btif_pan.c revision 4186b0ec7e0b7efe17c3b7cb8546ff359e099408
1/******************************************************************************
2 *
3 *  Copyright (C) 2009-2012 Broadcom Corporation
4 *
5 *  Licensed under the Apache License, Version 2.0 (the "License");
6 *  you may not use this file except in compliance with the License.
7 *  You may obtain a copy of the License at:
8 *
9 *  http://www.apache.org/licenses/LICENSE-2.0
10 *
11 *  Unless required by applicable law or agreed to in writing, software
12 *  distributed under the License is distributed on an "AS IS" BASIS,
13 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 *  See the License for the specific language governing permissions and
15 *  limitations under the License.
16 *
17 ******************************************************************************/
18
19/************************************************************************************
20 *
21 *  Filename:      btif_pan.c
22 *
23 *  Description:   PAN Profile Bluetooth Interface
24 *
25 *
26 ***********************************************************************************/
27#include <hardware/bluetooth.h>
28#include <hardware/bt_pan.h>
29#include <assert.h>
30#include <signal.h>
31#include <ctype.h>
32#include <sys/select.h>
33#include <sys/poll.h>
34#include <sys/ioctl.h>
35#include <netinet/in.h>
36#include <netdb.h>
37#include <stdio.h>
38#include <errno.h>
39#include <fcntl.h>
40#include <sys/socket.h>
41#include <sys/wait.h>
42#include <net/if.h>
43#include <linux/sockios.h>
44#include <sys/prctl.h>
45#include <linux/if.h>
46#include <linux/if_tun.h>
47#include <linux/if_ether.h>
48
49#define LOG_TAG "BTIF_PAN"
50#include "btif_common.h"
51#include "btif_util.h"
52#include "btm_api.h"
53#include "bd.h"
54
55#include "bta_api.h"
56#include "bta_pan_api.h"
57#include "btif_sock_thread.h"
58#include "btif_sock_util.h"
59#include "btif_pan_internal.h"
60#include "gki.h"
61
62#define FORWARD_IGNORE        1
63#define FORWARD_SUCCESS       0
64#define FORWARD_FAILURE     (-1)
65#define FORWARD_CONGEST     (-2)
66//#define PANU_DISABLED TRUE
67
68#if (PAN_NAP_DISABLED == TRUE) && (PANU_DISABLED == TRUE)
69#define BTPAN_LOCAL_ROLE BTPAN_ROLE_NONE
70#elif PAN_NAP_DISABLED == TRUE
71#define BTPAN_LOCAL_ROLE BTPAN_ROLE_PANU
72#elif PANU_DISABLED == TRUE
73#define BTPAN_LOCAL_ROLE BTPAN_ROLE_PANNAP
74#else
75#define BTPAN_LOCAL_ROLE (BTPAN_ROLE_PANU | BTPAN_ROLE_PANNAP)
76#endif
77
78#define asrt(s) if(!(s)) BTIF_TRACE_ERROR3("btif_pan: ## %s assert %s failed at line:%d ##",__FUNCTION__, #s, __LINE__)
79
80#define MIN(x, y) (((x) < (y)) ? (x) : (y))
81
82btpan_cb_t btpan_cb;
83
84BD_ADDR local_addr;
85static int jni_initialized, stack_initialized;
86static bt_status_t btpan_jni_init(const btpan_callbacks_t* callbacks);
87static void btpan_jni_cleanup();
88static bt_status_t btpan_connect(const bt_bdaddr_t *bd_addr, int local_role, int remote_role);
89static bt_status_t btpan_disconnect(const bt_bdaddr_t *bd_addr);
90static bt_status_t btpan_enable(int local_role);
91static int btpan_get_local_role(void);
92
93static void btpan_tap_fd_signaled(int fd, int type, int flags, uint32_t user_id);
94static void btpan_cleanup_conn(btpan_conn_t* conn);
95static void bta_pan_callback(tBTA_PAN_EVT event, tBTA_PAN *p_data);
96static void btu_exec_tap_fd_read(void *p_param);
97
98static btpan_interface_t pan_if = {
99    sizeof(pan_if),
100    btpan_jni_init,
101    btpan_enable,
102    btpan_get_local_role,
103    btpan_connect,
104    btpan_disconnect,
105    btpan_jni_cleanup
106};
107
108btpan_interface_t *btif_pan_get_interface()
109{
110    return &pan_if;
111}
112
113/*******************************************************************************
114 **
115 ** Function        btif_pan_init
116 **
117 ** Description     initializes the pan interface
118 **
119 ** Returns         bt_status_t
120 **
121 *******************************************************************************/
122void btif_pan_init()
123{
124    BTIF_TRACE_DEBUG2("jni_initialized = %d, btpan_cb.enabled:%d", jni_initialized, btpan_cb.enabled);
125    stack_initialized = TRUE;
126    if (jni_initialized && !btpan_cb.enabled)
127    {
128        BTIF_TRACE_DEBUG0("Enabling PAN....");
129        memset(&btpan_cb, 0, sizeof(btpan_cb));
130        btpan_cb.tap_fd = -1;
131        btpan_cb.flow = 1;
132        int i;
133        for(i = 0; i < MAX_PAN_CONNS; i++)
134            btpan_cleanup_conn(&btpan_cb.conns[i]);
135        BTA_PanEnable(bta_pan_callback);
136        btpan_cb.enabled = 1;
137        btpan_enable(BTPAN_LOCAL_ROLE);
138    }
139}
140
141static void pan_disable()
142{
143    if(btpan_cb.enabled)
144    {
145        btpan_cb.enabled = 0;
146        BTA_PanDisable();
147        if(btpan_cb.tap_fd != -1)
148        {
149            btpan_tap_close(btpan_cb.tap_fd);
150            btpan_cb.tap_fd = -1;
151        }
152    }
153}
154
155void btif_pan_cleanup()
156{
157    if(stack_initialized)
158    {
159        //bt is shuting down, invalid all bta pan handles
160        int i;
161        for(i = 0; i < MAX_PAN_CONNS; i++)
162            btpan_cleanup_conn(&btpan_cb.conns[i]);
163        pan_disable();
164    }
165    stack_initialized = FALSE;
166}
167
168static btpan_callbacks_t callback;
169static bt_status_t btpan_jni_init(const btpan_callbacks_t* callbacks)
170{
171    BTIF_TRACE_DEBUG2("stack_initialized = %d, btpan_cb.enabled:%d", stack_initialized, btpan_cb.enabled);
172    jni_initialized = TRUE;
173    if(stack_initialized && !btpan_cb.enabled)
174        btif_pan_init();
175    callback = *callbacks;
176    return BT_STATUS_SUCCESS;
177}
178
179static void btpan_jni_cleanup()
180{
181    pan_disable();
182    jni_initialized = FALSE;
183}
184
185static inline int bta_role_to_btpan(int bta_pan_role)
186{
187    int btpan_role = 0;
188    BTIF_TRACE_DEBUG1("bta_pan_role:0x%x", bta_pan_role);
189    if(bta_pan_role & PAN_ROLE_NAP_SERVER)
190    {
191        btpan_role |= BTPAN_ROLE_PANNAP;
192    }
193    if(bta_pan_role & PAN_ROLE_CLIENT)
194    {
195        btpan_role |= BTPAN_ROLE_PANU;
196    }
197    return btpan_role;
198}
199
200static inline int btpan_role_to_bta(int btpan_role)
201{
202    int bta_pan_role = PAN_ROLE_INACTIVE;
203    BTIF_TRACE_DEBUG1("btpan_role:0x%x", btpan_role);
204    if(btpan_role & BTPAN_ROLE_PANNAP)
205    {
206        bta_pan_role |= PAN_ROLE_NAP_SERVER;
207    }
208    if(btpan_role & BTPAN_ROLE_PANU)
209    {
210        bta_pan_role |= PAN_ROLE_CLIENT;
211    }
212    return bta_pan_role;
213}
214
215static volatile int btpan_dev_local_role;
216static tBTA_PAN_ROLE_INFO bta_panu_info = {PANU_SERVICE_NAME, 0, PAN_SECURITY};
217static tBTA_PAN_ROLE_INFO bta_pan_nap_info = {PAN_NAP_SERVICE_NAME, 1, PAN_SECURITY};
218
219static bt_status_t btpan_enable(int local_role)
220{
221    int bta_pan_role;
222    BTIF_TRACE_DEBUG1("local_role:%d", local_role);
223    bta_pan_role = btpan_role_to_bta(local_role);
224#if BTA_PAN_INCLUDED == TRUE
225    BTA_PanSetRole(bta_pan_role, &bta_panu_info, NULL, &bta_pan_nap_info);
226    btpan_dev_local_role = local_role;
227    return BT_STATUS_SUCCESS;
228#else
229    return BT_STATUS_FAIL;
230#endif
231}
232
233static int btpan_get_local_role()
234{
235    BTIF_TRACE_DEBUG1("btpan_dev_local_role:%d", btpan_dev_local_role);
236    return btpan_dev_local_role;
237}
238
239static bt_status_t btpan_connect(const bt_bdaddr_t *bd_addr, int local_role, int remote_role)
240{
241    BTIF_TRACE_DEBUG2("local_role:%d, remote_role:%d", local_role, remote_role);
242    int bta_local_role = btpan_role_to_bta(local_role);
243    int bta_remote_role = btpan_role_to_bta(remote_role);
244    btpan_new_conn(-1, bd_addr->address, bta_local_role, bta_remote_role);
245    BTA_PanOpen((UINT8*)bd_addr->address, bta_local_role, bta_remote_role);
246    return BT_STATUS_SUCCESS;
247}
248
249static void btif_in_pan_generic_evt(UINT16 event, char *p_param)
250{
251    BTIF_TRACE_EVENT2("%s: event=%d", __FUNCTION__, event);
252    switch (event) {
253        case BTIF_PAN_CB_DISCONNECTING:
254        {
255            bt_bdaddr_t *bd_addr = (bt_bdaddr_t*)p_param;
256            btpan_conn_t* conn = btpan_find_conn_addr(bd_addr->address);
257            int btpan_conn_local_role;
258            int btpan_remote_role;
259            asrt(conn != NULL);
260            if (conn) {
261                btpan_conn_local_role = bta_role_to_btpan(conn->local_role);
262                btpan_remote_role = bta_role_to_btpan(conn->remote_role);
263                callback.connection_state_cb(BTPAN_STATE_DISCONNECTING, BT_STATUS_SUCCESS,
264                        (const bt_bdaddr_t*)conn->peer, btpan_conn_local_role, btpan_remote_role);
265            }
266        } break;
267        default:
268        {
269            BTIF_TRACE_WARNING2("%s : Unknown event 0x%x", __FUNCTION__, event);
270        }
271        break;
272    }
273}
274
275static bt_status_t btpan_disconnect(const bt_bdaddr_t *bd_addr)
276{
277    btpan_conn_t* conn = btpan_find_conn_addr(bd_addr->address);
278    if(conn && conn->handle >= 0)
279    {
280        BTA_PanClose(conn->handle);
281        /* Inform the application that the disconnect has been initiated successfully */
282        btif_transfer_context(btif_in_pan_generic_evt, BTIF_PAN_CB_DISCONNECTING,
283                              (char *)bd_addr, sizeof(bt_bdaddr_t), NULL);
284        return BT_STATUS_SUCCESS;
285    }
286    return BT_STATUS_FAIL;
287}
288
289static int pan_pth = -1;
290void create_tap_read_thread(int tap_fd)
291{
292    if(pan_pth < 0)
293        pan_pth = btsock_thread_create(btpan_tap_fd_signaled, NULL);
294    if(pan_pth >= 0)
295        btsock_thread_add_fd(pan_pth, tap_fd, 0, SOCK_THREAD_FD_RD, 0);
296}
297
298void destroy_tap_read_thread(void)
299{
300    if(pan_pth >= 0)
301    {
302        btsock_thread_exit(pan_pth);
303        pan_pth = -1;
304    }
305}
306
307static int tap_if_up(const char *devname, BD_ADDR addr)
308{
309    struct ifreq ifr;
310    int sk, err;
311
312    sk = socket(AF_INET, SOCK_DGRAM, 0);
313
314    //set mac addr
315    memset(&ifr, 0, sizeof(ifr));
316    strncpy(ifr.ifr_name, devname, IFNAMSIZ - 1);
317    err = ioctl(sk, SIOCGIFHWADDR, &ifr);
318    if(err < 0)
319    {
320        BTIF_TRACE_ERROR2("Could not get network hardware for interface:%s, errno:%s", devname, strerror(errno));
321        close(sk);
322        return -1;
323    }
324    /* debug("found mac address for interface:%s = %02x:%02x:%02x:%02x:%02x:%02x", devname, */
325    /*         ifr.ifr_hwaddr.sa_data[0], ifr.ifr_hwaddr.sa_data[1], ifr.ifr_hwaddr.sa_data[2], */
326    /*         ifr.ifr_hwaddr.sa_data[3], ifr.ifr_hwaddr.sa_data[4], ifr.ifr_hwaddr.sa_data[5]); */
327    strncpy(ifr.ifr_name, devname, IFNAMSIZ - 1);
328    memcpy(ifr.ifr_hwaddr.sa_data, addr, 6);
329    /* debug("setting bt address for interface:%s = %02x:%02x:%02x:%02x:%02x:%02x", devname, */
330    /*         ifr.ifr_hwaddr.sa_data[0], ifr.ifr_hwaddr.sa_data[1], ifr.ifr_hwaddr.sa_data[2], */
331    /*         ifr.ifr_hwaddr.sa_data[3], ifr.ifr_hwaddr.sa_data[4], ifr.ifr_hwaddr.sa_data[5]); */
332
333    err = ioctl(sk, SIOCSIFHWADDR, (caddr_t)&ifr);
334
335    if (err < 0) {
336        BTIF_TRACE_ERROR2("Could not set bt address for interface:%s, errno:%s", devname, strerror(errno));
337        close(sk);
338        return -1;
339    }
340
341    //bring it up
342    memset(&ifr, 0, sizeof(ifr));
343    strncpy(ifr.ifr_name, devname, IF_NAMESIZE - 1);
344
345    ifr.ifr_flags |= IFF_UP;
346    ifr.ifr_flags |= IFF_MULTICAST;
347
348    err = ioctl(sk, SIOCSIFFLAGS, (caddr_t) &ifr);
349
350
351    if (err < 0) {
352        BTIF_TRACE_ERROR2("Could not bring up network interface:%s, errno:%d", devname, errno);
353        close(sk);
354        return -1;
355    }
356    close(sk);
357    BTIF_TRACE_DEBUG1("network interface: %s is up", devname);
358    return 0;
359}
360
361static int tap_if_down(const char *devname)
362{
363    struct ifreq ifr;
364    int sk, err;
365
366    sk = socket(AF_INET, SOCK_DGRAM, 0);
367
368    memset(&ifr, 0, sizeof(ifr));
369    strncpy(ifr.ifr_name, devname, IF_NAMESIZE - 1);
370
371    ifr.ifr_flags &= ~IFF_UP;
372
373    err = ioctl(sk, SIOCSIFFLAGS, (caddr_t) &ifr);
374
375    close(sk);
376
377    return 0;
378}
379
380void btpan_set_flow_control(BOOLEAN enable) {
381    if (btpan_cb.tap_fd == -1)
382        return;
383
384    btpan_cb.flow = enable;
385    if (enable) {
386        btsock_thread_add_fd(pan_pth, btpan_cb.tap_fd, 0, SOCK_THREAD_FD_RD, 0);
387        bta_dmexecutecallback(btu_exec_tap_fd_read, (void *)btpan_cb.tap_fd);
388    }
389}
390
391int btpan_tap_open()
392{
393    struct ifreq ifr;
394    int fd, err;
395    const char *clonedev = "/dev/tun";
396
397    /* open the clone device */
398
399    //system("insmod /system/lib/modules/tun.ko");
400    if( (fd = open(clonedev, O_RDWR)) < 0 ) {
401
402        BTIF_TRACE_DEBUG2("could not open %s, err:%d", clonedev, errno);
403        return fd;
404    }
405
406    memset(&ifr, 0, sizeof(ifr));
407    ifr.ifr_flags = IFF_TAP | IFF_NO_PI;
408
409    strncpy(ifr.ifr_name, TAP_IF_NAME, IFNAMSIZ);
410
411    /* try to create the device */
412    if( (err = ioctl(fd, TUNSETIFF, (void *) &ifr)) < 0 )//|| tap_setup_ip(TAP_IF_NAME) == FALSE)
413    {
414        BTIF_TRACE_DEBUG2("ioctl error:%d, errno:%s", err, strerror(errno));
415        close(fd);
416        return err;
417    }
418    BTM_GetLocalDeviceAddr (local_addr);
419    if(tap_if_up(TAP_IF_NAME, local_addr) == 0)
420    {
421        return fd;
422    }
423    BTIF_TRACE_ERROR1("can not bring up tap interface:%s", TAP_IF_NAME);
424    close(fd);
425    return -1;
426}
427
428int btpan_tap_send(int tap_fd, const BD_ADDR src, const BD_ADDR dst, UINT16 proto, const char* buf,
429                    UINT16 len, BOOLEAN ext, BOOLEAN forward)
430{
431    UNUSED(ext);
432    UNUSED(forward);
433    if(tap_fd != -1)
434    {
435        tETH_HDR eth_hdr;
436        //if(is_empty_eth_addr(dst))
437        //    memcpy(&eth_hdr.h_dest, local_addr, ETH_ADDR_LEN);
438        //else
439        memcpy(&eth_hdr.h_dest, dst, ETH_ADDR_LEN);
440        memcpy(&eth_hdr.h_src, src, ETH_ADDR_LEN);
441        eth_hdr.h_proto = htons(proto);
442        char packet[2000];
443        memcpy(packet, &eth_hdr, sizeof(tETH_HDR));
444        if(len > 2000)
445        {
446            ALOGE("btpan_tap_send eth packet size:%d is exceeded limit!", len);
447            return -1;
448        }
449        memcpy(packet + sizeof(tETH_HDR), buf, len);
450
451        /* Send data to network interface */
452        //btnet_send(btpan_cb.conn[i].sock.sock, &buffer, (len + sizeof(tETH_HDR)));
453        //dump_bin("packet to network", packet, len + sizeof(tETH_HDR));
454        int ret = write(tap_fd, packet, len + sizeof(tETH_HDR));
455        BTIF_TRACE_DEBUG1("ret:%d", ret);
456        return ret;
457    }
458    return -1;
459
460}
461
462int btpan_tap_close(int fd)
463{
464    tap_if_down(TAP_IF_NAME);
465    close(fd);
466    if(pan_pth >= 0)
467        btsock_thread_wakeup(pan_pth);
468    return 0;
469}
470
471btpan_conn_t * btpan_find_conn_handle(UINT16 handle)
472{
473    int i;
474    for(i = 0; i < MAX_PAN_CONNS; i++)
475        if(btpan_cb.conns[i].handle == handle)
476            return &btpan_cb.conns[i];
477    return NULL;
478}
479
480btpan_conn_t* btpan_find_conn_addr(const BD_ADDR addr)
481{
482    int i;
483    for(i = 0; i < MAX_PAN_CONNS; i++)
484        if(memcmp(btpan_cb.conns[i].peer, addr, sizeof(BD_ADDR)) == 0)
485            return &btpan_cb.conns[i];
486    return NULL;
487}
488
489static void btpan_cleanup_conn(btpan_conn_t* conn)
490{
491    if(conn)
492    {
493        conn->handle = -1;
494        conn->state = -1;
495        memset(&conn->peer, 0, sizeof(conn->peer));
496        memset(&conn->eth_addr, 0, sizeof(conn->eth_addr));
497        conn->local_role = conn->remote_role = 0;
498    }
499}
500
501btpan_conn_t* btpan_new_conn(int handle, const BD_ADDR addr, int local_role, int remote_role )
502{
503    int i;
504    for(i = 0; i < MAX_PAN_CONNS; i++)
505    {
506        BTIF_TRACE_DEBUG2("conns[%d]:%d", i, btpan_cb.conns[i].handle);
507        if(btpan_cb.conns[i].handle == -1)
508        {
509            BTIF_TRACE_DEBUG3("handle:%d, local_role:%d, remote_role:%d", handle, local_role, remote_role);
510
511            btpan_cb.conns[i].handle = handle;
512            bdcpy(btpan_cb.conns[i].peer, addr);
513            btpan_cb.conns[i].local_role = local_role;
514            btpan_cb.conns[i].remote_role = remote_role;
515            return &btpan_cb.conns[i];
516        }
517    }
518    BTIF_TRACE_DEBUG1("MAX_PAN_CONNS:%d exceeded, return NULL as failed", MAX_PAN_CONNS);
519    return NULL;
520}
521
522void btpan_close_handle(btpan_conn_t *p)
523{
524    BTIF_TRACE_DEBUG1("btpan_close_handle : close handle %d", p->handle);
525    p->handle = -1;
526    p->local_role = -1;
527    p->remote_role = -1;
528    memset(&p->peer, 0, 6);
529}
530
531static inline int should_forward(tETH_HDR* hdr)
532{
533    if(ntohs(hdr->h_proto) == ETH_P_IP || ntohs(hdr->h_proto) == ETH_P_ARP)
534        return TRUE;
535    BTIF_TRACE_DEBUG1("unknown proto:%x", ntohs(hdr->h_proto));
536    return FALSE;
537}
538
539static int forward_bnep(tETH_HDR* eth_hdr, BT_HDR *hdr) {
540    int broadcast = eth_hdr->h_dest[0] & 1;
541    int i;
542
543    // Find the right connection to send this frame over.
544    for (i = 0; i < MAX_PAN_CONNS; i++) {
545        UINT16 handle = btpan_cb.conns[i].handle;
546        if (handle != (UINT16)-1 &&
547                (broadcast || memcmp(btpan_cb.conns[i].eth_addr, eth_hdr->h_dest, sizeof(BD_ADDR)) == 0
548                 || memcmp(btpan_cb.conns[i].peer, eth_hdr->h_dest, sizeof(BD_ADDR)) == 0)) {
549            int result = PAN_WriteBuf(handle, eth_hdr->h_dest, eth_hdr->h_src, ntohs(eth_hdr->h_proto), hdr, 0);
550            switch (result) {
551                case PAN_Q_SIZE_EXCEEDED:
552                    return FORWARD_CONGEST;
553                case PAN_SUCCESS:
554                    return FORWARD_SUCCESS;
555                default:
556                    return FORWARD_FAILURE;
557            }
558        }
559    }
560    GKI_freebuf(hdr);
561    return FORWARD_IGNORE;
562}
563
564static void bta_pan_callback_transfer(UINT16 event, char *p_param)
565{
566    tBTA_PAN *p_data = (tBTA_PAN *)p_param;
567    switch(event)
568    {
569        case BTA_PAN_ENABLE_EVT:
570            BTIF_TRACE_DEBUG0("BTA_PAN_ENABLE_EVT");
571            break;
572        case BTA_PAN_SET_ROLE_EVT:
573            {
574                int btpan_role = bta_role_to_btpan(p_data->set_role.role);
575                bt_status_t status = p_data->set_role.status == BTA_PAN_SUCCESS ? BT_STATUS_SUCCESS : BT_STATUS_FAIL;
576                btpan_control_state_t state = btpan_role == 0 ? BTPAN_STATE_DISABLED : BTPAN_STATE_ENABLED;
577                callback.control_state_cb(state, btpan_role, status, TAP_IF_NAME);
578                break;
579            }
580        case BTA_PAN_OPENING_EVT:
581            {
582                btpan_conn_t* conn;
583                bdstr_t bds;
584                bd2str((bt_bdaddr_t*)p_data->opening.bd_addr, &bds);
585                BTIF_TRACE_DEBUG2("BTA_PAN_OPENING_EVT handle %d, addr: %s", p_data->opening.handle, bds);
586                conn = btpan_find_conn_addr(p_data->opening.bd_addr);
587
588                asrt(conn != NULL);
589                if (conn)
590                {
591                    conn->handle = p_data->opening.handle;
592                    int btpan_conn_local_role = bta_role_to_btpan(conn->local_role);
593                    int btpan_remote_role = bta_role_to_btpan(conn->remote_role);
594                    callback.connection_state_cb(BTPAN_STATE_CONNECTING, BT_STATUS_SUCCESS,
595                            (const bt_bdaddr_t*)p_data->opening.bd_addr, btpan_conn_local_role, btpan_remote_role);
596                }
597                else
598                    BTIF_TRACE_ERROR0("connection not found");
599                break;
600            }
601        case BTA_PAN_OPEN_EVT:
602            {
603                /* debug("BTA_PAN_OPEN_EVT, open status:%d, bd_addr = [%02X:%02X:%02X:%02X:%02X:%02X]", */
604                /*         p_data->open.status, */
605                /*         p_data->open.bd_addr[0], p_data->open.bd_addr[1], p_data->open.bd_addr[2], */
606                /*         p_data->open.bd_addr[3], p_data->open.bd_addr[4], p_data->open.bd_addr[5]); */
607                btpan_connection_state_t state;
608                bt_status_t status;
609                if(p_data->open.status == BTA_PAN_SUCCESS)
610                {
611                    state = BTPAN_STATE_CONNECTED;
612                    status = BT_STATUS_SUCCESS;
613                }
614                else
615                {
616                    state = BTPAN_STATE_DISCONNECTED;
617                    status = BT_STATUS_FAIL;
618                }
619                btpan_conn_t* conn = btpan_find_conn_handle(p_data->open.handle);
620                /* debug("BTA_PAN_OPEN_EVT handle:%d, conn:%p",  p_data->open.handle, conn); */
621                /* debug("conn bta local_role:%d, bta remote role:%d", conn->local_role, conn->remote_role); */
622                int btpan_conn_local_role = bta_role_to_btpan(p_data->open.local_role);
623                /* debug("bta local_role:%d, bta remote role:%d", p_data->open.local_role, p_data->open.peer_role); */
624                int btpan_remote_role = bta_role_to_btpan(p_data->open.peer_role);
625                callback.connection_state_cb(state, status, (const bt_bdaddr_t*)p_data->open.bd_addr,
626                        btpan_conn_local_role, btpan_remote_role);
627                break;
628            }
629        case BTA_PAN_CLOSE_EVT:
630            {
631                btpan_conn_t* conn = btpan_find_conn_handle(p_data->close.handle);
632
633                ALOGI("%s: event = BTA_PAN_CLOSE_EVT handle %d", __FUNCTION__, p_data->close.handle);
634
635                if(conn && conn->handle >= 0)
636                {
637                    /* debug("BTA_PAN_CLOSE_EVT, conn local_role:%d, remote_role:%d", conn->local_role, conn->remote_role); */
638                    int btpan_conn_local_role = bta_role_to_btpan(conn->local_role);
639                    int btpan_remote_role = bta_role_to_btpan(conn->remote_role);
640                    callback.connection_state_cb(BTPAN_STATE_DISCONNECTED, 0, (const bt_bdaddr_t*)conn->peer,
641                            btpan_conn_local_role, btpan_remote_role);
642                    btpan_cleanup_conn(conn);
643                }
644                else
645                    BTIF_TRACE_ERROR1("pan handle not found (%d)", p_data->close.handle);
646                break;
647            }
648        default:
649            BTIF_TRACE_WARNING1("Unknown pan event %d", event);
650            break;
651    }
652}
653
654static void bta_pan_callback(tBTA_PAN_EVT event, tBTA_PAN *p_data)
655{
656    btif_transfer_context(bta_pan_callback_transfer, event, (char*)p_data, sizeof(tBTA_PAN), NULL);
657}
658
659#define IS_EXCEPTION(e) ((e) & (POLLHUP | POLLRDHUP | POLLERR | POLLNVAL))
660static void btu_exec_tap_fd_read(void *p_param) {
661    struct pollfd ufd;
662    int fd = (int)p_param;
663
664    if (fd == -1 || fd != btpan_cb.tap_fd)
665        return;
666
667    // Keep sending until someone either turns off BTIF or disables data the flow.
668    while (btif_is_enabled() && btpan_cb.flow) {
669        BT_HDR *buffer = (BT_HDR *)GKI_getpoolbuf(PAN_POOL_ID);
670        if (!buffer) {
671            BTIF_TRACE_WARNING1("%s unable to allocate buffer for packet.", __func__);
672            break;
673        }
674        buffer->offset = PAN_MINIMUM_OFFSET;
675        buffer->len = GKI_get_buf_size(buffer) - sizeof(BT_HDR) - buffer->offset;
676
677        UINT8 *packet = (UINT8 *)buffer + sizeof(BT_HDR) + buffer->offset;
678
679        // If we don't have an undelivered packet left over, pull one from the TAP driver.
680        // We save it in the congest_packet right away in case we can't deliver it in this
681        // attempt.
682        if (!btpan_cb.congest_packet_size) {
683            ssize_t ret = read(fd, btpan_cb.congest_packet, sizeof(btpan_cb.congest_packet));
684            switch (ret) {
685                case -1:
686                    BTIF_TRACE_ERROR2("%s unable to read from driver: %s", __func__, strerror(errno));
687                    GKI_freebuf(buffer);
688                    return;
689                case 0:
690                    BTIF_TRACE_WARNING1("%s end of file reached.", __func__);
691                    GKI_freebuf(buffer);
692                    return;
693                default:
694                    btpan_cb.congest_packet_size = ret;
695                    break;
696            }
697        }
698
699        memcpy(packet, btpan_cb.congest_packet, MIN(btpan_cb.congest_packet_size, buffer->len));
700        buffer->len = MIN(btpan_cb.congest_packet_size, buffer->len);
701
702        if (buffer->len > sizeof(tETH_HDR) && should_forward((tETH_HDR *)packet)) {
703            // Extract the ethernet header from the buffer since the PAN_WriteBuf inside
704            // forward_bnep can't handle two pointers that point inside the same GKI buffer.
705            tETH_HDR hdr;
706            memcpy(&hdr, packet, sizeof(tETH_HDR));
707
708            // Skip the ethernet header.
709            buffer->len -= sizeof(tETH_HDR);
710            buffer->offset += sizeof(tETH_HDR);
711            if (forward_bnep(&hdr, buffer) != FORWARD_CONGEST)
712                btpan_cb.congest_packet_size = 0;
713        } else {
714            BTIF_TRACE_WARNING2("%s dropping packet of length %d", __func__, buffer->len);
715            btpan_cb.congest_packet_size = 0;
716            GKI_freebuf(buffer);
717        }
718
719        // Bail out of the loop if reading from the TAP fd would block.
720        ufd.fd = fd;
721        ufd.events = POLLIN;
722        ufd.revents = 0;
723        if(poll(&ufd, 1, 0) <= 0 || IS_EXCEPTION(ufd.revents)) {
724            btsock_thread_add_fd(pan_pth, fd, 0, SOCK_THREAD_FD_RD, 0);
725            return;
726        }
727    }
728}
729
730static void btif_pan_close_all_conns() {
731    int i;
732    if (!stack_initialized)
733        return;
734
735    for (i = 0; i < MAX_PAN_CONNS; ++i)
736        if (btpan_cb.conns[i].handle != -1)
737            BTA_PanClose(btpan_cb.conns[i].handle);
738}
739
740static void btpan_tap_fd_signaled(int fd, int type, int flags, uint32_t user_id) {
741    assert(btpan_cb.tap_fd == fd);
742
743    if (btpan_cb.tap_fd != fd)
744        return;
745
746    if(flags & SOCK_THREAD_FD_EXCEPTION) {
747        btpan_cb.tap_fd = -1;
748        btpan_tap_close(fd);
749        btif_pan_close_all_conns();
750    } else if(flags & SOCK_THREAD_FD_RD)
751        bta_dmexecutecallback(btu_exec_tap_fd_read, (void *)fd);
752}
753