bt_hh_callbacks = NULL;
1749    }
1750
1751}
1752
1753static const bthh_interface_t bthhInterface = {
1754    sizeof(bthhInterface),
1755    init,
1756    connect,
1757    disconnect,
1758    virtual_unplug,
1759    set_info,
1760    get_protocol,
1761    set_protocol,
1762//    get_idle_time,
1763//    set_idle_time,
1764    get_report,
1765    set_report,
1766    send_data,
1767    cleanup,
1768};
1769
1770/*******************************************************************************
1771**
1772** Function         btif_hh_execute_service
1773**
1774** Description      Initializes/Shuts down the service
1775**
1776** Returns          BT_STATUS_SUCCESS on success, BT_STATUS_FAIL otherwise
1777**
1778*******************************************************************************/
1779bt_status_t btif_hh_execute_service(BOOLEAN b_enable)
1780{
1781     if (b_enable)
1782     {
1783          /* Enable and register with BTA-HH */
1784          BTA_HhEnable(BTA_SEC_NONE, bte_hh_evt);
1785     }
1786     else {
1787         /* Disable HH */
1788         BTA_HhDisable();
1789     }
1790     return BT_STATUS_SUCCESS;
1791}
1792
1793/*******************************************************************************
1794**
1795** Function         btif_hh_get_interface
1796**
1797** Description      Get the hh callback interface
1798**
1799** Returns          bthh_interface_t
1800**
1801*******************************************************************************/
1802const bthh_interface_t *btif_hh_get_interface()
1803{
1804    BTIF_TRACE_EVENT1("%s", __FUNCTION__);
1805    return &bthhInterface;
1806}
1807