1/******************************************************************************
2 *
3 *  Copyright (C) 2003-2012 Broadcom Corporation
4 *
5 *  Licensed under the Apache License, Version 2.0 (the "License");
6 *  you may not use this file except in compliance with the License.
7 *  You may obtain a copy of the License at:
8 *
9 *  http://www.apache.org/licenses/LICENSE-2.0
10 *
11 *  Unless required by applicable law or agreed to in writing, software
12 *  distributed under the License is distributed on an "AS IS" BASIS,
13 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14 *  See the License for the specific language governing permissions and
15 *  limitations under the License.
16 *
17 ******************************************************************************/
18
19/******************************************************************************
20 *
21 *  This file contains the audio gateway functions performing SDP
22 *  operations.
23 *
24 ******************************************************************************/
25
26#include <string.h>
27
28#include "bt_common.h"
29#include "bta_ag_api.h"
30#include "bta_ag_int.h"
31#include "bta_api.h"
32#include "bta_sys.h"
33#include "btm_api.h"
34#include "osi/include/osi.h"
35#include "sdp_api.h"
36#include "utl.h"
37
38/* Number of protocol elements in protocol element list. */
39#define BTA_AG_NUM_PROTO_ELEMS 2
40
41/* Number of elements in service class id list. */
42#define BTA_AG_NUM_SVC_ELEMS 2
43
44/* size of database for service discovery */
45#ifndef BTA_AG_DISC_BUF_SIZE
46#define BTA_AG_DISC_BUF_SIZE BT_DEFAULT_BUFFER_SIZE
47#endif
48
49/* declare sdp callback functions */
50void bta_ag_sdp_cback_1(uint16_t status);
51void bta_ag_sdp_cback_2(uint16_t status);
52void bta_ag_sdp_cback_3(uint16_t status);
53
54/* SDP callback function table */
55typedef tSDP_DISC_CMPL_CB* tBTA_AG_SDP_CBACK;
56const tBTA_AG_SDP_CBACK bta_ag_sdp_cback_tbl[] = {
57    bta_ag_sdp_cback_1, bta_ag_sdp_cback_2, bta_ag_sdp_cback_3};
58
59/*******************************************************************************
60 *
61 * Function         bta_ag_sdp_cback
62 *
63 * Description      SDP callback function.
64 *
65 *
66 * Returns          void
67 *
68 ******************************************************************************/
69static void bta_ag_sdp_cback(uint16_t status, uint8_t idx) {
70  uint16_t event;
71  tBTA_AG_SCB* p_scb;
72
73  APPL_TRACE_DEBUG("%s status:0x%x", __func__, status);
74
75  p_scb = bta_ag_scb_by_idx(idx);
76  if (p_scb != NULL) {
77    /* set event according to int/acp */
78    if (p_scb->role == BTA_AG_ACP) {
79      event = BTA_AG_DISC_ACP_RES_EVT;
80    } else {
81      event = BTA_AG_DISC_INT_RES_EVT;
82    }
83
84    tBTA_AG_DISC_RESULT* p_buf =
85        (tBTA_AG_DISC_RESULT*)osi_malloc(sizeof(tBTA_AG_DISC_RESULT));
86    p_buf->hdr.event = event;
87    p_buf->hdr.layer_specific = idx;
88    p_buf->status = status;
89    bta_sys_sendmsg(p_buf);
90  }
91}
92
93/*******************************************************************************
94 *
95 * Function         bta_ag_sdp_cback_1 to 3
96 *
97 * Description      SDP callback functions.  Since there is no way to
98 *                  distinguish scb from the callback we need separate
99 *                  callbacks for each scb.
100 *
101 *
102 * Returns          void
103 *
104 ******************************************************************************/
105void bta_ag_sdp_cback_1(uint16_t status) { bta_ag_sdp_cback(status, 1); }
106void bta_ag_sdp_cback_2(uint16_t status) { bta_ag_sdp_cback(status, 2); }
107void bta_ag_sdp_cback_3(uint16_t status) { bta_ag_sdp_cback(status, 3); }
108
109/******************************************************************************
110 *
111 * Function         bta_ag_add_record
112 *
113 * Description      This function is called by a server application to add
114 *                  HSP or HFP information to an SDP record.  Prior to
115 *                  calling this function the application must call
116 *                  SDP_CreateRecord() to create an SDP record.
117 *
118 * Returns          true if function execution succeeded,
119 *                  false if function execution failed.
120 *
121 *****************************************************************************/
122bool bta_ag_add_record(uint16_t service_uuid, char* p_service_name, uint8_t scn,
123                       tBTA_AG_FEAT features, uint32_t sdp_handle) {
124  tSDP_PROTOCOL_ELEM proto_elem_list[BTA_AG_NUM_PROTO_ELEMS];
125  uint16_t svc_class_id_list[BTA_AG_NUM_SVC_ELEMS];
126  uint16_t browse_list[] = {UUID_SERVCLASS_PUBLIC_BROWSE_GROUP};
127  uint16_t version;
128  uint16_t profile_uuid;
129  uint8_t network;
130  bool result = true;
131  bool codec_supported = false;
132  uint8_t buf[2];
133
134  APPL_TRACE_DEBUG("%s uuid: %x", __func__, service_uuid);
135
136  memset(proto_elem_list, 0,
137         BTA_AG_NUM_PROTO_ELEMS * sizeof(tSDP_PROTOCOL_ELEM));
138
139  /* add the protocol element sequence */
140  proto_elem_list[0].protocol_uuid = UUID_PROTOCOL_L2CAP;
141  proto_elem_list[0].num_params = 0;
142  proto_elem_list[1].protocol_uuid = UUID_PROTOCOL_RFCOMM;
143  proto_elem_list[1].num_params = 1;
144  proto_elem_list[1].params[0] = scn;
145  result &=
146      SDP_AddProtocolList(sdp_handle, BTA_AG_NUM_PROTO_ELEMS, proto_elem_list);
147
148  /* add service class id list */
149  svc_class_id_list[0] = service_uuid;
150  svc_class_id_list[1] = UUID_SERVCLASS_GENERIC_AUDIO;
151  result &= SDP_AddServiceClassIdList(sdp_handle, BTA_AG_NUM_SVC_ELEMS,
152                                      svc_class_id_list);
153
154  /* add profile descriptor list */
155  if (service_uuid == UUID_SERVCLASS_AG_HANDSFREE) {
156    profile_uuid = UUID_SERVCLASS_HF_HANDSFREE;
157    version = BTA_HFP_VERSION;
158  } else {
159    profile_uuid = UUID_SERVCLASS_HEADSET;
160    version = HSP_VERSION_1_2;
161  }
162  result &= SDP_AddProfileDescriptorList(sdp_handle, profile_uuid, version);
163
164  /* add service name */
165  if (p_service_name != NULL && p_service_name[0] != 0) {
166    result &= SDP_AddAttribute(
167        sdp_handle, ATTR_ID_SERVICE_NAME, TEXT_STR_DESC_TYPE,
168        (uint32_t)(strlen(p_service_name) + 1), (uint8_t*)p_service_name);
169  }
170
171  /* add features and network */
172  if (service_uuid == UUID_SERVCLASS_AG_HANDSFREE) {
173    network = (features & BTA_AG_FEAT_REJECT) ? 1 : 0;
174    result &= SDP_AddAttribute(sdp_handle, ATTR_ID_DATA_STORES_OR_NETWORK,
175                               UINT_DESC_TYPE, 1, &network);
176
177    if (features & BTA_AG_FEAT_CODEC) codec_supported = true;
178
179    features &= BTA_AG_SDP_FEAT_SPEC;
180
181    /* Codec bit position is different in SDP and in BRSF */
182    if (codec_supported) features |= 0x0020;
183
184    UINT16_TO_BE_FIELD(buf, features);
185    result &= SDP_AddAttribute(sdp_handle, ATTR_ID_SUPPORTED_FEATURES,
186                               UINT_DESC_TYPE, 2, buf);
187  }
188
189  /* add browse group list */
190  result &= SDP_AddUuidSequence(sdp_handle, ATTR_ID_BROWSE_GROUP_LIST, 1,
191                                browse_list);
192
193  return result;
194}
195
196/*******************************************************************************
197 *
198 * Function         bta_ag_create_records
199 *
200 * Description      Create SDP records for registered services.
201 *
202 *
203 * Returns          void
204 *
205 ******************************************************************************/
206void bta_ag_create_records(tBTA_AG_SCB* p_scb, tBTA_AG_DATA* p_data) {
207  int i;
208  tBTA_SERVICE_MASK services;
209
210  services = p_scb->reg_services >> BTA_HSP_SERVICE_ID;
211  for (i = 0; i < BTA_AG_NUM_IDX && services != 0; i++, services >>= 1) {
212    /* if service is set in mask */
213    if (services & 1) {
214      /* add sdp record if not already registered */
215      if (bta_ag_cb.profile[i].sdp_handle == 0) {
216        bta_ag_cb.profile[i].sdp_handle = SDP_CreateRecord();
217        bta_ag_cb.profile[i].scn = BTM_AllocateSCN();
218        bta_ag_add_record(bta_ag_uuid[i], p_data->api_register.p_name[i],
219                          bta_ag_cb.profile[i].scn,
220                          p_data->api_register.features,
221                          bta_ag_cb.profile[i].sdp_handle);
222        bta_sys_add_uuid(bta_ag_uuid[i]);
223      }
224    }
225  }
226
227  p_scb->hsp_version = HSP_VERSION_1_2;
228}
229
230/*******************************************************************************
231 *
232 * Function         bta_ag_del_records
233 *
234 * Description      Delete SDP records for any registered services.
235 *
236 *
237 * Returns          void
238 *
239 ******************************************************************************/
240void bta_ag_del_records(tBTA_AG_SCB* p_scb, UNUSED_ATTR tBTA_AG_DATA* p_data) {
241  tBTA_AG_SCB* p = &bta_ag_cb.scb[0];
242  tBTA_SERVICE_MASK services;
243  tBTA_SERVICE_MASK others = 0;
244  int i;
245
246  /* get services of all other registered servers */
247  for (i = 0; i < BTA_AG_NUM_IDX; i++, p++) {
248    if (p_scb == p) {
249      continue;
250    }
251
252    if (p->in_use && p->dealloc == false) {
253      others |= p->reg_services;
254    }
255  }
256
257  others >>= BTA_HSP_SERVICE_ID;
258  services = p_scb->reg_services >> BTA_HSP_SERVICE_ID;
259  for (i = 0; i < BTA_AG_NUM_IDX && services != 0;
260       i++, services >>= 1, others >>= 1) {
261    /* if service registered for this scb and not registered for any other scb
262     */
263    if (((services & 1) == 1) && ((others & 1) == 0)) {
264      APPL_TRACE_DEBUG("bta_ag_del_records %d", i);
265      if (bta_ag_cb.profile[i].sdp_handle != 0) {
266        SDP_DeleteRecord(bta_ag_cb.profile[i].sdp_handle);
267        bta_ag_cb.profile[i].sdp_handle = 0;
268      }
269      BTM_FreeSCN(bta_ag_cb.profile[i].scn);
270      BTM_SecClrService(bta_ag_sec_id[i]);
271      bta_sys_remove_uuid(bta_ag_uuid[i]);
272    }
273  }
274}
275
276/*******************************************************************************
277 *
278 * Function         bta_ag_sdp_find_attr
279 *
280 * Description      Process SDP discovery results to find requested attributes
281 *                  for requested service.
282 *
283 *
284 * Returns          true if results found, false otherwise.
285 *
286 ******************************************************************************/
287bool bta_ag_sdp_find_attr(tBTA_AG_SCB* p_scb, tBTA_SERVICE_MASK service) {
288  tSDP_DISC_REC* p_rec = NULL;
289  tSDP_DISC_ATTR* p_attr;
290  tSDP_PROTOCOL_ELEM pe;
291  uint16_t uuid;
292  bool result = false;
293
294  if (service & BTA_HFP_SERVICE_MASK) {
295    uuid = UUID_SERVCLASS_HF_HANDSFREE;
296    p_scb->peer_version = HFP_VERSION_1_1; /* Default version */
297  } else if (service & BTA_HSP_SERVICE_MASK && p_scb->role == BTA_AG_INT) {
298    uuid = UUID_SERVCLASS_HEADSET_HS;
299    p_scb->peer_version = HSP_VERSION_1_2; /* Default version */
300  } else {
301    return result;
302  }
303
304  /* loop through all records we found */
305  while (true) {
306    /* get next record; if none found, we're done */
307    p_rec = SDP_FindServiceInDb(p_scb->p_disc_db, uuid, p_rec);
308    if (p_rec == NULL) {
309      if (uuid == UUID_SERVCLASS_HEADSET_HS) {
310        /* Search again in case the peer device uses the old HSP UUID */
311        uuid = UUID_SERVCLASS_HEADSET;
312        p_scb->peer_version = HSP_VERSION_1_0;
313        p_rec = SDP_FindServiceInDb(p_scb->p_disc_db, uuid, p_rec);
314        if (p_rec == NULL) {
315          break;
316        }
317      } else
318        break;
319    }
320
321    /* get scn from proto desc list if initiator */
322    if (p_scb->role == BTA_AG_INT) {
323      if (SDP_FindProtocolListElemInRec(p_rec, UUID_PROTOCOL_RFCOMM, &pe)) {
324        p_scb->peer_scn = (uint8_t)pe.params[0];
325      } else {
326        continue;
327      }
328    }
329
330    /* get profile version (if failure, version parameter is not updated) */
331    if (!SDP_FindProfileVersionInRec(p_rec, uuid, &p_scb->peer_version)) {
332      APPL_TRACE_WARNING("%s: Get peer_version failed, using default 0x%04x",
333                         __func__, p_scb->peer_version);
334    }
335
336    /* get features if HFP */
337    if (service & BTA_HFP_SERVICE_MASK) {
338      p_attr = SDP_FindAttributeInRec(p_rec, ATTR_ID_SUPPORTED_FEATURES);
339      if (p_attr != NULL) {
340        /* Found attribute. Get value. */
341        /* There might be race condition between SDP and BRSF.  */
342        /* Do not update if we already received BRSF.           */
343        if (p_scb->peer_features == 0)
344          p_scb->peer_features = p_attr->attr_value.v.u16;
345      }
346    } else /* HSP */
347    {
348      p_attr =
349          SDP_FindAttributeInRec(p_rec, ATTR_ID_REMOTE_AUDIO_VOLUME_CONTROL);
350      if (p_attr != NULL) {
351        /* Remote volume control of HSP */
352        if (p_attr->attr_value.v.u8)
353          p_scb->peer_features |= BTA_AG_PEER_FEAT_VOL;
354        else
355          p_scb->peer_features &= ~BTA_AG_PEER_FEAT_VOL;
356      }
357    }
358
359    /* found what we needed */
360    result = true;
361    break;
362  }
363  return result;
364}
365
366/*******************************************************************************
367 *
368 * Function         bta_ag_do_disc
369 *
370 * Description      Do service discovery.
371 *
372 *
373 * Returns          void
374 *
375 ******************************************************************************/
376void bta_ag_do_disc(tBTA_AG_SCB* p_scb, tBTA_SERVICE_MASK service) {
377  tSDP_UUID uuid_list[1];
378  uint16_t num_uuid = 1;
379  uint16_t attr_list[4];
380  uint8_t num_attr;
381  bool db_inited = false;
382
383  /* HFP initiator; get proto list and features */
384  if (service & BTA_HFP_SERVICE_MASK && p_scb->role == BTA_AG_INT) {
385    attr_list[0] = ATTR_ID_SERVICE_CLASS_ID_LIST;
386    attr_list[1] = ATTR_ID_PROTOCOL_DESC_LIST;
387    attr_list[2] = ATTR_ID_BT_PROFILE_DESC_LIST;
388    attr_list[3] = ATTR_ID_SUPPORTED_FEATURES;
389    num_attr = 4;
390    uuid_list[0].uu.uuid16 = UUID_SERVCLASS_HF_HANDSFREE;
391  }
392  /* HFP acceptor; get features */
393  else if (service & BTA_HFP_SERVICE_MASK && p_scb->role == BTA_AG_ACP) {
394    attr_list[0] = ATTR_ID_SERVICE_CLASS_ID_LIST;
395    attr_list[1] = ATTR_ID_BT_PROFILE_DESC_LIST;
396    attr_list[2] = ATTR_ID_SUPPORTED_FEATURES;
397    num_attr = 3;
398    uuid_list[0].uu.uuid16 = UUID_SERVCLASS_HF_HANDSFREE;
399  }
400  /* HSP initiator; get proto list */
401  else if (service & BTA_HSP_SERVICE_MASK && p_scb->role == BTA_AG_INT) {
402    attr_list[0] = ATTR_ID_SERVICE_CLASS_ID_LIST;
403    attr_list[1] = ATTR_ID_PROTOCOL_DESC_LIST;
404    attr_list[2] = ATTR_ID_BT_PROFILE_DESC_LIST;
405    attr_list[3] = ATTR_ID_REMOTE_AUDIO_VOLUME_CONTROL;
406    num_attr = 4;
407    // Although UUID_SERVCLASS_HEADSET_HS (0x1131) is to be used in HSP 1.2,
408    // some HSP 1.2 implementations, such as PTS, still use
409    // UUID_SERVCLASS_HEADSET (0x1108) to store its service record. However,
410    // most of such devices are HSP 1.0 devices.
411    if (p_scb->hsp_version >= HSP_VERSION_1_2) {
412      uuid_list[0].uu.uuid16 = UUID_SERVCLASS_HEADSET_HS;
413    } else {
414      uuid_list[0].uu.uuid16 = UUID_SERVCLASS_HEADSET;
415    }
416  }
417  /* HSP acceptor; no discovery */
418  else {
419    return;
420  }
421
422  /* allocate buffer for sdp database */
423  p_scb->p_disc_db = (tSDP_DISCOVERY_DB*)osi_malloc(BTA_AG_DISC_BUF_SIZE);
424  /* set up service discovery database; attr happens to be attr_list len */
425  uuid_list[0].len = LEN_UUID_16;
426  db_inited = SDP_InitDiscoveryDb(p_scb->p_disc_db, BTA_AG_DISC_BUF_SIZE,
427                                  num_uuid, uuid_list, num_attr, attr_list);
428
429  if (db_inited) {
430    /*Service discovery not initiated */
431    db_inited = SDP_ServiceSearchAttributeRequest(
432        p_scb->peer_addr, p_scb->p_disc_db,
433        bta_ag_sdp_cback_tbl[bta_ag_scb_to_idx(p_scb) - 1]);
434  }
435
436  if (!db_inited) {
437    /*free discover db */
438    bta_ag_free_db(p_scb, NULL);
439    /* sent failed event */
440    bta_ag_sm_execute(p_scb, BTA_AG_DISC_FAIL_EVT, NULL);
441  }
442}
443
444/*******************************************************************************
445 *
446 * Function         bta_ag_free_db
447 *
448 * Description      Free discovery database.
449 *
450 *
451 * Returns          void
452 *
453 ******************************************************************************/
454void bta_ag_free_db(tBTA_AG_SCB* p_scb, UNUSED_ATTR tBTA_AG_DATA* p_data) {
455  osi_free_and_reset((void**)&p_scb->p_disc_db);
456}
457