xref: /btstack/src/hci.c (revision 7b0d76671fa947c26327925615d59931461e32e3)
1 /*
2  * Copyright (C) 2014 BlueKitchen GmbH
3  *
4  * Redistribution and use in source and binary forms, with or without
5  * modification, are permitted provided that the following conditions
6  * are met:
7  *
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. Neither the name of the copyright holders nor the names of
14  *    contributors may be used to endorse or promote products derived
15  *    from this software without specific prior written permission.
16  * 4. Any redistribution, use, or modification is done solely for
17  *    personal benefit and not for any commercial purpose or for
18  *    monetary gain.
19  *
20  * THIS SOFTWARE IS PROVIDED BY BLUEKITCHEN GMBH AND CONTRIBUTORS
21  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
22  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
23  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL MATTHIAS
24  * RINGWALD OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
25  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
26  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
27  * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
28  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
29  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
30  * THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31  * SUCH DAMAGE.
32  *
33  * Please inquire about commercial licensing options at
34  * [email protected]
35  *
36  */
37 
38 /*
39  *  hci.c
40  *
41  *  Created by Matthias Ringwald on 4/29/09.
42  *
43  */
44 
45 #include "btstack-config.h"
46 
47 #include "hci.h"
48 #include "gap.h"
49 
50 #include <stdarg.h>
51 #include <string.h>
52 #include <stdio.h>
53 
54 #ifndef EMBEDDED
55 #ifdef _WIN32
56 #include "Winsock2.h"
57 #else
58 #include <unistd.h> // gethostbyname
59 #endif
60 #include <btstack/version.h>
61 #endif
62 
63 #include "btstack_memory.h"
64 #include "debug.h"
65 #include "hci_dump.h"
66 
67 #include <btstack/linked_list.h>
68 #include <btstack/hci_cmds.h>
69 
70 #define HCI_CONNECTION_TIMEOUT_MS 10000
71 
72 #ifdef USE_BLUETOOL
73 #include "../platforms/ios/src/bt_control_iphone.h"
74 #endif
75 
76 static void hci_update_scan_enable(void);
77 static gap_security_level_t gap_security_level_for_connection(hci_connection_t * connection);
78 static void hci_connection_timeout_handler(timer_source_t *timer);
79 static void hci_connection_timestamp(hci_connection_t *connection);
80 static int  hci_power_control_on(void);
81 static void hci_power_control_off(void);
82 static void hci_state_reset();
83 
84 // the STACK is here
85 #ifndef HAVE_MALLOC
86 static hci_stack_t   hci_stack_static;
87 #endif
88 static hci_stack_t * hci_stack = NULL;
89 
90 // test helper
91 static uint8_t disable_l2cap_timeouts = 0;
92 
93 /**
94  * create connection for given address
95  *
96  * @return connection OR NULL, if no memory left
97  */
98 static hci_connection_t * create_connection_for_bd_addr_and_type(bd_addr_t addr, bd_addr_type_t addr_type){
99     log_info("create_connection_for_addr %s, type %x", bd_addr_to_str(addr), addr_type);
100     hci_connection_t * conn = btstack_memory_hci_connection_get();
101     if (!conn) return NULL;
102     memset(conn, 0, sizeof(hci_connection_t));
103     BD_ADDR_COPY(conn->address, addr);
104     conn->address_type = addr_type;
105     conn->con_handle = 0xffff;
106     conn->authentication_flags = AUTH_FLAGS_NONE;
107     conn->bonding_flags = 0;
108     conn->requested_security_level = LEVEL_0;
109     linked_item_set_user(&conn->timeout.item, conn);
110     conn->timeout.process = hci_connection_timeout_handler;
111     hci_connection_timestamp(conn);
112     conn->acl_recombination_length = 0;
113     conn->acl_recombination_pos = 0;
114     conn->num_acl_packets_sent = 0;
115     conn->num_sco_packets_sent = 0;
116     conn->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NONE;
117     linked_list_add(&hci_stack->connections, (linked_item_t *) conn);
118     return conn;
119 }
120 
121 
122 /**
123  * get le connection parameter range
124 *
125  * @return le connection parameter range struct
126  */
127 le_connection_parameter_range_t gap_le_get_connection_parameter_range(){
128     return hci_stack->le_connection_parameter_range;
129 }
130 
131 /**
132  * set le connection parameter range
133  *
134  */
135 
136 void gap_le_set_connection_parameter_range(le_connection_parameter_range_t range){
137     hci_stack->le_connection_parameter_range.le_conn_interval_min = range.le_conn_interval_min;
138     hci_stack->le_connection_parameter_range.le_conn_interval_max = range.le_conn_interval_max;
139     hci_stack->le_connection_parameter_range.le_conn_interval_min = range.le_conn_latency_min;
140     hci_stack->le_connection_parameter_range.le_conn_interval_max = range.le_conn_latency_max;
141     hci_stack->le_connection_parameter_range.le_supervision_timeout_min = range.le_supervision_timeout_min;
142     hci_stack->le_connection_parameter_range.le_supervision_timeout_max = range.le_supervision_timeout_max;
143 }
144 
145 /**
146  * get hci connections iterator
147  *
148  * @return hci connections iterator
149  */
150 
151 void hci_connections_get_iterator(linked_list_iterator_t *it){
152     linked_list_iterator_init(it, &hci_stack->connections);
153 }
154 
155 /**
156  * get connection for a given handle
157  *
158  * @return connection OR NULL, if not found
159  */
160 hci_connection_t * hci_connection_for_handle(hci_con_handle_t con_handle){
161     linked_list_iterator_t it;
162     linked_list_iterator_init(&it, &hci_stack->connections);
163     while (linked_list_iterator_has_next(&it)){
164         hci_connection_t * item = (hci_connection_t *) linked_list_iterator_next(&it);
165         if ( item->con_handle == con_handle ) {
166             return item;
167         }
168     }
169     return NULL;
170 }
171 
172 /**
173  * get connection for given address
174  *
175  * @return connection OR NULL, if not found
176  */
177 hci_connection_t * hci_connection_for_bd_addr_and_type(bd_addr_t  addr, bd_addr_type_t addr_type){
178     linked_list_iterator_t it;
179     linked_list_iterator_init(&it, &hci_stack->connections);
180     while (linked_list_iterator_has_next(&it)){
181         hci_connection_t * connection = (hci_connection_t *) linked_list_iterator_next(&it);
182         if (connection->address_type != addr_type)  continue;
183         if (memcmp(addr, connection->address, 6) != 0) continue;
184         return connection;
185     }
186     return NULL;
187 }
188 
189 static void hci_connection_timeout_handler(timer_source_t *timer){
190     hci_connection_t * connection = (hci_connection_t *) linked_item_get_user(&timer->item);
191 #ifdef HAVE_TIME
192     struct timeval tv;
193     gettimeofday(&tv, NULL);
194     if (tv.tv_sec >= connection->timestamp.tv_sec + HCI_CONNECTION_TIMEOUT_MS/1000) {
195         // connections might be timed out
196         hci_emit_l2cap_check_timeout(connection);
197     }
198 #endif
199 #ifdef HAVE_TICK
200     if (embedded_get_ticks() > connection->timestamp + embedded_ticks_for_ms(HCI_CONNECTION_TIMEOUT_MS)){
201         // connections might be timed out
202         hci_emit_l2cap_check_timeout(connection);
203     }
204 #endif
205     run_loop_set_timer(timer, HCI_CONNECTION_TIMEOUT_MS);
206     run_loop_add_timer(timer);
207 }
208 
209 static void hci_connection_timestamp(hci_connection_t *connection){
210 #ifdef HAVE_TIME
211     gettimeofday(&connection->timestamp, NULL);
212 #endif
213 #ifdef HAVE_TICK
214     connection->timestamp = embedded_get_ticks();
215 #endif
216 }
217 
218 
219 inline static void connectionSetAuthenticationFlags(hci_connection_t * conn, hci_authentication_flags_t flags){
220     conn->authentication_flags = (hci_authentication_flags_t)(conn->authentication_flags | flags);
221 }
222 
223 inline static void connectionClearAuthenticationFlags(hci_connection_t * conn, hci_authentication_flags_t flags){
224     conn->authentication_flags = (hci_authentication_flags_t)(conn->authentication_flags & ~flags);
225 }
226 
227 
228 /**
229  * add authentication flags and reset timer
230  * @note: assumes classic connection
231  * @note: bd_addr is passed in as litle endian uint8_t * as it is called from parsing packets
232  */
233 static void hci_add_connection_flags_for_flipped_bd_addr(uint8_t *bd_addr, hci_authentication_flags_t flags){
234     bd_addr_t addr;
235     bt_flip_addr(addr, bd_addr);
236     hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_CLASSIC);
237     if (conn) {
238         connectionSetAuthenticationFlags(conn, flags);
239         hci_connection_timestamp(conn);
240     }
241 }
242 
243 int  hci_authentication_active_for_handle(hci_con_handle_t handle){
244     hci_connection_t * conn = hci_connection_for_handle(handle);
245     if (!conn) return 0;
246     if (conn->authentication_flags & LEGACY_PAIRING_ACTIVE) return 1;
247     if (conn->authentication_flags & SSP_PAIRING_ACTIVE) return 1;
248     return 0;
249 }
250 
251 void hci_drop_link_key_for_bd_addr(bd_addr_t addr){
252     if (hci_stack->remote_device_db) {
253         hci_stack->remote_device_db->delete_link_key(addr);
254     }
255 }
256 
257 int hci_is_le_connection(hci_connection_t * connection){
258     return  connection->address_type == BD_ADDR_TYPE_LE_PUBLIC ||
259     connection->address_type == BD_ADDR_TYPE_LE_RANDOM;
260 }
261 
262 
263 /**
264  * count connections
265  */
266 static int nr_hci_connections(void){
267     int count = 0;
268     linked_item_t *it;
269     for (it = (linked_item_t *) hci_stack->connections; it ; it = it->next, count++);
270     return count;
271 }
272 
273 /**
274  * Dummy handler called by HCI
275  */
276 static void dummy_handler(uint8_t packet_type, uint8_t *packet, uint16_t size){
277 }
278 
279 uint8_t hci_number_outgoing_packets(hci_con_handle_t handle){
280     hci_connection_t * connection = hci_connection_for_handle(handle);
281     if (!connection) {
282         log_error("hci_number_outgoing_packets: connection for handle %u does not exist!", handle);
283         return 0;
284     }
285     return connection->num_acl_packets_sent;
286 }
287 
288 uint8_t hci_number_free_acl_slots_for_handle(hci_con_handle_t con_handle){
289 
290     int num_packets_sent_classic = 0;
291     int num_packets_sent_le = 0;
292 
293     bd_addr_type_t address_type = BD_ADDR_TYPE_UNKNOWN;
294 
295     linked_item_t *it;
296     for (it = (linked_item_t *) hci_stack->connections; it ; it = it->next){
297         hci_connection_t * connection = (hci_connection_t *) it;
298         if (connection->address_type == BD_ADDR_TYPE_CLASSIC){
299             num_packets_sent_classic += connection->num_acl_packets_sent;
300         } else {
301             num_packets_sent_le += connection->num_acl_packets_sent;
302         }
303         // ignore connections that are not open, e.g., in state RECEIVED_DISCONNECTION_COMPLETE
304         if (connection->con_handle == con_handle && connection->state == OPEN){
305             address_type = connection->address_type;
306         }
307     }
308 
309     int free_slots_classic = hci_stack->acl_packets_total_num - num_packets_sent_classic;
310     int free_slots_le = 0;
311 
312     if (free_slots_classic < 0){
313         log_error("hci_number_free_acl_slots: outgoing classic packets (%u) > total classic packets (%u)", num_packets_sent_classic, hci_stack->acl_packets_total_num);
314         return 0;
315     }
316 
317     if (hci_stack->le_acl_packets_total_num){
318         // if we have LE slots, they are used
319         free_slots_le = hci_stack->le_acl_packets_total_num - num_packets_sent_le;
320         if (free_slots_le < 0){
321             log_error("hci_number_free_acl_slots: outgoing le packets (%u) > total le packets (%u)", num_packets_sent_le, hci_stack->le_acl_packets_total_num);
322             return 0;
323         }
324     } else {
325         // otherwise, classic slots are used for LE, too
326         free_slots_classic -= num_packets_sent_le;
327         if (free_slots_classic < 0){
328             log_error("hci_number_free_acl_slots: outgoing classic + le packets (%u + %u) > total packets (%u)", num_packets_sent_classic, num_packets_sent_le, hci_stack->acl_packets_total_num);
329             return 0;
330         }
331     }
332 
333     switch (address_type){
334         case BD_ADDR_TYPE_UNKNOWN:
335             log_error("hci_number_free_acl_slots: handle 0x%04x not in connection list", con_handle);
336             return 0;
337 
338         case BD_ADDR_TYPE_CLASSIC:
339             return free_slots_classic;
340 
341         default:
342            if (hci_stack->le_acl_packets_total_num){
343                return free_slots_le;
344            }
345            return free_slots_classic;
346     }
347 }
348 
349 int hci_number_free_sco_slots_for_handle(hci_con_handle_t handle){
350     int num_sco_packets_sent = 0;
351     linked_item_t *it;
352     for (it = (linked_item_t *) hci_stack->connections; it ; it = it->next){
353         hci_connection_t * connection = (hci_connection_t *) it;
354         num_sco_packets_sent += connection->num_sco_packets_sent;
355     }
356     if (num_sco_packets_sent > hci_stack->sco_packets_total_num){
357         log_info("hci_number_free_sco_slots_for_handle: outgoing packets (%u) > total packets ()", num_sco_packets_sent, hci_stack->sco_packets_total_num);
358         return 0;
359     }
360     return hci_stack->sco_packets_total_num - num_sco_packets_sent;
361 }
362 
363 // new functions replacing hci_can_send_packet_now[_using_packet_buffer]
364 int hci_can_send_command_packet_now(void){
365     if (hci_stack->hci_packet_buffer_reserved) return 0;
366 
367     // check for async hci transport implementations
368     if (hci_stack->hci_transport->can_send_packet_now){
369         if (!hci_stack->hci_transport->can_send_packet_now(HCI_COMMAND_DATA_PACKET)){
370             return 0;
371         }
372     }
373 
374     return hci_stack->num_cmd_packets > 0;
375 }
376 
377 int hci_can_send_prepared_acl_packet_now(hci_con_handle_t con_handle) {
378     // check for async hci transport implementations
379     if (hci_stack->hci_transport->can_send_packet_now){
380         if (!hci_stack->hci_transport->can_send_packet_now(HCI_ACL_DATA_PACKET)){
381             return 0;
382         }
383     }
384     return hci_number_free_acl_slots_for_handle(con_handle) > 0;
385 }
386 
387 int hci_can_send_acl_packet_now(hci_con_handle_t con_handle){
388     if (hci_stack->hci_packet_buffer_reserved) return 0;
389     return hci_can_send_prepared_acl_packet_now(con_handle);
390 }
391 
392 int hci_can_send_prepared_sco_packet_now(hci_con_handle_t con_handle){
393     if (hci_stack->hci_transport->can_send_packet_now){
394         if (!hci_stack->hci_transport->can_send_packet_now(HCI_SCO_DATA_PACKET)){
395             return 0;
396         }
397     }
398     return hci_number_free_sco_slots_for_handle(con_handle) > 0;
399 }
400 
401 int hci_can_send_sco_packet_now(hci_con_handle_t con_handle){
402     if (hci_stack->hci_packet_buffer_reserved) return 0;
403     return hci_can_send_prepared_sco_packet_now(con_handle);
404 }
405 
406 // used for internal checks in l2cap[-le].c
407 int hci_is_packet_buffer_reserved(void){
408     return hci_stack->hci_packet_buffer_reserved;
409 }
410 
411 // reserves outgoing packet buffer. @returns 1 if successful
412 int hci_reserve_packet_buffer(void){
413     if (hci_stack->hci_packet_buffer_reserved) {
414         log_error("hci_reserve_packet_buffer called but buffer already reserved");
415         return 0;
416     }
417     hci_stack->hci_packet_buffer_reserved = 1;
418     return 1;
419 }
420 
421 void hci_release_packet_buffer(void){
422     hci_stack->hci_packet_buffer_reserved = 0;
423 }
424 
425 // assumption: synchronous implementations don't provide can_send_packet_now as they don't keep the buffer after the call
426 int hci_transport_synchronous(void){
427     return hci_stack->hci_transport->can_send_packet_now == NULL;
428 }
429 
430 uint16_t hci_max_acl_le_data_packet_length(void){
431     return hci_stack->le_data_packets_length > 0 ? hci_stack->le_data_packets_length : hci_stack->acl_data_packet_length;
432 }
433 
434 static int hci_send_acl_packet_fragments(hci_connection_t *connection){
435 
436     // log_info("hci_send_acl_packet_fragments  %u/%u (con 0x%04x)", hci_stack->acl_fragmentation_pos, hci_stack->acl_fragmentation_total_size, connection->con_handle);
437 
438     // max ACL data packet length depends on connection type (LE vs. Classic) and available buffers
439     uint16_t max_acl_data_packet_length = hci_stack->acl_data_packet_length;
440     if (hci_is_le_connection(connection) && hci_stack->le_data_packets_length > 0){
441         max_acl_data_packet_length = hci_stack->le_data_packets_length;
442     }
443 
444     // testing: reduce buffer to minimum
445     // max_acl_data_packet_length = 52;
446 
447     int err;
448     // multiple packets could be send on a synchronous HCI transport
449     while (1){
450 
451         // get current data
452         const uint16_t acl_header_pos = hci_stack->acl_fragmentation_pos - 4;
453         int current_acl_data_packet_length = hci_stack->acl_fragmentation_total_size - hci_stack->acl_fragmentation_pos;
454         int more_fragments = 0;
455 
456         // if ACL packet is larger than Bluetooth packet buffer, only send max_acl_data_packet_length
457         if (current_acl_data_packet_length > max_acl_data_packet_length){
458             more_fragments = 1;
459             current_acl_data_packet_length = max_acl_data_packet_length;
460         }
461 
462         // copy handle_and_flags if not first fragment and update packet boundary flags to be 01 (continuing fragmnent)
463         if (acl_header_pos > 0){
464             uint16_t handle_and_flags = READ_BT_16(hci_stack->hci_packet_buffer, 0);
465             handle_and_flags = (handle_and_flags & 0xcfff) | (1 << 12);
466             bt_store_16(hci_stack->hci_packet_buffer, acl_header_pos, handle_and_flags);
467         }
468 
469         // update header len
470         bt_store_16(hci_stack->hci_packet_buffer, acl_header_pos + 2, current_acl_data_packet_length);
471 
472         // count packet
473         connection->num_acl_packets_sent++;
474 
475         // send packet
476         uint8_t * packet = &hci_stack->hci_packet_buffer[acl_header_pos];
477         const int size = current_acl_data_packet_length + 4;
478         hci_dump_packet(HCI_ACL_DATA_PACKET, 0, packet, size);
479         err = hci_stack->hci_transport->send_packet(HCI_ACL_DATA_PACKET, packet, size);
480 
481         // done yet?
482         if (!more_fragments) break;
483 
484         // update start of next fragment to send
485         hci_stack->acl_fragmentation_pos += current_acl_data_packet_length;
486 
487         // can send more?
488         if (!hci_can_send_prepared_acl_packet_now(connection->con_handle)) return err;
489     }
490 
491     // done
492     hci_stack->acl_fragmentation_pos = 0;
493     hci_stack->acl_fragmentation_total_size = 0;
494 
495     // release buffer now for synchronous transport
496     if (hci_transport_synchronous()){
497         hci_release_packet_buffer();
498         // notify upper stack that iit might be possible to send again
499         uint8_t event[] = { DAEMON_EVENT_HCI_PACKET_SENT, 0};
500         hci_stack->packet_handler(HCI_EVENT_PACKET, &event[0], sizeof(event));
501     }
502 
503     return err;
504 }
505 
506 // pre: caller has reserved the packet buffer
507 int hci_send_acl_packet_buffer(int size){
508 
509     // log_info("hci_send_acl_packet_buffer size %u", size);
510 
511     if (!hci_stack->hci_packet_buffer_reserved) {
512         log_error("hci_send_acl_packet_buffer called without reserving packet buffer");
513         return 0;
514     }
515 
516     uint8_t * packet = hci_stack->hci_packet_buffer;
517     hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(packet);
518 
519     // check for free places on Bluetooth module
520     if (!hci_can_send_prepared_acl_packet_now(con_handle)) {
521         log_error("hci_send_acl_packet_buffer called but no free ACL buffers on controller");
522         hci_release_packet_buffer();
523         return BTSTACK_ACL_BUFFERS_FULL;
524     }
525 
526     hci_connection_t *connection = hci_connection_for_handle( con_handle);
527     if (!connection) {
528         log_error("hci_send_acl_packet_buffer called but no connection for handle 0x%04x", con_handle);
529         hci_release_packet_buffer();
530         return 0;
531     }
532     hci_connection_timestamp(connection);
533 
534     // hci_dump_packet( HCI_ACL_DATA_PACKET, 0, packet, size);
535 
536     // setup data
537     hci_stack->acl_fragmentation_total_size = size;
538     hci_stack->acl_fragmentation_pos = 4;   // start of L2CAP packet
539 
540     return hci_send_acl_packet_fragments(connection);
541 }
542 
543 // pre: caller has reserved the packet buffer
544 int hci_send_sco_packet_buffer(int size){
545 
546     // log_info("hci_send_acl_packet_buffer size %u", size);
547 
548     if (!hci_stack->hci_packet_buffer_reserved) {
549         log_error("hci_send_acl_packet_buffer called without reserving packet buffer");
550         return 0;
551     }
552 
553     uint8_t * packet = hci_stack->hci_packet_buffer;
554     hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(packet);   // same for ACL and SCO
555 
556     // check for free places on Bluetooth module
557     if (!hci_can_send_prepared_sco_packet_now(con_handle)) {
558         log_error("hci_send_sco_packet_buffer called but no free ACL buffers on controller");
559         hci_release_packet_buffer();
560         return BTSTACK_ACL_BUFFERS_FULL;
561     }
562 
563     // track send packet in connection struct
564     hci_connection_t *connection = hci_connection_for_handle( con_handle);
565     if (!connection) {
566         log_error("hci_send_sco_packet_buffer called but no connection for handle 0x%04x", con_handle);
567         hci_release_packet_buffer();
568         return 0;
569     }
570     connection->num_sco_packets_sent++;
571 
572     hci_dump_packet( HCI_SCO_DATA_PACKET, 0, packet, size);
573     return hci_stack->hci_transport->send_packet(HCI_SCO_DATA_PACKET, packet, size);
574 }
575 
576 static void acl_handler(uint8_t *packet, int size){
577 
578     // log_info("acl_handler: size %u", size);
579 
580     // get info
581     hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(packet);
582     hci_connection_t *conn      = hci_connection_for_handle(con_handle);
583     uint8_t  acl_flags          = READ_ACL_FLAGS(packet);
584     uint16_t acl_length         = READ_ACL_LENGTH(packet);
585 
586     // ignore non-registered handle
587     if (!conn){
588         log_error( "hci.c: acl_handler called with non-registered handle %u!" , con_handle);
589         return;
590     }
591 
592     // assert packet is complete
593     if (acl_length + 4 != size){
594         log_error("hci.c: acl_handler called with ACL packet of wrong size %u, expected %u => dropping packet", size, acl_length + 4);
595         return;
596     }
597 
598     // update idle timestamp
599     hci_connection_timestamp(conn);
600 
601     // handle different packet types
602     switch (acl_flags & 0x03) {
603 
604         case 0x01: // continuation fragment
605 
606             // sanity checks
607             if (conn->acl_recombination_pos == 0) {
608                 log_error( "ACL Cont Fragment but no first fragment for handle 0x%02x", con_handle);
609                 return;
610             }
611             if (conn->acl_recombination_pos + acl_length > 4 + HCI_ACL_BUFFER_SIZE){
612                 log_error( "ACL Cont Fragment to large: combined packet %u > buffer size %u for handle 0x%02x",
613                     conn->acl_recombination_pos + acl_length, 4 + HCI_ACL_BUFFER_SIZE, con_handle);
614                 conn->acl_recombination_pos = 0;
615                 return;
616             }
617 
618             // append fragment payload (header already stored)
619             memcpy(&conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE + conn->acl_recombination_pos], &packet[4], acl_length );
620             conn->acl_recombination_pos += acl_length;
621 
622             // log_error( "ACL Cont Fragment: acl_len %u, combined_len %u, l2cap_len %u", acl_length,
623             //        conn->acl_recombination_pos, conn->acl_recombination_length);
624 
625             // forward complete L2CAP packet if complete.
626             if (conn->acl_recombination_pos >= conn->acl_recombination_length + 4 + 4){ // pos already incl. ACL header
627 
628                 hci_stack->packet_handler(HCI_ACL_DATA_PACKET, &conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE], conn->acl_recombination_pos);
629                 // reset recombination buffer
630                 conn->acl_recombination_length = 0;
631                 conn->acl_recombination_pos = 0;
632             }
633             break;
634 
635         case 0x02: { // first fragment
636 
637             // sanity check
638             if (conn->acl_recombination_pos) {
639                 log_error( "ACL First Fragment but data in buffer for handle 0x%02x, dropping stale fragments", con_handle);
640                 conn->acl_recombination_pos = 0;
641             }
642 
643             // peek into L2CAP packet!
644             uint16_t l2cap_length = READ_L2CAP_LENGTH( packet );
645 
646             // log_info( "ACL First Fragment: acl_len %u, l2cap_len %u", acl_length, l2cap_length);
647 
648             // compare fragment size to L2CAP packet size
649             if (acl_length >= l2cap_length + 4){
650 
651                 // forward fragment as L2CAP packet
652                 hci_stack->packet_handler(HCI_ACL_DATA_PACKET, packet, acl_length + 4);
653 
654             } else {
655 
656                 if (acl_length > HCI_ACL_BUFFER_SIZE){
657                     log_error( "ACL First Fragment to large: fragment %u > buffer size %u for handle 0x%02x",
658                         4 + acl_length, 4 + HCI_ACL_BUFFER_SIZE, con_handle);
659                     return;
660                 }
661 
662                 // store first fragment and tweak acl length for complete package
663                 memcpy(&conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE], packet, acl_length + 4);
664                 conn->acl_recombination_pos    = acl_length + 4;
665                 conn->acl_recombination_length = l2cap_length;
666                 bt_store_16(conn->acl_recombination_buffer, HCI_INCOMING_PRE_BUFFER_SIZE + 2, l2cap_length +4);
667             }
668             break;
669 
670         }
671         default:
672             log_error( "hci.c: acl_handler called with invalid packet boundary flags %u", acl_flags & 0x03);
673             return;
674     }
675 
676     // execute main loop
677     hci_run();
678 }
679 
680 static void hci_shutdown_connection(hci_connection_t *conn){
681     log_info("Connection closed: handle 0x%x, %s", conn->con_handle, bd_addr_to_str(conn->address));
682 
683     run_loop_remove_timer(&conn->timeout);
684 
685     linked_list_remove(&hci_stack->connections, (linked_item_t *) conn);
686     btstack_memory_hci_connection_free( conn );
687 
688     // now it's gone
689     hci_emit_nr_connections_changed();
690 }
691 
692 static const uint16_t packet_type_sizes[] = {
693     0, HCI_ACL_2DH1_SIZE, HCI_ACL_3DH1_SIZE, HCI_ACL_DM1_SIZE,
694     HCI_ACL_DH1_SIZE, 0, 0, 0,
695     HCI_ACL_2DH3_SIZE, HCI_ACL_3DH3_SIZE, HCI_ACL_DM3_SIZE, HCI_ACL_DH3_SIZE,
696     HCI_ACL_2DH5_SIZE, HCI_ACL_3DH5_SIZE, HCI_ACL_DM5_SIZE, HCI_ACL_DH5_SIZE
697 };
698 static const uint8_t  packet_type_feature_requirement_bit[] = {
699      0, // 3 slot packets
700      1, // 5 slot packets
701     25, // EDR 2 mpbs
702     26, // EDR 3 mbps
703     39, // 3 slot EDR packts
704     40, // 5 slot EDR packet
705 };
706 static const uint16_t packet_type_feature_packet_mask[] = {
707     0x0f00, // 3 slot packets
708     0xf000, // 5 slot packets
709     0x1102, // EDR 2 mpbs
710     0x2204, // EDR 3 mbps
711     0x0300, // 3 slot EDR packts
712     0x3000, // 5 slot EDR packet
713 };
714 
715 static uint16_t hci_acl_packet_types_for_buffer_size_and_local_features(uint16_t buffer_size, uint8_t * local_supported_features){
716     // enable packet types based on size
717     uint16_t packet_types = 0;
718     unsigned int i;
719     for (i=0;i<16;i++){
720         if (packet_type_sizes[i] == 0) continue;
721         if (packet_type_sizes[i] <= buffer_size){
722             packet_types |= 1 << i;
723         }
724     }
725     // disable packet types due to missing local supported features
726     for (i=0;i<sizeof(packet_type_feature_requirement_bit);i++){
727         int bit_idx = packet_type_feature_requirement_bit[i];
728         int feature_set = (local_supported_features[bit_idx >> 3] & (1<<(bit_idx & 7))) != 0;
729         if (feature_set) continue;
730         log_info("Features bit %02u is not set, removing packet types 0x%04x", bit_idx, packet_type_feature_packet_mask[i]);
731         packet_types &= ~packet_type_feature_packet_mask[i];
732     }
733     // flip bits for "may not be used"
734     packet_types ^= 0x3306;
735     return packet_types;
736 }
737 
738 uint16_t hci_usable_acl_packet_types(void){
739     return hci_stack->packet_types;
740 }
741 
742 uint8_t* hci_get_outgoing_packet_buffer(void){
743     // hci packet buffer is >= acl data packet length
744     return hci_stack->hci_packet_buffer;
745 }
746 
747 uint16_t hci_max_acl_data_packet_length(void){
748     return hci_stack->acl_data_packet_length;
749 }
750 
751 int hci_non_flushable_packet_boundary_flag_supported(void){
752     // No. 54, byte 6, bit 6
753     return (hci_stack->local_supported_features[6] & (1 << 6)) != 0;
754 }
755 
756 int hci_ssp_supported(void){
757     // No. 51, byte 6, bit 3
758     return (hci_stack->local_supported_features[6] & (1 << 3)) != 0;
759 }
760 
761 int hci_classic_supported(void){
762     // No. 37, byte 4, bit 5, = No BR/EDR Support
763     return (hci_stack->local_supported_features[4] & (1 << 5)) == 0;
764 }
765 
766 int hci_le_supported(void){
767 #ifdef HAVE_BLE
768     // No. 37, byte 4, bit 6 = LE Supported (Controller)
769     return (hci_stack->local_supported_features[4] & (1 << 6)) != 0;
770 #else
771     return 0;
772 #endif
773 }
774 
775 // get addr type and address used in advertisement packets
776 void hci_le_advertisement_address(uint8_t * addr_type, bd_addr_t  addr){
777     *addr_type = hci_stack->adv_addr_type;
778     if (hci_stack->adv_addr_type){
779         memcpy(addr, hci_stack->adv_address, 6);
780     } else {
781         memcpy(addr, hci_stack->local_bd_addr, 6);
782     }
783 }
784 
785 #ifdef HAVE_BLE
786 void le_handle_advertisement_report(uint8_t *packet, int size){
787     int offset = 3;
788     int num_reports = packet[offset];
789     offset += 1;
790 
791     int i;
792     log_info("HCI: handle adv report with num reports: %d", num_reports);
793     uint8_t event[12 + LE_ADVERTISING_DATA_SIZE]; // use upper bound to avoid var size automatic var
794     for (i=0; i<num_reports;i++){
795         uint8_t data_length = packet[offset + 8];
796         uint8_t event_size = 10 + data_length;
797         int pos = 0;
798         event[pos++] = GAP_LE_ADVERTISING_REPORT;
799         event[pos++] = event_size;
800         memcpy(&event[pos], &packet[offset], 1+1+6); // event type + address type + address
801         offset += 8;
802         pos += 8;
803         event[pos++] = packet[offset + 1 + data_length]; // rssi
804         event[pos++] = packet[offset++]; //data_length;
805         memcpy(&event[pos], &packet[offset], data_length);
806         pos += data_length;
807         offset += data_length + 1; // rssi
808         hci_dump_packet( HCI_EVENT_PACKET, 0, event, pos);
809         hci_stack->packet_handler(HCI_EVENT_PACKET, event, pos);
810     }
811 }
812 #endif
813 
814 static void hci_initialization_timeout_handler(timer_source_t * ds){
815     switch (hci_stack->substate){
816         case HCI_INIT_W4_SEND_RESET:
817             log_info("Resend HCI Reset");
818             hci_stack->substate = HCI_INIT_SEND_RESET;
819             hci_stack->num_cmd_packets = 1;
820             hci_run();
821             break;
822         default:
823             break;
824     }
825 }
826 
827 static void hci_initializing_next_state(){
828     hci_stack->substate = (hci_substate_t )( ((int) hci_stack->substate) + 1);
829 }
830 
831 // assumption: hci_can_send_command_packet_now() == true
832 static void hci_initializing_run(){
833     // log_info("hci_init: substate %u", hci_stack->substate >> 1);
834     switch (hci_stack->substate){
835         case HCI_INIT_SEND_RESET:
836             hci_state_reset();
837             // prepare reset if command complete not received in 100ms
838             run_loop_set_timer(&hci_stack->timeout, 100);
839             run_loop_set_timer_handler(&hci_stack->timeout, hci_initialization_timeout_handler);
840             run_loop_add_timer(&hci_stack->timeout);
841             // send command
842             hci_stack->substate = HCI_INIT_W4_SEND_RESET;
843             hci_send_cmd(&hci_reset);
844             break;
845         case HCI_INIT_SEND_BAUD_CHANGE:
846             hci_stack->control->baudrate_cmd(hci_stack->config, ((hci_uart_config_t *)hci_stack->config)->baudrate_main, hci_stack->hci_packet_buffer);
847             hci_stack->last_cmd_opcode = READ_BT_16(hci_stack->hci_packet_buffer, 0);
848             hci_stack->substate = HCI_INIT_W4_SEND_BAUD_CHANGE;
849             hci_send_cmd_packet(hci_stack->hci_packet_buffer, 3 + hci_stack->hci_packet_buffer[2]);
850             break;
851         case HCI_INIT_SET_BD_ADDR:
852             log_info("Set Public BD ADDR to %s", bd_addr_to_str(hci_stack->custom_bd_addr));
853             hci_stack->control->set_bd_addr_cmd(hci_stack->config, hci_stack->custom_bd_addr, hci_stack->hci_packet_buffer);
854             hci_stack->last_cmd_opcode = READ_BT_16(hci_stack->hci_packet_buffer, 0);
855             hci_stack->substate = HCI_INIT_W4_SET_BD_ADDR;
856             hci_send_cmd_packet(hci_stack->hci_packet_buffer, 3 + hci_stack->hci_packet_buffer[2]);
857             break;
858         case HCI_INIT_CUSTOM_INIT:
859             log_info("Custom init");
860             // Custom initialization
861             if (hci_stack->control && hci_stack->control->next_cmd){
862                 int valid_cmd = (*hci_stack->control->next_cmd)(hci_stack->config, hci_stack->hci_packet_buffer);
863                 if (valid_cmd){
864                     int size = 3 + hci_stack->hci_packet_buffer[2];
865                     hci_stack->last_cmd_opcode = READ_BT_16(hci_stack->hci_packet_buffer, 0);
866                     hci_dump_packet(HCI_COMMAND_DATA_PACKET, 0, hci_stack->hci_packet_buffer, size);
867                     hci_stack->substate = HCI_INIT_W4_CUSTOM_INIT; // more init commands
868                     hci_stack->hci_transport->send_packet(HCI_COMMAND_DATA_PACKET, hci_stack->hci_packet_buffer, size);
869                     break;
870                 }
871                log_info("hci_run: init script done");
872             }
873             // otherwise continue
874             hci_stack->substate = HCI_INIT_W4_READ_BD_ADDR;
875             hci_send_cmd(&hci_read_bd_addr);
876             break;
877         case HCI_INIT_READ_BUFFER_SIZE:
878             hci_stack->substate = HCI_INIT_W4_READ_BUFFER_SIZE;
879             hci_send_cmd(&hci_read_buffer_size);
880             break;
881         case HCI_INIT_READ_LOCAL_SUPPORTED_FEATUES:
882             hci_stack->substate = HCI_INIT_W4_READ_LOCAL_SUPPORTED_FEATUES;
883             hci_send_cmd(&hci_read_local_supported_features);
884             break;
885         case HCI_INIT_SET_EVENT_MASK:
886             hci_stack->substate = HCI_INIT_W4_SET_EVENT_MASK;
887             if (hci_le_supported()){
888                 hci_send_cmd(&hci_set_event_mask,0xffffffff, 0x3FFFFFFF);
889             } else {
890                 // Kensington Bluetooth 2.1 USB Dongle (CSR Chipset) returns an error for 0xffff...
891                 hci_send_cmd(&hci_set_event_mask,0xffffffff, 0x1FFFFFFF);
892             }
893             break;
894         case HCI_INIT_WRITE_SIMPLE_PAIRING_MODE:
895             hci_stack->substate = HCI_INIT_W4_WRITE_SIMPLE_PAIRING_MODE;
896             hci_send_cmd(&hci_write_simple_pairing_mode, hci_stack->ssp_enable);
897             break;
898         case HCI_INIT_WRITE_PAGE_TIMEOUT:
899             hci_stack->substate = HCI_INIT_W4_WRITE_PAGE_TIMEOUT;
900             hci_send_cmd(&hci_write_page_timeout, 0x6000);  // ca. 15 sec
901             break;
902         case HCI_INIT_WRITE_CLASS_OF_DEVICE:
903             hci_stack->substate = HCI_INIT_W4_WRITE_CLASS_OF_DEVICE;
904             hci_send_cmd(&hci_write_class_of_device, hci_stack->class_of_device);
905             break;
906         case HCI_INIT_WRITE_LOCAL_NAME:
907             hci_stack->substate = HCI_INIT_W4_WRITE_LOCAL_NAME;
908             if (hci_stack->local_name){
909                 hci_send_cmd(&hci_write_local_name, hci_stack->local_name);
910             } else {
911                 char hostname[30];
912 #ifdef EMBEDDED
913                 // BTstack-11:22:33:44:55:66
914                 strcpy(hostname, "BTstack ");
915                 strcat(hostname, bd_addr_to_str(hci_stack->local_bd_addr));
916                 log_info("---> Name %s", hostname);
917 #else
918                 // hostname for POSIX systems
919                 gethostname(hostname, 30);
920                 hostname[29] = '\0';
921 #endif
922                 hci_send_cmd(&hci_write_local_name, hostname);
923             }
924             break;
925         case HCI_INIT_WRITE_SCAN_ENABLE:
926             hci_send_cmd(&hci_write_scan_enable, (hci_stack->connectable << 1) | hci_stack->discoverable); // page scan
927             hci_stack->substate = HCI_INIT_W4_WRITE_SCAN_ENABLE;
928             break;
929 #ifdef HAVE_BLE
930         // LE INIT
931         case HCI_INIT_LE_READ_BUFFER_SIZE:
932             hci_stack->substate = HCI_INIT_W4_LE_READ_BUFFER_SIZE;
933             hci_send_cmd(&hci_le_read_buffer_size);
934             break;
935         case HCI_INIT_WRITE_LE_HOST_SUPPORTED:
936             // LE Supported Host = 1, Simultaneous Host = 0
937             hci_stack->substate = HCI_INIT_W4_WRITE_LE_HOST_SUPPORTED;
938             hci_send_cmd(&hci_write_le_host_supported, 1, 0);
939             break;
940         case HCI_INIT_LE_SET_SCAN_PARAMETERS:
941             // LE Scan Parameters: active scanning, 300 ms interval, 30 ms window, public address, accept all advs
942             hci_stack->substate = HCI_INIT_W4_LE_SET_SCAN_PARAMETERS;
943             hci_send_cmd(&hci_le_set_scan_parameters, 1, 0x1e0, 0x30, 0, 0);
944             break;
945 #endif
946         // DONE
947         case HCI_INIT_DONE:
948             // done.
949             hci_stack->state = HCI_STATE_WORKING;
950             hci_emit_state();
951             return;
952         default:
953             return;
954     }
955 }
956 
957 static void hci_initializing_event_handler(uint8_t * packet, uint16_t size){
958     uint8_t command_completed = 0;
959 
960     if (packet[0] == HCI_EVENT_COMMAND_COMPLETE){
961         uint16_t opcode = READ_BT_16(packet,3);
962         if (opcode == hci_stack->last_cmd_opcode){
963             command_completed = 1;
964             log_info("Command complete for expected opcode %04x -> new substate %u", opcode, hci_stack->substate >> 1);
965         } else {
966             log_info("Command complete for opcode %04x, expected %04x", opcode, hci_stack->last_cmd_opcode);
967         }
968     }
969     if (packet[0] == HCI_EVENT_COMMAND_STATUS){
970         uint8_t  status = packet[2];
971         uint16_t opcode = READ_BT_16(packet,4);
972         if (opcode == hci_stack->last_cmd_opcode){
973             if (status){
974                 command_completed = 1;
975                 log_error("Command status error 0x%02x for expected opcode %04x -> new substate %u", status, opcode, hci_stack->substate >> 1);
976             } else {
977                 log_info("Command status OK for expected opcode %04x, waiting for command complete", opcode);
978             }
979         } else {
980             log_info("Command status for opcode %04x, expected %04x", opcode, hci_stack->last_cmd_opcode);
981         }
982     }
983 
984     if (!command_completed) return;
985 
986     switch(hci_stack->substate){
987         case HCI_INIT_W4_SEND_RESET:
988             run_loop_remove_timer(&hci_stack->timeout);
989             if (hci_stack->config == NULL || ((hci_uart_config_t *)hci_stack->config)->baudrate_main == 0){
990                 if (hci_stack->custom_bd_addr_set && hci_stack->control && hci_stack->control->set_bd_addr_cmd){
991                     // skip baud change
992                     hci_stack->substate = HCI_INIT_SET_BD_ADDR;
993                     return;
994                 } else {
995                     // skip baud change and set bd addr
996                     hci_stack->substate = HCI_INIT_CUSTOM_INIT;
997                     return;
998                 }
999             }
1000             break;
1001         case HCI_INIT_LOCAL_BAUD_CHANGE:
1002             log_info("Local baud rate change");
1003             hci_stack->hci_transport->set_baudrate(((hci_uart_config_t *)hci_stack->config)->baudrate_main);
1004             if (hci_stack->custom_bd_addr_set && hci_stack->control && hci_stack->control->set_bd_addr_cmd){
1005                 // skip baud change
1006                 hci_stack->substate = HCI_INIT_SET_BD_ADDR;
1007                 return;
1008             } else {
1009                 // skip baud change and set bd addr
1010                 hci_stack->substate = HCI_INIT_CUSTOM_INIT;
1011                 return;
1012             }
1013             break;
1014         case HCI_INIT_W4_CUSTOM_INIT:
1015             // repeat custom init
1016             hci_stack->substate = HCI_INIT_CUSTOM_INIT;
1017             return;
1018         case HCI_INIT_W4_SET_EVENT_MASK:
1019             // skip Classic init commands for LE only chipsets
1020             if (!hci_classic_supported()){
1021                 if (hci_le_supported()){
1022                     hci_stack->substate = HCI_INIT_LE_READ_BUFFER_SIZE; // skip all classic command
1023                     return;
1024                 } else {
1025                     log_error("Neither BR/EDR nor LE supported");
1026                     hci_stack->substate = HCI_INIT_DONE; // skip all
1027                     return;
1028                 }
1029             }
1030             if (!hci_ssp_supported()){
1031                 hci_stack->substate = HCI_INIT_WRITE_PAGE_TIMEOUT;
1032                 return;
1033             }
1034             break;
1035         case HCI_INIT_W4_WRITE_SCAN_ENABLE:
1036             if (!hci_le_supported()){
1037                 // SKIP LE init for Classic only configuration
1038                 hci_stack->substate = HCI_INIT_DONE;
1039                 return;
1040             }
1041         default:
1042             break;
1043     }
1044     hci_initializing_next_state();
1045 }
1046 
1047 
1048 // avoid huge local variables
1049 #ifndef EMBEDDED
1050 static device_name_t device_name;
1051 #endif
1052 static void event_handler(uint8_t *packet, int size){
1053 
1054     uint16_t event_length = packet[1];
1055 
1056     // assert packet is complete
1057     if (size != event_length + 2){
1058         log_error("hci.c: event_handler called with event packet of wrong size %u, expected %u => dropping packet", size, event_length + 2);
1059         return;
1060     }
1061 
1062     bd_addr_t addr;
1063     bd_addr_type_t addr_type;
1064     uint8_t link_type;
1065     hci_con_handle_t handle;
1066     hci_connection_t * conn;
1067     int i;
1068 
1069     // log_info("HCI:EVENT:%02x", packet[0]);
1070 
1071     switch (packet[0]) {
1072 
1073         case HCI_EVENT_COMMAND_COMPLETE:
1074             // get num cmd packets
1075             // log_info("HCI_EVENT_COMMAND_COMPLETE cmds old %u - new %u", hci_stack->num_cmd_packets, packet[2]);
1076             hci_stack->num_cmd_packets = packet[2];
1077 
1078             if (COMMAND_COMPLETE_EVENT(packet, hci_read_buffer_size)){
1079                 // from offset 5
1080                 // status
1081                 // "The HC_ACL_Data_Packet_Length return parameter will be used to determine the size of the L2CAP segments contained in ACL Data Packets"
1082                 hci_stack->acl_data_packet_length = READ_BT_16(packet, 6);
1083                 hci_stack->sco_data_packet_length = packet[8];
1084                 hci_stack->acl_packets_total_num  = READ_BT_16(packet, 9);
1085                 hci_stack->sco_packets_total_num  = READ_BT_16(packet, 11);
1086 
1087                 if (hci_stack->state == HCI_STATE_INITIALIZING){
1088                     // determine usable ACL payload size
1089                     if (HCI_ACL_PAYLOAD_SIZE < hci_stack->acl_data_packet_length){
1090                         hci_stack->acl_data_packet_length = HCI_ACL_PAYLOAD_SIZE;
1091                     }
1092                     log_info("hci_read_buffer_size: acl used size %u, count %u / sco size %u, count %u",
1093                              hci_stack->acl_data_packet_length, hci_stack->acl_packets_total_num,
1094                              hci_stack->sco_data_packet_length, hci_stack->sco_packets_total_num);
1095                 }
1096             }
1097 #ifdef HAVE_BLE
1098             if (COMMAND_COMPLETE_EVENT(packet, hci_le_read_buffer_size)){
1099                 hci_stack->le_data_packets_length = READ_BT_16(packet, 6);
1100                 hci_stack->le_acl_packets_total_num  = packet[8];
1101                     // determine usable ACL payload size
1102                     if (HCI_ACL_PAYLOAD_SIZE < hci_stack->le_data_packets_length){
1103                         hci_stack->le_data_packets_length = HCI_ACL_PAYLOAD_SIZE;
1104                     }
1105                 log_info("hci_le_read_buffer_size: size %u, count %u", hci_stack->le_data_packets_length, hci_stack->le_acl_packets_total_num);
1106             }
1107 #endif
1108             // Dump local address
1109             if (COMMAND_COMPLETE_EVENT(packet, hci_read_bd_addr)) {
1110                 bt_flip_addr(hci_stack->local_bd_addr, &packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE + 1]);
1111                 log_info("Local Address, Status: 0x%02x: Addr: %s",
1112                     packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE], bd_addr_to_str(hci_stack->local_bd_addr));
1113             }
1114             if (COMMAND_COMPLETE_EVENT(packet, hci_write_scan_enable)){
1115                 hci_emit_discoverable_enabled(hci_stack->discoverable);
1116             }
1117             // Note: HCI init checks
1118             if (COMMAND_COMPLETE_EVENT(packet, hci_read_local_supported_features)){
1119                 memcpy(hci_stack->local_supported_features, &packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE+1], 8);
1120                 log_info("Local Supported Features: 0x%02x%02x%02x%02x%02x%02x%02x%02x",
1121                     hci_stack->local_supported_features[0], hci_stack->local_supported_features[1],
1122                     hci_stack->local_supported_features[2], hci_stack->local_supported_features[3],
1123                     hci_stack->local_supported_features[4], hci_stack->local_supported_features[5],
1124                     hci_stack->local_supported_features[6], hci_stack->local_supported_features[7]);
1125 
1126                 // determine usable ACL packet types based on host buffer size and supported features
1127                 hci_stack->packet_types = hci_acl_packet_types_for_buffer_size_and_local_features(HCI_ACL_PAYLOAD_SIZE, &hci_stack->local_supported_features[0]);
1128                 log_info("packet types %04x", hci_stack->packet_types);
1129 
1130                 // Classic/LE
1131                 log_info("BR/EDR support %u, LE support %u", hci_classic_supported(), hci_le_supported());
1132             }
1133             break;
1134 
1135         case HCI_EVENT_COMMAND_STATUS:
1136             // get num cmd packets
1137             // log_info("HCI_EVENT_COMMAND_STATUS cmds - old %u - new %u", hci_stack->num_cmd_packets, packet[3]);
1138             hci_stack->num_cmd_packets = packet[3];
1139             break;
1140 
1141         case HCI_EVENT_NUMBER_OF_COMPLETED_PACKETS:{
1142             int offset = 3;
1143             for (i=0; i<packet[2];i++){
1144                 handle = READ_BT_16(packet, offset);
1145                 offset += 2;
1146                 uint16_t num_packets = READ_BT_16(packet, offset);
1147                 offset += 2;
1148 
1149                 conn = hci_connection_for_handle(handle);
1150                 if (!conn){
1151                     log_error("hci_number_completed_packet lists unused con handle %u", handle);
1152                     continue;
1153                 }
1154 
1155                 if (conn->address_type == BD_ADDR_TYPE_SCO){
1156                     if (conn->num_sco_packets_sent >= num_packets){
1157                         conn->num_sco_packets_sent -= num_packets;
1158                     } else {
1159                         log_error("hci_number_completed_packets, more sco slots freed then sent.");
1160                         conn->num_sco_packets_sent = 0;
1161                     }
1162 
1163                 } else {
1164                     if (conn->num_acl_packets_sent >= num_packets){
1165                         conn->num_acl_packets_sent -= num_packets;
1166                     } else {
1167                         log_error("hci_number_completed_packets, more acl slots freed then sent.");
1168                         conn->num_acl_packets_sent = 0;
1169                     }
1170                 }
1171                 // log_info("hci_number_completed_packet %u processed for handle %u, outstanding %u", num_packets, handle, conn->num_acl_packets_sent);
1172             }
1173             break;
1174         }
1175         case HCI_EVENT_CONNECTION_REQUEST:
1176             bt_flip_addr(addr, &packet[2]);
1177             // TODO: eval COD 8-10
1178             link_type = packet[11];
1179             log_info("Connection_incoming: %s, type %u", bd_addr_to_str(addr), link_type);
1180             addr_type = link_type == 1 ? BD_ADDR_TYPE_CLASSIC : BD_ADDR_TYPE_SCO;
1181             conn = hci_connection_for_bd_addr_and_type(addr, addr_type);
1182             if (!conn) {
1183                 conn = create_connection_for_bd_addr_and_type(addr, addr_type);
1184             }
1185             if (!conn) {
1186                 // CONNECTION REJECTED DUE TO LIMITED RESOURCES (0X0D)
1187                 hci_stack->decline_reason = 0x0d;
1188                 BD_ADDR_COPY(hci_stack->decline_addr, addr);
1189                 break;
1190             }
1191             conn->state = RECEIVED_CONNECTION_REQUEST;
1192             hci_run();
1193             break;
1194 
1195         case HCI_EVENT_CONNECTION_COMPLETE:
1196             // Connection management
1197             bt_flip_addr(addr, &packet[5]);
1198             log_info("Connection_complete (status=%u) %s", packet[2], bd_addr_to_str(addr));
1199             addr_type = BD_ADDR_TYPE_CLASSIC;
1200             conn = hci_connection_for_bd_addr_and_type(addr, addr_type);
1201             if (conn) {
1202                 if (!packet[2]){
1203                     conn->state = OPEN;
1204                     conn->con_handle = READ_BT_16(packet, 3);
1205                     conn->bonding_flags |= BONDING_REQUEST_REMOTE_FEATURES;
1206 
1207                     // restart timer
1208                     run_loop_set_timer(&conn->timeout, HCI_CONNECTION_TIMEOUT_MS);
1209                     run_loop_add_timer(&conn->timeout);
1210 
1211                     log_info("New connection: handle %u, %s", conn->con_handle, bd_addr_to_str(conn->address));
1212 
1213                     hci_emit_nr_connections_changed();
1214                 } else {
1215                     int notify_dedicated_bonding_failed = conn->bonding_flags & BONDING_DEDICATED;
1216                     uint8_t status = packet[2];
1217                     bd_addr_t bd_address;
1218                     memcpy(&bd_address, conn->address, 6);
1219 
1220                     // connection failed, remove entry
1221                     linked_list_remove(&hci_stack->connections, (linked_item_t *) conn);
1222                     btstack_memory_hci_connection_free( conn );
1223 
1224                     // notify client if dedicated bonding
1225                     if (notify_dedicated_bonding_failed){
1226                         log_info("hci notify_dedicated_bonding_failed");
1227                         hci_emit_dedicated_bonding_result(bd_address, status);
1228                     }
1229 
1230                     // if authentication error, also delete link key
1231                     if (packet[2] == 0x05) {
1232                         hci_drop_link_key_for_bd_addr(addr);
1233                     }
1234                 }
1235             }
1236             break;
1237 
1238         case HCI_EVENT_SYNCHRONOUS_CONNECTION_COMPLETE:
1239             bt_flip_addr(addr, &packet[5]);
1240             log_info("Synchronous Connection Complete (status=%u) %s", packet[2], bd_addr_to_str(addr));
1241             if (packet[2]){
1242                 // connection failed
1243                 break;
1244             }
1245             conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_SCO);
1246             if (!conn) {
1247                 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_SCO);
1248             }
1249             if (!conn) {
1250                 break;
1251             }
1252             conn->state = OPEN;
1253             conn->con_handle = READ_BT_16(packet, 3);
1254             break;
1255 
1256         case HCI_EVENT_READ_REMOTE_SUPPORTED_FEATURES_COMPLETE:
1257             handle = READ_BT_16(packet, 3);
1258             conn = hci_connection_for_handle(handle);
1259             if (!conn) break;
1260             if (!packet[2]){
1261                 uint8_t * features = &packet[5];
1262                 if (features[6] & (1 << 3)){
1263                     conn->bonding_flags |= BONDING_REMOTE_SUPPORTS_SSP;
1264                 }
1265             }
1266             conn->bonding_flags |= BONDING_RECEIVED_REMOTE_FEATURES;
1267             log_info("HCI_EVENT_READ_REMOTE_SUPPORTED_FEATURES_COMPLETE, bonding flags %x", conn->bonding_flags);
1268             if (conn->bonding_flags & BONDING_DEDICATED){
1269                 conn->bonding_flags |= BONDING_SEND_AUTHENTICATE_REQUEST;
1270             }
1271             break;
1272 
1273         case HCI_EVENT_LINK_KEY_REQUEST:
1274             log_info("HCI_EVENT_LINK_KEY_REQUEST");
1275             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], RECV_LINK_KEY_REQUEST);
1276             // non-bondable mode: link key negative reply will be sent by HANDLE_LINK_KEY_REQUEST
1277             if (hci_stack->bondable && !hci_stack->remote_device_db) break;
1278             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], HANDLE_LINK_KEY_REQUEST);
1279             hci_run();
1280             // request handled by hci_run() as HANDLE_LINK_KEY_REQUEST gets set
1281             return;
1282 
1283         case HCI_EVENT_LINK_KEY_NOTIFICATION: {
1284             bt_flip_addr(addr, &packet[2]);
1285             conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_CLASSIC);
1286             if (!conn) break;
1287             conn->authentication_flags |= RECV_LINK_KEY_NOTIFICATION;
1288             link_key_type_t link_key_type = (link_key_type_t)packet[24];
1289             // Change Connection Encryption keeps link key type
1290             if (link_key_type != CHANGED_COMBINATION_KEY){
1291                 conn->link_key_type = link_key_type;
1292             }
1293             if (!hci_stack->remote_device_db) break;
1294             hci_stack->remote_device_db->put_link_key(addr, &packet[8], conn->link_key_type);
1295             // still forward event to allow dismiss of pairing dialog
1296             break;
1297         }
1298 
1299         case HCI_EVENT_PIN_CODE_REQUEST:
1300             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], LEGACY_PAIRING_ACTIVE);
1301             // non-bondable mode: pin code negative reply will be sent
1302             if (!hci_stack->bondable){
1303                 hci_add_connection_flags_for_flipped_bd_addr(&packet[2], DENY_PIN_CODE_REQUEST);
1304                 hci_run();
1305                 return;
1306             }
1307             // PIN CODE REQUEST means the link key request didn't succee -> delete stored link key
1308             if (!hci_stack->remote_device_db) break;
1309             bt_flip_addr(addr, &packet[2]);
1310             hci_stack->remote_device_db->delete_link_key(addr);
1311             break;
1312 
1313         case HCI_EVENT_IO_CAPABILITY_REQUEST:
1314             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], RECV_IO_CAPABILITIES_REQUEST);
1315             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], SEND_IO_CAPABILITIES_REPLY);
1316             break;
1317 
1318         case HCI_EVENT_USER_CONFIRMATION_REQUEST:
1319             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], SSP_PAIRING_ACTIVE);
1320             if (!hci_stack->ssp_auto_accept) break;
1321             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], SEND_USER_CONFIRM_REPLY);
1322             break;
1323 
1324         case HCI_EVENT_USER_PASSKEY_REQUEST:
1325             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], SSP_PAIRING_ACTIVE);
1326             if (!hci_stack->ssp_auto_accept) break;
1327             hci_add_connection_flags_for_flipped_bd_addr(&packet[2], SEND_USER_PASSKEY_REPLY);
1328             break;
1329 
1330         case HCI_EVENT_ENCRYPTION_CHANGE:
1331             handle = READ_BT_16(packet, 3);
1332             conn = hci_connection_for_handle(handle);
1333             if (!conn) break;
1334             if (packet[2] == 0) {
1335                 if (packet[5]){
1336                     conn->authentication_flags |= CONNECTION_ENCRYPTED;
1337                 } else {
1338                     conn->authentication_flags &= ~CONNECTION_ENCRYPTED;
1339                 }
1340             }
1341             hci_emit_security_level(handle, gap_security_level_for_connection(conn));
1342             break;
1343 
1344         case HCI_EVENT_AUTHENTICATION_COMPLETE_EVENT:
1345             handle = READ_BT_16(packet, 3);
1346             conn = hci_connection_for_handle(handle);
1347             if (!conn) break;
1348 
1349             // dedicated bonding: send result and disconnect
1350             if (conn->bonding_flags & BONDING_DEDICATED){
1351                 conn->bonding_flags &= ~BONDING_DEDICATED;
1352                 conn->bonding_flags |= BONDING_DISCONNECT_DEDICATED_DONE;
1353                 conn->bonding_status = packet[2];
1354                 break;
1355             }
1356 
1357             if (packet[2] == 0 && gap_security_level_for_link_key_type(conn->link_key_type) >= conn->requested_security_level){
1358                 // link key sufficient for requested security
1359                 conn->bonding_flags |= BONDING_SEND_ENCRYPTION_REQUEST;
1360                 break;
1361             }
1362             // not enough
1363             hci_emit_security_level(handle, gap_security_level_for_connection(conn));
1364             break;
1365 
1366 #ifndef EMBEDDED
1367         case HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE:
1368             if (!hci_stack->remote_device_db) break;
1369             if (packet[2]) break; // status not ok
1370             bt_flip_addr(addr, &packet[3]);
1371             // fix for invalid remote names - terminate on 0xff
1372             for (i=0; i<248;i++){
1373                 if (packet[9+i] == 0xff){
1374                     packet[9+i] = 0;
1375                     break;
1376                 }
1377             }
1378             memset(&device_name, 0, sizeof(device_name_t));
1379             strncpy((char*) device_name, (char*) &packet[9], 248);
1380             hci_stack->remote_device_db->put_name(addr, &device_name);
1381             break;
1382 
1383         case HCI_EVENT_INQUIRY_RESULT:
1384         case HCI_EVENT_INQUIRY_RESULT_WITH_RSSI:{
1385             if (!hci_stack->remote_device_db) break;
1386             // first send inq result packet
1387             hci_stack->packet_handler(HCI_EVENT_PACKET, packet, size);
1388             // then send cached remote names
1389             int offset = 3;
1390             for (i=0; i<packet[2];i++){
1391                 bt_flip_addr(addr, &packet[offset]);
1392                 offset += 14; // 6 + 1 + 1 + 1 + 3 + 2;
1393                 if (hci_stack->remote_device_db->get_name(addr, &device_name)){
1394                     hci_emit_remote_name_cached(addr, &device_name);
1395                 }
1396             }
1397             return;
1398         }
1399 #endif
1400 
1401         // HCI_EVENT_DISCONNECTION_COMPLETE
1402         // has been split, to first notify stack before shutting connection down
1403         // see end of function, too.
1404         case HCI_EVENT_DISCONNECTION_COMPLETE:
1405             if (packet[2]) break;   // status != 0
1406             handle = READ_BT_16(packet, 3);
1407             hci_connection_t * conn = hci_connection_for_handle(handle);
1408             if (!conn) break;       // no conn struct anymore
1409             conn->state = RECEIVED_DISCONNECTION_COMPLETE;
1410             break;
1411 
1412         case HCI_EVENT_HARDWARE_ERROR:
1413             if(hci_stack->control && hci_stack->control->hw_error){
1414                 (*hci_stack->control->hw_error)();
1415             } else {
1416                 // if no special requests, just reboot stack
1417                 hci_power_control_off();
1418                 hci_power_control_on();
1419             }
1420             break;
1421 
1422         case DAEMON_EVENT_HCI_PACKET_SENT:
1423             // release packet buffer only for asynchronous transport and if there are not further fragements
1424             if (hci_transport_synchronous()) {
1425                 log_error("Synchronous HCI Transport shouldn't send DAEMON_EVENT_HCI_PACKET_SENT");
1426                 return; // instead of break: to avoid re-entering hci_run()
1427             }
1428             if (hci_stack->acl_fragmentation_total_size) break;
1429             hci_release_packet_buffer();
1430             break;
1431 
1432 #ifdef HAVE_BLE
1433         case HCI_EVENT_LE_META:
1434             switch (packet[2]){
1435                 case HCI_SUBEVENT_LE_ADVERTISING_REPORT:
1436                     log_info("advertising report received");
1437                     if (hci_stack->le_scanning_state != LE_SCANNING) break;
1438                     le_handle_advertisement_report(packet, size);
1439                     break;
1440                 case HCI_SUBEVENT_LE_CONNECTION_COMPLETE:
1441                     // Connection management
1442                     bt_flip_addr(addr, &packet[8]);
1443                     addr_type = (bd_addr_type_t)packet[7];
1444                     log_info("LE Connection_complete (status=%u) type %u, %s", packet[3], addr_type, bd_addr_to_str(addr));
1445                     // LE connections are auto-accepted, so just create a connection if there isn't one already
1446                     conn = hci_connection_for_bd_addr_and_type(addr, addr_type);
1447                     if (packet[3]){
1448                         if (conn){
1449                             // outgoing connection failed, remove entry
1450                             linked_list_remove(&hci_stack->connections, (linked_item_t *) conn);
1451                             btstack_memory_hci_connection_free( conn );
1452                         }
1453                         // if authentication error, also delete link key
1454                         if (packet[3] == 0x05) {
1455                             hci_drop_link_key_for_bd_addr(addr);
1456                         }
1457                         break;
1458                     }
1459                     if (!conn){
1460                         conn = create_connection_for_bd_addr_and_type(addr, addr_type);
1461                     }
1462                     if (!conn){
1463                         // no memory
1464                         break;
1465                     }
1466 
1467                     conn->state = OPEN;
1468                     conn->con_handle = READ_BT_16(packet, 4);
1469 
1470                     // TODO: store - role, peer address type, conn_interval, conn_latency, supervision timeout, master clock
1471 
1472                     // restart timer
1473                     // run_loop_set_timer(&conn->timeout, HCI_CONNECTION_TIMEOUT_MS);
1474                     // run_loop_add_timer(&conn->timeout);
1475 
1476                     log_info("New connection: handle %u, %s", conn->con_handle, bd_addr_to_str(conn->address));
1477 
1478                     hci_emit_nr_connections_changed();
1479                     break;
1480 
1481             // log_info("LE buffer size: %u, count %u", READ_BT_16(packet,6), packet[8]);
1482 
1483                 default:
1484                     break;
1485             }
1486             break;
1487 #endif
1488         default:
1489             break;
1490     }
1491 
1492     // handle BT initialization
1493     if (hci_stack->state == HCI_STATE_INITIALIZING){
1494         hci_initializing_event_handler(packet, size);
1495     }
1496 
1497     // help with BT sleep
1498     if (hci_stack->state == HCI_STATE_FALLING_ASLEEP
1499         && hci_stack->substate == HCI_FALLING_ASLEEP_W4_WRITE_SCAN_ENABLE
1500         && COMMAND_COMPLETE_EVENT(packet, hci_write_scan_enable)){
1501         hci_initializing_next_state();
1502     }
1503 
1504     // notify upper stack
1505     hci_stack->packet_handler(HCI_EVENT_PACKET, packet, size);
1506 
1507     // moved here to give upper stack a chance to close down everything with hci_connection_t intact
1508     if (packet[0] == HCI_EVENT_DISCONNECTION_COMPLETE){
1509         if (!packet[2]){
1510             handle = READ_BT_16(packet, 3);
1511             hci_connection_t * conn = hci_connection_for_handle(handle);
1512             if (conn) {
1513                 uint8_t status = conn->bonding_status;
1514                 uint16_t flags = conn->bonding_flags;
1515                 bd_addr_t bd_address;
1516                 memcpy(&bd_address, conn->address, 6);
1517                 hci_shutdown_connection(conn);
1518                 // connection struct is gone, don't access anymore
1519                 if (flags & BONDING_EMIT_COMPLETE_ON_DISCONNECT){
1520                     hci_emit_dedicated_bonding_result(bd_address, status);
1521                 }
1522             }
1523         }
1524     }
1525 
1526 	// execute main loop
1527 	hci_run();
1528 }
1529 
1530 static void sco_handler(uint8_t * packet, uint16_t size){
1531     // not handled yet
1532 }
1533 
1534 static void packet_handler(uint8_t packet_type, uint8_t *packet, uint16_t size){
1535     hci_dump_packet(packet_type, 1, packet, size);
1536     switch (packet_type) {
1537         case HCI_EVENT_PACKET:
1538             event_handler(packet, size);
1539             break;
1540         case HCI_ACL_DATA_PACKET:
1541             acl_handler(packet, size);
1542             break;
1543         case HCI_SCO_DATA_PACKET:
1544             sco_handler(packet, size);
1545         default:
1546             break;
1547     }
1548 }
1549 
1550 /** Register HCI packet handlers */
1551 void hci_register_packet_handler(void (*handler)(uint8_t packet_type, uint8_t *packet, uint16_t size)){
1552     hci_stack->packet_handler = handler;
1553 }
1554 
1555 static void hci_state_reset(){
1556     // no connections yet
1557     hci_stack->connections = NULL;
1558 
1559     // keep discoverable/connectable as this has been requested by the client(s)
1560     // hci_stack->discoverable = 0;
1561     // hci_stack->connectable = 0;
1562     // hci_stack->bondable = 1;
1563 
1564     // buffer is free
1565     hci_stack->hci_packet_buffer_reserved = 0;
1566 
1567     // no pending cmds
1568     hci_stack->decline_reason = 0;
1569     hci_stack->new_scan_enable_value = 0xff;
1570 
1571     // LE
1572     hci_stack->adv_addr_type = 0;
1573     memset(hci_stack->adv_address, 0, 6);
1574     hci_stack->le_scanning_state = LE_SCAN_IDLE;
1575     hci_stack->le_scan_type = 0xff;
1576     hci_stack->le_connection_parameter_range.le_conn_interval_min = 0x0006;
1577     hci_stack->le_connection_parameter_range.le_conn_interval_max = 0x0C80;
1578     hci_stack->le_connection_parameter_range.le_conn_latency_min = 0x0000;
1579     hci_stack->le_connection_parameter_range.le_conn_latency_max = 0x03E8;
1580     hci_stack->le_connection_parameter_range.le_supervision_timeout_min = 0x000A;
1581     hci_stack->le_connection_parameter_range.le_supervision_timeout_max = 0x0C80;
1582 }
1583 
1584 void hci_init(hci_transport_t *transport, void *config, bt_control_t *control, remote_device_db_t const* remote_device_db){
1585 
1586 #ifdef HAVE_MALLOC
1587     if (!hci_stack) {
1588         hci_stack = (hci_stack_t*) malloc(sizeof(hci_stack_t));
1589     }
1590 #else
1591     hci_stack = &hci_stack_static;
1592 #endif
1593     memset(hci_stack, 0, sizeof(hci_stack_t));
1594 
1595     // reference to use transport layer implementation
1596     hci_stack->hci_transport = transport;
1597 
1598     // references to used control implementation
1599     hci_stack->control = control;
1600 
1601     // reference to used config
1602     hci_stack->config = config;
1603 
1604     // higher level handler
1605     hci_stack->packet_handler = dummy_handler;
1606 
1607     // store and open remote device db
1608     hci_stack->remote_device_db = remote_device_db;
1609     if (hci_stack->remote_device_db) {
1610         hci_stack->remote_device_db->open();
1611     }
1612 
1613     // max acl payload size defined in config.h
1614     hci_stack->acl_data_packet_length = HCI_ACL_PAYLOAD_SIZE;
1615 
1616     // register packet handlers with transport
1617     transport->register_packet_handler(&packet_handler);
1618 
1619     hci_stack->state = HCI_STATE_OFF;
1620 
1621     // class of device
1622     hci_stack->class_of_device = 0x007a020c; // Smartphone
1623 
1624     // bondable by default
1625     hci_stack->bondable = 1;
1626 
1627     // Secure Simple Pairing default: enable, no I/O capabilities, general bonding, mitm not required, auto accept
1628     hci_stack->ssp_enable = 1;
1629     hci_stack->ssp_io_capability = SSP_IO_CAPABILITY_NO_INPUT_NO_OUTPUT;
1630     hci_stack->ssp_authentication_requirement = SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_GENERAL_BONDING;
1631     hci_stack->ssp_auto_accept = 1;
1632 
1633     hci_state_reset();
1634 }
1635 
1636 void hci_close(){
1637     // close remote device db
1638     if (hci_stack->remote_device_db) {
1639         hci_stack->remote_device_db->close();
1640     }
1641     while (hci_stack->connections) {
1642         // cancel all l2cap connections
1643         hci_emit_disconnection_complete(((hci_connection_t *) hci_stack->connections)->con_handle, 0x16); // terminated by local host
1644         hci_shutdown_connection((hci_connection_t *) hci_stack->connections);
1645     }
1646     hci_power_control(HCI_POWER_OFF);
1647 
1648 #ifdef HAVE_MALLOC
1649     free(hci_stack);
1650 #endif
1651     hci_stack = NULL;
1652 }
1653 
1654 void hci_set_class_of_device(uint32_t class_of_device){
1655     hci_stack->class_of_device = class_of_device;
1656 }
1657 
1658 // Set Public BD ADDR - passed on to Bluetooth chipset if supported in bt_control_h
1659 void hci_set_bd_addr(bd_addr_t addr){
1660     memcpy(hci_stack->custom_bd_addr, addr, 6);
1661     hci_stack->custom_bd_addr_set = 1;
1662 }
1663 
1664 void hci_disable_l2cap_timeout_check(){
1665     disable_l2cap_timeouts = 1;
1666 }
1667 // State-Module-Driver overview
1668 // state                    module  low-level
1669 // HCI_STATE_OFF             off      close
1670 // HCI_STATE_INITIALIZING,   on       open
1671 // HCI_STATE_WORKING,        on       open
1672 // HCI_STATE_HALTING,        on       open
1673 // HCI_STATE_SLEEPING,    off/sleep   close
1674 // HCI_STATE_FALLING_ASLEEP  on       open
1675 
1676 static int hci_power_control_on(void){
1677 
1678     // power on
1679     int err = 0;
1680     if (hci_stack->control && hci_stack->control->on){
1681         err = (*hci_stack->control->on)(hci_stack->config);
1682     }
1683     if (err){
1684         log_error( "POWER_ON failed");
1685         hci_emit_hci_open_failed();
1686         return err;
1687     }
1688 
1689     // open low-level device
1690     err = hci_stack->hci_transport->open(hci_stack->config);
1691     if (err){
1692         log_error( "HCI_INIT failed, turning Bluetooth off again");
1693         if (hci_stack->control && hci_stack->control->off){
1694             (*hci_stack->control->off)(hci_stack->config);
1695         }
1696         hci_emit_hci_open_failed();
1697         return err;
1698     }
1699     return 0;
1700 }
1701 
1702 static void hci_power_control_off(void){
1703 
1704     log_info("hci_power_control_off");
1705 
1706     // close low-level device
1707     hci_stack->hci_transport->close(hci_stack->config);
1708 
1709     log_info("hci_power_control_off - hci_transport closed");
1710 
1711     // power off
1712     if (hci_stack->control && hci_stack->control->off){
1713         (*hci_stack->control->off)(hci_stack->config);
1714     }
1715 
1716     log_info("hci_power_control_off - control closed");
1717 
1718     hci_stack->state = HCI_STATE_OFF;
1719 }
1720 
1721 static void hci_power_control_sleep(void){
1722 
1723     log_info("hci_power_control_sleep");
1724 
1725 #if 0
1726     // don't close serial port during sleep
1727 
1728     // close low-level device
1729     hci_stack->hci_transport->close(hci_stack->config);
1730 #endif
1731 
1732     // sleep mode
1733     if (hci_stack->control && hci_stack->control->sleep){
1734         (*hci_stack->control->sleep)(hci_stack->config);
1735     }
1736 
1737     hci_stack->state = HCI_STATE_SLEEPING;
1738 }
1739 
1740 static int hci_power_control_wake(void){
1741 
1742     log_info("hci_power_control_wake");
1743 
1744     // wake on
1745     if (hci_stack->control && hci_stack->control->wake){
1746         (*hci_stack->control->wake)(hci_stack->config);
1747     }
1748 
1749 #if 0
1750     // open low-level device
1751     int err = hci_stack->hci_transport->open(hci_stack->config);
1752     if (err){
1753         log_error( "HCI_INIT failed, turning Bluetooth off again");
1754         if (hci_stack->control && hci_stack->control->off){
1755             (*hci_stack->control->off)(hci_stack->config);
1756         }
1757         hci_emit_hci_open_failed();
1758         return err;
1759     }
1760 #endif
1761 
1762     return 0;
1763 }
1764 
1765 static void hci_power_transition_to_initializing(void){
1766     // set up state machine
1767     hci_stack->num_cmd_packets = 1; // assume that one cmd can be sent
1768     hci_stack->hci_packet_buffer_reserved = 0;
1769     hci_stack->state = HCI_STATE_INITIALIZING;
1770     hci_stack->substate = HCI_INIT_SEND_RESET;
1771 }
1772 
1773 int hci_power_control(HCI_POWER_MODE power_mode){
1774 
1775     log_info("hci_power_control: %u, current mode %u", power_mode, hci_stack->state);
1776 
1777     int err = 0;
1778     switch (hci_stack->state){
1779 
1780         case HCI_STATE_OFF:
1781             switch (power_mode){
1782                 case HCI_POWER_ON:
1783                     err = hci_power_control_on();
1784                     if (err) {
1785                         log_error("hci_power_control_on() error %u", err);
1786                         return err;
1787                     }
1788                     hci_power_transition_to_initializing();
1789                     break;
1790                 case HCI_POWER_OFF:
1791                     // do nothing
1792                     break;
1793                 case HCI_POWER_SLEEP:
1794                     // do nothing (with SLEEP == OFF)
1795                     break;
1796             }
1797             break;
1798 
1799         case HCI_STATE_INITIALIZING:
1800             switch (power_mode){
1801                 case HCI_POWER_ON:
1802                     // do nothing
1803                     break;
1804                 case HCI_POWER_OFF:
1805                     // no connections yet, just turn it off
1806                     hci_power_control_off();
1807                     break;
1808                 case HCI_POWER_SLEEP:
1809                     // no connections yet, just turn it off
1810                     hci_power_control_sleep();
1811                     break;
1812             }
1813             break;
1814 
1815         case HCI_STATE_WORKING:
1816             switch (power_mode){
1817                 case HCI_POWER_ON:
1818                     // do nothing
1819                     break;
1820                 case HCI_POWER_OFF:
1821                     // see hci_run
1822                     hci_stack->state = HCI_STATE_HALTING;
1823                     break;
1824                 case HCI_POWER_SLEEP:
1825                     // see hci_run
1826                     hci_stack->state = HCI_STATE_FALLING_ASLEEP;
1827                     hci_stack->substate = HCI_FALLING_ASLEEP_DISCONNECT;
1828                     break;
1829             }
1830             break;
1831 
1832         case HCI_STATE_HALTING:
1833             switch (power_mode){
1834                 case HCI_POWER_ON:
1835                     hci_power_transition_to_initializing();
1836                     break;
1837                 case HCI_POWER_OFF:
1838                     // do nothing
1839                     break;
1840                 case HCI_POWER_SLEEP:
1841                     // see hci_run
1842                     hci_stack->state = HCI_STATE_FALLING_ASLEEP;
1843                     hci_stack->substate = HCI_FALLING_ASLEEP_DISCONNECT;
1844                     break;
1845             }
1846             break;
1847 
1848         case HCI_STATE_FALLING_ASLEEP:
1849             switch (power_mode){
1850                 case HCI_POWER_ON:
1851 
1852 #if defined(USE_POWERMANAGEMENT) && defined(USE_BLUETOOL)
1853                     // nothing to do, if H4 supports power management
1854                     if (bt_control_iphone_power_management_enabled()){
1855                         hci_stack->state = HCI_STATE_INITIALIZING;
1856                         hci_stack->substate = HCI_INIT_WRITE_SCAN_ENABLE;   // init after sleep
1857                         break;
1858                     }
1859 #endif
1860                     hci_power_transition_to_initializing();
1861                     break;
1862                 case HCI_POWER_OFF:
1863                     // see hci_run
1864                     hci_stack->state = HCI_STATE_HALTING;
1865                     break;
1866                 case HCI_POWER_SLEEP:
1867                     // do nothing
1868                     break;
1869             }
1870             break;
1871 
1872         case HCI_STATE_SLEEPING:
1873             switch (power_mode){
1874                 case HCI_POWER_ON:
1875 
1876 #if defined(USE_POWERMANAGEMENT) && defined(USE_BLUETOOL)
1877                     // nothing to do, if H4 supports power management
1878                     if (bt_control_iphone_power_management_enabled()){
1879                         hci_stack->state = HCI_STATE_INITIALIZING;
1880                         hci_stack->substate = HCI_INIT_AFTER_SLEEP;
1881                         hci_update_scan_enable();
1882                         break;
1883                     }
1884 #endif
1885                     err = hci_power_control_wake();
1886                     if (err) return err;
1887                     hci_power_transition_to_initializing();
1888                     break;
1889                 case HCI_POWER_OFF:
1890                     hci_stack->state = HCI_STATE_HALTING;
1891                     break;
1892                 case HCI_POWER_SLEEP:
1893                     // do nothing
1894                     break;
1895             }
1896             break;
1897     }
1898 
1899     // create internal event
1900 	hci_emit_state();
1901 
1902 	// trigger next/first action
1903 	hci_run();
1904 
1905     return 0;
1906 }
1907 
1908 static void hci_update_scan_enable(void){
1909     // 2 = page scan, 1 = inq scan
1910     hci_stack->new_scan_enable_value  = hci_stack->connectable << 1 | hci_stack->discoverable;
1911     hci_run();
1912 }
1913 
1914 void hci_discoverable_control(uint8_t enable){
1915     if (enable) enable = 1; // normalize argument
1916 
1917     if (hci_stack->discoverable == enable){
1918         hci_emit_discoverable_enabled(hci_stack->discoverable);
1919         return;
1920     }
1921 
1922     hci_stack->discoverable = enable;
1923     hci_update_scan_enable();
1924 }
1925 
1926 void hci_connectable_control(uint8_t enable){
1927     if (enable) enable = 1; // normalize argument
1928 
1929     // don't emit event
1930     if (hci_stack->connectable == enable) return;
1931 
1932     hci_stack->connectable = enable;
1933     hci_update_scan_enable();
1934 }
1935 
1936 void hci_local_bd_addr(bd_addr_t address_buffer){
1937     memcpy(address_buffer, hci_stack->local_bd_addr, 6);
1938 }
1939 
1940 void hci_run(){
1941 
1942     hci_connection_t * connection;
1943     linked_item_t * it;
1944 
1945     // send continuation fragments first, as they block the prepared packet buffer
1946     if (hci_stack->acl_fragmentation_total_size > 0) {
1947         hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(hci_stack->hci_packet_buffer);
1948         if (hci_can_send_prepared_acl_packet_now(con_handle)){
1949             hci_connection_t *connection = hci_connection_for_handle(con_handle);
1950             if (connection) {
1951                 hci_send_acl_packet_fragments(connection);
1952                 return;
1953             }
1954             // connection gone -> discard further fragments
1955             hci_stack->acl_fragmentation_total_size = 0;
1956             hci_stack->acl_fragmentation_pos = 0;
1957         }
1958     }
1959 
1960     if (!hci_can_send_command_packet_now()) return;
1961 
1962     // global/non-connection oriented commands
1963 
1964     // decline incoming connections
1965     if (hci_stack->decline_reason){
1966         uint8_t reason = hci_stack->decline_reason;
1967         hci_stack->decline_reason = 0;
1968         hci_send_cmd(&hci_reject_connection_request, hci_stack->decline_addr, reason);
1969         return;
1970     }
1971 
1972     // send scan enable
1973     if (hci_stack->state == HCI_STATE_WORKING && hci_stack->new_scan_enable_value != 0xff && hci_classic_supported()){
1974         hci_send_cmd(&hci_write_scan_enable, hci_stack->new_scan_enable_value);
1975         hci_stack->new_scan_enable_value = 0xff;
1976         return;
1977     }
1978 
1979 #ifdef HAVE_BLE
1980     // handle le scan
1981     if (hci_stack->state == HCI_STATE_WORKING){
1982         switch(hci_stack->le_scanning_state){
1983             case LE_START_SCAN:
1984                 hci_stack->le_scanning_state = LE_SCANNING;
1985                 hci_send_cmd(&hci_le_set_scan_enable, 1, 0);
1986                 return;
1987 
1988             case LE_STOP_SCAN:
1989                 hci_stack->le_scanning_state = LE_SCAN_IDLE;
1990                 hci_send_cmd(&hci_le_set_scan_enable, 0, 0);
1991                 return;
1992             default:
1993                 break;
1994         }
1995         if (hci_stack->le_scan_type != 0xff){
1996             // defaults: active scanning, accept all advertisement packets
1997             int scan_type = hci_stack->le_scan_type;
1998             hci_stack->le_scan_type = 0xff;
1999             hci_send_cmd(&hci_le_set_scan_parameters, scan_type, hci_stack->le_scan_interval, hci_stack->le_scan_window, hci_stack->adv_addr_type, 0);
2000             return;
2001         }
2002     }
2003 #endif
2004 
2005     // send pending HCI commands
2006     for (it = (linked_item_t *) hci_stack->connections; it ; it = it->next){
2007         connection = (hci_connection_t *) it;
2008 
2009         switch(connection->state){
2010             case SEND_CREATE_CONNECTION:
2011                 switch(connection->address_type){
2012                     case BD_ADDR_TYPE_CLASSIC:
2013                         log_info("sending hci_create_connection");
2014                         hci_send_cmd(&hci_create_connection, connection->address, hci_usable_acl_packet_types(), 0, 0, 0, 1);
2015                         break;
2016                     default:
2017 #ifdef HAVE_BLE
2018                         log_info("sending hci_le_create_connection");
2019                         hci_send_cmd(&hci_le_create_connection,
2020                                      0x0060,    // scan interval: 60 ms
2021                                      0x0030,    // scan interval: 30 ms
2022                                      0,         // don't use whitelist
2023                                      connection->address_type, // peer address type
2024                                      connection->address,      // peer bd addr
2025                                      hci_stack->adv_addr_type, // our addr type:
2026                                      0x0008,    // conn interval min
2027                                      0x0018,    // conn interval max
2028                                      0,         // conn latency
2029                                      0x0048,    // supervision timeout
2030                                      0x0001,    // min ce length
2031                                      0x0001     // max ce length
2032                                      );
2033 
2034                         connection->state = SENT_CREATE_CONNECTION;
2035 #endif
2036                         break;
2037                 }
2038                 return;
2039 
2040             case RECEIVED_CONNECTION_REQUEST:
2041                 log_info("sending hci_accept_connection_request");
2042                 connection->state = ACCEPTED_CONNECTION_REQUEST;
2043                 if (connection->address_type == BD_ADDR_TYPE_CLASSIC){
2044                     hci_send_cmd(&hci_accept_connection_request, connection->address, 1);
2045                 } else {
2046                     // TODO: allows to customize synchronous connection parameters
2047                     hci_send_cmd(&hci_accept_synchronous_connection_command, connection->address, 8000, 8000, 0xFFFF, 0x0060, 0xFF, 0x003F);
2048                 }
2049                 return;
2050 
2051 #ifdef HAVE_BLE
2052             case SEND_CANCEL_CONNECTION:
2053                 connection->state = SENT_CANCEL_CONNECTION;
2054                 hci_send_cmd(&hci_le_create_connection_cancel);
2055                 return;
2056 #endif
2057             case SEND_DISCONNECT:
2058                 connection->state = SENT_DISCONNECT;
2059                 hci_send_cmd(&hci_disconnect, connection->con_handle, 0x13); // remote closed connection
2060                 return;
2061 
2062             default:
2063                 break;
2064         }
2065 
2066         if (connection->authentication_flags & HANDLE_LINK_KEY_REQUEST){
2067             log_info("responding to link key request");
2068             connectionClearAuthenticationFlags(connection, HANDLE_LINK_KEY_REQUEST);
2069             link_key_t link_key;
2070             link_key_type_t link_key_type;
2071             if ( hci_stack->remote_device_db
2072               && hci_stack->remote_device_db->get_link_key(connection->address, link_key, &link_key_type)
2073               && gap_security_level_for_link_key_type(link_key_type) >= connection->requested_security_level){
2074                connection->link_key_type = link_key_type;
2075                hci_send_cmd(&hci_link_key_request_reply, connection->address, &link_key);
2076             } else {
2077                hci_send_cmd(&hci_link_key_request_negative_reply, connection->address);
2078             }
2079             return;
2080         }
2081 
2082         if (connection->authentication_flags & DENY_PIN_CODE_REQUEST){
2083             log_info("denying to pin request");
2084             connectionClearAuthenticationFlags(connection, DENY_PIN_CODE_REQUEST);
2085             hci_send_cmd(&hci_pin_code_request_negative_reply, connection->address);
2086             return;
2087         }
2088 
2089         if (connection->authentication_flags & SEND_IO_CAPABILITIES_REPLY){
2090             connectionClearAuthenticationFlags(connection, SEND_IO_CAPABILITIES_REPLY);
2091             log_info("IO Capability Request received, stack bondable %u, io cap %u", hci_stack->bondable, hci_stack->ssp_io_capability);
2092             if (hci_stack->bondable && (hci_stack->ssp_io_capability != SSP_IO_CAPABILITY_UNKNOWN)){
2093                 // tweak authentication requirements
2094                 uint8_t authreq = hci_stack->ssp_authentication_requirement;
2095                 if (connection->bonding_flags & BONDING_DEDICATED){
2096                     authreq = SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_DEDICATED_BONDING;
2097                 }
2098                 if (gap_mitm_protection_required_for_security_level(connection->requested_security_level)){
2099                     authreq |= 1;
2100                 }
2101                 hci_send_cmd(&hci_io_capability_request_reply, &connection->address, hci_stack->ssp_io_capability, NULL, authreq);
2102             } else {
2103                 hci_send_cmd(&hci_io_capability_request_negative_reply, &connection->address, ERROR_CODE_PAIRING_NOT_ALLOWED);
2104             }
2105             return;
2106         }
2107 
2108         if (connection->authentication_flags & SEND_USER_CONFIRM_REPLY){
2109             connectionClearAuthenticationFlags(connection, SEND_USER_CONFIRM_REPLY);
2110             hci_send_cmd(&hci_user_confirmation_request_reply, &connection->address);
2111             return;
2112         }
2113 
2114         if (connection->authentication_flags & SEND_USER_PASSKEY_REPLY){
2115             connectionClearAuthenticationFlags(connection, SEND_USER_PASSKEY_REPLY);
2116             hci_send_cmd(&hci_user_passkey_request_reply, &connection->address, 000000);
2117             return;
2118         }
2119 
2120         if (connection->bonding_flags & BONDING_REQUEST_REMOTE_FEATURES){
2121             connection->bonding_flags &= ~BONDING_REQUEST_REMOTE_FEATURES;
2122             hci_send_cmd(&hci_read_remote_supported_features_command, connection->con_handle);
2123             return;
2124         }
2125 
2126         if (connection->bonding_flags & BONDING_DISCONNECT_SECURITY_BLOCK){
2127             connection->bonding_flags &= ~BONDING_DISCONNECT_SECURITY_BLOCK;
2128             hci_send_cmd(&hci_disconnect, connection->con_handle, 0x0005);  // authentication failure
2129             return;
2130         }
2131         if (connection->bonding_flags & BONDING_DISCONNECT_DEDICATED_DONE){
2132             connection->bonding_flags &= ~BONDING_DISCONNECT_DEDICATED_DONE;
2133             connection->bonding_flags |= BONDING_EMIT_COMPLETE_ON_DISCONNECT;
2134             hci_send_cmd(&hci_disconnect, connection->con_handle, 0x13);  // authentication done
2135             return;
2136         }
2137         if (connection->bonding_flags & BONDING_SEND_AUTHENTICATE_REQUEST){
2138             connection->bonding_flags &= ~BONDING_SEND_AUTHENTICATE_REQUEST;
2139             hci_send_cmd(&hci_authentication_requested, connection->con_handle);
2140             return;
2141         }
2142         if (connection->bonding_flags & BONDING_SEND_ENCRYPTION_REQUEST){
2143             connection->bonding_flags &= ~BONDING_SEND_ENCRYPTION_REQUEST;
2144             hci_send_cmd(&hci_set_connection_encryption, connection->con_handle, 1);
2145             return;
2146         }
2147 
2148 #ifdef HAVE_BLE
2149         if (connection->le_con_parameter_update_state == CON_PARAMETER_UPDATE_CHANGE_HCI_CON_PARAMETERS){
2150             connection->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NONE;
2151 
2152             uint16_t connection_interval_min = connection->le_conn_interval_min;
2153             connection->le_conn_interval_min = 0;
2154             hci_send_cmd(&hci_le_connection_update, connection->con_handle, connection_interval_min,
2155                 connection->le_conn_interval_max, connection->le_conn_latency, connection->le_supervision_timeout,
2156                 0x0000, 0xffff);
2157         }
2158 #endif
2159     }
2160 
2161     switch (hci_stack->state){
2162         case HCI_STATE_INITIALIZING:
2163             hci_initializing_run();
2164             break;
2165 
2166         case HCI_STATE_HALTING:
2167 
2168             log_info("HCI_STATE_HALTING");
2169             // close all open connections
2170             connection =  (hci_connection_t *) hci_stack->connections;
2171             if (connection){
2172 
2173                 // send disconnect
2174                 if (!hci_can_send_command_packet_now()) return;
2175 
2176                 log_info("HCI_STATE_HALTING, connection %p, handle %u", connection, (uint16_t)connection->con_handle);
2177                 hci_send_cmd(&hci_disconnect, connection->con_handle, 0x13);  // remote closed connection
2178 
2179                 // send disconnected event right away - causes higher layer connections to get closed, too.
2180                 hci_shutdown_connection(connection);
2181                 return;
2182             }
2183             log_info("HCI_STATE_HALTING, calling off");
2184 
2185             // switch mode
2186             hci_power_control_off();
2187 
2188             log_info("HCI_STATE_HALTING, emitting state");
2189             hci_emit_state();
2190             log_info("HCI_STATE_HALTING, done");
2191             break;
2192 
2193         case HCI_STATE_FALLING_ASLEEP:
2194             switch(hci_stack->substate) {
2195                 case HCI_FALLING_ASLEEP_DISCONNECT:
2196                     log_info("HCI_STATE_FALLING_ASLEEP");
2197                     // close all open connections
2198                     connection =  (hci_connection_t *) hci_stack->connections;
2199 
2200 #if defined(USE_POWERMANAGEMENT) && defined(USE_BLUETOOL)
2201                     // don't close connections, if H4 supports power management
2202                     if (bt_control_iphone_power_management_enabled()){
2203                         connection = NULL;
2204                     }
2205 #endif
2206                     if (connection){
2207 
2208                         // send disconnect
2209                         if (!hci_can_send_command_packet_now()) return;
2210 
2211                         log_info("HCI_STATE_FALLING_ASLEEP, connection %p, handle %u", connection, (uint16_t)connection->con_handle);
2212                         hci_send_cmd(&hci_disconnect, connection->con_handle, 0x13);  // remote closed connection
2213 
2214                         // send disconnected event right away - causes higher layer connections to get closed, too.
2215                         hci_shutdown_connection(connection);
2216                         return;
2217                     }
2218 
2219                     if (hci_classic_supported()){
2220                         // disable page and inquiry scan
2221                         if (!hci_can_send_command_packet_now()) return;
2222 
2223                         log_info("HCI_STATE_HALTING, disabling inq scans");
2224                         hci_send_cmd(&hci_write_scan_enable, hci_stack->connectable << 1); // drop inquiry scan but keep page scan
2225 
2226                         // continue in next sub state
2227                         hci_stack->substate = HCI_FALLING_ASLEEP_W4_WRITE_SCAN_ENABLE;
2228                         break;
2229                     }
2230                     // fall through for ble-only chips
2231 
2232                 case HCI_FALLING_ASLEEP_COMPLETE:
2233                     log_info("HCI_STATE_HALTING, calling sleep");
2234 #if defined(USE_POWERMANAGEMENT) && defined(USE_BLUETOOL)
2235                     // don't actually go to sleep, if H4 supports power management
2236                     if (bt_control_iphone_power_management_enabled()){
2237                         // SLEEP MODE reached
2238                         hci_stack->state = HCI_STATE_SLEEPING;
2239                         hci_emit_state();
2240                         break;
2241                     }
2242 #endif
2243                     // switch mode
2244                     hci_power_control_sleep();  // changes hci_stack->state to SLEEP
2245                     hci_emit_state();
2246                     break;
2247 
2248                 default:
2249                     break;
2250             }
2251             break;
2252 
2253         default:
2254             break;
2255     }
2256 }
2257 
2258 int hci_send_cmd_packet(uint8_t *packet, int size){
2259     bd_addr_t addr;
2260     hci_connection_t * conn;
2261     // house-keeping
2262 
2263     // create_connection?
2264     if (IS_COMMAND(packet, hci_create_connection)){
2265         bt_flip_addr(addr, &packet[3]);
2266         log_info("Create_connection to %s", bd_addr_to_str(addr));
2267 
2268         conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_CLASSIC);
2269         if (!conn){
2270             conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_CLASSIC);
2271             if (!conn){
2272                 // notify client that alloc failed
2273                 hci_emit_connection_complete(conn, BTSTACK_MEMORY_ALLOC_FAILED);
2274                 return 0; // don't sent packet to controller
2275             }
2276             conn->state = SEND_CREATE_CONNECTION;
2277         }
2278         log_info("conn state %u", conn->state);
2279         switch (conn->state){
2280             // if connection active exists
2281             case OPEN:
2282                 // and OPEN, emit connection complete command, don't send to controller
2283                 hci_emit_connection_complete(conn, 0);
2284                 return 0;
2285             case SEND_CREATE_CONNECTION:
2286                 // connection created by hci, e.g. dedicated bonding
2287                 break;
2288             default:
2289                 // otherwise, just ignore as it is already in the open process
2290                 return 0;
2291         }
2292         conn->state = SENT_CREATE_CONNECTION;
2293     }
2294     if (IS_COMMAND(packet, hci_link_key_request_reply)){
2295         hci_add_connection_flags_for_flipped_bd_addr(&packet[3], SENT_LINK_KEY_REPLY);
2296     }
2297     if (IS_COMMAND(packet, hci_link_key_request_negative_reply)){
2298         hci_add_connection_flags_for_flipped_bd_addr(&packet[3], SENT_LINK_KEY_NEGATIVE_REQUEST);
2299     }
2300 
2301     if (IS_COMMAND(packet, hci_delete_stored_link_key)){
2302         if (hci_stack->remote_device_db){
2303             bt_flip_addr(addr, &packet[3]);
2304             hci_stack->remote_device_db->delete_link_key(addr);
2305         }
2306     }
2307 
2308     if (IS_COMMAND(packet, hci_pin_code_request_negative_reply)
2309     ||  IS_COMMAND(packet, hci_pin_code_request_reply)){
2310         bt_flip_addr(addr, &packet[3]);
2311         conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_CLASSIC);
2312         if (conn){
2313             connectionClearAuthenticationFlags(conn, LEGACY_PAIRING_ACTIVE);
2314         }
2315     }
2316 
2317     if (IS_COMMAND(packet, hci_user_confirmation_request_negative_reply)
2318     ||  IS_COMMAND(packet, hci_user_confirmation_request_reply)
2319     ||  IS_COMMAND(packet, hci_user_passkey_request_negative_reply)
2320     ||  IS_COMMAND(packet, hci_user_passkey_request_reply)) {
2321         bt_flip_addr(addr, &packet[3]);
2322         conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_CLASSIC);
2323         if (conn){
2324             connectionClearAuthenticationFlags(conn, SSP_PAIRING_ACTIVE);
2325         }
2326     }
2327 
2328 #ifdef HAVE_BLE
2329     if (IS_COMMAND(packet, hci_le_set_advertising_parameters)){
2330         hci_stack->adv_addr_type = packet[8];
2331     }
2332     if (IS_COMMAND(packet, hci_le_set_random_address)){
2333         bt_flip_addr(hci_stack->adv_address, &packet[3]);
2334     }
2335 #endif
2336 
2337     hci_stack->num_cmd_packets--;
2338 
2339     hci_dump_packet(HCI_COMMAND_DATA_PACKET, 0, packet, size);
2340     int err = hci_stack->hci_transport->send_packet(HCI_COMMAND_DATA_PACKET, packet, size);
2341 
2342     // release packet buffer for synchronous transport implementations
2343     if (hci_transport_synchronous() && (packet == hci_stack->hci_packet_buffer)){
2344         hci_stack->hci_packet_buffer_reserved = 0;
2345     }
2346 
2347     return err;
2348 }
2349 
2350 // disconnect because of security block
2351 void hci_disconnect_security_block(hci_con_handle_t con_handle){
2352     hci_connection_t * connection = hci_connection_for_handle(con_handle);
2353     if (!connection) return;
2354     connection->bonding_flags |= BONDING_DISCONNECT_SECURITY_BLOCK;
2355 }
2356 
2357 
2358 // Configure Secure Simple Pairing
2359 
2360 // enable will enable SSP during init
2361 void hci_ssp_set_enable(int enable){
2362     hci_stack->ssp_enable = enable;
2363 }
2364 
2365 int hci_local_ssp_activated(){
2366     return hci_ssp_supported() && hci_stack->ssp_enable;
2367 }
2368 
2369 // if set, BTstack will respond to io capability request using authentication requirement
2370 void hci_ssp_set_io_capability(int io_capability){
2371     hci_stack->ssp_io_capability = io_capability;
2372 }
2373 void hci_ssp_set_authentication_requirement(int authentication_requirement){
2374     hci_stack->ssp_authentication_requirement = authentication_requirement;
2375 }
2376 
2377 // if set, BTstack will confirm a numberic comparion and enter '000000' if requested
2378 void hci_ssp_set_auto_accept(int auto_accept){
2379     hci_stack->ssp_auto_accept = auto_accept;
2380 }
2381 
2382 /**
2383  * pre: numcmds >= 0 - it's allowed to send a command to the controller
2384  */
2385 int hci_send_cmd(const hci_cmd_t *cmd, ...){
2386 
2387     if (!hci_can_send_command_packet_now()){
2388         log_error("hci_send_cmd called but cannot send packet now");
2389         return 0;
2390     }
2391 
2392     // for HCI INITIALIZATION
2393     // log_info("hci_send_cmd: opcode %04x", cmd->opcode);
2394     hci_stack->last_cmd_opcode = cmd->opcode;
2395 
2396     hci_reserve_packet_buffer();
2397     uint8_t * packet = hci_stack->hci_packet_buffer;
2398 
2399     va_list argptr;
2400     va_start(argptr, cmd);
2401     uint16_t size = hci_create_cmd_internal(packet, cmd, argptr);
2402     va_end(argptr);
2403 
2404     return hci_send_cmd_packet(packet, size);
2405 }
2406 
2407 // Create various non-HCI events.
2408 // TODO: generalize, use table similar to hci_create_command
2409 
2410 void hci_emit_state(){
2411     log_info("BTSTACK_EVENT_STATE %u", hci_stack->state);
2412     uint8_t event[3];
2413     event[0] = BTSTACK_EVENT_STATE;
2414     event[1] = sizeof(event) - 2;
2415     event[2] = hci_stack->state;
2416     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2417     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2418 }
2419 
2420 void hci_emit_connection_complete(hci_connection_t *conn, uint8_t status){
2421     uint8_t event[13];
2422     event[0] = HCI_EVENT_CONNECTION_COMPLETE;
2423     event[1] = sizeof(event) - 2;
2424     event[2] = status;
2425     bt_store_16(event, 3, conn->con_handle);
2426     bt_flip_addr(&event[5], conn->address);
2427     event[11] = 1; // ACL connection
2428     event[12] = 0; // encryption disabled
2429     hci_dump_packet(HCI_EVENT_PACKET, 0, event, sizeof(event));
2430     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2431 }
2432 
2433 void hci_emit_le_connection_complete(uint8_t address_type, bd_addr_t address, uint16_t conn_handle, uint8_t status){
2434     uint8_t event[21];
2435     event[0] = HCI_EVENT_LE_META;
2436     event[1] = sizeof(event) - 2;
2437     event[2] = HCI_SUBEVENT_LE_CONNECTION_COMPLETE;
2438     event[3] = status;
2439     bt_store_16(event, 4, conn_handle);
2440     event[6] = 0; // TODO: role
2441     event[7] = address_type;
2442     bt_flip_addr(&event[8], address);
2443     bt_store_16(event, 14, 0); // interval
2444     bt_store_16(event, 16, 0); // latency
2445     bt_store_16(event, 18, 0); // supervision timeout
2446     event[20] = 0; // master clock accuracy
2447     hci_dump_packet(HCI_EVENT_PACKET, 0, event, sizeof(event));
2448     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2449 }
2450 
2451 void hci_emit_disconnection_complete(uint16_t handle, uint8_t reason){
2452     uint8_t event[6];
2453     event[0] = HCI_EVENT_DISCONNECTION_COMPLETE;
2454     event[1] = sizeof(event) - 2;
2455     event[2] = 0; // status = OK
2456     bt_store_16(event, 3, handle);
2457     event[5] = reason;
2458     hci_dump_packet(HCI_EVENT_PACKET, 0, event, sizeof(event));
2459     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2460 }
2461 
2462 void hci_emit_l2cap_check_timeout(hci_connection_t *conn){
2463     if (disable_l2cap_timeouts) return;
2464     log_info("L2CAP_EVENT_TIMEOUT_CHECK");
2465     uint8_t event[4];
2466     event[0] = L2CAP_EVENT_TIMEOUT_CHECK;
2467     event[1] = sizeof(event) - 2;
2468     bt_store_16(event, 2, conn->con_handle);
2469     hci_dump_packet(HCI_EVENT_PACKET, 0, event, sizeof(event));
2470     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2471 }
2472 
2473 void hci_emit_nr_connections_changed(){
2474     log_info("BTSTACK_EVENT_NR_CONNECTIONS_CHANGED %u", nr_hci_connections());
2475     uint8_t event[3];
2476     event[0] = BTSTACK_EVENT_NR_CONNECTIONS_CHANGED;
2477     event[1] = sizeof(event) - 2;
2478     event[2] = nr_hci_connections();
2479     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2480     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2481 }
2482 
2483 void hci_emit_hci_open_failed(){
2484     log_info("BTSTACK_EVENT_POWERON_FAILED");
2485     uint8_t event[2];
2486     event[0] = BTSTACK_EVENT_POWERON_FAILED;
2487     event[1] = sizeof(event) - 2;
2488     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2489     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2490 }
2491 
2492 #ifndef EMBEDDED
2493 void hci_emit_btstack_version() {
2494     log_info("BTSTACK_EVENT_VERSION %u.%u", BTSTACK_MAJOR, BTSTACK_MINOR);
2495     uint8_t event[6];
2496     event[0] = BTSTACK_EVENT_VERSION;
2497     event[1] = sizeof(event) - 2;
2498     event[2] = BTSTACK_MAJOR;
2499     event[3] = BTSTACK_MINOR;
2500     bt_store_16(event, 4, BTSTACK_REVISION);
2501     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2502     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2503 }
2504 #endif
2505 
2506 void hci_emit_system_bluetooth_enabled(uint8_t enabled){
2507     log_info("BTSTACK_EVENT_SYSTEM_BLUETOOTH_ENABLED %u", enabled);
2508     uint8_t event[3];
2509     event[0] = BTSTACK_EVENT_SYSTEM_BLUETOOTH_ENABLED;
2510     event[1] = sizeof(event) - 2;
2511     event[2] = enabled;
2512     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2513     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2514 }
2515 
2516 void hci_emit_remote_name_cached(bd_addr_t addr, device_name_t *name){
2517     uint8_t event[2+1+6+248+1]; // +1 for \0 in log_info
2518     event[0] = BTSTACK_EVENT_REMOTE_NAME_CACHED;
2519     event[1] = sizeof(event) - 2 - 1;
2520     event[2] = 0;   // just to be compatible with HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE
2521     bt_flip_addr(&event[3], addr);
2522     memcpy(&event[9], name, 248);
2523 
2524     event[9+248] = 0;   // assert \0 for log_info
2525     log_info("BTSTACK_EVENT_REMOTE_NAME_CACHED %s = '%s'", bd_addr_to_str(addr), &event[9]);
2526 
2527     hci_dump_packet(HCI_EVENT_PACKET, 0, event, sizeof(event)-1);
2528     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event)-1);
2529 }
2530 
2531 void hci_emit_discoverable_enabled(uint8_t enabled){
2532     log_info("BTSTACK_EVENT_DISCOVERABLE_ENABLED %u", enabled);
2533     uint8_t event[3];
2534     event[0] = BTSTACK_EVENT_DISCOVERABLE_ENABLED;
2535     event[1] = sizeof(event) - 2;
2536     event[2] = enabled;
2537     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2538     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2539 }
2540 
2541 void hci_emit_security_level(hci_con_handle_t con_handle, gap_security_level_t level){
2542     log_info("hci_emit_security_level %u for handle %x", level, con_handle);
2543     uint8_t event[5];
2544     int pos = 0;
2545     event[pos++] = GAP_SECURITY_LEVEL;
2546     event[pos++] = sizeof(event) - 2;
2547     bt_store_16(event, 2, con_handle);
2548     pos += 2;
2549     event[pos++] = level;
2550     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2551     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2552 }
2553 
2554 void hci_emit_dedicated_bonding_result(bd_addr_t address, uint8_t status){
2555     log_info("hci_emit_dedicated_bonding_result %u ", status);
2556     uint8_t event[9];
2557     int pos = 0;
2558     event[pos++] = GAP_DEDICATED_BONDING_COMPLETED;
2559     event[pos++] = sizeof(event) - 2;
2560     event[pos++] = status;
2561     bt_flip_addr( &event[pos], address);
2562     pos += 6;
2563     hci_dump_packet( HCI_EVENT_PACKET, 0, event, sizeof(event));
2564     hci_stack->packet_handler(HCI_EVENT_PACKET, event, sizeof(event));
2565 }
2566 
2567 // query if remote side supports SSP
2568 int hci_remote_ssp_supported(hci_con_handle_t con_handle){
2569     hci_connection_t * connection = hci_connection_for_handle(con_handle);
2570     if (!connection) return 0;
2571     return (connection->bonding_flags & BONDING_REMOTE_SUPPORTS_SSP) ? 1 : 0;
2572 }
2573 
2574 int hci_ssp_supported_on_both_sides(hci_con_handle_t handle){
2575     return hci_local_ssp_activated() && hci_remote_ssp_supported(handle);
2576 }
2577 
2578 // GAP API
2579 /**
2580  * @bbrief enable/disable bonding. default is enabled
2581  * @praram enabled
2582  */
2583 void gap_set_bondable_mode(int enable){
2584     hci_stack->bondable = enable ? 1 : 0;
2585 }
2586 
2587 /**
2588  * @brief map link keys to security levels
2589  */
2590 gap_security_level_t gap_security_level_for_link_key_type(link_key_type_t link_key_type){
2591     switch (link_key_type){
2592         case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P256:
2593             return LEVEL_4;
2594         case COMBINATION_KEY:
2595         case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P192:
2596             return LEVEL_3;
2597         default:
2598             return LEVEL_2;
2599     }
2600 }
2601 
2602 static gap_security_level_t gap_security_level_for_connection(hci_connection_t * connection){
2603     if (!connection) return LEVEL_0;
2604     if ((connection->authentication_flags & CONNECTION_ENCRYPTED) == 0) return LEVEL_0;
2605     return gap_security_level_for_link_key_type(connection->link_key_type);
2606 }
2607 
2608 
2609 int gap_mitm_protection_required_for_security_level(gap_security_level_t level){
2610     log_info("gap_mitm_protection_required_for_security_level %u", level);
2611     return level > LEVEL_2;
2612 }
2613 
2614 /**
2615  * @brief get current security level
2616  */
2617 gap_security_level_t gap_security_level(hci_con_handle_t con_handle){
2618     hci_connection_t * connection = hci_connection_for_handle(con_handle);
2619     if (!connection) return LEVEL_0;
2620     return gap_security_level_for_connection(connection);
2621 }
2622 
2623 /**
2624  * @brief request connection to device to
2625  * @result GAP_AUTHENTICATION_RESULT
2626  */
2627 void gap_request_security_level(hci_con_handle_t con_handle, gap_security_level_t requested_level){
2628     hci_connection_t * connection = hci_connection_for_handle(con_handle);
2629     if (!connection){
2630         hci_emit_security_level(con_handle, LEVEL_0);
2631         return;
2632     }
2633     gap_security_level_t current_level = gap_security_level(con_handle);
2634     log_info("gap_request_security_level %u, current level %u", requested_level, current_level);
2635     if (current_level >= requested_level){
2636         hci_emit_security_level(con_handle, current_level);
2637         return;
2638     }
2639 
2640     connection->requested_security_level = requested_level;
2641 
2642 #if 0
2643     // sending encryption request without a link key results in an error.
2644     // TODO: figure out how to use it properly
2645 
2646     // would enabling ecnryption suffice (>= LEVEL_2)?
2647     if (hci_stack->remote_device_db){
2648         link_key_type_t link_key_type;
2649         link_key_t      link_key;
2650         if (hci_stack->remote_device_db->get_link_key( &connection->address, &link_key, &link_key_type)){
2651             if (gap_security_level_for_link_key_type(link_key_type) >= requested_level){
2652                 connection->bonding_flags |= BONDING_SEND_ENCRYPTION_REQUEST;
2653                 return;
2654             }
2655         }
2656     }
2657 #endif
2658 
2659     // try to authenticate connection
2660     connection->bonding_flags |= BONDING_SEND_AUTHENTICATE_REQUEST;
2661     hci_run();
2662 }
2663 
2664 /**
2665  * @brief start dedicated bonding with device. disconnect after bonding
2666  * @param device
2667  * @param request MITM protection
2668  * @result GAP_DEDICATED_BONDING_COMPLETE
2669  */
2670 int gap_dedicated_bonding(bd_addr_t device, int mitm_protection_required){
2671 
2672     // create connection state machine
2673     hci_connection_t * connection = create_connection_for_bd_addr_and_type(device, BD_ADDR_TYPE_CLASSIC);
2674 
2675     if (!connection){
2676         return BTSTACK_MEMORY_ALLOC_FAILED;
2677     }
2678 
2679     // delete linkn key
2680     hci_drop_link_key_for_bd_addr(device);
2681 
2682     // configure LEVEL_2/3, dedicated bonding
2683     connection->state = SEND_CREATE_CONNECTION;
2684     connection->requested_security_level = mitm_protection_required ? LEVEL_3 : LEVEL_2;
2685     log_info("gap_dedicated_bonding, mitm %u -> level %u", mitm_protection_required, connection->requested_security_level);
2686     connection->bonding_flags = BONDING_DEDICATED;
2687 
2688     // wait for GAP Security Result and send GAP Dedicated Bonding complete
2689 
2690     // handle: connnection failure (connection complete != ok)
2691     // handle: authentication failure
2692     // handle: disconnect on done
2693 
2694     hci_run();
2695 
2696     return 0;
2697 }
2698 
2699 void gap_set_local_name(const char * local_name){
2700     hci_stack->local_name = local_name;
2701 }
2702 
2703 le_command_status_t le_central_start_scan(){
2704     if (hci_stack->le_scanning_state == LE_SCANNING) return BLE_PERIPHERAL_OK;
2705     hci_stack->le_scanning_state = LE_START_SCAN;
2706     hci_run();
2707     return BLE_PERIPHERAL_OK;
2708 }
2709 
2710 le_command_status_t le_central_stop_scan(){
2711     if ( hci_stack->le_scanning_state == LE_SCAN_IDLE) return BLE_PERIPHERAL_OK;
2712     hci_stack->le_scanning_state = LE_STOP_SCAN;
2713     hci_run();
2714     return BLE_PERIPHERAL_OK;
2715 }
2716 
2717 void le_central_set_scan_parameters(uint8_t scan_type, uint16_t scan_interval, uint16_t scan_window){
2718     hci_stack->le_scan_type     = scan_type;
2719     hci_stack->le_scan_interval = scan_interval;
2720     hci_stack->le_scan_window   = scan_window;
2721     hci_run();
2722 }
2723 
2724 le_command_status_t le_central_connect(bd_addr_t  addr, bd_addr_type_t addr_type){
2725     hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, addr_type);
2726     if (!conn){
2727         log_info("le_central_connect: no connection exists yet, creating context");
2728         conn = create_connection_for_bd_addr_and_type(addr, addr_type);
2729         if (!conn){
2730             // notify client that alloc failed
2731             hci_emit_le_connection_complete(addr_type, addr, 0, BTSTACK_MEMORY_ALLOC_FAILED);
2732             log_info("le_central_connect: failed to alloc hci_connection_t");
2733             return BLE_PERIPHERAL_NOT_CONNECTED; // don't sent packet to controller
2734         }
2735         conn->state = SEND_CREATE_CONNECTION;
2736         log_info("le_central_connect: send create connection next");
2737         hci_run();
2738         return BLE_PERIPHERAL_OK;
2739     }
2740 
2741     if (!hci_is_le_connection(conn) ||
2742         conn->state == SEND_CREATE_CONNECTION ||
2743         conn->state == SENT_CREATE_CONNECTION) {
2744         hci_emit_le_connection_complete(conn->address_type, conn->address, 0, ERROR_CODE_COMMAND_DISALLOWED);
2745         log_error("le_central_connect: classic connection or connect is already being created");
2746         return BLE_PERIPHERAL_IN_WRONG_STATE;
2747     }
2748 
2749     log_info("le_central_connect: context exists with state %u", conn->state);
2750     hci_emit_le_connection_complete(conn->address_type, conn->address, conn->con_handle, 0);
2751     hci_run();
2752     return BLE_PERIPHERAL_OK;
2753 }
2754 
2755 // @assumption: only a single outgoing LE Connection exists
2756 static hci_connection_t * le_central_get_outgoing_connection(){
2757     linked_item_t *it;
2758     for (it = (linked_item_t *) hci_stack->connections; it ; it = it->next){
2759         hci_connection_t * conn = (hci_connection_t *) it;
2760         if (!hci_is_le_connection(conn)) continue;
2761         switch (conn->state){
2762             case SEND_CREATE_CONNECTION:
2763             case SENT_CREATE_CONNECTION:
2764                 return conn;
2765             default:
2766                 break;
2767         };
2768     }
2769     return NULL;
2770 }
2771 
2772 le_command_status_t le_central_connect_cancel(){
2773     hci_connection_t * conn = le_central_get_outgoing_connection();
2774     switch (conn->state){
2775         case SEND_CREATE_CONNECTION:
2776             // skip sending create connection and emit event instead
2777             hci_emit_le_connection_complete(conn->address_type, conn->address, 0, ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER);
2778             linked_list_remove(&hci_stack->connections, (linked_item_t *) conn);
2779             btstack_memory_hci_connection_free( conn );
2780             break;
2781         case SENT_CREATE_CONNECTION:
2782             // request to send cancel connection
2783             conn->state = SEND_CANCEL_CONNECTION;
2784             hci_run();
2785             break;
2786         default:
2787             break;
2788     }
2789     return BLE_PERIPHERAL_OK;
2790 }
2791 
2792 /**
2793  * @brief Updates the connection parameters for a given LE connection
2794  * @param handle
2795  * @param conn_interval_min (unit: 1.25ms)
2796  * @param conn_interval_max (unit: 1.25ms)
2797  * @param conn_latency
2798  * @param supervision_timeout (unit: 10ms)
2799  * @returns 0 if ok
2800  */
2801 int gap_update_connection_parameters(hci_con_handle_t con_handle, uint16_t conn_interval_min,
2802     uint16_t conn_interval_max, uint16_t conn_latency, uint16_t supervision_timeout){
2803     hci_connection_t * connection = hci_connection_for_handle(con_handle);
2804     if (!connection) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER;
2805     connection->le_conn_interval_min = conn_interval_min;
2806     connection->le_conn_interval_max = conn_interval_max;
2807     connection->le_conn_latency = conn_latency;
2808     connection->le_supervision_timeout = supervision_timeout;
2809     return 0;
2810 }
2811 
2812 le_command_status_t gap_disconnect(hci_con_handle_t handle){
2813     hci_connection_t * conn = hci_connection_for_handle(handle);
2814     if (!conn){
2815         hci_emit_disconnection_complete(handle, 0);
2816         return BLE_PERIPHERAL_OK;
2817     }
2818     conn->state = SEND_DISCONNECT;
2819     hci_run();
2820     return BLE_PERIPHERAL_OK;
2821 }
2822 
2823 void hci_disconnect_all(){
2824     linked_list_iterator_t it;
2825     linked_list_iterator_init(&it, &hci_stack->connections);
2826     while (linked_list_iterator_has_next(&it)){
2827         hci_connection_t * con = (hci_connection_t*) linked_list_iterator_next(&it);
2828         if (con->state == SENT_DISCONNECT) continue;
2829         con->state = SEND_DISCONNECT;
2830     }
2831     hci_run();
2832 }
2833