1 /* 2 * Copyright (C) 2014 BlueKitchen GmbH 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. Neither the name of the copyright holders nor the names of 14 * contributors may be used to endorse or promote products derived 15 * from this software without specific prior written permission. 16 * 4. Any redistribution, use, or modification is done solely for 17 * personal benefit and not for any commercial purpose or for 18 * monetary gain. 19 * 20 * THIS SOFTWARE IS PROVIDED BY BLUEKITCHEN GMBH AND CONTRIBUTORS 21 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 22 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 23 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL BLUEKITCHEN 24 * GMBH OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 25 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 26 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS 27 * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED 28 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 29 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF 30 * THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 * 33 * Please inquire about commercial licensing options at 34 * [email protected] 35 * 36 */ 37 38 #define BTSTACK_FILE__ "hci.c" 39 40 /* 41 * hci.c 42 * 43 * Created by Matthias Ringwald on 4/29/09. 44 * 45 */ 46 47 #include "btstack_config.h" 48 49 50 #ifdef ENABLE_CLASSIC 51 #ifdef HAVE_EMBEDDED_TICK 52 #include "btstack_run_loop_embedded.h" 53 #endif 54 #endif 55 56 #ifdef ENABLE_BLE 57 #include "gap.h" 58 #include "ble/le_device_db.h" 59 #endif 60 61 #include <stdarg.h> 62 #include <string.h> 63 #include <inttypes.h> 64 65 #include "btstack_debug.h" 66 #include "btstack_event.h" 67 #include "btstack_linked_list.h" 68 #include "btstack_memory.h" 69 #include "bluetooth_company_id.h" 70 #include "bluetooth_data_types.h" 71 #include "gap.h" 72 #include "hci.h" 73 #include "hci_cmd.h" 74 #include "hci_dump.h" 75 #include "ad_parser.h" 76 77 #ifdef ENABLE_CONTROLLER_DUMP_PACKETS 78 #include <stdio.h> // sprintf 79 #endif 80 81 #ifdef ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL 82 #ifndef HCI_HOST_ACL_PACKET_NUM 83 #error "ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL requires to define HCI_HOST_ACL_PACKET_NUM" 84 #endif 85 #ifndef HCI_HOST_ACL_PACKET_LEN 86 #error "ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL requires to define HCI_HOST_ACL_PACKET_LEN" 87 #endif 88 #ifndef HCI_HOST_SCO_PACKET_NUM 89 #error "ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL requires to define HCI_HOST_SCO_PACKET_NUM" 90 #endif 91 #ifndef HCI_HOST_SCO_PACKET_LEN 92 #error "ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL requires to define HCI_HOST_SCO_PACKET_LEN" 93 #endif 94 #endif 95 96 #ifndef MAX_NR_CONTROLLER_ACL_BUFFERS 97 #define MAX_NR_CONTROLLER_ACL_BUFFERS 255 98 #endif 99 #ifndef MAX_NR_CONTROLLER_SCO_PACKETS 100 #define MAX_NR_CONTROLLER_SCO_PACKETS 255 101 #endif 102 103 #ifndef HCI_ACL_CHUNK_SIZE_ALIGNMENT 104 #define HCI_ACL_CHUNK_SIZE_ALIGNMENT 1 105 #endif 106 107 #if defined(ENABLE_SCO_OVER_HCI) && defined(ENABLE_SCO_OVER_PCM) 108 #error "SCO data can either be routed over HCI or over PCM, but not over both. Please only enable ENABLE_SCO_OVER_HCI or ENABLE_SCO_OVER_PCM." 109 #endif 110 111 #if defined(ENABLE_SCO_OVER_HCI) && defined(HAVE_SCO_TRANSPORT) 112 #error "SCO data can either be routed over HCI or over PCM, but not over both. Please only enable ENABLE_SCO_OVER_HCI or HAVE_SCO_TRANSPORT." 113 #endif 114 115 #define HCI_CONNECTION_TIMEOUT_MS 10000 116 117 #ifndef HCI_RESET_RESEND_TIMEOUT_MS 118 #define HCI_RESET_RESEND_TIMEOUT_MS 200 119 #endif 120 121 // Names are arbitrarily shortened to 32 bytes if not requested otherwise 122 #ifndef GAP_INQUIRY_MAX_NAME_LEN 123 #define GAP_INQUIRY_MAX_NAME_LEN 32 124 #endif 125 126 // GAP inquiry state: 0 = off, 0x01 - 0x30 = requested duration, 0xfe = active, 0xff = stop requested 127 #define GAP_INQUIRY_DURATION_MIN 0x01 128 #define GAP_INQUIRY_DURATION_MAX 0x30 129 #define GAP_INQUIRY_MIN_PERIODIC_LEN_MIN 0x02 130 #define GAP_INQUIRY_MAX_PERIODIC_LEN_MIN 0x03 131 #define GAP_INQUIRY_STATE_IDLE 0x00 132 #define GAP_INQUIRY_STATE_W4_ACTIVE 0x80 133 #define GAP_INQUIRY_STATE_ACTIVE 0x81 134 #define GAP_INQUIRY_STATE_W2_CANCEL 0x82 135 #define GAP_INQUIRY_STATE_W4_CANCELLED 0x83 136 #define GAP_INQUIRY_STATE_PERIODIC 0x84 137 #define GAP_INQUIRY_STATE_W2_EXIT_PERIODIC 0x85 138 139 // GAP Remote Name Request 140 #define GAP_REMOTE_NAME_STATE_IDLE 0 141 #define GAP_REMOTE_NAME_STATE_W2_SEND 1 142 #define GAP_REMOTE_NAME_STATE_W4_COMPLETE 2 143 144 // GAP Pairing 145 #define GAP_PAIRING_STATE_IDLE 0 146 #define GAP_PAIRING_STATE_SEND_PIN 1 147 #define GAP_PAIRING_STATE_SEND_PIN_NEGATIVE 2 148 #define GAP_PAIRING_STATE_SEND_PASSKEY 3 149 #define GAP_PAIRING_STATE_SEND_PASSKEY_NEGATIVE 4 150 #define GAP_PAIRING_STATE_SEND_CONFIRMATION 5 151 #define GAP_PAIRING_STATE_SEND_CONFIRMATION_NEGATIVE 6 152 #define GAP_PAIRING_STATE_WAIT_FOR_COMMAND_COMPLETE 7 153 154 // 155 // compact storage of relevant supported HCI Commands. 156 // X-Macro below provides enumeration and mapping table into the supported 157 // commands bitmap (64 bytes) from HCI Read Local Supported Commands 158 // 159 160 // format: command name, byte offset, bit nr in 64-byte supported commands 161 // currently stored in 32-bit variable 162 #define SUPPORTED_HCI_COMMANDS \ 163 X( SUPPORTED_HCI_COMMAND_READ_REMOTE_EXTENDED_FEATURES , 2, 5) \ 164 X( SUPPORTED_HCI_COMMAND_WRITE_SYNCHRONOUS_FLOW_CONTROL_ENABLE , 10, 4) \ 165 X( SUPPORTED_HCI_COMMAND_READ_BUFFER_SIZE , 14, 7) \ 166 X( SUPPORTED_HCI_COMMAND_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING, 18, 3) \ 167 X( SUPPORTED_HCI_COMMAND_READ_ENCRYPTION_KEY_SIZE , 20, 4) \ 168 X( SUPPORTED_HCI_COMMAND_SET_EVENT_MASK_PAGE_2 , 22, 2) \ 169 X( SUPPORTED_HCI_COMMAND_WRITE_LE_HOST_SUPPORTED , 24, 6) \ 170 X( SUPPORTED_HCI_COMMAND_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY, 32, 1) \ 171 X( SUPPORTED_HCI_COMMAND_WRITE_SECURE_CONNECTIONS_HOST , 32, 3) \ 172 X( SUPPORTED_HCI_COMMAND_READ_LOCAL_OOB_EXTENDED_DATA_COMMAND , 32, 6) \ 173 X( SUPPORTED_HCI_COMMAND_LE_WRITE_SUGGESTED_DEFAULT_DATA_LENGTH, 34, 0) \ 174 X( SUPPORTED_HCI_COMMAND_LE_SET_ADDRESS_RESOLUTION_ENABLE , 35, 1) \ 175 X( SUPPORTED_HCI_COMMAND_LE_READ_MAXIMUM_DATA_LENGTH , 35, 3) \ 176 X( SUPPORTED_HCI_COMMAND_LE_SET_DEFAULT_PHY , 35, 5) \ 177 X( SUPPORTED_HCI_COMMAND_LE_SET_EXTENDED_ADVERTISING_ENABLE , 36, 6) \ 178 X( SUPPORTED_HCI_COMMAND_LE_READ_BUFFER_SIZE_V2 , 41, 5) \ 179 X( SUPPORTED_HCI_COMMAND_SET_MIN_ENCRYPTION_KEY_SIZE , 45, 7) \ 180 181 // enumerate supported commands 182 #define X(name, offset, bit) name, 183 enum { 184 SUPPORTED_HCI_COMMANDS 185 SUPPORTED_HCI_COMMANDS_COUNT 186 }; 187 #undef X 188 189 // prototypes 190 #ifdef ENABLE_CLASSIC 191 static void hci_update_scan_enable(void); 192 static void hci_emit_scan_mode_changed(uint8_t discoverable, uint8_t connectable); 193 static int hci_local_ssp_activated(void); 194 static bool hci_remote_ssp_supported(hci_con_handle_t con_handle); 195 static bool hci_ssp_supported(hci_connection_t * connection); 196 static void hci_notify_if_sco_can_send_now(void); 197 static void hci_emit_connection_complete(bd_addr_t address, hci_con_handle_t con_handle, uint8_t status); 198 static gap_security_level_t gap_security_level_for_connection(hci_connection_t * connection); 199 static void hci_emit_security_level(hci_con_handle_t con_handle, gap_security_level_t level); 200 static void hci_connection_timeout_handler(btstack_timer_source_t *timer); 201 static void hci_connection_timestamp(hci_connection_t *connection); 202 static void hci_emit_l2cap_check_timeout(hci_connection_t *conn); 203 static void gap_inquiry_explode(uint8_t *packet, uint16_t size); 204 #endif 205 206 static int hci_power_control_on(void); 207 static void hci_power_control_off(void); 208 static void hci_state_reset(void); 209 static void hci_halting_timeout_handler(btstack_timer_source_t * ds); 210 static void hci_emit_transport_packet_sent(void); 211 static void hci_emit_disconnection_complete(hci_con_handle_t con_handle, uint8_t reason); 212 static void hci_emit_nr_connections_changed(void); 213 static void hci_emit_hci_open_failed(void); 214 static void hci_emit_dedicated_bonding_result(bd_addr_t address, uint8_t status); 215 static void hci_emit_event(uint8_t * event, uint16_t size, int dump); 216 static void hci_emit_acl_packet(uint8_t * packet, uint16_t size); 217 static void hci_run(void); 218 static bool hci_is_le_connection(hci_connection_t * connection); 219 220 #ifdef ENABLE_CLASSIC 221 static int hci_have_usb_transport(void); 222 static void hci_trigger_remote_features_for_connection(hci_connection_t * connection); 223 #endif 224 225 #ifdef ENABLE_BLE 226 #ifdef ENABLE_LE_CENTRAL 227 // called from test/ble_client/advertising_data_parser.c 228 void le_handle_advertisement_report(uint8_t *packet, uint16_t size); 229 static uint8_t hci_whitelist_remove(bd_addr_type_t address_type, const bd_addr_t address); 230 static hci_connection_t * gap_get_outgoing_connection(void); 231 static void hci_le_scan_stop(void); 232 static bool hci_run_general_gap_le(void); 233 #endif 234 #ifdef ENABLE_LE_PERIPHERAL 235 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 236 static le_advertising_set_t * hci_advertising_set_for_handle(uint8_t advertising_handle); 237 #endif /* ENABLE_LE_EXTENDED_ADVERTISING */ 238 #endif /* ENABLE_LE_PERIPHERAL */ 239 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 240 static hci_iso_stream_t * hci_iso_stream_create(hci_iso_type_t iso_type, hci_iso_stream_state_t state, uint8_t group_id, uint8_t stream_id); 241 static void hci_iso_stream_finalize(hci_iso_stream_t * iso_stream); 242 static void hci_iso_stream_finalize_by_type_and_group_id(hci_iso_type_t iso_type, uint8_t group_id); 243 static hci_iso_stream_t * hci_iso_stream_for_con_handle(hci_con_handle_t con_handle); 244 static void hci_iso_stream_requested_finalize(uint8_t big_handle); 245 static void hci_iso_stream_requested_confirm(uint8_t big_handle); 246 static void hci_iso_packet_handler(uint8_t * packet, uint16_t size); 247 static le_audio_big_t * hci_big_for_handle(uint8_t big_handle); 248 static le_audio_cig_t * hci_cig_for_id(uint8_t cig_id); 249 static void hci_iso_notify_can_send_now(void); 250 static void hci_emit_big_created(const le_audio_big_t * big, uint8_t status); 251 static void hci_emit_big_terminated(const le_audio_big_t * big); 252 static void hci_emit_big_sync_created(const le_audio_big_sync_t * big_sync, uint8_t status); 253 static void hci_emit_big_sync_stopped(uint8_t big_handle); 254 static void hci_emit_cig_created(const le_audio_cig_t * cig, uint8_t status); 255 static void hci_cis_handle_created(hci_iso_stream_t * iso_stream, uint8_t status); 256 static le_audio_big_sync_t * hci_big_sync_for_handle(uint8_t big_handle); 257 258 #endif /* ENABLE_LE_ISOCHRONOUS_STREAMS */ 259 #endif /* ENABLE_BLE */ 260 261 // the STACK is here 262 #ifndef HAVE_MALLOC 263 static hci_stack_t hci_stack_static; 264 #endif 265 static hci_stack_t * hci_stack = NULL; 266 267 #ifdef ENABLE_CLASSIC 268 // default name 269 static const char * default_classic_name = "BTstack 00:00:00:00:00:00"; 270 271 // test helper 272 static uint8_t disable_l2cap_timeouts = 0; 273 #endif 274 275 // reset connection state on create and on reconnect 276 // don't overwrite addr, con handle, role 277 static void hci_connection_init(hci_connection_t * conn){ 278 conn->authentication_flags = AUTH_FLAG_NONE; 279 conn->bonding_flags = 0; 280 conn->requested_security_level = LEVEL_0; 281 #ifdef ENABLE_CLASSIC 282 conn->request_role = HCI_ROLE_INVALID; 283 conn->sniff_subrating_max_latency = 0xffff; 284 conn->qos_service_type = HCI_SERVICE_TYPE_INVALID; 285 conn->link_key_type = INVALID_LINK_KEY; 286 btstack_run_loop_set_timer_handler(&conn->timeout, hci_connection_timeout_handler); 287 btstack_run_loop_set_timer_context(&conn->timeout, conn); 288 hci_connection_timestamp(conn); 289 #endif 290 conn->acl_recombination_length = 0; 291 conn->acl_recombination_pos = 0; 292 conn->num_packets_sent = 0; 293 294 conn->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NONE; 295 #ifdef ENABLE_BLE 296 conn->le_phy_update_all_phys = 0xff; 297 #endif 298 #ifdef ENABLE_LE_LIMIT_ACL_FRAGMENT_BY_MAX_OCTETS 299 conn->le_max_tx_octets = 27; 300 #endif 301 #ifdef ENABLE_CLASSIC_PAIRING_OOB 302 conn->classic_oob_c_192 = NULL; 303 conn->classic_oob_r_192 = NULL; 304 conn->classic_oob_c_256 = NULL; 305 conn->classic_oob_r_256 = NULL; 306 #endif 307 } 308 309 /** 310 * create connection for given address 311 * 312 * @return connection OR NULL, if no memory left 313 */ 314 static hci_connection_t * 315 create_connection_for_bd_addr_and_type(const bd_addr_t addr, bd_addr_type_t addr_type, hci_role_t role) { 316 log_info("create_connection_for_addr %s, type %x", bd_addr_to_str(addr), addr_type); 317 318 hci_connection_t * conn = btstack_memory_hci_connection_get(); 319 if (!conn) return NULL; 320 hci_connection_init(conn); 321 322 bd_addr_copy(conn->address, addr); 323 conn->address_type = addr_type; 324 conn->con_handle = HCI_CON_HANDLE_INVALID; 325 conn->role = role; 326 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 327 conn->le_past_sync_handle = HCI_CON_HANDLE_INVALID; 328 conn->le_past_advertising_handle = 0xff; 329 #endif 330 btstack_linked_list_add(&hci_stack->connections, (btstack_linked_item_t *) conn); 331 332 return conn; 333 } 334 335 336 /** 337 * get le connection parameter range 338 * 339 * @return le connection parameter range struct 340 */ 341 void gap_get_connection_parameter_range(le_connection_parameter_range_t * range){ 342 *range = hci_stack->le_connection_parameter_range; 343 } 344 345 /** 346 * set le connection parameter range 347 * 348 */ 349 350 void gap_set_connection_parameter_range(le_connection_parameter_range_t *range){ 351 hci_stack->le_connection_parameter_range = *range; 352 } 353 354 /** 355 * @brief Test if connection parameters are inside in existing rage 356 * @param conn_interval_min (unit: 1.25ms) 357 * @param conn_interval_max (unit: 1.25ms) 358 * @param conn_latency 359 * @param supervision_timeout (unit: 10ms) 360 * @return 1 if included 361 */ 362 int gap_connection_parameter_range_included(le_connection_parameter_range_t * existing_range, uint16_t le_conn_interval_min, uint16_t le_conn_interval_max, uint16_t le_conn_latency, uint16_t le_supervision_timeout){ 363 if (le_conn_interval_min < existing_range->le_conn_interval_min) return 0; 364 if (le_conn_interval_max > existing_range->le_conn_interval_max) return 0; 365 366 if (le_conn_latency < existing_range->le_conn_latency_min) return 0; 367 if (le_conn_latency > existing_range->le_conn_latency_max) return 0; 368 369 if (le_supervision_timeout < existing_range->le_supervision_timeout_min) return 0; 370 if (le_supervision_timeout > existing_range->le_supervision_timeout_max) return 0; 371 372 return 1; 373 } 374 375 /** 376 * @brief Set max number of connections in LE Peripheral role (if Bluetooth Controller supports it) 377 * @note: default: 1 378 * @param max_peripheral_connections 379 */ 380 #ifdef ENABLE_LE_PERIPHERAL 381 void gap_set_max_number_peripheral_connections(int max_peripheral_connections){ 382 hci_stack->le_max_number_peripheral_connections = max_peripheral_connections; 383 } 384 #endif 385 386 /** 387 * get hci connections iterator 388 * 389 * @return hci connections iterator 390 */ 391 392 void hci_connections_get_iterator(btstack_linked_list_iterator_t *it){ 393 btstack_linked_list_iterator_init(it, &hci_stack->connections); 394 } 395 396 /** 397 * get connection for a given handle 398 * 399 * @return connection OR NULL, if not found 400 */ 401 hci_connection_t * hci_connection_for_handle(hci_con_handle_t con_handle){ 402 btstack_linked_list_iterator_t it; 403 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 404 while (btstack_linked_list_iterator_has_next(&it)){ 405 hci_connection_t * item = (hci_connection_t *) btstack_linked_list_iterator_next(&it); 406 if ( item->con_handle == con_handle ) { 407 return item; 408 } 409 } 410 return NULL; 411 } 412 413 /** 414 * get connection for given address 415 * 416 * @return connection OR NULL, if not found 417 */ 418 hci_connection_t * hci_connection_for_bd_addr_and_type(const bd_addr_t addr, bd_addr_type_t addr_type){ 419 btstack_linked_list_iterator_t it; 420 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 421 while (btstack_linked_list_iterator_has_next(&it)){ 422 hci_connection_t * connection = (hci_connection_t *) btstack_linked_list_iterator_next(&it); 423 if (connection->address_type != addr_type) continue; 424 if (memcmp(addr, connection->address, 6) != 0) continue; 425 return connection; 426 } 427 return NULL; 428 } 429 430 #ifdef ENABLE_CLASSIC 431 432 inline static void connectionClearAuthenticationFlags(hci_connection_t * conn, hci_authentication_flags_t flags){ 433 conn->authentication_flags = (hci_authentication_flags_t)(conn->authentication_flags & ~flags); 434 } 435 436 inline static void connectionSetAuthenticationFlags(hci_connection_t * conn, hci_authentication_flags_t flags){ 437 conn->authentication_flags = (hci_authentication_flags_t)(conn->authentication_flags | flags); 438 } 439 440 #ifdef ENABLE_SCO_OVER_HCI 441 static int hci_number_sco_connections(void){ 442 int connections = 0; 443 btstack_linked_list_iterator_t it; 444 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 445 while (btstack_linked_list_iterator_has_next(&it)){ 446 hci_connection_t * connection = (hci_connection_t *) btstack_linked_list_iterator_next(&it); 447 if (connection->address_type != BD_ADDR_TYPE_SCO) continue; 448 connections++; 449 } 450 return connections; 451 } 452 #endif 453 454 static void hci_connection_timeout_handler(btstack_timer_source_t *timer){ 455 hci_connection_t * connection = (hci_connection_t *) btstack_run_loop_get_timer_context(timer); 456 #ifdef HAVE_EMBEDDED_TICK 457 if (btstack_run_loop_embedded_get_ticks() > connection->timestamp + btstack_run_loop_embedded_ticks_for_ms(HCI_CONNECTION_TIMEOUT_MS)){ 458 // connections might be timed out 459 hci_emit_l2cap_check_timeout(connection); 460 } 461 #else 462 if (btstack_run_loop_get_time_ms() > (connection->timestamp + HCI_CONNECTION_TIMEOUT_MS)){ 463 // connections might be timed out 464 hci_emit_l2cap_check_timeout(connection); 465 } 466 #endif 467 } 468 469 static void hci_connection_timestamp(hci_connection_t *connection){ 470 #ifdef HAVE_EMBEDDED_TICK 471 connection->timestamp = btstack_run_loop_embedded_get_ticks(); 472 #else 473 connection->timestamp = btstack_run_loop_get_time_ms(); 474 #endif 475 } 476 477 /** 478 * add authentication flags and reset timer 479 * @note: assumes classic connection 480 * @note: bd_addr is passed in as litle endian uint8_t * as it is called from parsing packets 481 */ 482 static void hci_add_connection_flags_for_flipped_bd_addr(uint8_t *bd_addr, hci_authentication_flags_t flags){ 483 bd_addr_t addr; 484 reverse_bd_addr(bd_addr, addr); 485 hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 486 if (conn) { 487 connectionSetAuthenticationFlags(conn, flags); 488 hci_connection_timestamp(conn); 489 } 490 } 491 492 static bool hci_pairing_active(hci_connection_t * hci_connection){ 493 return (hci_connection->authentication_flags & AUTH_FLAG_PAIRING_ACTIVE_MASK) != 0; 494 } 495 496 static void hci_pairing_started(hci_connection_t * hci_connection, bool ssp){ 497 if (hci_pairing_active(hci_connection)) return; 498 if (ssp){ 499 hci_connection->authentication_flags |= AUTH_FLAG_SSP_PAIRING_ACTIVE; 500 } else { 501 hci_connection->authentication_flags |= AUTH_FLAG_LEGACY_PAIRING_ACTIVE; 502 } 503 // if we are initiator, we have sent an HCI Authenticate Request 504 bool initiator = (hci_connection->bonding_flags & BONDING_SENT_AUTHENTICATE_REQUEST) != 0; 505 506 // if we are responder, use minimal service security level as required level 507 if (!initiator){ 508 hci_connection->requested_security_level = (gap_security_level_t) btstack_max((uint32_t) hci_connection->requested_security_level, (uint32_t) hci_stack->gap_minimal_service_security_level); 509 } 510 511 log_info("pairing started, ssp %u, initiator %u, requested level %u", (int) ssp, (int) initiator, hci_connection->requested_security_level); 512 513 uint8_t event[12]; 514 event[0] = GAP_EVENT_PAIRING_STARTED; 515 event[1] = 10; 516 little_endian_store_16(event, 2, (uint16_t) hci_connection->con_handle); 517 reverse_bd_addr(hci_connection->address, &event[4]); 518 event[10] = (uint8_t) ssp; 519 event[11] = (uint8_t) initiator; 520 hci_emit_event(event, sizeof(event), 1); 521 } 522 523 static void hci_pairing_complete(hci_connection_t * hci_connection, uint8_t status){ 524 hci_connection->requested_security_level = LEVEL_0; 525 if (!hci_pairing_active(hci_connection)) return; 526 hci_connection->authentication_flags &= ~AUTH_FLAG_PAIRING_ACTIVE_MASK; 527 #ifdef ENABLE_CLASSIC_PAIRING_OOB 528 hci_connection->classic_oob_c_192 = NULL; 529 hci_connection->classic_oob_r_192 = NULL; 530 hci_connection->classic_oob_c_256 = NULL; 531 hci_connection->classic_oob_r_256 = NULL; 532 #endif 533 log_info("pairing complete, status %02x", status); 534 535 uint8_t event[11]; 536 event[0] = GAP_EVENT_PAIRING_COMPLETE; 537 event[1] = 9; 538 little_endian_store_16(event, 2, (uint16_t) hci_connection->con_handle); 539 reverse_bd_addr(hci_connection->address, &event[4]); 540 event[10] = status; 541 hci_emit_event(event, sizeof(event), 1); 542 543 // emit dedicated bonding done on failure, otherwise verify that connection can be encrypted 544 if ((status != ERROR_CODE_SUCCESS) && ((hci_connection->bonding_flags & BONDING_DEDICATED) != 0)){ 545 hci_connection->bonding_flags &= ~BONDING_DEDICATED; 546 hci_connection->bonding_flags |= BONDING_DISCONNECT_DEDICATED_DONE; 547 hci_connection->bonding_status = status; 548 } 549 } 550 551 bool hci_authentication_active_for_handle(hci_con_handle_t handle){ 552 hci_connection_t * conn = hci_connection_for_handle(handle); 553 if (!conn) return false; 554 return hci_pairing_active(conn); 555 } 556 557 void gap_drop_link_key_for_bd_addr(bd_addr_t addr){ 558 if (!hci_stack->link_key_db) return; 559 log_info("gap_drop_link_key_for_bd_addr: %s", bd_addr_to_str(addr)); 560 hci_stack->link_key_db->delete_link_key(addr); 561 } 562 563 void gap_store_link_key_for_bd_addr(bd_addr_t addr, link_key_t link_key, link_key_type_t type){ 564 if (!hci_stack->link_key_db) return; 565 log_info("gap_store_link_key_for_bd_addr: %s, type %u", bd_addr_to_str(addr), type); 566 hci_stack->link_key_db->put_link_key(addr, link_key, type); 567 } 568 569 bool gap_get_link_key_for_bd_addr(bd_addr_t addr, link_key_t link_key, link_key_type_t * type){ 570 if (!hci_stack->link_key_db) return false; 571 int result = hci_stack->link_key_db->get_link_key(addr, link_key, type) != 0; 572 log_info("link key for %s available %u, type %u", bd_addr_to_str(addr), result, (int) *type); 573 return result; 574 } 575 576 void gap_delete_all_link_keys(void){ 577 bd_addr_t addr; 578 link_key_t link_key; 579 link_key_type_t type; 580 btstack_link_key_iterator_t it; 581 int ok = gap_link_key_iterator_init(&it); 582 if (!ok) { 583 log_error("could not initialize iterator"); 584 return; 585 } 586 while (gap_link_key_iterator_get_next(&it, addr, link_key, &type)){ 587 gap_drop_link_key_for_bd_addr(addr); 588 } 589 gap_link_key_iterator_done(&it); 590 } 591 592 int gap_link_key_iterator_init(btstack_link_key_iterator_t * it){ 593 if (!hci_stack->link_key_db) return 0; 594 if (!hci_stack->link_key_db->iterator_init) return 0; 595 return hci_stack->link_key_db->iterator_init(it); 596 } 597 int gap_link_key_iterator_get_next(btstack_link_key_iterator_t * it, bd_addr_t bd_addr, link_key_t link_key, link_key_type_t * type){ 598 if (!hci_stack->link_key_db) return 0; 599 return hci_stack->link_key_db->iterator_get_next(it, bd_addr, link_key, type); 600 } 601 void gap_link_key_iterator_done(btstack_link_key_iterator_t * it){ 602 if (!hci_stack->link_key_db) return; 603 hci_stack->link_key_db->iterator_done(it); 604 } 605 #endif 606 607 static bool hci_is_le_connection_type(bd_addr_type_t address_type){ 608 switch (address_type){ 609 case BD_ADDR_TYPE_LE_PUBLIC: 610 case BD_ADDR_TYPE_LE_RANDOM: 611 case BD_ADDR_TYPE_LE_PUBLIC_IDENTITY: 612 case BD_ADDR_TYPE_LE_RANDOM_IDENTITY: 613 return true; 614 default: 615 return false; 616 } 617 } 618 619 static bool hci_is_le_connection(hci_connection_t * connection){ 620 return hci_is_le_connection_type(connection->address_type); 621 } 622 623 /** 624 * count connections 625 */ 626 static int nr_hci_connections(void){ 627 int count = 0; 628 btstack_linked_item_t *it; 629 for (it = (btstack_linked_item_t *) hci_stack->connections; it != NULL ; it = it->next){ 630 count++; 631 } 632 return count; 633 } 634 635 uint16_t hci_number_free_acl_slots_for_connection_type(bd_addr_type_t address_type){ 636 637 unsigned int num_packets_sent_classic = 0; 638 unsigned int num_packets_sent_le = 0; 639 640 btstack_linked_item_t *it; 641 for (it = (btstack_linked_item_t *) hci_stack->connections; it != NULL; it = it->next){ 642 hci_connection_t * connection = (hci_connection_t *) it; 643 if (hci_is_le_connection(connection)){ 644 num_packets_sent_le += connection->num_packets_sent; 645 } 646 if (connection->address_type == BD_ADDR_TYPE_ACL){ 647 num_packets_sent_classic += connection->num_packets_sent; 648 } 649 } 650 log_debug("ACL classic buffers: %u used of %u", num_packets_sent_classic, hci_stack->acl_packets_total_num); 651 int free_slots_classic = hci_stack->acl_packets_total_num - num_packets_sent_classic; 652 int free_slots_le = 0; 653 654 if (free_slots_classic < 0){ 655 log_error("hci_number_free_acl_slots: outgoing classic packets (%u) > total classic packets (%u)", num_packets_sent_classic, hci_stack->acl_packets_total_num); 656 return 0; 657 } 658 659 if (hci_stack->le_acl_packets_total_num){ 660 // if we have LE slots, they are used 661 free_slots_le = hci_stack->le_acl_packets_total_num - num_packets_sent_le; 662 if (free_slots_le < 0){ 663 log_error("hci_number_free_acl_slots: outgoing le packets (%u) > total le packets (%u)", num_packets_sent_le, hci_stack->le_acl_packets_total_num); 664 return 0; 665 } 666 } else { 667 // otherwise, classic slots are used for LE, too 668 free_slots_classic -= num_packets_sent_le; 669 if (free_slots_classic < 0){ 670 log_error("hci_number_free_acl_slots: outgoing classic + le packets (%u + %u) > total packets (%u)", num_packets_sent_classic, num_packets_sent_le, hci_stack->acl_packets_total_num); 671 return 0; 672 } 673 } 674 675 switch (address_type){ 676 case BD_ADDR_TYPE_UNKNOWN: 677 log_error("hci_number_free_acl_slots: unknown address type"); 678 return 0; 679 680 case BD_ADDR_TYPE_ACL: 681 return (uint16_t) free_slots_classic; 682 683 default: 684 if (hci_stack->le_acl_packets_total_num > 0){ 685 return (uint16_t) free_slots_le; 686 } 687 return (uint16_t) free_slots_classic; 688 } 689 } 690 691 int hci_number_free_acl_slots_for_handle(hci_con_handle_t con_handle){ 692 // get connection type 693 hci_connection_t * connection = hci_connection_for_handle(con_handle); 694 if (!connection){ 695 log_error("hci_number_free_acl_slots: handle 0x%04x not in connection list", con_handle); 696 return 0; 697 } 698 return hci_number_free_acl_slots_for_connection_type(connection->address_type); 699 } 700 701 #ifdef ENABLE_CLASSIC 702 static int hci_number_free_sco_slots(void){ 703 unsigned int num_sco_packets_sent = 0; 704 btstack_linked_item_t *it; 705 if (hci_stack->synchronous_flow_control_enabled){ 706 // explicit flow control 707 for (it = (btstack_linked_item_t *) hci_stack->connections; it ; it = it->next){ 708 hci_connection_t * connection = (hci_connection_t *) it; 709 if (connection->address_type != BD_ADDR_TYPE_SCO) continue; 710 num_sco_packets_sent += connection->num_packets_sent; 711 } 712 if (num_sco_packets_sent > hci_stack->sco_packets_total_num){ 713 log_info("hci_number_free_sco_slots:packets (%u) > total packets (%u)", num_sco_packets_sent, hci_stack->sco_packets_total_num); 714 return 0; 715 } 716 return hci_stack->sco_packets_total_num - num_sco_packets_sent; 717 } else { 718 // implicit flow control 719 int num_ready = 0; 720 for (it = (btstack_linked_item_t *) hci_stack->connections; it ; it = it->next){ 721 hci_connection_t * connection = (hci_connection_t *) it; 722 if (connection->address_type != BD_ADDR_TYPE_SCO) continue; 723 if (connection->sco_tx_ready == 0) continue; 724 num_ready++; 725 } 726 return num_ready; 727 } 728 } 729 #endif 730 731 // only used to send HCI Host Number Completed Packets 732 static int hci_can_send_comand_packet_transport(void){ 733 if (hci_stack->hci_packet_buffer_reserved) return 0; 734 735 // check for async hci transport implementations 736 if (hci_stack->hci_transport->can_send_packet_now){ 737 if (!hci_stack->hci_transport->can_send_packet_now(HCI_COMMAND_DATA_PACKET)){ 738 return 0; 739 } 740 } 741 return 1; 742 } 743 744 // new functions replacing hci_can_send_packet_now[_using_packet_buffer] 745 bool hci_can_send_command_packet_now(void){ 746 if (hci_can_send_comand_packet_transport() == 0) return false; 747 return hci_stack->num_cmd_packets > 0u; 748 } 749 750 static int hci_transport_can_send_prepared_packet_now(uint8_t packet_type){ 751 // check for async hci transport implementations 752 if (!hci_stack->hci_transport->can_send_packet_now) return true; 753 return hci_stack->hci_transport->can_send_packet_now(packet_type); 754 } 755 756 static bool hci_can_send_prepared_acl_packet_for_address_type(bd_addr_type_t address_type){ 757 if (!hci_transport_can_send_prepared_packet_now(HCI_ACL_DATA_PACKET)) return false; 758 return hci_number_free_acl_slots_for_connection_type(address_type) > 0; 759 } 760 761 bool hci_can_send_acl_le_packet_now(void){ 762 if (hci_stack->hci_packet_buffer_reserved) return false; 763 return hci_can_send_prepared_acl_packet_for_address_type(BD_ADDR_TYPE_LE_PUBLIC); 764 } 765 766 bool hci_can_send_prepared_acl_packet_now(hci_con_handle_t con_handle) { 767 if (!hci_transport_can_send_prepared_packet_now(HCI_ACL_DATA_PACKET)) return false; 768 return hci_number_free_acl_slots_for_handle(con_handle) > 0; 769 } 770 771 bool hci_can_send_acl_packet_now(hci_con_handle_t con_handle){ 772 if (hci_stack->hci_packet_buffer_reserved) return false; 773 return hci_can_send_prepared_acl_packet_now(con_handle); 774 } 775 776 #ifdef ENABLE_CLASSIC 777 bool hci_can_send_acl_classic_packet_now(void){ 778 if (hci_stack->hci_packet_buffer_reserved) return false; 779 return hci_can_send_prepared_acl_packet_for_address_type(BD_ADDR_TYPE_ACL); 780 } 781 782 bool hci_can_send_prepared_sco_packet_now(void){ 783 if (!hci_transport_can_send_prepared_packet_now(HCI_SCO_DATA_PACKET)) return false; 784 if (hci_have_usb_transport()){ 785 return hci_stack->sco_can_send_now; 786 } else { 787 return hci_number_free_sco_slots() > 0; 788 } 789 } 790 791 bool hci_can_send_sco_packet_now(void){ 792 if (hci_stack->hci_packet_buffer_reserved) return false; 793 return hci_can_send_prepared_sco_packet_now(); 794 } 795 796 void hci_request_sco_can_send_now_event(void){ 797 hci_stack->sco_waiting_for_can_send_now = 1; 798 hci_notify_if_sco_can_send_now(); 799 } 800 #endif 801 802 // used for internal checks in l2cap.c 803 bool hci_is_packet_buffer_reserved(void){ 804 return hci_stack->hci_packet_buffer_reserved; 805 } 806 807 // reserves outgoing packet buffer. 808 // @return 1 if successful 809 bool hci_reserve_packet_buffer(void){ 810 if (hci_stack->hci_packet_buffer_reserved) { 811 log_error("hci_reserve_packet_buffer called but buffer already reserved"); 812 return false; 813 } 814 hci_stack->hci_packet_buffer_reserved = true; 815 return true; 816 } 817 818 void hci_release_packet_buffer(void){ 819 hci_stack->hci_packet_buffer_reserved = false; 820 } 821 822 // assumption: synchronous implementations don't provide can_send_packet_now as they don't keep the buffer after the call 823 static int hci_transport_synchronous(void){ 824 return hci_stack->hci_transport->can_send_packet_now == NULL; 825 } 826 827 // used for debugging 828 #ifdef ENABLE_CONTROLLER_DUMP_PACKETS 829 static void hci_controller_dump_packets(void){ 830 // format: "{handle:04x}:{count:02d} " 831 char summaries[3][7 * 8 + 1]; 832 uint16_t totals[3]; 833 uint8_t index; 834 for (index = 0 ; index < 3 ; index++){ 835 summaries[index][0] = 0; 836 totals[index] = 0; 837 } 838 btstack_linked_item_t *it; 839 for (it = (btstack_linked_item_t *) hci_stack->connections; it != NULL; it = it->next){ 840 hci_connection_t * connection = (hci_connection_t *) it; 841 switch (connection->address_type){ 842 case BD_ADDR_TYPE_ACL: 843 index = 0; 844 break; 845 case BD_ADDR_TYPE_SCO: 846 index = 2; 847 break; 848 default: 849 index = 1; 850 break; 851 } 852 totals[index] += connection->num_packets_sent; 853 char item_text[10]; 854 sprintf(item_text, "%04x:%02d ", connection->con_handle,connection->num_packets_sent); 855 btstack_strcat(summaries[index], sizeof(summaries[0]), item_text); 856 } 857 for (index = 0 ; index < 3 ; index++){ 858 if (summaries[index][0] == 0){ 859 summaries[index][0] = '-'; 860 summaries[index][1] = 0; 861 } 862 } 863 log_info("Controller ACL BR/EDR: %s total %u / LE: %s total %u / SCO: %s total %u", summaries[0], totals[0], summaries[1], totals[1], summaries[2], totals[2]); 864 } 865 #endif 866 867 static uint8_t hci_send_acl_packet_fragments(hci_connection_t *connection){ 868 869 // log_info("hci_send_acl_packet_fragments %u/%u (con 0x%04x)", hci_stack->acl_fragmentation_pos, hci_stack->acl_fragmentation_total_size, connection->con_handle); 870 871 // max ACL data packet length depends on connection type (LE vs. Classic) and available buffers 872 uint16_t max_acl_data_packet_length = hci_stack->acl_data_packet_length; 873 if (hci_is_le_connection(connection) && (hci_stack->le_data_packets_length > 0u)){ 874 max_acl_data_packet_length = hci_stack->le_data_packets_length; 875 } 876 877 #ifdef ENABLE_LE_LIMIT_ACL_FRAGMENT_BY_MAX_OCTETS 878 if (hci_is_le_connection(connection) && (connection->le_max_tx_octets < max_acl_data_packet_length)){ 879 max_acl_data_packet_length = connection->le_max_tx_octets; 880 } 881 #endif 882 883 log_debug("hci_send_acl_packet_fragments entered"); 884 885 uint8_t status = ERROR_CODE_SUCCESS; 886 // multiple packets could be send on a synchronous HCI transport 887 while (true){ 888 889 log_debug("hci_send_acl_packet_fragments loop entered"); 890 891 // get current data 892 const uint16_t acl_header_pos = hci_stack->acl_fragmentation_pos - 4u; 893 int current_acl_data_packet_length = hci_stack->acl_fragmentation_total_size - hci_stack->acl_fragmentation_pos; 894 bool more_fragments = false; 895 896 // if ACL packet is larger than Bluetooth packet buffer, only send max_acl_data_packet_length 897 if (current_acl_data_packet_length > max_acl_data_packet_length){ 898 more_fragments = true; 899 current_acl_data_packet_length = max_acl_data_packet_length & (~(HCI_ACL_CHUNK_SIZE_ALIGNMENT-1)); 900 } 901 902 // copy handle_and_flags if not first fragment and update packet boundary flags to be 01 (continuing fragmnent) 903 if (acl_header_pos > 0u){ 904 uint16_t handle_and_flags = little_endian_read_16(hci_stack->hci_packet_buffer, 0); 905 handle_and_flags = (handle_and_flags & 0xcfffu) | (1u << 12u); 906 little_endian_store_16(hci_stack->hci_packet_buffer, acl_header_pos, handle_and_flags); 907 } 908 909 // update header len 910 little_endian_store_16(hci_stack->hci_packet_buffer, acl_header_pos + 2u, current_acl_data_packet_length); 911 912 // count packet 913 connection->num_packets_sent++; 914 log_debug("hci_send_acl_packet_fragments loop before send (more fragments %d)", (int) more_fragments); 915 916 // update state for next fragment (if any) as "transport done" might be sent during send_packet already 917 if (more_fragments){ 918 // update start of next fragment to send 919 hci_stack->acl_fragmentation_pos += current_acl_data_packet_length; 920 } else { 921 // done 922 hci_stack->acl_fragmentation_pos = 0; 923 hci_stack->acl_fragmentation_total_size = 0; 924 } 925 926 // send packet 927 uint8_t * packet = &hci_stack->hci_packet_buffer[acl_header_pos]; 928 const int size = current_acl_data_packet_length + 4; 929 hci_dump_packet(HCI_ACL_DATA_PACKET, 0, packet, size); 930 hci_stack->acl_fragmentation_tx_active = 1; 931 int err = hci_stack->hci_transport->send_packet(HCI_ACL_DATA_PACKET, packet, size); 932 if (err != 0){ 933 // no error from HCI Transport expected 934 status = ERROR_CODE_HARDWARE_FAILURE; 935 } 936 937 #ifdef ENABLE_CONTROLLER_DUMP_PACKETS 938 hci_controller_dump_packets(); 939 #endif 940 941 log_debug("hci_send_acl_packet_fragments loop after send (more fragments %d)", (int) more_fragments); 942 943 // done yet? 944 if (!more_fragments) break; 945 946 // can send more? 947 if (!hci_can_send_prepared_acl_packet_now(connection->con_handle)) return status; 948 } 949 950 log_debug("hci_send_acl_packet_fragments loop over"); 951 952 // release buffer now for synchronous transport 953 if (hci_transport_synchronous()){ 954 hci_stack->acl_fragmentation_tx_active = 0; 955 hci_release_packet_buffer(); 956 hci_emit_transport_packet_sent(); 957 } 958 959 return status; 960 } 961 962 // pre: caller has reserved the packet buffer 963 uint8_t hci_send_acl_packet_buffer(int size){ 964 btstack_assert(hci_stack->hci_packet_buffer_reserved); 965 966 uint8_t * packet = hci_stack->hci_packet_buffer; 967 hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(packet); 968 969 hci_connection_t *connection = hci_connection_for_handle( con_handle); 970 if (!connection) { 971 log_error("hci_send_acl_packet_buffer called but no connection for handle 0x%04x", con_handle); 972 hci_release_packet_buffer(); 973 hci_emit_transport_packet_sent(); 974 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 975 } 976 977 // check for free places on Bluetooth module 978 if (!hci_can_send_prepared_acl_packet_now(con_handle)) { 979 log_error("hci_send_acl_packet_buffer called but no free ACL buffers on controller"); 980 hci_release_packet_buffer(); 981 hci_emit_transport_packet_sent(); 982 return BTSTACK_ACL_BUFFERS_FULL; 983 } 984 985 #ifdef ENABLE_CLASSIC 986 hci_connection_timestamp(connection); 987 #endif 988 989 // hci_dump_packet( HCI_ACL_DATA_PACKET, 0, packet, size); 990 991 // setup data 992 hci_stack->acl_fragmentation_total_size = size; 993 hci_stack->acl_fragmentation_pos = 4; // start of L2CAP packet 994 995 return hci_send_acl_packet_fragments(connection); 996 } 997 998 #ifdef ENABLE_CLASSIC 999 // pre: caller has reserved the packet buffer 1000 uint8_t hci_send_sco_packet_buffer(int size){ 1001 btstack_assert(hci_stack->hci_packet_buffer_reserved); 1002 1003 uint8_t * packet = hci_stack->hci_packet_buffer; 1004 1005 // skip checks in loopback mode 1006 if (!hci_stack->loopback_mode){ 1007 hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(packet); // same for ACL and SCO 1008 1009 // check for free places on Bluetooth module 1010 if (!hci_can_send_prepared_sco_packet_now()) { 1011 log_error("hci_send_sco_packet_buffer called but no free SCO buffers on controller"); 1012 hci_release_packet_buffer(); 1013 hci_emit_transport_packet_sent(); 1014 return BTSTACK_ACL_BUFFERS_FULL; 1015 } 1016 1017 // track send packet in connection struct 1018 hci_connection_t *connection = hci_connection_for_handle( con_handle); 1019 if (!connection) { 1020 log_error("hci_send_sco_packet_buffer called but no connection for handle 0x%04x", con_handle); 1021 hci_release_packet_buffer(); 1022 hci_emit_transport_packet_sent(); 1023 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 1024 } 1025 1026 if (hci_have_usb_transport()){ 1027 // token used 1028 hci_stack->sco_can_send_now = false; 1029 } else { 1030 if (hci_stack->synchronous_flow_control_enabled){ 1031 connection->num_packets_sent++; 1032 } else { 1033 connection->sco_tx_ready--; 1034 } 1035 } 1036 } 1037 1038 hci_dump_packet( HCI_SCO_DATA_PACKET, 0, packet, size); 1039 1040 #ifdef HAVE_SCO_TRANSPORT 1041 hci_stack->sco_transport->send_packet(packet, size); 1042 hci_release_packet_buffer(); 1043 hci_emit_transport_packet_sent(); 1044 1045 return 0; 1046 #else 1047 int err = hci_stack->hci_transport->send_packet(HCI_SCO_DATA_PACKET, packet, size); 1048 if (hci_transport_synchronous()){ 1049 hci_release_packet_buffer(); 1050 hci_emit_transport_packet_sent(); 1051 } 1052 1053 if (err != 0){ 1054 return ERROR_CODE_HARDWARE_FAILURE; 1055 } 1056 return ERROR_CODE_SUCCESS; 1057 #endif 1058 } 1059 #endif 1060 1061 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 1062 static uint8_t hci_send_iso_packet_fragments(void){ 1063 1064 uint16_t max_iso_data_packet_length = hci_stack->le_iso_packets_length; 1065 uint8_t status = ERROR_CODE_SUCCESS; 1066 // multiple packets could be send on a synchronous HCI transport 1067 while (true){ 1068 1069 // get current data 1070 const uint16_t iso_header_pos = hci_stack->iso_fragmentation_pos - 4u; 1071 int current_iso_data_packet_length = hci_stack->iso_fragmentation_total_size - hci_stack->iso_fragmentation_pos; 1072 bool more_fragments = false; 1073 1074 // if ISO packet is larger than Bluetooth packet buffer, only send max_acl_data_packet_length 1075 if (current_iso_data_packet_length > max_iso_data_packet_length){ 1076 more_fragments = true; 1077 current_iso_data_packet_length = max_iso_data_packet_length; 1078 } 1079 1080 // copy handle_and_flags if not first fragment and update packet boundary flags to be 01 (continuing fragmnent) 1081 uint16_t handle_and_flags = little_endian_read_16(hci_stack->hci_packet_buffer, 0); 1082 uint8_t pb_flags; 1083 if (iso_header_pos == 0u){ 1084 // first fragment, keep TS field 1085 pb_flags = more_fragments ? 0x00 : 0x02; 1086 handle_and_flags = (handle_and_flags & 0x4fffu) | (pb_flags << 12u); 1087 } else { 1088 // later fragment, drop TS field 1089 pb_flags = more_fragments ? 0x01 : 0x03; 1090 handle_and_flags = (handle_and_flags & 0x0fffu) | (pb_flags << 12u); 1091 } 1092 little_endian_store_16(hci_stack->hci_packet_buffer, iso_header_pos, handle_and_flags); 1093 1094 // update header len 1095 little_endian_store_16(hci_stack->hci_packet_buffer, iso_header_pos + 2u, current_iso_data_packet_length); 1096 1097 // update state for next fragment (if any) as "transport done" might be sent during send_packet already 1098 if (more_fragments){ 1099 // update start of next fragment to send 1100 hci_stack->iso_fragmentation_pos += current_iso_data_packet_length; 1101 } else { 1102 // done 1103 hci_stack->iso_fragmentation_pos = 0; 1104 hci_stack->iso_fragmentation_total_size = 0; 1105 } 1106 1107 // send packet 1108 uint8_t * packet = &hci_stack->hci_packet_buffer[iso_header_pos]; 1109 const int size = current_iso_data_packet_length + 4; 1110 hci_dump_packet(HCI_ISO_DATA_PACKET, 0, packet, size); 1111 hci_stack->iso_fragmentation_tx_active = true; 1112 int err = hci_stack->hci_transport->send_packet(HCI_ISO_DATA_PACKET, packet, size); 1113 if (err != 0){ 1114 // no error from HCI Transport expected 1115 status = ERROR_CODE_HARDWARE_FAILURE; 1116 } 1117 1118 // done yet? 1119 if (!more_fragments) break; 1120 1121 // can send more? 1122 if (!hci_transport_can_send_prepared_packet_now(HCI_ISO_DATA_PACKET)) return false; 1123 } 1124 1125 // release buffer now for synchronous transport 1126 if (hci_transport_synchronous()){ 1127 hci_stack->iso_fragmentation_tx_active = false; 1128 hci_release_packet_buffer(); 1129 hci_emit_transport_packet_sent(); 1130 } 1131 1132 return status; 1133 } 1134 1135 uint8_t hci_send_iso_packet_buffer(uint16_t size){ 1136 btstack_assert(hci_stack->hci_packet_buffer_reserved); 1137 1138 hci_con_handle_t con_handle = (hci_con_handle_t) little_endian_read_16(hci_stack->hci_packet_buffer, 0) & 0xfff; 1139 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(con_handle); 1140 if (iso_stream == NULL){ 1141 hci_release_packet_buffer(); 1142 hci_iso_notify_can_send_now(); 1143 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 1144 } 1145 1146 // TODO: check for space on controller 1147 1148 // skip iso packets if needed 1149 if (iso_stream->num_packets_to_skip > 0){ 1150 iso_stream->num_packets_to_skip--; 1151 // pretend it was processed and trigger next one 1152 hci_release_packet_buffer(); 1153 hci_iso_notify_can_send_now(); 1154 return ERROR_CODE_SUCCESS; 1155 } 1156 1157 // track outgoing packet sent 1158 log_info("Outgoing ISO packet for con handle 0x%04x", con_handle); 1159 iso_stream->num_packets_sent++; 1160 1161 // setup data 1162 hci_stack->iso_fragmentation_total_size = size; 1163 hci_stack->iso_fragmentation_pos = 4; // start of L2CAP packet 1164 1165 return hci_send_iso_packet_fragments(); 1166 } 1167 #endif 1168 1169 static void acl_handler(uint8_t *packet, uint16_t size){ 1170 1171 // get info 1172 hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(packet); 1173 hci_connection_t *conn = hci_connection_for_handle(con_handle); 1174 uint8_t acl_flags = READ_ACL_FLAGS(packet); 1175 uint16_t acl_length = READ_ACL_LENGTH(packet); 1176 1177 // ignore non-registered handle 1178 if (!conn){ 1179 log_error("acl_handler called with non-registered handle %u!" , con_handle); 1180 return; 1181 } 1182 1183 // assert packet is complete 1184 if ((acl_length + 4u) != size){ 1185 log_error("acl_handler called with ACL packet of wrong size %d, expected %u => dropping packet", size, acl_length + 4); 1186 return; 1187 } 1188 1189 #ifdef ENABLE_CLASSIC 1190 // update idle timestamp 1191 hci_connection_timestamp(conn); 1192 #endif 1193 1194 #ifdef ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL 1195 hci_stack->host_completed_packets = 1; 1196 conn->num_packets_completed++; 1197 #endif 1198 1199 // handle different packet types 1200 switch (acl_flags & 0x03u) { 1201 1202 case 0x01: // continuation fragment 1203 1204 // sanity checks 1205 if (conn->acl_recombination_pos == 0u) { 1206 log_error( "ACL Cont Fragment but no first fragment for handle 0x%02x", con_handle); 1207 return; 1208 } 1209 if ((conn->acl_recombination_pos + acl_length) > (4u + HCI_ACL_BUFFER_SIZE)){ 1210 log_error( "ACL Cont Fragment to large: combined packet %u > buffer size %u for handle 0x%02x", 1211 conn->acl_recombination_pos + acl_length, 4 + HCI_ACL_BUFFER_SIZE, con_handle); 1212 conn->acl_recombination_pos = 0; 1213 return; 1214 } 1215 1216 // append fragment payload (header already stored) 1217 (void)memcpy(&conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE + conn->acl_recombination_pos], 1218 &packet[4], acl_length); 1219 conn->acl_recombination_pos += acl_length; 1220 1221 // forward complete L2CAP packet if complete. 1222 if (conn->acl_recombination_pos >= (conn->acl_recombination_length + 4u + 4u)){ // pos already incl. ACL header 1223 hci_emit_acl_packet(&conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE], conn->acl_recombination_pos); 1224 // reset recombination buffer 1225 conn->acl_recombination_length = 0; 1226 conn->acl_recombination_pos = 0; 1227 } 1228 break; 1229 1230 case 0x02: { // first fragment 1231 1232 // sanity check 1233 if (conn->acl_recombination_pos) { 1234 // we just received the first fragment, but still have data. Only warn if the packet wasn't a flushable packet 1235 if ((conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE+1] >> 4) != 0x02){ 1236 log_error( "ACL First Fragment but %u bytes in buffer for handle 0x%02x, dropping stale fragments", conn->acl_recombination_pos, con_handle); 1237 } 1238 conn->acl_recombination_pos = 0; 1239 } 1240 1241 // peek into L2CAP packet! 1242 uint16_t l2cap_length = READ_L2CAP_LENGTH( packet ); 1243 1244 // compare fragment size to L2CAP packet size 1245 if (acl_length >= (l2cap_length + 4u)){ 1246 // forward fragment as L2CAP packet 1247 hci_emit_acl_packet(packet, acl_length + 4u); 1248 } else { 1249 1250 if (acl_length > HCI_ACL_BUFFER_SIZE){ 1251 log_error( "ACL First Fragment to large: fragment %u > buffer size %u for handle 0x%02x", 1252 4 + acl_length, 4 + HCI_ACL_BUFFER_SIZE, con_handle); 1253 return; 1254 } 1255 1256 // store first fragment and tweak acl length for complete package 1257 (void)memcpy(&conn->acl_recombination_buffer[HCI_INCOMING_PRE_BUFFER_SIZE], 1258 packet, acl_length + 4u); 1259 conn->acl_recombination_pos = acl_length + 4u; 1260 conn->acl_recombination_length = l2cap_length; 1261 little_endian_store_16(conn->acl_recombination_buffer, HCI_INCOMING_PRE_BUFFER_SIZE + 2u, l2cap_length +4u); 1262 } 1263 break; 1264 1265 } 1266 default: 1267 log_error( "acl_handler called with invalid packet boundary flags %u", acl_flags & 0x03); 1268 return; 1269 } 1270 1271 // execute main loop 1272 hci_run(); 1273 } 1274 1275 static void hci_connection_stop_timer(hci_connection_t * conn){ 1276 btstack_run_loop_remove_timer(&conn->timeout); 1277 #ifdef ENABLE_CLASSIC 1278 btstack_run_loop_remove_timer(&conn->timeout_sco); 1279 #endif 1280 } 1281 1282 static void hci_shutdown_connection(hci_connection_t *conn){ 1283 log_info("Connection closed: handle 0x%x, %s", conn->con_handle, bd_addr_to_str(conn->address)); 1284 1285 #ifdef ENABLE_CLASSIC 1286 #if defined(ENABLE_SCO_OVER_HCI) || defined(HAVE_SCO_TRANSPORT) 1287 bd_addr_type_t addr_type = conn->address_type; 1288 #endif 1289 #ifdef HAVE_SCO_TRANSPORT 1290 hci_con_handle_t con_handle = conn->con_handle; 1291 #endif 1292 #endif 1293 1294 hci_connection_stop_timer(conn); 1295 1296 btstack_linked_list_remove(&hci_stack->connections, (btstack_linked_item_t *) conn); 1297 btstack_memory_hci_connection_free( conn ); 1298 1299 // now it's gone 1300 hci_emit_nr_connections_changed(); 1301 1302 #ifdef ENABLE_CLASSIC 1303 #ifdef ENABLE_SCO_OVER_HCI 1304 // update SCO 1305 if ((addr_type == BD_ADDR_TYPE_SCO) && (hci_stack->hci_transport != NULL) && (hci_stack->hci_transport->set_sco_config != NULL)){ 1306 hci_stack->hci_transport->set_sco_config(hci_stack->sco_voice_setting_active, hci_number_sco_connections()); 1307 } 1308 #endif 1309 #ifdef HAVE_SCO_TRANSPORT 1310 if ((addr_type == BD_ADDR_TYPE_SCO) && (hci_stack->sco_transport != NULL)){ 1311 hci_stack->sco_transport->close(con_handle); 1312 } 1313 #endif 1314 #endif 1315 } 1316 1317 #ifdef ENABLE_CLASSIC 1318 1319 static const uint16_t hci_acl_packet_type_sizes[] = { 1320 0, HCI_ACL_2DH1_SIZE, HCI_ACL_3DH1_SIZE, HCI_ACL_DM1_SIZE, 1321 HCI_ACL_DH1_SIZE, 0, 0, 0, 1322 HCI_ACL_2DH3_SIZE, HCI_ACL_3DH3_SIZE, HCI_ACL_DM3_SIZE, HCI_ACL_DH3_SIZE, 1323 HCI_ACL_2DH5_SIZE, HCI_ACL_3DH5_SIZE, HCI_ACL_DM5_SIZE, HCI_ACL_DH5_SIZE 1324 }; 1325 static const uint8_t hci_acl_packet_type_feature_requirement_bit[] = { 1326 0, // 3 slot packets 1327 1, // 5 slot packets 1328 25, // EDR 2 mpbs 1329 26, // EDR 3 mbps 1330 39, // 3 slot EDR packts 1331 40, // 5 slot EDR packet 1332 }; 1333 static const uint16_t hci_acl_packet_type_feature_packet_mask[] = { 1334 0x0f00, // 3 slot packets 1335 0xf000, // 5 slot packets 1336 0x1102, // EDR 2 mpbs 1337 0x2204, // EDR 3 mbps 1338 0x0300, // 3 slot EDR packts 1339 0x3000, // 5 slot EDR packet 1340 }; 1341 1342 static uint16_t hci_acl_packet_types_for_buffer_size_and_local_features(uint16_t buffer_size, uint8_t * local_supported_features){ 1343 // enable packet types based on size 1344 uint16_t packet_types = 0; 1345 unsigned int i; 1346 for (i=0;i<16;i++){ 1347 if (hci_acl_packet_type_sizes[i] == 0) continue; 1348 if (hci_acl_packet_type_sizes[i] <= buffer_size){ 1349 packet_types |= 1 << i; 1350 } 1351 } 1352 // disable packet types due to missing local supported features 1353 for (i=0;i<sizeof(hci_acl_packet_type_feature_requirement_bit); i++){ 1354 unsigned int bit_idx = hci_acl_packet_type_feature_requirement_bit[i]; 1355 int feature_set = (local_supported_features[bit_idx >> 3] & (1<<(bit_idx & 7))) != 0; 1356 if (feature_set) continue; 1357 log_info("Features bit %02u is not set, removing packet types 0x%04x", bit_idx, hci_acl_packet_type_feature_packet_mask[i]); 1358 packet_types &= ~hci_acl_packet_type_feature_packet_mask[i]; 1359 } 1360 return packet_types; 1361 } 1362 1363 uint16_t hci_usable_acl_packet_types(void){ 1364 // flip bits for "may not be used" 1365 return hci_stack->usable_packet_types_acl ^ 0x3306; 1366 } 1367 1368 static const struct { 1369 uint8_t feature_index; 1370 uint16_t feature_packet_mask; 1371 } hci_sco_packet_type_feature_requirements[] = { 1372 { 12, SCO_PACKET_TYPES_HV2 }, // HV2 packets 1373 { 13, SCO_PACKET_TYPES_HV3 }, // HV3 packets 1374 { 31, SCO_PACKET_TYPES_ESCO }, // eSCO links (EV3 packets) 1375 { 32, SCO_PACKET_TYPES_EV4 }, // EV4 packets 1376 { 45, SCO_PACKET_TYPES_2EV3 | SCO_PACKET_TYPES_2EV5 }, // EDR eSCO 2 Mb/s 1377 { 46, SCO_PACKET_TYPES_3EV3 | SCO_PACKET_TYPES_3EV5 }, // EDR eSCO 3 Mb/s 1378 { 47, SCO_PACKET_TYPES_2EV5 | SCO_PACKET_TYPES_3EV5 }, // 3-slot EDR eSCO packets, 2-EV3/3-EV3 use single slot 1379 }; 1380 1381 // map packet types to payload length, prefer eSCO over SCO and large over small packets 1382 static const struct { 1383 uint16_t type; 1384 uint16_t payload_length; 1385 } hci_sco_packet_type_to_payload_length[] = { 1386 {SCO_PACKET_TYPES_3EV5, HCI_SCO_3EV5_SIZE}, // 540 1387 {SCO_PACKET_TYPES_2EV5, HCI_SCO_2EV5_SIZE}, // 360 1388 {SCO_PACKET_TYPES_EV5, HCI_SCO_EV5_SIZE}, // 180 1389 {SCO_PACKET_TYPES_EV4, HCI_SCO_EV4_SIZE}, // 120 1390 {SCO_PACKET_TYPES_3EV3, HCI_SCO_3EV3_SIZE}, // 90 1391 {SCO_PACKET_TYPES_2EV3, HCI_SCO_2EV3_SIZE}, // 60 1392 {SCO_PACKET_TYPES_EV3, HCI_SCO_EV3_SIZE}, // 30 1393 {SCO_PACKET_TYPES_HV3, HCI_SCO_HV3_SIZE}, // 30 1394 {SCO_PACKET_TYPES_HV2, HCI_SCO_HV2_SIZE}, // 20 1395 {SCO_PACKET_TYPES_HV1, HCI_SCO_HV1_SIZE} // 10 1396 }; 1397 1398 static uint16_t hci_sco_packet_types_for_features(const uint8_t * local_supported_features){ 1399 uint16_t packet_types = SCO_PACKET_TYPES_ALL; 1400 unsigned int i; 1401 // disable packet types due to missing local supported features 1402 for (i=0;i<(sizeof(hci_sco_packet_type_feature_requirements)/sizeof(hci_sco_packet_type_feature_requirements[0])); i++){ 1403 unsigned int bit_idx = hci_sco_packet_type_feature_requirements[i].feature_index; 1404 bool feature_set = (local_supported_features[bit_idx >> 3] & (1<<(bit_idx & 7))) != 0; 1405 if (feature_set) continue; 1406 log_info("Features bit %02u is not set, removing packet types 0x%04x", bit_idx, hci_sco_packet_type_feature_requirements[i].feature_packet_mask); 1407 packet_types &= ~hci_sco_packet_type_feature_requirements[i].feature_packet_mask; 1408 } 1409 return packet_types; 1410 } 1411 1412 uint16_t hci_usable_sco_packet_types(void){ 1413 return hci_stack->usable_packet_types_sco; 1414 } 1415 1416 static uint16_t hci_sco_payload_length_for_packet_types(uint16_t packet_types){ 1417 uint8_t i; 1418 for (i=0;i<sizeof(hci_sco_packet_type_to_payload_length)/sizeof(hci_sco_packet_type_to_payload_length[0]);i++){ 1419 if ((hci_sco_packet_type_to_payload_length[i].type & packet_types) != 0){ 1420 return hci_sco_packet_type_to_payload_length[i].payload_length; 1421 } 1422 } 1423 return 0; 1424 } 1425 1426 #endif 1427 1428 uint8_t* hci_get_outgoing_packet_buffer(void){ 1429 // hci packet buffer is >= acl data packet length 1430 return hci_stack->hci_packet_buffer; 1431 } 1432 1433 uint16_t hci_max_acl_data_packet_length(void){ 1434 return hci_stack->acl_data_packet_length; 1435 } 1436 1437 #ifdef ENABLE_CLASSIC 1438 bool hci_extended_sco_link_supported(void){ 1439 // No. 31, byte 3, bit 7 1440 return (hci_stack->local_supported_features[3] & (1 << 7)) != 0; 1441 } 1442 #endif 1443 1444 bool hci_non_flushable_packet_boundary_flag_supported(void){ 1445 // No. 54, byte 6, bit 6 1446 return (hci_stack->local_supported_features[6u] & (1u << 6u)) != 0u; 1447 } 1448 1449 #ifdef ENABLE_CLASSIC 1450 static int gap_ssp_supported(void){ 1451 // No. 51, byte 6, bit 3 1452 return (hci_stack->local_supported_features[6u] & (1u << 3u)) != 0u; 1453 } 1454 #endif 1455 1456 static int hci_classic_supported(void){ 1457 #ifdef ENABLE_CLASSIC 1458 // No. 37, byte 4, bit 5, = No BR/EDR Support 1459 return (hci_stack->local_supported_features[4] & (1 << 5)) == 0; 1460 #else 1461 return 0; 1462 #endif 1463 } 1464 1465 static int hci_le_supported(void){ 1466 #ifdef ENABLE_BLE 1467 // No. 37, byte 4, bit 6 = LE Supported (Controller) 1468 return (hci_stack->local_supported_features[4u] & (1u << 6u)) != 0u; 1469 #else 1470 return 0; 1471 #endif 1472 } 1473 1474 static bool hci_command_supported(uint8_t command_index){ 1475 return (hci_stack->local_supported_commands & (1LU << command_index)) != 0; 1476 } 1477 1478 #ifdef ENABLE_BLE 1479 1480 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 1481 static bool hci_extended_advertising_supported(void){ 1482 return hci_command_supported(SUPPORTED_HCI_COMMAND_LE_SET_EXTENDED_ADVERTISING_ENABLE); 1483 } 1484 #endif 1485 1486 static void hci_get_own_address_for_addr_type(uint8_t own_addr_type, bd_addr_t own_addr){ 1487 if (own_addr_type == BD_ADDR_TYPE_LE_PUBLIC){ 1488 (void)memcpy(own_addr, hci_stack->local_bd_addr, 6); 1489 } else { 1490 (void)memcpy(own_addr, hci_stack->le_random_address, 6); 1491 } 1492 } 1493 1494 void gap_le_get_own_address(uint8_t * addr_type, bd_addr_t addr){ 1495 *addr_type = hci_stack->le_own_addr_type; 1496 hci_get_own_address_for_addr_type(hci_stack->le_own_addr_type, addr); 1497 } 1498 1499 #ifdef ENABLE_LE_PERIPHERAL 1500 void gap_le_get_own_advertisements_address(uint8_t * addr_type, bd_addr_t addr){ 1501 *addr_type = hci_stack->le_advertisements_own_addr_type; 1502 hci_get_own_address_for_addr_type(hci_stack->le_advertisements_own_addr_type, addr); 1503 }; 1504 #endif 1505 1506 #ifdef ENABLE_LE_CENTRAL 1507 1508 /** 1509 * @brief Get own addr type and address used for LE connections (Central) 1510 */ 1511 void gap_le_get_own_connection_address(uint8_t * addr_type, bd_addr_t addr){ 1512 *addr_type = hci_stack->le_connection_own_addr_type; 1513 hci_get_own_address_for_addr_type(hci_stack->le_connection_own_addr_type, addr); 1514 } 1515 1516 void le_handle_advertisement_report(uint8_t *packet, uint16_t size){ 1517 1518 uint16_t offset = 3; 1519 uint8_t num_reports = packet[offset]; 1520 offset += 1; 1521 1522 uint16_t i; 1523 uint8_t event[12 + LE_ADVERTISING_DATA_SIZE]; // use upper bound to avoid var size automatic var 1524 for (i=0; (i<num_reports) && (offset < size);i++){ 1525 // sanity checks on data_length: 1526 uint8_t data_length = packet[offset + 8]; 1527 if (data_length > LE_ADVERTISING_DATA_SIZE) return; 1528 if ((offset + 9u + data_length + 1u) > size) return; 1529 // setup event 1530 uint8_t event_size = 10u + data_length; 1531 uint16_t pos = 0; 1532 event[pos++] = GAP_EVENT_ADVERTISING_REPORT; 1533 event[pos++] = event_size; 1534 (void)memcpy(&event[pos], &packet[offset], 1 + 1 + 6); // event type + address type + address 1535 offset += 8; 1536 pos += 8; 1537 event[pos++] = packet[offset + 1 + data_length]; // rssi 1538 event[pos++] = data_length; 1539 offset++; 1540 (void)memcpy(&event[pos], &packet[offset], data_length); 1541 pos += data_length; 1542 offset += data_length + 1u; // rssi 1543 hci_emit_event(event, pos, 1); 1544 } 1545 } 1546 1547 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 1548 void le_handle_extended_advertisement_report(uint8_t *packet, uint16_t size) { 1549 uint16_t offset = 3; 1550 uint8_t num_reports = packet[offset++]; 1551 uint8_t event[2 + 255]; // use upper bound to avoid var size automatic var 1552 uint8_t i; 1553 for (i=0; (i<num_reports) && (offset < size);i++){ 1554 // sanity checks on data_length: 1555 uint16_t data_length = packet[offset + 23]; 1556 if (data_length > LE_EXTENDED_ADVERTISING_DATA_SIZE) return; 1557 if ((offset + 24u + data_length) > size) return; 1558 uint16_t event_type = little_endian_read_16(packet, offset); 1559 offset += 2; 1560 if ((event_type & 0x10) != 0) { 1561 // setup legacy event 1562 uint8_t legacy_event_type; 1563 switch (event_type){ 1564 case 0b0010011: 1565 // ADV_IND 1566 legacy_event_type = 0; 1567 break; 1568 case 0b0010101: 1569 // ADV_DIRECT_IND 1570 legacy_event_type = 1; 1571 break; 1572 case 0b0010010: 1573 // ADV_SCAN_IND 1574 legacy_event_type = 2; 1575 break; 1576 case 0b0010000: 1577 // ADV_NONCONN_IND 1578 legacy_event_type = 3; 1579 break; 1580 case 0b0011011: 1581 case 0b0011010: 1582 // SCAN_RSP 1583 legacy_event_type = 4; 1584 break; 1585 default: 1586 legacy_event_type = 0; 1587 break; 1588 } 1589 uint16_t pos = 0; 1590 event[pos++] = GAP_EVENT_ADVERTISING_REPORT; 1591 event[pos++] = 10u + data_length; 1592 event[pos++] = legacy_event_type; 1593 // copy address type + address 1594 (void) memcpy(&event[pos], &packet[offset], 1 + 6); 1595 offset += 7; 1596 pos += 7; 1597 // skip primary_phy, secondary_phy, advertising_sid, tx_power 1598 offset += 4; 1599 // copy rssi 1600 event[pos++] = packet[offset++]; 1601 // skip periodic advertising interval and direct address 1602 offset += 9; 1603 // copy data len + data; 1604 (void) memcpy(&event[pos], &packet[offset], 1 + data_length); 1605 pos += 1 +data_length; 1606 offset += 1+ data_length; 1607 hci_emit_event(event, pos, 1); 1608 } else { 1609 event[0] = GAP_EVENT_EXTENDED_ADVERTISING_REPORT; 1610 uint8_t report_len = 24 + data_length; 1611 event[1] = report_len; 1612 little_endian_store_16(event, 2, event_type); 1613 memcpy(&event[4], &packet[offset], report_len); 1614 offset += report_len; 1615 hci_emit_event(event, 2 + report_len, 1); 1616 } 1617 } 1618 } 1619 #endif 1620 1621 #endif 1622 #endif 1623 1624 #ifdef ENABLE_BLE 1625 #ifdef ENABLE_LE_PERIPHERAL 1626 static void hci_update_advertisements_enabled_for_current_roles(void){ 1627 if ((hci_stack->le_advertisements_state & LE_ADVERTISEMENT_STATE_ENABLED) != 0){ 1628 // get number of active le slave connections 1629 int num_slave_connections = 0; 1630 btstack_linked_list_iterator_t it; 1631 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 1632 while (btstack_linked_list_iterator_has_next(&it)){ 1633 hci_connection_t * con = (hci_connection_t*) btstack_linked_list_iterator_next(&it); 1634 log_info("state %u, role %u, le_con %u", con->state, con->role, hci_is_le_connection(con)); 1635 if (con->state != OPEN) continue; 1636 if (con->role != HCI_ROLE_SLAVE) continue; 1637 if (!hci_is_le_connection(con)) continue; 1638 num_slave_connections++; 1639 } 1640 log_info("Num LE Peripheral roles: %u of %u", num_slave_connections, hci_stack->le_max_number_peripheral_connections); 1641 hci_stack->le_advertisements_enabled_for_current_roles = num_slave_connections < hci_stack->le_max_number_peripheral_connections; 1642 } else { 1643 hci_stack->le_advertisements_enabled_for_current_roles = false; 1644 } 1645 } 1646 #endif 1647 #endif 1648 1649 #ifdef ENABLE_CLASSIC 1650 static void gap_run_set_local_name(void){ 1651 hci_reserve_packet_buffer(); 1652 uint8_t * packet = hci_stack->hci_packet_buffer; 1653 // construct HCI Command and send 1654 uint16_t opcode = hci_write_local_name.opcode; 1655 hci_stack->last_cmd_opcode = opcode; 1656 packet[0] = opcode & 0xff; 1657 packet[1] = opcode >> 8; 1658 packet[2] = DEVICE_NAME_LEN; 1659 memset(&packet[3], 0, DEVICE_NAME_LEN); 1660 uint16_t name_len = (uint16_t) strlen(hci_stack->local_name); 1661 uint16_t bytes_to_copy = btstack_min(name_len, DEVICE_NAME_LEN); 1662 // if shorter than DEVICE_NAME_LEN, it's implicitly NULL-terminated by memset call 1663 (void)memcpy(&packet[3], hci_stack->local_name, bytes_to_copy); 1664 // expand '00:00:00:00:00:00' in name with bd_addr 1665 btstack_replace_bd_addr_placeholder(&packet[3], bytes_to_copy, hci_stack->local_bd_addr); 1666 hci_send_cmd_packet(packet, HCI_CMD_HEADER_SIZE + DEVICE_NAME_LEN); 1667 } 1668 1669 static void gap_run_set_eir_data(void){ 1670 hci_reserve_packet_buffer(); 1671 uint8_t * packet = hci_stack->hci_packet_buffer; 1672 // construct HCI Command in-place and send 1673 uint16_t opcode = hci_write_extended_inquiry_response.opcode; 1674 hci_stack->last_cmd_opcode = opcode; 1675 uint16_t offset = 0; 1676 packet[offset++] = opcode & 0xff; 1677 packet[offset++] = opcode >> 8; 1678 packet[offset++] = 1 + EXTENDED_INQUIRY_RESPONSE_DATA_LEN; 1679 packet[offset++] = 0; // FEC not required 1680 memset(&packet[offset], 0, EXTENDED_INQUIRY_RESPONSE_DATA_LEN); 1681 if (hci_stack->eir_data){ 1682 // copy items and expand '00:00:00:00:00:00' in name with bd_addr 1683 ad_context_t context; 1684 for (ad_iterator_init(&context, EXTENDED_INQUIRY_RESPONSE_DATA_LEN, hci_stack->eir_data) ; ad_iterator_has_more(&context) ; ad_iterator_next(&context)) { 1685 uint8_t data_type = ad_iterator_get_data_type(&context); 1686 uint8_t size = ad_iterator_get_data_len(&context); 1687 const uint8_t *data = ad_iterator_get_data(&context); 1688 // copy item 1689 packet[offset++] = size + 1; 1690 packet[offset++] = data_type; 1691 memcpy(&packet[offset], data, size); 1692 // update name item 1693 if ((data_type == BLUETOOTH_DATA_TYPE_SHORTENED_LOCAL_NAME) || (data_type == BLUETOOTH_DATA_TYPE_COMPLETE_LOCAL_NAME)){ 1694 btstack_replace_bd_addr_placeholder(&packet[offset], size, hci_stack->local_bd_addr); 1695 } 1696 offset += size; 1697 } 1698 } else { 1699 uint16_t name_len = (uint16_t) strlen(hci_stack->local_name); 1700 uint16_t bytes_to_copy = btstack_min(name_len, EXTENDED_INQUIRY_RESPONSE_DATA_LEN - 2); 1701 packet[offset++] = bytes_to_copy + 1; 1702 packet[offset++] = BLUETOOTH_DATA_TYPE_COMPLETE_LOCAL_NAME; 1703 (void)memcpy(&packet[6], hci_stack->local_name, bytes_to_copy); 1704 // expand '00:00:00:00:00:00' in name with bd_addr 1705 btstack_replace_bd_addr_placeholder(&packet[offset], bytes_to_copy, hci_stack->local_bd_addr); 1706 } 1707 hci_send_cmd_packet(packet, HCI_CMD_HEADER_SIZE + 1 + EXTENDED_INQUIRY_RESPONSE_DATA_LEN); 1708 } 1709 1710 static void hci_run_gap_tasks_classic(void){ 1711 if ((hci_stack->gap_tasks_classic & GAP_TASK_SET_CLASS_OF_DEVICE) != 0) { 1712 hci_stack->gap_tasks_classic &= ~GAP_TASK_SET_CLASS_OF_DEVICE; 1713 hci_send_cmd(&hci_write_class_of_device, hci_stack->class_of_device); 1714 return; 1715 } 1716 if ((hci_stack->gap_tasks_classic & GAP_TASK_SET_LOCAL_NAME) != 0) { 1717 hci_stack->gap_tasks_classic &= ~GAP_TASK_SET_LOCAL_NAME; 1718 gap_run_set_local_name(); 1719 return; 1720 } 1721 if ((hci_stack->gap_tasks_classic & GAP_TASK_SET_EIR_DATA) != 0) { 1722 hci_stack->gap_tasks_classic &= ~GAP_TASK_SET_EIR_DATA; 1723 gap_run_set_eir_data(); 1724 return; 1725 } 1726 if ((hci_stack->gap_tasks_classic & GAP_TASK_SET_DEFAULT_LINK_POLICY) != 0) { 1727 hci_stack->gap_tasks_classic &= ~GAP_TASK_SET_DEFAULT_LINK_POLICY; 1728 hci_send_cmd(&hci_write_default_link_policy_setting, hci_stack->default_link_policy_settings); 1729 return; 1730 } 1731 // write page scan activity 1732 if ((hci_stack->gap_tasks_classic & GAP_TASK_WRITE_PAGE_SCAN_ACTIVITY) != 0) { 1733 hci_stack->gap_tasks_classic &= ~GAP_TASK_WRITE_PAGE_SCAN_ACTIVITY; 1734 hci_send_cmd(&hci_write_page_scan_activity, hci_stack->new_page_scan_interval, hci_stack->new_page_scan_window); 1735 return; 1736 } 1737 // write page scan type 1738 if ((hci_stack->gap_tasks_classic & GAP_TASK_WRITE_PAGE_SCAN_TYPE) != 0) { 1739 hci_stack->gap_tasks_classic &= ~GAP_TASK_WRITE_PAGE_SCAN_TYPE; 1740 hci_send_cmd(&hci_write_page_scan_type, hci_stack->new_page_scan_type); 1741 return; 1742 } 1743 // write page timeout 1744 if ((hci_stack->gap_tasks_classic & GAP_TASK_WRITE_PAGE_TIMEOUT) != 0) { 1745 hci_stack->gap_tasks_classic &= ~GAP_TASK_WRITE_PAGE_TIMEOUT; 1746 hci_send_cmd(&hci_write_page_timeout, hci_stack->page_timeout); 1747 return; 1748 } 1749 // send scan enable 1750 if ((hci_stack->gap_tasks_classic & GAP_TASK_WRITE_SCAN_ENABLE) != 0) { 1751 hci_stack->gap_tasks_classic &= ~GAP_TASK_WRITE_SCAN_ENABLE; 1752 hci_send_cmd(&hci_write_scan_enable, hci_stack->new_scan_enable_value); 1753 return; 1754 } 1755 // send write scan activity 1756 if ((hci_stack->gap_tasks_classic & GAP_TASK_WRITE_INQUIRY_SCAN_ACTIVITY) != 0) { 1757 hci_stack->gap_tasks_classic &= ~GAP_TASK_WRITE_INQUIRY_SCAN_ACTIVITY; 1758 hci_send_cmd(&hci_write_inquiry_scan_activity, hci_stack->inquiry_scan_interval, hci_stack->inquiry_scan_window); 1759 return; 1760 } 1761 // send write inquiry transmit power level 1762 if ((hci_stack->gap_tasks_classic & GAP_TASK_WRITE_INQUIRY_TX_POWER_LEVEL) != 0) { 1763 hci_stack->gap_tasks_classic &= ~GAP_TASK_WRITE_INQUIRY_TX_POWER_LEVEL; 1764 hci_send_cmd(&hci_write_inquiry_transmit_power_level, hci_stack->inquiry_tx_power_level); 1765 return; 1766 } 1767 } 1768 #endif 1769 1770 #ifndef HAVE_HOST_CONTROLLER_API 1771 1772 static uint32_t hci_transport_uart_get_main_baud_rate(void){ 1773 if (!hci_stack->config) return 0; 1774 uint32_t baud_rate = ((hci_transport_config_uart_t *)hci_stack->config)->baudrate_main; 1775 // Limit baud rate for Broadcom chipsets to 3 mbps 1776 if ((hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION) && (baud_rate > 3000000)){ 1777 baud_rate = 3000000; 1778 } 1779 return baud_rate; 1780 } 1781 1782 static void hci_initialization_timeout_handler(btstack_timer_source_t * ds){ 1783 UNUSED(ds); 1784 1785 switch (hci_stack->substate){ 1786 case HCI_INIT_W4_SEND_RESET: 1787 log_info("Resend HCI Reset"); 1788 hci_stack->substate = HCI_INIT_SEND_RESET; 1789 hci_stack->num_cmd_packets = 1; 1790 hci_run(); 1791 break; 1792 case HCI_INIT_W4_CUSTOM_INIT_CSR_WARM_BOOT_LINK_RESET: 1793 log_info("Resend HCI Reset - CSR Warm Boot with Link Reset"); 1794 if (hci_stack->hci_transport->reset_link){ 1795 hci_stack->hci_transport->reset_link(); 1796 } 1797 1798 /* fall through */ 1799 1800 case HCI_INIT_W4_CUSTOM_INIT_CSR_WARM_BOOT: 1801 log_info("Resend HCI Reset - CSR Warm Boot"); 1802 hci_stack->substate = HCI_INIT_SEND_RESET_CSR_WARM_BOOT; 1803 hci_stack->num_cmd_packets = 1; 1804 hci_run(); 1805 break; 1806 case HCI_INIT_W4_SEND_BAUD_CHANGE: 1807 if (hci_stack->hci_transport->set_baudrate){ 1808 uint32_t baud_rate = hci_transport_uart_get_main_baud_rate(); 1809 log_info("Local baud rate change to %" PRIu32 "(timeout handler)", baud_rate); 1810 hci_stack->hci_transport->set_baudrate(baud_rate); 1811 } 1812 // For CSR, HCI Reset is sent on new baud rate. Don't forget to reset link for H5/BCSP 1813 if (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_CAMBRIDGE_SILICON_RADIO){ 1814 if (hci_stack->hci_transport->reset_link){ 1815 log_info("Link Reset"); 1816 hci_stack->hci_transport->reset_link(); 1817 } 1818 hci_stack->substate = HCI_INIT_SEND_RESET_CSR_WARM_BOOT; 1819 hci_run(); 1820 } 1821 break; 1822 case HCI_INIT_W4_CUSTOM_INIT_BCM_DELAY: 1823 // otherwise continue 1824 hci_stack->substate = HCI_INIT_W4_READ_LOCAL_SUPPORTED_COMMANDS; 1825 hci_send_cmd(&hci_read_local_supported_commands); 1826 break; 1827 default: 1828 break; 1829 } 1830 } 1831 #endif 1832 1833 static void hci_initializing_next_state(void){ 1834 hci_stack->substate = (hci_substate_t )( ((int) hci_stack->substate) + 1); 1835 } 1836 1837 static void hci_init_done(void){ 1838 // done. tell the app 1839 log_info("hci_init_done -> HCI_STATE_WORKING"); 1840 hci_stack->state = HCI_STATE_WORKING; 1841 hci_emit_state(); 1842 } 1843 1844 // assumption: hci_can_send_command_packet_now() == true 1845 static void hci_initializing_run(void){ 1846 log_debug("hci_initializing_run: substate %u, can send %u", hci_stack->substate, hci_can_send_command_packet_now()); 1847 1848 if (!hci_can_send_command_packet_now()) return; 1849 1850 #ifndef HAVE_HOST_CONTROLLER_API 1851 bool need_baud_change = hci_stack->config 1852 && hci_stack->chipset 1853 && hci_stack->chipset->set_baudrate_command 1854 && hci_stack->hci_transport->set_baudrate 1855 && ((hci_transport_config_uart_t *)hci_stack->config)->baudrate_main; 1856 #endif 1857 1858 switch (hci_stack->substate){ 1859 case HCI_INIT_SEND_RESET: 1860 hci_state_reset(); 1861 1862 #ifndef HAVE_HOST_CONTROLLER_API 1863 // prepare reset if command complete not received in 100ms 1864 btstack_run_loop_set_timer(&hci_stack->timeout, HCI_RESET_RESEND_TIMEOUT_MS); 1865 btstack_run_loop_set_timer_handler(&hci_stack->timeout, hci_initialization_timeout_handler); 1866 btstack_run_loop_add_timer(&hci_stack->timeout); 1867 #endif 1868 // send command 1869 hci_stack->substate = HCI_INIT_W4_SEND_RESET; 1870 hci_send_cmd(&hci_reset); 1871 break; 1872 case HCI_INIT_SEND_READ_LOCAL_VERSION_INFORMATION: 1873 hci_send_cmd(&hci_read_local_version_information); 1874 hci_stack->substate = HCI_INIT_W4_SEND_READ_LOCAL_VERSION_INFORMATION; 1875 break; 1876 1877 #ifndef HAVE_HOST_CONTROLLER_API 1878 case HCI_INIT_SEND_RESET_CSR_WARM_BOOT: 1879 hci_state_reset(); 1880 // prepare reset if command complete not received in 100ms 1881 btstack_run_loop_set_timer(&hci_stack->timeout, HCI_RESET_RESEND_TIMEOUT_MS); 1882 btstack_run_loop_set_timer_handler(&hci_stack->timeout, hci_initialization_timeout_handler); 1883 btstack_run_loop_add_timer(&hci_stack->timeout); 1884 // send command 1885 hci_stack->substate = HCI_INIT_W4_CUSTOM_INIT_CSR_WARM_BOOT; 1886 hci_send_cmd(&hci_reset); 1887 break; 1888 case HCI_INIT_SEND_RESET_ST_WARM_BOOT: 1889 hci_state_reset(); 1890 hci_stack->substate = HCI_INIT_W4_SEND_RESET_ST_WARM_BOOT; 1891 hci_send_cmd(&hci_reset); 1892 break; 1893 case HCI_INIT_SEND_BAUD_CHANGE_BCM: { 1894 uint32_t baud_rate = hci_transport_uart_get_main_baud_rate(); 1895 hci_stack->chipset->set_baudrate_command(baud_rate, hci_stack->hci_packet_buffer); 1896 hci_stack->last_cmd_opcode = little_endian_read_16(hci_stack->hci_packet_buffer, 0); 1897 hci_stack->substate = HCI_INIT_W4_SEND_BAUD_CHANGE_BCM; 1898 hci_send_cmd_packet(hci_stack->hci_packet_buffer, 3u + hci_stack->hci_packet_buffer[2u]); 1899 break; 1900 } 1901 case HCI_INIT_SET_BD_ADDR: 1902 log_info("Set Public BD ADDR to %s", bd_addr_to_str(hci_stack->custom_bd_addr)); 1903 hci_stack->chipset->set_bd_addr_command(hci_stack->custom_bd_addr, hci_stack->hci_packet_buffer); 1904 hci_stack->last_cmd_opcode = little_endian_read_16(hci_stack->hci_packet_buffer, 0); 1905 hci_stack->substate = HCI_INIT_W4_SET_BD_ADDR; 1906 hci_send_cmd_packet(hci_stack->hci_packet_buffer, 3u + hci_stack->hci_packet_buffer[2u]); 1907 break; 1908 case HCI_INIT_SEND_READ_LOCAL_NAME: 1909 #ifdef ENABLE_CLASSIC 1910 hci_send_cmd(&hci_read_local_name); 1911 hci_stack->substate = HCI_INIT_W4_SEND_READ_LOCAL_NAME; 1912 break; 1913 #endif 1914 /* fall through */ 1915 1916 case HCI_INIT_SEND_BAUD_CHANGE: 1917 if (need_baud_change) { 1918 uint32_t baud_rate = hci_transport_uart_get_main_baud_rate(); 1919 hci_stack->chipset->set_baudrate_command(baud_rate, hci_stack->hci_packet_buffer); 1920 hci_stack->last_cmd_opcode = little_endian_read_16(hci_stack->hci_packet_buffer, 0); 1921 hci_stack->substate = HCI_INIT_W4_SEND_BAUD_CHANGE; 1922 hci_send_cmd_packet(hci_stack->hci_packet_buffer, 3u + hci_stack->hci_packet_buffer[2u]); 1923 // STLC25000D: baudrate change happens within 0.5 s after command was send, 1924 // use timer to update baud rate after 100 ms (knowing exactly, when command was sent is non-trivial) 1925 if (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_ST_MICROELECTRONICS){ 1926 btstack_run_loop_set_timer(&hci_stack->timeout, HCI_RESET_RESEND_TIMEOUT_MS); 1927 btstack_run_loop_add_timer(&hci_stack->timeout); 1928 } 1929 break; 1930 } 1931 hci_stack->substate = HCI_INIT_CUSTOM_INIT; 1932 1933 /* fall through */ 1934 1935 case HCI_INIT_CUSTOM_INIT: 1936 case HCI_INIT_CUSTOM_PRE_INIT: 1937 // Custom initialization 1938 if (hci_stack->chipset && hci_stack->chipset->next_command){ 1939 hci_stack->chipset_result = (*hci_stack->chipset->next_command)(hci_stack->hci_packet_buffer); 1940 bool send_cmd = false; 1941 switch (hci_stack->chipset_result){ 1942 case BTSTACK_CHIPSET_VALID_COMMAND: 1943 send_cmd = true; 1944 switch (hci_stack->substate){ 1945 case HCI_INIT_CUSTOM_INIT: 1946 hci_stack->substate = HCI_INIT_W4_CUSTOM_INIT; 1947 break; 1948 case HCI_INIT_CUSTOM_PRE_INIT: 1949 hci_stack->substate = HCI_INIT_W4_CUSTOM_PRE_INIT; 1950 break; 1951 default: 1952 btstack_assert(false); 1953 break; 1954 } 1955 break; 1956 case BTSTACK_CHIPSET_WARMSTART_REQUIRED: 1957 send_cmd = true; 1958 // CSR Warm Boot: Wait a bit, then send HCI Reset until HCI Command Complete 1959 log_info("CSR Warm Boot"); 1960 btstack_run_loop_set_timer(&hci_stack->timeout, HCI_RESET_RESEND_TIMEOUT_MS); 1961 btstack_run_loop_set_timer_handler(&hci_stack->timeout, hci_initialization_timeout_handler); 1962 btstack_run_loop_add_timer(&hci_stack->timeout); 1963 if ((hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_CAMBRIDGE_SILICON_RADIO) 1964 && hci_stack->config 1965 && hci_stack->chipset 1966 // && hci_stack->chipset->set_baudrate_command -- there's no such command 1967 && hci_stack->hci_transport->set_baudrate 1968 && hci_transport_uart_get_main_baud_rate()){ 1969 hci_stack->substate = HCI_INIT_W4_SEND_BAUD_CHANGE; 1970 } else { 1971 hci_stack->substate = HCI_INIT_W4_CUSTOM_INIT_CSR_WARM_BOOT_LINK_RESET; 1972 } 1973 break; 1974 default: 1975 break; 1976 } 1977 1978 if (send_cmd){ 1979 int size = 3u + hci_stack->hci_packet_buffer[2u]; 1980 hci_stack->last_cmd_opcode = little_endian_read_16(hci_stack->hci_packet_buffer, 0); 1981 hci_dump_packet(HCI_COMMAND_DATA_PACKET, 0, hci_stack->hci_packet_buffer, size); 1982 hci_stack->hci_transport->send_packet(HCI_COMMAND_DATA_PACKET, hci_stack->hci_packet_buffer, size); 1983 break; 1984 } 1985 log_info("Init script done"); 1986 1987 // Custom Pre-Init complete, start regular init with HCI Reset 1988 if (hci_stack->substate == HCI_INIT_CUSTOM_PRE_INIT){ 1989 hci_stack->substate = HCI_INIT_W4_SEND_RESET; 1990 hci_send_cmd(&hci_reset); 1991 break; 1992 } 1993 1994 // Init script download on Broadcom chipsets causes: 1995 if ( (hci_stack->chipset_result != BTSTACK_CHIPSET_NO_INIT_SCRIPT) && 1996 ( (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION) 1997 || (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_EM_MICROELECTRONIC_MARIN_SA)) ){ 1998 1999 // - baud rate to reset, restore UART baud rate if needed 2000 if (need_baud_change) { 2001 uint32_t baud_rate = ((hci_transport_config_uart_t *)hci_stack->config)->baudrate_init; 2002 log_info("Local baud rate change to %" PRIu32 " after init script (bcm)", baud_rate); 2003 hci_stack->hci_transport->set_baudrate(baud_rate); 2004 } 2005 2006 uint16_t bcm_delay_ms = 300; 2007 // - UART may or may not be disabled during update and Controller RTS may or may not be high during this time 2008 // -> Work around: wait here. 2009 log_info("BCM delay (%u ms) after init script", bcm_delay_ms); 2010 hci_stack->substate = HCI_INIT_W4_CUSTOM_INIT_BCM_DELAY; 2011 btstack_run_loop_set_timer(&hci_stack->timeout, bcm_delay_ms); 2012 btstack_run_loop_set_timer_handler(&hci_stack->timeout, hci_initialization_timeout_handler); 2013 btstack_run_loop_add_timer(&hci_stack->timeout); 2014 break; 2015 } 2016 } 2017 #endif 2018 /* fall through */ 2019 2020 case HCI_INIT_READ_LOCAL_SUPPORTED_COMMANDS: 2021 hci_stack->substate = HCI_INIT_W4_READ_LOCAL_SUPPORTED_COMMANDS; 2022 hci_send_cmd(&hci_read_local_supported_commands); 2023 break; 2024 case HCI_INIT_READ_BD_ADDR: 2025 hci_stack->substate = HCI_INIT_W4_READ_BD_ADDR; 2026 hci_send_cmd(&hci_read_bd_addr); 2027 break; 2028 case HCI_INIT_READ_BUFFER_SIZE: 2029 // only read buffer size if supported 2030 if (hci_command_supported(SUPPORTED_HCI_COMMAND_READ_BUFFER_SIZE)){ 2031 hci_stack->substate = HCI_INIT_W4_READ_BUFFER_SIZE; 2032 hci_send_cmd(&hci_read_buffer_size); 2033 break; 2034 } 2035 2036 /* fall through */ 2037 2038 case HCI_INIT_READ_LOCAL_SUPPORTED_FEATURES: 2039 hci_stack->substate = HCI_INIT_W4_READ_LOCAL_SUPPORTED_FEATURES; 2040 hci_send_cmd(&hci_read_local_supported_features); 2041 break; 2042 2043 #ifdef ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL 2044 case HCI_INIT_SET_CONTROLLER_TO_HOST_FLOW_CONTROL: 2045 hci_stack->substate = HCI_INIT_W4_SET_CONTROLLER_TO_HOST_FLOW_CONTROL; 2046 hci_send_cmd(&hci_set_controller_to_host_flow_control, 3); // ACL + SCO Flow Control 2047 break; 2048 case HCI_INIT_HOST_BUFFER_SIZE: 2049 hci_stack->substate = HCI_INIT_W4_HOST_BUFFER_SIZE; 2050 hci_send_cmd(&hci_host_buffer_size, HCI_HOST_ACL_PACKET_LEN, HCI_HOST_SCO_PACKET_LEN, 2051 HCI_HOST_ACL_PACKET_NUM, HCI_HOST_SCO_PACKET_NUM); 2052 break; 2053 #endif 2054 2055 case HCI_INIT_SET_EVENT_MASK: 2056 hci_stack->substate = HCI_INIT_W4_SET_EVENT_MASK; 2057 if (hci_le_supported()){ 2058 hci_send_cmd(&hci_set_event_mask,0xFFFFFFFFU, 0x3FFFFFFFU); 2059 } else { 2060 // Kensington Bluetooth 2.1 USB Dongle (CSR Chipset) returns an error for 0xffff... 2061 hci_send_cmd(&hci_set_event_mask,0xFFFFFFFFU, 0x1FFFFFFFU); 2062 } 2063 break; 2064 2065 case HCI_INIT_SET_EVENT_MASK_2: 2066 // On Bluettooth PTS dongle (BL 654) with PacketCraft HCI Firmware (LMP subversion) 0x5244, 2067 // setting Event Mask 2 causes Controller to drop Encryption Change events. 2068 if (hci_command_supported(SUPPORTED_HCI_COMMAND_SET_EVENT_MASK_PAGE_2) 2069 && (hci_stack->manufacturer != BLUETOOTH_COMPANY_ID_PACKETCRAFT_INC)){ 2070 hci_stack->substate = HCI_INIT_W4_SET_EVENT_MASK_2; 2071 // Encryption Change Event v2 - bit 25 2072 hci_send_cmd(&hci_set_event_mask_2,0x02000000U, 0x0); 2073 break; 2074 } 2075 2076 #ifdef ENABLE_CLASSIC 2077 /* fall through */ 2078 2079 case HCI_INIT_WRITE_SIMPLE_PAIRING_MODE: 2080 if (hci_classic_supported() && gap_ssp_supported()){ 2081 hci_stack->substate = HCI_INIT_W4_WRITE_SIMPLE_PAIRING_MODE; 2082 hci_send_cmd(&hci_write_simple_pairing_mode, hci_stack->ssp_enable); 2083 break; 2084 } 2085 2086 /* fall through */ 2087 2088 case HCI_INIT_WRITE_INQUIRY_MODE: 2089 if (hci_classic_supported()){ 2090 hci_stack->substate = HCI_INIT_W4_WRITE_INQUIRY_MODE; 2091 hci_send_cmd(&hci_write_inquiry_mode, (int) hci_stack->inquiry_mode); 2092 break; 2093 } 2094 2095 /* fall through */ 2096 2097 case HCI_INIT_WRITE_SECURE_CONNECTIONS_HOST_ENABLE: 2098 // skip write secure connections host support if not supported or disabled 2099 if (hci_classic_supported() && hci_stack->secure_connections_enable 2100 && hci_command_supported(SUPPORTED_HCI_COMMAND_WRITE_SECURE_CONNECTIONS_HOST)) { 2101 hci_stack->secure_connections_active = true; 2102 hci_stack->substate = HCI_INIT_W4_WRITE_SECURE_CONNECTIONS_HOST_ENABLE; 2103 hci_send_cmd(&hci_write_secure_connections_host_support, 1); 2104 break; 2105 } 2106 2107 /* fall through */ 2108 2109 case HCI_INIT_SET_MIN_ENCRYPTION_KEY_SIZE: 2110 // skip set min encryption key size 2111 if (hci_classic_supported() && hci_command_supported(SUPPORTED_HCI_COMMAND_SET_MIN_ENCRYPTION_KEY_SIZE)) { 2112 hci_stack->substate = HCI_INIT_W4_SET_MIN_ENCRYPTION_KEY_SIZE; 2113 hci_send_cmd(&hci_set_min_encryption_key_size, hci_stack->gap_required_encyrption_key_size); 2114 break; 2115 } 2116 2117 #ifdef ENABLE_SCO_OVER_HCI 2118 /* fall through */ 2119 2120 // only sent if ENABLE_SCO_OVER_HCI is defined 2121 case HCI_INIT_WRITE_SYNCHRONOUS_FLOW_CONTROL_ENABLE: 2122 // skip write synchronous flow control if not supported 2123 if (hci_classic_supported() 2124 && hci_command_supported(SUPPORTED_HCI_COMMAND_WRITE_SYNCHRONOUS_FLOW_CONTROL_ENABLE)) { 2125 hci_stack->substate = HCI_INIT_W4_WRITE_SYNCHRONOUS_FLOW_CONTROL_ENABLE; 2126 hci_send_cmd(&hci_write_synchronous_flow_control_enable, 1); // SCO tracking enabled 2127 break; 2128 } 2129 /* fall through */ 2130 2131 case HCI_INIT_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING: 2132 // skip write default erroneous data reporting if not supported 2133 if (hci_classic_supported() 2134 && hci_command_supported(SUPPORTED_HCI_COMMAND_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING)) { 2135 hci_stack->substate = HCI_INIT_W4_WRITE_DEFAULT_ERRONEOUS_DATA_REPORTING; 2136 hci_send_cmd(&hci_write_default_erroneous_data_reporting, 1); 2137 break; 2138 } 2139 #endif 2140 2141 #if defined(ENABLE_SCO_OVER_HCI) || defined(ENABLE_SCO_OVER_PCM) 2142 /* fall through */ 2143 2144 // only sent if manufacturer is Broadcom and ENABLE_SCO_OVER_HCI or ENABLE_SCO_OVER_PCM is defined 2145 case HCI_INIT_BCM_WRITE_SCO_PCM_INT: 2146 if (hci_classic_supported() && (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION)){ 2147 hci_stack->substate = HCI_INIT_W4_BCM_WRITE_SCO_PCM_INT; 2148 #ifdef ENABLE_SCO_OVER_HCI 2149 log_info("BCM: Route SCO data via HCI transport"); 2150 hci_send_cmd(&hci_bcm_write_sco_pcm_int, 1, 0, 0, 0, 0); 2151 #endif 2152 #ifdef ENABLE_SCO_OVER_PCM 2153 log_info("BCM: Route SCO data via PCM interface"); 2154 #ifdef ENABLE_BCM_PCM_WBS 2155 // 512 kHz bit clock for 2 channels x 16 bit x 16 kHz 2156 hci_send_cmd(&hci_bcm_write_sco_pcm_int, 0, 2, 0, 1, 1); 2157 #else 2158 // 256 kHz bit clock for 2 channels x 16 bit x 8 kHz 2159 hci_send_cmd(&hci_bcm_write_sco_pcm_int, 0, 1, 0, 1, 1); 2160 #endif 2161 #endif 2162 break; 2163 } 2164 #endif 2165 2166 #ifdef ENABLE_SCO_OVER_PCM 2167 /* fall through */ 2168 2169 case HCI_INIT_BCM_WRITE_I2SPCM_INTERFACE_PARAM: 2170 if (hci_classic_supported() && (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION)){ 2171 hci_stack->substate = HCI_INIT_W4_BCM_WRITE_I2SPCM_INTERFACE_PARAM; 2172 log_info("BCM: Config PCM interface for I2S"); 2173 #ifdef ENABLE_BCM_PCM_WBS 2174 // 512 kHz bit clock for 2 channels x 16 bit x 8 kHz 2175 hci_send_cmd(&hci_bcm_write_i2spcm_interface_param, 1, 1, 0, 2); 2176 #else 2177 // 256 kHz bit clock for 2 channels x 16 bit x 8 kHz 2178 hci_send_cmd(&hci_bcm_write_i2spcm_interface_param, 1, 1, 0, 1); 2179 #endif 2180 break; 2181 } 2182 case HCI_INIT_BCM_WRITE_PCM_DATA_FORMAT_PARAM: 2183 if (hci_classic_supported() && (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION)){ 2184 hci_stack->substate = HCI_INIT_W4_BCM_WRITE_PCM_DATA_FORMAT_PARAM; 2185 log_info("BCM: Config PCM Data format"); 2186 // msb first, fill bits 0, left justified 2187 hci_send_cmd(&hci_bcm_write_pcm_data_format_param, 0, 0, 3, 3, 0); 2188 break; 2189 } 2190 #ifdef HAVE_BCM_PCM2 2191 case HCI_INIT_BCM_PCM2_SETUP: 2192 if (hci_classic_supported() && (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION)) { 2193 hci_stack->substate = HCI_INIT_W4_BCM_PCM2_SETUP; 2194 uint8_t op_mode = 0; // Op_Mode = 0 = PCM, 1 = I2S 2195 uint32_t pcm_clock_freq; 2196 uint8_t ch_0_period; 2197 #ifdef ENABLE_BCM_PCM_WBS 2198 // 512 kHz, resample 8 kHz to 16 khz 2199 pcm_clock_freq = 512000; 2200 ch_0_period = 1; 2201 #else 2202 // 256 khz, 8 khz output 2203 pcm_clock_freq = 256000; 2204 ch_0_period = 0; 2205 #endif 2206 log_info("BCM: Config PCM2 - op mode %u, pcm clock %" PRIu32 ", ch0_period %u", op_mode, pcm_clock_freq, ch_0_period); 2207 hci_send_cmd(&hci_bcm_pcm2_setup, 2208 0x00, // Action = Write 2209 0x00, // Test_Options = None 2210 op_mode, // Op_Mode 2211 0x1D, // Sync_and_Clock_Options Sync = Signal | Sync Output Enable | Generate PCM_CLK | Tristate When Idle 2212 pcm_clock_freq, // PCM_Clock_Freq 2213 0x01, // Sync_Signal_Width 2214 0x0F, // Slot_Width 2215 0x01, // NumberOfSlots 2216 0x00, // Bank_0_Fill_Mode = 0s 2217 0x00, // Bank_0_Number_of_Fill_Bits 2218 0x00, // Bank_0_Programmable_Fill_Data 2219 0x00, // Bank_1_Fill_Mode = 0s 2220 0x00, // Bank_1_Number_of_Fill_Bits 2221 0x00, // Bank_1_Programmable_Fill_Data 2222 0x00, // Data_Justify_And_Bit_Order_Options = Left Justify 2223 0x00, // Ch_0_Slot_Number 2224 0x01, // Ch_1_Slot_Number 2225 0x02, // Ch_2_Slot_Number 2226 0x03, // Ch_3_Slot_Number 2227 0x04, // Ch_4_Slot_Number 2228 ch_0_period, // Ch_0_Period 2229 0x00, // Ch_1_Period 2230 0x00 // Ch_2_Period 2231 ); 2232 break; 2233 } 2234 #endif 2235 #endif /* ENABLE_SCO_OVER_PCM */ 2236 #endif /* ENABLE_CLASSIC */ 2237 2238 #ifdef ENABLE_BLE 2239 /* fall through */ 2240 2241 // LE INIT 2242 case HCI_INIT_LE_READ_BUFFER_SIZE: 2243 if (hci_le_supported()){ 2244 hci_stack->substate = HCI_INIT_W4_LE_READ_BUFFER_SIZE; 2245 if (hci_command_supported(SUPPORTED_HCI_COMMAND_LE_READ_BUFFER_SIZE_V2)){ 2246 hci_send_cmd(&hci_le_read_buffer_size_v2); 2247 } else { 2248 hci_send_cmd(&hci_le_read_buffer_size); 2249 } 2250 break; 2251 } 2252 2253 /* fall through */ 2254 2255 case HCI_INIT_WRITE_LE_HOST_SUPPORTED: 2256 // skip write le host if not supported (e.g. on LE only EM9301) 2257 if (hci_le_supported() 2258 && hci_command_supported(SUPPORTED_HCI_COMMAND_WRITE_LE_HOST_SUPPORTED)) { 2259 // LE Supported Host = 1, Simultaneous Host = 0 2260 hci_stack->substate = HCI_INIT_W4_WRITE_LE_HOST_SUPPORTED; 2261 hci_send_cmd(&hci_write_le_host_supported, 1, 0); 2262 break; 2263 } 2264 2265 /* fall through */ 2266 2267 case HCI_INIT_LE_SET_EVENT_MASK: 2268 if (hci_le_supported()){ 2269 hci_stack->substate = HCI_INIT_W4_LE_SET_EVENT_MASK; 2270 hci_send_cmd(&hci_le_set_event_mask, 0xfffffdff, 0x07); // all events from core v5.3 without LE Enhanced Connection Complete 2271 break; 2272 } 2273 #endif 2274 2275 #ifdef ENABLE_LE_DATA_LENGTH_EXTENSION 2276 /* fall through */ 2277 2278 case HCI_INIT_LE_READ_MAX_DATA_LENGTH: 2279 if (hci_le_supported() 2280 && hci_command_supported(SUPPORTED_HCI_COMMAND_LE_READ_MAXIMUM_DATA_LENGTH)) { 2281 hci_stack->substate = HCI_INIT_W4_LE_READ_MAX_DATA_LENGTH; 2282 hci_send_cmd(&hci_le_read_maximum_data_length); 2283 break; 2284 } 2285 2286 /* fall through */ 2287 2288 case HCI_INIT_LE_WRITE_SUGGESTED_DATA_LENGTH: 2289 if (hci_le_supported() 2290 && hci_command_supported(SUPPORTED_HCI_COMMAND_LE_WRITE_SUGGESTED_DEFAULT_DATA_LENGTH)) { 2291 hci_stack->substate = HCI_INIT_W4_LE_WRITE_SUGGESTED_DATA_LENGTH; 2292 hci_send_cmd(&hci_le_write_suggested_default_data_length, hci_stack->le_supported_max_tx_octets, hci_stack->le_supported_max_tx_time); 2293 break; 2294 } 2295 #endif 2296 2297 #ifdef ENABLE_LE_CENTRAL 2298 /* fall through */ 2299 2300 case HCI_INIT_READ_WHITE_LIST_SIZE: 2301 if (hci_le_supported()){ 2302 hci_stack->substate = HCI_INIT_W4_READ_WHITE_LIST_SIZE; 2303 hci_send_cmd(&hci_le_read_white_list_size); 2304 break; 2305 } 2306 2307 #endif 2308 2309 #ifdef ENABLE_LE_PERIPHERAL 2310 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 2311 /* fall through */ 2312 2313 case HCI_INIT_LE_READ_MAX_ADV_DATA_LEN: 2314 if (hci_extended_advertising_supported()){ 2315 hci_stack->substate = HCI_INIT_W4_LE_READ_MAX_ADV_DATA_LEN; 2316 hci_send_cmd(&hci_le_read_maximum_advertising_data_length); 2317 break; 2318 } 2319 #endif 2320 #endif 2321 /* fall through */ 2322 2323 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 2324 case HCI_INIT_LE_SET_HOST_FEATURE_CONNECTED_ISO_STREAMS: 2325 if (hci_le_supported()) { 2326 hci_stack->substate = HCI_INIT_W4_LE_SET_HOST_FEATURE_CONNECTED_ISO_STREAMS; 2327 hci_send_cmd(&hci_le_set_host_feature, 32, 1); 2328 break; 2329 } 2330 #endif 2331 2332 /* fall through */ 2333 2334 case HCI_INIT_DONE: 2335 hci_stack->substate = HCI_INIT_DONE; 2336 // main init sequence complete 2337 #ifdef ENABLE_CLASSIC 2338 // check if initial Classic GAP Tasks are completed 2339 if (hci_classic_supported() && (hci_stack->gap_tasks_classic != 0)) { 2340 hci_run_gap_tasks_classic(); 2341 break; 2342 } 2343 #endif 2344 #ifdef ENABLE_BLE 2345 #ifdef ENABLE_LE_CENTRAL 2346 // check if initial LE GAP Tasks are completed 2347 if (hci_le_supported() && hci_stack->le_scanning_param_update) { 2348 hci_run_general_gap_le(); 2349 break; 2350 } 2351 #endif 2352 #endif 2353 hci_init_done(); 2354 break; 2355 2356 default: 2357 return; 2358 } 2359 } 2360 2361 static bool hci_initializing_event_handler_command_completed(const uint8_t * packet){ 2362 bool command_completed = false; 2363 if (hci_event_packet_get_type(packet) == HCI_EVENT_COMMAND_COMPLETE){ 2364 uint16_t opcode = little_endian_read_16(packet,3); 2365 if (opcode == hci_stack->last_cmd_opcode){ 2366 command_completed = true; 2367 log_debug("Command complete for expected opcode %04x at substate %u", opcode, hci_stack->substate); 2368 } else { 2369 log_info("Command complete for different opcode %04x, expected %04x, at substate %u", opcode, hci_stack->last_cmd_opcode, hci_stack->substate); 2370 } 2371 } 2372 2373 if (hci_event_packet_get_type(packet) == HCI_EVENT_COMMAND_STATUS){ 2374 uint8_t status = packet[2]; 2375 uint16_t opcode = little_endian_read_16(packet,4); 2376 if (opcode == hci_stack->last_cmd_opcode){ 2377 if (status){ 2378 command_completed = true; 2379 log_debug("Command status error 0x%02x for expected opcode %04x at substate %u", status, opcode, hci_stack->substate); 2380 } else { 2381 log_info("Command status OK for expected opcode %04x, waiting for command complete", opcode); 2382 } 2383 } else { 2384 log_debug("Command status for opcode %04x, expected %04x", opcode, hci_stack->last_cmd_opcode); 2385 } 2386 } 2387 #ifndef HAVE_HOST_CONTROLLER_API 2388 // Vendor == CSR 2389 if ((hci_stack->substate == HCI_INIT_W4_CUSTOM_INIT) && (hci_event_packet_get_type(packet) == HCI_EVENT_VENDOR_SPECIFIC)){ 2390 // TODO: track actual command 2391 command_completed = true; 2392 } 2393 2394 // Vendor == Toshiba 2395 if ((hci_stack->substate == HCI_INIT_W4_SEND_BAUD_CHANGE) && (hci_event_packet_get_type(packet) == HCI_EVENT_VENDOR_SPECIFIC)){ 2396 // TODO: track actual command 2397 command_completed = true; 2398 // Fix: no HCI Command Complete received, so num_cmd_packets not reset 2399 hci_stack->num_cmd_packets = 1; 2400 } 2401 #endif 2402 2403 return command_completed; 2404 } 2405 2406 static void hci_initializing_event_handler(const uint8_t * packet, uint16_t size){ 2407 2408 UNUSED(size); // ok: less than 6 bytes are read from our buffer 2409 2410 bool command_completed = hci_initializing_event_handler_command_completed(packet); 2411 2412 #ifndef HAVE_HOST_CONTROLLER_API 2413 2414 // Late response (> 100 ms) for HCI Reset e.g. on Toshiba TC35661: 2415 // Command complete for HCI Reset arrives after we've resent the HCI Reset command 2416 // 2417 // HCI Reset 2418 // Timeout 100 ms 2419 // HCI Reset 2420 // Command Complete Reset 2421 // HCI Read Local Version Information 2422 // Command Complete Reset - but we expected Command Complete Read Local Version Information 2423 // hang... 2424 // 2425 // Fix: Command Complete for HCI Reset in HCI_INIT_W4_SEND_READ_LOCAL_VERSION_INFORMATION trigger resend 2426 if (!command_completed 2427 && (hci_event_packet_get_type(packet) == HCI_EVENT_COMMAND_COMPLETE) 2428 && (hci_stack->substate == HCI_INIT_W4_SEND_READ_LOCAL_VERSION_INFORMATION)){ 2429 2430 uint16_t opcode = little_endian_read_16(packet,3); 2431 if (opcode == hci_reset.opcode){ 2432 hci_stack->substate = HCI_INIT_SEND_READ_LOCAL_VERSION_INFORMATION; 2433 return; 2434 } 2435 } 2436 2437 // CSR & H5 2438 // Fix: Command Complete for HCI Reset in HCI_INIT_W4_SEND_READ_LOCAL_VERSION_INFORMATION trigger resend 2439 if (!command_completed 2440 && (hci_event_packet_get_type(packet) == HCI_EVENT_COMMAND_COMPLETE) 2441 && (hci_stack->substate == HCI_INIT_W4_READ_LOCAL_SUPPORTED_COMMANDS)){ 2442 2443 uint16_t opcode = little_endian_read_16(packet,3); 2444 if (opcode == hci_reset.opcode){ 2445 hci_stack->substate = HCI_INIT_READ_LOCAL_SUPPORTED_COMMANDS; 2446 return; 2447 } 2448 } 2449 2450 // on CSR with BCSP/H5, the reset resend timeout leads to substate == HCI_INIT_SEND_RESET or HCI_INIT_SEND_RESET_CSR_WARM_BOOT 2451 // fix: Correct substate and behave as command below 2452 if (command_completed){ 2453 switch (hci_stack->substate){ 2454 case HCI_INIT_SEND_RESET: 2455 hci_stack->substate = HCI_INIT_W4_SEND_RESET; 2456 break; 2457 case HCI_INIT_SEND_RESET_CSR_WARM_BOOT: 2458 hci_stack->substate = HCI_INIT_W4_CUSTOM_INIT_CSR_WARM_BOOT; 2459 break; 2460 default: 2461 break; 2462 } 2463 } 2464 2465 #endif 2466 2467 if (!command_completed) return; 2468 2469 bool need_baud_change = false; 2470 bool need_addr_change = false; 2471 2472 #ifndef HAVE_HOST_CONTROLLER_API 2473 need_baud_change = hci_stack->config 2474 && hci_stack->chipset 2475 && hci_stack->chipset->set_baudrate_command 2476 && hci_stack->hci_transport->set_baudrate 2477 && ((hci_transport_config_uart_t *)hci_stack->config)->baudrate_main; 2478 2479 need_addr_change = hci_stack->custom_bd_addr_set 2480 && hci_stack->chipset 2481 && hci_stack->chipset->set_bd_addr_command; 2482 #endif 2483 2484 switch(hci_stack->substate){ 2485 2486 #ifndef HAVE_HOST_CONTROLLER_API 2487 case HCI_INIT_SEND_RESET: 2488 // on CSR with BCSP/H5, resend triggers resend of HCI Reset and leads to substate == HCI_INIT_SEND_RESET 2489 // fix: just correct substate and behave as command below 2490 2491 /* fall through */ 2492 #endif 2493 2494 case HCI_INIT_W4_SEND_RESET: 2495 btstack_run_loop_remove_timer(&hci_stack->timeout); 2496 hci_stack->substate = HCI_INIT_SEND_READ_LOCAL_VERSION_INFORMATION; 2497 return; 2498 2499 #ifndef HAVE_HOST_CONTROLLER_API 2500 case HCI_INIT_W4_SEND_BAUD_CHANGE: 2501 // for STLC2500D, baud rate change already happened. 2502 // for others, baud rate gets changed now 2503 if ((hci_stack->manufacturer != BLUETOOTH_COMPANY_ID_ST_MICROELECTRONICS) && need_baud_change){ 2504 uint32_t baud_rate = hci_transport_uart_get_main_baud_rate(); 2505 log_info("Local baud rate change to %" PRIu32 "(w4_send_baud_change)", baud_rate); 2506 hci_stack->hci_transport->set_baudrate(baud_rate); 2507 } 2508 hci_stack->substate = HCI_INIT_CUSTOM_INIT; 2509 return; 2510 case HCI_INIT_W4_CUSTOM_INIT_CSR_WARM_BOOT: 2511 btstack_run_loop_remove_timer(&hci_stack->timeout); 2512 hci_stack->substate = HCI_INIT_CUSTOM_INIT; 2513 return; 2514 case HCI_INIT_W4_CUSTOM_INIT: 2515 // repeat custom init 2516 hci_stack->substate = HCI_INIT_CUSTOM_INIT; 2517 return; 2518 case HCI_INIT_W4_CUSTOM_PRE_INIT: 2519 // repeat custom init 2520 hci_stack->substate = HCI_INIT_CUSTOM_PRE_INIT; 2521 return; 2522 #endif 2523 2524 case HCI_INIT_W4_READ_LOCAL_SUPPORTED_COMMANDS: 2525 if (need_baud_change && (hci_stack->chipset_result != BTSTACK_CHIPSET_NO_INIT_SCRIPT) && 2526 ((hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION) || 2527 (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_EM_MICROELECTRONIC_MARIN_SA))) { 2528 hci_stack->substate = HCI_INIT_SEND_BAUD_CHANGE_BCM; 2529 return; 2530 } 2531 if (need_addr_change){ 2532 hci_stack->substate = HCI_INIT_SET_BD_ADDR; 2533 return; 2534 } 2535 hci_stack->substate = HCI_INIT_READ_BD_ADDR; 2536 return; 2537 #ifndef HAVE_HOST_CONTROLLER_API 2538 case HCI_INIT_W4_SEND_BAUD_CHANGE_BCM: 2539 if (need_baud_change){ 2540 uint32_t baud_rate = hci_transport_uart_get_main_baud_rate(); 2541 log_info("Local baud rate change to %" PRIu32 "(w4_send_baud_change_bcm))", baud_rate); 2542 hci_stack->hci_transport->set_baudrate(baud_rate); 2543 } 2544 if (need_addr_change){ 2545 hci_stack->substate = HCI_INIT_SET_BD_ADDR; 2546 return; 2547 } 2548 hci_stack->substate = HCI_INIT_READ_BD_ADDR; 2549 return; 2550 case HCI_INIT_W4_SET_BD_ADDR: 2551 // for STLC2500D + ATWILC3000, bd addr change only gets active after sending reset command 2552 if ((hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_ST_MICROELECTRONICS) 2553 || (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_ATMEL_CORPORATION)){ 2554 hci_stack->substate = HCI_INIT_SEND_RESET_ST_WARM_BOOT; 2555 return; 2556 } 2557 // skipping st warm boot 2558 hci_stack->substate = HCI_INIT_READ_BD_ADDR; 2559 return; 2560 case HCI_INIT_W4_SEND_RESET_ST_WARM_BOOT: 2561 hci_stack->substate = HCI_INIT_READ_BD_ADDR; 2562 return; 2563 #endif 2564 2565 case HCI_INIT_DONE: 2566 // set state if we came here by fall through 2567 hci_stack->substate = HCI_INIT_DONE; 2568 return; 2569 2570 default: 2571 break; 2572 } 2573 hci_initializing_next_state(); 2574 } 2575 2576 static void hci_handle_connection_failed(hci_connection_t * conn, uint8_t status){ 2577 // CC2564C might emit Connection Complete for rejected incoming SCO connection 2578 // To prevent accidentally free'ing the HCI connection for the ACL connection, 2579 // check if we have been aware of the HCI connection 2580 switch (conn->state){ 2581 case SENT_CREATE_CONNECTION: 2582 case RECEIVED_CONNECTION_REQUEST: 2583 case ACCEPTED_CONNECTION_REQUEST: 2584 break; 2585 default: 2586 return; 2587 } 2588 2589 log_info("Outgoing connection to %s failed", bd_addr_to_str(conn->address)); 2590 bd_addr_t bd_address; 2591 (void)memcpy(&bd_address, conn->address, 6); 2592 2593 #ifdef ENABLE_CLASSIC 2594 // cache needed data 2595 int notify_dedicated_bonding_failed = conn->bonding_flags & BONDING_DEDICATED; 2596 #endif 2597 2598 // connection failed, remove entry 2599 btstack_linked_list_remove(&hci_stack->connections, (btstack_linked_item_t *) conn); 2600 btstack_memory_hci_connection_free( conn ); 2601 2602 #ifdef ENABLE_CLASSIC 2603 // notify client if dedicated bonding 2604 if (notify_dedicated_bonding_failed){ 2605 log_info("hci notify_dedicated_bonding_failed"); 2606 hci_emit_dedicated_bonding_result(bd_address, status); 2607 } 2608 2609 // if authentication error, also delete link key 2610 if (status == ERROR_CODE_AUTHENTICATION_FAILURE) { 2611 gap_drop_link_key_for_bd_addr(bd_address); 2612 } 2613 #else 2614 UNUSED(status); 2615 #endif 2616 } 2617 2618 #ifdef ENABLE_CLASSIC 2619 static void hci_handle_remote_features_page_0(hci_connection_t * conn, const uint8_t * features){ 2620 // SSP Controller 2621 if (features[6] & (1 << 3)){ 2622 conn->bonding_flags |= BONDING_REMOTE_SUPPORTS_SSP_CONTROLLER; 2623 } 2624 // eSCO 2625 if (features[3] & (1<<7)){ 2626 conn->remote_supported_features[0] |= 1; 2627 } 2628 // Extended features 2629 if (features[7] & (1<<7)){ 2630 conn->remote_supported_features[0] |= 2; 2631 } 2632 // SCO packet types 2633 conn->remote_supported_sco_packets = hci_sco_packet_types_for_features(features); 2634 } 2635 2636 static void hci_handle_remote_features_page_1(hci_connection_t * conn, const uint8_t * features){ 2637 // SSP Host 2638 if (features[0] & (1 << 0)){ 2639 conn->bonding_flags |= BONDING_REMOTE_SUPPORTS_SSP_HOST; 2640 } 2641 // SC Host 2642 if (features[0] & (1 << 3)){ 2643 conn->bonding_flags |= BONDING_REMOTE_SUPPORTS_SC_HOST; 2644 } 2645 } 2646 2647 static void hci_handle_remote_features_page_2(hci_connection_t * conn, const uint8_t * features){ 2648 // SC Controller 2649 if (features[1] & (1 << 0)){ 2650 conn->bonding_flags |= BONDING_REMOTE_SUPPORTS_SC_CONTROLLER; 2651 } 2652 } 2653 2654 static void hci_handle_remote_features_received(hci_connection_t * conn){ 2655 conn->bonding_flags &= ~BONDING_REMOTE_FEATURES_QUERY_ACTIVE; 2656 conn->bonding_flags |= BONDING_RECEIVED_REMOTE_FEATURES; 2657 log_info("Remote features %02x, bonding flags %" PRIx32, conn->remote_supported_features[0], conn->bonding_flags); 2658 if (conn->bonding_flags & BONDING_DEDICATED){ 2659 conn->bonding_flags |= BONDING_SEND_AUTHENTICATE_REQUEST; 2660 } 2661 } 2662 static bool hci_remote_sc_enabled(hci_connection_t * connection){ 2663 const uint16_t sc_enabled_mask = BONDING_REMOTE_SUPPORTS_SC_HOST | BONDING_REMOTE_SUPPORTS_SC_CONTROLLER; 2664 return (connection->bonding_flags & sc_enabled_mask) == sc_enabled_mask; 2665 } 2666 2667 #endif 2668 2669 static void handle_event_for_current_stack_state(const uint8_t * packet, uint16_t size) { 2670 // handle BT initialization 2671 if (hci_stack->state == HCI_STATE_INITIALIZING) { 2672 hci_initializing_event_handler(packet, size); 2673 } 2674 2675 // help with BT sleep 2676 if ((hci_stack->state == HCI_STATE_FALLING_ASLEEP) 2677 && (hci_stack->substate == HCI_FALLING_ASLEEP_W4_WRITE_SCAN_ENABLE) 2678 && (hci_event_packet_get_type(packet) == HCI_EVENT_COMMAND_COMPLETE) 2679 && (hci_event_command_complete_get_command_opcode(packet) == HCI_OPCODE_HCI_WRITE_SCAN_ENABLE)){ 2680 hci_initializing_next_state(); 2681 } 2682 } 2683 2684 #ifdef ENABLE_CLASSIC 2685 static void hci_handle_mutual_authentication_completed(hci_connection_t * conn){ 2686 // bonding complete if connection is authenticated (either initiated or BR/EDR SC) 2687 conn->requested_security_level = LEVEL_0; 2688 gap_security_level_t security_level = gap_security_level_for_connection(conn); 2689 hci_emit_security_level(conn->con_handle, security_level); 2690 2691 // dedicated bonding 2692 if ((conn->bonding_flags & BONDING_DEDICATED) != 0){ 2693 conn->bonding_flags &= ~BONDING_DEDICATED; 2694 conn->bonding_status = security_level == 0 ? ERROR_CODE_INSUFFICIENT_SECURITY : ERROR_CODE_SUCCESS; 2695 #ifdef ENABLE_EXPLICIT_DEDICATED_BONDING_DISCONNECT 2696 // emit dedicated bonding complete, don't disconnect 2697 hci_emit_dedicated_bonding_result(conn->address, conn->bonding_status); 2698 #else 2699 // request disconnect, event is emitted after disconnect 2700 conn->bonding_flags |= BONDING_DISCONNECT_DEDICATED_DONE; 2701 #endif 2702 } 2703 } 2704 2705 static void hci_handle_read_encryption_key_size_complete(hci_connection_t * conn, uint8_t encryption_key_size) { 2706 conn->authentication_flags |= AUTH_FLAG_CONNECTION_ENCRYPTED; 2707 conn->encryption_key_size = encryption_key_size; 2708 2709 // mutual authentication complete if authenticated and we have retrieved the encryption key size 2710 if ((conn->authentication_flags & AUTH_FLAG_CONNECTION_AUTHENTICATED) != 0) { 2711 hci_handle_mutual_authentication_completed(conn); 2712 } else { 2713 // otherwise trigger remote feature request and send authentication request 2714 hci_trigger_remote_features_for_connection(conn); 2715 if ((conn->bonding_flags & BONDING_SENT_AUTHENTICATE_REQUEST) == 0) { 2716 conn->bonding_flags |= BONDING_SEND_AUTHENTICATE_REQUEST; 2717 } 2718 } 2719 } 2720 #endif 2721 2722 static void hci_store_local_supported_commands(const uint8_t * packet){ 2723 // create mapping table 2724 #define X(name, offset, bit) { offset, bit }, 2725 static struct { 2726 uint8_t byte_offset; 2727 uint8_t bit_position; 2728 } supported_hci_commands_map [] = { 2729 SUPPORTED_HCI_COMMANDS 2730 }; 2731 #undef X 2732 2733 // create names for debug purposes 2734 #ifdef ENABLE_LOG_DEBUG 2735 #define X(name, offset, bit) #name, 2736 static const char * command_names[] = { 2737 SUPPORTED_HCI_COMMANDS 2738 }; 2739 #undef X 2740 #endif 2741 2742 hci_stack->local_supported_commands = 0; 2743 const uint8_t * commands_map = &packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE+1]; 2744 uint16_t i; 2745 for (i = 0 ; i < SUPPORTED_HCI_COMMANDS_COUNT ; i++){ 2746 if ((commands_map[supported_hci_commands_map[i].byte_offset] & (1 << supported_hci_commands_map[i].bit_position)) != 0){ 2747 #ifdef ENABLE_LOG_DEBUG 2748 log_info("Command %s (%u) supported %u/%u", command_names[i], i, supported_hci_commands_map[i].byte_offset, supported_hci_commands_map[i].bit_position); 2749 #else 2750 log_info("Command 0x%02x supported %u/%u", i, supported_hci_commands_map[i].byte_offset, supported_hci_commands_map[i].bit_position); 2751 #endif 2752 hci_stack->local_supported_commands |= (1LU << i); 2753 } 2754 } 2755 log_info("Local supported commands summary %08" PRIx32, hci_stack->local_supported_commands); 2756 } 2757 2758 static void handle_command_complete_event(uint8_t * packet, uint16_t size){ 2759 UNUSED(size); 2760 2761 uint8_t status = 0; 2762 if( size > OFFSET_OF_DATA_IN_COMMAND_COMPLETE ) { 2763 status = hci_event_command_complete_get_return_parameters(packet)[0]; 2764 } 2765 uint16_t manufacturer; 2766 #ifdef ENABLE_CLASSIC 2767 hci_connection_t * conn; 2768 #endif 2769 #if defined(ENABLE_CLASSIC) || (defined(ENABLE_BLE) && defined(ENABLE_LE_ISOCHRONOUS_STREAMS)) 2770 hci_con_handle_t handle; 2771 #endif 2772 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 2773 le_audio_cig_t * cig; 2774 #endif 2775 2776 // get num cmd packets - limit to 1 to reduce complexity 2777 hci_stack->num_cmd_packets = packet[2] ? 1 : 0; 2778 2779 uint16_t opcode = hci_event_command_complete_get_command_opcode(packet); 2780 switch (opcode){ 2781 case HCI_OPCODE_HCI_READ_LOCAL_NAME: 2782 if (status) break; 2783 // terminate, name 248 chars 2784 packet[6+248] = 0; 2785 log_info("local name: %s", &packet[6]); 2786 break; 2787 case HCI_OPCODE_HCI_READ_BUFFER_SIZE: 2788 // "The HC_ACL_Data_Packet_Length return parameter will be used to determine the size of the L2CAP segments contained in ACL Data Packets" 2789 if (hci_stack->state == HCI_STATE_INITIALIZING) { 2790 uint16_t acl_len = little_endian_read_16(packet, 6); 2791 uint16_t sco_len = packet[8]; 2792 2793 // determine usable ACL/SCO payload size 2794 hci_stack->acl_data_packet_length = btstack_min(acl_len, HCI_ACL_PAYLOAD_SIZE); 2795 hci_stack->sco_data_packet_length = btstack_min(sco_len, HCI_ACL_PAYLOAD_SIZE); 2796 2797 hci_stack->acl_packets_total_num = (uint8_t) btstack_min(little_endian_read_16(packet, 9), MAX_NR_CONTROLLER_ACL_BUFFERS); 2798 hci_stack->sco_packets_total_num = (uint8_t) btstack_min(little_endian_read_16(packet, 11), MAX_NR_CONTROLLER_SCO_PACKETS); 2799 2800 log_info("hci_read_buffer_size: ACL size module %u -> used %u, count %u / SCO size %u, count %u", 2801 acl_len, hci_stack->acl_data_packet_length, hci_stack->acl_packets_total_num, 2802 hci_stack->sco_data_packet_length, hci_stack->sco_packets_total_num); 2803 } 2804 break; 2805 case HCI_OPCODE_HCI_READ_RSSI: 2806 if (status == ERROR_CODE_SUCCESS){ 2807 uint8_t event[5]; 2808 event[0] = GAP_EVENT_RSSI_MEASUREMENT; 2809 event[1] = 3; 2810 (void)memcpy(&event[2], &packet[6], 3); 2811 hci_emit_event(event, sizeof(event), 1); 2812 } 2813 break; 2814 #ifdef ENABLE_BLE 2815 case HCI_OPCODE_HCI_LE_READ_BUFFER_SIZE_V2: 2816 hci_stack->le_iso_packets_length = little_endian_read_16(packet, 9); 2817 hci_stack->le_iso_packets_total_num = packet[11]; 2818 log_info("hci_le_read_buffer_size_v2: iso size %u, iso count %u", 2819 hci_stack->le_iso_packets_length, hci_stack->le_iso_packets_total_num); 2820 2821 /* fall through */ 2822 2823 case HCI_OPCODE_HCI_LE_READ_BUFFER_SIZE: 2824 hci_stack->le_data_packets_length = little_endian_read_16(packet, 6); 2825 hci_stack->le_acl_packets_total_num = packet[8]; 2826 // determine usable ACL payload size 2827 if (HCI_ACL_PAYLOAD_SIZE < hci_stack->le_data_packets_length){ 2828 hci_stack->le_data_packets_length = HCI_ACL_PAYLOAD_SIZE; 2829 } 2830 log_info("hci_le_read_buffer_size: acl size %u, acl count %u", hci_stack->le_data_packets_length, hci_stack->le_acl_packets_total_num); 2831 break; 2832 #endif 2833 #ifdef ENABLE_LE_DATA_LENGTH_EXTENSION 2834 case HCI_OPCODE_HCI_LE_READ_MAXIMUM_DATA_LENGTH: 2835 hci_stack->le_supported_max_tx_octets = little_endian_read_16(packet, 6); 2836 hci_stack->le_supported_max_tx_time = little_endian_read_16(packet, 8); 2837 log_info("hci_le_read_maximum_data_length: tx octets %u, tx time %u us", hci_stack->le_supported_max_tx_octets, hci_stack->le_supported_max_tx_time); 2838 break; 2839 #endif 2840 #ifdef ENABLE_LE_CENTRAL 2841 case HCI_OPCODE_HCI_LE_READ_WHITE_LIST_SIZE: 2842 hci_stack->le_whitelist_capacity = packet[6]; 2843 log_info("hci_le_read_white_list_size: size %u", hci_stack->le_whitelist_capacity); 2844 break; 2845 #endif 2846 #ifdef ENABLE_LE_PERIPHERAL 2847 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 2848 case HCI_OPCODE_HCI_LE_READ_MAXIMUM_ADVERTISING_DATA_LENGTH: 2849 hci_stack->le_maximum_advertising_data_length = little_endian_read_16(packet, 6); 2850 break; 2851 case HCI_OPCODE_HCI_LE_SET_EXTENDED_ADVERTISING_PARAMETERS: 2852 if (hci_stack->le_advertising_set_in_current_command != 0) { 2853 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(hci_stack->le_advertising_set_in_current_command); 2854 hci_stack->le_advertising_set_in_current_command = 0; 2855 if (advertising_set == NULL) break; 2856 uint8_t adv_status = packet[6]; 2857 uint8_t tx_power = packet[7]; 2858 uint8_t event[] = { HCI_EVENT_META_GAP, 4, GAP_SUBEVENT_ADVERTISING_SET_INSTALLED, hci_stack->le_advertising_set_in_current_command, adv_status, tx_power }; 2859 if (adv_status == 0){ 2860 advertising_set->state |= LE_ADVERTISEMENT_STATE_PARAMS_SET; 2861 } 2862 hci_emit_event(event, sizeof(event), 1); 2863 } 2864 break; 2865 case HCI_OPCODE_HCI_LE_REMOVE_ADVERTISING_SET: 2866 if (hci_stack->le_advertising_set_in_current_command != 0) { 2867 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(hci_stack->le_advertising_set_in_current_command); 2868 hci_stack->le_advertising_set_in_current_command = 0; 2869 if (advertising_set == NULL) break; 2870 uint8_t event[] = { HCI_EVENT_META_GAP, 3, GAP_SUBEVENT_ADVERTISING_SET_REMOVED, hci_stack->le_advertising_set_in_current_command, status }; 2871 if (status == 0){ 2872 btstack_linked_list_remove(&hci_stack->le_advertising_sets, (btstack_linked_item_t *) advertising_set); 2873 } 2874 hci_emit_event(event, sizeof(event), 1); 2875 } 2876 break; 2877 #endif 2878 #endif 2879 case HCI_OPCODE_HCI_READ_BD_ADDR: 2880 reverse_bd_addr(&packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE + 1], hci_stack->local_bd_addr); 2881 log_info("Local Address, Status: 0x%02x: Addr: %s", status, bd_addr_to_str(hci_stack->local_bd_addr)); 2882 #ifdef ENABLE_CLASSIC 2883 if (hci_stack->link_key_db){ 2884 hci_stack->link_key_db->set_local_bd_addr(hci_stack->local_bd_addr); 2885 } 2886 #endif 2887 break; 2888 #ifdef ENABLE_CLASSIC 2889 case HCI_OPCODE_HCI_WRITE_SCAN_ENABLE: 2890 hci_emit_scan_mode_changed(hci_stack->discoverable, hci_stack->connectable); 2891 break; 2892 case HCI_OPCODE_HCI_PERIODIC_INQUIRY_MODE: 2893 if (status == ERROR_CODE_SUCCESS) { 2894 hci_stack->inquiry_state = GAP_INQUIRY_STATE_PERIODIC; 2895 } else { 2896 hci_stack->inquiry_state = GAP_INQUIRY_STATE_IDLE; 2897 } 2898 break; 2899 case HCI_OPCODE_HCI_INQUIRY_CANCEL: 2900 case HCI_OPCODE_HCI_EXIT_PERIODIC_INQUIRY_MODE: 2901 if (hci_stack->inquiry_state == GAP_INQUIRY_STATE_W4_CANCELLED){ 2902 hci_stack->inquiry_state = GAP_INQUIRY_STATE_IDLE; 2903 uint8_t event[] = { GAP_EVENT_INQUIRY_COMPLETE, 1, 0}; 2904 hci_emit_event(event, sizeof(event), 1); 2905 } 2906 break; 2907 #endif 2908 case HCI_OPCODE_HCI_READ_LOCAL_SUPPORTED_FEATURES: 2909 (void)memcpy(hci_stack->local_supported_features, &packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE + 1], 8); 2910 2911 #ifdef ENABLE_CLASSIC 2912 // determine usable ACL packet types based on host buffer size and supported features 2913 hci_stack->usable_packet_types_acl = hci_acl_packet_types_for_buffer_size_and_local_features(HCI_ACL_PAYLOAD_SIZE, &hci_stack->local_supported_features[0]); 2914 log_info("ACL Packet types %04x", hci_stack->usable_packet_types_acl); 2915 // determine usable SCO packet types based on supported features 2916 hci_stack->usable_packet_types_sco = hci_sco_packet_types_for_features( 2917 &hci_stack->local_supported_features[0]); 2918 log_info("SCO Packet types %04x - eSCO %u", hci_stack->usable_packet_types_sco, hci_extended_sco_link_supported()); 2919 #endif 2920 // Classic/LE 2921 log_info("BR/EDR support %u, LE support %u", hci_classic_supported(), hci_le_supported()); 2922 break; 2923 case HCI_OPCODE_HCI_READ_LOCAL_VERSION_INFORMATION: 2924 manufacturer = little_endian_read_16(packet, 10); 2925 // map Cypress & Infineon to Broadcom 2926 switch (manufacturer){ 2927 case BLUETOOTH_COMPANY_ID_CYPRESS_SEMICONDUCTOR: 2928 case BLUETOOTH_COMPANY_ID_INFINEON_TECHNOLOGIES_AG: 2929 log_info("Treat Cypress/Infineon as Broadcom"); 2930 manufacturer = BLUETOOTH_COMPANY_ID_BROADCOM_CORPORATION; 2931 little_endian_store_16(packet, 10, manufacturer); 2932 break; 2933 default: 2934 break; 2935 } 2936 hci_stack->manufacturer = manufacturer; 2937 log_info("Manufacturer: 0x%04x", hci_stack->manufacturer); 2938 break; 2939 case HCI_OPCODE_HCI_READ_LOCAL_SUPPORTED_COMMANDS: 2940 hci_store_local_supported_commands(packet); 2941 break; 2942 #ifdef ENABLE_CLASSIC 2943 case HCI_OPCODE_HCI_WRITE_SYNCHRONOUS_FLOW_CONTROL_ENABLE: 2944 if (status) return; 2945 hci_stack->synchronous_flow_control_enabled = 1; 2946 break; 2947 case HCI_OPCODE_HCI_READ_ENCRYPTION_KEY_SIZE: 2948 handle = little_endian_read_16(packet, OFFSET_OF_DATA_IN_COMMAND_COMPLETE+1); 2949 conn = hci_connection_for_handle(handle); 2950 if (conn != NULL) { 2951 uint8_t key_size = 0; 2952 if (status == 0){ 2953 key_size = packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE+3]; 2954 log_info("Handle %04x key Size: %u", handle, key_size); 2955 } else { 2956 key_size = 1; 2957 log_info("Read Encryption Key Size failed 0x%02x-> assuming insecure connection with key size of 1", status); 2958 } 2959 hci_handle_read_encryption_key_size_complete(conn, key_size); 2960 } 2961 break; 2962 // assert pairing complete event is emitted. 2963 // note: for SSP, Simple Pairing Complete Event is sufficient, but we want to be more robust 2964 case HCI_OPCODE_HCI_PIN_CODE_REQUEST_NEGATIVE_REPLY: 2965 case HCI_OPCODE_HCI_USER_PASSKEY_REQUEST_NEGATIVE_REPLY: 2966 case HCI_OPCODE_HCI_USER_CONFIRMATION_REQUEST_NEGATIVE_REPLY: 2967 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_IDLE; 2968 // lookup connection by gap pairing addr 2969 conn = hci_connection_for_bd_addr_and_type(hci_stack->gap_pairing_addr, BD_ADDR_TYPE_ACL); 2970 if (conn == NULL) break; 2971 hci_pairing_complete(conn, ERROR_CODE_AUTHENTICATION_FAILURE); 2972 break; 2973 2974 #ifdef ENABLE_CLASSIC_PAIRING_OOB 2975 case HCI_OPCODE_HCI_READ_LOCAL_OOB_DATA: 2976 case HCI_OPCODE_HCI_READ_LOCAL_EXTENDED_OOB_DATA:{ 2977 uint8_t event[67]; 2978 event[0] = GAP_EVENT_LOCAL_OOB_DATA; 2979 event[1] = 65; 2980 (void)memset(&event[2], 0, 65); 2981 if (status == ERROR_CODE_SUCCESS){ 2982 (void)memcpy(&event[3], &packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE+1], 32); 2983 if (opcode == HCI_OPCODE_HCI_READ_LOCAL_EXTENDED_OOB_DATA){ 2984 event[2] = 3; 2985 (void)memcpy(&event[35], &packet[OFFSET_OF_DATA_IN_COMMAND_COMPLETE+33], 32); 2986 } else { 2987 event[2] = 1; 2988 } 2989 } 2990 hci_emit_event(event, sizeof(event), 0); 2991 break; 2992 } 2993 2994 // note: only needed if user does not provide OOB data 2995 case HCI_OPCODE_HCI_REMOTE_OOB_DATA_REQUEST_NEGATIVE_REPLY: 2996 conn = hci_connection_for_handle(hci_stack->classic_oob_con_handle); 2997 hci_stack->classic_oob_con_handle = HCI_CON_HANDLE_INVALID; 2998 if (conn == NULL) break; 2999 hci_pairing_complete(conn, ERROR_CODE_AUTHENTICATION_FAILURE); 3000 break; 3001 #endif 3002 #endif 3003 #ifdef ENABLE_BLE 3004 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 3005 case HCI_OPCODE_HCI_LE_SET_CIG_PARAMETERS: 3006 // lookup CIG 3007 cig = hci_cig_for_id(hci_stack->iso_active_operation_group_id); 3008 if (cig != NULL){ 3009 uint8_t i = 0; 3010 if (status == ERROR_CODE_SUCCESS){ 3011 // assign CIS handles to pre-allocated CIS 3012 btstack_linked_list_iterator_t it; 3013 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 3014 while (btstack_linked_list_iterator_has_next(&it) && (i < cig->num_cis)) { 3015 hci_iso_stream_t *iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 3016 if ((iso_stream->group_id == hci_stack->iso_active_operation_group_id) && 3017 (iso_stream->iso_type == HCI_ISO_TYPE_CIS)){ 3018 hci_con_handle_t cis_handle = little_endian_read_16(packet, OFFSET_OF_DATA_IN_COMMAND_COMPLETE+3+(2*i)); 3019 iso_stream->cis_handle = cis_handle; 3020 cig->cis_con_handles[i] = cis_handle; 3021 i++; 3022 } 3023 } 3024 cig->state = LE_AUDIO_CIG_STATE_W4_CIS_REQUEST; 3025 hci_emit_cig_created(cig, status); 3026 } else { 3027 hci_emit_cig_created(cig, status); 3028 btstack_linked_list_remove(&hci_stack->le_audio_cigs, (btstack_linked_item_t *) cig); 3029 } 3030 } 3031 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 3032 break; 3033 case HCI_OPCODE_HCI_LE_CREATE_CIS: 3034 if (status != ERROR_CODE_SUCCESS){ 3035 hci_iso_stream_requested_finalize(HCI_ISO_GROUP_ID_INVALID); 3036 } 3037 break; 3038 case HCI_OPCODE_HCI_LE_ACCEPT_CIS_REQUEST: 3039 if (status != ERROR_CODE_SUCCESS){ 3040 hci_iso_stream_requested_finalize(HCI_ISO_GROUP_ID_INVALID); 3041 } 3042 break; 3043 case HCI_OPCODE_HCI_LE_SETUP_ISO_DATA_PATH: { 3044 // lookup BIG by state 3045 btstack_linked_list_iterator_t it; 3046 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_bigs); 3047 while (btstack_linked_list_iterator_has_next(&it)) { 3048 le_audio_big_t *big = (le_audio_big_t *) btstack_linked_list_iterator_next(&it); 3049 if (big->state == LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH){ 3050 if (status == ERROR_CODE_SUCCESS){ 3051 big->state_vars.next_bis++; 3052 if (big->state_vars.next_bis == big->num_bis){ 3053 big->state = LE_AUDIO_BIG_STATE_ACTIVE; 3054 hci_emit_big_created(big, ERROR_CODE_SUCCESS); 3055 } else { 3056 big->state = LE_AUDIO_BIG_STATE_SETUP_ISO_PATH; 3057 } 3058 } else { 3059 big->state = LE_AUDIO_BIG_STATE_SETUP_ISO_PATHS_FAILED; 3060 big->state_vars.status = status; 3061 } 3062 return; 3063 } 3064 } 3065 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_big_syncs); 3066 while (btstack_linked_list_iterator_has_next(&it)) { 3067 le_audio_big_sync_t *big_sync = (le_audio_big_sync_t *) btstack_linked_list_iterator_next(&it); 3068 if (big_sync->state == LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH){ 3069 if (status == ERROR_CODE_SUCCESS){ 3070 big_sync->state_vars.next_bis++; 3071 if (big_sync->state_vars.next_bis == big_sync->num_bis){ 3072 big_sync->state = LE_AUDIO_BIG_STATE_ACTIVE; 3073 hci_emit_big_sync_created(big_sync, ERROR_CODE_SUCCESS); 3074 } else { 3075 big_sync->state = LE_AUDIO_BIG_STATE_SETUP_ISO_PATH; 3076 } 3077 } else { 3078 big_sync->state = LE_AUDIO_BIG_STATE_SETUP_ISO_PATHS_FAILED; 3079 big_sync->state_vars.status = status; 3080 } 3081 return; 3082 } 3083 } 3084 // Lookup CIS via active group operation 3085 if (hci_stack->iso_active_operation_type == HCI_ISO_TYPE_CIS){ 3086 if (hci_stack->iso_active_operation_group_id == HCI_ISO_GROUP_ID_SINGLE_CIS){ 3087 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 3088 3089 // lookup CIS by state 3090 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 3091 while (btstack_linked_list_iterator_has_next(&it)){ 3092 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 3093 handle = iso_stream->cis_handle; 3094 bool emit_cis_created = false; 3095 switch (iso_stream->state){ 3096 case HCI_ISO_STREAM_STATE_W4_ISO_SETUP_INPUT: 3097 if (status != ERROR_CODE_SUCCESS){ 3098 emit_cis_created = true; 3099 break; 3100 } 3101 if (iso_stream->max_sdu_c_to_p > 0){ 3102 iso_stream->state = HCI_ISO_STREAM_STATE_W2_SETUP_ISO_OUTPUT; 3103 } else { 3104 emit_cis_created = true; 3105 } 3106 break; 3107 case HCI_ISO_STREAM_STATE_W4_ISO_SETUP_OUTPUT: 3108 emit_cis_created = true; 3109 break; 3110 default: 3111 break; 3112 } 3113 if (emit_cis_created){ 3114 hci_cis_handle_created(iso_stream, status); 3115 } 3116 } 3117 } else { 3118 cig = hci_cig_for_id(hci_stack->iso_active_operation_group_id); 3119 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 3120 if (cig != NULL) { 3121 // emit cis created if all ISO Paths have been created 3122 // assume we are central 3123 uint8_t cis_index = cig->state_vars.next_cis >> 1; 3124 uint8_t cis_direction = cig->state_vars.next_cis & 1; 3125 bool outgoing_needed = cig->params->cis_params[cis_index].max_sdu_p_to_c > 0; 3126 // if outgoing has been setup, or incoming was setup but outgoing not required 3127 if ((cis_direction == 1) || (outgoing_needed == false)){ 3128 // lookup iso stream by cig/cis 3129 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 3130 while (btstack_linked_list_iterator_has_next(&it)) { 3131 hci_iso_stream_t *iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 3132 if ((iso_stream->group_id == cig->cig_id) && (iso_stream->stream_id == cis_index)){ 3133 hci_cis_handle_created(iso_stream, status); 3134 } 3135 } 3136 } 3137 // next state 3138 cig->state_vars.next_cis++; 3139 cig->state = LE_AUDIO_CIG_STATE_SETUP_ISO_PATH; 3140 } 3141 } 3142 } 3143 break; 3144 } 3145 case HCI_OPCODE_HCI_LE_BIG_TERMINATE_SYNC: { 3146 // lookup BIG by state 3147 btstack_linked_list_iterator_t it; 3148 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_big_syncs); 3149 while (btstack_linked_list_iterator_has_next(&it)) { 3150 le_audio_big_sync_t *big_sync = (le_audio_big_sync_t *) btstack_linked_list_iterator_next(&it); 3151 uint8_t big_handle = big_sync->big_handle; 3152 switch (big_sync->state){ 3153 case LE_AUDIO_BIG_STATE_W4_TERMINATED_AFTER_SETUP_FAILED: 3154 btstack_linked_list_iterator_remove(&it); 3155 hci_emit_big_sync_created(big_sync, big_sync->state_vars.status); 3156 return; 3157 default: 3158 btstack_linked_list_iterator_remove(&it); 3159 hci_emit_big_sync_stopped(big_handle); 3160 return; 3161 } 3162 } 3163 break; 3164 } 3165 #endif 3166 #endif 3167 default: 3168 break; 3169 } 3170 } 3171 3172 static void handle_command_status_event(uint8_t * packet, uint16_t size) { 3173 UNUSED(size); 3174 3175 // get num cmd packets - limit to 1 to reduce complexity 3176 hci_stack->num_cmd_packets = packet[3] ? 1 : 0; 3177 3178 // get opcode and command status 3179 uint16_t opcode = hci_event_command_status_get_command_opcode(packet); 3180 3181 #if defined(ENABLE_CLASSIC) || defined(ENABLE_LE_CENTRAL) || defined(ENABLE_LE_ISOCHRONOUS_STREAMS) 3182 uint8_t status = hci_event_command_status_get_status(packet); 3183 #endif 3184 3185 #if defined(ENABLE_CLASSIC) || defined(ENABLE_LE_CENTRAL) 3186 bd_addr_type_t addr_type; 3187 bd_addr_t addr; 3188 #endif 3189 3190 switch (opcode){ 3191 #ifdef ENABLE_CLASSIC 3192 case HCI_OPCODE_HCI_CREATE_CONNECTION: 3193 case HCI_OPCODE_HCI_SETUP_SYNCHRONOUS_CONNECTION: 3194 case HCI_OPCODE_HCI_ACCEPT_SYNCHRONOUS_CONNECTION: 3195 #endif 3196 #ifdef ENABLE_LE_CENTRAL 3197 case HCI_OPCODE_HCI_LE_CREATE_CONNECTION: 3198 #endif 3199 #if defined(ENABLE_CLASSIC) || defined(ENABLE_LE_CENTRAL) 3200 addr_type = hci_stack->outgoing_addr_type; 3201 memcpy(addr, hci_stack->outgoing_addr, 6); 3202 3203 // reset outgoing address info 3204 memset(hci_stack->outgoing_addr, 0, 6); 3205 hci_stack->outgoing_addr_type = BD_ADDR_TYPE_UNKNOWN; 3206 3207 // on error 3208 if (status != ERROR_CODE_SUCCESS){ 3209 #ifdef ENABLE_LE_CENTRAL 3210 if (hci_is_le_connection_type(addr_type)){ 3211 hci_stack->le_connecting_state = LE_CONNECTING_IDLE; 3212 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 3213 } 3214 #endif 3215 // error => outgoing connection failed 3216 hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, addr_type); 3217 if (conn != NULL){ 3218 hci_handle_connection_failed(conn, status); 3219 } 3220 } 3221 break; 3222 #endif 3223 #ifdef ENABLE_CLASSIC 3224 case HCI_OPCODE_HCI_INQUIRY: 3225 if (status == ERROR_CODE_SUCCESS) { 3226 hci_stack->inquiry_state = GAP_INQUIRY_STATE_ACTIVE; 3227 } else { 3228 hci_stack->inquiry_state = GAP_INQUIRY_STATE_IDLE; 3229 } 3230 break; 3231 #endif 3232 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 3233 case HCI_OPCODE_HCI_LE_CREATE_CIS: 3234 case HCI_OPCODE_HCI_LE_ACCEPT_CIS_REQUEST: 3235 if (status == ERROR_CODE_SUCCESS){ 3236 hci_iso_stream_requested_confirm(HCI_ISO_GROUP_ID_INVALID); 3237 } else { 3238 hci_iso_stream_requested_finalize(HCI_ISO_GROUP_ID_INVALID); 3239 } 3240 break; 3241 #endif /* ENABLE_LE_ISOCHRONOUS_STREAMS */ 3242 default: 3243 break; 3244 } 3245 } 3246 3247 #ifdef ENABLE_BLE 3248 static void event_handle_le_connection_complete(const uint8_t * packet){ 3249 bd_addr_t addr; 3250 bd_addr_type_t addr_type; 3251 hci_connection_t * conn; 3252 3253 // read fields 3254 uint8_t status = packet[3]; 3255 hci_role_t role = (hci_role_t) packet[6]; 3256 3257 // support different connection complete events 3258 uint16_t conn_interval; 3259 switch (packet[2]){ 3260 case HCI_SUBEVENT_LE_CONNECTION_COMPLETE: 3261 conn_interval = hci_subevent_le_connection_complete_get_conn_interval(packet); 3262 break; 3263 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 3264 case HCI_SUBEVENT_LE_ENHANCED_CONNECTION_COMPLETE_V1: 3265 conn_interval = hci_subevent_le_enhanced_connection_complete_v1_get_conn_interval(packet); 3266 break; 3267 case HCI_SUBEVENT_LE_ENHANCED_CONNECTION_COMPLETE_V2: 3268 conn_interval = hci_subevent_le_enhanced_connection_complete_v2_get_conn_interval(packet); 3269 break; 3270 #endif 3271 default: 3272 btstack_unreachable(); 3273 return; 3274 } 3275 3276 // Connection management 3277 reverse_bd_addr(&packet[8], addr); 3278 addr_type = (bd_addr_type_t)packet[7]; 3279 log_info("LE Connection_complete (status=%u) type %u, %s", status, addr_type, bd_addr_to_str(addr)); 3280 conn = hci_connection_for_bd_addr_and_type(addr, addr_type); 3281 3282 #ifdef ENABLE_LE_CENTRAL 3283 // handle error: error is reported only to the initiator -> outgoing connection 3284 if (status){ 3285 3286 // handle cancelled outgoing connection 3287 // "If the cancellation was successful then, after the Command Complete event for the LE_Create_Connection_Cancel command, 3288 // either an LE Connection Complete or an LE Enhanced Connection Complete event shall be generated. 3289 // In either case, the event shall be sent with the error code Unknown Connection Identifier (0x02)." 3290 if (status == ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER){ 3291 // reset state 3292 hci_stack->le_connecting_state = LE_CONNECTING_IDLE; 3293 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 3294 // get outgoing connection conn struct for direct connect 3295 conn = gap_get_outgoing_connection(); 3296 } 3297 3298 // outgoing le connection establishment is done 3299 if (conn){ 3300 // remove entry 3301 btstack_linked_list_remove(&hci_stack->connections, (btstack_linked_item_t *) conn); 3302 btstack_memory_hci_connection_free( conn ); 3303 } 3304 return; 3305 } 3306 #endif 3307 3308 // on success, both hosts receive connection complete event 3309 if (role == HCI_ROLE_MASTER){ 3310 #ifdef ENABLE_LE_CENTRAL 3311 // if we're master on an le connection, it was an outgoing connection and we're done with it 3312 // note: no hci_connection_t object exists yet for connect with whitelist 3313 if (hci_is_le_connection_type(addr_type)){ 3314 hci_stack->le_connecting_state = LE_CONNECTING_IDLE; 3315 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 3316 } 3317 #endif 3318 } else { 3319 #ifdef ENABLE_LE_PERIPHERAL 3320 // if we're slave, it was an incoming connection, advertisements have stopped 3321 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 3322 #endif 3323 } 3324 3325 // LE connections are auto-accepted, so just create a connection if there isn't one already 3326 if (!conn){ 3327 conn = create_connection_for_bd_addr_and_type(addr, addr_type, role); 3328 } 3329 3330 // no memory, sorry. 3331 if (!conn){ 3332 return; 3333 } 3334 3335 conn->state = OPEN; 3336 conn->con_handle = hci_subevent_le_connection_complete_get_connection_handle(packet); 3337 conn->le_connection_interval = conn_interval; 3338 3339 // workaround: PAST doesn't work without LE Read Remote Features on PacketCraft Controller with LMP 568B 3340 conn->gap_connection_tasks = GAP_CONNECTION_TASK_LE_READ_REMOTE_FEATURES; 3341 3342 #ifdef ENABLE_LE_PERIPHERAL 3343 if (role == HCI_ROLE_SLAVE){ 3344 hci_update_advertisements_enabled_for_current_roles(); 3345 } 3346 #endif 3347 3348 // init unenhanced att bearer mtu 3349 conn->att_connection.mtu = ATT_DEFAULT_MTU; 3350 conn->att_connection.mtu_exchanged = false; 3351 3352 // TODO: store - role, peer address type, conn_interval, conn_latency, supervision timeout, master clock 3353 3354 // restart timer 3355 // btstack_run_loop_set_timer(&conn->timeout, HCI_CONNECTION_TIMEOUT_MS); 3356 // btstack_run_loop_add_timer(&conn->timeout); 3357 3358 log_info("New connection: handle %u, %s", conn->con_handle, bd_addr_to_str(conn->address)); 3359 3360 hci_emit_nr_connections_changed(); 3361 } 3362 #endif 3363 3364 #ifdef ENABLE_CLASSIC 3365 static bool hci_ssp_security_level_possible_for_io_cap(gap_security_level_t level, uint8_t io_cap_local, uint8_t io_cap_remote){ 3366 if (io_cap_local == SSP_IO_CAPABILITY_UNKNOWN) return false; 3367 // LEVEL_4 is tested by l2cap 3368 // LEVEL 3 requires MITM protection -> check io capabilities if Authenticated is possible 3369 // @see: Core Spec v5.3, Vol 3, Part C, Table 5.7 3370 if (level >= LEVEL_3){ 3371 // MITM not possible without keyboard or display 3372 if (io_cap_remote >= SSP_IO_CAPABILITY_NO_INPUT_NO_OUTPUT) return false; 3373 if (io_cap_local >= SSP_IO_CAPABILITY_NO_INPUT_NO_OUTPUT) return false; 3374 3375 // MITM possible if one side has keyboard and the other has keyboard or display 3376 if (io_cap_remote == SSP_IO_CAPABILITY_KEYBOARD_ONLY) return true; 3377 if (io_cap_local == SSP_IO_CAPABILITY_KEYBOARD_ONLY) return true; 3378 3379 // MITM not possible if one side has only display and other side has no keyboard 3380 if (io_cap_remote == SSP_IO_CAPABILITY_DISPLAY_ONLY) return false; 3381 if (io_cap_local == SSP_IO_CAPABILITY_DISPLAY_ONLY) return false; 3382 } 3383 // LEVEL 2 requires SSP, which is a given 3384 return true; 3385 } 3386 3387 static void hci_ssp_assess_security_on_io_cap_request(hci_connection_t * conn){ 3388 // get requested security level 3389 gap_security_level_t requested_security_level = conn->requested_security_level; 3390 if (hci_stack->gap_secure_connections_only_mode){ 3391 requested_security_level = LEVEL_4; 3392 } 3393 3394 // assess security: LEVEL 4 requires SC 3395 // skip this preliminary test if remote features are not available yet to work around potential issue in ESP32 controller 3396 if ((requested_security_level == LEVEL_4) && 3397 ((conn->bonding_flags & BONDING_RECEIVED_REMOTE_FEATURES) != 0) && 3398 !hci_remote_sc_enabled(conn)){ 3399 log_info("Level 4 required, but SC not supported -> abort"); 3400 hci_pairing_complete(conn, ERROR_CODE_INSUFFICIENT_SECURITY); 3401 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 3402 return; 3403 } 3404 3405 // assess bonding requirements: abort if remote in dedicated bonding mode but we are non-bonding 3406 // - GAP/MOD/NBON/BV-02-C 3407 // - GAP/DM/NBON/BV-01-C 3408 if (conn->authentication_flags & AUTH_FLAG_RECV_IO_CAPABILITIES_RESPONSE){ 3409 switch (conn->io_cap_response_auth_req){ 3410 case SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_DEDICATED_BONDING: 3411 case SSP_IO_AUTHREQ_MITM_PROTECTION_REQUIRED_DEDICATED_BONDING: 3412 if (hci_stack->bondable == false){ 3413 log_info("Dedicated vs. non-bondable -> abort"); 3414 hci_pairing_complete(conn, ERROR_CODE_INSUFFICIENT_SECURITY); 3415 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 3416 return; 3417 } 3418 default: 3419 break; 3420 } 3421 } 3422 3423 // assess security based on io capabilities 3424 if (conn->authentication_flags & AUTH_FLAG_RECV_IO_CAPABILITIES_RESPONSE){ 3425 // responder: fully validate io caps of both sides as well as OOB data 3426 bool security_possible = false; 3427 security_possible = hci_ssp_security_level_possible_for_io_cap(requested_security_level, hci_stack->ssp_io_capability, conn->io_cap_response_io); 3428 3429 #ifdef ENABLE_CLASSIC_PAIRING_OOB 3430 // We assume that both Controller can reach LEVEL 4, if one side has received P-192 and the other has received P-256, 3431 // so we merge the OOB data availability 3432 uint8_t have_oob_data = conn->io_cap_response_oob_data; 3433 if (conn->classic_oob_c_192 != NULL){ 3434 have_oob_data |= 1; 3435 } 3436 if (conn->classic_oob_c_256 != NULL){ 3437 have_oob_data |= 2; 3438 } 3439 // for up to Level 3, either P-192 as well as P-256 will do 3440 // if we don't support SC, then a) conn->classic_oob_c_256 will be NULL and b) remote should not report P-256 available 3441 // if remote does not SC, we should not receive P-256 data either 3442 if ((requested_security_level <= LEVEL_3) && (have_oob_data != 0)){ 3443 security_possible = true; 3444 } 3445 // for Level 4, P-256 is needed 3446 if ((requested_security_level == LEVEL_4 && ((have_oob_data & 2) != 0))){ 3447 security_possible = true; 3448 } 3449 #endif 3450 3451 if (security_possible == false){ 3452 log_info("IOCap/OOB insufficient for level %u -> abort", requested_security_level); 3453 hci_pairing_complete(conn, ERROR_CODE_INSUFFICIENT_SECURITY); 3454 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 3455 return; 3456 } 3457 } else { 3458 // initiator: remote io cap not yet, only check if we have ability for MITM protection if requested and OOB is not supported 3459 #ifndef ENABLE_CLASSIC_PAIRING_OOB 3460 #ifndef ENABLE_EXPLICIT_IO_CAPABILITIES_REPLY 3461 if ((conn->requested_security_level >= LEVEL_3) && (hci_stack->ssp_io_capability >= SSP_IO_CAPABILITY_NO_INPUT_NO_OUTPUT)){ 3462 log_info("Level 3+ required, but no input/output -> abort"); 3463 hci_pairing_complete(conn, ERROR_CODE_INSUFFICIENT_SECURITY); 3464 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 3465 return; 3466 } 3467 #endif 3468 #endif 3469 } 3470 3471 #ifndef ENABLE_EXPLICIT_IO_CAPABILITIES_REPLY 3472 if (hci_stack->ssp_io_capability != SSP_IO_CAPABILITY_UNKNOWN){ 3473 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY); 3474 } else { 3475 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 3476 } 3477 #endif 3478 } 3479 3480 #endif 3481 3482 static void event_handler(uint8_t *packet, uint16_t size){ 3483 3484 uint16_t event_length = packet[1]; 3485 3486 // assert packet is complete 3487 if (size != (event_length + 2u)){ 3488 log_error("event_handler called with packet of wrong size %d, expected %u => dropping packet", size, event_length + 2); 3489 return; 3490 } 3491 3492 hci_con_handle_t handle; 3493 hci_connection_t * conn; 3494 int i; 3495 3496 #ifdef ENABLE_CLASSIC 3497 hci_link_type_t link_type; 3498 bd_addr_t addr; 3499 bd_addr_type_t addr_type; 3500 #endif 3501 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 3502 hci_iso_stream_t * iso_stream; 3503 le_audio_big_t * big; 3504 le_audio_big_sync_t * big_sync; 3505 #endif 3506 #if defined(ENABLE_LE_ISOCHRONOUS_STREAMS) || defined(ENABLE_LE_EXTENDED_ADVERTISING) 3507 btstack_linked_list_iterator_t it; 3508 #endif 3509 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 3510 uint8_t advertising_handle; 3511 #endif 3512 3513 // log_info("HCI:EVENT:%02x", hci_event_packet_get_type(packet)); 3514 3515 switch (hci_event_packet_get_type(packet)) { 3516 3517 case HCI_EVENT_COMMAND_COMPLETE: 3518 handle_command_complete_event(packet, size); 3519 break; 3520 3521 case HCI_EVENT_COMMAND_STATUS: 3522 handle_command_status_event(packet, size); 3523 break; 3524 3525 case HCI_EVENT_NUMBER_OF_COMPLETED_PACKETS:{ 3526 if (size < 3) return; 3527 uint16_t num_handles = packet[2]; 3528 if (size != (3u + num_handles * 4u)) return; 3529 #ifdef ENABLE_CLASSIC 3530 bool notify_sco = false; 3531 #endif 3532 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 3533 bool notify_iso = false; 3534 #endif 3535 uint16_t offset = 3; 3536 for (i=0; i<num_handles;i++){ 3537 handle = little_endian_read_16(packet, offset) & 0x0fffu; 3538 offset += 2u; 3539 uint16_t num_packets = little_endian_read_16(packet, offset); 3540 offset += 2u; 3541 3542 conn = hci_connection_for_handle(handle); 3543 if (conn != NULL) { 3544 3545 if (conn->num_packets_sent >= num_packets) { 3546 conn->num_packets_sent -= num_packets; 3547 } else { 3548 log_error("hci_number_completed_packets, more packet slots freed then sent."); 3549 conn->num_packets_sent = 0; 3550 } 3551 // log_info("hci_number_completed_packet %u processed for handle %u, outstanding %u", num_packets, handle, conn->num_packets_sent); 3552 #ifdef ENABLE_CLASSIC 3553 if (conn->address_type == BD_ADDR_TYPE_SCO){ 3554 notify_sco = true; 3555 } 3556 #endif 3557 } 3558 3559 #ifdef ENABLE_CONTROLLER_DUMP_PACKETS 3560 hci_controller_dump_packets(); 3561 #endif 3562 3563 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 3564 if (conn == NULL){ 3565 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(handle); 3566 if (iso_stream != NULL){ 3567 if (iso_stream->num_packets_sent >= num_packets) { 3568 iso_stream->num_packets_sent -= num_packets; 3569 } else { 3570 log_error("hci_number_completed_packets, more packet slots freed then sent."); 3571 iso_stream->num_packets_sent = 0; 3572 } 3573 if (iso_stream->iso_type == HCI_ISO_TYPE_BIS){ 3574 le_audio_big_t * big = hci_big_for_handle(iso_stream->group_id); 3575 if (big != NULL){ 3576 big->num_completed_timestamp_current_valid = true; 3577 big->num_completed_timestamp_current_ms = btstack_run_loop_get_time_ms(); 3578 } 3579 } 3580 log_info("hci_number_completed_packet %u processed for handle %u, outstanding %u", 3581 num_packets, handle, iso_stream->num_packets_sent); 3582 notify_iso = true; 3583 } 3584 } 3585 #endif 3586 } 3587 3588 #ifdef ENABLE_CLASSIC 3589 if (notify_sco){ 3590 hci_notify_if_sco_can_send_now(); 3591 } 3592 #endif 3593 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 3594 if (notify_iso){ 3595 hci_iso_notify_can_send_now(); 3596 } 3597 #endif 3598 break; 3599 } 3600 3601 #ifdef ENABLE_CLASSIC 3602 case HCI_EVENT_FLUSH_OCCURRED: 3603 // flush occurs only if automatic flush has been enabled by gap_enable_link_watchdog() 3604 handle = hci_event_flush_occurred_get_handle(packet); 3605 conn = hci_connection_for_handle(handle); 3606 if (conn) { 3607 log_info("Flush occurred, disconnect 0x%04x", handle); 3608 conn->state = SEND_DISCONNECT; 3609 } 3610 break; 3611 3612 case HCI_EVENT_INQUIRY_COMPLETE: 3613 if (hci_stack->inquiry_state == GAP_INQUIRY_STATE_ACTIVE){ 3614 hci_stack->inquiry_state = GAP_INQUIRY_STATE_IDLE; 3615 uint8_t event[] = { GAP_EVENT_INQUIRY_COMPLETE, 1, 0}; 3616 hci_emit_event(event, sizeof(event), 1); 3617 } 3618 break; 3619 case HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE: 3620 if (hci_stack->remote_name_state == GAP_REMOTE_NAME_STATE_W4_COMPLETE){ 3621 hci_stack->remote_name_state = GAP_REMOTE_NAME_STATE_IDLE; 3622 } 3623 break; 3624 case HCI_EVENT_CONNECTION_REQUEST: 3625 reverse_bd_addr(&packet[2], addr); 3626 link_type = (hci_link_type_t) packet[11]; 3627 3628 // CVE-2020-26555: reject incoming connection from device with same BD ADDR 3629 if (memcmp(hci_stack->local_bd_addr, addr, 6) == 0){ 3630 hci_stack->decline_reason = ERROR_CODE_CONNECTION_REJECTED_DUE_TO_UNACCEPTABLE_BD_ADDR; 3631 bd_addr_copy(hci_stack->decline_addr, addr); 3632 break; 3633 } 3634 3635 if (hci_stack->gap_classic_accept_callback != NULL){ 3636 if ((*hci_stack->gap_classic_accept_callback)(addr, link_type) == 0){ 3637 hci_stack->decline_reason = ERROR_CODE_CONNECTION_REJECTED_DUE_TO_SECURITY_REASONS; 3638 bd_addr_copy(hci_stack->decline_addr, addr); 3639 break; 3640 } 3641 } 3642 3643 // TODO: eval COD 8-10 3644 log_info("Connection_incoming: %s, type %u", bd_addr_to_str(addr), (unsigned int) link_type); 3645 addr_type = (link_type == HCI_LINK_TYPE_ACL) ? BD_ADDR_TYPE_ACL : BD_ADDR_TYPE_SCO; 3646 conn = hci_connection_for_bd_addr_and_type(addr, addr_type); 3647 if (!conn) { 3648 conn = create_connection_for_bd_addr_and_type(addr, addr_type, HCI_ROLE_SLAVE); 3649 } 3650 if (!conn) { 3651 // CONNECTION REJECTED DUE TO LIMITED RESOURCES (0X0D) 3652 hci_stack->decline_reason = ERROR_CODE_CONNECTION_REJECTED_DUE_TO_LIMITED_RESOURCES; 3653 bd_addr_copy(hci_stack->decline_addr, addr); 3654 hci_run(); 3655 // avoid event to higher layer 3656 return; 3657 } 3658 conn->state = RECEIVED_CONNECTION_REQUEST; 3659 // store info about eSCO 3660 if (link_type == HCI_LINK_TYPE_ESCO){ 3661 conn->remote_supported_features[0] |= 1; 3662 } 3663 // propagate remote supported sco packet packets from existing ACL to new SCO connection 3664 if (addr_type == BD_ADDR_TYPE_SCO){ 3665 hci_connection_t * acl_conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3666 btstack_assert(acl_conn != NULL); 3667 conn->remote_supported_sco_packets = acl_conn->remote_supported_sco_packets; 3668 } 3669 hci_run(); 3670 break; 3671 3672 case HCI_EVENT_CONNECTION_COMPLETE: 3673 // Connection management 3674 reverse_bd_addr(&packet[5], addr); 3675 log_info("Connection_complete (status=%u) %s", packet[2], bd_addr_to_str(addr)); 3676 addr_type = BD_ADDR_TYPE_ACL; 3677 conn = hci_connection_for_bd_addr_and_type(addr, addr_type); 3678 if (conn) { 3679 switch (conn->state){ 3680 // expected states 3681 case ACCEPTED_CONNECTION_REQUEST: 3682 case SENT_CREATE_CONNECTION: 3683 break; 3684 // unexpected state -> ignore 3685 default: 3686 // don't forward event to app 3687 return; 3688 } 3689 if (!packet[2]){ 3690 conn->state = OPEN; 3691 conn->con_handle = little_endian_read_16(packet, 3); 3692 3693 // trigger write supervision timeout if we're master 3694 if ((hci_stack->link_supervision_timeout != HCI_LINK_SUPERVISION_TIMEOUT_DEFAULT) && (conn->role == HCI_ROLE_MASTER)){ 3695 conn->gap_connection_tasks |= GAP_CONNECTION_TASK_WRITE_SUPERVISION_TIMEOUT; 3696 } 3697 3698 // trigger write automatic flush timeout 3699 if (hci_stack->automatic_flush_timeout != 0){ 3700 conn->gap_connection_tasks |= GAP_CONNECTION_TASK_WRITE_AUTOMATIC_FLUSH_TIMEOUT; 3701 } 3702 3703 // restart timer 3704 btstack_run_loop_set_timer(&conn->timeout, HCI_CONNECTION_TIMEOUT_MS); 3705 btstack_run_loop_add_timer(&conn->timeout); 3706 3707 // trigger remote features for dedicated bonding 3708 if ((conn->bonding_flags & BONDING_DEDICATED) != 0){ 3709 hci_trigger_remote_features_for_connection(conn); 3710 } 3711 3712 log_info("New connection: handle %u, %s", conn->con_handle, bd_addr_to_str(conn->address)); 3713 3714 hci_emit_nr_connections_changed(); 3715 } else { 3716 // connection failed 3717 hci_handle_connection_failed(conn, packet[2]); 3718 } 3719 } 3720 break; 3721 3722 case HCI_EVENT_SYNCHRONOUS_CONNECTION_COMPLETE: 3723 reverse_bd_addr(&packet[5], addr); 3724 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_SCO); 3725 log_info("Synchronous Connection Complete for %p (status=%u) %s", conn, packet[2], bd_addr_to_str(addr)); 3726 btstack_assert(conn != NULL); 3727 3728 if (packet[2] != ERROR_CODE_SUCCESS){ 3729 // connection failed, remove entry 3730 hci_handle_connection_failed(conn, packet[2]); 3731 break; 3732 } 3733 3734 conn->state = OPEN; 3735 conn->con_handle = little_endian_read_16(packet, 3); 3736 3737 // update sco payload length for eSCO connections 3738 if (hci_event_synchronous_connection_complete_get_tx_packet_length(packet) > 0){ 3739 conn->sco_payload_length = hci_event_synchronous_connection_complete_get_tx_packet_length(packet); 3740 log_info("eSCO Complete, set payload len %u", conn->sco_payload_length); 3741 } 3742 3743 #ifdef ENABLE_SCO_OVER_HCI 3744 // update SCO 3745 if (conn->address_type == BD_ADDR_TYPE_SCO && hci_stack->hci_transport && hci_stack->hci_transport->set_sco_config){ 3746 hci_stack->hci_transport->set_sco_config(hci_stack->sco_voice_setting_active, hci_number_sco_connections()); 3747 } 3748 // trigger can send now 3749 if (hci_have_usb_transport()){ 3750 hci_stack->sco_can_send_now = true; 3751 } 3752 3753 // setup implict sco flow control 3754 conn->sco_tx_ready = 0; 3755 conn->sco_tx_active = 0; 3756 conn->sco_established_ms = btstack_run_loop_get_time_ms(); 3757 3758 #endif 3759 #ifdef HAVE_SCO_TRANSPORT 3760 // configure sco transport 3761 if (hci_stack->sco_transport != NULL){ 3762 sco_format_t sco_format = ((hci_stack->sco_voice_setting_active & 0x03) == 0x03) ? SCO_FORMAT_8_BIT : SCO_FORMAT_16_BIT; 3763 hci_stack->sco_transport->open(conn->con_handle, sco_format); 3764 } 3765 #endif 3766 break; 3767 3768 case HCI_EVENT_READ_REMOTE_SUPPORTED_FEATURES_COMPLETE: 3769 handle = little_endian_read_16(packet, 3); 3770 conn = hci_connection_for_handle(handle); 3771 if (!conn) break; 3772 if (!packet[2]){ 3773 const uint8_t * features = &packet[5]; 3774 hci_handle_remote_features_page_0(conn, features); 3775 3776 // read extended features if possible 3777 if (hci_command_supported(SUPPORTED_HCI_COMMAND_READ_REMOTE_EXTENDED_FEATURES) 3778 && ((conn->remote_supported_features[0] & 2) != 0)) { 3779 conn->bonding_flags |= BONDING_REQUEST_REMOTE_FEATURES_PAGE_1; 3780 break; 3781 } 3782 } 3783 hci_handle_remote_features_received(conn); 3784 break; 3785 3786 case HCI_EVENT_READ_REMOTE_EXTENDED_FEATURES_COMPLETE: 3787 handle = little_endian_read_16(packet, 3); 3788 conn = hci_connection_for_handle(handle); 3789 if (!conn) break; 3790 // status = ok, page = 1 3791 if (!packet[2]) { 3792 uint8_t page_number = packet[5]; 3793 uint8_t maximum_page_number = packet[6]; 3794 const uint8_t * features = &packet[7]; 3795 bool done = false; 3796 switch (page_number){ 3797 case 1: 3798 hci_handle_remote_features_page_1(conn, features); 3799 if (maximum_page_number >= 2){ 3800 // get Secure Connections (Controller) from Page 2 if available 3801 conn->bonding_flags |= BONDING_REQUEST_REMOTE_FEATURES_PAGE_2; 3802 } else { 3803 // otherwise, assume SC (Controller) == SC (Host) 3804 if ((conn->bonding_flags & BONDING_REMOTE_SUPPORTS_SC_HOST) != 0){ 3805 conn->bonding_flags |= BONDING_REMOTE_SUPPORTS_SC_CONTROLLER; 3806 } 3807 done = true; 3808 } 3809 break; 3810 case 2: 3811 hci_handle_remote_features_page_2(conn, features); 3812 done = true; 3813 break; 3814 default: 3815 break; 3816 } 3817 if (!done) break; 3818 } 3819 hci_handle_remote_features_received(conn); 3820 break; 3821 3822 case HCI_EVENT_LINK_KEY_REQUEST: 3823 #ifndef ENABLE_EXPLICIT_LINK_KEY_REPLY 3824 hci_event_link_key_request_get_bd_addr(packet, addr); 3825 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3826 if (!conn) break; 3827 3828 // lookup link key in db if not cached 3829 if ((conn->link_key_type == INVALID_LINK_KEY) && (hci_stack->link_key_db != NULL)){ 3830 hci_stack->link_key_db->get_link_key(conn->address, conn->link_key, &conn->link_key_type); 3831 } 3832 3833 // response sent by hci_run() 3834 conn->authentication_flags |= AUTH_FLAG_HANDLE_LINK_KEY_REQUEST; 3835 #endif 3836 break; 3837 3838 case HCI_EVENT_LINK_KEY_NOTIFICATION: { 3839 hci_event_link_key_request_get_bd_addr(packet, addr); 3840 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3841 if (!conn) break; 3842 3843 hci_pairing_complete(conn, ERROR_CODE_SUCCESS); 3844 3845 // CVE-2020-26555: ignore NULL link key 3846 // default link_key_type = INVALID_LINK_KEY asserts that NULL key won't be used for encryption 3847 if (btstack_is_null(&packet[8], 16)) break; 3848 3849 link_key_type_t link_key_type = (link_key_type_t)packet[24]; 3850 // Change Connection Encryption keeps link key type 3851 if (link_key_type != CHANGED_COMBINATION_KEY){ 3852 conn->link_key_type = link_key_type; 3853 } 3854 3855 // cache link key. link keys stored in little-endian format for legacy reasons 3856 memcpy(&conn->link_key, &packet[8], 16); 3857 3858 // only store link key: 3859 // - if bondable enabled 3860 if (hci_stack->bondable == false) break; 3861 // - if security level sufficient 3862 if (gap_security_level_for_link_key_type(link_key_type) < conn->requested_security_level) break; 3863 gap_store_link_key_for_bd_addr(addr, &packet[8], conn->link_key_type); 3864 break; 3865 } 3866 3867 case HCI_EVENT_PIN_CODE_REQUEST: 3868 hci_event_pin_code_request_get_bd_addr(packet, addr); 3869 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3870 if (!conn) break; 3871 3872 hci_pairing_started(conn, false); 3873 // abort pairing if: non-bondable mode (pin code request is not forwarded to app) 3874 if (!hci_stack->bondable ){ 3875 conn->authentication_flags |= AUTH_FLAG_DENY_PIN_CODE_REQUEST; 3876 hci_pairing_complete(conn, ERROR_CODE_PAIRING_NOT_ALLOWED); 3877 hci_run(); 3878 return; 3879 } 3880 // abort pairing if: LEVEL_4 required (pin code request is not forwarded to app) 3881 if ((hci_stack->gap_secure_connections_only_mode) || (conn->requested_security_level == LEVEL_4)){ 3882 log_info("Level 4 required, but SC not supported -> abort"); 3883 conn->authentication_flags |= AUTH_FLAG_DENY_PIN_CODE_REQUEST; 3884 hci_pairing_complete(conn, ERROR_CODE_INSUFFICIENT_SECURITY); 3885 hci_run(); 3886 return; 3887 } 3888 break; 3889 3890 case HCI_EVENT_IO_CAPABILITY_RESPONSE: 3891 hci_event_io_capability_response_get_bd_addr(packet, addr); 3892 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3893 if (!conn) break; 3894 3895 hci_add_connection_flags_for_flipped_bd_addr(&packet[2], AUTH_FLAG_RECV_IO_CAPABILITIES_RESPONSE); 3896 hci_pairing_started(conn, true); 3897 conn->io_cap_response_auth_req = hci_event_io_capability_response_get_authentication_requirements(packet); 3898 conn->io_cap_response_io = hci_event_io_capability_response_get_io_capability(packet); 3899 #ifdef ENABLE_CLASSIC_PAIRING_OOB 3900 conn->io_cap_response_oob_data = hci_event_io_capability_response_get_oob_data_present(packet); 3901 #endif 3902 break; 3903 3904 case HCI_EVENT_IO_CAPABILITY_REQUEST: 3905 hci_event_io_capability_response_get_bd_addr(packet, addr); 3906 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3907 if (!conn) break; 3908 3909 hci_add_connection_flags_for_flipped_bd_addr(&packet[2], AUTH_FLAG_RECV_IO_CAPABILITIES_REQUEST); 3910 hci_connection_timestamp(conn); 3911 hci_pairing_started(conn, true); 3912 break; 3913 3914 #ifdef ENABLE_CLASSIC_PAIRING_OOB 3915 case HCI_EVENT_REMOTE_OOB_DATA_REQUEST: 3916 hci_event_remote_oob_data_request_get_bd_addr(packet, addr); 3917 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3918 if (!conn) break; 3919 3920 hci_connection_timestamp(conn); 3921 3922 hci_pairing_started(conn, true); 3923 3924 connectionSetAuthenticationFlags(conn, AUTH_FLAG_SEND_REMOTE_OOB_DATA_REPLY); 3925 break; 3926 #endif 3927 3928 case HCI_EVENT_USER_CONFIRMATION_REQUEST: 3929 hci_event_user_confirmation_request_get_bd_addr(packet, addr); 3930 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 3931 if (!conn) break; 3932 if (hci_ssp_security_level_possible_for_io_cap(conn->requested_security_level, hci_stack->ssp_io_capability, conn->io_cap_response_io)) { 3933 if (hci_stack->ssp_auto_accept){ 3934 hci_add_connection_flags_for_flipped_bd_addr(&packet[2], AUTH_FLAG_SEND_USER_CONFIRM_REPLY); 3935 }; 3936 } else { 3937 hci_pairing_complete(conn, ERROR_CODE_INSUFFICIENT_SECURITY); 3938 hci_add_connection_flags_for_flipped_bd_addr(&packet[2], AUTH_FLAG_SEND_USER_CONFIRM_NEGATIVE_REPLY); 3939 // don't forward event to app 3940 hci_run(); 3941 return; 3942 } 3943 break; 3944 3945 case HCI_EVENT_USER_PASSKEY_REQUEST: 3946 // Pairing using Passkey results in MITM protection. If Level 4 is required, support for SC is validated on IO Cap Request 3947 if (hci_stack->ssp_auto_accept){ 3948 hci_add_connection_flags_for_flipped_bd_addr(&packet[2], AUTH_FLAG_SEND_USER_PASSKEY_REPLY); 3949 }; 3950 break; 3951 3952 case HCI_EVENT_MODE_CHANGE: 3953 handle = hci_event_mode_change_get_handle(packet); 3954 conn = hci_connection_for_handle(handle); 3955 if (!conn) break; 3956 conn->connection_mode = hci_event_mode_change_get_mode(packet); 3957 log_info("HCI_EVENT_MODE_CHANGE, handle 0x%04x, mode %u", handle, conn->connection_mode); 3958 break; 3959 #endif 3960 3961 case HCI_EVENT_ENCRYPTION_CHANGE: 3962 case HCI_EVENT_ENCRYPTION_CHANGE_V2: 3963 handle = hci_event_encryption_change_get_connection_handle(packet); 3964 conn = hci_connection_for_handle(handle); 3965 if (!conn) break; 3966 if (hci_event_encryption_change_get_status(packet) == ERROR_CODE_SUCCESS) { 3967 uint8_t encryption_enabled = hci_event_encryption_change_get_encryption_enabled(packet); 3968 if (encryption_enabled){ 3969 if (hci_is_le_connection(conn)){ 3970 // For LE, we accept connection as encrypted 3971 conn->authentication_flags |= AUTH_FLAG_CONNECTION_ENCRYPTED; 3972 } 3973 #ifdef ENABLE_CLASSIC 3974 else { 3975 3976 // Detect Secure Connection -> Legacy Connection Downgrade Attack (BIAS) 3977 bool sc_used_during_pairing = gap_secure_connection_for_link_key_type(conn->link_key_type); 3978 bool connected_uses_aes_ccm = encryption_enabled == 2; 3979 if (hci_stack->secure_connections_active && sc_used_during_pairing && !connected_uses_aes_ccm){ 3980 #ifdef ENABLE_TESTING_SUPPORT 3981 // The following tests require to reject L2CAP connection as SC has been disabled on the remote 3982 // - GAP/SEC/SEM/BI-31-C 3983 // - GAP/SEC/SEM/BI-32-C 3984 // - GAP/SEC/SEM/BI-33-C 3985 3986 // Our release code (aggressively) disconnects the HCI connection, without a chance to respond to PTS 3987 // To pass the tests, we only downgrade the link key type instead of the more secure disconnect 3988 link_key_type_t new_link_key_type = UNAUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P192; 3989 if (conn->link_key_type == AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P256){ 3990 new_link_key_type = AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P192; 3991 } 3992 log_info("SC during pairing, but only E0 now -> downgrade link key type from %u to %u", 3993 conn->link_key_type, new_link_key_type); 3994 conn->link_key_type = new_link_key_type; 3995 #else 3996 log_info("SC during pairing, but only E0 now -> abort"); 3997 conn->bonding_flags |= BONDING_DISCONNECT_SECURITY_BLOCK; 3998 break; 3999 #endif 4000 } 4001 4002 // if AES-CCM is used, authentication used SC -> authentication was mutual and we can skip explicit authentication 4003 if (connected_uses_aes_ccm){ 4004 conn->authentication_flags |= AUTH_FLAG_CONNECTION_AUTHENTICATED; 4005 } 4006 4007 #ifdef ENABLE_TESTING_SUPPORT 4008 // work around for issue with PTS dongle 4009 conn->authentication_flags |= AUTH_FLAG_CONNECTION_AUTHENTICATED; 4010 #endif 4011 // validate encryption key size 4012 if (hci_event_packet_get_type(packet) == HCI_EVENT_ENCRYPTION_CHANGE_V2) { 4013 uint8_t encryption_key_size = hci_event_encryption_change_v2_get_encryption_key_size(packet); 4014 // already got encryption key size 4015 hci_handle_read_encryption_key_size_complete(conn, encryption_key_size); 4016 } else { 4017 if (hci_command_supported(SUPPORTED_HCI_COMMAND_READ_ENCRYPTION_KEY_SIZE)) { 4018 // For Classic, we need to validate encryption key size first, if possible (== supported by Controller) 4019 conn->bonding_flags |= BONDING_SEND_READ_ENCRYPTION_KEY_SIZE; 4020 } else { 4021 // if not, pretend everything is perfect 4022 hci_handle_read_encryption_key_size_complete(conn, 16); 4023 } 4024 } 4025 } 4026 #endif 4027 } else { 4028 conn->authentication_flags &= ~AUTH_FLAG_CONNECTION_ENCRYPTED; 4029 } 4030 } else { 4031 #ifdef ENABLE_CLASSIC 4032 if (!hci_is_le_connection(conn)){ 4033 uint8_t status = hci_event_encryption_change_get_status(packet); 4034 if ((conn->bonding_flags & BONDING_DEDICATED) != 0){ 4035 conn->bonding_flags &= ~BONDING_DEDICATED; 4036 conn->bonding_flags |= BONDING_DISCONNECT_DEDICATED_DONE; 4037 conn->bonding_status = status; 4038 } 4039 // trigger security update -> level 0 4040 hci_handle_mutual_authentication_completed(conn); 4041 } 4042 #endif 4043 } 4044 4045 break; 4046 4047 #ifdef ENABLE_CLASSIC 4048 case HCI_EVENT_AUTHENTICATION_COMPLETE_EVENT: 4049 handle = hci_event_authentication_complete_get_connection_handle(packet); 4050 conn = hci_connection_for_handle(handle); 4051 if (!conn) break; 4052 4053 // clear authentication active flag 4054 conn->bonding_flags &= ~BONDING_SENT_AUTHENTICATE_REQUEST; 4055 hci_pairing_complete(conn, hci_event_authentication_complete_get_status(packet)); 4056 4057 // authenticated only if auth status == 0 4058 if (hci_event_authentication_complete_get_status(packet) == 0){ 4059 // authenticated 4060 conn->authentication_flags |= AUTH_FLAG_CONNECTION_AUTHENTICATED; 4061 4062 // If not already encrypted, start encryption 4063 if ((conn->authentication_flags & AUTH_FLAG_CONNECTION_ENCRYPTED) == 0){ 4064 conn->bonding_flags |= BONDING_SEND_ENCRYPTION_REQUEST; 4065 break; 4066 } 4067 } 4068 4069 // emit updated security level (will be 0 if not authenticated) 4070 hci_handle_mutual_authentication_completed(conn); 4071 break; 4072 4073 case HCI_EVENT_SIMPLE_PAIRING_COMPLETE: 4074 hci_event_simple_pairing_complete_get_bd_addr(packet, addr); 4075 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 4076 if (!conn) break; 4077 4078 // treat successfully paired connection as authenticated 4079 if (hci_event_simple_pairing_complete_get_status(packet) == ERROR_CODE_SUCCESS){ 4080 conn->authentication_flags |= AUTH_FLAG_CONNECTION_AUTHENTICATED; 4081 } 4082 4083 hci_pairing_complete(conn, hci_event_simple_pairing_complete_get_status(packet)); 4084 break; 4085 #endif 4086 4087 // HCI_EVENT_DISCONNECTION_COMPLETE 4088 // has been split, to first notify stack before shutting connection down 4089 // see end of function, too. 4090 case HCI_EVENT_DISCONNECTION_COMPLETE: 4091 if (packet[2]) break; // status != 0 4092 handle = little_endian_read_16(packet, 3); 4093 // drop outgoing ACL fragments if it is for closed connection and release buffer if tx not active 4094 if (hci_stack->acl_fragmentation_total_size > 0u) { 4095 if (handle == READ_ACL_CONNECTION_HANDLE(hci_stack->hci_packet_buffer)){ 4096 int release_buffer = hci_stack->acl_fragmentation_tx_active == 0u; 4097 log_info("drop fragmented ACL data for closed connection, release buffer %u", release_buffer); 4098 hci_stack->acl_fragmentation_total_size = 0; 4099 hci_stack->acl_fragmentation_pos = 0; 4100 if (release_buffer){ 4101 hci_release_packet_buffer(); 4102 } 4103 } 4104 } 4105 4106 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4107 // drop outgoing ISO fragments if it is for closed connection and release buffer if tx not active 4108 if (hci_stack->iso_fragmentation_total_size > 0u) { 4109 if (handle == READ_ISO_CONNECTION_HANDLE(hci_stack->hci_packet_buffer)){ 4110 int release_buffer = hci_stack->iso_fragmentation_tx_active == 0u; 4111 log_info("drop fragmented ISO data for closed connection, release buffer %u", release_buffer); 4112 hci_stack->iso_fragmentation_total_size = 0; 4113 hci_stack->iso_fragmentation_pos = 0; 4114 if (release_buffer){ 4115 hci_release_packet_buffer(); 4116 } 4117 } 4118 } 4119 4120 // finalize iso stream for CIS handle 4121 iso_stream = hci_iso_stream_for_con_handle(handle); 4122 if (iso_stream != NULL){ 4123 hci_iso_stream_finalize(iso_stream); 4124 break; 4125 } 4126 4127 // finalize iso stream(s) for ACL handle 4128 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 4129 while (btstack_linked_list_iterator_has_next(&it)){ 4130 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 4131 if (iso_stream->acl_handle == handle ) { 4132 hci_iso_stream_finalize(iso_stream); 4133 } 4134 } 4135 #endif 4136 4137 conn = hci_connection_for_handle(handle); 4138 if (!conn) break; 4139 #ifdef ENABLE_CLASSIC 4140 // pairing failed if it was ongoing 4141 hci_pairing_complete(conn, ERROR_CODE_REMOTE_USER_TERMINATED_CONNECTION); 4142 #endif 4143 4144 // emit dedicatd bonding event 4145 if (conn->bonding_flags & BONDING_EMIT_COMPLETE_ON_DISCONNECT){ 4146 hci_emit_dedicated_bonding_result(conn->address, conn->bonding_status); 4147 } 4148 4149 // mark connection for shutdown, stop timers, reset state 4150 conn->state = RECEIVED_DISCONNECTION_COMPLETE; 4151 hci_connection_stop_timer(conn); 4152 hci_connection_init(conn); 4153 4154 #ifdef ENABLE_BLE 4155 #ifdef ENABLE_LE_PERIPHERAL 4156 // re-enable advertisements for le connections if active 4157 if (hci_is_le_connection(conn)){ 4158 hci_update_advertisements_enabled_for_current_roles(); 4159 } 4160 #endif 4161 #endif 4162 break; 4163 4164 case HCI_EVENT_HARDWARE_ERROR: 4165 log_error("Hardware Error: 0x%02x", packet[2]); 4166 if (hci_stack->hardware_error_callback){ 4167 (*hci_stack->hardware_error_callback)(packet[2]); 4168 } else { 4169 // if no special requests, just reboot stack 4170 hci_power_control_off(); 4171 hci_power_control_on(); 4172 } 4173 break; 4174 4175 #ifdef ENABLE_CLASSIC 4176 case HCI_EVENT_ROLE_CHANGE: 4177 if (packet[2]) break; // status != 0 4178 reverse_bd_addr(&packet[3], addr); 4179 addr_type = BD_ADDR_TYPE_ACL; 4180 conn = hci_connection_for_bd_addr_and_type(addr, addr_type); 4181 if (!conn) break; 4182 conn->role = (hci_role_t) packet[9]; 4183 break; 4184 #endif 4185 4186 case HCI_EVENT_TRANSPORT_PACKET_SENT: 4187 // release packet buffer only for asynchronous transport and if there are not further fragments 4188 if (hci_transport_synchronous()) { 4189 log_error("Synchronous HCI Transport shouldn't send HCI_EVENT_TRANSPORT_PACKET_SENT"); 4190 return; // instead of break: to avoid re-entering hci_run() 4191 } 4192 hci_stack->acl_fragmentation_tx_active = 0; 4193 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4194 hci_stack->iso_fragmentation_tx_active = 0; 4195 if (hci_stack->iso_fragmentation_total_size) break; 4196 #endif 4197 if (hci_stack->acl_fragmentation_total_size) break; 4198 hci_release_packet_buffer(); 4199 4200 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4201 hci_iso_notify_can_send_now(); 4202 #endif 4203 // L2CAP receives this event via the hci_emit_event below 4204 4205 #ifdef ENABLE_CLASSIC 4206 // For SCO, we do the can_send_now_check here 4207 hci_notify_if_sco_can_send_now(); 4208 #endif 4209 break; 4210 4211 #ifdef ENABLE_CLASSIC 4212 case HCI_EVENT_SCO_CAN_SEND_NOW: 4213 // For SCO, we do the can_send_now_check here 4214 hci_stack->sco_can_send_now = true; 4215 hci_notify_if_sco_can_send_now(); 4216 return; 4217 4218 // explode inquriy results for easier consumption 4219 case HCI_EVENT_INQUIRY_RESULT: 4220 case HCI_EVENT_INQUIRY_RESULT_WITH_RSSI: 4221 case HCI_EVENT_EXTENDED_INQUIRY_RESPONSE: 4222 gap_inquiry_explode(packet, size); 4223 break; 4224 #endif 4225 4226 #ifdef ENABLE_BLE 4227 case HCI_EVENT_LE_META: 4228 switch (packet[2]){ 4229 #ifdef ENABLE_LE_CENTRAL 4230 case HCI_SUBEVENT_LE_ADVERTISING_REPORT: 4231 if (!hci_stack->le_scanning_enabled) break; 4232 le_handle_advertisement_report(packet, size); 4233 break; 4234 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 4235 case HCI_SUBEVENT_LE_EXTENDED_ADVERTISING_REPORT: 4236 if (!hci_stack->le_scanning_enabled) break; 4237 le_handle_extended_advertisement_report(packet, size); 4238 break; 4239 case HCI_SUBEVENT_LE_PERIODIC_ADVERTISING_SYNC_ESTABLISHMENT: 4240 hci_stack->le_periodic_sync_request = LE_CONNECTING_IDLE; 4241 hci_stack->le_periodic_sync_state = LE_CONNECTING_IDLE; 4242 break; 4243 case HCI_SUBEVENT_LE_ADVERTISING_SET_TERMINATED: 4244 advertising_handle = hci_subevent_le_advertising_set_terminated_get_advertising_handle(packet); 4245 btstack_linked_list_iterator_init(&it, &hci_stack->le_advertising_sets); 4246 while (btstack_linked_list_iterator_has_next(&it)) { 4247 le_advertising_set_t *advertising_set = (le_advertising_set_t *) btstack_linked_list_iterator_next(&it); 4248 if (advertising_set->advertising_handle == advertising_handle){ 4249 advertising_set->state &= ~(LE_ADVERTISEMENT_STATE_ACTIVE | LE_ADVERTISEMENT_STATE_ENABLED); 4250 } 4251 } 4252 break; 4253 #endif 4254 #endif 4255 case HCI_SUBEVENT_LE_CONNECTION_COMPLETE: 4256 case HCI_SUBEVENT_LE_ENHANCED_CONNECTION_COMPLETE_V1: 4257 case HCI_SUBEVENT_LE_ENHANCED_CONNECTION_COMPLETE_V2: 4258 event_handle_le_connection_complete(packet); 4259 break; 4260 4261 // log_info("LE buffer size: %u, count %u", little_endian_read_16(packet,6), packet[8]); 4262 case HCI_SUBEVENT_LE_CONNECTION_UPDATE_COMPLETE: 4263 handle = hci_subevent_le_connection_update_complete_get_connection_handle(packet); 4264 conn = hci_connection_for_handle(handle); 4265 if (!conn) break; 4266 conn->le_connection_interval = hci_subevent_le_connection_update_complete_get_conn_interval(packet); 4267 break; 4268 4269 case HCI_SUBEVENT_LE_REMOTE_CONNECTION_PARAMETER_REQUEST: 4270 // connection 4271 handle = hci_subevent_le_remote_connection_parameter_request_get_connection_handle(packet); 4272 conn = hci_connection_for_handle(handle); 4273 if (conn) { 4274 // read arguments 4275 uint16_t le_conn_interval_min = hci_subevent_le_remote_connection_parameter_request_get_interval_min(packet); 4276 uint16_t le_conn_interval_max = hci_subevent_le_remote_connection_parameter_request_get_interval_max(packet); 4277 uint16_t le_conn_latency = hci_subevent_le_remote_connection_parameter_request_get_latency(packet); 4278 uint16_t le_supervision_timeout = hci_subevent_le_remote_connection_parameter_request_get_timeout(packet); 4279 4280 // validate against current connection parameter range 4281 le_connection_parameter_range_t existing_range; 4282 gap_get_connection_parameter_range(&existing_range); 4283 int update_parameter = gap_connection_parameter_range_included(&existing_range, le_conn_interval_min, le_conn_interval_max, le_conn_latency, le_supervision_timeout); 4284 if (update_parameter){ 4285 conn->le_con_parameter_update_state = CON_PARAMETER_UPDATE_REPLY; 4286 conn->le_conn_interval_min = le_conn_interval_min; 4287 conn->le_conn_interval_max = le_conn_interval_max; 4288 conn->le_conn_latency = le_conn_latency; 4289 conn->le_supervision_timeout = le_supervision_timeout; 4290 } else { 4291 conn->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NEGATIVE_REPLY; 4292 } 4293 } 4294 break; 4295 #ifdef ENABLE_LE_LIMIT_ACL_FRAGMENT_BY_MAX_OCTETS 4296 case HCI_SUBEVENT_LE_DATA_LENGTH_CHANGE: 4297 handle = hci_subevent_le_data_length_change_get_connection_handle(packet); 4298 conn = hci_connection_for_handle(handle); 4299 if (conn) { 4300 conn->le_max_tx_octets = hci_subevent_le_data_length_change_get_max_tx_octets(packet); 4301 } 4302 break; 4303 #endif 4304 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4305 case HCI_SUBEVENT_LE_CIS_REQUEST: 4306 // incoming CIS request, allocate iso stream object and cache metadata 4307 iso_stream = hci_iso_stream_create(HCI_ISO_TYPE_CIS, HCI_ISO_STREAM_W4_USER, 4308 hci_subevent_le_cis_request_get_cig_id(packet), 4309 hci_subevent_le_cis_request_get_cis_id(packet)); 4310 // if there's no memory, gap_cis_accept/gap_cis_reject will fail 4311 if (iso_stream != NULL){ 4312 iso_stream->cis_handle = hci_subevent_le_cis_request_get_cis_connection_handle(packet); 4313 iso_stream->acl_handle = hci_subevent_le_cis_request_get_acl_connection_handle(packet); 4314 } 4315 break; 4316 case HCI_SUBEVENT_LE_CIS_ESTABLISHED: 4317 if (hci_stack->iso_active_operation_type == HCI_ISO_TYPE_CIS){ 4318 handle = hci_subevent_le_cis_established_get_connection_handle(packet); 4319 uint8_t status = hci_subevent_le_cis_established_get_status(packet); 4320 iso_stream = hci_iso_stream_for_con_handle(handle); 4321 btstack_assert(iso_stream != NULL); 4322 // track connection info 4323 iso_stream->number_of_subevents = hci_subevent_le_cis_established_get_nse(packet); 4324 iso_stream->burst_number_c_to_p = hci_subevent_le_cis_established_get_bn_c_to_p(packet); 4325 iso_stream->burst_number_p_to_c = hci_subevent_le_cis_established_get_bn_p_to_c(packet); 4326 iso_stream->flush_timeout_c_to_p = hci_subevent_le_cis_established_get_ft_c_to_p(packet); 4327 iso_stream->flush_timeout_p_to_c = hci_subevent_le_cis_established_get_ft_p_to_c(packet); 4328 iso_stream->max_sdu_c_to_p = hci_subevent_le_cis_established_get_max_pdu_c_to_p(packet); 4329 iso_stream->max_sdu_p_to_c = hci_subevent_le_cis_established_get_max_pdu_p_to_c(packet); 4330 iso_stream->iso_interval_1250us = hci_subevent_le_cis_established_get_iso_interval(packet); 4331 if (hci_stack->iso_active_operation_group_id == HCI_ISO_GROUP_ID_SINGLE_CIS){ 4332 // CIS Accept by Peripheral 4333 if (status == ERROR_CODE_SUCCESS){ 4334 if (iso_stream->max_sdu_p_to_c > 0){ 4335 // we're peripheral and we will send data 4336 iso_stream->state = HCI_ISO_STREAM_STATE_W2_SETUP_ISO_INPUT; 4337 } else { 4338 // we're peripheral and we will only receive data 4339 iso_stream->state = HCI_ISO_STREAM_STATE_W2_SETUP_ISO_OUTPUT; 4340 } 4341 } else { 4342 hci_cis_handle_created(iso_stream, status); 4343 } 4344 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4345 } else { 4346 // CIG Setup by Central 4347 le_audio_cig_t * cig = hci_cig_for_id(hci_stack->iso_active_operation_group_id); 4348 btstack_assert(cig != NULL); 4349 // update iso stream state 4350 if (status == ERROR_CODE_SUCCESS){ 4351 iso_stream->state = HCI_ISO_STREAM_STATE_ESTABLISHED; 4352 } else { 4353 iso_stream->state = HCI_ISO_STREAM_STATE_IDLE; 4354 } 4355 // update cig state 4356 uint8_t i; 4357 for (i=0;i<cig->num_cis;i++){ 4358 if (cig->cis_con_handles[i] == handle){ 4359 cig->cis_setup_active[i] = false; 4360 if (status == ERROR_CODE_SUCCESS){ 4361 cig->cis_established[i] = true; 4362 } else { 4363 hci_cis_handle_created(iso_stream, status); 4364 } 4365 } 4366 } 4367 4368 // trigger iso path setup if complete 4369 bool cis_setup_active = false; 4370 for (i=0;i<cig->num_cis;i++){ 4371 cis_setup_active |= cig->cis_setup_active[i]; 4372 } 4373 if (cis_setup_active == false){ 4374 cig->state_vars.next_cis = 0; 4375 cig->state = LE_AUDIO_CIG_STATE_SETUP_ISO_PATH; 4376 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4377 } 4378 } 4379 } 4380 break; 4381 case HCI_SUBEVENT_LE_CREATE_BIG_COMPLETE: 4382 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4383 big = hci_big_for_handle(packet[4]); 4384 if (big != NULL){ 4385 uint8_t status = packet[3]; 4386 if (status == ERROR_CODE_SUCCESS){ 4387 // store bis_con_handles and trigger iso path setup 4388 uint8_t num_bis = btstack_min(MAX_NR_BIS, packet[20]); 4389 uint8_t i; 4390 for (i=0;i<num_bis;i++){ 4391 hci_con_handle_t bis_handle = (hci_con_handle_t) little_endian_read_16(packet, 21 + (2 * i)); 4392 big->bis_con_handles[i] = bis_handle; 4393 // assign bis handle 4394 btstack_linked_list_iterator_t it; 4395 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 4396 while (btstack_linked_list_iterator_has_next(&it)){ 4397 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 4398 if ((iso_stream->state == HCI_ISO_STREAM_STATE_REQUESTED ) && 4399 (iso_stream->group_id == big->big_handle)){ 4400 iso_stream->cis_handle = bis_handle; 4401 iso_stream->state = HCI_ISO_STREAM_STATE_ESTABLISHED; 4402 break; 4403 } 4404 } 4405 } 4406 if (big->state == LE_AUDIO_BIG_STATE_W4_ESTABLISHED) { 4407 big->state = LE_AUDIO_BIG_STATE_SETUP_ISO_PATH; 4408 big->state_vars.next_bis = 0; 4409 } 4410 } else { 4411 // create BIG failed or has been stopped by us 4412 hci_iso_stream_finalize_by_type_and_group_id(HCI_ISO_TYPE_BIS, big->big_handle); 4413 btstack_linked_list_remove(&hci_stack->le_audio_bigs, (btstack_linked_item_t *) big); 4414 if (big->state == LE_AUDIO_BIG_STATE_W4_ESTABLISHED){ 4415 hci_emit_big_created(big, status); 4416 } else { 4417 hci_emit_big_terminated(big); 4418 } 4419 } 4420 } 4421 break; 4422 case HCI_SUBEVENT_LE_TERMINATE_BIG_COMPLETE: 4423 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4424 big = hci_big_for_handle(hci_subevent_le_terminate_big_complete_get_big_handle(packet)); 4425 if (big != NULL){ 4426 // finalize associated ISO streams 4427 btstack_linked_list_iterator_t it; 4428 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 4429 while (btstack_linked_list_iterator_has_next(&it)){ 4430 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 4431 if (iso_stream->group_id == big->big_handle){ 4432 log_info("BIG Terminated, big_handle 0x%02x, con handle 0x%04x", iso_stream->group_id, iso_stream->cis_handle); 4433 btstack_linked_list_iterator_remove(&it); 4434 btstack_memory_hci_iso_stream_free(iso_stream); 4435 } 4436 } 4437 btstack_linked_list_remove(&hci_stack->le_audio_bigs, (btstack_linked_item_t *) big); 4438 switch (big->state){ 4439 case LE_AUDIO_BIG_STATE_W4_TERMINATED_AFTER_SETUP_FAILED: 4440 hci_emit_big_created(big, big->state_vars.status); 4441 break; 4442 default: 4443 hci_emit_big_terminated(big); 4444 break; 4445 } 4446 } 4447 break; 4448 case HCI_SUBEVENT_LE_BIG_SYNC_ESTABLISHED: 4449 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4450 big_sync = hci_big_sync_for_handle(packet[4]); 4451 if (big_sync != NULL){ 4452 uint8_t status = packet[3]; 4453 uint8_t big_handle = packet[4]; 4454 if (status == ERROR_CODE_SUCCESS){ 4455 // store bis_con_handles and trigger iso path setup 4456 uint8_t num_bis = btstack_min(MAX_NR_BIS, packet[16]); 4457 uint8_t i; 4458 for (i=0;i<num_bis;i++){ 4459 big_sync->bis_con_handles[i] = little_endian_read_16(packet, 17 + (2 * i)); 4460 } 4461 if (big_sync->state == LE_AUDIO_BIG_STATE_W4_ESTABLISHED) { 4462 // trigger iso path setup 4463 big_sync->state = LE_AUDIO_BIG_STATE_SETUP_ISO_PATH; 4464 big_sync->state_vars.next_bis = 0; 4465 } 4466 } else { 4467 // create BIG Sync failed or has been stopped by us 4468 btstack_linked_list_remove(&hci_stack->le_audio_big_syncs, (btstack_linked_item_t *) big_sync); 4469 if (big_sync->state == LE_AUDIO_BIG_STATE_W4_ESTABLISHED) { 4470 hci_emit_big_sync_created(big_sync, status); 4471 } else { 4472 hci_emit_big_sync_stopped(big_handle); 4473 } 4474 } 4475 } 4476 break; 4477 case HCI_SUBEVENT_LE_BIG_SYNC_LOST: 4478 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4479 big_sync = hci_big_sync_for_handle(packet[4]); 4480 if (big_sync != NULL){ 4481 uint8_t big_handle = packet[4]; 4482 btstack_linked_list_remove(&hci_stack->le_audio_big_syncs, (btstack_linked_item_t *) big_sync); 4483 hci_emit_big_sync_stopped(big_handle); 4484 } 4485 break; 4486 #endif 4487 default: 4488 break; 4489 } 4490 break; 4491 #endif 4492 case HCI_EVENT_VENDOR_SPECIFIC: 4493 // Vendor specific commands often create vendor specific event instead of num completed packets 4494 // To avoid getting stuck as num_cmds_packets is zero, reset it to 1 for controllers with this behaviour 4495 switch (hci_stack->manufacturer){ 4496 case BLUETOOTH_COMPANY_ID_CAMBRIDGE_SILICON_RADIO: 4497 hci_stack->num_cmd_packets = 1; 4498 break; 4499 default: 4500 break; 4501 } 4502 break; 4503 default: 4504 break; 4505 } 4506 4507 handle_event_for_current_stack_state(packet, size); 4508 4509 // notify upper stack 4510 hci_emit_event(packet, size, 0); // don't dump, already happened in packet handler 4511 4512 // moved here to give upper stack a chance to close down everything with hci_connection_t intact 4513 if ((hci_event_packet_get_type(packet) == HCI_EVENT_DISCONNECTION_COMPLETE) && (packet[2] == 0)){ 4514 handle = little_endian_read_16(packet, 3); 4515 hci_connection_t * aConn = hci_connection_for_handle(handle); 4516 // discard connection if app did not trigger a reconnect in the event handler 4517 if (aConn && aConn->state == RECEIVED_DISCONNECTION_COMPLETE){ 4518 hci_shutdown_connection(aConn); 4519 } 4520 #ifdef ENABLE_CONTROLLER_DUMP_PACKETS 4521 hci_controller_dump_packets(); 4522 #endif 4523 } 4524 4525 // execute main loop 4526 hci_run(); 4527 } 4528 4529 #ifdef ENABLE_CLASSIC 4530 4531 static void sco_handler(uint8_t * packet, uint16_t size){ 4532 // lookup connection struct 4533 hci_con_handle_t con_handle = READ_SCO_CONNECTION_HANDLE(packet); 4534 hci_connection_t * conn = hci_connection_for_handle(con_handle); 4535 if (!conn) return; 4536 4537 #ifdef ENABLE_SCO_OVER_HCI 4538 // CSR 8811 prefixes 60 byte SCO packet in transparent mode with 20 zero bytes -> skip first 20 payload bytes 4539 if (hci_stack->manufacturer == BLUETOOTH_COMPANY_ID_CAMBRIDGE_SILICON_RADIO){ 4540 if ((size == 83) && ((hci_stack->sco_voice_setting_active & 0x03) == 0x03)){ 4541 packet[2] = 0x3c; 4542 memmove(&packet[3], &packet[23], 63); 4543 size = 63; 4544 } 4545 } 4546 4547 if (hci_have_usb_transport()){ 4548 // Nothing to do 4549 } else { 4550 // log_debug("sco flow %u, handle 0x%04x, packets sent %u, bytes send %u", hci_stack->synchronous_flow_control_enabled, (int) con_handle, conn->num_packets_sent, conn->num_sco_bytes_sent); 4551 if (hci_stack->synchronous_flow_control_enabled == 0){ 4552 // ignore received SCO packets for the first 10 ms, then allow for max two HCI_SCO_2EV3_SIZE packets 4553 uint16_t max_sco_packets = btstack_min(2 * HCI_SCO_2EV3_SIZE / conn->sco_payload_length, hci_stack->sco_packets_total_num); 4554 if (conn->sco_tx_active == 0){ 4555 if (btstack_time_delta(btstack_run_loop_get_time_ms(), conn->sco_established_ms) > 10){ 4556 conn->sco_tx_active = 1; 4557 conn->sco_tx_ready = max_sco_packets; 4558 log_info("Start SCO sending, %u packets", conn->sco_tx_ready); 4559 hci_notify_if_sco_can_send_now(); 4560 } 4561 } else { 4562 if (conn->sco_tx_ready < max_sco_packets){ 4563 conn->sco_tx_ready++; 4564 } 4565 hci_notify_if_sco_can_send_now(); 4566 } 4567 } 4568 } 4569 #endif 4570 4571 // deliver to app 4572 if (hci_stack->sco_packet_handler) { 4573 hci_stack->sco_packet_handler(HCI_SCO_DATA_PACKET, 0, packet, size); 4574 } 4575 4576 #ifdef HAVE_SCO_TRANSPORT 4577 // We can send one packet for each received packet 4578 conn->sco_tx_ready++; 4579 hci_notify_if_sco_can_send_now(); 4580 #endif 4581 4582 #ifdef ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL 4583 conn->num_packets_completed++; 4584 hci_stack->host_completed_packets = 1; 4585 hci_run(); 4586 #endif 4587 } 4588 #endif 4589 4590 static void packet_handler(uint8_t packet_type, uint8_t *packet, uint16_t size){ 4591 hci_dump_packet(packet_type, 1, packet, size); 4592 switch (packet_type) { 4593 case HCI_EVENT_PACKET: 4594 event_handler(packet, size); 4595 break; 4596 case HCI_ACL_DATA_PACKET: 4597 acl_handler(packet, size); 4598 break; 4599 #ifdef ENABLE_CLASSIC 4600 case HCI_SCO_DATA_PACKET: 4601 sco_handler(packet, size); 4602 break; 4603 #endif 4604 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4605 case HCI_ISO_DATA_PACKET: 4606 hci_iso_packet_handler(packet, size); 4607 break; 4608 #endif 4609 default: 4610 break; 4611 } 4612 } 4613 4614 /** 4615 * @brief Add event packet handler. 4616 */ 4617 void hci_add_event_handler(btstack_packet_callback_registration_t * callback_handler){ 4618 btstack_linked_list_add_tail(&hci_stack->event_handlers, (btstack_linked_item_t*) callback_handler); 4619 } 4620 4621 /** 4622 * @brief Remove event packet handler. 4623 */ 4624 void hci_remove_event_handler(btstack_packet_callback_registration_t * callback_handler){ 4625 btstack_linked_list_remove(&hci_stack->event_handlers, (btstack_linked_item_t*) callback_handler); 4626 } 4627 4628 /** Register HCI packet handlers */ 4629 void hci_register_acl_packet_handler(btstack_packet_handler_t handler){ 4630 hci_stack->acl_packet_handler = handler; 4631 } 4632 4633 #ifdef ENABLE_CLASSIC 4634 /** 4635 * @brief Registers a packet handler for SCO data. Used for HSP and HFP profiles. 4636 */ 4637 void hci_register_sco_packet_handler(btstack_packet_handler_t handler){ 4638 hci_stack->sco_packet_handler = handler; 4639 } 4640 #endif 4641 4642 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4643 void hci_register_iso_packet_handler(btstack_packet_handler_t handler){ 4644 hci_stack->iso_packet_handler = handler; 4645 } 4646 #endif 4647 4648 static void hci_state_reset(void){ 4649 // no connections yet 4650 hci_stack->connections = NULL; 4651 4652 // keep discoverable/connectable as this has been requested by the client(s) 4653 // hci_stack->discoverable = 0; 4654 // hci_stack->connectable = 0; 4655 // hci_stack->bondable = 1; 4656 // hci_stack->own_addr_type = 0; 4657 4658 // buffer is free 4659 hci_stack->hci_packet_buffer_reserved = false; 4660 4661 // no pending cmds 4662 hci_stack->decline_reason = 0; 4663 4664 hci_stack->secure_connections_active = false; 4665 4666 #ifdef ENABLE_CLASSIC 4667 hci_stack->inquiry_lap = GAP_IAC_GENERAL_INQUIRY; 4668 hci_stack->page_timeout = 0x6000; // ca. 15 sec 4669 4670 hci_stack->gap_tasks_classic = 4671 GAP_TASK_SET_DEFAULT_LINK_POLICY | 4672 GAP_TASK_SET_CLASS_OF_DEVICE | 4673 GAP_TASK_SET_LOCAL_NAME | 4674 GAP_TASK_SET_EIR_DATA | 4675 GAP_TASK_WRITE_SCAN_ENABLE | 4676 GAP_TASK_WRITE_PAGE_TIMEOUT; 4677 #endif 4678 4679 #ifdef ENABLE_CLASSIC_PAIRING_OOB 4680 hci_stack->classic_read_local_oob_data = false; 4681 hci_stack->classic_oob_con_handle = HCI_CON_HANDLE_INVALID; 4682 #endif 4683 4684 // LE 4685 #ifdef ENABLE_BLE 4686 memset(hci_stack->le_random_address, 0, 6); 4687 hci_stack->le_random_address_set = 0; 4688 #endif 4689 #ifdef ENABLE_LE_CENTRAL 4690 hci_stack->le_scanning_active = false; 4691 hci_stack->le_scanning_param_update = true; 4692 hci_stack->le_connecting_state = LE_CONNECTING_IDLE; 4693 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 4694 hci_stack->le_whitelist_capacity = 0; 4695 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 4696 hci_stack->le_periodic_terminate_sync_handle = HCI_CON_HANDLE_INVALID; 4697 #endif 4698 #endif 4699 #ifdef ENABLE_LE_PERIPHERAL 4700 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 4701 if ((hci_stack->le_advertisements_state & LE_ADVERTISEMENT_STATE_PARAMS_SET) != 0){ 4702 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_PARAMS; 4703 } 4704 if (hci_stack->le_advertisements_data != NULL){ 4705 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_ADV_DATA; 4706 } 4707 #endif 4708 #ifdef ENABLE_LE_PRIVACY_ADDRESS_RESOLUTION 4709 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_SEND_ENABLE_ADDRESS_RESOLUTION; 4710 #endif 4711 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4712 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_INVALID; 4713 hci_stack->iso_active_operation_group_id = HCI_ISO_GROUP_ID_INVALID; 4714 #endif 4715 } 4716 4717 #ifdef ENABLE_CLASSIC 4718 /** 4719 * @brief Configure Bluetooth hardware control. Has to be called before power on. 4720 */ 4721 void hci_set_link_key_db(btstack_link_key_db_t const * link_key_db){ 4722 // store and open remote device db 4723 hci_stack->link_key_db = link_key_db; 4724 if (hci_stack->link_key_db) { 4725 hci_stack->link_key_db->open(); 4726 } 4727 } 4728 #endif 4729 4730 void hci_init(const hci_transport_t *transport, const void *config){ 4731 4732 #ifdef HAVE_MALLOC 4733 if (!hci_stack) { 4734 hci_stack = (hci_stack_t*) malloc(sizeof(hci_stack_t)); 4735 } 4736 #else 4737 hci_stack = &hci_stack_static; 4738 #endif 4739 memset(hci_stack, 0, sizeof(hci_stack_t)); 4740 4741 // reference to use transport layer implementation 4742 hci_stack->hci_transport = transport; 4743 4744 // reference to used config 4745 hci_stack->config = config; 4746 4747 // setup pointer for outgoing packet buffer 4748 hci_stack->hci_packet_buffer = &hci_stack->hci_packet_buffer_data[HCI_OUTGOING_PRE_BUFFER_SIZE]; 4749 4750 // max acl payload size defined in config.h 4751 hci_stack->acl_data_packet_length = HCI_ACL_PAYLOAD_SIZE; 4752 4753 // register packet handlers with transport 4754 transport->register_packet_handler(&packet_handler); 4755 4756 hci_stack->state = HCI_STATE_OFF; 4757 4758 // class of device 4759 hci_stack->class_of_device = 0x007a020c; // Smartphone 4760 4761 // bondable by default 4762 hci_stack->bondable = 1; 4763 4764 #ifdef ENABLE_CLASSIC 4765 // classic name 4766 hci_stack->local_name = default_classic_name; 4767 4768 // Master slave policy 4769 hci_stack->master_slave_policy = 1; 4770 4771 // Allow Role Switch 4772 hci_stack->allow_role_switch = 1; 4773 4774 // Default / minimum security level = 2 4775 hci_stack->gap_security_level = LEVEL_2; 4776 4777 // Default Security Mode 4 4778 hci_stack->gap_security_mode = GAP_SECURITY_MODE_4; 4779 4780 // Errata-11838 mandates 7 bytes for GAP Security Level 1-3 4781 hci_stack->gap_required_encyrption_key_size = 7; 4782 4783 // Link Supervision Timeout 4784 hci_stack->link_supervision_timeout = HCI_LINK_SUPERVISION_TIMEOUT_DEFAULT; 4785 4786 #endif 4787 4788 // Secure Simple Pairing default: enable, no I/O capabilities, general bonding, mitm not required, auto accept 4789 hci_stack->ssp_enable = 1; 4790 hci_stack->ssp_io_capability = SSP_IO_CAPABILITY_NO_INPUT_NO_OUTPUT; 4791 hci_stack->ssp_authentication_requirement = SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_GENERAL_BONDING; 4792 hci_stack->ssp_auto_accept = 1; 4793 4794 // Secure Connections: enable (requires support from Controller) 4795 hci_stack->secure_connections_enable = true; 4796 4797 // voice setting - signed 16 bit pcm data with CVSD over the air 4798 hci_stack->sco_voice_setting = 0x60; 4799 4800 #ifdef ENABLE_BLE 4801 hci_stack->le_connection_scan_interval = 0x0060; // 60 ms 4802 hci_stack->le_connection_scan_window = 0x0030; // 30 ms 4803 hci_stack->le_connection_interval_min = 0x0008; // 10 ms 4804 hci_stack->le_connection_interval_max = 0x0018; // 30 ms 4805 hci_stack->le_connection_latency = 4; // 4 4806 hci_stack->le_supervision_timeout = 0x0048; // 720 ms 4807 hci_stack->le_minimum_ce_length = 0; // 0 ms 4808 hci_stack->le_maximum_ce_length = 0; // 0 ms 4809 #endif 4810 4811 #ifdef ENABLE_LE_CENTRAL 4812 hci_stack->le_connection_phys = 0x01; // LE 1M PHY 4813 4814 // default LE Scanning 4815 hci_stack->le_scan_type = 0x01; // active 4816 hci_stack->le_scan_interval = 0x1e0; // 300 ms 4817 hci_stack->le_scan_window = 0x30; // 30 ms 4818 hci_stack->le_scan_phys = 0x01; // LE 1M PHY 4819 #endif 4820 4821 #ifdef ENABLE_LE_PERIPHERAL 4822 hci_stack->le_max_number_peripheral_connections = 1; // only single connection as peripheral 4823 4824 // default advertising parameters from Core v5.4 -- needed to use random address without prior adv setup 4825 hci_stack->le_advertisements_interval_min = 0x0800; 4826 hci_stack->le_advertisements_interval_max = 0x0800; 4827 hci_stack->le_advertisements_type = 0; 4828 hci_stack->le_own_addr_type = BD_ADDR_TYPE_LE_PUBLIC; 4829 hci_stack->le_advertisements_direct_address_type = BD_ADDR_TYPE_LE_PUBLIC; 4830 hci_stack->le_advertisements_channel_map = 0x07; 4831 hci_stack->le_advertisements_filter_policy = 0; 4832 #endif 4833 4834 // connection parameter range used to answer connection parameter update requests in l2cap 4835 hci_stack->le_connection_parameter_range.le_conn_interval_min = 6; 4836 hci_stack->le_connection_parameter_range.le_conn_interval_max = 3200; 4837 hci_stack->le_connection_parameter_range.le_conn_latency_min = 0; 4838 hci_stack->le_connection_parameter_range.le_conn_latency_max = 500; 4839 hci_stack->le_connection_parameter_range.le_supervision_timeout_min = 10; 4840 hci_stack->le_connection_parameter_range.le_supervision_timeout_max = 3200; 4841 4842 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4843 hci_stack->iso_packets_to_queue = 1; 4844 #endif 4845 4846 #ifdef ENABLE_LE_PRIVACY_ADDRESS_RESOLUTION 4847 hci_stack->le_privacy_mode = LE_PRIVACY_MODE_DEVICE; 4848 #endif 4849 4850 hci_state_reset(); 4851 } 4852 4853 void hci_deinit(void){ 4854 btstack_run_loop_remove_timer(&hci_stack->timeout); 4855 #ifdef HAVE_MALLOC 4856 if (hci_stack) { 4857 free(hci_stack); 4858 } 4859 #endif 4860 hci_stack = NULL; 4861 4862 #ifdef ENABLE_CLASSIC 4863 disable_l2cap_timeouts = 0; 4864 #endif 4865 } 4866 4867 /** 4868 * @brief Configure Bluetooth chipset driver. Has to be called before power on, or right after receiving the local version information 4869 */ 4870 void hci_set_chipset(const btstack_chipset_t *chipset_driver){ 4871 hci_stack->chipset = chipset_driver; 4872 4873 // reset chipset driver - init is also called on power_up 4874 if (hci_stack->chipset && hci_stack->chipset->init){ 4875 hci_stack->chipset->init(hci_stack->config); 4876 } 4877 } 4878 4879 void hci_enable_custom_pre_init(void){ 4880 hci_stack->chipset_pre_init = true; 4881 } 4882 4883 /** 4884 * @brief Configure Bluetooth hardware control. Has to be called after hci_init() but before power on. 4885 */ 4886 void hci_set_control(const btstack_control_t *hardware_control){ 4887 // references to used control implementation 4888 hci_stack->control = hardware_control; 4889 // init with transport config 4890 hardware_control->init(hci_stack->config); 4891 } 4892 4893 static void hci_discard_connections(void){ 4894 btstack_linked_list_iterator_t it; 4895 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 4896 while (btstack_linked_list_iterator_has_next(&it)){ 4897 // cancel all l2cap connections by emitting dicsconnection complete before shutdown (free) connection 4898 hci_connection_t * connection = (hci_connection_t*) btstack_linked_list_iterator_next(&it); 4899 hci_emit_disconnection_complete(connection->con_handle, 0x16); // terminated by local host 4900 hci_shutdown_connection(connection); 4901 } 4902 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 4903 while (hci_stack->iso_streams != NULL){ 4904 hci_iso_stream_finalize((hci_iso_stream_t *) hci_stack->iso_streams); 4905 } 4906 #endif 4907 } 4908 4909 void hci_close(void){ 4910 4911 #ifdef ENABLE_CLASSIC 4912 // close remote device db 4913 if (hci_stack->link_key_db) { 4914 hci_stack->link_key_db->close(); 4915 } 4916 #endif 4917 4918 hci_discard_connections(); 4919 4920 hci_power_control(HCI_POWER_OFF); 4921 4922 #ifdef HAVE_MALLOC 4923 free(hci_stack); 4924 #endif 4925 hci_stack = NULL; 4926 } 4927 4928 #ifdef HAVE_SCO_TRANSPORT 4929 void hci_set_sco_transport(const btstack_sco_transport_t *sco_transport){ 4930 hci_stack->sco_transport = sco_transport; 4931 sco_transport->register_packet_handler(&packet_handler); 4932 } 4933 #endif 4934 4935 #ifdef ENABLE_CLASSIC 4936 void gap_set_required_encryption_key_size(uint8_t encryption_key_size){ 4937 // validate ranage and set 4938 if (encryption_key_size < 7) return; 4939 if (encryption_key_size > 16) return; 4940 hci_stack->gap_required_encyrption_key_size = encryption_key_size; 4941 } 4942 4943 uint8_t gap_set_security_mode(gap_security_mode_t security_mode){ 4944 if ((security_mode == GAP_SECURITY_MODE_4) || (security_mode == GAP_SECURITY_MODE_2)){ 4945 hci_stack->gap_security_mode = security_mode; 4946 return ERROR_CODE_SUCCESS; 4947 } else { 4948 return ERROR_CODE_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE; 4949 } 4950 } 4951 4952 gap_security_mode_t gap_get_security_mode(void){ 4953 return hci_stack->gap_security_mode; 4954 } 4955 4956 void gap_set_security_level(gap_security_level_t security_level){ 4957 hci_stack->gap_security_level = security_level; 4958 } 4959 4960 gap_security_level_t gap_get_security_level(void){ 4961 if (hci_stack->gap_secure_connections_only_mode){ 4962 return LEVEL_4; 4963 } 4964 return hci_stack->gap_security_level; 4965 } 4966 4967 void gap_set_minimal_service_security_level(gap_security_level_t security_level){ 4968 hci_stack->gap_minimal_service_security_level = security_level; 4969 } 4970 4971 void gap_set_secure_connections_only_mode(bool enable){ 4972 hci_stack->gap_secure_connections_only_mode = enable; 4973 } 4974 4975 bool gap_get_secure_connections_only_mode(void){ 4976 return hci_stack->gap_secure_connections_only_mode; 4977 } 4978 #endif 4979 4980 #ifdef ENABLE_CLASSIC 4981 void gap_set_class_of_device(uint32_t class_of_device){ 4982 hci_stack->class_of_device = class_of_device; 4983 hci_stack->gap_tasks_classic |= GAP_TASK_SET_CLASS_OF_DEVICE; 4984 hci_run(); 4985 } 4986 4987 void gap_set_default_link_policy_settings(uint16_t default_link_policy_settings){ 4988 hci_stack->default_link_policy_settings = default_link_policy_settings; 4989 hci_stack->gap_tasks_classic |= GAP_TASK_SET_DEFAULT_LINK_POLICY; 4990 hci_run(); 4991 } 4992 4993 void gap_set_allow_role_switch(bool allow_role_switch){ 4994 hci_stack->allow_role_switch = allow_role_switch ? 1 : 0; 4995 } 4996 4997 uint8_t hci_get_allow_role_switch(void){ 4998 return hci_stack->allow_role_switch; 4999 } 5000 5001 void gap_set_link_supervision_timeout(uint16_t link_supervision_timeout){ 5002 hci_stack->link_supervision_timeout = link_supervision_timeout; 5003 } 5004 5005 void gap_enable_link_watchdog(uint16_t timeout_ms){ 5006 hci_stack->automatic_flush_timeout = btstack_min(timeout_ms, 1280) * 8 / 5; // divide by 0.625 5007 } 5008 5009 uint16_t hci_automatic_flush_timeout(void){ 5010 return hci_stack->automatic_flush_timeout; 5011 } 5012 5013 void hci_disable_l2cap_timeout_check(void){ 5014 disable_l2cap_timeouts = 1; 5015 } 5016 #endif 5017 5018 #ifndef HAVE_HOST_CONTROLLER_API 5019 // Set Public BD ADDR - passed on to Bluetooth chipset if supported in bt_control_h 5020 void hci_set_bd_addr(bd_addr_t addr){ 5021 (void)memcpy(hci_stack->custom_bd_addr, addr, 6); 5022 hci_stack->custom_bd_addr_set = 1; 5023 } 5024 #endif 5025 5026 // State-Module-Driver overview 5027 // state module low-level 5028 // HCI_STATE_OFF off close 5029 // HCI_STATE_INITIALIZING, on open 5030 // HCI_STATE_WORKING, on open 5031 // HCI_STATE_HALTING, on open 5032 // HCI_STATE_SLEEPING, off/sleep close 5033 // HCI_STATE_FALLING_ASLEEP on open 5034 5035 static int hci_power_control_on(void){ 5036 5037 // power on 5038 int err = 0; 5039 if (hci_stack->control && hci_stack->control->on){ 5040 err = (*hci_stack->control->on)(); 5041 } 5042 if (err){ 5043 log_error( "POWER_ON failed"); 5044 hci_emit_hci_open_failed(); 5045 return err; 5046 } 5047 5048 // int chipset driver 5049 if (hci_stack->chipset && hci_stack->chipset->init){ 5050 hci_stack->chipset->init(hci_stack->config); 5051 } 5052 5053 // init transport 5054 if (hci_stack->hci_transport->init){ 5055 hci_stack->hci_transport->init(hci_stack->config); 5056 } 5057 5058 // open transport 5059 err = hci_stack->hci_transport->open(); 5060 if (err){ 5061 log_error( "HCI_INIT failed, turning Bluetooth off again"); 5062 if (hci_stack->control && hci_stack->control->off){ 5063 (*hci_stack->control->off)(); 5064 } 5065 hci_emit_hci_open_failed(); 5066 return err; 5067 } 5068 return 0; 5069 } 5070 5071 static void hci_power_control_off(void){ 5072 5073 log_info("hci_power_control_off"); 5074 5075 // close low-level device 5076 hci_stack->hci_transport->close(); 5077 5078 log_info("hci_power_control_off - hci_transport closed"); 5079 5080 // power off 5081 if (hci_stack->control && hci_stack->control->off){ 5082 (*hci_stack->control->off)(); 5083 } 5084 5085 log_info("hci_power_control_off - control closed"); 5086 5087 hci_stack->state = HCI_STATE_OFF; 5088 } 5089 5090 static void hci_power_control_sleep(void){ 5091 5092 log_info("hci_power_control_sleep"); 5093 5094 #if 0 5095 // don't close serial port during sleep 5096 5097 // close low-level device 5098 hci_stack->hci_transport->close(hci_stack->config); 5099 #endif 5100 5101 // sleep mode 5102 if (hci_stack->control && hci_stack->control->sleep){ 5103 (*hci_stack->control->sleep)(); 5104 } 5105 5106 hci_stack->state = HCI_STATE_SLEEPING; 5107 } 5108 5109 static int hci_power_control_wake(void){ 5110 5111 log_info("hci_power_control_wake"); 5112 5113 // wake on 5114 if (hci_stack->control && hci_stack->control->wake){ 5115 (*hci_stack->control->wake)(); 5116 } 5117 5118 #if 0 5119 // open low-level device 5120 int err = hci_stack->hci_transport->open(hci_stack->config); 5121 if (err){ 5122 log_error( "HCI_INIT failed, turning Bluetooth off again"); 5123 if (hci_stack->control && hci_stack->control->off){ 5124 (*hci_stack->control->off)(); 5125 } 5126 hci_emit_hci_open_failed(); 5127 return err; 5128 } 5129 #endif 5130 5131 return 0; 5132 } 5133 5134 static void hci_power_enter_initializing_state(void){ 5135 // set up state machine 5136 hci_stack->num_cmd_packets = 1; // assume that one cmd can be sent 5137 hci_stack->hci_packet_buffer_reserved = false; 5138 hci_stack->state = HCI_STATE_INITIALIZING; 5139 5140 #ifndef HAVE_HOST_CONTROLLER_API 5141 if (hci_stack->chipset_pre_init) { 5142 hci_stack->substate = HCI_INIT_CUSTOM_PRE_INIT; 5143 } else 5144 #endif 5145 { 5146 hci_stack->substate = HCI_INIT_SEND_RESET; 5147 } 5148 } 5149 5150 static void hci_power_enter_halting_state(void){ 5151 #ifdef ENABLE_BLE 5152 // drop entries scheduled for removal, mark others for re-adding 5153 btstack_linked_list_iterator_t it; 5154 btstack_linked_list_iterator_init(&it, &hci_stack->le_whitelist); 5155 while (btstack_linked_list_iterator_has_next(&it)){ 5156 whitelist_entry_t * entry = (whitelist_entry_t*) btstack_linked_list_iterator_next(&it); 5157 if ((entry->state & (LE_WHITELIST_REMOVE_FROM_CONTROLLER | LE_WHITELIST_ADD_TO_CONTROLLER)) == LE_WHITELIST_REMOVE_FROM_CONTROLLER){ 5158 btstack_linked_list_iterator_remove(&it); 5159 btstack_memory_whitelist_entry_free(entry); 5160 } else { 5161 entry->state = LE_WHITELIST_ADD_TO_CONTROLLER; 5162 } 5163 } 5164 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 5165 btstack_linked_list_iterator_init(&it, &hci_stack->le_periodic_advertiser_list); 5166 const uint8_t mask = LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER | LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER; 5167 while (btstack_linked_list_iterator_has_next(&it)){ 5168 periodic_advertiser_list_entry_t * entry = (periodic_advertiser_list_entry_t*) btstack_linked_list_iterator_next(&it); 5169 if ((entry->state & mask) == LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER) { 5170 btstack_linked_list_iterator_remove(&it); 5171 btstack_memory_periodic_advertiser_list_entry_free(entry); 5172 } else { 5173 entry->state |= LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER; 5174 continue; 5175 } 5176 } 5177 #endif 5178 #endif 5179 // see hci_run 5180 hci_stack->state = HCI_STATE_HALTING; 5181 hci_stack->substate = HCI_HALTING_CLASSIC_STOP; 5182 // setup watchdog timer for disconnect - only triggers if Controller does not respond anymore 5183 btstack_run_loop_set_timer(&hci_stack->timeout, 1000); 5184 btstack_run_loop_set_timer_handler(&hci_stack->timeout, hci_halting_timeout_handler); 5185 btstack_run_loop_add_timer(&hci_stack->timeout); 5186 } 5187 5188 // returns error 5189 static int hci_power_control_state_off(HCI_POWER_MODE power_mode){ 5190 int err; 5191 switch (power_mode){ 5192 case HCI_POWER_ON: 5193 err = hci_power_control_on(); 5194 if (err != 0) { 5195 log_error("hci_power_control_on() error %d", err); 5196 return err; 5197 } 5198 hci_power_enter_initializing_state(); 5199 break; 5200 case HCI_POWER_OFF: 5201 // do nothing 5202 break; 5203 case HCI_POWER_SLEEP: 5204 // do nothing (with SLEEP == OFF) 5205 break; 5206 default: 5207 btstack_assert(false); 5208 break; 5209 } 5210 return ERROR_CODE_SUCCESS; 5211 } 5212 5213 static int hci_power_control_state_initializing(HCI_POWER_MODE power_mode){ 5214 switch (power_mode){ 5215 case HCI_POWER_ON: 5216 // do nothing 5217 break; 5218 case HCI_POWER_OFF: 5219 // no connections yet, just turn it off 5220 hci_power_control_off(); 5221 break; 5222 case HCI_POWER_SLEEP: 5223 // no connections yet, just turn it off 5224 hci_power_control_sleep(); 5225 break; 5226 default: 5227 btstack_assert(false); 5228 break; 5229 } 5230 return ERROR_CODE_SUCCESS; 5231 } 5232 5233 static int hci_power_control_state_working(HCI_POWER_MODE power_mode) { 5234 switch (power_mode){ 5235 case HCI_POWER_ON: 5236 // do nothing 5237 break; 5238 case HCI_POWER_OFF: 5239 hci_power_enter_halting_state(); 5240 break; 5241 case HCI_POWER_SLEEP: 5242 // see hci_run 5243 hci_stack->state = HCI_STATE_FALLING_ASLEEP; 5244 hci_stack->substate = HCI_FALLING_ASLEEP_DISCONNECT; 5245 break; 5246 default: 5247 btstack_assert(false); 5248 break; 5249 } 5250 return ERROR_CODE_SUCCESS; 5251 } 5252 5253 static int hci_power_control_state_halting(HCI_POWER_MODE power_mode) { 5254 switch (power_mode){ 5255 case HCI_POWER_ON: 5256 hci_power_enter_initializing_state(); 5257 break; 5258 case HCI_POWER_OFF: 5259 // do nothing 5260 break; 5261 case HCI_POWER_SLEEP: 5262 // see hci_run 5263 hci_stack->state = HCI_STATE_FALLING_ASLEEP; 5264 hci_stack->substate = HCI_FALLING_ASLEEP_DISCONNECT; 5265 break; 5266 default: 5267 btstack_assert(false); 5268 break; 5269 } 5270 return ERROR_CODE_SUCCESS; 5271 } 5272 5273 static int hci_power_control_state_falling_asleep(HCI_POWER_MODE power_mode) { 5274 switch (power_mode){ 5275 case HCI_POWER_ON: 5276 hci_power_enter_initializing_state(); 5277 break; 5278 case HCI_POWER_OFF: 5279 hci_power_enter_halting_state(); 5280 break; 5281 case HCI_POWER_SLEEP: 5282 // do nothing 5283 break; 5284 default: 5285 btstack_assert(false); 5286 break; 5287 } 5288 return ERROR_CODE_SUCCESS; 5289 } 5290 5291 static int hci_power_control_state_sleeping(HCI_POWER_MODE power_mode) { 5292 int err; 5293 switch (power_mode){ 5294 case HCI_POWER_ON: 5295 err = hci_power_control_wake(); 5296 if (err) return err; 5297 hci_power_enter_initializing_state(); 5298 break; 5299 case HCI_POWER_OFF: 5300 hci_power_enter_halting_state(); 5301 break; 5302 case HCI_POWER_SLEEP: 5303 // do nothing 5304 break; 5305 default: 5306 btstack_assert(false); 5307 break; 5308 } 5309 return ERROR_CODE_SUCCESS; 5310 } 5311 5312 int hci_power_control(HCI_POWER_MODE power_mode){ 5313 log_info("hci_power_control: %d, current mode %u", power_mode, hci_stack->state); 5314 btstack_run_loop_remove_timer(&hci_stack->timeout); 5315 int err = 0; 5316 switch (hci_stack->state){ 5317 case HCI_STATE_OFF: 5318 err = hci_power_control_state_off(power_mode); 5319 break; 5320 case HCI_STATE_INITIALIZING: 5321 err = hci_power_control_state_initializing(power_mode); 5322 break; 5323 case HCI_STATE_WORKING: 5324 err = hci_power_control_state_working(power_mode); 5325 break; 5326 case HCI_STATE_HALTING: 5327 err = hci_power_control_state_halting(power_mode); 5328 break; 5329 case HCI_STATE_FALLING_ASLEEP: 5330 err = hci_power_control_state_falling_asleep(power_mode); 5331 break; 5332 case HCI_STATE_SLEEPING: 5333 err = hci_power_control_state_sleeping(power_mode); 5334 break; 5335 default: 5336 btstack_assert(false); 5337 break; 5338 } 5339 if (err != 0){ 5340 return err; 5341 } 5342 5343 // create internal event 5344 hci_emit_state(); 5345 5346 // trigger next/first action 5347 hci_run(); 5348 5349 return 0; 5350 } 5351 5352 5353 static void hci_halting_run(void) { 5354 5355 log_info("HCI_STATE_HALTING, substate %x\n", hci_stack->substate); 5356 5357 hci_connection_t *connection; 5358 #ifdef ENABLE_BLE 5359 #ifdef ENABLE_LE_PERIPHERAL 5360 bool stop_advertismenets; 5361 #endif 5362 #endif 5363 5364 switch (hci_stack->substate) { 5365 case HCI_HALTING_CLASSIC_STOP: 5366 #ifdef ENABLE_CLASSIC 5367 if (!hci_can_send_command_packet_now()) return; 5368 5369 if (hci_stack->connectable || hci_stack->discoverable){ 5370 hci_stack->substate = HCI_HALTING_LE_ADV_STOP; 5371 hci_send_cmd(&hci_write_scan_enable, 0); 5372 return; 5373 } 5374 #endif 5375 /* fall through */ 5376 5377 case HCI_HALTING_LE_ADV_STOP: 5378 hci_stack->substate = HCI_HALTING_LE_ADV_STOP; 5379 5380 #ifdef ENABLE_BLE 5381 #ifdef ENABLE_LE_PERIPHERAL 5382 if (!hci_can_send_command_packet_now()) return; 5383 5384 stop_advertismenets = (hci_stack->le_advertisements_state & LE_ADVERTISEMENT_STATE_ACTIVE) != 0; 5385 5386 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5387 if (hci_extended_advertising_supported()){ 5388 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 5389 btstack_linked_list_iterator_t it; 5390 btstack_linked_list_iterator_init(&it, &hci_stack->le_advertising_sets); 5391 // stop all periodic advertisements and check if an extended set is active 5392 while (btstack_linked_list_iterator_has_next(&it)){ 5393 le_advertising_set_t * advertising_set = (le_advertising_set_t*) btstack_linked_list_iterator_next(&it); 5394 if ((advertising_set->state & LE_ADVERTISEMENT_STATE_PERIODIC_ACTIVE) != 0) { 5395 advertising_set->state &= ~LE_ADVERTISEMENT_STATE_PERIODIC_ACTIVE; 5396 hci_send_cmd(&hci_le_set_periodic_advertising_enable, 0, advertising_set->advertising_handle); 5397 return; 5398 } 5399 if ((advertising_set->state & LE_ADVERTISEMENT_STATE_ACTIVE) != 0) { 5400 stop_advertismenets = true; 5401 advertising_set->state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 5402 } 5403 } 5404 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 5405 if (stop_advertismenets){ 5406 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 5407 hci_send_cmd(&hci_le_set_extended_advertising_enable, 0, 0, NULL, NULL, NULL); 5408 return; 5409 } 5410 } else 5411 #else /* ENABLE_LE_PERIPHERAL */ 5412 { 5413 if (stop_advertismenets) { 5414 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 5415 hci_send_cmd(&hci_le_set_advertise_enable, 0); 5416 return; 5417 } 5418 } 5419 #endif /* ENABLE_LE_EXTENDED_ADVERTISING*/ 5420 #endif /* ENABLE_LE_PERIPHERAL */ 5421 #endif /* ENABLE_BLE */ 5422 5423 /* fall through */ 5424 5425 case HCI_HALTING_LE_SCAN_STOP: 5426 hci_stack->substate = HCI_HALTING_LE_SCAN_STOP; 5427 if (!hci_can_send_command_packet_now()) return; 5428 5429 #ifdef ENABLE_BLE 5430 #ifdef ENABLE_LE_CENTRAL 5431 if (hci_stack->le_scanning_active){ 5432 hci_le_scan_stop(); 5433 hci_stack->substate = HCI_HALTING_DISCONNECT_ALL; 5434 return; 5435 } 5436 #endif 5437 #endif 5438 5439 /* fall through */ 5440 5441 case HCI_HALTING_DISCONNECT_ALL: 5442 hci_stack->substate = HCI_HALTING_DISCONNECT_ALL; 5443 if (!hci_can_send_command_packet_now()) return; 5444 5445 // close all open connections 5446 connection = (hci_connection_t *) hci_stack->connections; 5447 if (connection) { 5448 hci_con_handle_t con_handle = (uint16_t) connection->con_handle; 5449 5450 log_info("HCI_STATE_HALTING, connection %p, handle %u, state %u", connection, con_handle, connection->state); 5451 5452 // check state 5453 switch(connection->state) { 5454 case SENT_DISCONNECT: 5455 case RECEIVED_DISCONNECTION_COMPLETE: 5456 // wait until connection is gone 5457 return; 5458 default: 5459 break; 5460 } 5461 5462 // finally, send the disconnect command 5463 connection->state = SENT_DISCONNECT; 5464 hci_send_cmd(&hci_disconnect, con_handle, ERROR_CODE_REMOTE_USER_TERMINATED_CONNECTION); 5465 return; 5466 } 5467 5468 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 5469 // stop BIGs and BIG Syncs 5470 if (hci_stack->le_audio_bigs != NULL){ 5471 le_audio_big_t * big = (le_audio_big_t*) hci_stack->le_audio_bigs; 5472 if (big->state == LE_AUDIO_BIG_STATE_W4_TERMINATED) return; 5473 big->state = LE_AUDIO_BIG_STATE_W4_TERMINATED; 5474 hci_send_cmd(&hci_le_terminate_big, big->big_handle); 5475 return; 5476 } 5477 if (hci_stack->le_audio_big_syncs != NULL){ 5478 le_audio_big_sync_t * big_sync = (le_audio_big_sync_t*) hci_stack->le_audio_big_syncs; 5479 if (big_sync->state == LE_AUDIO_BIG_STATE_W4_TERMINATED) return; 5480 big_sync->state = LE_AUDIO_BIG_STATE_W4_TERMINATED; 5481 hci_send_cmd(&hci_le_big_terminate_sync, big_sync->big_handle); 5482 return; 5483 } 5484 #endif 5485 5486 btstack_run_loop_remove_timer(&hci_stack->timeout); 5487 5488 // no connections left, wait a bit to assert that btstack_cyrpto isn't waiting for an HCI event 5489 log_info("HCI_STATE_HALTING: wait 50 ms"); 5490 hci_stack->substate = HCI_HALTING_W4_CLOSE_TIMER; 5491 btstack_run_loop_set_timer(&hci_stack->timeout, 50); 5492 btstack_run_loop_set_timer_handler(&hci_stack->timeout, hci_halting_timeout_handler); 5493 btstack_run_loop_add_timer(&hci_stack->timeout); 5494 break; 5495 5496 case HCI_HALTING_W4_CLOSE_TIMER: 5497 // keep waiting 5498 break; 5499 5500 case HCI_HALTING_CLOSE: 5501 // close left over connections (that had not been properly closed before) 5502 hci_stack->substate = HCI_HALTING_CLOSE_DISCARDING_CONNECTIONS; 5503 hci_discard_connections(); 5504 5505 log_info("HCI_STATE_HALTING, calling off"); 5506 5507 // switch mode 5508 hci_power_control_off(); 5509 5510 log_info("HCI_STATE_HALTING, emitting state"); 5511 hci_emit_state(); 5512 log_info("HCI_STATE_HALTING, done"); 5513 break; 5514 5515 default: 5516 break; 5517 } 5518 }; 5519 5520 static void hci_falling_asleep_run(void){ 5521 hci_connection_t * connection; 5522 switch(hci_stack->substate) { 5523 case HCI_FALLING_ASLEEP_DISCONNECT: 5524 log_info("HCI_STATE_FALLING_ASLEEP"); 5525 // close all open connections 5526 connection = (hci_connection_t *) hci_stack->connections; 5527 if (connection){ 5528 5529 // send disconnect 5530 if (!hci_can_send_command_packet_now()) return; 5531 5532 log_info("HCI_STATE_FALLING_ASLEEP, connection %p, handle %u", connection, (uint16_t)connection->con_handle); 5533 hci_send_cmd(&hci_disconnect, connection->con_handle, ERROR_CODE_REMOTE_USER_TERMINATED_CONNECTION); 5534 5535 // send disconnected event right away - causes higher layer connections to get closed, too. 5536 hci_shutdown_connection(connection); 5537 return; 5538 } 5539 5540 if (hci_classic_supported()){ 5541 // disable page and inquiry scan 5542 if (!hci_can_send_command_packet_now()) return; 5543 5544 log_info("HCI_STATE_HALTING, disabling inq scans"); 5545 hci_send_cmd(&hci_write_scan_enable, hci_stack->connectable << 1); // drop inquiry scan but keep page scan 5546 5547 // continue in next sub state 5548 hci_stack->substate = HCI_FALLING_ASLEEP_W4_WRITE_SCAN_ENABLE; 5549 break; 5550 } 5551 5552 /* fall through */ 5553 5554 case HCI_FALLING_ASLEEP_COMPLETE: 5555 log_info("HCI_STATE_HALTING, calling sleep"); 5556 // switch mode 5557 hci_power_control_sleep(); // changes hci_stack->state to SLEEP 5558 hci_emit_state(); 5559 break; 5560 5561 default: 5562 break; 5563 } 5564 } 5565 5566 #ifdef ENABLE_CLASSIC 5567 5568 static void hci_update_scan_enable(void){ 5569 // 2 = page scan, 1 = inq scan 5570 hci_stack->new_scan_enable_value = (hci_stack->connectable << 1) | hci_stack->discoverable; 5571 hci_stack->gap_tasks_classic |= GAP_TASK_WRITE_SCAN_ENABLE; 5572 hci_run(); 5573 } 5574 5575 void gap_discoverable_control(uint8_t enable){ 5576 if (enable) enable = 1; // normalize argument 5577 5578 if (hci_stack->discoverable == enable){ 5579 hci_emit_scan_mode_changed(hci_stack->discoverable, hci_stack->connectable); 5580 return; 5581 } 5582 5583 hci_stack->discoverable = enable; 5584 hci_update_scan_enable(); 5585 } 5586 5587 void gap_connectable_control(uint8_t enable){ 5588 if (enable) enable = 1; // normalize argument 5589 5590 // don't emit event 5591 if (hci_stack->connectable == enable) return; 5592 5593 hci_stack->connectable = enable; 5594 hci_update_scan_enable(); 5595 } 5596 #endif 5597 5598 void gap_local_bd_addr(bd_addr_t address_buffer){ 5599 (void)memcpy(address_buffer, hci_stack->local_bd_addr, 6); 5600 } 5601 5602 #ifdef ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL 5603 static void hci_host_num_completed_packets(void){ 5604 5605 // create packet manually as arrays are not supported and num_commands should not get reduced 5606 hci_reserve_packet_buffer(); 5607 uint8_t * packet = hci_get_outgoing_packet_buffer(); 5608 5609 uint16_t size = 0; 5610 uint16_t num_handles = 0; 5611 packet[size++] = 0x35; 5612 packet[size++] = 0x0c; 5613 size++; // skip param len 5614 size++; // skip num handles 5615 5616 // add { handle, packets } entries 5617 btstack_linked_item_t * it; 5618 for (it = (btstack_linked_item_t *) hci_stack->connections; it ; it = it->next){ 5619 hci_connection_t * connection = (hci_connection_t *) it; 5620 if (connection->num_packets_completed){ 5621 little_endian_store_16(packet, size, connection->con_handle); 5622 size += 2; 5623 little_endian_store_16(packet, size, connection->num_packets_completed); 5624 size += 2; 5625 // 5626 num_handles++; 5627 connection->num_packets_completed = 0; 5628 } 5629 } 5630 5631 packet[2] = size - 3; 5632 packet[3] = num_handles; 5633 5634 hci_stack->host_completed_packets = 0; 5635 5636 hci_dump_packet(HCI_COMMAND_DATA_PACKET, 0, packet, size); 5637 hci_stack->hci_transport->send_packet(HCI_COMMAND_DATA_PACKET, packet, size); 5638 5639 // release packet buffer for synchronous transport implementations 5640 if (hci_transport_synchronous()){ 5641 hci_release_packet_buffer(); 5642 hci_emit_transport_packet_sent(); 5643 } 5644 } 5645 #endif 5646 5647 static void hci_halting_timeout_handler(btstack_timer_source_t * ds){ 5648 UNUSED(ds); 5649 hci_stack->substate = HCI_HALTING_CLOSE; 5650 hci_halting_run(); 5651 } 5652 5653 static bool hci_run_acl_fragments(void){ 5654 if (hci_stack->acl_fragmentation_total_size > 0u) { 5655 hci_con_handle_t con_handle = READ_ACL_CONNECTION_HANDLE(hci_stack->hci_packet_buffer); 5656 hci_connection_t *connection = hci_connection_for_handle(con_handle); 5657 if (connection) { 5658 if (hci_can_send_prepared_acl_packet_now(con_handle)){ 5659 hci_send_acl_packet_fragments(connection); 5660 return true; 5661 } 5662 } else { 5663 // connection gone -> discard further fragments 5664 log_info("hci_run: fragmented ACL packet no connection -> discard fragment"); 5665 hci_stack->acl_fragmentation_total_size = 0; 5666 hci_stack->acl_fragmentation_pos = 0; 5667 } 5668 } 5669 return false; 5670 } 5671 5672 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 5673 static bool hci_run_iso_fragments(void){ 5674 if (hci_stack->iso_fragmentation_total_size > 0u) { 5675 // TODO: flow control 5676 if (hci_transport_can_send_prepared_packet_now(HCI_ISO_DATA_PACKET)){ 5677 hci_send_iso_packet_fragments(); 5678 return true; 5679 } 5680 } 5681 return false; 5682 } 5683 #endif 5684 5685 #ifdef ENABLE_CLASSIC 5686 5687 #ifdef ENABLE_HCI_SERIALIZED_CONTROLLER_OPERATIONS 5688 static bool hci_classic_operation_active(void) { 5689 if (hci_stack->inquiry_state >= GAP_INQUIRY_STATE_W4_ACTIVE){ 5690 return true; 5691 } 5692 if (hci_stack->remote_name_state == GAP_REMOTE_NAME_STATE_W4_COMPLETE){ 5693 return true; 5694 } 5695 btstack_linked_item_t * it; 5696 for (it = (btstack_linked_item_t *) hci_stack->connections; it != NULL; it = it->next) { 5697 hci_connection_t *connection = (hci_connection_t *) it; 5698 switch (connection->state) { 5699 case SENT_CREATE_CONNECTION: 5700 case SENT_CANCEL_CONNECTION: 5701 case SENT_DISCONNECT: 5702 return true; 5703 default: 5704 break; 5705 } 5706 } 5707 return false; 5708 } 5709 #endif 5710 5711 static bool hci_run_general_gap_classic(void){ 5712 5713 // assert stack is working and classic is active 5714 if (hci_classic_supported() == false) return false; 5715 if (hci_stack->state != HCI_STATE_WORKING) return false; 5716 5717 // decline incoming connections 5718 if (hci_stack->decline_reason){ 5719 uint8_t reason = hci_stack->decline_reason; 5720 hci_stack->decline_reason = 0; 5721 hci_send_cmd(&hci_reject_connection_request, hci_stack->decline_addr, reason); 5722 return true; 5723 } 5724 5725 if (hci_stack->gap_tasks_classic != 0){ 5726 hci_run_gap_tasks_classic(); 5727 return true; 5728 } 5729 5730 // start/stop inquiry 5731 if ((hci_stack->inquiry_state >= GAP_INQUIRY_DURATION_MIN) && (hci_stack->inquiry_state <= GAP_INQUIRY_DURATION_MAX)){ 5732 #ifdef ENABLE_HCI_SERIALIZED_CONTROLLER_OPERATIONS 5733 if (hci_classic_operation_active() == false) 5734 #endif 5735 { 5736 uint8_t duration = hci_stack->inquiry_state; 5737 hci_stack->inquiry_state = GAP_INQUIRY_STATE_W4_ACTIVE; 5738 if (hci_stack->inquiry_max_period_length != 0){ 5739 hci_send_cmd(&hci_periodic_inquiry_mode, hci_stack->inquiry_max_period_length, hci_stack->inquiry_min_period_length, hci_stack->inquiry_lap, duration, 0); 5740 } else { 5741 hci_send_cmd(&hci_inquiry, hci_stack->inquiry_lap, duration, 0); 5742 } 5743 return true; 5744 } 5745 } 5746 if (hci_stack->inquiry_state == GAP_INQUIRY_STATE_W2_CANCEL){ 5747 hci_stack->inquiry_state = GAP_INQUIRY_STATE_W4_CANCELLED; 5748 hci_send_cmd(&hci_inquiry_cancel); 5749 return true; 5750 } 5751 5752 if (hci_stack->inquiry_state == GAP_INQUIRY_STATE_W2_EXIT_PERIODIC){ 5753 hci_stack->inquiry_state = GAP_INQUIRY_STATE_W4_CANCELLED; 5754 hci_send_cmd(&hci_exit_periodic_inquiry_mode); 5755 return true; 5756 } 5757 5758 // remote name request 5759 if (hci_stack->remote_name_state == GAP_REMOTE_NAME_STATE_W2_SEND){ 5760 #ifdef ENABLE_HCI_SERIALIZED_CONTROLLER_OPERATIONS 5761 if (hci_classic_operation_active() == false) 5762 #endif 5763 { 5764 hci_stack->remote_name_state = GAP_REMOTE_NAME_STATE_W4_COMPLETE; 5765 hci_send_cmd(&hci_remote_name_request, hci_stack->remote_name_addr, 5766 hci_stack->remote_name_page_scan_repetition_mode, 0, hci_stack->remote_name_clock_offset); 5767 return true; 5768 } 5769 } 5770 #ifdef ENABLE_CLASSIC_PAIRING_OOB 5771 // Local OOB data 5772 if (hci_stack->classic_read_local_oob_data){ 5773 hci_stack->classic_read_local_oob_data = false; 5774 if (hci_command_supported(SUPPORTED_HCI_COMMAND_READ_LOCAL_OOB_EXTENDED_DATA_COMMAND)){ 5775 hci_send_cmd(&hci_read_local_extended_oob_data); 5776 } else { 5777 hci_send_cmd(&hci_read_local_oob_data); 5778 } 5779 } 5780 #endif 5781 // pairing 5782 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE){ 5783 uint8_t state = hci_stack->gap_pairing_state; 5784 uint8_t pin_code[16]; 5785 switch (state){ 5786 case GAP_PAIRING_STATE_SEND_PIN: 5787 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_IDLE; 5788 memset(pin_code, 0, 16); 5789 memcpy(pin_code, hci_stack->gap_pairing_input.gap_pairing_pin, hci_stack->gap_pairing_pin_len); 5790 hci_send_cmd(&hci_pin_code_request_reply, hci_stack->gap_pairing_addr, hci_stack->gap_pairing_pin_len, pin_code); 5791 break; 5792 case GAP_PAIRING_STATE_SEND_PIN_NEGATIVE: 5793 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_WAIT_FOR_COMMAND_COMPLETE; 5794 hci_send_cmd(&hci_pin_code_request_negative_reply, hci_stack->gap_pairing_addr); 5795 break; 5796 case GAP_PAIRING_STATE_SEND_PASSKEY: 5797 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_IDLE; 5798 hci_send_cmd(&hci_user_passkey_request_reply, hci_stack->gap_pairing_addr, hci_stack->gap_pairing_input.gap_pairing_passkey); 5799 break; 5800 case GAP_PAIRING_STATE_SEND_PASSKEY_NEGATIVE: 5801 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_WAIT_FOR_COMMAND_COMPLETE; 5802 hci_send_cmd(&hci_user_passkey_request_negative_reply, hci_stack->gap_pairing_addr); 5803 break; 5804 case GAP_PAIRING_STATE_SEND_CONFIRMATION: 5805 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_IDLE; 5806 hci_send_cmd(&hci_user_confirmation_request_reply, hci_stack->gap_pairing_addr); 5807 break; 5808 case GAP_PAIRING_STATE_SEND_CONFIRMATION_NEGATIVE: 5809 hci_stack->gap_pairing_state = GAP_PAIRING_STATE_WAIT_FOR_COMMAND_COMPLETE; 5810 hci_send_cmd(&hci_user_confirmation_request_negative_reply, hci_stack->gap_pairing_addr); 5811 break; 5812 default: 5813 break; 5814 } 5815 return true; 5816 } 5817 return false; 5818 } 5819 #endif 5820 5821 #ifdef ENABLE_BLE 5822 5823 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5824 static uint8_t hci_le_num_phys(uint8_t phys){ 5825 const uint8_t num_bits_set[] = { 0, 1, 1, 2, 1, 2, 2, 3 }; 5826 btstack_assert(phys); 5827 return num_bits_set[phys]; 5828 } 5829 #endif 5830 5831 #ifdef ENABLE_LE_CENTRAL 5832 static void hci_le_scan_stop(void){ 5833 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5834 if (hci_extended_advertising_supported()) { 5835 hci_send_cmd(&hci_le_set_extended_scan_enable, 0, 0, 0, 0); 5836 } else 5837 #endif 5838 { 5839 hci_send_cmd(&hci_le_set_scan_enable, 0, 0); 5840 } 5841 } 5842 5843 static void 5844 hci_send_le_create_connection(uint8_t initiator_filter_policy, bd_addr_type_t address_type, uint8_t *address) { 5845 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5846 if (hci_extended_advertising_supported()) { 5847 // prepare arrays for all phys (LE Coded, LE 1M, LE 2M PHY) 5848 uint16_t le_connection_scan_interval[3]; 5849 uint16_t le_connection_scan_window[3]; 5850 uint16_t le_connection_interval_min[3]; 5851 uint16_t le_connection_interval_max[3]; 5852 uint16_t le_connection_latency[3]; 5853 uint16_t le_supervision_timeout[3]; 5854 uint16_t le_minimum_ce_length[3]; 5855 uint16_t le_maximum_ce_length[3]; 5856 5857 uint8_t i; 5858 uint8_t num_phys = hci_le_num_phys(hci_stack->le_connection_phys); 5859 for (i=0;i<num_phys;i++){ 5860 le_connection_scan_interval[i] = hci_stack->le_connection_scan_interval; 5861 le_connection_scan_window[i] = hci_stack->le_connection_scan_window; 5862 le_connection_interval_min[i] = hci_stack->le_connection_interval_min; 5863 le_connection_interval_max[i] = hci_stack->le_connection_interval_max; 5864 le_connection_latency[i] = hci_stack->le_connection_latency; 5865 le_supervision_timeout[i] = hci_stack->le_supervision_timeout; 5866 le_minimum_ce_length[i] = hci_stack->le_minimum_ce_length; 5867 le_maximum_ce_length[i] = hci_stack->le_maximum_ce_length; 5868 } 5869 hci_send_cmd(&hci_le_extended_create_connection, 5870 initiator_filter_policy, 5871 hci_stack->le_connection_own_addr_type, // our addr type: 5872 address_type, // peer address type 5873 address, // peer bd addr 5874 hci_stack->le_connection_phys, // initiating PHY 5875 le_connection_scan_interval, // conn scan interval 5876 le_connection_scan_window, // conn scan windows 5877 le_connection_interval_min, // conn interval min 5878 le_connection_interval_max, // conn interval max 5879 le_connection_latency, // conn latency 5880 le_supervision_timeout, // conn latency 5881 le_minimum_ce_length, // min ce length 5882 le_maximum_ce_length // max ce length 5883 ); 5884 } else 5885 #endif 5886 { 5887 hci_send_cmd(&hci_le_create_connection, 5888 hci_stack->le_connection_scan_interval, // conn scan interval 5889 hci_stack->le_connection_scan_window, // conn scan windows 5890 initiator_filter_policy, // don't use whitelist 5891 address_type, // peer address type 5892 address, // peer bd addr 5893 hci_stack->le_connection_own_addr_type, // our addr type: 5894 hci_stack->le_connection_interval_min, // conn interval min 5895 hci_stack->le_connection_interval_max, // conn interval max 5896 hci_stack->le_connection_latency, // conn latency 5897 hci_stack->le_supervision_timeout, // conn latency 5898 hci_stack->le_minimum_ce_length, // min ce length 5899 hci_stack->le_maximum_ce_length // max ce length 5900 ); 5901 } 5902 } 5903 #endif 5904 5905 #ifdef ENABLE_LE_PERIPHERAL 5906 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5907 uint8_t hci_le_extended_advertising_operation_for_chunk(uint16_t pos, uint16_t len){ 5908 uint8_t operation = 0; 5909 if (pos == 0){ 5910 // first fragment or complete data 5911 operation |= 1; 5912 } 5913 if (pos + LE_EXTENDED_ADVERTISING_MAX_CHUNK_LEN >= len){ 5914 // last fragment or complete data 5915 operation |= 2; 5916 } 5917 return operation; 5918 } 5919 #endif 5920 #endif 5921 5922 static bool hci_run_general_gap_le(void){ 5923 5924 btstack_linked_list_iterator_t lit; 5925 5926 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5927 if (hci_stack->le_resolvable_private_address_update_s > 0){ 5928 uint16_t update_s = hci_stack->le_resolvable_private_address_update_s; 5929 hci_stack->le_resolvable_private_address_update_s = 0; 5930 hci_send_cmd(&hci_le_set_resolvable_private_address_timeout, update_s); 5931 return true; 5932 } 5933 #endif 5934 5935 // Phase 1: collect what to stop 5936 5937 #ifdef ENABLE_LE_CENTRAL 5938 bool scanning_stop = false; 5939 bool connecting_stop = false; 5940 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5941 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 5942 bool periodic_sync_stop = false; 5943 #endif 5944 #endif 5945 #endif 5946 5947 #ifdef ENABLE_LE_PERIPHERAL 5948 bool advertising_stop = false; 5949 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5950 le_advertising_set_t * advertising_stop_set = NULL; 5951 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 5952 bool periodic_advertising_stop = false; 5953 #endif 5954 #endif 5955 #endif 5956 5957 // check if own address changes 5958 uint8_t address_change_mask = LE_ADVERTISEMENT_TASKS_SET_ADDRESS | LE_ADVERTISEMENT_TASKS_SET_ADDRESS_SET_0; 5959 bool random_address_change = (hci_stack->le_advertisements_todo & address_change_mask) != 0; 5960 5961 // check if whitelist needs modification 5962 bool whitelist_modification_pending = false; 5963 btstack_linked_list_iterator_init(&lit, &hci_stack->le_whitelist); 5964 while (btstack_linked_list_iterator_has_next(&lit)){ 5965 whitelist_entry_t * entry = (whitelist_entry_t*) btstack_linked_list_iterator_next(&lit); 5966 if (entry->state & (LE_WHITELIST_REMOVE_FROM_CONTROLLER | LE_WHITELIST_ADD_TO_CONTROLLER)){ 5967 whitelist_modification_pending = true; 5968 break; 5969 } 5970 } 5971 5972 // check if resolving list needs modification 5973 bool resolving_list_modification_pending = false; 5974 #ifdef ENABLE_LE_PRIVACY_ADDRESS_RESOLUTION 5975 bool resolving_list_supported = hci_command_supported(SUPPORTED_HCI_COMMAND_LE_SET_ADDRESS_RESOLUTION_ENABLE); 5976 if (resolving_list_supported && hci_stack->le_resolving_list_state != LE_RESOLVING_LIST_DONE){ 5977 resolving_list_modification_pending = true; 5978 } 5979 #endif 5980 5981 #ifdef ENABLE_LE_CENTRAL 5982 5983 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 5984 // check if periodic advertiser list needs modification 5985 bool periodic_list_modification_pending = false; 5986 btstack_linked_list_iterator_init(&lit, &hci_stack->le_periodic_advertiser_list); 5987 while (btstack_linked_list_iterator_has_next(&lit)){ 5988 periodic_advertiser_list_entry_t * entry = (periodic_advertiser_list_entry_t*) btstack_linked_list_iterator_next(&lit); 5989 if (entry->state & (LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER | LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER)){ 5990 periodic_list_modification_pending = true; 5991 break; 5992 } 5993 } 5994 #endif 5995 5996 // scanning control 5997 if (hci_stack->le_scanning_active) { 5998 // stop if: 5999 // - parameter change required 6000 // - it's disabled 6001 // - whitelist change required but used for scanning 6002 // - resolving list modified 6003 // - own address changes 6004 bool scanning_uses_whitelist = (hci_stack->le_scan_filter_policy & 1) == 1; 6005 if ((hci_stack->le_scanning_param_update) || 6006 !hci_stack->le_scanning_enabled || 6007 (scanning_uses_whitelist && whitelist_modification_pending) || 6008 resolving_list_modification_pending || 6009 random_address_change){ 6010 6011 scanning_stop = true; 6012 } 6013 } 6014 6015 // connecting control 6016 bool connecting_with_whitelist; 6017 switch (hci_stack->le_connecting_state){ 6018 case LE_CONNECTING_DIRECT: 6019 case LE_CONNECTING_WHITELIST: 6020 // stop connecting if: 6021 // - connecting uses white and whitelist modification pending 6022 // - if it got disabled 6023 // - resolving list modified 6024 // - own address changes 6025 connecting_with_whitelist = hci_stack->le_connecting_state == LE_CONNECTING_WHITELIST; 6026 if ((connecting_with_whitelist && whitelist_modification_pending) || 6027 (hci_stack->le_connecting_request == LE_CONNECTING_IDLE) || 6028 resolving_list_modification_pending || 6029 random_address_change) { 6030 6031 connecting_stop = true; 6032 } 6033 break; 6034 default: 6035 break; 6036 } 6037 6038 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6039 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6040 // periodic sync control 6041 bool sync_with_advertiser_list; 6042 switch(hci_stack->le_periodic_sync_state){ 6043 case LE_CONNECTING_DIRECT: 6044 case LE_CONNECTING_WHITELIST: 6045 // stop sync if: 6046 // - sync with advertiser list and advertiser list modification pending 6047 // - if it got disabled 6048 sync_with_advertiser_list = hci_stack->le_periodic_sync_state == LE_CONNECTING_WHITELIST; 6049 if ((sync_with_advertiser_list && periodic_list_modification_pending) || 6050 (hci_stack->le_periodic_sync_request == LE_CONNECTING_IDLE)){ 6051 periodic_sync_stop = true; 6052 } 6053 break; 6054 default: 6055 break; 6056 } 6057 #endif 6058 #endif 6059 6060 #endif /* ENABLE_LE_CENTRAL */ 6061 6062 #ifdef ENABLE_LE_PERIPHERAL 6063 // le advertisement control 6064 if ((hci_stack->le_advertisements_state & LE_ADVERTISEMENT_STATE_ACTIVE) != 0){ 6065 // stop if: 6066 // - parameter change required 6067 // - random address used in advertising and changes 6068 // - it's disabled 6069 // - whitelist change required but used for advertisement filter policy 6070 // - resolving list modified 6071 // - own address changes 6072 bool advertising_uses_whitelist = hci_stack->le_advertisements_filter_policy != 0; 6073 bool advertising_uses_random_address = hci_stack->le_own_addr_type != BD_ADDR_TYPE_LE_PUBLIC; 6074 bool advertising_change = (hci_stack->le_advertisements_todo & LE_ADVERTISEMENT_TASKS_SET_PARAMS) != 0; 6075 if (advertising_change || 6076 (advertising_uses_random_address && random_address_change) || 6077 (hci_stack->le_advertisements_enabled_for_current_roles == 0) || 6078 (advertising_uses_whitelist && whitelist_modification_pending) || 6079 resolving_list_modification_pending || 6080 random_address_change) { 6081 6082 advertising_stop = true; 6083 } 6084 } 6085 6086 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6087 if (hci_extended_advertising_supported() && (advertising_stop == false)){ 6088 btstack_linked_list_iterator_t it; 6089 btstack_linked_list_iterator_init(&it, &hci_stack->le_advertising_sets); 6090 while (btstack_linked_list_iterator_has_next(&it)){ 6091 le_advertising_set_t * advertising_set = (le_advertising_set_t*) btstack_linked_list_iterator_next(&it); 6092 if ((advertising_set->state & LE_ADVERTISEMENT_STATE_ACTIVE) != 0) { 6093 // stop if: 6094 // - parameter change required 6095 // - random address used in connectable advertising and changes 6096 // - it's disabled 6097 // - whitelist change required but used for advertisement filter policy 6098 // - resolving list modified 6099 // - own address changes 6100 // - advertisement set will be removed 6101 bool advertising_uses_whitelist = advertising_set->extended_params.advertising_filter_policy != 0; 6102 bool advertising_connectable = (advertising_set->extended_params.advertising_event_properties & 1) != 0; 6103 bool advertising_uses_random_address = 6104 (advertising_set->extended_params.own_address_type != BD_ADDR_TYPE_LE_PUBLIC) && 6105 advertising_connectable; 6106 bool advertising_parameter_change = (advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_PARAMS) != 0; 6107 bool advertising_enabled = (advertising_set->state & LE_ADVERTISEMENT_STATE_ENABLED) != 0; 6108 bool advertising_set_random_address_change = 6109 (advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_ADDRESS) != 0; 6110 bool advertising_set_will_be_removed = 6111 (advertising_set->state & LE_ADVERTISEMENT_TASKS_REMOVE_SET) != 0; 6112 if (advertising_parameter_change || 6113 (advertising_uses_random_address && advertising_set_random_address_change) || 6114 (advertising_enabled == false) || 6115 (advertising_uses_whitelist && whitelist_modification_pending) || 6116 resolving_list_modification_pending || 6117 advertising_set_will_be_removed) { 6118 6119 advertising_stop = true; 6120 advertising_stop_set = advertising_set; 6121 break; 6122 } 6123 } 6124 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6125 if ((advertising_set->state & LE_ADVERTISEMENT_STATE_PERIODIC_ACTIVE) != 0) { 6126 // stop if: 6127 // - it's disabled 6128 // - parameter change required 6129 bool periodic_enabled = (advertising_set->state & LE_ADVERTISEMENT_STATE_PERIODIC_ENABLED) != 0; 6130 bool periodic_parameter_change = (advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_PERIODIC_PARAMS) != 0; 6131 if ((periodic_enabled == false) || periodic_parameter_change){ 6132 periodic_advertising_stop = true; 6133 advertising_stop_set = advertising_set; 6134 } 6135 } 6136 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 6137 } 6138 } 6139 #endif 6140 6141 #endif 6142 6143 6144 // Phase 2: stop everything that should be off during modifications 6145 6146 6147 // 2.1 Outgoing connection 6148 #ifdef ENABLE_LE_CENTRAL 6149 if (connecting_stop){ 6150 hci_send_cmd(&hci_le_create_connection_cancel); 6151 return true; 6152 } 6153 #endif 6154 6155 // 2.2 Scanning 6156 #ifdef ENABLE_LE_CENTRAL 6157 if (scanning_stop){ 6158 hci_stack->le_scanning_active = false; 6159 hci_le_scan_stop(); 6160 return true; 6161 } 6162 6163 // 2.3 Periodic Sync 6164 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6165 if (hci_stack->le_periodic_terminate_sync_handle != HCI_CON_HANDLE_INVALID){ 6166 uint16_t sync_handle = hci_stack->le_periodic_terminate_sync_handle; 6167 hci_stack->le_periodic_terminate_sync_handle = HCI_CON_HANDLE_INVALID; 6168 hci_send_cmd(&hci_le_periodic_advertising_terminate_sync, sync_handle); 6169 return true; 6170 } 6171 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6172 if (periodic_sync_stop){ 6173 hci_stack->le_periodic_sync_state = LE_CONNECTING_CANCEL; 6174 hci_send_cmd(&hci_le_periodic_advertising_create_sync_cancel); 6175 return true; 6176 } 6177 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 6178 #endif /* ENABLE_LE_EXTENDED_ADVERTISING */ 6179 #endif /* ENABLE_LE_CENTRAL */ 6180 6181 // 2.4 Advertising: legacy, extended, periodic 6182 #ifdef ENABLE_LE_PERIPHERAL 6183 if (advertising_stop){ 6184 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6185 if (hci_extended_advertising_supported()) { 6186 uint8_t advertising_stop_handle; 6187 if (advertising_stop_set != NULL){ 6188 advertising_stop_handle = advertising_stop_set->advertising_handle; 6189 advertising_stop_set->state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 6190 } else { 6191 advertising_stop_handle = 0; 6192 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 6193 } 6194 const uint8_t advertising_handles[] = { advertising_stop_handle }; 6195 const uint16_t durations[] = { 0 }; 6196 const uint16_t max_events[] = { 0 }; 6197 hci_send_cmd(&hci_le_set_extended_advertising_enable, 0, 1, advertising_handles, durations, max_events); 6198 } else 6199 #endif 6200 { 6201 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ACTIVE; 6202 hci_send_cmd(&hci_le_set_advertise_enable, 0); 6203 } 6204 return true; 6205 } 6206 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6207 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6208 if (periodic_advertising_stop){ 6209 advertising_stop_set->state &= ~LE_ADVERTISEMENT_STATE_PERIODIC_ACTIVE; 6210 hci_send_cmd(&hci_le_set_periodic_advertising_enable, 0, advertising_stop_set->advertising_handle); 6211 return true; 6212 } 6213 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 6214 #endif /* ENABLE_LE_EXTENDED_ADVERTISING */ 6215 #endif /* ENABLE_LE_PERIPHERAL */ 6216 6217 6218 // Phase 3: modify 6219 6220 if (hci_stack->le_advertisements_todo & LE_ADVERTISEMENT_TASKS_SET_ADDRESS){ 6221 hci_stack->le_advertisements_todo &= ~LE_ADVERTISEMENT_TASKS_SET_ADDRESS; 6222 hci_send_cmd(&hci_le_set_random_address, hci_stack->le_random_address); 6223 #ifdef ENABLE_LE_SET_ADV_PARAMS_ON_RANDOM_ADDRESS_CHANGE 6224 // workaround: on some Controllers, address in advertisements is updated only after next dv params set 6225 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_PARAMS; 6226 #endif 6227 return true; 6228 } 6229 6230 #ifdef ENABLE_LE_CENTRAL 6231 if (hci_stack->le_scanning_param_update){ 6232 hci_stack->le_scanning_param_update = false; 6233 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6234 if (hci_extended_advertising_supported()){ 6235 // prepare arrays for all phys (LE Coded and LE 1M PHY) 6236 uint8_t scan_types[2]; 6237 uint16_t scan_intervals[2]; 6238 uint16_t scan_windows[2]; 6239 6240 uint8_t i; 6241 uint8_t num_phys = hci_le_num_phys(hci_stack->le_scan_phys); 6242 for (i=0;i<num_phys;i++){ 6243 scan_types[i] = hci_stack->le_scan_type; 6244 scan_intervals[i] = hci_stack->le_scan_interval; 6245 scan_windows[i] = hci_stack->le_scan_window; 6246 } 6247 hci_send_cmd(&hci_le_set_extended_scan_parameters, hci_stack->le_own_addr_type, 6248 hci_stack->le_scan_filter_policy, hci_stack->le_scan_phys, scan_types, scan_intervals, scan_windows); 6249 } else 6250 #endif 6251 { 6252 hci_send_cmd(&hci_le_set_scan_parameters, hci_stack->le_scan_type, hci_stack->le_scan_interval, hci_stack->le_scan_window, 6253 hci_stack->le_own_addr_type, hci_stack->le_scan_filter_policy); 6254 } 6255 return true; 6256 } 6257 #endif 6258 6259 #ifdef ENABLE_LE_PERIPHERAL 6260 if (hci_stack->le_advertisements_todo & LE_ADVERTISEMENT_TASKS_SET_PARAMS){ 6261 hci_stack->le_advertisements_todo &= ~LE_ADVERTISEMENT_TASKS_SET_PARAMS; 6262 hci_stack->le_advertisements_own_addr_type = hci_stack->le_own_addr_type; 6263 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6264 if (hci_extended_advertising_supported()){ 6265 // map advertisment type to advertising event properties 6266 uint16_t adv_event_properties = 0; 6267 const uint16_t mapping[] = { 0b00010011, 0b00010101, 0b00011101, 0b00010010, 0b00010000}; 6268 if (hci_stack->le_advertisements_type < (sizeof(mapping)/sizeof(uint16_t))){ 6269 adv_event_properties = mapping[hci_stack->le_advertisements_type]; 6270 } 6271 hci_stack->le_advertising_set_in_current_command = 0; 6272 hci_send_cmd(&hci_le_set_extended_advertising_parameters, 6273 0, 6274 adv_event_properties, 6275 hci_stack->le_advertisements_interval_min, 6276 hci_stack->le_advertisements_interval_max, 6277 hci_stack->le_advertisements_channel_map, 6278 hci_stack->le_advertisements_own_addr_type, 6279 hci_stack->le_advertisements_direct_address_type, 6280 hci_stack->le_advertisements_direct_address, 6281 hci_stack->le_advertisements_filter_policy, 6282 0x7f, // tx power: no preference 6283 0x01, // primary adv phy: LE 1M 6284 0, // secondary adv max skip 6285 0x01, // secondary adv phy 6286 0, // adv sid 6287 0 // scan request notification 6288 ); 6289 } else 6290 #endif 6291 { 6292 hci_send_cmd(&hci_le_set_advertising_parameters, 6293 hci_stack->le_advertisements_interval_min, 6294 hci_stack->le_advertisements_interval_max, 6295 hci_stack->le_advertisements_type, 6296 hci_stack->le_advertisements_own_addr_type, 6297 hci_stack->le_advertisements_direct_address_type, 6298 hci_stack->le_advertisements_direct_address, 6299 hci_stack->le_advertisements_channel_map, 6300 hci_stack->le_advertisements_filter_policy); 6301 } 6302 return true; 6303 } 6304 6305 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6306 // assumption: only set if extended advertising is supported 6307 if ((hci_stack->le_advertisements_todo & LE_ADVERTISEMENT_TASKS_SET_ADDRESS_SET_0) != 0){ 6308 hci_stack->le_advertisements_todo &= ~LE_ADVERTISEMENT_TASKS_SET_ADDRESS_SET_0; 6309 hci_send_cmd(&hci_le_set_advertising_set_random_address, 0, hci_stack->le_random_address); 6310 return true; 6311 } 6312 #endif 6313 6314 if (hci_stack->le_advertisements_todo & LE_ADVERTISEMENT_TASKS_SET_ADV_DATA){ 6315 hci_stack->le_advertisements_todo &= ~LE_ADVERTISEMENT_TASKS_SET_ADV_DATA; 6316 uint8_t adv_data_clean[31]; 6317 memset(adv_data_clean, 0, sizeof(adv_data_clean)); 6318 (void)memcpy(adv_data_clean, hci_stack->le_advertisements_data, 6319 hci_stack->le_advertisements_data_len); 6320 btstack_replace_bd_addr_placeholder(adv_data_clean, hci_stack->le_advertisements_data_len, hci_stack->local_bd_addr); 6321 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6322 if (hci_extended_advertising_supported()){ 6323 hci_stack->le_advertising_set_in_current_command = 0; 6324 hci_send_cmd(&hci_le_set_extended_advertising_data, 0, 0x03, 0x01, hci_stack->le_advertisements_data_len, adv_data_clean); 6325 } else 6326 #endif 6327 { 6328 hci_send_cmd(&hci_le_set_advertising_data, hci_stack->le_advertisements_data_len, adv_data_clean); 6329 } 6330 return true; 6331 } 6332 6333 if (hci_stack->le_advertisements_todo & LE_ADVERTISEMENT_TASKS_SET_SCAN_DATA){ 6334 hci_stack->le_advertisements_todo &= ~LE_ADVERTISEMENT_TASKS_SET_SCAN_DATA; 6335 uint8_t scan_data_clean[31]; 6336 memset(scan_data_clean, 0, sizeof(scan_data_clean)); 6337 (void)memcpy(scan_data_clean, hci_stack->le_scan_response_data, 6338 hci_stack->le_scan_response_data_len); 6339 btstack_replace_bd_addr_placeholder(scan_data_clean, hci_stack->le_scan_response_data_len, hci_stack->local_bd_addr); 6340 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6341 if (hci_extended_advertising_supported()){ 6342 hci_stack->le_advertising_set_in_current_command = 0; 6343 hci_send_cmd(&hci_le_set_extended_scan_response_data, 0, 0x03, 0x01, hci_stack->le_scan_response_data_len, scan_data_clean); 6344 } else 6345 #endif 6346 { 6347 hci_send_cmd(&hci_le_set_scan_response_data, hci_stack->le_scan_response_data_len, scan_data_clean); 6348 } 6349 return true; 6350 } 6351 6352 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6353 if (hci_extended_advertising_supported()) { 6354 btstack_linked_list_iterator_t it; 6355 btstack_linked_list_iterator_init(&it, &hci_stack->le_advertising_sets); 6356 while (btstack_linked_list_iterator_has_next(&it)){ 6357 le_advertising_set_t * advertising_set = (le_advertising_set_t*) btstack_linked_list_iterator_next(&it); 6358 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_REMOVE_SET) != 0) { 6359 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_REMOVE_SET; 6360 hci_stack->le_advertising_set_in_current_command = advertising_set->advertising_handle; 6361 hci_send_cmd(&hci_le_remove_advertising_set, advertising_set->advertising_handle); 6362 return true; 6363 } 6364 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_PARAMS) != 0){ 6365 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_SET_PARAMS; 6366 hci_stack->le_advertising_set_in_current_command = advertising_set->advertising_handle; 6367 hci_send_cmd(&hci_le_set_extended_advertising_parameters, 6368 advertising_set->advertising_handle, 6369 advertising_set->extended_params.advertising_event_properties, 6370 advertising_set->extended_params.primary_advertising_interval_min, 6371 advertising_set->extended_params.primary_advertising_interval_max, 6372 advertising_set->extended_params.primary_advertising_channel_map, 6373 advertising_set->extended_params.own_address_type, 6374 advertising_set->extended_params.peer_address_type, 6375 advertising_set->extended_params.peer_address, 6376 advertising_set->extended_params.advertising_filter_policy, 6377 advertising_set->extended_params.advertising_tx_power, 6378 advertising_set->extended_params.primary_advertising_phy, 6379 advertising_set->extended_params.secondary_advertising_max_skip, 6380 advertising_set->extended_params.secondary_advertising_phy, 6381 advertising_set->extended_params.advertising_sid, 6382 advertising_set->extended_params.scan_request_notification_enable 6383 ); 6384 return true; 6385 } 6386 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_ADDRESS) != 0){ 6387 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_SET_ADDRESS; 6388 hci_send_cmd(&hci_le_set_advertising_set_random_address, advertising_set->advertising_handle, advertising_set->random_address); 6389 return true; 6390 } 6391 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_ADV_DATA) != 0) { 6392 uint16_t pos = advertising_set->adv_data_pos; 6393 uint8_t operation = hci_le_extended_advertising_operation_for_chunk(pos, advertising_set->adv_data_len); 6394 uint16_t data_to_upload = btstack_min(advertising_set->adv_data_len - pos, LE_EXTENDED_ADVERTISING_MAX_CHUNK_LEN); 6395 if ((operation & 0x02) != 0){ 6396 // last fragment or complete data 6397 operation |= 2; 6398 advertising_set->adv_data_pos = 0; 6399 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_SET_ADV_DATA; 6400 } else { 6401 advertising_set->adv_data_pos += data_to_upload; 6402 } 6403 hci_stack->le_advertising_set_in_current_command = advertising_set->advertising_handle; 6404 hci_send_cmd(&hci_le_set_extended_advertising_data, advertising_set->advertising_handle, operation, 0x01, data_to_upload, &advertising_set->adv_data[pos]); 6405 return true; 6406 } 6407 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_SCAN_DATA) != 0) { 6408 uint16_t pos = advertising_set->scan_data_pos; 6409 uint8_t operation = hci_le_extended_advertising_operation_for_chunk(pos, advertising_set->scan_data_len); 6410 uint16_t data_to_upload = btstack_min(advertising_set->scan_data_len - pos, LE_EXTENDED_ADVERTISING_MAX_CHUNK_LEN); 6411 if ((operation & 0x02) != 0){ 6412 advertising_set->scan_data_pos = 0; 6413 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_SET_SCAN_DATA; 6414 } else { 6415 advertising_set->scan_data_pos += data_to_upload; 6416 } 6417 hci_stack->le_advertising_set_in_current_command = advertising_set->advertising_handle; 6418 hci_send_cmd(&hci_le_set_extended_scan_response_data, advertising_set->advertising_handle, operation, 0x01, data_to_upload, &advertising_set->scan_data[pos]); 6419 return true; 6420 } 6421 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6422 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_PERIODIC_PARAMS) != 0){ 6423 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_SET_PERIODIC_PARAMS; 6424 hci_stack->le_advertising_set_in_current_command = advertising_set->advertising_handle; 6425 hci_send_cmd(&hci_le_set_periodic_advertising_parameters, 6426 advertising_set->advertising_handle, 6427 advertising_set->periodic_params.periodic_advertising_interval_min, 6428 advertising_set->periodic_params.periodic_advertising_interval_max, 6429 advertising_set->periodic_params.periodic_advertising_properties); 6430 return true; 6431 } 6432 if ((advertising_set->tasks & LE_ADVERTISEMENT_TASKS_SET_PERIODIC_DATA) != 0) { 6433 uint16_t pos = advertising_set->periodic_data_pos; 6434 uint8_t operation = hci_le_extended_advertising_operation_for_chunk(pos, advertising_set->periodic_data_len); 6435 uint16_t data_to_upload = btstack_min(advertising_set->periodic_data_len - pos, LE_EXTENDED_ADVERTISING_MAX_CHUNK_LEN); 6436 if ((operation & 0x02) != 0){ 6437 // last fragment or complete data 6438 operation |= 2; 6439 advertising_set->periodic_data_pos = 0; 6440 advertising_set->tasks &= ~LE_ADVERTISEMENT_TASKS_SET_PERIODIC_DATA; 6441 } else { 6442 advertising_set->periodic_data_pos += data_to_upload; 6443 } 6444 hci_stack->le_advertising_set_in_current_command = advertising_set->advertising_handle; 6445 hci_send_cmd(&hci_le_set_periodic_advertising_data, advertising_set->advertising_handle, operation, data_to_upload, &advertising_set->periodic_data[pos]); 6446 return true; 6447 } 6448 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 6449 } 6450 } 6451 #endif 6452 6453 #endif 6454 6455 #ifdef ENABLE_LE_CENTRAL 6456 // if connect with whitelist was active and is not cancelled yet, wait until next time 6457 if (hci_stack->le_connecting_state == LE_CONNECTING_CANCEL) return false; 6458 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6459 // if periodic sync with advertiser list was active and is not cancelled yet, wait until next time 6460 if (hci_stack->le_periodic_sync_state == LE_CONNECTING_CANCEL) return false; 6461 #endif 6462 #endif 6463 6464 // LE Whitelist Management 6465 if (whitelist_modification_pending){ 6466 // add/remove entries 6467 btstack_linked_list_iterator_init(&lit, &hci_stack->le_whitelist); 6468 while (btstack_linked_list_iterator_has_next(&lit)){ 6469 whitelist_entry_t * entry = (whitelist_entry_t*) btstack_linked_list_iterator_next(&lit); 6470 if (entry->state & LE_WHITELIST_REMOVE_FROM_CONTROLLER){ 6471 entry->state &= ~LE_WHITELIST_REMOVE_FROM_CONTROLLER; 6472 entry->state &= ~LE_WHITELIST_ON_CONTROLLER; 6473 bd_addr_type_t address_type = entry->address_type; 6474 bd_addr_t address; 6475 memcpy(address, entry->address, 6); 6476 if ((entry->state & LE_WHITELIST_ADD_TO_CONTROLLER) == 0){ 6477 // remove from whitelist if not scheduled for re-addition 6478 btstack_linked_list_remove(&hci_stack->le_whitelist, (btstack_linked_item_t *) entry); 6479 btstack_memory_whitelist_entry_free(entry); 6480 } 6481 hci_send_cmd(&hci_le_remove_device_from_white_list, address_type, address); 6482 return true; 6483 } 6484 if (entry->state & LE_WHITELIST_ADD_TO_CONTROLLER){ 6485 entry->state &= ~LE_WHITELIST_ADD_TO_CONTROLLER; 6486 entry->state |= LE_WHITELIST_ON_CONTROLLER; 6487 hci_send_cmd(&hci_le_add_device_to_white_list, entry->address_type, entry->address); 6488 return true; 6489 } 6490 } 6491 } 6492 6493 #ifdef ENABLE_LE_PRIVACY_ADDRESS_RESOLUTION 6494 // LE Resolving List Management 6495 if (resolving_list_supported) { 6496 uint16_t i; 6497 switch (hci_stack->le_resolving_list_state) { 6498 case LE_RESOLVING_LIST_SEND_ENABLE_ADDRESS_RESOLUTION: 6499 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_READ_SIZE; 6500 hci_send_cmd(&hci_le_set_address_resolution_enabled, 1); 6501 return true; 6502 case LE_RESOLVING_LIST_READ_SIZE: 6503 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_SEND_CLEAR; 6504 hci_send_cmd(&hci_le_read_resolving_list_size); 6505 return true; 6506 case LE_RESOLVING_LIST_SEND_CLEAR: 6507 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_UPDATES_ENTRIES; 6508 (void) memset(hci_stack->le_resolving_list_add_entries, 0xff, 6509 sizeof(hci_stack->le_resolving_list_add_entries)); 6510 (void) memset(hci_stack->le_resolving_list_set_privacy_mode, 0xff, 6511 sizeof(hci_stack->le_resolving_list_set_privacy_mode)); 6512 (void) memset(hci_stack->le_resolving_list_remove_entries, 0, 6513 sizeof(hci_stack->le_resolving_list_remove_entries)); 6514 hci_send_cmd(&hci_le_clear_resolving_list); 6515 return true; 6516 case LE_RESOLVING_LIST_UPDATES_ENTRIES: 6517 // first remove old entries 6518 for (i = 0; i < MAX_NUM_RESOLVING_LIST_ENTRIES && i < le_device_db_max_count(); i++) { 6519 uint8_t offset = i >> 3; 6520 uint8_t mask = 1 << (i & 7); 6521 if ((hci_stack->le_resolving_list_remove_entries[offset] & mask) == 0) continue; 6522 hci_stack->le_resolving_list_remove_entries[offset] &= ~mask; 6523 bd_addr_t peer_identity_addreses; 6524 int peer_identity_addr_type = (int) BD_ADDR_TYPE_UNKNOWN; 6525 sm_key_t peer_irk; 6526 le_device_db_info(i, &peer_identity_addr_type, peer_identity_addreses, peer_irk); 6527 if (peer_identity_addr_type == BD_ADDR_TYPE_UNKNOWN) continue; 6528 6529 #ifdef ENABLE_LE_WHITELIST_TOUCH_AFTER_RESOLVING_LIST_UPDATE 6530 // trigger whitelist entry 'update' (work around for controller bug) 6531 btstack_linked_list_iterator_init(&lit, &hci_stack->le_whitelist); 6532 while (btstack_linked_list_iterator_has_next(&lit)) { 6533 whitelist_entry_t *entry = (whitelist_entry_t *) btstack_linked_list_iterator_next(&lit); 6534 if (entry->address_type != peer_identity_addr_type) continue; 6535 if (memcmp(entry->address, peer_identity_addreses, 6) != 0) continue; 6536 log_info("trigger whitelist update %s", bd_addr_to_str(peer_identity_addreses)); 6537 entry->state |= LE_WHITELIST_REMOVE_FROM_CONTROLLER | LE_WHITELIST_ADD_TO_CONTROLLER; 6538 } 6539 #endif 6540 6541 hci_send_cmd(&hci_le_remove_device_from_resolving_list, peer_identity_addr_type, 6542 peer_identity_addreses); 6543 return true; 6544 } 6545 6546 // then add new entries 6547 for (i = 0; i < MAX_NUM_RESOLVING_LIST_ENTRIES && i < le_device_db_max_count(); i++) { 6548 uint8_t offset = i >> 3; 6549 uint8_t mask = 1 << (i & 7); 6550 if ((hci_stack->le_resolving_list_add_entries[offset] & mask) == 0) continue; 6551 hci_stack->le_resolving_list_add_entries[offset] &= ~mask; 6552 bd_addr_t peer_identity_addreses; 6553 int peer_identity_addr_type = (int) BD_ADDR_TYPE_UNKNOWN; 6554 sm_key_t peer_irk; 6555 le_device_db_info(i, &peer_identity_addr_type, peer_identity_addreses, peer_irk); 6556 if (peer_identity_addr_type == BD_ADDR_TYPE_UNKNOWN) continue; 6557 if (btstack_is_null(peer_irk, 16)) continue; 6558 const uint8_t *local_irk = gap_get_persistent_irk(); 6559 // command uses format specifier 'P' that stores 16-byte value without flip 6560 uint8_t local_irk_flipped[16]; 6561 uint8_t peer_irk_flipped[16]; 6562 reverse_128(local_irk, local_irk_flipped); 6563 reverse_128(peer_irk, peer_irk_flipped); 6564 hci_send_cmd(&hci_le_add_device_to_resolving_list, peer_identity_addr_type, peer_identity_addreses, 6565 peer_irk_flipped, local_irk_flipped); 6566 return true; 6567 } 6568 6569 // finally, set privacy mode 6570 for (i = 0; i < MAX_NUM_RESOLVING_LIST_ENTRIES && i < le_device_db_max_count(); i++) { 6571 uint8_t offset = i >> 3; 6572 uint8_t mask = 1 << (i & 7); 6573 if ((hci_stack->le_resolving_list_set_privacy_mode[offset] & mask) == 0) continue; 6574 hci_stack->le_resolving_list_set_privacy_mode[offset] &= ~mask; 6575 if (hci_stack->le_privacy_mode == LE_PRIVACY_MODE_NETWORK) { 6576 // Network Privacy Mode is default 6577 continue; 6578 } 6579 bd_addr_t peer_identity_address; 6580 int peer_identity_addr_type = (int) BD_ADDR_TYPE_UNKNOWN; 6581 sm_key_t peer_irk; 6582 le_device_db_info(i, &peer_identity_addr_type, peer_identity_address, peer_irk); 6583 if (peer_identity_addr_type == BD_ADDR_TYPE_UNKNOWN) continue; 6584 if (btstack_is_null(peer_irk, 16)) continue; 6585 // command uses format specifier 'P' that stores 16-byte value without flip 6586 uint8_t peer_irk_flipped[16]; 6587 reverse_128(peer_irk, peer_irk_flipped); 6588 hci_send_cmd(&hci_le_set_privacy_mode, peer_identity_addr_type, peer_identity_address, hci_stack->le_privacy_mode); 6589 return true; 6590 } 6591 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_DONE; 6592 break; 6593 6594 default: 6595 break; 6596 } 6597 } 6598 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_DONE; 6599 #endif 6600 6601 #ifdef ENABLE_LE_CENTRAL 6602 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6603 // LE Whitelist Management 6604 if (periodic_list_modification_pending){ 6605 // add/remove entries 6606 btstack_linked_list_iterator_init(&lit, &hci_stack->le_periodic_advertiser_list); 6607 while (btstack_linked_list_iterator_has_next(&lit)){ 6608 periodic_advertiser_list_entry_t * entry = (periodic_advertiser_list_entry_t*) btstack_linked_list_iterator_next(&lit); 6609 if (entry->state & LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER){ 6610 entry->state &= ~LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER; 6611 hci_send_cmd(&hci_le_remove_device_from_periodic_advertiser_list, entry->address_type, entry->address); 6612 return true; 6613 } 6614 if (entry->state & LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER){ 6615 entry->state &= ~LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER; 6616 entry->state |= LE_PERIODIC_ADVERTISER_LIST_ENTRY_ON_CONTROLLER; 6617 hci_send_cmd(&hci_le_add_device_to_periodic_advertiser_list, entry->address_type, entry->address, entry->sid); 6618 return true; 6619 } 6620 if ((entry->state & LE_PERIODIC_ADVERTISER_LIST_ENTRY_ON_CONTROLLER) == 0){ 6621 btstack_linked_list_remove(&hci_stack->le_periodic_advertiser_list, (btstack_linked_item_t *) entry); 6622 btstack_memory_periodic_advertiser_list_entry_free(entry); 6623 } 6624 } 6625 } 6626 #endif 6627 #endif 6628 6629 #ifdef ENABLE_LE_CENTRAL 6630 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6631 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6632 if (hci_stack->le_past_set_default_params){ 6633 hci_stack->le_past_set_default_params = false; 6634 hci_send_cmd(&hci_le_set_default_periodic_advertising_sync_transfer_parameters, 6635 hci_stack->le_past_mode, 6636 hci_stack->le_past_skip, 6637 hci_stack->le_past_sync_timeout, 6638 hci_stack->le_past_cte_type); 6639 return true; 6640 } 6641 #endif 6642 #endif 6643 #endif 6644 6645 // post-pone all actions until stack is fully working 6646 if (hci_stack->state != HCI_STATE_WORKING) return false; 6647 6648 // advertisements, active scanning, and creating connections requires random address to be set if using private address 6649 if ( (hci_stack->le_own_addr_type != BD_ADDR_TYPE_LE_PUBLIC) && (hci_stack->le_random_address_set == 0u) ) return false; 6650 6651 // Phase 4: restore state 6652 6653 #ifdef ENABLE_LE_CENTRAL 6654 // re-start scanning 6655 if ((hci_stack->le_scanning_enabled && !hci_stack->le_scanning_active)){ 6656 hci_stack->le_scanning_active = true; 6657 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6658 if (hci_extended_advertising_supported()){ 6659 hci_send_cmd(&hci_le_set_extended_scan_enable, 1, hci_stack->le_scan_filter_duplicates, 0, 0); 6660 } else 6661 #endif 6662 { 6663 hci_send_cmd(&hci_le_set_scan_enable, 1, hci_stack->le_scan_filter_duplicates); 6664 } 6665 return true; 6666 } 6667 #endif 6668 6669 #ifdef ENABLE_LE_CENTRAL 6670 // re-start connecting 6671 if ( (hci_stack->le_connecting_state == LE_CONNECTING_IDLE) && (hci_stack->le_connecting_request == LE_CONNECTING_WHITELIST)){ 6672 bd_addr_t null_addr; 6673 memset(null_addr, 0, 6); 6674 hci_stack->le_connection_own_addr_type = hci_stack->le_own_addr_type; 6675 hci_get_own_address_for_addr_type(hci_stack->le_connection_own_addr_type, hci_stack->le_connection_own_address); 6676 hci_send_le_create_connection(1, 0, null_addr); 6677 return true; 6678 } 6679 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6680 if (hci_stack->le_periodic_sync_state == LE_CONNECTING_IDLE){ 6681 switch(hci_stack->le_periodic_sync_request){ 6682 case LE_CONNECTING_DIRECT: 6683 case LE_CONNECTING_WHITELIST: 6684 hci_stack->le_periodic_sync_state = ((hci_stack->le_periodic_sync_options & 1) != 0) ? LE_CONNECTING_WHITELIST : LE_CONNECTING_DIRECT; 6685 hci_send_cmd(&hci_le_periodic_advertising_create_sync, 6686 hci_stack->le_periodic_sync_options, 6687 hci_stack->le_periodic_sync_advertising_sid, 6688 hci_stack->le_periodic_sync_advertiser_address_type, 6689 hci_stack->le_periodic_sync_advertiser_address, 6690 hci_stack->le_periodic_sync_skip, 6691 hci_stack->le_periodic_sync_timeout, 6692 hci_stack->le_periodic_sync_cte_type); 6693 return true; 6694 default: 6695 break; 6696 } 6697 } 6698 #endif 6699 #endif 6700 6701 #ifdef ENABLE_LE_PERIPHERAL 6702 // re-start advertising 6703 if (hci_stack->le_advertisements_enabled_for_current_roles && ((hci_stack->le_advertisements_state & LE_ADVERTISEMENT_STATE_ACTIVE) == 0)){ 6704 // check if advertisements should be enabled given 6705 hci_stack->le_advertisements_state |= LE_ADVERTISEMENT_STATE_ACTIVE; 6706 hci_get_own_address_for_addr_type(hci_stack->le_advertisements_own_addr_type, hci_stack->le_advertisements_own_address); 6707 6708 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6709 if (hci_extended_advertising_supported()){ 6710 const uint8_t advertising_handles[] = { 0 }; 6711 const uint16_t durations[] = { 0 }; 6712 const uint16_t max_events[] = { 0 }; 6713 hci_send_cmd(&hci_le_set_extended_advertising_enable, 1, 1, advertising_handles, durations, max_events); 6714 } else 6715 #endif 6716 { 6717 hci_send_cmd(&hci_le_set_advertise_enable, 1); 6718 } 6719 return true; 6720 } 6721 6722 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 6723 if (hci_extended_advertising_supported()) { 6724 btstack_linked_list_iterator_t it; 6725 btstack_linked_list_iterator_init(&it, &hci_stack->le_advertising_sets); 6726 while (btstack_linked_list_iterator_has_next(&it)) { 6727 le_advertising_set_t *advertising_set = (le_advertising_set_t *) btstack_linked_list_iterator_next(&it); 6728 if (((advertising_set->state & LE_ADVERTISEMENT_STATE_ENABLED) != 0) && ((advertising_set->state & LE_ADVERTISEMENT_STATE_ACTIVE) == 0)){ 6729 advertising_set->state |= LE_ADVERTISEMENT_STATE_ACTIVE; 6730 const uint8_t advertising_handles[] = { advertising_set->advertising_handle }; 6731 const uint16_t durations[] = { advertising_set->enable_timeout }; 6732 const uint16_t max_events[] = { advertising_set->enable_max_scan_events }; 6733 hci_send_cmd(&hci_le_set_extended_advertising_enable, 1, 1, advertising_handles, durations, max_events); 6734 return true; 6735 } 6736 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 6737 if (((advertising_set->state & LE_ADVERTISEMENT_STATE_PERIODIC_ENABLED) != 0) && ((advertising_set->state & LE_ADVERTISEMENT_STATE_PERIODIC_ACTIVE) == 0)){ 6738 advertising_set->state |= LE_ADVERTISEMENT_STATE_PERIODIC_ACTIVE; 6739 uint8_t enable = 1; 6740 if (advertising_set->periodic_include_adi){ 6741 enable |= 2; 6742 } 6743 hci_send_cmd(&hci_le_set_periodic_advertising_enable, enable, advertising_set->advertising_handle); 6744 return true; 6745 } 6746 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 6747 } 6748 } 6749 #endif 6750 #endif 6751 6752 return false; 6753 } 6754 6755 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 6756 static bool hci_run_iso_tasks(void){ 6757 btstack_linked_list_iterator_t it; 6758 6759 if (hci_stack->iso_active_operation_type != HCI_ISO_TYPE_INVALID) { 6760 return false; 6761 } 6762 6763 // BIG 6764 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_bigs); 6765 while (btstack_linked_list_iterator_has_next(&it)){ 6766 le_audio_big_t * big = (le_audio_big_t *) btstack_linked_list_iterator_next(&it); 6767 switch (big->state){ 6768 case LE_AUDIO_BIG_STATE_CREATE: 6769 hci_stack->iso_active_operation_group_id = big->params->big_handle; 6770 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_BIS; 6771 big->state = LE_AUDIO_BIG_STATE_W4_ESTABLISHED; 6772 hci_send_cmd(&hci_le_create_big, 6773 big->params->big_handle, 6774 big->params->advertising_handle, 6775 big->params->num_bis, 6776 big->params->sdu_interval_us, 6777 big->params->max_sdu, 6778 big->params->max_transport_latency_ms, 6779 big->params->rtn, 6780 big->params->phy, 6781 big->params->packing, 6782 big->params->framing, 6783 big->params->encryption, 6784 big->params->broadcast_code); 6785 return true; 6786 case LE_AUDIO_BIG_STATE_SETUP_ISO_PATH: 6787 big->state = LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH; 6788 hci_send_cmd(&hci_le_setup_iso_data_path, big->bis_con_handles[big->state_vars.next_bis], 0, 0, HCI_AUDIO_CODING_FORMAT_TRANSPARENT, 0, 0, 0, 0, NULL); 6789 return true; 6790 case LE_AUDIO_BIG_STATE_SETUP_ISO_PATHS_FAILED: 6791 big->state = LE_AUDIO_BIG_STATE_W4_TERMINATED_AFTER_SETUP_FAILED; 6792 hci_send_cmd(&hci_le_terminate_big, big->big_handle, big->state_vars.status); 6793 return true; 6794 case LE_AUDIO_BIG_STATE_TERMINATE: 6795 big->state = LE_AUDIO_BIG_STATE_W4_TERMINATED; 6796 hci_send_cmd(&hci_le_terminate_big, big->big_handle, ERROR_CODE_SUCCESS); 6797 return true; 6798 default: 6799 break; 6800 } 6801 } 6802 6803 // BIG Sync 6804 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_big_syncs); 6805 while (btstack_linked_list_iterator_has_next(&it)){ 6806 le_audio_big_sync_t * big_sync = (le_audio_big_sync_t *) btstack_linked_list_iterator_next(&it); 6807 switch (big_sync->state){ 6808 case LE_AUDIO_BIG_STATE_CREATE: 6809 hci_stack->iso_active_operation_group_id = big_sync->params->big_handle; 6810 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_BIS; 6811 big_sync->state = LE_AUDIO_BIG_STATE_W4_ESTABLISHED; 6812 hci_send_cmd(&hci_le_big_create_sync, 6813 big_sync->params->big_handle, 6814 big_sync->params->sync_handle, 6815 big_sync->params->encryption, 6816 big_sync->params->broadcast_code, 6817 big_sync->params->mse, 6818 big_sync->params->big_sync_timeout_10ms, 6819 big_sync->params->num_bis, 6820 big_sync->params->bis_indices); 6821 return true; 6822 case LE_AUDIO_BIG_STATE_SETUP_ISO_PATH: 6823 big_sync->state = LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH; 6824 hci_send_cmd(&hci_le_setup_iso_data_path, big_sync->bis_con_handles[big_sync->state_vars.next_bis], 1, 0, HCI_AUDIO_CODING_FORMAT_TRANSPARENT, 0, 0, 0, 0, NULL); 6825 return true; 6826 case LE_AUDIO_BIG_STATE_SETUP_ISO_PATHS_FAILED: 6827 big_sync->state = LE_AUDIO_BIG_STATE_W4_TERMINATED_AFTER_SETUP_FAILED; 6828 hci_send_cmd(&hci_le_big_terminate_sync, big_sync->big_handle); 6829 return true; 6830 case LE_AUDIO_BIG_STATE_TERMINATE: 6831 big_sync->state = LE_AUDIO_BIG_STATE_W4_TERMINATED; 6832 hci_send_cmd(&hci_le_big_terminate_sync, big_sync->big_handle); 6833 return true; 6834 default: 6835 break; 6836 } 6837 } 6838 6839 // CIG 6840 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_cigs); 6841 while (btstack_linked_list_iterator_has_next(&it)) { 6842 le_audio_cig_t *cig = (le_audio_cig_t *) btstack_linked_list_iterator_next(&it); 6843 uint8_t i; 6844 // Set CIG Parameters 6845 uint8_t cis_id[MAX_NR_CIS]; 6846 uint16_t max_sdu_c_to_p[MAX_NR_CIS]; 6847 uint16_t max_sdu_p_to_c[MAX_NR_CIS]; 6848 uint8_t phy_c_to_p[MAX_NR_CIS]; 6849 uint8_t phy_p_to_c[MAX_NR_CIS]; 6850 uint8_t rtn_c_to_p[MAX_NR_CIS]; 6851 uint8_t rtn_p_to_c[MAX_NR_CIS]; 6852 switch (cig->state) { 6853 case LE_AUDIO_CIG_STATE_CREATE: 6854 hci_stack->iso_active_operation_group_id = cig->params->cig_id; 6855 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6856 cig->state = LE_AUDIO_CIG_STATE_W4_ESTABLISHED; 6857 le_audio_cig_params_t * params = cig->params; 6858 for (i = 0; i < params->num_cis; i++) { 6859 le_audio_cis_params_t * cis_params = &cig->params->cis_params[i]; 6860 cis_id[i] = cis_params->cis_id; 6861 max_sdu_c_to_p[i] = cis_params->max_sdu_c_to_p; 6862 max_sdu_p_to_c[i] = cis_params->max_sdu_p_to_c; 6863 phy_c_to_p[i] = cis_params->phy_c_to_p; 6864 phy_p_to_c[i] = cis_params->phy_p_to_c; 6865 rtn_c_to_p[i] = cis_params->rtn_c_to_p; 6866 rtn_p_to_c[i] = cis_params->rtn_p_to_c; 6867 } 6868 hci_send_cmd(&hci_le_set_cig_parameters, 6869 cig->cig_id, 6870 params->sdu_interval_c_to_p, 6871 params->sdu_interval_p_to_c, 6872 params->worst_case_sca, 6873 params->packing, 6874 params->framing, 6875 params->max_transport_latency_c_to_p, 6876 params->max_transport_latency_p_to_c, 6877 params->num_cis, 6878 cis_id, 6879 max_sdu_c_to_p, 6880 max_sdu_p_to_c, 6881 phy_c_to_p, 6882 phy_p_to_c, 6883 rtn_c_to_p, 6884 rtn_p_to_c 6885 ); 6886 return true; 6887 case LE_AUDIO_CIG_STATE_CREATE_CIS: 6888 hci_stack->iso_active_operation_group_id = cig->params->cig_id; 6889 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6890 cig->state = LE_AUDIO_CIG_STATE_W4_CREATE_CIS; 6891 for (i=0;i<cig->num_cis;i++){ 6892 cig->cis_setup_active[i] = true; 6893 } 6894 hci_send_cmd(&hci_le_create_cis, cig->num_cis, cig->cis_con_handles, cig->acl_con_handles); 6895 return true; 6896 case LE_AUDIO_CIG_STATE_SETUP_ISO_PATH: 6897 while (cig->state_vars.next_cis < (cig->num_cis * 2)){ 6898 // find next path to setup 6899 uint8_t cis_index = cig->state_vars.next_cis >> 1; 6900 if (cig->cis_established[cis_index] == false) { 6901 continue; 6902 } 6903 uint8_t cis_direction = cig->state_vars.next_cis & 1; 6904 bool setup = true; 6905 if (cis_direction == 0){ 6906 // 0 - input - host to controller 6907 // we are central => central to peripheral 6908 setup &= cig->params->cis_params[cis_index].max_sdu_c_to_p > 0; 6909 } else { 6910 // 1 - output - controller to host 6911 // we are central => peripheral to central 6912 setup &= cig->params->cis_params[cis_index].max_sdu_p_to_c > 0; 6913 } 6914 if (setup){ 6915 hci_stack->iso_active_operation_group_id = cig->params->cig_id; 6916 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6917 cig->state = LE_AUDIO_CIG_STATE_W4_SETUP_ISO_PATH; 6918 hci_send_cmd(&hci_le_setup_iso_data_path, cig->cis_con_handles[cis_index], cis_direction, 0, HCI_AUDIO_CODING_FORMAT_TRANSPARENT, 0, 0, 0, 0, NULL); 6919 return true; 6920 } 6921 cig->state_vars.next_cis++; 6922 } 6923 // emit done 6924 cig->state = LE_AUDIO_CIG_STATE_ACTIVE; 6925 default: 6926 break; 6927 } 6928 } 6929 6930 // CIS Accept/Reject 6931 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 6932 while (btstack_linked_list_iterator_has_next(&it)) { 6933 hci_iso_stream_t *iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 6934 hci_con_handle_t con_handle; 6935 switch (iso_stream->state){ 6936 case HCI_ISO_STREAM_W2_ACCEPT: 6937 iso_stream->state = HCI_ISO_STREAM_STATE_W4_ESTABLISHED; 6938 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6939 hci_stack->iso_active_operation_group_id = HCI_ISO_GROUP_ID_SINGLE_CIS; 6940 hci_send_cmd(&hci_le_accept_cis_request, iso_stream->cis_handle); 6941 return true; 6942 case HCI_ISO_STREAM_W2_REJECT: 6943 con_handle = iso_stream->cis_handle; 6944 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6945 hci_stack->iso_active_operation_group_id = HCI_ISO_GROUP_ID_SINGLE_CIS; 6946 hci_iso_stream_finalize(iso_stream); 6947 hci_send_cmd(&hci_le_reject_cis_request, con_handle, ERROR_CODE_REMOTE_DEVICE_TERMINATED_CONNECTION_DUE_TO_LOW_RESOURCES); 6948 return true; 6949 case HCI_ISO_STREAM_STATE_W2_SETUP_ISO_INPUT: 6950 hci_stack->iso_active_operation_group_id = HCI_ISO_GROUP_ID_SINGLE_CIS; 6951 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6952 iso_stream->state = HCI_ISO_STREAM_STATE_W4_ISO_SETUP_INPUT; 6953 hci_send_cmd(&hci_le_setup_iso_data_path, iso_stream->cis_handle, 0, 0, HCI_AUDIO_CODING_FORMAT_TRANSPARENT, 0, 0, 0, 0, NULL); 6954 break; 6955 case HCI_ISO_STREAM_STATE_W2_SETUP_ISO_OUTPUT: 6956 hci_stack->iso_active_operation_group_id = HCI_ISO_GROUP_ID_SINGLE_CIS; 6957 hci_stack->iso_active_operation_type = HCI_ISO_TYPE_CIS; 6958 iso_stream->state = HCI_ISO_STREAM_STATE_W4_ISO_SETUP_OUTPUT; 6959 hci_send_cmd(&hci_le_setup_iso_data_path, iso_stream->cis_handle, 1, 0, HCI_AUDIO_CODING_FORMAT_TRANSPARENT, 0, 0, 0, 0, NULL); 6960 break; 6961 default: 6962 break; 6963 } 6964 } 6965 6966 return false; 6967 } 6968 #endif /* ENABLE_LE_ISOCHRONOUS_STREAMS */ 6969 #endif 6970 6971 static bool hci_run_general_pending_commands(void){ 6972 btstack_linked_item_t * it; 6973 for (it = (btstack_linked_item_t *) hci_stack->connections; it != NULL; it = it->next){ 6974 hci_connection_t * connection = (hci_connection_t *) it; 6975 6976 switch(connection->state){ 6977 case SEND_CREATE_CONNECTION: 6978 switch(connection->address_type){ 6979 #ifdef ENABLE_CLASSIC 6980 case BD_ADDR_TYPE_ACL: 6981 log_info("sending hci_create_connection"); 6982 hci_send_cmd(&hci_create_connection, connection->address, hci_usable_acl_packet_types(), 0, 0, 0, hci_stack->allow_role_switch); 6983 break; 6984 #endif 6985 default: 6986 #ifdef ENABLE_BLE 6987 #ifdef ENABLE_LE_CENTRAL 6988 log_info("sending hci_le_create_connection"); 6989 hci_stack->le_connection_own_addr_type = hci_stack->le_own_addr_type; 6990 hci_get_own_address_for_addr_type(hci_stack->le_connection_own_addr_type, hci_stack->le_connection_own_address); 6991 hci_send_le_create_connection(0, connection->address_type, connection->address); 6992 connection->state = SENT_CREATE_CONNECTION; 6993 #endif 6994 #endif 6995 break; 6996 } 6997 return true; 6998 6999 #ifdef ENABLE_CLASSIC 7000 case RECEIVED_CONNECTION_REQUEST: 7001 if (connection->address_type == BD_ADDR_TYPE_ACL){ 7002 log_info("sending hci_accept_connection_request"); 7003 connection->state = ACCEPTED_CONNECTION_REQUEST; 7004 hci_send_cmd(&hci_accept_connection_request, connection->address, hci_stack->master_slave_policy); 7005 return true; 7006 } 7007 break; 7008 #endif 7009 case SEND_DISCONNECT: 7010 connection->state = SENT_DISCONNECT; 7011 hci_send_cmd(&hci_disconnect, connection->con_handle, ERROR_CODE_REMOTE_USER_TERMINATED_CONNECTION); 7012 return true; 7013 7014 default: 7015 break; 7016 } 7017 7018 // no further commands if connection is about to get shut down 7019 if (connection->state == SENT_DISCONNECT) continue; 7020 7021 #ifdef ENABLE_CLASSIC 7022 7023 // Handling link key request requires remote supported features 7024 if (((connection->authentication_flags & AUTH_FLAG_HANDLE_LINK_KEY_REQUEST) != 0)){ 7025 log_info("responding to link key request, have link key db: %u", hci_stack->link_key_db != NULL); 7026 connectionClearAuthenticationFlags(connection, AUTH_FLAG_HANDLE_LINK_KEY_REQUEST); 7027 7028 bool have_link_key = connection->link_key_type != INVALID_LINK_KEY; 7029 bool security_level_sufficient = have_link_key && (gap_security_level_for_link_key_type(connection->link_key_type) >= connection->requested_security_level); 7030 if (have_link_key && security_level_sufficient){ 7031 hci_send_cmd(&hci_link_key_request_reply, connection->address, &connection->link_key); 7032 } else { 7033 hci_send_cmd(&hci_link_key_request_negative_reply, connection->address); 7034 } 7035 return true; 7036 } 7037 7038 if (connection->authentication_flags & AUTH_FLAG_DENY_PIN_CODE_REQUEST){ 7039 log_info("denying to pin request"); 7040 connectionClearAuthenticationFlags(connection, AUTH_FLAG_DENY_PIN_CODE_REQUEST); 7041 hci_send_cmd(&hci_pin_code_request_negative_reply, connection->address); 7042 return true; 7043 } 7044 7045 // security assessment requires remote features 7046 if ((connection->authentication_flags & AUTH_FLAG_RECV_IO_CAPABILITIES_REQUEST) != 0){ 7047 connectionClearAuthenticationFlags(connection, AUTH_FLAG_RECV_IO_CAPABILITIES_REQUEST); 7048 hci_ssp_assess_security_on_io_cap_request(connection); 7049 // no return here as hci_ssp_assess_security_on_io_cap_request only sets AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY or AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY 7050 } 7051 7052 if (connection->authentication_flags & AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY){ 7053 connectionClearAuthenticationFlags(connection, AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY); 7054 // set authentication requirements: 7055 // - MITM = ssp_authentication_requirement (USER) | requested_security_level (dynamic) 7056 // - BONDING MODE: dedicated if requested, bondable otherwise. Drop bondable if not set for remote 7057 uint8_t authreq = hci_stack->ssp_authentication_requirement & 1; 7058 if (gap_mitm_protection_required_for_security_level(connection->requested_security_level)){ 7059 authreq |= 1; 7060 } 7061 bool bonding = hci_stack->bondable; 7062 if (connection->authentication_flags & AUTH_FLAG_RECV_IO_CAPABILITIES_RESPONSE){ 7063 // if we have received IO Cap Response, we're in responder role 7064 bool remote_bonding = connection->io_cap_response_auth_req >= SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_DEDICATED_BONDING; 7065 if (bonding && !remote_bonding){ 7066 log_info("Remote not bonding, dropping local flag"); 7067 bonding = false; 7068 } 7069 } 7070 if (bonding){ 7071 if (connection->bonding_flags & BONDING_DEDICATED){ 7072 authreq |= SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_DEDICATED_BONDING; 7073 } else { 7074 authreq |= SSP_IO_AUTHREQ_MITM_PROTECTION_NOT_REQUIRED_GENERAL_BONDING; 7075 } 7076 } 7077 uint8_t have_oob_data = 0; 7078 #ifdef ENABLE_CLASSIC_PAIRING_OOB 7079 if (connection->classic_oob_c_192 != NULL){ 7080 have_oob_data |= 1; 7081 } 7082 if (connection->classic_oob_c_256 != NULL){ 7083 have_oob_data |= 2; 7084 } 7085 #endif 7086 hci_send_cmd(&hci_io_capability_request_reply, &connection->address, hci_stack->ssp_io_capability, have_oob_data, authreq); 7087 return true; 7088 } 7089 7090 if (connection->authentication_flags & AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY) { 7091 connectionClearAuthenticationFlags(connection, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 7092 hci_send_cmd(&hci_io_capability_request_negative_reply, &connection->address, ERROR_CODE_PAIRING_NOT_ALLOWED); 7093 return true; 7094 } 7095 7096 #ifdef ENABLE_CLASSIC_PAIRING_OOB 7097 if (connection->authentication_flags & AUTH_FLAG_SEND_REMOTE_OOB_DATA_REPLY){ 7098 connectionClearAuthenticationFlags(connection, AUTH_FLAG_SEND_REMOTE_OOB_DATA_REPLY); 7099 const uint8_t zero[16] = { 0 }; 7100 const uint8_t * r_192 = zero; 7101 const uint8_t * c_192 = zero; 7102 const uint8_t * r_256 = zero; 7103 const uint8_t * c_256 = zero; 7104 // verify P-256 OOB 7105 if ((connection->classic_oob_c_256 != NULL) && hci_command_supported(SUPPORTED_HCI_COMMAND_REMOTE_OOB_EXTENDED_DATA_REQUEST_REPLY)) { 7106 c_256 = connection->classic_oob_c_256; 7107 if (connection->classic_oob_r_256 != NULL) { 7108 r_256 = connection->classic_oob_r_256; 7109 } 7110 } 7111 // verify P-192 OOB 7112 if ((connection->classic_oob_c_192 != NULL)) { 7113 c_192 = connection->classic_oob_c_192; 7114 if (connection->classic_oob_r_192 != NULL) { 7115 r_192 = connection->classic_oob_r_192; 7116 } 7117 } 7118 7119 // assess security 7120 bool need_level_4 = hci_stack->gap_secure_connections_only_mode || (connection->requested_security_level == LEVEL_4); 7121 bool can_reach_level_4 = hci_remote_sc_enabled(connection) && (c_256 != NULL); 7122 if (need_level_4 && !can_reach_level_4){ 7123 log_info("Level 4 required, but not possible -> abort"); 7124 hci_pairing_complete(connection, ERROR_CODE_INSUFFICIENT_SECURITY); 7125 // send oob negative reply 7126 c_256 = NULL; 7127 c_192 = NULL; 7128 } 7129 7130 // Reply 7131 if (c_256 != zero) { 7132 hci_send_cmd(&hci_remote_oob_extended_data_request_reply, &connection->address, c_192, r_192, c_256, r_256); 7133 } else if (c_192 != zero){ 7134 hci_send_cmd(&hci_remote_oob_data_request_reply, &connection->address, c_192, r_192); 7135 } else { 7136 hci_stack->classic_oob_con_handle = connection->con_handle; 7137 hci_send_cmd(&hci_remote_oob_data_request_negative_reply, &connection->address); 7138 } 7139 return true; 7140 } 7141 #endif 7142 7143 if (connection->authentication_flags & AUTH_FLAG_SEND_USER_CONFIRM_REPLY){ 7144 connectionClearAuthenticationFlags(connection, AUTH_FLAG_SEND_USER_CONFIRM_REPLY); 7145 hci_send_cmd(&hci_user_confirmation_request_reply, &connection->address); 7146 return true; 7147 } 7148 7149 if (connection->authentication_flags & AUTH_FLAG_SEND_USER_CONFIRM_NEGATIVE_REPLY){ 7150 connectionClearAuthenticationFlags(connection, AUTH_FLAG_SEND_USER_CONFIRM_NEGATIVE_REPLY); 7151 hci_send_cmd(&hci_user_confirmation_request_negative_reply, &connection->address); 7152 return true; 7153 } 7154 7155 if (connection->authentication_flags & AUTH_FLAG_SEND_USER_PASSKEY_REPLY){ 7156 connectionClearAuthenticationFlags(connection, AUTH_FLAG_SEND_USER_PASSKEY_REPLY); 7157 hci_send_cmd(&hci_user_passkey_request_reply, &connection->address, 000000); 7158 return true; 7159 } 7160 7161 if ((connection->bonding_flags & (BONDING_DISCONNECT_DEDICATED_DONE | BONDING_DEDICATED_DEFER_DISCONNECT)) == BONDING_DISCONNECT_DEDICATED_DONE){ 7162 connection->bonding_flags &= ~BONDING_DISCONNECT_DEDICATED_DONE; 7163 connection->bonding_flags |= BONDING_EMIT_COMPLETE_ON_DISCONNECT; 7164 connection->state = SENT_DISCONNECT; 7165 hci_send_cmd(&hci_disconnect, connection->con_handle, ERROR_CODE_REMOTE_USER_TERMINATED_CONNECTION); 7166 return true; 7167 } 7168 7169 if ((connection->bonding_flags & BONDING_SEND_AUTHENTICATE_REQUEST) && ((connection->bonding_flags & BONDING_RECEIVED_REMOTE_FEATURES) != 0)){ 7170 connection->bonding_flags &= ~BONDING_SEND_AUTHENTICATE_REQUEST; 7171 connection->bonding_flags |= BONDING_SENT_AUTHENTICATE_REQUEST; 7172 hci_send_cmd(&hci_authentication_requested, connection->con_handle); 7173 return true; 7174 } 7175 7176 if (connection->bonding_flags & BONDING_SEND_ENCRYPTION_REQUEST){ 7177 connection->bonding_flags &= ~BONDING_SEND_ENCRYPTION_REQUEST; 7178 hci_send_cmd(&hci_set_connection_encryption, connection->con_handle, 1); 7179 return true; 7180 } 7181 7182 if (connection->bonding_flags & BONDING_SEND_READ_ENCRYPTION_KEY_SIZE){ 7183 connection->bonding_flags &= ~BONDING_SEND_READ_ENCRYPTION_KEY_SIZE; 7184 hci_send_cmd(&hci_read_encryption_key_size, connection->con_handle, 1); 7185 return true; 7186 } 7187 7188 if (connection->bonding_flags & BONDING_REQUEST_REMOTE_FEATURES_PAGE_0){ 7189 connection->bonding_flags &= ~BONDING_REQUEST_REMOTE_FEATURES_PAGE_0; 7190 hci_send_cmd(&hci_read_remote_supported_features_command, connection->con_handle); 7191 return true; 7192 } 7193 7194 if (connection->bonding_flags & BONDING_REQUEST_REMOTE_FEATURES_PAGE_1){ 7195 connection->bonding_flags &= ~BONDING_REQUEST_REMOTE_FEATURES_PAGE_1; 7196 hci_send_cmd(&hci_read_remote_extended_features_command, connection->con_handle, 1); 7197 return true; 7198 } 7199 7200 if (connection->bonding_flags & BONDING_REQUEST_REMOTE_FEATURES_PAGE_2){ 7201 connection->bonding_flags &= ~BONDING_REQUEST_REMOTE_FEATURES_PAGE_2; 7202 hci_send_cmd(&hci_read_remote_extended_features_command, connection->con_handle, 2); 7203 return true; 7204 } 7205 #endif 7206 7207 if (connection->bonding_flags & BONDING_DISCONNECT_SECURITY_BLOCK){ 7208 connection->bonding_flags &= ~BONDING_DISCONNECT_SECURITY_BLOCK; 7209 #ifdef ENABLE_CLASSIC 7210 hci_pairing_complete(connection, ERROR_CODE_CONNECTION_REJECTED_DUE_TO_SECURITY_REASONS); 7211 #endif 7212 if (connection->state != SENT_DISCONNECT){ 7213 connection->state = SENT_DISCONNECT; 7214 hci_send_cmd(&hci_disconnect, connection->con_handle, ERROR_CODE_AUTHENTICATION_FAILURE); 7215 return true; 7216 } 7217 } 7218 7219 #ifdef ENABLE_CLASSIC 7220 uint16_t sniff_min_interval; 7221 switch (connection->sniff_min_interval){ 7222 case 0: 7223 break; 7224 case 0xffff: 7225 connection->sniff_min_interval = 0; 7226 hci_send_cmd(&hci_exit_sniff_mode, connection->con_handle); 7227 return true; 7228 default: 7229 sniff_min_interval = connection->sniff_min_interval; 7230 connection->sniff_min_interval = 0; 7231 hci_send_cmd(&hci_sniff_mode, connection->con_handle, connection->sniff_max_interval, sniff_min_interval, connection->sniff_attempt, connection->sniff_timeout); 7232 return true; 7233 } 7234 7235 if (connection->sniff_subrating_max_latency != 0xffff){ 7236 uint16_t max_latency = connection->sniff_subrating_max_latency; 7237 connection->sniff_subrating_max_latency = 0; 7238 hci_send_cmd(&hci_sniff_subrating, connection->con_handle, max_latency, connection->sniff_subrating_min_remote_timeout, connection->sniff_subrating_min_local_timeout); 7239 return true; 7240 } 7241 7242 if (connection->qos_service_type != HCI_SERVICE_TYPE_INVALID){ 7243 uint8_t service_type = (uint8_t) connection->qos_service_type; 7244 connection->qos_service_type = HCI_SERVICE_TYPE_INVALID; 7245 hci_send_cmd(&hci_qos_setup, connection->con_handle, 0, service_type, connection->qos_token_rate, connection->qos_peak_bandwidth, connection->qos_latency, connection->qos_delay_variation); 7246 return true; 7247 } 7248 7249 if (connection->request_role != HCI_ROLE_INVALID){ 7250 hci_role_t role = connection->request_role; 7251 connection->request_role = HCI_ROLE_INVALID; 7252 hci_send_cmd(&hci_switch_role_command, connection->address, role); 7253 return true; 7254 } 7255 #endif 7256 7257 if (connection->gap_connection_tasks != 0){ 7258 #ifdef ENABLE_CLASSIC 7259 if ((connection->gap_connection_tasks & GAP_CONNECTION_TASK_WRITE_AUTOMATIC_FLUSH_TIMEOUT) != 0){ 7260 connection->gap_connection_tasks &= ~GAP_CONNECTION_TASK_WRITE_AUTOMATIC_FLUSH_TIMEOUT; 7261 hci_send_cmd(&hci_write_automatic_flush_timeout, connection->con_handle, hci_stack->automatic_flush_timeout); 7262 return true; 7263 } 7264 if (connection->gap_connection_tasks & GAP_CONNECTION_TASK_WRITE_SUPERVISION_TIMEOUT){ 7265 connection->gap_connection_tasks &= ~GAP_CONNECTION_TASK_WRITE_SUPERVISION_TIMEOUT; 7266 hci_send_cmd(&hci_write_link_supervision_timeout, connection->con_handle, hci_stack->link_supervision_timeout); 7267 return true; 7268 } 7269 #endif 7270 if (connection->gap_connection_tasks & GAP_CONNECTION_TASK_READ_RSSI){ 7271 connection->gap_connection_tasks &= ~GAP_CONNECTION_TASK_READ_RSSI; 7272 hci_send_cmd(&hci_read_rssi, connection->con_handle); 7273 return true; 7274 } 7275 #ifdef ENABLE_BLE 7276 if (connection->gap_connection_tasks & GAP_CONNECTION_TASK_LE_READ_REMOTE_FEATURES){ 7277 connection->gap_connection_tasks &= ~GAP_CONNECTION_TASK_LE_READ_REMOTE_FEATURES; 7278 hci_send_cmd(&hci_le_read_remote_used_features, connection->con_handle); 7279 return true; 7280 } 7281 #endif 7282 } 7283 7284 #ifdef ENABLE_BLE 7285 switch (connection->le_con_parameter_update_state){ 7286 // response to L2CAP CON PARAMETER UPDATE REQUEST 7287 case CON_PARAMETER_UPDATE_CHANGE_HCI_CON_PARAMETERS: 7288 connection->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NONE; 7289 hci_send_cmd(&hci_le_connection_update, connection->con_handle, connection->le_conn_interval_min, 7290 connection->le_conn_interval_max, connection->le_conn_latency, connection->le_supervision_timeout, 7291 hci_stack->le_minimum_ce_length, hci_stack->le_maximum_ce_length); 7292 return true; 7293 case CON_PARAMETER_UPDATE_REPLY: 7294 connection->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NONE; 7295 hci_send_cmd(&hci_le_remote_connection_parameter_request_reply, connection->con_handle, connection->le_conn_interval_min, 7296 connection->le_conn_interval_max, connection->le_conn_latency, connection->le_supervision_timeout, 7297 hci_stack->le_minimum_ce_length, hci_stack->le_maximum_ce_length); 7298 return true; 7299 case CON_PARAMETER_UPDATE_NEGATIVE_REPLY: 7300 connection->le_con_parameter_update_state = CON_PARAMETER_UPDATE_NONE; 7301 hci_send_cmd(&hci_le_remote_connection_parameter_request_negative_reply, connection->con_handle, 7302 ERROR_CODE_UNACCEPTABLE_CONNECTION_PARAMETERS); 7303 return true; 7304 default: 7305 break; 7306 } 7307 if (connection->le_phy_update_all_phys != 0xffu){ 7308 uint8_t all_phys = connection->le_phy_update_all_phys; 7309 connection->le_phy_update_all_phys = 0xff; 7310 hci_send_cmd(&hci_le_set_phy, connection->con_handle, all_phys, connection->le_phy_update_tx_phys, connection->le_phy_update_rx_phys, connection->le_phy_update_phy_options); 7311 return true; 7312 } 7313 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 7314 if (connection->le_past_sync_handle != HCI_CON_HANDLE_INVALID){ 7315 hci_con_handle_t sync_handle = connection->le_past_sync_handle; 7316 connection->le_past_sync_handle = HCI_CON_HANDLE_INVALID; 7317 hci_send_cmd(&hci_le_periodic_advertising_sync_transfer, connection->con_handle, connection->le_past_service_data, sync_handle); 7318 return true; 7319 } 7320 if (connection->le_past_advertising_handle != 0xff){ 7321 uint8_t advertising_handle = connection->le_past_advertising_handle; 7322 connection->le_past_advertising_handle = 0xff; 7323 hci_send_cmd(&hci_le_periodic_advertising_set_info_transfer, connection->con_handle, connection->le_past_service_data, advertising_handle); 7324 return true; 7325 } 7326 #endif 7327 #endif 7328 } 7329 return false; 7330 } 7331 7332 static void hci_run(void){ 7333 7334 // stack state sub statemachines 7335 switch (hci_stack->state) { 7336 case HCI_STATE_INITIALIZING: 7337 hci_initializing_run(); 7338 break; 7339 case HCI_STATE_HALTING: 7340 hci_halting_run(); 7341 break; 7342 case HCI_STATE_FALLING_ASLEEP: 7343 hci_falling_asleep_run(); 7344 break; 7345 default: 7346 break; 7347 } 7348 7349 // allow to run after initialization to working transition 7350 if (hci_stack->state != HCI_STATE_WORKING){ 7351 return; 7352 } 7353 7354 bool done; 7355 7356 // send continuation fragments first, as they block the prepared packet buffer 7357 done = hci_run_acl_fragments(); 7358 if (done) return; 7359 7360 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 7361 done = hci_run_iso_fragments(); 7362 if (done) return; 7363 #endif 7364 7365 #ifdef ENABLE_HCI_CONTROLLER_TO_HOST_FLOW_CONTROL 7366 // send host num completed packets next as they don't require num_cmd_packets > 0 7367 if (!hci_can_send_comand_packet_transport()) return; 7368 if (hci_stack->host_completed_packets){ 7369 hci_host_num_completed_packets(); 7370 return; 7371 } 7372 #endif 7373 7374 if (!hci_can_send_command_packet_now()) return; 7375 7376 // global/non-connection oriented commands 7377 7378 7379 #ifdef ENABLE_CLASSIC 7380 // general gap classic 7381 done = hci_run_general_gap_classic(); 7382 if (done) return; 7383 #endif 7384 7385 #ifdef ENABLE_BLE 7386 // general gap le 7387 done = hci_run_general_gap_le(); 7388 if (done) return; 7389 7390 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 7391 // ISO related tasks, e.g. BIG create/terminate/sync 7392 done = hci_run_iso_tasks(); 7393 if (done) return; 7394 #endif 7395 #endif 7396 7397 // send pending HCI commands 7398 hci_run_general_pending_commands(); 7399 } 7400 7401 #ifdef ENABLE_CLASSIC 7402 static void hci_set_sco_payload_length_for_flipped_packet_types(hci_connection_t * hci_connection, uint16_t flipped_packet_types){ 7403 // bits 6-9 are 'don't use' 7404 uint16_t packet_types = flipped_packet_types ^ 0x03c0; 7405 7406 // restrict packet types to local and remote supported 7407 packet_types &= hci_connection->remote_supported_sco_packets & hci_stack->usable_packet_types_sco; 7408 hci_connection->sco_payload_length = hci_sco_payload_length_for_packet_types(packet_types); 7409 log_info("Possible SCO packet types 0x%04x => payload length %u", packet_types, hci_connection->sco_payload_length); 7410 } 7411 #endif 7412 7413 uint8_t hci_send_cmd_packet(uint8_t *packet, int size){ 7414 // house-keeping 7415 7416 #ifdef ENABLE_CLASSIC 7417 bd_addr_t addr; 7418 hci_connection_t * conn; 7419 #endif 7420 #ifdef ENABLE_LE_CENTRAL 7421 uint8_t initiator_filter_policy; 7422 #endif 7423 7424 uint16_t opcode = little_endian_read_16(packet, 0); 7425 switch (opcode) { 7426 case HCI_OPCODE_HCI_WRITE_LOOPBACK_MODE: 7427 hci_stack->loopback_mode = packet[3]; 7428 break; 7429 7430 #ifdef ENABLE_CLASSIC 7431 case HCI_OPCODE_HCI_CREATE_CONNECTION: 7432 reverse_bd_addr(&packet[3], addr); 7433 log_info("Create_connection to %s", bd_addr_to_str(addr)); 7434 7435 // CVE-2020-26555: reject outgoing connection to device with same BD ADDR 7436 if (memcmp(hci_stack->local_bd_addr, addr, 6) == 0) { 7437 hci_emit_connection_complete(addr, 0, ERROR_CODE_CONNECTION_REJECTED_DUE_TO_UNACCEPTABLE_BD_ADDR); 7438 return ERROR_CODE_CONNECTION_REJECTED_DUE_TO_UNACCEPTABLE_BD_ADDR; 7439 } 7440 7441 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 7442 if (!conn) { 7443 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL, HCI_ROLE_MASTER); 7444 if (!conn) { 7445 // notify client that alloc failed 7446 hci_emit_connection_complete(addr, 0, BTSTACK_MEMORY_ALLOC_FAILED); 7447 return BTSTACK_MEMORY_ALLOC_FAILED; // packet not sent to controller 7448 } 7449 conn->state = SEND_CREATE_CONNECTION; 7450 } 7451 7452 log_info("conn state %u", conn->state); 7453 // TODO: L2CAP should not send create connection command, instead a (new) gap function should be used 7454 switch (conn->state) { 7455 // if connection active exists 7456 case OPEN: 7457 // and OPEN, emit connection complete command 7458 hci_emit_connection_complete(addr, conn->con_handle, ERROR_CODE_SUCCESS); 7459 // packet not sent to controller 7460 return ERROR_CODE_ACL_CONNECTION_ALREADY_EXISTS; 7461 case RECEIVED_DISCONNECTION_COMPLETE: 7462 // create connection triggered in disconnect complete event, let's do it now 7463 break; 7464 case SEND_CREATE_CONNECTION: 7465 #ifdef ENABLE_HCI_SERIALIZED_CONTROLLER_OPERATIONS 7466 if (hci_classic_operation_active()){ 7467 return ERROR_CODE_SUCCESS; 7468 } 7469 #endif 7470 // connection created by hci, e.g. dedicated bonding, but not executed yet, let's do it now 7471 break; 7472 default: 7473 // otherwise, just ignore as it is already in the open process 7474 // packet not sent to controller 7475 return ERROR_CODE_ACL_CONNECTION_ALREADY_EXISTS; 7476 } 7477 conn->state = SENT_CREATE_CONNECTION; 7478 7479 // track outgoing connection 7480 hci_stack->outgoing_addr_type = BD_ADDR_TYPE_ACL; 7481 (void) memcpy(hci_stack->outgoing_addr, addr, 6); 7482 break; 7483 7484 case HCI_OPCODE_HCI_SETUP_SYNCHRONOUS_CONNECTION: 7485 conn = hci_connection_for_handle(little_endian_read_16(packet, 3)); 7486 if (conn == NULL) { 7487 // neither SCO nor ACL connection for con handle 7488 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 7489 } else { 7490 uint16_t remote_supported_sco_packets; 7491 switch (conn->address_type){ 7492 case BD_ADDR_TYPE_ACL: 7493 // assert SCO connection does not exit 7494 if (hci_connection_for_bd_addr_and_type(conn->address, BD_ADDR_TYPE_SCO) != NULL){ 7495 return ERROR_CODE_COMMAND_DISALLOWED; 7496 } 7497 // cache remote sco packet types 7498 remote_supported_sco_packets = conn->remote_supported_sco_packets; 7499 7500 // allocate connection struct 7501 conn = create_connection_for_bd_addr_and_type(conn->address, BD_ADDR_TYPE_SCO, 7502 HCI_ROLE_MASTER); 7503 if (!conn) { 7504 return ERROR_CODE_MEMORY_CAPACITY_EXCEEDED; 7505 } 7506 conn->remote_supported_sco_packets = remote_supported_sco_packets; 7507 break; 7508 case BD_ADDR_TYPE_SCO: 7509 // update of existing SCO connection 7510 break; 7511 default: 7512 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 7513 } 7514 } 7515 7516 // conn refers to hci connection of type sco now 7517 7518 conn->state = SENT_CREATE_CONNECTION; 7519 7520 // track outgoing connection to handle command status with error 7521 hci_stack->outgoing_addr_type = BD_ADDR_TYPE_SCO; 7522 (void) memcpy(hci_stack->outgoing_addr, addr, 6); 7523 7524 // setup_synchronous_connection? Voice setting at offset 22 7525 // TODO: compare to current setting if sco connection already active 7526 hci_stack->sco_voice_setting_active = little_endian_read_16(packet, 15); 7527 7528 // derive sco payload length from packet types 7529 hci_set_sco_payload_length_for_flipped_packet_types(conn, little_endian_read_16(packet, 18)); 7530 break; 7531 7532 case HCI_OPCODE_HCI_ACCEPT_SYNCHRONOUS_CONNECTION: 7533 // get SCO connection 7534 reverse_bd_addr(&packet[3], addr); 7535 conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_SCO); 7536 if (conn == NULL){ 7537 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 7538 } 7539 7540 conn->state = ACCEPTED_CONNECTION_REQUEST; 7541 7542 // track outgoing connection to handle command status with error 7543 hci_stack->outgoing_addr_type = BD_ADDR_TYPE_SCO; 7544 (void) memcpy(hci_stack->outgoing_addr, addr, 6); 7545 7546 // accept_synchronous_connection? Voice setting at offset 18 7547 // TODO: compare to current setting if sco connection already active 7548 hci_stack->sco_voice_setting_active = little_endian_read_16(packet, 19); 7549 7550 // derive sco payload length from packet types 7551 hci_set_sco_payload_length_for_flipped_packet_types(conn, little_endian_read_16(packet, 22)); 7552 break; 7553 #endif 7554 7555 #ifdef ENABLE_BLE 7556 #ifdef ENABLE_LE_CENTRAL 7557 case HCI_OPCODE_HCI_LE_CREATE_CONNECTION: 7558 // white list used? 7559 initiator_filter_policy = packet[7]; 7560 switch (initiator_filter_policy) { 7561 case 0: 7562 // whitelist not used 7563 hci_stack->le_connecting_state = LE_CONNECTING_DIRECT; 7564 break; 7565 case 1: 7566 hci_stack->le_connecting_state = LE_CONNECTING_WHITELIST; 7567 break; 7568 default: 7569 log_error("Invalid initiator_filter_policy in LE Create Connection %u", initiator_filter_policy); 7570 break; 7571 } 7572 // track outgoing connection 7573 hci_stack->outgoing_addr_type = (bd_addr_type_t) packet[8]; // peer address type 7574 reverse_bd_addr( &packet[9], hci_stack->outgoing_addr); // peer address 7575 break; 7576 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 7577 case HCI_OPCODE_HCI_LE_EXTENDED_CREATE_CONNECTION: 7578 // white list used? 7579 initiator_filter_policy = packet[3]; 7580 switch (initiator_filter_policy) { 7581 case 0: 7582 // whitelist not used 7583 hci_stack->le_connecting_state = LE_CONNECTING_DIRECT; 7584 break; 7585 case 1: 7586 hci_stack->le_connecting_state = LE_CONNECTING_WHITELIST; 7587 break; 7588 default: 7589 log_error("Invalid initiator_filter_policy in LE Create Connection %u", initiator_filter_policy); 7590 break; 7591 } 7592 // track outgoing connection 7593 hci_stack->outgoing_addr_type = (bd_addr_type_t) packet[5]; // peer address type 7594 reverse_bd_addr( &packet[6], hci_stack->outgoing_addr); // peer address 7595 break; 7596 #endif 7597 case HCI_OPCODE_HCI_LE_CREATE_CONNECTION_CANCEL: 7598 hci_stack->le_connecting_state = LE_CONNECTING_CANCEL; 7599 break; 7600 #endif 7601 #endif /* ENABLE_BLE */ 7602 default: 7603 break; 7604 } 7605 7606 hci_stack->num_cmd_packets--; 7607 7608 hci_dump_packet(HCI_COMMAND_DATA_PACKET, 0, packet, size); 7609 int err = hci_stack->hci_transport->send_packet(HCI_COMMAND_DATA_PACKET, packet, size); 7610 if (err != 0){ 7611 return ERROR_CODE_HARDWARE_FAILURE; 7612 } 7613 return ERROR_CODE_SUCCESS; 7614 } 7615 7616 // disconnect because of security block 7617 void hci_disconnect_security_block(hci_con_handle_t con_handle){ 7618 hci_connection_t * connection = hci_connection_for_handle(con_handle); 7619 if (!connection) return; 7620 connection->bonding_flags |= BONDING_DISCONNECT_SECURITY_BLOCK; 7621 } 7622 7623 7624 // Configure Secure Simple Pairing 7625 7626 #ifdef ENABLE_CLASSIC 7627 7628 // enable will enable SSP during init 7629 void gap_ssp_set_enable(int enable){ 7630 hci_stack->ssp_enable = enable; 7631 } 7632 7633 static int hci_local_ssp_activated(void){ 7634 return gap_ssp_supported() && hci_stack->ssp_enable; 7635 } 7636 7637 // if set, BTstack will respond to io capability request using authentication requirement 7638 void gap_ssp_set_io_capability(int io_capability){ 7639 hci_stack->ssp_io_capability = io_capability; 7640 } 7641 void gap_ssp_set_authentication_requirement(int authentication_requirement){ 7642 hci_stack->ssp_authentication_requirement = authentication_requirement; 7643 } 7644 7645 // if set, BTstack will confirm a numberic comparion and enter '000000' if requested 7646 void gap_ssp_set_auto_accept(int auto_accept){ 7647 hci_stack->ssp_auto_accept = auto_accept; 7648 } 7649 7650 void gap_secure_connections_enable(bool enable){ 7651 hci_stack->secure_connections_enable = enable; 7652 } 7653 bool gap_secure_connections_active(void){ 7654 return hci_stack->secure_connections_active; 7655 } 7656 7657 #endif 7658 7659 // va_list part of hci_send_cmd 7660 uint8_t hci_send_cmd_va_arg(const hci_cmd_t * cmd, va_list argptr){ 7661 if (!hci_can_send_command_packet_now()){ 7662 log_error("hci_send_cmd called but cannot send packet now"); 7663 return ERROR_CODE_COMMAND_DISALLOWED; 7664 } 7665 7666 // for HCI INITIALIZATION 7667 // log_info("hci_send_cmd: opcode %04x", cmd->opcode); 7668 hci_stack->last_cmd_opcode = cmd->opcode; 7669 7670 hci_reserve_packet_buffer(); 7671 uint8_t * packet = hci_stack->hci_packet_buffer; 7672 uint16_t size = hci_cmd_create_from_template(packet, cmd, argptr); 7673 uint8_t status = hci_send_cmd_packet(packet, size); 7674 7675 // release packet buffer on error or for synchronous transport implementations 7676 if ((status != ERROR_CODE_SUCCESS) || hci_transport_synchronous()){ 7677 hci_release_packet_buffer(); 7678 hci_emit_transport_packet_sent(); 7679 } 7680 7681 return status; 7682 } 7683 7684 /** 7685 * pre: numcmds >= 0 - it's allowed to send a command to the controller 7686 */ 7687 uint8_t hci_send_cmd(const hci_cmd_t * cmd, ...){ 7688 va_list argptr; 7689 va_start(argptr, cmd); 7690 uint8_t status = hci_send_cmd_va_arg(cmd, argptr); 7691 va_end(argptr); 7692 return status; 7693 } 7694 7695 // Create various non-HCI events. 7696 // TODO: generalize, use table similar to hci_create_command 7697 7698 static void hci_emit_event(uint8_t * event, uint16_t size, int dump){ 7699 // dump packet 7700 if (dump) { 7701 hci_dump_packet( HCI_EVENT_PACKET, 1, event, size); 7702 } 7703 7704 // dispatch to all event handlers 7705 btstack_linked_list_iterator_t it; 7706 btstack_linked_list_iterator_init(&it, &hci_stack->event_handlers); 7707 while (btstack_linked_list_iterator_has_next(&it)){ 7708 btstack_packet_callback_registration_t * entry = (btstack_packet_callback_registration_t*) btstack_linked_list_iterator_next(&it); 7709 entry->callback(HCI_EVENT_PACKET, 0, event, size); 7710 } 7711 } 7712 7713 static void hci_emit_acl_packet(uint8_t * packet, uint16_t size){ 7714 if (!hci_stack->acl_packet_handler) return; 7715 hci_stack->acl_packet_handler(HCI_ACL_DATA_PACKET, 0, packet, size); 7716 } 7717 7718 #ifdef ENABLE_CLASSIC 7719 static void hci_notify_if_sco_can_send_now(void){ 7720 // notify SCO sender if waiting 7721 if (!hci_stack->sco_waiting_for_can_send_now) return; 7722 if (hci_can_send_sco_packet_now()){ 7723 hci_stack->sco_waiting_for_can_send_now = 0; 7724 uint8_t event[2] = { HCI_EVENT_SCO_CAN_SEND_NOW, 0 }; 7725 hci_dump_packet(HCI_EVENT_PACKET, 1, event, sizeof(event)); 7726 hci_stack->sco_packet_handler(HCI_EVENT_PACKET, 0, event, sizeof(event)); 7727 } 7728 } 7729 7730 // parsing end emitting has been merged to reduce code size 7731 static void gap_inquiry_explode(uint8_t *packet, uint16_t size) { 7732 uint8_t event[28+GAP_INQUIRY_MAX_NAME_LEN]; 7733 7734 uint8_t * eir_data; 7735 ad_context_t context; 7736 const uint8_t * name; 7737 uint8_t name_len; 7738 7739 if (size < 3) return; 7740 7741 int event_type = hci_event_packet_get_type(packet); 7742 int num_reserved_fields = (event_type == HCI_EVENT_INQUIRY_RESULT) ? 2 : 1; // 2 for old event, 1 otherwise 7743 int num_responses = hci_event_inquiry_result_get_num_responses(packet); 7744 7745 switch (event_type){ 7746 case HCI_EVENT_INQUIRY_RESULT: 7747 case HCI_EVENT_INQUIRY_RESULT_WITH_RSSI: 7748 if (size != (3 + (num_responses * 14))) return; 7749 break; 7750 case HCI_EVENT_EXTENDED_INQUIRY_RESPONSE: 7751 if (size != 257) return; 7752 if (num_responses != 1) return; 7753 break; 7754 default: 7755 return; 7756 } 7757 7758 // event[1] is set at the end 7759 int i; 7760 for (i=0; i<num_responses;i++){ 7761 memset(event, 0, sizeof(event)); 7762 event[0] = GAP_EVENT_INQUIRY_RESULT; 7763 uint8_t event_size = 27; // if name is not set by EIR 7764 7765 (void)memcpy(&event[2], &packet[3 + (i * 6)], 6); // bd_addr 7766 event[8] = packet[3 + (num_responses*(6)) + (i*1)]; // page_scan_repetition_mode 7767 (void)memcpy(&event[9], 7768 &packet[3 + (num_responses * (6 + 1 + num_reserved_fields)) + (i * 3)], 7769 3); // class of device 7770 (void)memcpy(&event[12], 7771 &packet[3 + (num_responses * (6 + 1 + num_reserved_fields + 3)) + (i * 2)], 7772 2); // clock offset 7773 7774 switch (event_type){ 7775 case HCI_EVENT_INQUIRY_RESULT: 7776 // 14,15,16,17 = 0, size 18 7777 break; 7778 case HCI_EVENT_INQUIRY_RESULT_WITH_RSSI: 7779 event[14] = 1; 7780 event[15] = packet [3 + (num_responses*(6+1+num_reserved_fields+3+2)) + (i*1)]; // rssi 7781 // 16,17 = 0, size 18 7782 break; 7783 case HCI_EVENT_EXTENDED_INQUIRY_RESPONSE: 7784 event[14] = 1; 7785 event[15] = packet [3 + (num_responses*(6+1+num_reserved_fields+3+2)) + (i*1)]; // rssi 7786 // EIR packets only contain a single inquiry response 7787 eir_data = &packet[3 + (6+1+num_reserved_fields+3+2+1)]; 7788 name = NULL; 7789 // Iterate over EIR data 7790 for (ad_iterator_init(&context, EXTENDED_INQUIRY_RESPONSE_DATA_LEN, eir_data) ; ad_iterator_has_more(&context) ; ad_iterator_next(&context)){ 7791 uint8_t data_type = ad_iterator_get_data_type(&context); 7792 uint8_t data_size = ad_iterator_get_data_len(&context); 7793 const uint8_t * data = ad_iterator_get_data(&context); 7794 // Prefer Complete Local Name over Shortened Local Name 7795 switch (data_type){ 7796 case BLUETOOTH_DATA_TYPE_SHORTENED_LOCAL_NAME: 7797 if (name) continue; 7798 /* fall through */ 7799 case BLUETOOTH_DATA_TYPE_COMPLETE_LOCAL_NAME: 7800 name = data; 7801 name_len = data_size; 7802 break; 7803 case BLUETOOTH_DATA_TYPE_DEVICE_ID: 7804 if (data_size != 8) break; 7805 event[16] = 1; 7806 memcpy(&event[17], data, 8); 7807 break; 7808 default: 7809 break; 7810 } 7811 } 7812 if (name){ 7813 event[25] = 1; 7814 // truncate name if needed 7815 int len = btstack_min(name_len, GAP_INQUIRY_MAX_NAME_LEN); 7816 event[26] = len; 7817 (void)memcpy(&event[27], name, len); 7818 event_size += len; 7819 } 7820 break; 7821 default: 7822 return; 7823 } 7824 event[1] = event_size - 2; 7825 hci_emit_event(event, event_size, 1); 7826 } 7827 } 7828 #endif 7829 7830 void hci_emit_state(void){ 7831 log_info("BTSTACK_EVENT_STATE %u", hci_stack->state); 7832 uint8_t event[3]; 7833 event[0] = BTSTACK_EVENT_STATE; 7834 event[1] = sizeof(event) - 2u; 7835 event[2] = hci_stack->state; 7836 hci_emit_event(event, sizeof(event), 1); 7837 } 7838 7839 #ifdef ENABLE_CLASSIC 7840 static void hci_emit_connection_complete(bd_addr_t address, hci_con_handle_t con_handle, uint8_t status){ 7841 uint8_t event[13]; 7842 event[0] = HCI_EVENT_CONNECTION_COMPLETE; 7843 event[1] = sizeof(event) - 2; 7844 event[2] = status; 7845 little_endian_store_16(event, 3, con_handle); 7846 reverse_bd_addr(address, &event[5]); 7847 event[11] = 1; // ACL connection 7848 event[12] = 0; // encryption disabled 7849 hci_emit_event(event, sizeof(event), 1); 7850 } 7851 static void hci_emit_l2cap_check_timeout(hci_connection_t *conn){ 7852 if (disable_l2cap_timeouts) return; 7853 log_info("L2CAP_EVENT_TIMEOUT_CHECK"); 7854 uint8_t event[4]; 7855 event[0] = L2CAP_EVENT_TIMEOUT_CHECK; 7856 event[1] = sizeof(event) - 2; 7857 little_endian_store_16(event, 2, conn->con_handle); 7858 hci_emit_event(event, sizeof(event), 1); 7859 } 7860 #endif 7861 7862 #ifdef ENABLE_BLE 7863 #ifdef ENABLE_LE_CENTRAL 7864 static void hci_emit_le_connection_complete(uint8_t address_type, const bd_addr_t address, hci_con_handle_t con_handle, uint8_t status){ 7865 uint8_t event[21]; 7866 event[0] = HCI_EVENT_LE_META; 7867 event[1] = sizeof(event) - 2u; 7868 event[2] = HCI_SUBEVENT_LE_CONNECTION_COMPLETE; 7869 event[3] = status; 7870 little_endian_store_16(event, 4, con_handle); 7871 event[6] = 0; // TODO: role 7872 event[7] = address_type; 7873 reverse_bd_addr(address, &event[8]); 7874 little_endian_store_16(event, 14, 0); // interval 7875 little_endian_store_16(event, 16, 0); // latency 7876 little_endian_store_16(event, 18, 0); // supervision timeout 7877 event[20] = 0; // master clock accuracy 7878 hci_emit_event(event, sizeof(event), 1); 7879 } 7880 #endif 7881 #endif 7882 7883 static void hci_emit_transport_packet_sent(void){ 7884 // notify upper stack that it might be possible to send again 7885 uint8_t event[] = { HCI_EVENT_TRANSPORT_PACKET_SENT, 0}; 7886 hci_emit_event(&event[0], sizeof(event), 0); // don't dump 7887 } 7888 7889 static void hci_emit_disconnection_complete(hci_con_handle_t con_handle, uint8_t reason){ 7890 uint8_t event[6]; 7891 event[0] = HCI_EVENT_DISCONNECTION_COMPLETE; 7892 event[1] = sizeof(event) - 2u; 7893 event[2] = 0; // status = OK 7894 little_endian_store_16(event, 3, con_handle); 7895 event[5] = reason; 7896 hci_emit_event(event, sizeof(event), 1); 7897 } 7898 7899 static void hci_emit_nr_connections_changed(void){ 7900 log_info("BTSTACK_EVENT_NR_CONNECTIONS_CHANGED %u", nr_hci_connections()); 7901 uint8_t event[3]; 7902 event[0] = BTSTACK_EVENT_NR_CONNECTIONS_CHANGED; 7903 event[1] = sizeof(event) - 2u; 7904 event[2] = nr_hci_connections(); 7905 hci_emit_event(event, sizeof(event), 1); 7906 } 7907 7908 static void hci_emit_hci_open_failed(void){ 7909 log_info("BTSTACK_EVENT_POWERON_FAILED"); 7910 uint8_t event[2]; 7911 event[0] = BTSTACK_EVENT_POWERON_FAILED; 7912 event[1] = sizeof(event) - 2u; 7913 hci_emit_event(event, sizeof(event), 1); 7914 } 7915 7916 static void hci_emit_dedicated_bonding_result(bd_addr_t address, uint8_t status){ 7917 log_info("hci_emit_dedicated_bonding_result %u ", status); 7918 uint8_t event[9]; 7919 int pos = 0; 7920 event[pos++] = GAP_EVENT_DEDICATED_BONDING_COMPLETED; 7921 event[pos++] = sizeof(event) - 2u; 7922 event[pos++] = status; 7923 reverse_bd_addr(address, &event[pos]); 7924 hci_emit_event(event, sizeof(event), 1); 7925 } 7926 7927 7928 #ifdef ENABLE_CLASSIC 7929 7930 static void hci_emit_security_level(hci_con_handle_t con_handle, gap_security_level_t level){ 7931 log_info("hci_emit_security_level %u for handle %x", level, con_handle); 7932 uint8_t event[5]; 7933 int pos = 0; 7934 event[pos++] = GAP_EVENT_SECURITY_LEVEL; 7935 event[pos++] = sizeof(event) - 2; 7936 little_endian_store_16(event, 2, con_handle); 7937 pos += 2; 7938 event[pos++] = level; 7939 hci_emit_event(event, sizeof(event), 1); 7940 } 7941 7942 static gap_security_level_t gap_security_level_for_connection(hci_connection_t * connection){ 7943 if (!connection) return LEVEL_0; 7944 if ((connection->authentication_flags & AUTH_FLAG_CONNECTION_ENCRYPTED) == 0) return LEVEL_0; 7945 // BIAS: we only consider Authenticated if the connection is already encrypted, which requires that both sides have link key 7946 if ((connection->authentication_flags & AUTH_FLAG_CONNECTION_AUTHENTICATED) == 0) return LEVEL_0; 7947 if (connection->encryption_key_size < hci_stack->gap_required_encyrption_key_size) return LEVEL_0; 7948 gap_security_level_t security_level = gap_security_level_for_link_key_type(connection->link_key_type); 7949 // LEVEL 4 always requires 128 bit encrytion key size 7950 if ((security_level == LEVEL_4) && (connection->encryption_key_size < 16)){ 7951 security_level = LEVEL_3; 7952 } 7953 return security_level; 7954 } 7955 7956 static void hci_emit_scan_mode_changed(uint8_t discoverable, uint8_t connectable){ 7957 uint8_t event[4]; 7958 event[0] = BTSTACK_EVENT_SCAN_MODE_CHANGED; 7959 event[1] = sizeof(event) - 2; 7960 event[2] = discoverable; 7961 event[3] = connectable; 7962 hci_emit_event(event, sizeof(event), 1); 7963 } 7964 7965 // query if remote side supports eSCO 7966 bool hci_remote_esco_supported(hci_con_handle_t con_handle){ 7967 hci_connection_t * connection = hci_connection_for_handle(con_handle); 7968 if (!connection) return false; 7969 return (connection->remote_supported_features[0] & 1) != 0; 7970 } 7971 7972 uint16_t hci_remote_sco_packet_types(hci_con_handle_t con_handle){ 7973 hci_connection_t * connection = hci_connection_for_handle(con_handle); 7974 if (!connection) return 0; 7975 return connection->remote_supported_sco_packets; 7976 } 7977 7978 static bool hci_ssp_supported(hci_connection_t * connection){ 7979 const uint8_t mask = BONDING_REMOTE_SUPPORTS_SSP_CONTROLLER | BONDING_REMOTE_SUPPORTS_SSP_HOST; 7980 return (connection->bonding_flags & mask) == mask; 7981 } 7982 7983 // query if remote side supports SSP 7984 bool hci_remote_ssp_supported(hci_con_handle_t con_handle){ 7985 hci_connection_t * connection = hci_connection_for_handle(con_handle); 7986 if (!connection) return false; 7987 return hci_ssp_supported(connection) ? 1 : 0; 7988 } 7989 7990 bool gap_ssp_supported_on_both_sides(hci_con_handle_t handle){ 7991 return hci_local_ssp_activated() && hci_remote_ssp_supported(handle); 7992 } 7993 7994 /** 7995 * Check if remote supported features query has completed 7996 */ 7997 bool hci_remote_features_available(hci_con_handle_t handle){ 7998 hci_connection_t * connection = hci_connection_for_handle(handle); 7999 if (!connection) return false; 8000 return (connection->bonding_flags & BONDING_RECEIVED_REMOTE_FEATURES) != 0; 8001 } 8002 8003 /** 8004 * Trigger remote supported features query 8005 */ 8006 8007 static void hci_trigger_remote_features_for_connection(hci_connection_t * connection){ 8008 if ((connection->bonding_flags & (BONDING_REMOTE_FEATURES_QUERY_ACTIVE | BONDING_RECEIVED_REMOTE_FEATURES)) == 0){ 8009 connection->bonding_flags |= BONDING_REMOTE_FEATURES_QUERY_ACTIVE | BONDING_REQUEST_REMOTE_FEATURES_PAGE_0; 8010 } 8011 } 8012 8013 void hci_remote_features_query(hci_con_handle_t con_handle){ 8014 hci_connection_t * connection = hci_connection_for_handle(con_handle); 8015 if (!connection) return; 8016 hci_trigger_remote_features_for_connection(connection); 8017 hci_run(); 8018 } 8019 8020 // GAP API 8021 /** 8022 * @bbrief enable/disable bonding. default is enabled 8023 * @praram enabled 8024 */ 8025 void gap_set_bondable_mode(int enable){ 8026 hci_stack->bondable = enable ? 1 : 0; 8027 } 8028 /** 8029 * @brief Get bondable mode. 8030 * @return 1 if bondable 8031 */ 8032 int gap_get_bondable_mode(void){ 8033 return hci_stack->bondable; 8034 } 8035 8036 /** 8037 * @brief map link keys to security levels 8038 */ 8039 gap_security_level_t gap_security_level_for_link_key_type(link_key_type_t link_key_type){ 8040 switch (link_key_type){ 8041 case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P256: 8042 return LEVEL_4; 8043 case COMBINATION_KEY: 8044 case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P192: 8045 return LEVEL_3; 8046 default: 8047 return LEVEL_2; 8048 } 8049 } 8050 8051 /** 8052 * @brief map link keys to secure connection yes/no 8053 */ 8054 bool gap_secure_connection_for_link_key_type(link_key_type_t link_key_type){ 8055 switch (link_key_type){ 8056 case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P256: 8057 case UNAUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P256: 8058 return true; 8059 default: 8060 return false; 8061 } 8062 } 8063 8064 /** 8065 * @brief map link keys to authenticated 8066 */ 8067 bool gap_authenticated_for_link_key_type(link_key_type_t link_key_type){ 8068 switch (link_key_type){ 8069 case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P256: 8070 case AUTHENTICATED_COMBINATION_KEY_GENERATED_FROM_P192: 8071 return true; 8072 default: 8073 return false; 8074 } 8075 } 8076 8077 bool gap_mitm_protection_required_for_security_level(gap_security_level_t level){ 8078 log_info("gap_mitm_protection_required_for_security_level %u", level); 8079 return level > LEVEL_2; 8080 } 8081 8082 /** 8083 * @brief get current security level 8084 */ 8085 gap_security_level_t gap_security_level(hci_con_handle_t con_handle){ 8086 hci_connection_t * connection = hci_connection_for_handle(con_handle); 8087 if (!connection) return LEVEL_0; 8088 return gap_security_level_for_connection(connection); 8089 } 8090 8091 /** 8092 * @brief request connection to device to 8093 * @result GAP_AUTHENTICATION_RESULT 8094 */ 8095 void gap_request_security_level(hci_con_handle_t con_handle, gap_security_level_t requested_level){ 8096 hci_connection_t * connection = hci_connection_for_handle(con_handle); 8097 if (!connection){ 8098 hci_emit_security_level(con_handle, LEVEL_0); 8099 return; 8100 } 8101 8102 btstack_assert(hci_is_le_connection(connection) == false); 8103 8104 // Core Spec 5.2, GAP 5.2.2: "When in Secure Connections Only mode, all services (except those allowed to have Security Mode 4, Level 0) 8105 // available on the BR/EDR physical transport require Security Mode 4, Level 4 " 8106 if (hci_stack->gap_secure_connections_only_mode && (requested_level != LEVEL_0)){ 8107 requested_level = LEVEL_4; 8108 } 8109 8110 gap_security_level_t current_level = gap_security_level(con_handle); 8111 log_info("gap_request_security_level requested level %u, planned level %u, current level %u", 8112 requested_level, connection->requested_security_level, current_level); 8113 8114 // authentication active if authentication request was sent or planned level > 0 8115 bool authentication_active = ((connection->bonding_flags & BONDING_SENT_AUTHENTICATE_REQUEST) != 0) || (connection->requested_security_level > LEVEL_0); 8116 if (authentication_active){ 8117 // authentication already active 8118 if (connection->requested_security_level < requested_level){ 8119 // increase requested level as new level is higher 8120 // TODO: handle re-authentication when done 8121 connection->requested_security_level = requested_level; 8122 } 8123 } else { 8124 // no request active, notify if security sufficient 8125 if (requested_level <= current_level){ 8126 hci_emit_security_level(con_handle, current_level); 8127 return; 8128 } 8129 8130 // store request 8131 connection->requested_security_level = requested_level; 8132 8133 // start to authenticate connection 8134 connection->bonding_flags |= BONDING_SEND_AUTHENTICATE_REQUEST; 8135 8136 // request remote features if not already active, also trigger hci_run 8137 hci_remote_features_query(con_handle); 8138 } 8139 } 8140 8141 /** 8142 * @brief start dedicated bonding with device. disconnect after bonding 8143 * @param device 8144 * @param request MITM protection 8145 * @result GAP_DEDICATED_BONDING_COMPLETE 8146 */ 8147 int gap_dedicated_bonding(bd_addr_t device, int mitm_protection_required){ 8148 8149 // create connection state machine 8150 hci_connection_t * connection = create_connection_for_bd_addr_and_type(device, BD_ADDR_TYPE_ACL, HCI_ROLE_MASTER); 8151 8152 if (!connection){ 8153 return BTSTACK_MEMORY_ALLOC_FAILED; 8154 } 8155 8156 // delete link key 8157 gap_drop_link_key_for_bd_addr(device); 8158 8159 // configure LEVEL_2/3, dedicated bonding 8160 connection->state = SEND_CREATE_CONNECTION; 8161 connection->requested_security_level = mitm_protection_required ? LEVEL_3 : LEVEL_2; 8162 log_info("gap_dedicated_bonding, mitm %d -> level %u", mitm_protection_required, connection->requested_security_level); 8163 connection->bonding_flags = BONDING_DEDICATED; 8164 8165 hci_run(); 8166 8167 return 0; 8168 } 8169 8170 uint8_t hci_dedicated_bonding_defer_disconnect(hci_con_handle_t con_handle, bool defer){ 8171 hci_connection_t * connection = hci_connection_for_handle(con_handle); 8172 if (connection == NULL){ 8173 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8174 } 8175 if (defer){ 8176 connection->bonding_flags |= BONDING_DEDICATED_DEFER_DISCONNECT; 8177 } else { 8178 connection->bonding_flags &= ~BONDING_DEDICATED_DEFER_DISCONNECT; 8179 // trigger disconnect 8180 hci_run(); 8181 } 8182 return ERROR_CODE_SUCCESS; 8183 } 8184 8185 void gap_set_local_name(const char * local_name){ 8186 hci_stack->local_name = local_name; 8187 hci_stack->gap_tasks_classic |= GAP_TASK_SET_LOCAL_NAME; 8188 // also update EIR if not set by user 8189 if (hci_stack->eir_data == NULL){ 8190 hci_stack->gap_tasks_classic |= GAP_TASK_SET_EIR_DATA; 8191 } 8192 hci_run(); 8193 } 8194 #endif 8195 8196 8197 #ifdef ENABLE_BLE 8198 8199 #ifdef ENABLE_LE_CENTRAL 8200 void gap_start_scan(void){ 8201 hci_stack->le_scanning_enabled = true; 8202 hci_run(); 8203 } 8204 8205 void gap_stop_scan(void){ 8206 hci_stack->le_scanning_enabled = false; 8207 hci_run(); 8208 } 8209 8210 void gap_set_scan_params(uint8_t scan_type, uint16_t scan_interval, uint16_t scan_window, uint8_t scanning_filter_policy){ 8211 hci_stack->le_scan_type = scan_type; 8212 hci_stack->le_scan_filter_policy = scanning_filter_policy; 8213 hci_stack->le_scan_interval = scan_interval; 8214 hci_stack->le_scan_window = scan_window; 8215 hci_stack->le_scanning_param_update = true; 8216 hci_run(); 8217 } 8218 8219 void gap_set_scan_parameters(uint8_t scan_type, uint16_t scan_interval, uint16_t scan_window){ 8220 gap_set_scan_params(scan_type, scan_interval, scan_window, 0); 8221 } 8222 8223 void gap_set_scan_duplicate_filter(bool enabled){ 8224 hci_stack->le_scan_filter_duplicates = enabled ? 1 : 0; 8225 } 8226 8227 void gap_set_scan_phys(uint8_t phys){ 8228 // LE Coded and LE 1M PHY 8229 hci_stack->le_scan_phys = phys & 0x05; 8230 } 8231 8232 uint8_t gap_connect(const bd_addr_t addr, bd_addr_type_t addr_type){ 8233 hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, addr_type); 8234 if (!conn){ 8235 // disallow if le connection is already outgoing 8236 if (hci_is_le_connection_type(addr_type) && hci_stack->le_connecting_request != LE_CONNECTING_IDLE){ 8237 log_error("le connection already active"); 8238 return ERROR_CODE_COMMAND_DISALLOWED; 8239 } 8240 8241 log_info("gap_connect: no connection exists yet, creating context"); 8242 conn = create_connection_for_bd_addr_and_type(addr, addr_type, HCI_ROLE_MASTER); 8243 if (!conn){ 8244 // notify client that alloc failed 8245 hci_emit_le_connection_complete(addr_type, addr, 0, BTSTACK_MEMORY_ALLOC_FAILED); 8246 log_info("gap_connect: failed to alloc hci_connection_t"); 8247 return GATT_CLIENT_NOT_CONNECTED; // don't sent packet to controller 8248 } 8249 8250 // set le connecting state 8251 if (hci_is_le_connection_type(addr_type)){ 8252 hci_stack->le_connecting_request = LE_CONNECTING_DIRECT; 8253 } 8254 8255 conn->state = SEND_CREATE_CONNECTION; 8256 log_info("gap_connect: send create connection next"); 8257 hci_run(); 8258 return ERROR_CODE_SUCCESS; 8259 } 8260 8261 if (!hci_is_le_connection(conn) || 8262 (conn->state == SEND_CREATE_CONNECTION) || 8263 (conn->state == SENT_CREATE_CONNECTION)) { 8264 hci_emit_le_connection_complete(conn->address_type, conn->address, 0, ERROR_CODE_COMMAND_DISALLOWED); 8265 log_error("gap_connect: classic connection or connect is already being created"); 8266 return GATT_CLIENT_IN_WRONG_STATE; 8267 } 8268 8269 // check if connection was just disconnected 8270 if (conn->state == RECEIVED_DISCONNECTION_COMPLETE){ 8271 log_info("gap_connect: send create connection (again)"); 8272 conn->state = SEND_CREATE_CONNECTION; 8273 hci_run(); 8274 return ERROR_CODE_SUCCESS; 8275 } 8276 8277 log_info("gap_connect: context exists with state %u", conn->state); 8278 hci_emit_le_connection_complete(conn->address_type, conn->address, conn->con_handle, ERROR_CODE_SUCCESS); 8279 hci_run(); 8280 return ERROR_CODE_SUCCESS; 8281 } 8282 8283 // @assumption: only a single outgoing LE Connection exists 8284 static hci_connection_t * gap_get_outgoing_connection(void){ 8285 btstack_linked_item_t *it; 8286 for (it = (btstack_linked_item_t *) hci_stack->connections; it != NULL; it = it->next){ 8287 hci_connection_t * conn = (hci_connection_t *) it; 8288 if (!hci_is_le_connection(conn)) continue; 8289 switch (conn->state){ 8290 case SEND_CREATE_CONNECTION: 8291 case SENT_CREATE_CONNECTION: 8292 return conn; 8293 default: 8294 break; 8295 }; 8296 } 8297 return NULL; 8298 } 8299 8300 uint8_t gap_connect_cancel(void){ 8301 hci_connection_t * conn; 8302 switch (hci_stack->le_connecting_request){ 8303 case LE_CONNECTING_IDLE: 8304 break; 8305 case LE_CONNECTING_WHITELIST: 8306 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 8307 hci_run(); 8308 break; 8309 case LE_CONNECTING_DIRECT: 8310 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 8311 conn = gap_get_outgoing_connection(); 8312 if (conn == NULL){ 8313 hci_run(); 8314 } else { 8315 switch (conn->state){ 8316 case SEND_CREATE_CONNECTION: 8317 // skip sending create connection and emit event instead 8318 hci_emit_le_connection_complete(conn->address_type, conn->address, 0, ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER); 8319 btstack_linked_list_remove(&hci_stack->connections, (btstack_linked_item_t *) conn); 8320 btstack_memory_hci_connection_free( conn ); 8321 break; 8322 case SENT_CREATE_CONNECTION: 8323 // let hci_run_general_gap_le cancel outgoing connection 8324 hci_run(); 8325 break; 8326 default: 8327 break; 8328 } 8329 } 8330 break; 8331 default: 8332 btstack_unreachable(); 8333 break; 8334 } 8335 return ERROR_CODE_SUCCESS; 8336 } 8337 8338 /** 8339 * @brief Set connection parameters for outgoing connections 8340 * @param conn_scan_interval (unit: 0.625 msec), default: 60 ms 8341 * @param conn_scan_window (unit: 0.625 msec), default: 30 ms 8342 * @param conn_interval_min (unit: 1.25ms), default: 10 ms 8343 * @param conn_interval_max (unit: 1.25ms), default: 30 ms 8344 * @param conn_latency, default: 4 8345 * @param supervision_timeout (unit: 10ms), default: 720 ms 8346 * @param min_ce_length (unit: 0.625ms), default: 10 ms 8347 * @param max_ce_length (unit: 0.625ms), default: 30 ms 8348 */ 8349 8350 void gap_set_connection_phys(uint8_t phys){ 8351 // LE Coded, LE 1M, LE 2M PHY 8352 hci_stack->le_connection_phys = phys & 7; 8353 } 8354 8355 #endif 8356 8357 void gap_set_connection_parameters(uint16_t conn_scan_interval, uint16_t conn_scan_window, 8358 uint16_t conn_interval_min, uint16_t conn_interval_max, uint16_t conn_latency, 8359 uint16_t supervision_timeout, uint16_t min_ce_length, uint16_t max_ce_length){ 8360 hci_stack->le_connection_scan_interval = conn_scan_interval; 8361 hci_stack->le_connection_scan_window = conn_scan_window; 8362 hci_stack->le_connection_interval_min = conn_interval_min; 8363 hci_stack->le_connection_interval_max = conn_interval_max; 8364 hci_stack->le_connection_latency = conn_latency; 8365 hci_stack->le_supervision_timeout = supervision_timeout; 8366 hci_stack->le_minimum_ce_length = min_ce_length; 8367 hci_stack->le_maximum_ce_length = max_ce_length; 8368 } 8369 8370 /** 8371 * @brief Updates the connection parameters for a given LE connection 8372 * @param handle 8373 * @param conn_interval_min (unit: 1.25ms) 8374 * @param conn_interval_max (unit: 1.25ms) 8375 * @param conn_latency 8376 * @param supervision_timeout (unit: 10ms) 8377 * @return 0 if ok 8378 */ 8379 int gap_update_connection_parameters(hci_con_handle_t con_handle, uint16_t conn_interval_min, 8380 uint16_t conn_interval_max, uint16_t conn_latency, uint16_t supervision_timeout){ 8381 hci_connection_t * connection = hci_connection_for_handle(con_handle); 8382 if (!connection) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8383 connection->le_conn_interval_min = conn_interval_min; 8384 connection->le_conn_interval_max = conn_interval_max; 8385 connection->le_conn_latency = conn_latency; 8386 connection->le_supervision_timeout = supervision_timeout; 8387 connection->le_con_parameter_update_state = CON_PARAMETER_UPDATE_CHANGE_HCI_CON_PARAMETERS; 8388 hci_run(); 8389 return 0; 8390 } 8391 8392 /** 8393 * @brief Request an update of the connection parameter for a given LE connection 8394 * @param handle 8395 * @param conn_interval_min (unit: 1.25ms) 8396 * @param conn_interval_max (unit: 1.25ms) 8397 * @param conn_latency 8398 * @param supervision_timeout (unit: 10ms) 8399 * @return 0 if ok 8400 */ 8401 int gap_request_connection_parameter_update(hci_con_handle_t con_handle, uint16_t conn_interval_min, 8402 uint16_t conn_interval_max, uint16_t conn_latency, uint16_t supervision_timeout){ 8403 hci_connection_t * connection = hci_connection_for_handle(con_handle); 8404 if (!connection) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8405 connection->le_conn_interval_min = conn_interval_min; 8406 connection->le_conn_interval_max = conn_interval_max; 8407 connection->le_conn_latency = conn_latency; 8408 connection->le_supervision_timeout = supervision_timeout; 8409 connection->le_con_parameter_update_state = CON_PARAMETER_UPDATE_SEND_REQUEST; 8410 uint8_t l2cap_trigger_run_event[2] = { L2CAP_EVENT_TRIGGER_RUN, 0}; 8411 hci_emit_event(l2cap_trigger_run_event, sizeof(l2cap_trigger_run_event), 0); 8412 return 0; 8413 } 8414 8415 #ifdef ENABLE_LE_PERIPHERAL 8416 8417 /** 8418 * @brief Set Advertisement Data 8419 * @param advertising_data_length 8420 * @param advertising_data (max 31 octets) 8421 * @note data is not copied, pointer has to stay valid 8422 */ 8423 void gap_advertisements_set_data(uint8_t advertising_data_length, uint8_t * advertising_data){ 8424 hci_stack->le_advertisements_data_len = advertising_data_length; 8425 hci_stack->le_advertisements_data = advertising_data; 8426 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_ADV_DATA; 8427 hci_run(); 8428 } 8429 8430 /** 8431 * @brief Set Scan Response Data 8432 * @param advertising_data_length 8433 * @param advertising_data (max 31 octets) 8434 * @note data is not copied, pointer has to stay valid 8435 */ 8436 void gap_scan_response_set_data(uint8_t scan_response_data_length, uint8_t * scan_response_data){ 8437 hci_stack->le_scan_response_data_len = scan_response_data_length; 8438 hci_stack->le_scan_response_data = scan_response_data; 8439 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_SCAN_DATA; 8440 hci_run(); 8441 } 8442 8443 /** 8444 * @brief Set Advertisement Parameters 8445 * @param adv_int_min 8446 * @param adv_int_max 8447 * @param adv_type 8448 * @param direct_address_type 8449 * @param direct_address 8450 * @param channel_map 8451 * @param filter_policy 8452 * 8453 * @note internal use. use gap_advertisements_set_params from gap_le.h instead. 8454 */ 8455 void hci_le_advertisements_set_params(uint16_t adv_int_min, uint16_t adv_int_max, uint8_t adv_type, 8456 uint8_t direct_address_typ, bd_addr_t direct_address, 8457 uint8_t channel_map, uint8_t filter_policy) { 8458 8459 hci_stack->le_advertisements_interval_min = adv_int_min; 8460 hci_stack->le_advertisements_interval_max = adv_int_max; 8461 hci_stack->le_advertisements_type = adv_type; 8462 hci_stack->le_advertisements_direct_address_type = direct_address_typ; 8463 hci_stack->le_advertisements_channel_map = channel_map; 8464 hci_stack->le_advertisements_filter_policy = filter_policy; 8465 (void)memcpy(hci_stack->le_advertisements_direct_address, direct_address, 8466 6); 8467 8468 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_PARAMS; 8469 hci_stack->le_advertisements_state |= LE_ADVERTISEMENT_STATE_PARAMS_SET; 8470 hci_run(); 8471 } 8472 8473 /** 8474 * @brief Enable/Disable Advertisements 8475 * @param enabled 8476 */ 8477 void gap_advertisements_enable(int enabled){ 8478 if (enabled == 0){ 8479 hci_stack->le_advertisements_state &= ~LE_ADVERTISEMENT_STATE_ENABLED; 8480 } else { 8481 hci_stack->le_advertisements_state |= LE_ADVERTISEMENT_STATE_ENABLED; 8482 } 8483 hci_update_advertisements_enabled_for_current_roles(); 8484 hci_run(); 8485 } 8486 8487 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 8488 static le_advertising_set_t * hci_advertising_set_for_handle(uint8_t advertising_handle){ 8489 btstack_linked_list_iterator_t it; 8490 btstack_linked_list_iterator_init(&it, &hci_stack->le_advertising_sets); 8491 while (btstack_linked_list_iterator_has_next(&it)){ 8492 le_advertising_set_t * item = (le_advertising_set_t *) btstack_linked_list_iterator_next(&it); 8493 if ( item->advertising_handle == advertising_handle ) { 8494 return item; 8495 } 8496 } 8497 return NULL; 8498 } 8499 8500 uint8_t gap_extended_advertising_set_resolvable_private_address_update(uint16_t update_s){ 8501 hci_stack->le_resolvable_private_address_update_s = update_s; 8502 hci_run(); 8503 return ERROR_CODE_SUCCESS; 8504 } 8505 8506 uint8_t gap_extended_advertising_setup(le_advertising_set_t * storage, const le_extended_advertising_parameters_t * advertising_parameters, uint8_t * out_advertising_handle){ 8507 // find free advertisement handle 8508 uint8_t advertisement_handle; 8509 for (advertisement_handle = 1; advertisement_handle <= LE_EXTENDED_ADVERTISING_MAX_HANDLE; advertisement_handle++){ 8510 if (hci_advertising_set_for_handle(advertisement_handle) == NULL) break; 8511 } 8512 if (advertisement_handle > LE_EXTENDED_ADVERTISING_MAX_HANDLE) return ERROR_CODE_MEMORY_CAPACITY_EXCEEDED; 8513 // clear 8514 memset(storage, 0, sizeof(le_advertising_set_t)); 8515 // copy params 8516 storage->advertising_handle = advertisement_handle; 8517 memcpy(&storage->extended_params, advertising_parameters, sizeof(le_extended_advertising_parameters_t)); 8518 // add to list 8519 bool add_ok = btstack_linked_list_add(&hci_stack->le_advertising_sets, (btstack_linked_item_t *) storage); 8520 if (!add_ok) return ERROR_CODE_ACL_CONNECTION_ALREADY_EXISTS; 8521 *out_advertising_handle = advertisement_handle; 8522 // set tasks and start 8523 storage->tasks = LE_ADVERTISEMENT_TASKS_SET_PARAMS; 8524 hci_run(); 8525 return ERROR_CODE_SUCCESS; 8526 } 8527 8528 uint8_t gap_extended_advertising_set_params(uint8_t advertising_handle, const le_extended_advertising_parameters_t * advertising_parameters){ 8529 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8530 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8531 memcpy(&advertising_set->extended_params, advertising_parameters, sizeof(le_extended_advertising_parameters_t)); 8532 // set tasks and start 8533 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_SET_PARAMS; 8534 hci_run(); 8535 return ERROR_CODE_SUCCESS; 8536 } 8537 8538 uint8_t gap_extended_advertising_get_params(uint8_t advertising_handle, le_extended_advertising_parameters_t * advertising_parameters){ 8539 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8540 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8541 memcpy(advertising_parameters, &advertising_set->extended_params, sizeof(le_extended_advertising_parameters_t)); 8542 return ERROR_CODE_SUCCESS; 8543 } 8544 8545 uint8_t gap_extended_advertising_set_random_address(uint8_t advertising_handle, bd_addr_t random_address){ 8546 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8547 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8548 memcpy(advertising_set->random_address, random_address, 6); 8549 // set tasks and start 8550 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_SET_ADDRESS; 8551 hci_run(); 8552 return ERROR_CODE_SUCCESS; 8553 } 8554 8555 uint8_t gap_extended_advertising_set_adv_data(uint8_t advertising_handle, uint16_t advertising_data_length, const uint8_t * advertising_data){ 8556 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8557 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8558 advertising_set->adv_data = advertising_data; 8559 advertising_set->adv_data_len = advertising_data_length; 8560 // set tasks and start 8561 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_SET_ADV_DATA; 8562 hci_run(); 8563 return ERROR_CODE_SUCCESS; 8564 } 8565 8566 uint8_t gap_extended_advertising_set_scan_response_data(uint8_t advertising_handle, uint16_t scan_response_data_length, const uint8_t * scan_response_data){ 8567 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8568 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8569 advertising_set->scan_data = scan_response_data; 8570 advertising_set->scan_data_len = scan_response_data_length; 8571 // set tasks and start 8572 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_SET_SCAN_DATA; 8573 hci_run(); 8574 return ERROR_CODE_SUCCESS; 8575 } 8576 8577 uint8_t gap_extended_advertising_start(uint8_t advertising_handle, uint16_t timeout, uint8_t num_extended_advertising_events){ 8578 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8579 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8580 advertising_set->enable_timeout = timeout; 8581 advertising_set->enable_max_scan_events = num_extended_advertising_events; 8582 // set tasks and start 8583 advertising_set->state |= LE_ADVERTISEMENT_STATE_ENABLED; 8584 hci_run(); 8585 return ERROR_CODE_SUCCESS; 8586 } 8587 8588 uint8_t gap_extended_advertising_stop(uint8_t advertising_handle){ 8589 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8590 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8591 // set tasks and start 8592 advertising_set->state &= ~LE_ADVERTISEMENT_STATE_ENABLED; 8593 hci_run(); 8594 return ERROR_CODE_SUCCESS; 8595 } 8596 8597 uint8_t gap_extended_advertising_remove(uint8_t advertising_handle){ 8598 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8599 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8600 // set tasks and start 8601 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_REMOVE_SET; 8602 hci_run(); 8603 return ERROR_CODE_SUCCESS; 8604 } 8605 8606 #ifdef ENABLE_LE_PERIODIC_ADVERTISING 8607 uint8_t gap_periodic_advertising_set_params(uint8_t advertising_handle, const le_periodic_advertising_parameters_t * advertising_parameters){ 8608 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8609 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8610 // periodic advertising requires neither connectable, scannable, legacy or anonymous 8611 if ((advertising_set->extended_params.advertising_event_properties & 0x1f) != 0) return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 8612 memcpy(&advertising_set->periodic_params, advertising_parameters, sizeof(le_periodic_advertising_parameters_t)); 8613 // set tasks and start 8614 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_SET_PERIODIC_PARAMS; 8615 hci_run(); 8616 return ERROR_CODE_SUCCESS; 8617 } 8618 8619 uint8_t gap_periodic_advertising_get_params(uint8_t advertising_handle, le_periodic_advertising_parameters_t * advertising_parameters){ 8620 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8621 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8622 memcpy(advertising_parameters, &advertising_set->extended_params, sizeof(le_periodic_advertising_parameters_t)); 8623 return ERROR_CODE_SUCCESS; 8624 } 8625 8626 uint8_t gap_periodic_advertising_set_data(uint8_t advertising_handle, uint16_t periodic_data_length, const uint8_t * periodic_data){ 8627 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8628 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8629 advertising_set->periodic_data = periodic_data; 8630 advertising_set->periodic_data_len = periodic_data_length; 8631 // set tasks and start 8632 advertising_set->tasks |= LE_ADVERTISEMENT_TASKS_SET_PERIODIC_DATA; 8633 hci_run(); 8634 return ERROR_CODE_SUCCESS; 8635 } 8636 8637 uint8_t gap_periodic_advertising_start(uint8_t advertising_handle, bool include_adi){ 8638 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8639 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8640 // set tasks and start 8641 advertising_set->periodic_include_adi = include_adi; 8642 advertising_set->state |= LE_ADVERTISEMENT_STATE_PERIODIC_ENABLED; 8643 hci_run(); 8644 return ERROR_CODE_SUCCESS; 8645 } 8646 8647 uint8_t gap_periodic_advertising_stop(uint8_t advertising_handle){ 8648 le_advertising_set_t * advertising_set = hci_advertising_set_for_handle(advertising_handle); 8649 if (advertising_set == NULL) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8650 // set tasks and start 8651 advertising_set->state &= ~LE_ADVERTISEMENT_STATE_PERIODIC_ENABLED; 8652 hci_run(); 8653 return ERROR_CODE_SUCCESS; 8654 } 8655 8656 uint8_t gap_periodic_advertising_sync_transfer_set_default_parameters(uint8_t mode, uint16_t skip, uint16_t sync_timeout, uint8_t cte_type){ 8657 hci_stack->le_past_mode = mode; 8658 hci_stack->le_past_skip = skip; 8659 hci_stack->le_past_sync_timeout = sync_timeout; 8660 hci_stack->le_past_cte_type = cte_type; 8661 hci_stack->le_past_set_default_params = true; 8662 hci_run(); 8663 return ERROR_CODE_SUCCESS; 8664 } 8665 8666 uint8_t gap_periodic_advertising_sync_transfer_send(hci_con_handle_t con_handle, uint16_t service_data, hci_con_handle_t sync_handle){ 8667 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 8668 if (hci_connection == NULL){ 8669 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8670 } 8671 hci_connection->le_past_sync_handle = sync_handle; 8672 hci_connection->le_past_service_data = service_data; 8673 hci_run(); 8674 return ERROR_CODE_SUCCESS; 8675 } 8676 8677 uint8_t gap_periodic_advertising_set_info_transfer_send(hci_con_handle_t con_handle, uint16_t service_data, uint8_t advertising_handle){ 8678 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 8679 if (hci_connection == NULL){ 8680 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8681 } 8682 hci_connection->le_past_advertising_handle = advertising_handle; 8683 hci_connection->le_past_service_data = service_data; 8684 hci_run(); 8685 return ERROR_CODE_SUCCESS; 8686 } 8687 8688 #endif /* ENABLE_LE_PERIODIC_ADVERTISING */ 8689 8690 #endif 8691 8692 #endif 8693 8694 void hci_le_set_own_address_type(uint8_t own_address_type){ 8695 log_info("hci_le_set_own_address_type: old %u, new %u", hci_stack->le_own_addr_type, own_address_type); 8696 if (own_address_type == hci_stack->le_own_addr_type) return; 8697 hci_stack->le_own_addr_type = own_address_type; 8698 8699 #ifdef ENABLE_LE_PERIPHERAL 8700 // update advertisement parameters, too 8701 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_PARAMS; 8702 hci_run(); 8703 #endif 8704 #ifdef ENABLE_LE_CENTRAL 8705 // note: we don't update scan parameters or modify ongoing connection attempts 8706 #endif 8707 } 8708 8709 void hci_le_random_address_set(const bd_addr_t random_address){ 8710 memcpy(hci_stack->le_random_address, random_address, 6); 8711 hci_stack->le_random_address_set = true; 8712 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_ADDRESS; 8713 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 8714 if (hci_extended_advertising_supported()){ 8715 // force advertising set creation for LE Set Advertising Set Random Address 8716 if ((hci_stack->le_advertisements_state & LE_ADVERTISEMENT_STATE_PARAMS_SET) == 0){ 8717 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_PARAMS; 8718 } 8719 hci_stack->le_advertisements_todo |= LE_ADVERTISEMENT_TASKS_SET_ADDRESS_SET_0; 8720 } 8721 #endif 8722 hci_run(); 8723 } 8724 8725 #endif 8726 8727 uint8_t gap_disconnect(hci_con_handle_t handle){ 8728 hci_connection_t * conn = hci_connection_for_handle(handle); 8729 if (!conn){ 8730 hci_emit_disconnection_complete(handle, 0); 8731 return 0; 8732 } 8733 // ignore if already disconnected 8734 if (conn->state == RECEIVED_DISCONNECTION_COMPLETE){ 8735 return 0; 8736 } 8737 conn->state = SEND_DISCONNECT; 8738 hci_run(); 8739 return 0; 8740 } 8741 8742 int gap_read_rssi(hci_con_handle_t con_handle){ 8743 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 8744 if (hci_connection == NULL) return 0; 8745 hci_connection->gap_connection_tasks |= GAP_CONNECTION_TASK_READ_RSSI; 8746 hci_run(); 8747 return 1; 8748 } 8749 8750 /** 8751 * @brief Get connection type 8752 * @param con_handle 8753 * @result connection_type 8754 */ 8755 gap_connection_type_t gap_get_connection_type(hci_con_handle_t connection_handle){ 8756 hci_connection_t * conn = hci_connection_for_handle(connection_handle); 8757 if (!conn) return GAP_CONNECTION_INVALID; 8758 switch (conn->address_type){ 8759 case BD_ADDR_TYPE_LE_PUBLIC: 8760 case BD_ADDR_TYPE_LE_RANDOM: 8761 return GAP_CONNECTION_LE; 8762 case BD_ADDR_TYPE_SCO: 8763 return GAP_CONNECTION_SCO; 8764 case BD_ADDR_TYPE_ACL: 8765 return GAP_CONNECTION_ACL; 8766 default: 8767 return GAP_CONNECTION_INVALID; 8768 } 8769 } 8770 8771 hci_role_t gap_get_role(hci_con_handle_t connection_handle){ 8772 hci_connection_t * conn = hci_connection_for_handle(connection_handle); 8773 if (!conn) return HCI_ROLE_INVALID; 8774 return (hci_role_t) conn->role; 8775 } 8776 8777 8778 #ifdef ENABLE_CLASSIC 8779 uint8_t gap_request_role(const bd_addr_t addr, hci_role_t role){ 8780 hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 8781 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8782 conn->request_role = role; 8783 hci_run(); 8784 return ERROR_CODE_SUCCESS; 8785 } 8786 #endif 8787 8788 #ifdef ENABLE_BLE 8789 8790 uint8_t gap_le_set_phy(hci_con_handle_t con_handle, uint8_t all_phys, uint8_t tx_phys, uint8_t rx_phys, uint16_t phy_options){ 8791 hci_connection_t * conn = hci_connection_for_handle(con_handle); 8792 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8793 8794 conn->le_phy_update_all_phys = all_phys; 8795 conn->le_phy_update_tx_phys = tx_phys; 8796 conn->le_phy_update_rx_phys = rx_phys; 8797 conn->le_phy_update_phy_options = (uint8_t) phy_options; 8798 8799 hci_run(); 8800 8801 return 0; 8802 } 8803 8804 static uint8_t hci_whitelist_add(bd_addr_type_t address_type, const bd_addr_t address){ 8805 // check if already in list 8806 btstack_linked_list_iterator_t it; 8807 btstack_linked_list_iterator_init(&it, &hci_stack->le_whitelist); 8808 while (btstack_linked_list_iterator_has_next(&it)) { 8809 whitelist_entry_t *entry = (whitelist_entry_t *) btstack_linked_list_iterator_next(&it); 8810 if (entry->address_type != address_type) { 8811 continue; 8812 } 8813 if (memcmp(entry->address, address, 6) != 0) { 8814 continue; 8815 } 8816 8817 // if already on controller: 8818 if ((entry->state & LE_WHITELIST_ON_CONTROLLER) != 0){ 8819 if ((entry->state & LE_WHITELIST_REMOVE_FROM_CONTROLLER) != 0){ 8820 // drop remove request 8821 entry->state = LE_WHITELIST_ON_CONTROLLER; 8822 return ERROR_CODE_SUCCESS; 8823 } else { 8824 // disallow as already on controller 8825 return ERROR_CODE_COMMAND_DISALLOWED; 8826 } 8827 } 8828 8829 // assume scheduled to add 8830 return ERROR_CODE_COMMAND_DISALLOWED; 8831 } 8832 8833 // alloc and add to list 8834 whitelist_entry_t * entry = btstack_memory_whitelist_entry_get(); 8835 if (!entry) return BTSTACK_MEMORY_ALLOC_FAILED; 8836 entry->address_type = address_type; 8837 (void)memcpy(entry->address, address, 6); 8838 entry->state = LE_WHITELIST_ADD_TO_CONTROLLER; 8839 btstack_linked_list_add(&hci_stack->le_whitelist, (btstack_linked_item_t*) entry); 8840 return ERROR_CODE_SUCCESS; 8841 } 8842 8843 static uint8_t hci_whitelist_remove(bd_addr_type_t address_type, const bd_addr_t address){ 8844 btstack_linked_list_iterator_t it; 8845 btstack_linked_list_iterator_init(&it, &hci_stack->le_whitelist); 8846 while (btstack_linked_list_iterator_has_next(&it)){ 8847 whitelist_entry_t * entry = (whitelist_entry_t*) btstack_linked_list_iterator_next(&it); 8848 if (entry->address_type != address_type) { 8849 continue; 8850 } 8851 if (memcmp(entry->address, address, 6) != 0) { 8852 continue; 8853 } 8854 if (entry->state & LE_WHITELIST_ON_CONTROLLER){ 8855 // remove from controller if already present 8856 entry->state |= LE_WHITELIST_REMOVE_FROM_CONTROLLER; 8857 } else { 8858 // directly remove entry from whitelist 8859 btstack_linked_list_iterator_remove(&it); 8860 btstack_memory_whitelist_entry_free(entry); 8861 } 8862 return ERROR_CODE_SUCCESS; 8863 } 8864 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 8865 } 8866 8867 static void hci_whitelist_clear(void){ 8868 btstack_linked_list_iterator_t it; 8869 btstack_linked_list_iterator_init(&it, &hci_stack->le_whitelist); 8870 while (btstack_linked_list_iterator_has_next(&it)){ 8871 whitelist_entry_t * entry = (whitelist_entry_t*) btstack_linked_list_iterator_next(&it); 8872 if (entry->state & LE_WHITELIST_ON_CONTROLLER){ 8873 // remove from controller if already present 8874 entry->state |= LE_WHITELIST_REMOVE_FROM_CONTROLLER; 8875 continue; 8876 } 8877 // directly remove entry from whitelist 8878 btstack_linked_list_iterator_remove(&it); 8879 btstack_memory_whitelist_entry_free(entry); 8880 } 8881 } 8882 8883 /** 8884 * @brief Clear Whitelist 8885 * @return 0 if ok 8886 */ 8887 uint8_t gap_whitelist_clear(void){ 8888 hci_whitelist_clear(); 8889 hci_run(); 8890 return ERROR_CODE_SUCCESS; 8891 } 8892 8893 /** 8894 * @brief Add Device to Whitelist 8895 * @param address_typ 8896 * @param address 8897 * @return 0 if ok 8898 */ 8899 uint8_t gap_whitelist_add(bd_addr_type_t address_type, const bd_addr_t address){ 8900 uint8_t status = hci_whitelist_add(address_type, address); 8901 if (status){ 8902 return status; 8903 } 8904 hci_run(); 8905 return ERROR_CODE_SUCCESS; 8906 } 8907 8908 /** 8909 * @brief Remove Device from Whitelist 8910 * @param address_typ 8911 * @param address 8912 * @return 0 if ok 8913 */ 8914 uint8_t gap_whitelist_remove(bd_addr_type_t address_type, const bd_addr_t address){ 8915 uint8_t status = hci_whitelist_remove(address_type, address); 8916 if (status){ 8917 return status; 8918 } 8919 hci_run(); 8920 return ERROR_CODE_SUCCESS; 8921 } 8922 8923 #ifdef ENABLE_LE_CENTRAL 8924 /** 8925 * @brief Connect with Whitelist 8926 * @note Explicit whitelist management and this connect with whitelist replace deprecated gap_auto_connection_* functions 8927 * @return - if ok 8928 */ 8929 uint8_t gap_connect_with_whitelist(void){ 8930 if (hci_stack->le_connecting_request != LE_CONNECTING_IDLE){ 8931 return ERROR_CODE_COMMAND_DISALLOWED; 8932 } 8933 hci_stack->le_connecting_request = LE_CONNECTING_WHITELIST; 8934 hci_run(); 8935 return ERROR_CODE_SUCCESS; 8936 } 8937 8938 /** 8939 * @brief Auto Connection Establishment - Start Connecting to device 8940 * @param address_typ 8941 * @param address 8942 * @return 0 if ok 8943 */ 8944 uint8_t gap_auto_connection_start(bd_addr_type_t address_type, const bd_addr_t address){ 8945 if (hci_stack->le_connecting_request == LE_CONNECTING_DIRECT){ 8946 return ERROR_CODE_COMMAND_DISALLOWED; 8947 } 8948 8949 uint8_t status = hci_whitelist_add(address_type, address); 8950 if (status == BTSTACK_MEMORY_ALLOC_FAILED) { 8951 return status; 8952 } 8953 8954 hci_stack->le_connecting_request = LE_CONNECTING_WHITELIST; 8955 8956 hci_run(); 8957 return ERROR_CODE_SUCCESS; 8958 } 8959 8960 /** 8961 * @brief Auto Connection Establishment - Stop Connecting to device 8962 * @param address_typ 8963 * @param address 8964 * @return 0 if ok 8965 */ 8966 uint8_t gap_auto_connection_stop(bd_addr_type_t address_type, const bd_addr_t address){ 8967 if (hci_stack->le_connecting_request == LE_CONNECTING_DIRECT){ 8968 return ERROR_CODE_COMMAND_DISALLOWED; 8969 } 8970 8971 hci_whitelist_remove(address_type, address); 8972 if (btstack_linked_list_empty(&hci_stack->le_whitelist)){ 8973 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 8974 } 8975 hci_run(); 8976 return 0; 8977 } 8978 8979 /** 8980 * @brief Auto Connection Establishment - Stop everything 8981 * @note Convenience function to stop all active auto connection attempts 8982 */ 8983 uint8_t gap_auto_connection_stop_all(void){ 8984 if (hci_stack->le_connecting_request == LE_CONNECTING_DIRECT) { 8985 return ERROR_CODE_COMMAND_DISALLOWED; 8986 } 8987 hci_whitelist_clear(); 8988 hci_stack->le_connecting_request = LE_CONNECTING_IDLE; 8989 hci_run(); 8990 return ERROR_CODE_SUCCESS; 8991 } 8992 8993 uint16_t gap_le_connection_interval(hci_con_handle_t con_handle){ 8994 hci_connection_t * conn = hci_connection_for_handle(con_handle); 8995 if (!conn) return 0; 8996 return conn->le_connection_interval; 8997 } 8998 #endif 8999 #endif 9000 9001 #ifdef ENABLE_CLASSIC 9002 /** 9003 * @brief Set Extended Inquiry Response data 9004 * @param eir_data size HCI_EXTENDED_INQUIRY_RESPONSE_DATA_LEN (240) bytes, is not copied make sure memory is accessible during stack startup 9005 * @note has to be done before stack starts up 9006 */ 9007 void gap_set_extended_inquiry_response(const uint8_t * data){ 9008 hci_stack->eir_data = data; 9009 hci_stack->gap_tasks_classic |= GAP_TASK_SET_EIR_DATA; 9010 hci_run(); 9011 } 9012 9013 /** 9014 * @brief Start GAP Classic Inquiry 9015 * @param duration in 1.28s units 9016 * @return 0 if ok 9017 * @events: GAP_EVENT_INQUIRY_RESULT, GAP_EVENT_INQUIRY_COMPLETE 9018 */ 9019 int gap_inquiry_start(uint8_t duration_in_1280ms_units){ 9020 if (hci_stack->state != HCI_STATE_WORKING) return ERROR_CODE_COMMAND_DISALLOWED; 9021 if (hci_stack->inquiry_state != GAP_INQUIRY_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9022 if ((duration_in_1280ms_units < GAP_INQUIRY_DURATION_MIN) || (duration_in_1280ms_units > GAP_INQUIRY_DURATION_MAX)){ 9023 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 9024 } 9025 hci_stack->inquiry_state = duration_in_1280ms_units; 9026 hci_stack->inquiry_max_period_length = 0; 9027 hci_stack->inquiry_min_period_length = 0; 9028 hci_run(); 9029 return 0; 9030 } 9031 9032 uint8_t gap_inquiry_periodic_start(uint8_t duration, uint16_t max_period_length, uint16_t min_period_length){ 9033 if (hci_stack->state != HCI_STATE_WORKING) return ERROR_CODE_COMMAND_DISALLOWED; 9034 if (hci_stack->inquiry_state != GAP_INQUIRY_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9035 if (duration < GAP_INQUIRY_DURATION_MIN) return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 9036 if (duration > GAP_INQUIRY_DURATION_MAX) return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 9037 if (max_period_length < GAP_INQUIRY_MAX_PERIODIC_LEN_MIN) return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS;; 9038 if (min_period_length < GAP_INQUIRY_MIN_PERIODIC_LEN_MIN) return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS;; 9039 9040 hci_stack->inquiry_state = duration; 9041 hci_stack->inquiry_max_period_length = max_period_length; 9042 hci_stack->inquiry_min_period_length = min_period_length; 9043 hci_run(); 9044 return 0; 9045 } 9046 9047 /** 9048 * @brief Stop GAP Classic Inquiry 9049 * @return 0 if ok 9050 */ 9051 int gap_inquiry_stop(void){ 9052 if ((hci_stack->inquiry_state >= GAP_INQUIRY_DURATION_MIN) && (hci_stack->inquiry_state <= GAP_INQUIRY_DURATION_MAX)) { 9053 // emit inquiry complete event, before it even started 9054 uint8_t event[] = { GAP_EVENT_INQUIRY_COMPLETE, 1, 0}; 9055 hci_emit_event(event, sizeof(event), 1); 9056 return 0; 9057 } 9058 switch (hci_stack->inquiry_state){ 9059 case GAP_INQUIRY_STATE_ACTIVE: 9060 hci_stack->inquiry_state = GAP_INQUIRY_STATE_W2_CANCEL; 9061 hci_run(); 9062 return ERROR_CODE_SUCCESS; 9063 case GAP_INQUIRY_STATE_PERIODIC: 9064 hci_stack->inquiry_state = GAP_INQUIRY_STATE_W2_EXIT_PERIODIC; 9065 hci_run(); 9066 return ERROR_CODE_SUCCESS; 9067 default: 9068 return ERROR_CODE_COMMAND_DISALLOWED; 9069 } 9070 } 9071 9072 void gap_inquiry_set_lap(uint32_t lap){ 9073 hci_stack->inquiry_lap = lap; 9074 } 9075 9076 void gap_inquiry_set_scan_activity(uint16_t inquiry_scan_interval, uint16_t inquiry_scan_window){ 9077 hci_stack->inquiry_scan_interval = inquiry_scan_interval; 9078 hci_stack->inquiry_scan_window = inquiry_scan_window; 9079 hci_stack->gap_tasks_classic |= GAP_TASK_WRITE_INQUIRY_SCAN_ACTIVITY; 9080 hci_run(); 9081 } 9082 9083 void gap_inquiry_set_transmit_power_level(int8_t tx_power) 9084 { 9085 hci_stack->inquiry_tx_power_level = tx_power; 9086 hci_stack->gap_tasks_classic |= GAP_TASK_WRITE_INQUIRY_TX_POWER_LEVEL; 9087 hci_run(); 9088 } 9089 9090 9091 /** 9092 * @brief Remote Name Request 9093 * @param addr 9094 * @param page_scan_repetition_mode 9095 * @param clock_offset only used when bit 15 is set 9096 * @events: HCI_EVENT_REMOTE_NAME_REQUEST_COMPLETE 9097 */ 9098 int gap_remote_name_request(const bd_addr_t addr, uint8_t page_scan_repetition_mode, uint16_t clock_offset){ 9099 if (hci_stack->remote_name_state != GAP_REMOTE_NAME_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9100 (void)memcpy(hci_stack->remote_name_addr, addr, 6); 9101 hci_stack->remote_name_page_scan_repetition_mode = page_scan_repetition_mode; 9102 hci_stack->remote_name_clock_offset = clock_offset; 9103 hci_stack->remote_name_state = GAP_REMOTE_NAME_STATE_W2_SEND; 9104 hci_run(); 9105 return 0; 9106 } 9107 9108 static int gap_pairing_set_state_and_run(const bd_addr_t addr, uint8_t state){ 9109 hci_stack->gap_pairing_state = state; 9110 (void)memcpy(hci_stack->gap_pairing_addr, addr, 6); 9111 hci_run(); 9112 return 0; 9113 } 9114 9115 /** 9116 * @brief Legacy Pairing Pin Code Response for binary data / non-strings 9117 * @param addr 9118 * @param pin_data 9119 * @param pin_len 9120 * @return 0 if ok 9121 */ 9122 int gap_pin_code_response_binary(const bd_addr_t addr, const uint8_t * pin_data, uint8_t pin_len){ 9123 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9124 hci_stack->gap_pairing_input.gap_pairing_pin = pin_data; 9125 hci_stack->gap_pairing_pin_len = pin_len; 9126 return gap_pairing_set_state_and_run(addr, GAP_PAIRING_STATE_SEND_PIN); 9127 } 9128 9129 /** 9130 * @brief Legacy Pairing Pin Code Response 9131 * @param addr 9132 * @param pin 9133 * @return 0 if ok 9134 */ 9135 int gap_pin_code_response(const bd_addr_t addr, const char * pin){ 9136 return gap_pin_code_response_binary(addr, (const uint8_t*) pin, (uint8_t) strlen(pin)); 9137 } 9138 9139 /** 9140 * @brief Abort Legacy Pairing 9141 * @param addr 9142 * @param pin 9143 * @return 0 if ok 9144 */ 9145 int gap_pin_code_negative(bd_addr_t addr){ 9146 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9147 return gap_pairing_set_state_and_run(addr, GAP_PAIRING_STATE_SEND_PIN_NEGATIVE); 9148 } 9149 9150 /** 9151 * @brief SSP Passkey Response 9152 * @param addr 9153 * @param passkey 9154 * @return 0 if ok 9155 */ 9156 int gap_ssp_passkey_response(const bd_addr_t addr, uint32_t passkey){ 9157 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9158 hci_stack->gap_pairing_input.gap_pairing_passkey = passkey; 9159 return gap_pairing_set_state_and_run(addr, GAP_PAIRING_STATE_SEND_PASSKEY); 9160 } 9161 9162 /** 9163 * @brief Abort SSP Passkey Entry/Pairing 9164 * @param addr 9165 * @param pin 9166 * @return 0 if ok 9167 */ 9168 int gap_ssp_passkey_negative(const bd_addr_t addr){ 9169 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9170 return gap_pairing_set_state_and_run(addr, GAP_PAIRING_STATE_SEND_PASSKEY_NEGATIVE); 9171 } 9172 9173 /** 9174 * @brief Accept SSP Numeric Comparison 9175 * @param addr 9176 * @param passkey 9177 * @return 0 if ok 9178 */ 9179 int gap_ssp_confirmation_response(const bd_addr_t addr){ 9180 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9181 return gap_pairing_set_state_and_run(addr, GAP_PAIRING_STATE_SEND_CONFIRMATION); 9182 } 9183 9184 /** 9185 * @brief Abort SSP Numeric Comparison/Pairing 9186 * @param addr 9187 * @param pin 9188 * @return 0 if ok 9189 */ 9190 int gap_ssp_confirmation_negative(const bd_addr_t addr){ 9191 if (hci_stack->gap_pairing_state != GAP_PAIRING_STATE_IDLE) return ERROR_CODE_COMMAND_DISALLOWED; 9192 return gap_pairing_set_state_and_run(addr, GAP_PAIRING_STATE_SEND_CONFIRMATION_NEGATIVE); 9193 } 9194 9195 #if defined(ENABLE_EXPLICIT_IO_CAPABILITIES_REPLY) || defined(ENABLE_EXPLICIT_LINK_KEY_REPLY) 9196 static uint8_t gap_set_auth_flag_and_run(const bd_addr_t addr, hci_authentication_flags_t flag){ 9197 hci_connection_t * conn = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 9198 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9199 connectionSetAuthenticationFlags(conn, flag); 9200 hci_run(); 9201 return ERROR_CODE_SUCCESS; 9202 } 9203 #endif 9204 9205 #ifdef ENABLE_EXPLICIT_IO_CAPABILITIES_REPLY 9206 uint8_t gap_ssp_io_capabilities_response(const bd_addr_t addr){ 9207 return gap_set_auth_flag_and_run(addr, AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY); 9208 } 9209 9210 uint8_t gap_ssp_io_capabilities_negative(const bd_addr_t addr){ 9211 return gap_set_auth_flag_and_run(addr, AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY); 9212 } 9213 #endif 9214 9215 #ifdef ENABLE_CLASSIC_PAIRING_OOB 9216 /** 9217 * @brief Report Remote OOB Data 9218 * @param bd_addr 9219 * @param c_192 Simple Pairing Hash C derived from P-192 public key 9220 * @param r_192 Simple Pairing Randomizer derived from P-192 public key 9221 * @param c_256 Simple Pairing Hash C derived from P-256 public key 9222 * @param r_256 Simple Pairing Randomizer derived from P-256 public key 9223 */ 9224 uint8_t gap_ssp_remote_oob_data(const bd_addr_t addr, const uint8_t * c_192, const uint8_t * r_192, const uint8_t * c_256, const uint8_t * r_256){ 9225 hci_connection_t * connection = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 9226 if (connection == NULL) { 9227 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9228 } 9229 connection->classic_oob_c_192 = c_192; 9230 connection->classic_oob_r_192 = r_192; 9231 9232 // ignore P-256 if not supported by us 9233 if (hci_stack->secure_connections_active){ 9234 connection->classic_oob_c_256 = c_256; 9235 connection->classic_oob_r_256 = r_256; 9236 } 9237 9238 return ERROR_CODE_SUCCESS; 9239 } 9240 /** 9241 * @brief Generate new OOB data 9242 * @note OOB data will be provided in GAP_EVENT_LOCAL_OOB_DATA and be used in future pairing procedures 9243 */ 9244 void gap_ssp_generate_oob_data(void){ 9245 hci_stack->classic_read_local_oob_data = true; 9246 hci_run(); 9247 } 9248 9249 #endif 9250 9251 #ifdef ENABLE_EXPLICIT_LINK_KEY_REPLY 9252 uint8_t gap_send_link_key_response(const bd_addr_t addr, link_key_t link_key, link_key_type_t type){ 9253 hci_connection_t * connection = hci_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL); 9254 if (connection == NULL) { 9255 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9256 } 9257 9258 memcpy(connection->link_key, link_key, sizeof(link_key_t)); 9259 connection->link_key_type = type; 9260 9261 return gap_set_auth_flag_and_run(addr, AUTH_FLAG_HANDLE_LINK_KEY_REQUEST); 9262 } 9263 9264 #endif // ENABLE_EXPLICIT_LINK_KEY_REPLY 9265 /** 9266 * @brief Set inquiry mode: standard, with RSSI, with RSSI + Extended Inquiry Results. Has to be called before power on. 9267 * @param inquiry_mode see bluetooth_defines.h 9268 */ 9269 void hci_set_inquiry_mode(inquiry_mode_t inquiry_mode){ 9270 hci_stack->inquiry_mode = inquiry_mode; 9271 } 9272 9273 /** 9274 * @brief Configure Voice Setting for use with SCO data in HSP/HFP 9275 */ 9276 void hci_set_sco_voice_setting(uint16_t voice_setting){ 9277 hci_stack->sco_voice_setting = voice_setting; 9278 } 9279 9280 /** 9281 * @brief Get SCO Voice Setting 9282 * @return current voice setting 9283 */ 9284 uint16_t hci_get_sco_voice_setting(void){ 9285 return hci_stack->sco_voice_setting; 9286 } 9287 9288 static int hci_have_usb_transport(void){ 9289 if (!hci_stack->hci_transport) return 0; 9290 const char * transport_name = hci_stack->hci_transport->name; 9291 if (!transport_name) return 0; 9292 return (transport_name[0] == 'H') && (transport_name[1] == '2'); 9293 } 9294 9295 static uint16_t hci_sco_packet_length_for_payload_length(uint16_t payload_size){ 9296 uint16_t sco_packet_length = 0; 9297 9298 #if defined(ENABLE_SCO_OVER_HCI) || defined (HAVE_SCO_TRANSPORT) 9299 // Transparent = mSBC => 1, CVSD with 16-bit samples requires twice as much bytes 9300 int multiplier; 9301 if (((hci_stack->sco_voice_setting_active & 0x03) != 0x03) && 9302 ((hci_stack->sco_voice_setting_active & 0x20) == 0x20)) { 9303 multiplier = 2; 9304 } else { 9305 multiplier = 1; 9306 } 9307 #endif 9308 9309 #ifdef ENABLE_SCO_OVER_HCI 9310 if (hci_have_usb_transport()){ 9311 // see Core Spec for H2 USB Transfer. 9312 // 3 byte SCO header + 24 bytes per connection 9313 // @note multiple sco connections not supported currently 9314 sco_packet_length = 3 + 24 * multiplier; 9315 } else { 9316 // 3 byte SCO header + SCO packet length over the air 9317 sco_packet_length = 3 + payload_size * multiplier; 9318 // assert that it still fits inside an SCO buffer 9319 if (sco_packet_length > (hci_stack->sco_data_packet_length + 3)){ 9320 sco_packet_length = 3 + hci_stack->sco_data_packet_length; 9321 } 9322 } 9323 #endif 9324 #ifdef HAVE_SCO_TRANSPORT 9325 // 3 byte SCO header + SCO packet length over the air 9326 sco_packet_length = 3 + payload_size * multiplier; 9327 // assert that it still fits inside an SCO buffer 9328 if (sco_packet_length > (hci_stack->sco_data_packet_length + 3)){ 9329 sco_packet_length = 3 + hci_stack->sco_data_packet_length; 9330 } 9331 #endif 9332 return sco_packet_length; 9333 } 9334 9335 uint16_t hci_get_sco_packet_length_for_connection(hci_con_handle_t sco_con_handle){ 9336 hci_connection_t * connection = hci_connection_for_handle(sco_con_handle); 9337 if (connection != NULL){ 9338 return hci_sco_packet_length_for_payload_length(connection->sco_payload_length); 9339 } 9340 return 0; 9341 } 9342 9343 uint16_t hci_get_sco_packet_length(void){ 9344 btstack_linked_list_iterator_t it; 9345 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 9346 while (btstack_linked_list_iterator_has_next(&it)){ 9347 hci_connection_t * connection = (hci_connection_t *) btstack_linked_list_iterator_next(&it); 9348 if ( connection->address_type == BD_ADDR_TYPE_SCO ) { 9349 return hci_sco_packet_length_for_payload_length(connection->sco_payload_length);; 9350 } 9351 } 9352 return 0; 9353 } 9354 9355 /** 9356 * @brief Sets the master/slave policy 9357 * @param policy (0: attempt to become master, 1: let connecting device decide) 9358 */ 9359 void hci_set_master_slave_policy(uint8_t policy){ 9360 hci_stack->master_slave_policy = policy; 9361 } 9362 9363 #endif 9364 9365 HCI_STATE hci_get_state(void){ 9366 return hci_stack->state; 9367 } 9368 9369 #ifdef ENABLE_CLASSIC 9370 void gap_register_classic_connection_filter(int (*accept_callback)(bd_addr_t addr, hci_link_type_t link_type)){ 9371 hci_stack->gap_classic_accept_callback = accept_callback; 9372 } 9373 #endif 9374 9375 /** 9376 * @brief Set callback for Bluetooth Hardware Error 9377 */ 9378 void hci_set_hardware_error_callback(void (*fn)(uint8_t error)){ 9379 hci_stack->hardware_error_callback = fn; 9380 } 9381 9382 void hci_disconnect_all(void){ 9383 btstack_linked_list_iterator_t it; 9384 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 9385 while (btstack_linked_list_iterator_has_next(&it)){ 9386 hci_connection_t * con = (hci_connection_t*) btstack_linked_list_iterator_next(&it); 9387 if (con->state == SENT_DISCONNECT) continue; 9388 con->state = SEND_DISCONNECT; 9389 } 9390 hci_run(); 9391 } 9392 9393 uint16_t hci_get_manufacturer(void){ 9394 return hci_stack->manufacturer; 9395 } 9396 9397 #ifdef ENABLE_BLE 9398 static sm_connection_t * sm_get_connection_for_handle(hci_con_handle_t con_handle){ 9399 hci_connection_t * hci_con = hci_connection_for_handle(con_handle); 9400 if (!hci_con) return NULL; 9401 return &hci_con->sm_connection; 9402 } 9403 9404 // extracted from sm.c to allow enabling of l2cap le data channels without adding sm.c to the build 9405 // without sm.c default values from create_connection_for_bd_addr_and_type() resulg in non-encrypted, not-authenticated 9406 #endif 9407 9408 uint8_t gap_encryption_key_size(hci_con_handle_t con_handle){ 9409 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 9410 if (hci_connection == NULL) return 0; 9411 if (hci_is_le_connection(hci_connection)){ 9412 #ifdef ENABLE_BLE 9413 sm_connection_t * sm_conn = &hci_connection->sm_connection; 9414 if (sm_conn->sm_connection_encrypted) { 9415 return sm_conn->sm_actual_encryption_key_size; 9416 } 9417 #endif 9418 } else { 9419 #ifdef ENABLE_CLASSIC 9420 if ((hci_connection->authentication_flags & AUTH_FLAG_CONNECTION_ENCRYPTED)){ 9421 return hci_connection->encryption_key_size; 9422 } 9423 #endif 9424 } 9425 return 0; 9426 } 9427 9428 bool gap_authenticated(hci_con_handle_t con_handle){ 9429 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 9430 if (hci_connection == NULL) return false; 9431 9432 switch (hci_connection->address_type){ 9433 #ifdef ENABLE_BLE 9434 case BD_ADDR_TYPE_LE_PUBLIC: 9435 case BD_ADDR_TYPE_LE_RANDOM: 9436 if (hci_connection->sm_connection.sm_connection_encrypted == 0) return 0; // unencrypted connection cannot be authenticated 9437 return hci_connection->sm_connection.sm_connection_authenticated != 0; 9438 #endif 9439 #ifdef ENABLE_CLASSIC 9440 case BD_ADDR_TYPE_SCO: 9441 case BD_ADDR_TYPE_ACL: 9442 return gap_authenticated_for_link_key_type(hci_connection->link_key_type); 9443 #endif 9444 default: 9445 return false; 9446 } 9447 } 9448 9449 bool gap_secure_connection(hci_con_handle_t con_handle){ 9450 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 9451 if (hci_connection == NULL) return 0; 9452 9453 switch (hci_connection->address_type){ 9454 #ifdef ENABLE_BLE 9455 case BD_ADDR_TYPE_LE_PUBLIC: 9456 case BD_ADDR_TYPE_LE_RANDOM: 9457 if (hci_connection->sm_connection.sm_connection_encrypted == 0) return false; // unencrypted connection cannot be authenticated 9458 return hci_connection->sm_connection.sm_connection_sc != 0; 9459 #endif 9460 #ifdef ENABLE_CLASSIC 9461 case BD_ADDR_TYPE_SCO: 9462 case BD_ADDR_TYPE_ACL: 9463 return gap_secure_connection_for_link_key_type(hci_connection->link_key_type); 9464 #endif 9465 default: 9466 return false; 9467 } 9468 } 9469 9470 bool gap_bonded(hci_con_handle_t con_handle){ 9471 hci_connection_t * hci_connection = hci_connection_for_handle(con_handle); 9472 if (hci_connection == NULL) return 0; 9473 9474 #ifdef ENABLE_CLASSIC 9475 link_key_t link_key; 9476 link_key_type_t link_key_type; 9477 #endif 9478 switch (hci_connection->address_type){ 9479 #ifdef ENABLE_BLE 9480 case BD_ADDR_TYPE_LE_PUBLIC: 9481 case BD_ADDR_TYPE_LE_RANDOM: 9482 return hci_connection->sm_connection.sm_le_db_index >= 0; 9483 #endif 9484 #ifdef ENABLE_CLASSIC 9485 case BD_ADDR_TYPE_SCO: 9486 case BD_ADDR_TYPE_ACL: 9487 return hci_stack->link_key_db && hci_stack->link_key_db->get_link_key(hci_connection->address, link_key, &link_key_type); 9488 #endif 9489 default: 9490 return false; 9491 } 9492 } 9493 9494 #ifdef ENABLE_BLE 9495 authorization_state_t gap_authorization_state(hci_con_handle_t con_handle){ 9496 sm_connection_t * sm_conn = sm_get_connection_for_handle(con_handle); 9497 if (!sm_conn) return AUTHORIZATION_UNKNOWN; // wrong connection 9498 if (!sm_conn->sm_connection_encrypted) return AUTHORIZATION_UNKNOWN; // unencrypted connection cannot be authorized 9499 if (!sm_conn->sm_connection_authenticated) return AUTHORIZATION_UNKNOWN; // unauthenticatd connection cannot be authorized 9500 return sm_conn->sm_connection_authorization_state; 9501 } 9502 #endif 9503 9504 #ifdef ENABLE_CLASSIC 9505 uint8_t gap_sniff_mode_enter(hci_con_handle_t con_handle, uint16_t sniff_min_interval, uint16_t sniff_max_interval, uint16_t sniff_attempt, uint16_t sniff_timeout){ 9506 hci_connection_t * conn = hci_connection_for_handle(con_handle); 9507 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9508 conn->sniff_min_interval = sniff_min_interval; 9509 conn->sniff_max_interval = sniff_max_interval; 9510 conn->sniff_attempt = sniff_attempt; 9511 conn->sniff_timeout = sniff_timeout; 9512 hci_run(); 9513 return 0; 9514 } 9515 9516 /** 9517 * @brief Exit Sniff mode 9518 * @param con_handle 9519 @ @return 0 if ok 9520 */ 9521 uint8_t gap_sniff_mode_exit(hci_con_handle_t con_handle){ 9522 hci_connection_t * conn = hci_connection_for_handle(con_handle); 9523 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9524 conn->sniff_min_interval = 0xffff; 9525 hci_run(); 9526 return 0; 9527 } 9528 9529 uint8_t gap_sniff_subrating_configure(hci_con_handle_t con_handle, uint16_t max_latency, uint16_t min_remote_timeout, uint16_t min_local_timeout){ 9530 hci_connection_t * conn = hci_connection_for_handle(con_handle); 9531 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9532 conn->sniff_subrating_max_latency = max_latency; 9533 conn->sniff_subrating_min_remote_timeout = min_remote_timeout; 9534 conn->sniff_subrating_min_local_timeout = min_local_timeout; 9535 hci_run(); 9536 return ERROR_CODE_SUCCESS; 9537 } 9538 9539 uint8_t gap_qos_set(hci_con_handle_t con_handle, hci_service_type_t service_type, uint32_t token_rate, uint32_t peak_bandwidth, uint32_t latency, uint32_t delay_variation){ 9540 hci_connection_t * conn = hci_connection_for_handle(con_handle); 9541 if (!conn) return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9542 conn->qos_service_type = service_type; 9543 conn->qos_token_rate = token_rate; 9544 conn->qos_peak_bandwidth = peak_bandwidth; 9545 conn->qos_latency = latency; 9546 conn->qos_delay_variation = delay_variation; 9547 hci_run(); 9548 return ERROR_CODE_SUCCESS; 9549 } 9550 9551 void gap_set_page_scan_activity(uint16_t page_scan_interval, uint16_t page_scan_window){ 9552 hci_stack->new_page_scan_interval = page_scan_interval; 9553 hci_stack->new_page_scan_window = page_scan_window; 9554 hci_stack->gap_tasks_classic |= GAP_TASK_WRITE_PAGE_SCAN_ACTIVITY; 9555 hci_run(); 9556 } 9557 9558 void gap_set_page_scan_type(page_scan_type_t page_scan_type){ 9559 hci_stack->new_page_scan_type = (uint8_t) page_scan_type; 9560 hci_stack->gap_tasks_classic |= GAP_TASK_WRITE_PAGE_SCAN_TYPE; 9561 hci_run(); 9562 } 9563 9564 void gap_set_page_timeout(uint16_t page_timeout){ 9565 hci_stack->page_timeout = page_timeout; 9566 hci_stack->gap_tasks_classic |= GAP_TASK_WRITE_PAGE_TIMEOUT; 9567 hci_run(); 9568 } 9569 9570 #endif 9571 9572 #ifdef ENABLE_LE_PRIVACY_ADDRESS_RESOLUTION 9573 void hci_load_le_device_db_entry_into_resolving_list(uint16_t le_device_db_index){ 9574 if (le_device_db_index >= MAX_NUM_RESOLVING_LIST_ENTRIES) return; 9575 if (le_device_db_index >= le_device_db_max_count()) return; 9576 uint8_t offset = le_device_db_index >> 3; 9577 uint8_t mask = 1 << (le_device_db_index & 7); 9578 hci_stack->le_resolving_list_add_entries[offset] |= mask; 9579 hci_stack->le_resolving_list_set_privacy_mode[offset] |= mask; 9580 if (hci_stack->le_resolving_list_state == LE_RESOLVING_LIST_DONE){ 9581 // note: go back to remove entries, otherwise, a remove + add will skip the add 9582 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_UPDATES_ENTRIES; 9583 } 9584 } 9585 9586 void hci_remove_le_device_db_entry_from_resolving_list(uint16_t le_device_db_index){ 9587 if (le_device_db_index >= MAX_NUM_RESOLVING_LIST_ENTRIES) return; 9588 if (le_device_db_index >= le_device_db_max_count()) return; 9589 uint8_t offset = le_device_db_index >> 3; 9590 uint8_t mask = 1 << (le_device_db_index & 7); 9591 hci_stack->le_resolving_list_remove_entries[offset] |= mask; 9592 if (hci_stack->le_resolving_list_state == LE_RESOLVING_LIST_DONE){ 9593 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_UPDATES_ENTRIES; 9594 } 9595 } 9596 9597 uint8_t gap_load_resolving_list_from_le_device_db(void){ 9598 if (hci_command_supported(SUPPORTED_HCI_COMMAND_LE_SET_ADDRESS_RESOLUTION_ENABLE) == false){ 9599 return ERROR_CODE_UNSUPPORTED_FEATURE_OR_PARAMETER_VALUE; 9600 } 9601 if (hci_stack->le_resolving_list_state != LE_RESOLVING_LIST_SEND_ENABLE_ADDRESS_RESOLUTION){ 9602 // restart le resolving list update 9603 hci_stack->le_resolving_list_state = LE_RESOLVING_LIST_READ_SIZE; 9604 } 9605 return ERROR_CODE_SUCCESS; 9606 } 9607 9608 void gap_set_peer_privacy_mode(le_privacy_mode_t privacy_mode ){ 9609 hci_stack->le_privacy_mode = privacy_mode; 9610 } 9611 #endif 9612 9613 #ifdef ENABLE_BLE 9614 #ifdef ENABLE_LE_CENTRAL 9615 #ifdef ENABLE_LE_EXTENDED_ADVERTISING 9616 9617 static uint8_t hci_periodic_advertiser_list_add(bd_addr_type_t address_type, const bd_addr_t address, uint8_t advertising_sid){ 9618 // check if already in list 9619 btstack_linked_list_iterator_t it; 9620 btstack_linked_list_iterator_init(&it, &hci_stack->le_periodic_advertiser_list); 9621 while (btstack_linked_list_iterator_has_next(&it)) { 9622 periodic_advertiser_list_entry_t *entry = (periodic_advertiser_list_entry_t *) btstack_linked_list_iterator_next(&it); 9623 if (entry->sid != advertising_sid) { 9624 continue; 9625 } 9626 if (entry->address_type != address_type) { 9627 continue; 9628 } 9629 if (memcmp(entry->address, address, 6) != 0) { 9630 continue; 9631 } 9632 // disallow if already scheduled to add 9633 if ((entry->state & LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER) != 0){ 9634 return ERROR_CODE_COMMAND_DISALLOWED; 9635 } 9636 // still on controller, but scheduled to remove -> re-add 9637 entry->state |= LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER; 9638 return ERROR_CODE_SUCCESS; 9639 } 9640 // alloc and add to list 9641 periodic_advertiser_list_entry_t * entry = btstack_memory_periodic_advertiser_list_entry_get(); 9642 if (!entry) return BTSTACK_MEMORY_ALLOC_FAILED; 9643 entry->sid = advertising_sid; 9644 entry->address_type = address_type; 9645 (void)memcpy(entry->address, address, 6); 9646 entry->state = LE_PERIODIC_ADVERTISER_LIST_ENTRY_ADD_TO_CONTROLLER; 9647 btstack_linked_list_add(&hci_stack->le_periodic_advertiser_list, (btstack_linked_item_t*) entry); 9648 return ERROR_CODE_SUCCESS; 9649 } 9650 9651 static uint8_t hci_periodic_advertiser_list_remove(bd_addr_type_t address_type, const bd_addr_t address, uint8_t advertising_sid){ 9652 btstack_linked_list_iterator_t it; 9653 btstack_linked_list_iterator_init(&it, &hci_stack->le_periodic_advertiser_list); 9654 while (btstack_linked_list_iterator_has_next(&it)){ 9655 periodic_advertiser_list_entry_t * entry = (periodic_advertiser_list_entry_t*) btstack_linked_list_iterator_next(&it); 9656 if (entry->sid != advertising_sid) { 9657 continue; 9658 } 9659 if (entry->address_type != address_type) { 9660 continue; 9661 } 9662 if (memcmp(entry->address, address, 6) != 0) { 9663 continue; 9664 } 9665 if (entry->state & LE_PERIODIC_ADVERTISER_LIST_ENTRY_ON_CONTROLLER){ 9666 // remove from controller if already present 9667 entry->state |= LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER; 9668 } else { 9669 // directly remove entry from whitelist 9670 btstack_linked_list_iterator_remove(&it); 9671 btstack_memory_periodic_advertiser_list_entry_free(entry); 9672 } 9673 return ERROR_CODE_SUCCESS; 9674 } 9675 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 9676 } 9677 9678 static void hci_periodic_advertiser_list_clear(void){ 9679 btstack_linked_list_iterator_t it; 9680 btstack_linked_list_iterator_init(&it, &hci_stack->le_periodic_advertiser_list); 9681 while (btstack_linked_list_iterator_has_next(&it)){ 9682 periodic_advertiser_list_entry_t * entry = (periodic_advertiser_list_entry_t*) btstack_linked_list_iterator_next(&it); 9683 if (entry->state & LE_PERIODIC_ADVERTISER_LIST_ENTRY_ON_CONTROLLER){ 9684 // remove from controller if already present 9685 entry->state |= LE_PERIODIC_ADVERTISER_LIST_ENTRY_REMOVE_FROM_CONTROLLER; 9686 continue; 9687 } 9688 // directly remove entry from whitelist 9689 btstack_linked_list_iterator_remove(&it); 9690 btstack_memory_periodic_advertiser_list_entry_free(entry); 9691 } 9692 } 9693 9694 uint8_t gap_periodic_advertiser_list_clear(void){ 9695 hci_periodic_advertiser_list_clear(); 9696 hci_run(); 9697 return ERROR_CODE_SUCCESS; 9698 } 9699 9700 uint8_t gap_periodic_advertiser_list_add(bd_addr_type_t address_type, const bd_addr_t address, uint8_t advertising_sid){ 9701 uint8_t status = hci_periodic_advertiser_list_add(address_type, address, advertising_sid); 9702 if (status){ 9703 return status; 9704 } 9705 hci_run(); 9706 return ERROR_CODE_SUCCESS; 9707 } 9708 9709 uint8_t gap_periodic_advertiser_list_remove(bd_addr_type_t address_type, const bd_addr_t address, uint8_t advertising_sid){ 9710 uint8_t status = hci_periodic_advertiser_list_remove(address_type, address, advertising_sid); 9711 if (status){ 9712 return status; 9713 } 9714 hci_run(); 9715 return ERROR_CODE_SUCCESS; 9716 } 9717 9718 uint8_t gap_periodic_advertising_create_sync(uint8_t options, uint8_t advertising_sid, bd_addr_type_t advertiser_address_type, 9719 bd_addr_t advertiser_address, uint16_t skip, uint16_t sync_timeout, uint8_t sync_cte_type){ 9720 // abort if already active 9721 if (hci_stack->le_periodic_sync_request != LE_CONNECTING_IDLE) { 9722 return ERROR_CODE_COMMAND_DISALLOWED; 9723 } 9724 // store request 9725 hci_stack->le_periodic_sync_request = ((options & 0) != 0) ? LE_CONNECTING_WHITELIST : LE_CONNECTING_DIRECT; 9726 hci_stack->le_periodic_sync_options = options; 9727 hci_stack->le_periodic_sync_advertising_sid = advertising_sid; 9728 hci_stack->le_periodic_sync_advertiser_address_type = advertiser_address_type; 9729 memcpy(hci_stack->le_periodic_sync_advertiser_address, advertiser_address, 6); 9730 hci_stack->le_periodic_sync_skip = skip; 9731 hci_stack->le_periodic_sync_timeout = sync_timeout; 9732 hci_stack->le_periodic_sync_cte_type = sync_cte_type; 9733 9734 hci_run(); 9735 return ERROR_CODE_SUCCESS; 9736 } 9737 9738 uint8_t gap_periodic_advertising_create_sync_cancel(void){ 9739 // abort if not requested 9740 if (hci_stack->le_periodic_sync_request == LE_CONNECTING_IDLE) { 9741 return ERROR_CODE_COMMAND_DISALLOWED; 9742 } 9743 hci_stack->le_periodic_sync_request = LE_CONNECTING_IDLE; 9744 hci_run(); 9745 return ERROR_CODE_SUCCESS; 9746 } 9747 9748 uint8_t gap_periodic_advertising_terminate_sync(uint16_t sync_handle){ 9749 if (hci_stack->le_periodic_terminate_sync_handle != HCI_CON_HANDLE_INVALID){ 9750 return ERROR_CODE_COMMAND_DISALLOWED; 9751 } 9752 hci_stack->le_periodic_terminate_sync_handle = sync_handle; 9753 hci_run(); 9754 return ERROR_CODE_SUCCESS; 9755 } 9756 9757 #endif 9758 #endif 9759 #ifdef ENABLE_LE_ISOCHRONOUS_STREAMS 9760 static hci_iso_stream_t * 9761 hci_iso_stream_create(hci_iso_type_t iso_type, hci_iso_stream_state_t state, uint8_t group_id, uint8_t stream_id) { 9762 hci_iso_stream_t * iso_stream = btstack_memory_hci_iso_stream_get(); 9763 if (iso_stream != NULL){ 9764 iso_stream->iso_type = iso_type; 9765 iso_stream->state = state; 9766 iso_stream->group_id = group_id; 9767 iso_stream->stream_id = stream_id; 9768 iso_stream->cis_handle = HCI_CON_HANDLE_INVALID; 9769 iso_stream->acl_handle = HCI_CON_HANDLE_INVALID; 9770 btstack_linked_list_add(&hci_stack->iso_streams, (btstack_linked_item_t*) iso_stream); 9771 } 9772 return iso_stream; 9773 } 9774 9775 static hci_iso_stream_t * hci_iso_stream_for_con_handle(hci_con_handle_t con_handle){ 9776 btstack_linked_list_iterator_t it; 9777 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 9778 while (btstack_linked_list_iterator_has_next(&it)){ 9779 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 9780 if (iso_stream->cis_handle == con_handle ) { 9781 return iso_stream; 9782 } 9783 } 9784 return NULL; 9785 } 9786 9787 static void hci_iso_stream_finalize(hci_iso_stream_t * iso_stream){ 9788 log_info("hci_iso_stream_finalize con_handle 0x%04x, group_id 0x%02x", iso_stream->cis_handle, iso_stream->group_id); 9789 btstack_linked_list_remove(&hci_stack->iso_streams, (btstack_linked_item_t*) iso_stream); 9790 btstack_memory_hci_iso_stream_free(iso_stream); 9791 } 9792 9793 static void hci_iso_stream_finalize_by_type_and_group_id(hci_iso_type_t iso_type, uint8_t group_id) { 9794 btstack_linked_list_iterator_t it; 9795 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 9796 while (btstack_linked_list_iterator_has_next(&it)){ 9797 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 9798 if ((iso_stream->group_id == group_id) && 9799 (iso_stream->iso_type == iso_type)){ 9800 btstack_linked_list_iterator_remove(&it); 9801 btstack_memory_hci_iso_stream_free(iso_stream); 9802 } 9803 } 9804 } 9805 9806 static void hci_iso_stream_requested_finalize(uint8_t group_id) { 9807 btstack_linked_list_iterator_t it; 9808 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 9809 while (btstack_linked_list_iterator_has_next(&it)){ 9810 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 9811 if ((iso_stream->state == HCI_ISO_STREAM_STATE_REQUESTED ) && 9812 (iso_stream->group_id == group_id)){ 9813 btstack_linked_list_iterator_remove(&it); 9814 btstack_memory_hci_iso_stream_free(iso_stream); 9815 } 9816 } 9817 } 9818 static void hci_iso_stream_requested_confirm(uint8_t big_handle){ 9819 btstack_linked_list_iterator_t it; 9820 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 9821 while (btstack_linked_list_iterator_has_next(&it)){ 9822 hci_iso_stream_t * iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 9823 if ( iso_stream->state == HCI_ISO_STREAM_STATE_REQUESTED ) { 9824 iso_stream->state = HCI_ISO_STREAM_STATE_W4_ESTABLISHED; 9825 } 9826 } 9827 } 9828 9829 static bool hci_iso_sdu_complete(uint8_t * packet, uint16_t size){ 9830 uint8_t sdu_ts_flag = (packet[1] >> 6) & 1; 9831 uint16_t sdu_len_offset = 6 + (sdu_ts_flag * 4); 9832 uint16_t sdu_len = little_endian_read_16(packet, sdu_len_offset) & 0x0fff; 9833 return (sdu_len_offset + 2 + sdu_len) == size; 9834 } 9835 9836 static void hci_iso_packet_handler(uint8_t * packet, uint16_t size){ 9837 if (hci_stack->iso_packet_handler == NULL) { 9838 return; 9839 } 9840 if (size < 4) { 9841 return; 9842 } 9843 9844 // parse header 9845 uint16_t conn_handle_and_flags = little_endian_read_16(packet, 0); 9846 uint16_t iso_data_len = little_endian_read_16(packet, 2); 9847 hci_con_handle_t cis_handle = (hci_con_handle_t) (conn_handle_and_flags & 0xfff); 9848 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(cis_handle); 9849 uint8_t pb_flag = (conn_handle_and_flags >> 12) & 3; 9850 9851 // assert packet is complete 9852 if ((iso_data_len + 4u) != size){ 9853 return; 9854 } 9855 9856 if ((pb_flag & 0x01) == 0){ 9857 if (pb_flag == 0x02){ 9858 // The ISO_Data_Load field contains a header and a complete SDU. 9859 if (hci_iso_sdu_complete(packet, size)) { 9860 (hci_stack->iso_packet_handler)(HCI_ISO_DATA_PACKET, 0, packet, size); 9861 } 9862 } else { 9863 // The ISO_Data_Load field contains a header and the first fragment of a fragmented SDU. 9864 if (iso_stream == NULL){ 9865 return; 9866 } 9867 if (size > HCI_ISO_PAYLOAD_SIZE){ 9868 return; 9869 } 9870 memcpy(iso_stream->reassembly_buffer, packet, size); 9871 // fix pb_flag 9872 iso_stream->reassembly_buffer[1] = (iso_stream->reassembly_buffer[1] & 0xcf) | 0x20; 9873 iso_stream->reassembly_pos = size; 9874 } 9875 } else { 9876 // iso_data_load contains continuation or last fragment of an SDU 9877 uint8_t ts_flag = (conn_handle_and_flags >> 14) & 1; 9878 if (ts_flag != 0){ 9879 return; 9880 } 9881 // append fragment 9882 if (iso_stream == NULL){ 9883 return; 9884 } 9885 if (iso_stream->reassembly_pos == 0){ 9886 return; 9887 } 9888 if ((iso_stream->reassembly_pos + iso_data_len) > size){ 9889 // reset reassembly buffer 9890 iso_stream->reassembly_pos = 0; 9891 return; 9892 } 9893 memcpy(&iso_stream->reassembly_buffer[iso_stream->reassembly_pos], &packet[4], iso_data_len); 9894 iso_stream->reassembly_pos += iso_data_len; 9895 9896 // deliver if last fragment and SDU complete 9897 if (pb_flag == 0x03){ 9898 if (hci_iso_sdu_complete(iso_stream->reassembly_buffer, iso_stream->reassembly_pos)){ 9899 (hci_stack->iso_packet_handler)(HCI_ISO_DATA_PACKET, 0, iso_stream->reassembly_buffer, iso_stream->reassembly_pos); 9900 } 9901 iso_stream->reassembly_pos = 0; 9902 } 9903 } 9904 } 9905 9906 static void hci_emit_big_created(const le_audio_big_t * big, uint8_t status){ 9907 uint8_t event [6 + (MAX_NR_BIS * 2)]; 9908 uint16_t pos = 0; 9909 event[pos++] = HCI_EVENT_META_GAP; 9910 event[pos++] = 4 + (2 * big->num_bis); 9911 event[pos++] = GAP_SUBEVENT_BIG_CREATED; 9912 event[pos++] = status; 9913 event[pos++] = big->big_handle; 9914 event[pos++] = big->num_bis; 9915 uint8_t i; 9916 for (i=0;i<big->num_bis;i++){ 9917 little_endian_store_16(event, pos, big->bis_con_handles[i]); 9918 pos += 2; 9919 } 9920 hci_emit_event(event, pos, 0); 9921 } 9922 9923 static void hci_emit_cig_created(const le_audio_cig_t * cig, uint8_t status){ 9924 uint8_t event [6 + (MAX_NR_CIS * 2)]; 9925 uint16_t pos = 0; 9926 event[pos++] = HCI_EVENT_META_GAP; 9927 event[pos++] = 4 + (2 * cig->num_cis); 9928 event[pos++] = GAP_SUBEVENT_CIG_CREATED; 9929 event[pos++] = status; 9930 event[pos++] = cig->cig_id; 9931 event[pos++] = cig->num_cis; 9932 uint8_t i; 9933 for (i=0;i<cig->num_cis;i++){ 9934 little_endian_store_16(event, pos, cig->cis_con_handles[i]); 9935 pos += 2; 9936 } 9937 hci_emit_event(event, pos, 0); 9938 } 9939 9940 static uint16_t hci_setup_cis_created(uint8_t * event, hci_iso_stream_t * iso_stream, uint8_t status) { 9941 uint16_t pos = 0; 9942 event[pos++] = HCI_EVENT_META_GAP; 9943 event[pos++] = 8; 9944 event[pos++] = GAP_SUBEVENT_CIS_CREATED; 9945 event[pos++] = status; 9946 event[pos++] = iso_stream->group_id; 9947 event[pos++] = iso_stream->stream_id; 9948 little_endian_store_16(event, pos, iso_stream->cis_handle); 9949 pos += 2; 9950 little_endian_store_16(event, pos, iso_stream->acl_handle); 9951 pos += 2; 9952 little_endian_store_16(event, pos, iso_stream->iso_interval_1250us); 9953 pos += 2; 9954 event[pos++] = iso_stream->number_of_subevents; 9955 event[pos++] = iso_stream->burst_number_c_to_p; 9956 event[pos++] = iso_stream->burst_number_p_to_c; 9957 event[pos++] = iso_stream->flush_timeout_c_to_p; 9958 event[pos++] = iso_stream->flush_timeout_p_to_c; 9959 return pos; 9960 } 9961 9962 // emits GAP_SUBEVENT_CIS_CREATED after calling hci_iso_finalize 9963 static void hci_cis_handle_created(hci_iso_stream_t * iso_stream, uint8_t status){ 9964 // cache data before finalizing struct 9965 uint8_t event [17]; 9966 uint16_t pos = hci_setup_cis_created(event, iso_stream, status); 9967 btstack_assert(pos <= sizeof(event)); 9968 if (status != ERROR_CODE_SUCCESS){ 9969 hci_iso_stream_finalize(iso_stream); 9970 } 9971 hci_emit_event(event, pos, 0); 9972 } 9973 9974 static void hci_emit_big_terminated(const le_audio_big_t * big){ 9975 uint8_t event [4]; 9976 uint16_t pos = 0; 9977 event[pos++] = HCI_EVENT_META_GAP; 9978 event[pos++] = 2; 9979 event[pos++] = GAP_SUBEVENT_BIG_TERMINATED; 9980 event[pos++] = big->big_handle; 9981 hci_emit_event(event, pos, 0); 9982 } 9983 9984 static void hci_emit_big_sync_created(const le_audio_big_sync_t * big_sync, uint8_t status){ 9985 uint8_t event [6 + (MAX_NR_BIS * 2)]; 9986 uint16_t pos = 0; 9987 event[pos++] = HCI_EVENT_META_GAP; 9988 event[pos++] = 4; 9989 event[pos++] = GAP_SUBEVENT_BIG_SYNC_CREATED; 9990 event[pos++] = status; 9991 event[pos++] = big_sync->big_handle; 9992 event[pos++] = big_sync->num_bis; 9993 uint8_t i; 9994 for (i=0;i<big_sync->num_bis;i++){ 9995 little_endian_store_16(event, pos, big_sync->bis_con_handles[i]); 9996 pos += 2; 9997 } 9998 hci_emit_event(event, pos, 0); 9999 } 10000 10001 static void hci_emit_big_sync_stopped(uint8_t big_handle){ 10002 uint8_t event [4]; 10003 uint16_t pos = 0; 10004 event[pos++] = HCI_EVENT_META_GAP; 10005 event[pos++] = 2; 10006 event[pos++] = GAP_SUBEVENT_BIG_SYNC_STOPPED; 10007 event[pos++] = big_handle; 10008 hci_emit_event(event, pos, 0); 10009 } 10010 10011 static void hci_emit_bis_can_send_now(const le_audio_big_t *big, uint8_t bis_index) { 10012 uint8_t event[6]; 10013 uint16_t pos = 0; 10014 event[pos++] = HCI_EVENT_BIS_CAN_SEND_NOW; 10015 event[pos++] = sizeof(event) - 2; 10016 event[pos++] = big->big_handle; 10017 event[pos++] = bis_index; 10018 little_endian_store_16(event, pos, big->bis_con_handles[bis_index]); 10019 hci_emit_event(&event[0], sizeof(event), 0); // don't dump 10020 } 10021 10022 static void hci_emit_cis_can_send_now(hci_con_handle_t cis_con_handle) { 10023 uint8_t event[4]; 10024 uint16_t pos = 0; 10025 event[pos++] = HCI_EVENT_CIS_CAN_SEND_NOW; 10026 event[pos++] = sizeof(event) - 2; 10027 little_endian_store_16(event, pos, cis_con_handle); 10028 hci_emit_event(&event[0], sizeof(event), 0); // don't dump 10029 } 10030 10031 static le_audio_big_t * hci_big_for_handle(uint8_t big_handle){ 10032 btstack_linked_list_iterator_t it; 10033 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_bigs); 10034 while (btstack_linked_list_iterator_has_next(&it)){ 10035 le_audio_big_t * big = (le_audio_big_t *) btstack_linked_list_iterator_next(&it); 10036 if ( big->big_handle == big_handle ) { 10037 return big; 10038 } 10039 } 10040 return NULL; 10041 } 10042 10043 static le_audio_big_sync_t * hci_big_sync_for_handle(uint8_t big_handle){ 10044 btstack_linked_list_iterator_t it; 10045 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_big_syncs); 10046 while (btstack_linked_list_iterator_has_next(&it)){ 10047 le_audio_big_sync_t * big_sync = (le_audio_big_sync_t *) btstack_linked_list_iterator_next(&it); 10048 if ( big_sync->big_handle == big_handle ) { 10049 return big_sync; 10050 } 10051 } 10052 return NULL; 10053 } 10054 10055 void hci_set_num_iso_packets_to_queue(uint8_t num_packets){ 10056 hci_stack->iso_packets_to_queue = num_packets; 10057 } 10058 10059 static le_audio_cig_t * hci_cig_for_id(uint8_t cig_id){ 10060 btstack_linked_list_iterator_t it; 10061 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_cigs); 10062 while (btstack_linked_list_iterator_has_next(&it)){ 10063 le_audio_cig_t * cig = (le_audio_cig_t *) btstack_linked_list_iterator_next(&it); 10064 if ( cig->cig_id == cig_id ) { 10065 return cig; 10066 } 10067 } 10068 return NULL; 10069 } 10070 10071 static void hci_iso_notify_can_send_now(void){ 10072 10073 // BIG 10074 10075 btstack_linked_list_iterator_t it; 10076 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_bigs); 10077 while (btstack_linked_list_iterator_has_next(&it)){ 10078 le_audio_big_t * big = (le_audio_big_t *) btstack_linked_list_iterator_next(&it); 10079 // track number completed packet timestamps 10080 if (big->num_completed_timestamp_current_valid){ 10081 big->num_completed_timestamp_current_valid = false; 10082 if (big->num_completed_timestamp_previous_valid){ 10083 // detect delayed sending of all BIS: tolerate up to 50% delayed event handling 10084 uint32_t iso_interval_missed_threshold_ms = big->params->sdu_interval_us * 3 / 2000; 10085 int32_t num_completed_timestamp_delta_ms = btstack_time_delta(big->num_completed_timestamp_current_ms, 10086 big->num_completed_timestamp_previous_ms); 10087 if (num_completed_timestamp_delta_ms > iso_interval_missed_threshold_ms){ 10088 // to catch up, skip packet on all BIS 10089 uint8_t i; 10090 for (i=0;i<big->num_bis;i++){ 10091 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(big->bis_con_handles[i]); 10092 if (iso_stream){ 10093 iso_stream->num_packets_to_skip++; 10094 } 10095 } 10096 } 10097 } 10098 big->num_completed_timestamp_previous_valid = true; 10099 big->num_completed_timestamp_previous_ms = big->num_completed_timestamp_current_ms; 10100 } 10101 10102 if (big->can_send_now_requested){ 10103 // check if no outgoing iso packets pending and no can send now have to be emitted 10104 uint8_t i; 10105 bool can_send = true; 10106 uint8_t num_iso_queued_minimum = 0; 10107 for (i=0;i<big->num_bis;i++){ 10108 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(big->bis_con_handles[i]); 10109 if (iso_stream == NULL) continue; 10110 // handle case where individual ISO packet was sent too late: 10111 // for each additionally queued packet, a new one needs to get skipped 10112 if (i==0){ 10113 num_iso_queued_minimum = iso_stream->num_packets_sent; 10114 } else if (iso_stream->num_packets_sent > num_iso_queued_minimum){ 10115 uint8_t num_packets_to_skip = iso_stream->num_packets_sent - num_iso_queued_minimum; 10116 iso_stream->num_packets_to_skip += num_packets_to_skip; 10117 iso_stream->num_packets_sent -= num_packets_to_skip; 10118 } 10119 // check if we can send now 10120 if ((iso_stream->num_packets_sent >= hci_stack->iso_packets_to_queue) || (iso_stream->emit_ready_to_send)){ 10121 can_send = false; 10122 break; 10123 } 10124 } 10125 if (can_send){ 10126 // propagate can send now to individual streams 10127 big->can_send_now_requested = false; 10128 for (i=0;i<big->num_bis;i++){ 10129 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(big->bis_con_handles[i]); 10130 iso_stream->emit_ready_to_send = true; 10131 } 10132 } 10133 } 10134 } 10135 10136 if (hci_stack->hci_packet_buffer_reserved) return; 10137 10138 btstack_linked_list_iterator_init(&it, &hci_stack->le_audio_bigs); 10139 while (btstack_linked_list_iterator_has_next(&it)){ 10140 le_audio_big_t * big = (le_audio_big_t *) btstack_linked_list_iterator_next(&it); 10141 // report bis ready 10142 uint8_t i; 10143 for (i=0;i<big->num_bis;i++){ 10144 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(big->bis_con_handles[i]); 10145 if ((iso_stream != NULL) && iso_stream->emit_ready_to_send){ 10146 iso_stream->emit_ready_to_send = false; 10147 hci_emit_bis_can_send_now(big, i); 10148 break; 10149 } 10150 } 10151 } 10152 10153 // CIS 10154 btstack_linked_list_iterator_init(&it, &hci_stack->iso_streams); 10155 while (btstack_linked_list_iterator_has_next(&it)) { 10156 hci_iso_stream_t *iso_stream = (hci_iso_stream_t *) btstack_linked_list_iterator_next(&it); 10157 if ((iso_stream->can_send_now_requested) && 10158 (iso_stream->num_packets_sent < hci_stack->iso_packets_to_queue)){ 10159 iso_stream->can_send_now_requested = false; 10160 hci_emit_cis_can_send_now(iso_stream->cis_handle); 10161 } 10162 } 10163 } 10164 10165 uint8_t gap_big_create(le_audio_big_t * storage, le_audio_big_params_t * big_params){ 10166 if (hci_big_for_handle(big_params->big_handle) != NULL){ 10167 return ERROR_CODE_ACL_CONNECTION_ALREADY_EXISTS; 10168 } 10169 if (big_params->num_bis == 0){ 10170 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 10171 } 10172 if (big_params->num_bis > MAX_NR_BIS){ 10173 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 10174 } 10175 10176 // reserve ISO Streams 10177 uint8_t i; 10178 uint8_t status = ERROR_CODE_SUCCESS; 10179 for (i=0;i<big_params->num_bis;i++){ 10180 hci_iso_stream_t * iso_stream = hci_iso_stream_create(HCI_ISO_TYPE_BIS, HCI_ISO_STREAM_STATE_REQUESTED, big_params->big_handle, i); 10181 if (iso_stream == NULL) { 10182 status = ERROR_CODE_MEMORY_CAPACITY_EXCEEDED; 10183 break; 10184 } 10185 } 10186 10187 // free structs on error 10188 if (status != ERROR_CODE_SUCCESS){ 10189 hci_iso_stream_finalize_by_type_and_group_id(HCI_ISO_TYPE_BIS, big_params->big_handle); 10190 return status; 10191 } 10192 10193 le_audio_big_t * big = storage; 10194 big->big_handle = big_params->big_handle; 10195 big->params = big_params; 10196 big->state = LE_AUDIO_BIG_STATE_CREATE; 10197 big->num_bis = big_params->num_bis; 10198 btstack_linked_list_add(&hci_stack->le_audio_bigs, (btstack_linked_item_t *) big); 10199 10200 hci_run(); 10201 10202 return ERROR_CODE_SUCCESS; 10203 } 10204 10205 uint8_t gap_big_sync_create(le_audio_big_sync_t * storage, le_audio_big_sync_params_t * big_sync_params){ 10206 if (hci_big_sync_for_handle(big_sync_params->big_handle) != NULL){ 10207 return ERROR_CODE_ACL_CONNECTION_ALREADY_EXISTS; 10208 } 10209 if (big_sync_params->num_bis == 0){ 10210 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 10211 } 10212 if (big_sync_params->num_bis > MAX_NR_BIS){ 10213 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 10214 } 10215 10216 le_audio_big_sync_t * big_sync = storage; 10217 big_sync->big_handle = big_sync_params->big_handle; 10218 big_sync->params = big_sync_params; 10219 big_sync->state = LE_AUDIO_BIG_STATE_CREATE; 10220 big_sync->num_bis = big_sync_params->num_bis; 10221 btstack_linked_list_add(&hci_stack->le_audio_big_syncs, (btstack_linked_item_t *) big_sync); 10222 10223 hci_run(); 10224 10225 return ERROR_CODE_SUCCESS; 10226 } 10227 10228 uint8_t gap_big_terminate(uint8_t big_handle){ 10229 le_audio_big_t * big = hci_big_for_handle(big_handle); 10230 if (big == NULL){ 10231 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10232 } 10233 switch (big->state){ 10234 case LE_AUDIO_BIG_STATE_CREATE: 10235 btstack_linked_list_remove(&hci_stack->le_audio_bigs, (btstack_linked_item_t *) big); 10236 hci_emit_big_terminated(big); 10237 break; 10238 case LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH: 10239 big->state = LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH_THEN_TERMINATE; 10240 break; 10241 case LE_AUDIO_BIG_STATE_W4_ESTABLISHED: 10242 case LE_AUDIO_BIG_STATE_SETUP_ISO_PATH: 10243 case LE_AUDIO_BIG_STATE_ACTIVE: 10244 big->state = LE_AUDIO_BIG_STATE_TERMINATE; 10245 hci_run(); 10246 break; 10247 default: 10248 return ERROR_CODE_COMMAND_DISALLOWED; 10249 } 10250 return ERROR_CODE_SUCCESS; 10251 } 10252 10253 uint8_t gap_big_sync_terminate(uint8_t big_handle){ 10254 le_audio_big_sync_t * big_sync = hci_big_sync_for_handle(big_handle); 10255 if (big_sync == NULL){ 10256 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10257 } 10258 switch (big_sync->state){ 10259 case LE_AUDIO_BIG_STATE_CREATE: 10260 btstack_linked_list_remove(&hci_stack->le_audio_big_syncs, (btstack_linked_item_t *) big_sync); 10261 hci_emit_big_sync_stopped(big_handle); 10262 break; 10263 case LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH: 10264 big_sync->state = LE_AUDIO_BIG_STATE_W4_SETUP_ISO_PATH_THEN_TERMINATE; 10265 break; 10266 case LE_AUDIO_BIG_STATE_W4_ESTABLISHED: 10267 case LE_AUDIO_BIG_STATE_SETUP_ISO_PATH: 10268 case LE_AUDIO_BIG_STATE_ACTIVE: 10269 big_sync->state = LE_AUDIO_BIG_STATE_TERMINATE; 10270 hci_run(); 10271 break; 10272 default: 10273 return ERROR_CODE_COMMAND_DISALLOWED; 10274 } 10275 return ERROR_CODE_SUCCESS; 10276 } 10277 10278 uint8_t hci_request_bis_can_send_now_events(uint8_t big_handle){ 10279 le_audio_big_t * big = hci_big_for_handle(big_handle); 10280 if (big == NULL){ 10281 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10282 } 10283 if (big->state != LE_AUDIO_BIG_STATE_ACTIVE){ 10284 return ERROR_CODE_COMMAND_DISALLOWED; 10285 } 10286 big->can_send_now_requested = true; 10287 hci_iso_notify_can_send_now(); 10288 return ERROR_CODE_SUCCESS; 10289 } 10290 10291 uint8_t hci_request_cis_can_send_now_events(hci_con_handle_t cis_con_handle){ 10292 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(cis_con_handle); 10293 if (iso_stream == NULL){ 10294 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10295 } 10296 if ((iso_stream->iso_type != HCI_ISO_TYPE_CIS) && (iso_stream->state != HCI_ISO_STREAM_STATE_ESTABLISHED)) { 10297 return ERROR_CODE_COMMAND_DISALLOWED; 10298 } 10299 iso_stream->can_send_now_requested = true; 10300 hci_iso_notify_can_send_now(); 10301 return ERROR_CODE_SUCCESS; 10302 } 10303 10304 uint8_t gap_cig_create(le_audio_cig_t * storage, le_audio_cig_params_t * cig_params){ 10305 if (hci_cig_for_id(cig_params->cig_id) != NULL){ 10306 return ERROR_CODE_ACL_CONNECTION_ALREADY_EXISTS; 10307 } 10308 if (cig_params->num_cis == 0){ 10309 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 10310 } 10311 if (cig_params->num_cis > MAX_NR_BIS){ 10312 return ERROR_CODE_INVALID_HCI_COMMAND_PARAMETERS; 10313 } 10314 10315 // reserve ISO Streams 10316 uint8_t i; 10317 uint8_t status = ERROR_CODE_SUCCESS; 10318 for (i=0;i<cig_params->num_cis;i++){ 10319 hci_iso_stream_t * iso_stream = hci_iso_stream_create(HCI_ISO_TYPE_CIS,HCI_ISO_STREAM_STATE_REQUESTED, cig_params->cig_id, i); 10320 if (iso_stream == NULL) { 10321 status = ERROR_CODE_MEMORY_CAPACITY_EXCEEDED; 10322 break; 10323 } 10324 } 10325 10326 // free structs on error 10327 if (status != ERROR_CODE_SUCCESS){ 10328 hci_iso_stream_finalize_by_type_and_group_id(HCI_ISO_TYPE_CIS, cig_params->cig_id); 10329 return status; 10330 } 10331 10332 le_audio_cig_t * cig = storage; 10333 cig->cig_id = cig_params->cig_id; 10334 cig->num_cis = cig_params->num_cis; 10335 cig->params = cig_params; 10336 cig->state = LE_AUDIO_CIG_STATE_CREATE; 10337 for (i=0;i<cig->num_cis;i++){ 10338 cig->cis_con_handles[i] = HCI_CON_HANDLE_INVALID; 10339 cig->acl_con_handles[i] = HCI_CON_HANDLE_INVALID; 10340 cig->cis_setup_active[i] = false; 10341 cig->cis_established[i] = false; 10342 } 10343 btstack_linked_list_add(&hci_stack->le_audio_cigs, (btstack_linked_item_t *) cig); 10344 10345 hci_run(); 10346 10347 return ERROR_CODE_SUCCESS; 10348 } 10349 10350 uint8_t gap_cis_create(uint8_t cig_handle, hci_con_handle_t cis_con_handles [], hci_con_handle_t acl_con_handles []){ 10351 le_audio_cig_t * cig = hci_cig_for_id(cig_handle); 10352 if (cig == NULL){ 10353 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10354 } 10355 10356 if (cig->state != LE_AUDIO_CIG_STATE_W4_CIS_REQUEST){ 10357 return ERROR_CODE_COMMAND_DISALLOWED; 10358 } 10359 10360 // store ACL Connection Handles 10361 uint8_t i; 10362 for (i=0;i<cig->num_cis;i++){ 10363 // check that all con handles exist and store 10364 hci_con_handle_t cis_handle = cis_con_handles[i]; 10365 if (cis_handle == HCI_CON_HANDLE_INVALID){ 10366 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10367 } 10368 uint8_t j; 10369 bool found = false; 10370 for (j=0;j<cig->num_cis;j++){ 10371 if (cig->cis_con_handles[j] == cis_handle){ 10372 cig->acl_con_handles[j] = acl_con_handles[j]; 10373 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(cis_handle); 10374 btstack_assert(iso_stream != NULL); 10375 iso_stream->acl_handle = acl_con_handles[j]; 10376 found = true; 10377 break; 10378 } 10379 } 10380 if (!found){ 10381 return ERROR_CODE_UNKNOWN_CONNECTION_IDENTIFIER; 10382 } 10383 } 10384 10385 cig->state = LE_AUDIO_CIG_STATE_CREATE_CIS; 10386 hci_run(); 10387 10388 return ERROR_CODE_SUCCESS; 10389 } 10390 10391 static uint8_t hci_cis_accept_or_reject(hci_con_handle_t cis_handle, hci_iso_stream_state_t state){ 10392 hci_iso_stream_t * iso_stream = hci_iso_stream_for_con_handle(cis_handle); 10393 if (iso_stream == NULL){ 10394 // if we got a CIS Request but fail to allocate a hci_iso_stream_t object, we won't find it here 10395 return ERROR_CODE_MEMORY_CAPACITY_EXCEEDED; 10396 } 10397 10398 // set next state and continue 10399 iso_stream->state = state; 10400 hci_run(); 10401 return ERROR_CODE_SUCCESS; 10402 } 10403 10404 uint8_t gap_cis_accept(hci_con_handle_t cis_con_handle){ 10405 return hci_cis_accept_or_reject(cis_con_handle, HCI_ISO_STREAM_W2_ACCEPT); 10406 } 10407 10408 uint8_t gap_cis_reject(hci_con_handle_t cis_con_handle){ 10409 return hci_cis_accept_or_reject(cis_con_handle, HCI_ISO_STREAM_W2_REJECT); 10410 } 10411 10412 10413 #endif 10414 #endif /* ENABLE_BLE */ 10415 10416 #ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION 10417 void hci_setup_test_connections_fuzz(void){ 10418 hci_connection_t * conn; 10419 10420 // default address: 66:55:44:33:00:01 10421 bd_addr_t addr = { 0x66, 0x55, 0x44, 0x33, 0x00, 0x00}; 10422 10423 // setup Controller info 10424 hci_stack->num_cmd_packets = 255; 10425 hci_stack->acl_packets_total_num = 255; 10426 10427 // setup incoming Classic ACL connection with con handle 0x0001, 66:55:44:33:22:01 10428 addr[5] = 0x01; 10429 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL, HCI_ROLE_SLAVE); 10430 conn->con_handle = addr[5]; 10431 conn->state = RECEIVED_CONNECTION_REQUEST; 10432 conn->sm_connection.sm_role = HCI_ROLE_SLAVE; 10433 10434 // setup incoming Classic SCO connection with con handle 0x0002 10435 addr[5] = 0x02; 10436 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_SCO, HCI_ROLE_SLAVE); 10437 conn->con_handle = addr[5]; 10438 conn->state = RECEIVED_CONNECTION_REQUEST; 10439 conn->sm_connection.sm_role = HCI_ROLE_SLAVE; 10440 10441 // setup ready Classic ACL connection with con handle 0x0003 10442 addr[5] = 0x03; 10443 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_ACL, HCI_ROLE_SLAVE); 10444 conn->con_handle = addr[5]; 10445 conn->state = OPEN; 10446 conn->sm_connection.sm_role = HCI_ROLE_SLAVE; 10447 10448 // setup ready Classic SCO connection with con handle 0x0004 10449 addr[5] = 0x04; 10450 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_SCO, HCI_ROLE_SLAVE); 10451 conn->con_handle = addr[5]; 10452 conn->state = OPEN; 10453 conn->sm_connection.sm_role = HCI_ROLE_SLAVE; 10454 10455 // setup ready LE ACL connection with con handle 0x005 and public address 10456 addr[5] = 0x05; 10457 conn = create_connection_for_bd_addr_and_type(addr, BD_ADDR_TYPE_LE_PUBLIC, HCI_ROLE_SLAVE); 10458 conn->con_handle = addr[5]; 10459 conn->state = OPEN; 10460 conn->sm_connection.sm_role = HCI_ROLE_SLAVE; 10461 conn->sm_connection.sm_connection_encrypted = 1; 10462 } 10463 10464 void hci_free_connections_fuzz(void){ 10465 btstack_linked_list_iterator_t it; 10466 btstack_linked_list_iterator_init(&it, &hci_stack->connections); 10467 while (btstack_linked_list_iterator_has_next(&it)){ 10468 hci_connection_t * con = (hci_connection_t*) btstack_linked_list_iterator_next(&it); 10469 btstack_linked_list_iterator_remove(&it); 10470 btstack_memory_hci_connection_free(con); 10471 } 10472 } 10473 void hci_simulate_working_fuzz(void){ 10474 hci_stack->le_scanning_param_update = false; 10475 hci_init_done(); 10476 hci_stack->num_cmd_packets = 255; 10477 } 10478 #endif 10479