15738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project/****************************************************************************** 25738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 35738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * Copyright (C) 1999-2012 Broadcom Corporation 45738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 55738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * Licensed under the Apache License, Version 2.0 (the "License"); 65738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * you may not use this file except in compliance with the License. 75738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * You may obtain a copy of the License at: 85738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 95738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * http://www.apache.org/licenses/LICENSE-2.0 105738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 115738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * Unless required by applicable law or agreed to in writing, software 125738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * distributed under the License is distributed on an "AS IS" BASIS, 135738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 145738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * See the License for the specific language governing permissions and 155738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * limitations under the License. 165738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 175738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project ******************************************************************************/ 185738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 195738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project/****************************************************************************** 205738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 215738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * This file contains functions for the SMP L2Cap interface 225738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project * 235738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project ******************************************************************************/ 245738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 255738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project#include "bt_target.h" 265738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 275738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project#include <string.h> 285738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project#include "btm_ble_api.h" 295738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project#include "l2c_api.h" 305738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 315738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project#include "smp_int.h" 325738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 33911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonextern fixed_queue_t* btu_general_alarm_queue; 3478bcff79e1b1f0efce436b33bdd6da88745bfc8aPavlin Radoslavov 35d19e0785e662e640191a075eda07acce61c2aedaMarie Janssenstatic void smp_tx_complete_callback(uint16_t cid, uint16_t num_pkt); 365738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 37911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_connect_callback(uint16_t channel, BD_ADDR bd_addr, 38911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson bool connected, uint16_t reason, 39911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tBT_TRANSPORT transport); 40911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_data_received(uint16_t channel, BD_ADDR bd_addr, BT_HDR* p_buf); 41444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 42911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_br_connect_callback(uint16_t channel, BD_ADDR bd_addr, 43911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson bool connected, uint16_t reason, 44444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji tBT_TRANSPORT transport); 45911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_br_data_received(uint16_t channel, BD_ADDR bd_addr, 46911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson BT_HDR* p_buf); 475738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 485738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project/******************************************************************************* 49ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 50ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Function smp_l2cap_if_init 51ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 52ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Description This function is called during the SMP task startup 53ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * to register interface functions with L2CAP. 54ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 55ee96a3c60fca590d38025925c072d264e06493c4Myles Watson ******************************************************************************/ 56911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonvoid smp_l2cap_if_init(void) { 57911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tL2CAP_FIXED_CHNL_REG fixed_reg; 58911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT("SMDBG l2c %s", __func__); 59911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.fixed_chnl_opts.mode = L2CAP_FCR_BASIC_MODE; 60911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.fixed_chnl_opts.max_transmit = 0; 61911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.fixed_chnl_opts.rtrans_tout = 0; 62911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.fixed_chnl_opts.mon_tout = 0; 63911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.fixed_chnl_opts.mps = 0; 64911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.fixed_chnl_opts.tx_win_sz = 0; 65911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 66911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.pL2CA_FixedConn_Cb = smp_connect_callback; 67911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.pL2CA_FixedData_Cb = smp_data_received; 68911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.pL2CA_FixedTxComplete_Cb = smp_tx_complete_callback; 69911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 70911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.pL2CA_FixedCong_Cb = 71911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson NULL; /* do not handle congestion on this channel */ 72911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.default_idle_tout = 73911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 60; /* set 60 seconds timeout, 0xffff default idle timeout */ 74911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 75911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson L2CA_RegisterFixedChannel(L2CAP_SMP_CID, &fixed_reg); 76911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 77911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.pL2CA_FixedConn_Cb = smp_br_connect_callback; 78911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson fixed_reg.pL2CA_FixedData_Cb = smp_br_data_received; 79911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 80911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson L2CA_RegisterFixedChannel(L2CAP_SMP_BR_CID, &fixed_reg); 815738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project} 825738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 835738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project/******************************************************************************* 84ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 85ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Function smp_connect_callback 86ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 87ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Description This callback function is called by L2CAP to indicate that 88ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * SMP channel is 89ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * connected (conn = true)/disconnected (conn = false). 90ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 91ee96a3c60fca590d38025925c072d264e06493c4Myles Watson ******************************************************************************/ 92911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_connect_callback(uint16_t channel, BD_ADDR bd_addr, 93911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson bool connected, uint16_t reason, 94911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tBT_TRANSPORT transport) { 95911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_CB* p_cb = &smp_cb; 96911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_INT_DATA int_data; 97911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson BD_ADDR dummy_bda = {0}; 98911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 99911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT("SMDBG l2c %s", __func__); 100911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 101911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (transport == BT_TRANSPORT_BR_EDR || 102911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson memcmp(bd_addr, dummy_bda, BD_ADDR_LEN) == 0) 103911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson return; 104911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 105911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (memcmp(bd_addr, p_cb->pairing_bda, BD_ADDR_LEN) == 0) { 106911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT("%s() for pairing BDA: %08x%04x Event: %s", __func__, 107911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (bd_addr[0] << 24) + (bd_addr[1] << 16) + 108911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (bd_addr[2] << 8) + bd_addr[3], 109911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (bd_addr[4] << 8) + bd_addr[5], 110911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (connected) ? "connected" : "disconnected"); 111911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 112911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (connected) { 113911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (!p_cb->connect_initialized) { 114911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->connect_initialized = true; 115911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* initiating connection established */ 116911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->role = L2CA_GetBleConnRole(bd_addr); 117911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 118911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* initialize local i/r key to be default keys */ 119911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->local_r_key = p_cb->local_i_key = SMP_SEC_DEFAULT_KEY; 120911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->loc_auth_req = p_cb->peer_auth_req = SMP_DEFAULT_AUTH_REQ; 121911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->cb_evt = SMP_IO_CAP_REQ_EVT; 122911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_sm_event(p_cb, SMP_L2CAP_CONN_EVT, NULL); 123911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 124911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } else { 125911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson int_data.reason = reason; 126911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* Disconnected while doing security */ 127911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_sm_event(p_cb, SMP_L2CAP_DISCONN_EVT, &int_data); 1285738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project } 129911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 1305738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project} 1315738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 1325738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project/******************************************************************************* 133ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 134ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Function smp_data_received 135ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 136ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Description This function is called when data is received from L2CAP on 137ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * SMP channel. 138ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 139ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 140ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Returns void 141ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 142ee96a3c60fca590d38025925c072d264e06493c4Myles Watson ******************************************************************************/ 143911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_data_received(uint16_t channel, BD_ADDR bd_addr, 144911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson BT_HDR* p_buf) { 145911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_CB* p_cb = &smp_cb; 146911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson uint8_t* p = (uint8_t*)(p_buf + 1) + p_buf->offset; 147911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson uint8_t cmd; 148911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT("SMDBG l2c %s", __func__); 149911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 150911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson STREAM_TO_UINT8(cmd, p); 151911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 152911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* sanity check */ 153911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if ((SMP_OPCODE_MAX < cmd) || (SMP_OPCODE_MIN > cmd)) { 154911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_WARNING("Ignore received command with RESERVED code 0x%02x", cmd); 155911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson osi_free(p_buf); 156911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson return; 157911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 158911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 159911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* reject the pairing request if there is an on-going SMP pairing */ 160911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (SMP_OPCODE_PAIRING_REQ == cmd || SMP_OPCODE_SEC_REQ == cmd) { 161911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if ((p_cb->state == SMP_STATE_IDLE) && 162911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (p_cb->br_state == SMP_BR_STATE_IDLE) && 163911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson !(p_cb->flags & SMP_PAIR_FLAGS_WE_STARTED_DD)) { 164911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->role = L2CA_GetBleConnRole(bd_addr); 165911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson memcpy(&p_cb->pairing_bda[0], bd_addr, BD_ADDR_LEN); 166911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } else if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN)) { 167911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson osi_free(p_buf); 168911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_reject_unexpected_pairing_command(bd_addr); 169911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson return; 1707fa4fba6f59f97df00aff07dbe8fb21b114b3c2cGanesh Ganapathi Batta } 171911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* else, out of state pairing request/security request received, passed into 172911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson * SM */ 173911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 174911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 175911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN) == 0) { 176911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson alarm_set_on_queue(p_cb->smp_rsp_timer_ent, SMP_WAIT_FOR_RSP_TIMEOUT_MS, 177911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_rsp_timeout, NULL, btu_general_alarm_queue); 178911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 179911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (cmd == SMP_OPCODE_CONFIRM) { 180911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_DEBUG( 181911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson "in %s cmd = 0x%02x, peer_auth_req = 0x%02x," 182911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson "loc_auth_req = 0x%02x", 183911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson __func__, cmd, p_cb->peer_auth_req, p_cb->loc_auth_req); 184911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 185911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if ((p_cb->peer_auth_req & SMP_SC_SUPPORT_BIT) && 186911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (p_cb->loc_auth_req & SMP_SC_SUPPORT_BIT)) { 187911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson cmd = SMP_OPCODE_PAIR_COMMITM; 188911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 1895738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project } 1905738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 191911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->rcvd_cmd_code = cmd; 192911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->rcvd_cmd_len = (uint8_t)p_buf->len; 193911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_sm_event(p_cb, cmd, p); 194911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 1955738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project 196911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson osi_free(p_buf); 1975738f83aeb59361a0a2eda2460113f6dc919427The Android Open Source Project} 198444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 199444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji/******************************************************************************* 200ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 201ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Function smp_tx_complete_callback 202ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 203ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Description SMP channel tx complete callback 204ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 205ee96a3c60fca590d38025925c072d264e06493c4Myles Watson ******************************************************************************/ 206911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_tx_complete_callback(uint16_t cid, uint16_t num_pkt) { 207911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_CB* p_cb = &smp_cb; 208911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 209911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (p_cb->total_tx_unacked >= num_pkt) 210911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->total_tx_unacked -= num_pkt; 211911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson else 212911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_ERROR("Unexpected %s: num_pkt = %d", __func__, num_pkt); 213911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 214911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson uint8_t reason = SMP_SUCCESS; 215911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (p_cb->total_tx_unacked == 0 && p_cb->wait_for_authorization_complete) { 216911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (cid == L2CAP_SMP_CID) 217911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_sm_event(p_cb, SMP_AUTH_CMPL_EVT, &reason); 218444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji else 219911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_br_state_machine_event(p_cb, SMP_BR_AUTH_CMPL_EVT, &reason); 220911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 221444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji} 222444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 223444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji/******************************************************************************* 224ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 225ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Function smp_br_connect_callback 226ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 227ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Description This callback function is called by L2CAP to indicate that 228ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * SMP BR channel is 229ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * connected (conn = true)/disconnected (conn = false). 230ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 231ee96a3c60fca590d38025925c072d264e06493c4Myles Watson ******************************************************************************/ 232911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_br_connect_callback(uint16_t channel, BD_ADDR bd_addr, 233911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson bool connected, uint16_t reason, 234911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tBT_TRANSPORT transport) { 235911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_CB* p_cb = &smp_cb; 236911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_INT_DATA int_data; 237911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 238911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT("%s", __func__); 239911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 240911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (transport != BT_TRANSPORT_BR_EDR) { 241911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_WARNING("%s is called on unexpected transport %d", __func__, 242911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson transport); 243911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson return; 244911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 245911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 246911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (!(memcmp(bd_addr, p_cb->pairing_bda, BD_ADDR_LEN) == 0)) return; 247911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 248911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT( 249911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson "%s for pairing BDA: %08x%04x Event: %s", __func__, 250911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (bd_addr[0] << 24) + (bd_addr[1] << 16) + (bd_addr[2] << 8) + bd_addr[3], 251911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (bd_addr[4] << 8) + bd_addr[5], 252911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (connected) ? "connected" : "disconnected"); 253911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 254911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (connected) { 255911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (!p_cb->connect_initialized) { 256911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->connect_initialized = true; 257911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* initialize local i/r key to be default keys */ 258911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->local_r_key = p_cb->local_i_key = SMP_BR_SEC_DEFAULT_KEY; 259911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->loc_auth_req = p_cb->peer_auth_req = 0; 260911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->cb_evt = SMP_BR_KEYS_REQ_EVT; 261911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_br_state_machine_event(p_cb, SMP_BR_L2CAP_CONN_EVT, NULL); 262444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji } 263911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } else { 264911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson int_data.reason = reason; 265911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* Disconnected while doing security */ 266911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_br_state_machine_event(p_cb, SMP_BR_L2CAP_DISCONN_EVT, &int_data); 267911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 268444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji} 269444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 270444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji/******************************************************************************* 271ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 272ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Function smp_br_data_received 273ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 274ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Description This function is called when data is received from L2CAP on 275ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * SMP BR channel. 276ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 277ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * Returns void 278ee96a3c60fca590d38025925c072d264e06493c4Myles Watson * 279ee96a3c60fca590d38025925c072d264e06493c4Myles Watson ******************************************************************************/ 280911d1ae03efec2d54c3b1b605589d790d1745488Myles Watsonstatic void smp_br_data_received(uint16_t channel, BD_ADDR bd_addr, 281911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson BT_HDR* p_buf) { 282911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson tSMP_CB* p_cb = &smp_cb; 283911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson uint8_t* p = (uint8_t*)(p_buf + 1) + p_buf->offset; 284911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson uint8_t cmd; 285911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_EVENT("SMDBG l2c %s", __func__); 286911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 287911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson STREAM_TO_UINT8(cmd, p); 288911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 289911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* sanity check */ 290911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if ((SMP_OPCODE_MAX < cmd) || (SMP_OPCODE_MIN > cmd)) { 291911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson SMP_TRACE_WARNING("Ignore received command with RESERVED code 0x%02x", cmd); 292911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson osi_free(p_buf); 293911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson return; 294911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 295911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson 296911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* reject the pairing request if there is an on-going SMP pairing */ 297911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (SMP_OPCODE_PAIRING_REQ == cmd) { 298911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if ((p_cb->state == SMP_STATE_IDLE) && 299911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson (p_cb->br_state == SMP_BR_STATE_IDLE)) { 300911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->role = HCI_ROLE_SLAVE; 301911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->smp_over_br = true; 302911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson memcpy(&p_cb->pairing_bda[0], bd_addr, BD_ADDR_LEN); 303911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } else if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN)) { 304911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson osi_free(p_buf); 305911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_reject_unexpected_pairing_command(bd_addr); 306911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson return; 307444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji } 308911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson /* else, out of state pairing request received, passed into State Machine */ 309911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 310444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 311911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson if (memcmp(&bd_addr[0], p_cb->pairing_bda, BD_ADDR_LEN) == 0) { 312911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson alarm_set_on_queue(p_cb->smp_rsp_timer_ent, SMP_WAIT_FOR_RSP_TIMEOUT_MS, 313911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_rsp_timeout, NULL, btu_general_alarm_queue); 314444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 315911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->rcvd_cmd_code = cmd; 316911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson p_cb->rcvd_cmd_len = (uint8_t)p_buf->len; 317911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson smp_br_state_machine_event(p_cb, cmd, p); 318911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson } 319444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji 320911d1ae03efec2d54c3b1b605589d790d1745488Myles Watson osi_free(p_buf); 321444a8da807abaf5f9e813ce70c56a79160495fb3Satya Calloji} 322