xref: /btstack/src/classic/avrcp_browsing_target.c (revision 3c4cc6427fe05577c00b7d2593f58c7abcf9eab7)
1 /*
2  * Copyright (C) 2016 BlueKitchen GmbH
3  *
4  * Redistribution and use in source and binary forms, with or without
5  * modification, are permitted provided that the following conditions
6  * are met:
7  *
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. Neither the name of the copyright holders nor the names of
14  *    contributors may be used to endorse or promote products derived
15  *    from this software without specific prior written permission.
16  * 4. Any redistribution, use, or modification is done solely for
17  *    personal benefit and not for any commercial purpose or for
18  *    monetary gain.
19  *
20  * THIS SOFTWARE IS PROVIDED BY BLUEKITCHEN GMBH AND CONTRIBUTORS
21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
23  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL MATTHIAS
24  * RINGWALD OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
25  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
26  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
27  * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
28  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
29  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
30  * THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  *
33  * Please inquire about commercial licensing options at
34  * [email protected]
35  *
36  */
37 
38 #define BTSTACK_FILE__ "avrcp_browsing_target.c"
39 
40 #include <stdint.h>
41 #include <stdio.h>
42 #include <stdlib.h>
43 #include <string.h>
44 #include <inttypes.h>
45 #include "btstack.h"
46 #include "classic/avrcp.h"
47 #include "classic/avrcp_browsing_target.h"
48 
49 #define PSM_AVCTP_BROWSING              0x001b
50 
51 static void avrcp_browser_packet_handler(uint8_t packet_type, uint16_t channel, uint8_t *packet, uint16_t size, avrcp_context_t * context);
52 static void avrcp_browsing_target_packet_handler(uint8_t packet_type, uint16_t channel, uint8_t *packet, uint16_t size);
53 
54 static void avrcp_browsing_target_request_can_send_now(avrcp_browsing_connection_t * connection, uint16_t l2cap_cid){
55     connection->wait_to_send = 1;
56     l2cap_request_can_send_now_event(l2cap_cid);
57 }
58 
59 static int avrcp_browsing_target_handle_can_send_now(avrcp_browsing_connection_t * connection){
60     int pos = 0;
61     // printf("avrcp_browsing_target_handle_can_send_now, cmd_operands_length %d\n", connection->cmd_operands_length);
62     // printf_hexdump(connection->cmd_operands, connection->cmd_operands_length);
63 
64     // l2cap_reserve_packet_buffer();
65     // uint8_t * packet = l2cap_get_outgoing_buffer();
66     uint8_t packet[300];
67     connection->packet_type = AVRCP_SINGLE_PACKET;
68 
69     packet[pos++] = (connection->transaction_label << 4) | (connection->packet_type << 2) | (AVRCP_RESPONSE_FRAME << 1) | 0;
70     // Profile IDentifier (PID)
71     packet[pos++] = BLUETOOTH_SERVICE_CLASS_AV_REMOTE_CONTROL >> 8;
72     packet[pos++] = BLUETOOTH_SERVICE_CLASS_AV_REMOTE_CONTROL & 0x00FF;
73     memcpy(packet+pos, connection->cmd_operands, connection->cmd_operands_length);
74 
75     pos += connection->cmd_operands_length;
76     connection->wait_to_send = 0;
77     // return l2cap_send_prepared(connection->l2cap_browsing_cid, pos);
78     return l2cap_send(connection->l2cap_browsing_cid, packet, pos);
79 }
80 
81 
82 static uint8_t avrcp_browsing_target_response_general_reject(avrcp_browsing_connection_t * connection, avrcp_status_code_t status){
83     // AVRCP_CTYPE_RESPONSE_REJECTED
84     int pos = 0;
85     connection->cmd_operands[pos++] = AVRCP_PDU_ID_GENERAL_REJECT;
86     // connection->cmd_operands[pos++] = 0;
87     // param length
88     big_endian_store_16(connection->cmd_operands, pos, 1);
89     pos += 2;
90     connection->cmd_operands[pos++] = status;
91     connection->cmd_operands_length = 4;
92     connection->state = AVCTP_W2_SEND_RESPONSE;
93     avrcp_browsing_target_request_can_send_now(connection, connection->l2cap_browsing_cid);
94     return ERROR_CODE_SUCCESS;
95 }
96 
97 static void avrcp_browsing_target_emit_get_folder_items(btstack_packet_handler_t callback, uint16_t browsing_cid, avrcp_browsing_connection_t * connection){
98     if (!callback) return;
99     uint8_t event[10];
100     int pos = 0;
101     event[pos++] = HCI_EVENT_AVRCP_META;
102     event[pos++] = sizeof(event) - 2;
103     event[pos++] = AVRCP_SUBEVENT_BROWSING_GET_FOLDER_ITEMS;
104     little_endian_store_16(event, pos, browsing_cid);
105     pos += 2;
106     event[pos++] = connection->scope;
107     big_endian_store_32(event, pos, connection->attr_bitmap);
108     pos += 4;
109     (*callback)(HCI_EVENT_PACKET, 0, event, sizeof(event));
110 }
111 
112 static void avrcp_browsing_target_emit_get_total_num_items(btstack_packet_handler_t callback, uint16_t browsing_cid, avrcp_browsing_connection_t * connection){
113     if (!callback) return;
114     uint8_t event[10];
115     int pos = 0;
116     event[pos++] = HCI_EVENT_AVRCP_META;
117     event[pos++] = sizeof(event) - 2;
118     event[pos++] = AVRCP_SUBEVENT_BROWSING_GET_TOTAL_NUM_ITEMS;
119     little_endian_store_16(event, pos, browsing_cid);
120     pos += 2;
121     event[pos++] = connection->scope;
122     (*callback)(HCI_EVENT_PACKET, 0, event, sizeof(event));
123 }
124 
125 static void avrcp_emit_browsing_connection_established(btstack_packet_handler_t callback, uint16_t browsing_cid, bd_addr_t addr, uint8_t status){
126     if (!callback) return;
127     uint8_t event[12];
128     int pos = 0;
129     event[pos++] = HCI_EVENT_AVRCP_META;
130     event[pos++] = sizeof(event) - 2;
131     event[pos++] = AVRCP_SUBEVENT_BROWSING_CONNECTION_ESTABLISHED;
132     event[pos++] = status;
133     reverse_bd_addr(addr,&event[pos]);
134     pos += 6;
135     little_endian_store_16(event, pos, browsing_cid);
136     pos += 2;
137     (*callback)(HCI_EVENT_PACKET, 0, event, sizeof(event));
138 }
139 
140 static void avrcp_emit_incoming_browsing_connection(btstack_packet_handler_t callback, uint16_t browsing_cid, bd_addr_t addr){
141     if (!callback) return;
142     uint8_t event[11];
143     int pos = 0;
144     event[pos++] = HCI_EVENT_AVRCP_META;
145     event[pos++] = sizeof(event) - 2;
146     event[pos++] = AVRCP_SUBEVENT_INCOMING_BROWSING_CONNECTION;
147     reverse_bd_addr(addr,&event[pos]);
148     pos += 6;
149     little_endian_store_16(event, pos, browsing_cid);
150     pos += 2;
151     (*callback)(HCI_EVENT_PACKET, 0, event, sizeof(event));
152 }
153 
154 static void avrcp_emit_browsing_connection_closed(btstack_packet_handler_t callback, uint16_t browsing_cid){
155     if (!callback) return;
156     uint8_t event[5];
157     int pos = 0;
158     event[pos++] = HCI_EVENT_AVRCP_META;
159     event[pos++] = sizeof(event) - 2;
160     event[pos++] = AVRCP_SUBEVENT_BROWSING_CONNECTION_RELEASED;
161     little_endian_store_16(event, pos, browsing_cid);
162     pos += 2;
163     (*callback)(HCI_EVENT_PACKET, 0, event, sizeof(event));
164 }
165 
166 static avrcp_browsing_connection_t * avrcp_browsing_create_connection(avrcp_connection_t * avrcp_connection){
167     avrcp_browsing_connection_t * connection = btstack_memory_avrcp_browsing_connection_get();
168     connection->state = AVCTP_CONNECTION_IDLE;
169     connection->transaction_label = 0xFF;
170     avrcp_connection->avrcp_browsing_cid = avrcp_get_next_cid(avrcp_connection->role);
171     avrcp_connection->browsing_connection = connection;
172     return connection;
173 }
174 
175 static uint8_t avrcp_browsing_connect(bd_addr_t remote_addr, avrcp_context_t * context, uint8_t * ertm_buffer, uint32_t size, l2cap_ertm_config_t * ertm_config, uint16_t * browsing_cid){
176     avrcp_connection_t * avrcp_connection = get_avrcp_connection_for_bd_addr(context->role, remote_addr);
177 
178     if (!avrcp_connection){
179         log_error("avrcp: there is no previously established AVRCP controller connection.");
180         return ERROR_CODE_COMMAND_DISALLOWED;
181     }
182 
183     avrcp_browsing_connection_t * connection = avrcp_connection->browsing_connection;
184     if (connection){
185         log_error(" avrcp_browsing_connect connection exists.");
186         return ERROR_CODE_SUCCESS;
187     }
188 
189     connection = avrcp_browsing_create_connection(avrcp_connection);
190     if (!connection){
191         log_error("avrcp: could not allocate connection struct.");
192         return BTSTACK_MEMORY_ALLOC_FAILED;
193     }
194 
195     if (browsing_cid){
196         *browsing_cid = avrcp_connection->avrcp_browsing_cid;
197     }
198 
199     connection->ertm_buffer = ertm_buffer;
200     connection->ertm_buffer_size = size;
201     avrcp_connection->browsing_connection = connection;
202 
203     memcpy(&connection->ertm_config, ertm_config, sizeof(l2cap_ertm_config_t));
204 
205     return l2cap_create_ertm_channel(avrcp_browsing_target_packet_handler, remote_addr, avrcp_connection->browsing_l2cap_psm,
206                     &connection->ertm_config, connection->ertm_buffer, connection->ertm_buffer_size, NULL);
207 
208 }
209 
210 static void avrcp_browser_packet_handler(uint8_t packet_type, uint16_t channel, uint8_t *packet, uint16_t size, avrcp_context_t * context){
211     UNUSED(channel);
212     UNUSED(size);
213     bd_addr_t event_addr;
214     uint16_t local_cid;
215     uint8_t  status;
216     avrcp_browsing_connection_t * browsing_connection = NULL;
217     avrcp_connection_t * avrcp_connection = NULL;
218 
219     if (packet_type != HCI_EVENT_PACKET) return;
220 
221     switch (hci_event_packet_get_type(packet)) {
222         case HCI_EVENT_DISCONNECTION_COMPLETE:
223             avrcp_emit_browsing_connection_closed(context->browsing_avrcp_callback, 0);
224             break;
225         case L2CAP_EVENT_INCOMING_CONNECTION:
226             l2cap_event_incoming_connection_get_address(packet, event_addr);
227             local_cid = l2cap_event_incoming_connection_get_local_cid(packet);
228             avrcp_connection = get_avrcp_connection_for_bd_addr(context->role, event_addr);
229             if (!avrcp_connection) {
230                 log_error("No previously created AVRCP controller connections");
231                 l2cap_decline_connection(local_cid);
232                 break;
233             }
234             browsing_connection = avrcp_browsing_create_connection(avrcp_connection);
235             browsing_connection->l2cap_browsing_cid = local_cid;
236             browsing_connection->state = AVCTP_CONNECTION_W4_ERTM_CONFIGURATION;
237             log_info("Emit AVRCP_SUBEVENT_INCOMING_BROWSING_CONNECTION browsing_cid 0x%02x, l2cap_signaling_cid 0x%02x\n", avrcp_connection->avrcp_browsing_cid, browsing_connection->l2cap_browsing_cid);
238             avrcp_emit_incoming_browsing_connection(context->browsing_avrcp_callback, avrcp_connection->avrcp_browsing_cid, event_addr);
239             break;
240 
241         case L2CAP_EVENT_CHANNEL_OPENED:
242             l2cap_event_channel_opened_get_address(packet, event_addr);
243             status = l2cap_event_channel_opened_get_status(packet);
244             local_cid = l2cap_event_channel_opened_get_local_cid(packet);
245 
246             avrcp_connection = get_avrcp_connection_for_bd_addr(context->role, event_addr);
247             if (!avrcp_connection){
248                 log_error("Failed to find AVRCP connection for bd_addr %s", bd_addr_to_str(event_addr));
249                 avrcp_emit_browsing_connection_established(context->browsing_avrcp_callback, local_cid, event_addr, L2CAP_LOCAL_CID_DOES_NOT_EXIST);
250                 l2cap_disconnect(local_cid, 0); // reason isn't used
251                 break;
252             }
253 
254             browsing_connection = avrcp_connection->browsing_connection;
255             if (status != ERROR_CODE_SUCCESS){
256                 log_info("L2CAP connection to connection %s failed. status code 0x%02x", bd_addr_to_str(event_addr), status);
257                 avrcp_emit_browsing_connection_established(context->browsing_avrcp_callback, avrcp_connection->avrcp_browsing_cid, event_addr, status);
258                 btstack_memory_avrcp_browsing_connection_free(browsing_connection);
259                 avrcp_connection->browsing_connection = NULL;
260                 break;
261             }
262             if (browsing_connection->state != AVCTP_CONNECTION_W4_L2CAP_CONNECTED) break;
263 
264             browsing_connection->l2cap_browsing_cid = local_cid;
265 
266             log_info("L2CAP_EVENT_CHANNEL_OPENED browsing cid 0x%02x, l2cap cid 0x%02x", avrcp_connection->avrcp_browsing_cid, browsing_connection->l2cap_browsing_cid);
267             browsing_connection->state = AVCTP_CONNECTION_OPENED;
268             avrcp_emit_browsing_connection_established(context->browsing_avrcp_callback, avrcp_connection->avrcp_browsing_cid, event_addr, ERROR_CODE_SUCCESS);
269             break;
270 
271         case L2CAP_EVENT_CHANNEL_CLOSED:
272             // data: event (8), len(8), channel (16)
273             local_cid = l2cap_event_channel_closed_get_local_cid(packet);
274             avrcp_connection = get_avrcp_connection_for_browsing_l2cap_cid(context->role, local_cid);
275 
276             if (avrcp_connection && avrcp_connection->browsing_connection){
277                 avrcp_emit_browsing_connection_closed(context->browsing_avrcp_callback, avrcp_connection->avrcp_browsing_cid);
278                 // free connection
279                 btstack_memory_avrcp_browsing_connection_free(avrcp_connection->browsing_connection);
280                 avrcp_connection->browsing_connection = NULL;
281                 break;
282             }
283             break;
284         default:
285             break;
286     }
287 }
288 
289 
290 static void avrcp_browsing_target_packet_handler(uint8_t packet_type, uint16_t channel, uint8_t *packet, uint16_t size){
291     avrcp_browsing_connection_t * browsing_connection;
292 
293     switch (packet_type) {
294         case L2CAP_DATA_PACKET:{
295             browsing_connection = get_avrcp_browsing_connection_for_l2cap_cid(AVRCP_TARGET, channel);
296             if (!browsing_connection) break;
297             // printf_hexdump(packet,size);
298             int pos = 0;
299             uint8_t transport_header = packet[pos++];
300             // Transaction label | Packet_type | C/R | IPID (1 == invalid profile identifier)
301             browsing_connection->transaction_label = transport_header >> 4;
302             avrcp_packet_type_t avctp_packet_type = (transport_header & 0x0F) >> 2;
303             // printf("L2CAP_DATA_PACKET, transaction_label %d\n", browsing_connection->transaction_label);
304             switch (avctp_packet_type){
305                 case AVRCP_SINGLE_PACKET:
306                 case AVRCP_START_PACKET:
307                     // uint8_t frame_type = (transport_header & 0x03) >> 1;
308                     // uint8_t ipid = transport_header & 0x01;
309                     browsing_connection->subunit_type = packet[pos++] >> 2;
310                     browsing_connection->subunit_id = 0;
311                     browsing_connection->command_opcode = packet[pos++];
312                     // printf("subunit_id")
313                     // pos += 2;
314                     browsing_connection->num_packets = 1;
315                     if (avctp_packet_type == AVRCP_START_PACKET){
316                         browsing_connection->num_packets = packet[pos++];
317                     }
318                     browsing_connection->pdu_id = packet[pos++];
319                     // uint16_t length = big_endian_read_16(packet, pos);
320                     // pos += 2;
321                     break;
322                 default:
323                     break;
324             }
325             // printf("pdu id 0x%2x\n", browsing_connection->pdu_id);
326             // uint32_t i;
327             switch (avctp_packet_type){
328                 case AVRCP_SINGLE_PACKET:
329                 case AVRCP_END_PACKET:
330                     switch(browsing_connection->pdu_id){
331                         case AVRCP_PDU_ID_GET_FOLDER_ITEMS:
332                             printf("\n");
333                             browsing_connection->scope = packet[pos++];
334                             browsing_connection->start_item = big_endian_read_32(packet, pos);
335                             pos += 4;
336                             browsing_connection->end_item = big_endian_read_32(packet, pos);
337                             pos += 4;
338                             uint8_t attr_count = packet[pos++];
339 
340                             while (attr_count){
341                                 uint32_t attr_id = big_endian_read_32(packet, pos);
342                                 pos += 4;
343                                 browsing_connection->attr_bitmap |= (1 << attr_id);
344                                 attr_count--;
345                             }
346                             avrcp_browsing_target_emit_get_folder_items(avrcp_target_context.browsing_avrcp_callback, channel, browsing_connection);
347                             break;
348                         case AVRCP_PDU_ID_GET_TOTAL_NUMBER_OF_ITEMS:{
349                             // send total num items
350                             browsing_connection->scope = packet[pos++];
351                             avrcp_browsing_target_emit_get_total_num_items(avrcp_target_context.browsing_avrcp_callback, channel, browsing_connection);
352                             // uint32_t num_items = big_endian_read_32(packet, pos);
353                             // pos += 4;
354                             break;
355                         }
356                         default:
357                             // printf("send avrcp_browsing_target_response_general_reject\n");
358                             avrcp_browsing_target_response_general_reject(browsing_connection, AVRCP_STATUS_INVALID_COMMAND);
359                             log_info(" not parsed pdu ID 0x%02x", browsing_connection->pdu_id);
360                             break;
361                     }
362                     browsing_connection->state = AVCTP_CONNECTION_OPENED;
363                     // avrcp_browsing_target_emit_done_with_uid_counter(avrcp_target_context.browsing_avrcp_callback, channel, browsing_connection->uid_counter, browsing_connection->browsing_status, ERROR_CODE_SUCCESS);
364                     break;
365                 default:
366                     break;
367             }
368             // printf(" paket done\n");
369             break;
370         }
371 
372         case HCI_EVENT_PACKET:
373             switch (hci_event_packet_get_type(packet)){
374                 case L2CAP_EVENT_CAN_SEND_NOW:
375                     browsing_connection = get_avrcp_browsing_connection_for_l2cap_cid(AVRCP_TARGET, channel);
376                     if (!browsing_connection) break;
377                     if (browsing_connection->state != AVCTP_W2_SEND_RESPONSE) return;
378                     browsing_connection->state = AVCTP_CONNECTION_OPENED;
379                     avrcp_browsing_target_handle_can_send_now(browsing_connection);
380                     break;
381                 default:
382                     avrcp_browser_packet_handler(packet_type, channel, packet, size, &avrcp_target_context);
383                     break;
384             }
385             break;
386 
387         default:
388             break;
389     }
390 }
391 
392 void avrcp_browsing_target_init(void){
393     avrcp_target_context.browsing_packet_handler = avrcp_browsing_target_packet_handler;
394     l2cap_register_service(&avrcp_browsing_target_packet_handler, PSM_AVCTP_BROWSING, 0xffff, LEVEL_2);
395 }
396 
397 void avrcp_browsing_target_register_packet_handler(btstack_packet_handler_t callback){
398     if (callback == NULL){
399         log_error("avrcp_browsing_target_register_packet_handler called with NULL callback");
400         return;
401     }
402     avrcp_target_context.browsing_avrcp_callback = callback;
403 }
404 
405 uint8_t avrcp_browsing_target_connect(bd_addr_t bd_addr, uint8_t * ertm_buffer, uint32_t size, l2cap_ertm_config_t * ertm_config, uint16_t * avrcp_browsing_cid){
406     return avrcp_browsing_connect(bd_addr, &avrcp_target_context, ertm_buffer, size, ertm_config, avrcp_browsing_cid);
407 }
408 
409 uint8_t avrcp_browsing_target_disconnect(uint16_t avrcp_browsing_cid){
410     avrcp_connection_t * avrcp_connection = get_avrcp_connection_for_browsing_cid(AVRCP_TARGET, avrcp_browsing_cid);
411     if (!avrcp_connection){
412         log_error("avrcp_browsing_target_disconnect: could not find a connection.");
413         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
414     }
415     if (avrcp_connection->browsing_connection->state != AVCTP_CONNECTION_OPENED) return ERROR_CODE_COMMAND_DISALLOWED;
416 
417     l2cap_disconnect(avrcp_connection->browsing_connection->l2cap_browsing_cid, 0);
418     return ERROR_CODE_SUCCESS;
419 }
420 
421 uint8_t avrcp_browsing_target_configure_incoming_connection(uint16_t avrcp_browsing_cid, uint8_t * ertm_buffer, uint32_t size, l2cap_ertm_config_t * ertm_config){
422     avrcp_connection_t * avrcp_connection = get_avrcp_connection_for_browsing_cid(AVRCP_TARGET, avrcp_browsing_cid);
423     if (!avrcp_connection){
424         log_error("avrcp_browsing_decline_incoming_connection: could not find a connection.");
425         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
426     }
427     if (!avrcp_connection->browsing_connection){
428         log_error("avrcp_browsing_decline_incoming_connection: no browsing connection.");
429         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
430     }
431 
432     if (avrcp_connection->browsing_connection->state != AVCTP_CONNECTION_W4_ERTM_CONFIGURATION){
433         log_error("avrcp_browsing_decline_incoming_connection: browsing connection in a wrong state.");
434         return ERROR_CODE_COMMAND_DISALLOWED;
435     }
436 
437     avrcp_connection->browsing_connection->state = AVCTP_CONNECTION_W4_L2CAP_CONNECTED;
438     avrcp_connection->browsing_connection->ertm_buffer = ertm_buffer;
439     avrcp_connection->browsing_connection->ertm_buffer_size = size;
440     memcpy(&avrcp_connection->browsing_connection->ertm_config, ertm_config, sizeof(l2cap_ertm_config_t));
441     l2cap_accept_ertm_connection(avrcp_connection->browsing_connection->l2cap_browsing_cid, &avrcp_connection->browsing_connection->ertm_config, avrcp_connection->browsing_connection->ertm_buffer, avrcp_connection->browsing_connection->ertm_buffer_size);
442     return ERROR_CODE_SUCCESS;
443 }
444 
445 uint8_t avrcp_browsing_target_decline_incoming_connection(uint16_t avrcp_browsing_cid){
446     avrcp_connection_t * avrcp_connection = get_avrcp_connection_for_browsing_cid(AVRCP_TARGET, avrcp_browsing_cid);
447     if (!avrcp_connection){
448         log_error("avrcp_browsing_decline_incoming_connection: could not find a connection.");
449         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
450     }
451     if (!avrcp_connection->browsing_connection) return ERROR_CODE_SUCCESS;
452     if (avrcp_connection->browsing_connection->state > AVCTP_CONNECTION_W4_ERTM_CONFIGURATION) return ERROR_CODE_COMMAND_DISALLOWED;
453 
454     l2cap_decline_connection(avrcp_connection->browsing_connection->l2cap_browsing_cid);
455     // free connection
456     btstack_memory_avrcp_browsing_connection_free(avrcp_connection->browsing_connection);
457     avrcp_connection->browsing_connection = NULL;
458     return ERROR_CODE_SUCCESS;
459 }
460 
461 uint8_t avrcp_subevent_browsing_get_folder_items_response(uint16_t avrcp_browsing_cid, uint16_t uid_counter, uint8_t * attr_list, uint16_t attr_list_size){
462     avrcp_connection_t * avrcp_connection = get_avrcp_connection_for_browsing_cid(AVRCP_TARGET, avrcp_browsing_cid);
463     if (!avrcp_connection){
464         log_error("avrcp_browsing_controller_disconnect: could not find a connection.");
465         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
466     }
467 
468     avrcp_browsing_connection_t * connection = avrcp_connection->browsing_connection;
469     if (!connection){
470         log_info("avrcp_subevent_browsing_get_folder_items_response: could not find a connection.");
471         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
472     }
473     if (connection->state != AVCTP_CONNECTION_OPENED) return ERROR_CODE_COMMAND_DISALLOWED;
474 
475     if (connection->state != AVCTP_CONNECTION_OPENED) {
476         log_info("avrcp_subevent_browsing_get_folder_items_response: wrong state.");
477         return ERROR_CODE_COMMAND_DISALLOWED;
478     }
479     int pos = 0;
480 
481     connection->cmd_operands[pos++] = AVRCP_PDU_ID_GET_FOLDER_ITEMS;
482     big_endian_store_16(connection->cmd_operands, pos, attr_list_size);
483     pos += 2;
484 
485     connection->cmd_operands[pos++] = AVRCP_STATUS_SUCCESS;
486     big_endian_store_16(connection->cmd_operands, pos, uid_counter);
487     pos += 2;
488 
489     // TODO: fragmentation
490     if (attr_list_size >  sizeof(connection->cmd_operands)){
491         connection->attr_list = attr_list;
492         connection->attr_list_size = attr_list_size;
493         log_info(" todo: list too big, invoke fragmentation");
494         return 1;
495     }
496     memcpy(&connection->cmd_operands[pos], attr_list, attr_list_size);
497     pos += attr_list_size;
498     connection->cmd_operands_length = pos;
499     // printf_hexdump(connection->cmd_operands, connection->cmd_operands_length);
500 
501     connection->state = AVCTP_W2_SEND_RESPONSE;
502     avrcp_browsing_target_request_can_send_now(connection, connection->l2cap_browsing_cid);
503     return ERROR_CODE_SUCCESS;
504 }
505 
506 
507 uint8_t avrcp_subevent_browsing_get_total_num_items_response(uint16_t avrcp_browsing_cid, uint16_t uid_counter, uint32_t total_num_items){
508     avrcp_connection_t * avrcp_connection = get_avrcp_connection_for_browsing_cid(AVRCP_TARGET, avrcp_browsing_cid);
509     if (!avrcp_connection){
510         log_error("avrcp_browsing_controller_disconnect: could not find a connection.");
511         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
512     }
513 
514     avrcp_browsing_connection_t * connection = avrcp_connection->browsing_connection;
515     if (!connection){
516         log_info("avrcp_subevent_browsing_get_folder_items_response: could not find a connection.");
517         return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
518     }
519     if (connection->state != AVCTP_CONNECTION_OPENED) return ERROR_CODE_COMMAND_DISALLOWED;
520 
521     if (connection->state != AVCTP_CONNECTION_OPENED) {
522         log_info("avrcp_subevent_browsing_get_folder_items_response: wrong state.");
523         return ERROR_CODE_COMMAND_DISALLOWED;
524     }
525 
526     int pos = 0;
527     connection->cmd_operands[pos++] = AVRCP_PDU_ID_GET_TOTAL_NUMBER_OF_ITEMS;
528     big_endian_store_16(connection->cmd_operands, pos, 7);
529     pos += 2;
530     connection->cmd_operands[pos++] = AVRCP_STATUS_SUCCESS;
531     big_endian_store_16(connection->cmd_operands, pos, uid_counter);
532     pos += 2;
533     big_endian_store_32(connection->cmd_operands, pos, total_num_items);
534     pos += 4;
535     connection->cmd_operands_length = pos;
536     // printf_hexdump(connection->cmd_operands, connection->cmd_operands_length);
537 
538     connection->state = AVCTP_W2_SEND_RESPONSE;
539     avrcp_browsing_target_request_can_send_now(connection, connection->l2cap_browsing_cid);
540     return ERROR_CODE_SUCCESS;
541 }
542 
543