blob: 6ba979400eab8e576a8504a56e554a43c5c6a615 [file] [log] [blame]
/*
*
* BlueZ - Bluetooth protocol stack for Linux
*
* Copyright (C) 2006-2010 Nokia Corporation
* Copyright (C) 2004-2010 Marcel Holtmann <marcel@holtmann.org>
*
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*
*/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <stdlib.h>
#include <stdio.h>
#include <stdint.h>
#include <errno.h>
#include <unistd.h>
#include <assert.h>
#include <signal.h>
#include <netinet/in.h>
#include <bluetooth/bluetooth.h>
#include <bluetooth/sdp.h>
#include <bluetooth/sdp_lib.h>
#include <glib.h>
#include <dbus/dbus.h>
#include "log.h"
#include "../src/adapter.h"
#include "../src/manager.h"
#include "../src/device.h"
#include "device.h"
#include "manager.h"
#include "control.h"
#include "avdtp.h"
#include "glib-helper.h"
#include "btio.h"
#include "sink.h"
#include "source.h"
#define AVDTP_PSM 25
#define MAX_SEID 0x3E
#define AVDTP_DISCOVER 0x01
#define AVDTP_GET_CAPABILITIES 0x02
#define AVDTP_SET_CONFIGURATION 0x03
#define AVDTP_GET_CONFIGURATION 0x04
#define AVDTP_RECONFIGURE 0x05
#define AVDTP_OPEN 0x06
#define AVDTP_START 0x07
#define AVDTP_CLOSE 0x08
#define AVDTP_SUSPEND 0x09
#define AVDTP_ABORT 0x0A
#define AVDTP_SECURITY_CONTROL 0x0B
#define AVDTP_GET_ALL_CAPABILITIES 0x0C
#define AVDTP_DELAY_REPORT 0x0D
#define AVDTP_PKT_TYPE_SINGLE 0x00
#define AVDTP_PKT_TYPE_START 0x01
#define AVDTP_PKT_TYPE_CONTINUE 0x02
#define AVDTP_PKT_TYPE_END 0x03
#define AVDTP_MSG_TYPE_COMMAND 0x00
#define AVDTP_MSG_TYPE_GEN_REJECT 0x01
#define AVDTP_MSG_TYPE_ACCEPT 0x02
#define AVDTP_MSG_TYPE_REJECT 0x03
#define REQ_TIMEOUT 4
#define ABORT_TIMEOUT 2
#define DISCONNECT_TIMEOUT 1
#define STREAM_TIMEOUT 20
#if __BYTE_ORDER == __LITTLE_ENDIAN
struct avdtp_common_header {
uint8_t message_type:2;
uint8_t packet_type:2;
uint8_t transaction:4;
} __attribute__ ((packed));
struct avdtp_single_header {
uint8_t message_type:2;
uint8_t packet_type:2;
uint8_t transaction:4;
uint8_t signal_id:6;
uint8_t rfa0:2;
} __attribute__ ((packed));
struct avdtp_start_header {
uint8_t message_type:2;
uint8_t packet_type:2;
uint8_t transaction:4;
uint8_t no_of_packets;
uint8_t signal_id:6;
uint8_t rfa0:2;
} __attribute__ ((packed));
struct avdtp_continue_header {
uint8_t message_type:2;
uint8_t packet_type:2;
uint8_t transaction:4;
} __attribute__ ((packed));
struct seid_info {
uint8_t rfa0:1;
uint8_t inuse:1;
uint8_t seid:6;
uint8_t rfa2:3;
uint8_t type:1;
uint8_t media_type:4;
} __attribute__ ((packed));
struct seid {
uint8_t rfa0:2;
uint8_t seid:6;
} __attribute__ ((packed));
#elif __BYTE_ORDER == __BIG_ENDIAN
struct avdtp_common_header {
uint8_t transaction:4;
uint8_t packet_type:2;
uint8_t message_type:2;
} __attribute__ ((packed));
struct avdtp_single_header {
uint8_t transaction:4;
uint8_t packet_type:2;
uint8_t message_type:2;
uint8_t rfa0:2;
uint8_t signal_id:6;
} __attribute__ ((packed));
struct avdtp_start_header {
uint8_t transaction:4;
uint8_t packet_type:2;
uint8_t message_type:2;
uint8_t no_of_packets;
uint8_t rfa0:2;
uint8_t signal_id:6;
} __attribute__ ((packed));
struct avdtp_continue_header {
uint8_t transaction:4;
uint8_t packet_type:2;
uint8_t message_type:2;
} __attribute__ ((packed));
struct seid_info {
uint8_t seid:6;
uint8_t inuse:1;
uint8_t rfa0:1;
uint8_t media_type:4;
uint8_t type:1;
uint8_t rfa2:3;
} __attribute__ ((packed));
struct seid {
uint8_t seid:6;
uint8_t rfa0:2;
} __attribute__ ((packed));
#else
#error "Unknown byte order"
#endif
/* packets */
struct discover_resp {
struct seid_info seps[0];
} __attribute__ ((packed));
struct getcap_resp {
uint8_t caps[0];
} __attribute__ ((packed));
struct start_req {
struct seid first_seid;
struct seid other_seids[0];
} __attribute__ ((packed));
struct suspend_req {
struct seid first_seid;
struct seid other_seids[0];
} __attribute__ ((packed));
struct seid_rej {
uint8_t error;
} __attribute__ ((packed));
struct conf_rej {
uint8_t category;
uint8_t error;
} __attribute__ ((packed));
#if __BYTE_ORDER == __LITTLE_ENDIAN
struct seid_req {
uint8_t rfa0:2;
uint8_t acp_seid:6;
} __attribute__ ((packed));
struct setconf_req {
uint8_t rfa0:2;
uint8_t acp_seid:6;
uint8_t rfa1:2;
uint8_t int_seid:6;
uint8_t caps[0];
} __attribute__ ((packed));
struct stream_rej {
uint8_t rfa0:2;
uint8_t acp_seid:6;
uint8_t error;
} __attribute__ ((packed));
struct reconf_req {
uint8_t rfa0:2;
uint8_t acp_seid:6;
uint8_t serv_cap;
uint8_t serv_cap_len;
uint8_t caps[0];
} __attribute__ ((packed));
struct delay_req {
uint8_t rfa0:2;
uint8_t acp_seid:6;
uint16_t delay;
} __attribute__ ((packed));
#elif __BYTE_ORDER == __BIG_ENDIAN
struct seid_req {
uint8_t acp_seid:6;
uint8_t rfa0:2;
} __attribute__ ((packed));
struct setconf_req {
uint8_t acp_seid:6;
uint8_t rfa0:2;
uint8_t int_seid:6;
uint8_t rfa1:2;
uint8_t caps[0];
} __attribute__ ((packed));
struct stream_rej {
uint8_t acp_seid:6;
uint8_t rfa0:2;
uint8_t error;
} __attribute__ ((packed));
struct reconf_req {
uint8_t acp_seid:6;
uint8_t rfa0:2;
uint8_t serv_cap;
uint8_t serv_cap_len;
uint8_t caps[0];
} __attribute__ ((packed));
struct delay_req {
uint8_t acp_seid:6;
uint8_t rfa0:2;
uint16_t delay;
} __attribute__ ((packed));
#else
#error "Unknown byte order"
#endif
struct in_buf {
gboolean active;
int no_of_packets;
uint8_t transaction;
uint8_t message_type;
uint8_t signal_id;
uint8_t buf[1024];
uint8_t data_size;
};
struct pending_req {
uint8_t transaction;
uint8_t signal_id;
void *data;
size_t data_size;
struct avdtp_stream *stream; /* Set if the request targeted a stream */
guint timeout;
};
struct avdtp_remote_sep {
uint8_t seid;
uint8_t type;
uint8_t media_type;
struct avdtp_service_capability *codec;
gboolean delay_reporting;
GSList *caps; /* of type struct avdtp_service_capability */
struct avdtp_stream *stream;
};
struct avdtp_server {
bdaddr_t src;
uint16_t version;
GIOChannel *io;
GSList *seps;
GSList *sessions;
};
struct avdtp_local_sep {
avdtp_state_t state;
struct avdtp_stream *stream;
struct seid_info info;
uint8_t codec;
gboolean delay_reporting;
GSList *caps;
struct avdtp_sep_ind *ind;
struct avdtp_sep_cfm *cfm;
void *user_data;
struct avdtp_server *server;
};
struct stream_callback {
avdtp_stream_state_cb cb;
void *user_data;
unsigned int id;
};
struct avdtp_state_callback {
avdtp_session_state_cb cb;
void *user_data;
unsigned int id;
};
struct avdtp_stream {
GIOChannel *io;
uint16_t imtu;
uint16_t omtu;
struct avdtp *session;
struct avdtp_local_sep *lsep;
uint8_t rseid;
GSList *caps;
GSList *callbacks;
struct avdtp_service_capability *codec;
guint io_id; /* Transport GSource ID */
guint timer; /* Waiting for other side to close or open
* the transport channel */
gboolean open_acp; /* If we are in ACT role for Open */
gboolean close_int; /* If we are in INT role for Close */
gboolean abort_int; /* If we are in INT role for Abort */
guint idle_timer;
gboolean delay_reporting;
uint16_t delay; /* AVDTP 1.3 Delay Reporting feature */
};
/* Structure describing an AVDTP connection between two devices */
struct avdtp {
int ref;
int free_lock;
uint16_t version;
struct avdtp_server *server;
bdaddr_t dst;
avdtp_session_state_t state;
/* True if the session should be automatically disconnected */
gboolean auto_dc;
/* True if the entire device is being disconnected */
gboolean device_disconnect;
GIOChannel *io;
guint io_id;
GSList *seps; /* Elements of type struct avdtp_remote_sep * */
GSList *streams; /* Elements of type struct avdtp_stream * */
GSList *req_queue; /* Elements of type struct pending_req * */
GSList *prio_queue; /* Same as req_queue but is processed before it */
struct avdtp_stream *pending_open;
uint16_t imtu;
uint16_t omtu;
struct in_buf in;
char *buf;
avdtp_discover_cb_t discov_cb;
void *user_data;
struct pending_req *req;
guint dc_timer;
/* Attempt stream setup instead of disconnecting */
gboolean stream_setup;
DBusPendingCall *pending_auth;
};
static GSList *servers = NULL;
static GSList *avdtp_callbacks = NULL;
static gboolean auto_connect = TRUE;
static int send_request(struct avdtp *session, gboolean priority,
struct avdtp_stream *stream, uint8_t signal_id,
void *buffer, size_t size);
static gboolean avdtp_parse_resp(struct avdtp *session,
struct avdtp_stream *stream,
uint8_t transaction, uint8_t signal_id,
void *buf, int size);
static gboolean avdtp_parse_rej(struct avdtp *session,
struct avdtp_stream *stream,
uint8_t transaction, uint8_t signal_id,
void *buf, int size);
static int process_queue(struct avdtp *session);
static void connection_lost(struct avdtp *session, int err);
static void avdtp_sep_set_state(struct avdtp *session,
struct avdtp_local_sep *sep,
avdtp_state_t state);
static void auth_cb(DBusError *derr, void *user_data);
static struct avdtp_server *find_server(GSList *list, const bdaddr_t *src)
{
GSList *l;
for (l = list; l; l = l->next) {
struct avdtp_server *server = l->data;
if (bacmp(&server->src, src) == 0)
return server;
}
return NULL;
}
static const char *avdtp_statestr(avdtp_state_t state)
{
switch (state) {
case AVDTP_STATE_IDLE:
return "IDLE";
case AVDTP_STATE_CONFIGURED:
return "CONFIGURED";
case AVDTP_STATE_OPEN:
return "OPEN";
case AVDTP_STATE_STREAMING:
return "STREAMING";
case AVDTP_STATE_CLOSING:
return "CLOSING";
case AVDTP_STATE_ABORTING:
return "ABORTING";
default:
return "<unknown state>";
}
}
static gboolean try_send(int sk, void *data, size_t len)
{
int err;
do {
err = send(sk, data, len, 0);
} while (err < 0 && errno == EINTR);
if (err < 0) {
error("send: %s (%d)", strerror(errno), errno);
return FALSE;
} else if ((size_t) err != len) {
error("try_send: complete buffer not sent (%d/%zu bytes)",
err, len);
return FALSE;
}
return TRUE;
}
static gboolean avdtp_send(struct avdtp *session, uint8_t transaction,
uint8_t message_type, uint8_t signal_id,
void *data, size_t len)
{
unsigned int cont_fragments, sent;
struct avdtp_start_header start;
struct avdtp_continue_header cont;
int sock;
if (session->io == NULL) {
error("avdtp_send: session is closed");
return FALSE;
}
sock = g_io_channel_unix_get_fd(session->io);
/* Single packet - no fragmentation */
if (sizeof(struct avdtp_single_header) + len <= session->omtu) {
struct avdtp_single_header single;
memset(&single, 0, sizeof(single));
single.transaction = transaction;
single.packet_type = AVDTP_PKT_TYPE_SINGLE;
single.message_type = message_type;
single.signal_id = signal_id;
memcpy(session->buf, &single, sizeof(single));
memcpy(session->buf + sizeof(single), data, len);
return try_send(sock, session->buf, sizeof(single) + len);
}
/* Check if there is enough space to start packet */
if (session->omtu < sizeof(start)) {
error("No enough space to fragment packet");
return FALSE;
}
/* Count the number of needed fragments */
cont_fragments = (len - (session->omtu - sizeof(start))) /
(session->omtu - sizeof(cont)) + 1;
DBG("%zu bytes split into %d fragments", len, cont_fragments + 1);
/* Send the start packet */
memset(&start, 0, sizeof(start));
start.transaction = transaction;
start.packet_type = AVDTP_PKT_TYPE_START;
start.message_type = message_type;
start.no_of_packets = cont_fragments + 1;
start.signal_id = signal_id;
memcpy(session->buf, &start, sizeof(start));
memcpy(session->buf + sizeof(start), data,
session->omtu - sizeof(start));
if (!try_send(sock, session->buf, session->omtu))
return FALSE;
DBG("first packet with %zu bytes sent", session->omtu - sizeof(start));
sent = session->omtu - sizeof(start);
/* Send the continue fragments and the end packet */
while (sent < len) {
int left, to_copy;
left = len - sent;
if (left + sizeof(cont) > session->omtu) {
cont.packet_type = AVDTP_PKT_TYPE_CONTINUE;
to_copy = session->omtu - sizeof(cont);
DBG("sending continue with %d bytes", to_copy);
} else {
cont.packet_type = AVDTP_PKT_TYPE_END;
to_copy = left;
DBG("sending end with %d bytes", to_copy);
}
cont.transaction = transaction;
cont.message_type = message_type;
memcpy(session->buf, &cont, sizeof(cont));
memcpy(session->buf + sizeof(cont), data + sent, to_copy);
if (!try_send(sock, session->buf, to_copy + sizeof(cont)))
return FALSE;
sent += to_copy;
}
return TRUE;
}
static void pending_req_free(struct pending_req *req)
{
if (req->timeout)
g_source_remove(req->timeout);
g_free(req->data);
g_free(req);
}
static void close_stream(struct avdtp_stream *stream)
{
int sock;
if (stream->io == NULL)
return;
sock = g_io_channel_unix_get_fd(stream->io);
shutdown(sock, SHUT_RDWR);
g_io_channel_shutdown(stream->io, FALSE, NULL);
g_io_channel_unref(stream->io);
stream->io = NULL;
}
static gboolean stream_close_timeout(gpointer user_data)
{
struct avdtp_stream *stream = user_data;
DBG("Timed out waiting for peer to close the transport channel");
stream->timer = 0;
close_stream(stream);
return FALSE;
}
static gboolean stream_open_timeout(gpointer user_data)
{
struct avdtp_stream *stream = user_data;
DBG("Timed out waiting for peer to open the transport channel");
stream->timer = 0;
stream->session->pending_open = NULL;
avdtp_abort(stream->session, stream);
return FALSE;
}
static gboolean disconnect_timeout(gpointer user_data)
{
struct avdtp *session = user_data;
struct audio_device *dev;
gboolean stream_setup;
session->dc_timer = 0;
stream_setup = session->stream_setup;
session->stream_setup = FALSE;
dev = manager_get_device(&session->server->src, &session->dst, FALSE);
if (dev && dev->sink && stream_setup)
sink_setup_stream(dev->sink, session);
else if (dev && dev->source && stream_setup)
source_setup_stream(dev->source, session);
else
connection_lost(session, ETIMEDOUT);
return FALSE;
}
static void remove_disconnect_timer(struct avdtp *session)
{
g_source_remove(session->dc_timer);
session->dc_timer = 0;
session->stream_setup = FALSE;
}
static void set_disconnect_timer(struct avdtp *session)
{
if (session->dc_timer)
remove_disconnect_timer(session);
if (session->device_disconnect) {
g_idle_add(disconnect_timeout, session);
return;
}
session->dc_timer = g_timeout_add_seconds(DISCONNECT_TIMEOUT,
disconnect_timeout,
session);
}
void avdtp_error_init(struct avdtp_error *err, uint8_t category, int id)
{
err->category = category;
if (category == AVDTP_ERRNO)
err->err.posix_errno = id;
else
err->err.error_code = id;
}
uint8_t avdtp_error_category(struct avdtp_error *err)
{
return err->category;
}
int avdtp_error_error_code(struct avdtp_error *err)
{
assert(err->category != AVDTP_ERRNO);
return err->err.error_code;
}
int avdtp_error_posix_errno(struct avdtp_error *err)
{
assert(err->category == AVDTP_ERRNO);
return err->err.posix_errno;
}
static struct avdtp_stream *find_stream_by_rseid(struct avdtp *session,
uint8_t rseid)
{
GSList *l;
for (l = session->streams; l != NULL; l = g_slist_next(l)) {
struct avdtp_stream *stream = l->data;
if (stream->rseid == rseid)
return stream;
}
return NULL;
}
static struct avdtp_remote_sep *find_remote_sep(GSList *seps, uint8_t seid)
{
GSList *l;
for (l = seps; l != NULL; l = g_slist_next(l)) {
struct avdtp_remote_sep *sep = l->data;
if (sep->seid == seid)
return sep;
}
return NULL;
}
static void avdtp_set_state(struct avdtp *session,
avdtp_session_state_t new_state)
{
GSList *l;
struct audio_device *dev;
bdaddr_t src, dst;
avdtp_session_state_t old_state = session->state;
session->state = new_state;
avdtp_get_peers(session, &src, &dst);
dev = manager_get_device(&src, &dst, FALSE);
if (dev == NULL) {
error("avdtp_set_state(): no matching audio device");
return;
}
for (l = avdtp_callbacks; l != NULL; l = l->next) {
struct avdtp_state_callback *cb = l->data;
cb->cb(dev, session, old_state, new_state, cb->user_data);
}
}
static void stream_free(struct avdtp_stream *stream)
{
struct avdtp_remote_sep *rsep;
stream->lsep->info.inuse = 0;
stream->lsep->stream = NULL;
rsep = find_remote_sep(stream->session->seps, stream->rseid);
if (rsep)
rsep->stream = NULL;
if (stream->timer)
g_source_remove(stream->timer);
if (stream->io)
close_stream(stream);
if (stream->io_id)
g_source_remove(stream->io_id);
g_slist_foreach(stream->callbacks, (GFunc) g_free, NULL);
g_slist_free(stream->callbacks);
g_slist_foreach(stream->caps, (GFunc) g_free, NULL);
g_slist_free(stream->caps);
g_free(stream);
}
static gboolean stream_timeout(gpointer user_data)
{
struct avdtp_stream *stream = user_data;
struct avdtp *session = stream->session;
if (avdtp_close(session, stream, FALSE) < 0)
error("stream_timeout: closing AVDTP stream failed");
stream->idle_timer = 0;
return FALSE;
}
static gboolean transport_cb(GIOChannel *chan, GIOCondition cond,
gpointer data)
{
struct avdtp_stream *stream = data;
struct avdtp_local_sep *sep = stream->lsep;
if (stream->close_int && sep->cfm && sep->cfm->close)
sep->cfm->close(stream->session, sep, stream, NULL,
sep->user_data);
if (!(cond & G_IO_NVAL))
close_stream(stream);
stream->io_id = 0;
if (!stream->abort_int)
avdtp_sep_set_state(stream->session, sep, AVDTP_STATE_IDLE);
return FALSE;
}
static int get_send_buffer_size(int sk)
{
int size;
socklen_t optlen = sizeof(size);
if (getsockopt(sk, SOL_SOCKET, SO_SNDBUF, &size, &optlen) < 0) {
int err = -errno;
error("getsockopt(SO_SNDBUF) failed: %s (%d)", strerror(-err),
-err);
return err;
}
/*
* Doubled value is returned by getsockopt since kernel uses that
* space for its own purposes (see man 7 socket, bookkeeping overhead
* for SO_SNDBUF).
*/
return size / 2;
}
static int set_send_buffer_size(int sk, int size)
{
socklen_t optlen = sizeof(size);
if (setsockopt(sk, SOL_SOCKET, SO_SNDBUF, &size, optlen) < 0) {
int err = -errno;
error("setsockopt(SO_SNDBUF) failed: %s (%d)", strerror(-err),
-err);
return err;
}
return 0;
}
static void handle_transport_connect(struct avdtp *session, GIOChannel *io,
uint16_t imtu, uint16_t omtu)
{
struct avdtp_stream *stream = session->pending_open;
struct avdtp_local_sep *sep = stream->lsep;
session->pending_open = NULL;
if (stream->timer) {
g_source_remove(stream->timer);
stream->timer = 0;
}
if (io == NULL) {
if (!stream->open_acp && sep->cfm && sep->cfm->open) {
struct avdtp_error err;
avdtp_error_init(&err, AVDTP_ERRNO, EIO);
sep->cfm->open(session, sep, NULL, &err,
sep->user_data);
}
return;
}
if (stream->io == NULL)
stream->io = g_io_channel_ref(io);
stream->omtu = omtu;
stream->imtu = imtu;
/* only if local SEP is of type SRC */
if (sep->info.type == AVDTP_SEP_TYPE_SOURCE) {
int sk, buf_size, min_buf_size;
sk = g_io_channel_unix_get_fd(stream->io);
buf_size = get_send_buffer_size(sk);
if (buf_size < 0)
goto proceed;
DBG("sk %d, omtu %d, send buffer size %d", sk, omtu, buf_size);
min_buf_size = omtu * 2;
if (buf_size < min_buf_size) {
DBG("send buffer size to be increassed to %d",
min_buf_size);
set_send_buffer_size(sk, min_buf_size);
}
}
proceed:
if (!stream->open_acp && sep->cfm && sep->cfm->open)
sep->cfm->open(session, sep, stream, NULL, sep->user_data);
avdtp_sep_set_state(session, sep, AVDTP_STATE_OPEN);
stream->io_id = g_io_add_watch(io, G_IO_ERR | G_IO_HUP | G_IO_NVAL,
(GIOFunc) transport_cb, stream);
}
static int pending_req_cmp(gconstpointer a, gconstpointer b)
{
const struct pending_req *req = a;
const struct avdtp_stream *stream = b;
if (req->stream == stream)
return 0;
return -1;
}
static void cleanup_queue(struct avdtp *session, struct avdtp_stream *stream)
{
GSList *l;
struct pending_req *req;
while ((l = g_slist_find_custom(session->prio_queue, stream,
pending_req_cmp))) {
req = l->data;
pending_req_free(req);
session->prio_queue = g_slist_remove(session->prio_queue, req);
}
while ((l = g_slist_find_custom(session->req_queue, stream,
pending_req_cmp))) {
req = l->data;
pending_req_free(req);
session->req_queue = g_slist_remove(session->req_queue, req);
}
}
static void handle_unanswered_req(struct avdtp *session,
struct avdtp_stream *stream)
{
struct pending_req *req;
struct avdtp_local_sep *lsep;
struct avdtp_error err;
if (session->req->signal_id == AVDTP_ABORT) {
/* Avoid freeing the Abort request here */
DBG("handle_unanswered_req: Abort req, returning");
session->req->stream = NULL;
return;
}
req = session->req;
session->req = NULL;
avdtp_error_init(&err, AVDTP_ERRNO, EIO);
lsep = stream->lsep;
switch (req->signal_id) {
case AVDTP_RECONFIGURE:
error("No reply to Reconfigure request");
if (lsep && lsep->cfm && lsep->cfm->reconfigure)
lsep->cfm->reconfigure(session, lsep, stream, &err,
lsep->user_data);
break;
case AVDTP_OPEN:
error("No reply to Open request");
if (lsep && lsep->cfm && lsep->cfm->open)
lsep->cfm->open(session, lsep, stream, &err,
lsep->user_data);
break;
case AVDTP_START:
error("No reply to Start request");
if (lsep && lsep->cfm && lsep->cfm->start)
lsep->cfm->start(session, lsep, stream, &err,
lsep->user_data);
break;
case AVDTP_SUSPEND:
error("No reply to Suspend request");
if (lsep && lsep->cfm && lsep->cfm->suspend)
lsep->cfm->suspend(session, lsep, stream, &err,
lsep->user_data);
break;
case AVDTP_CLOSE:
error("No reply to Close request");
if (lsep && lsep->cfm && lsep->cfm->close)
lsep->cfm->close(session, lsep, stream, &err,
lsep->user_data);
break;
case AVDTP_SET_CONFIGURATION:
error("No reply to SetConfiguration request");
if (lsep && lsep->cfm && lsep->cfm->set_configuration)
lsep->cfm->set_configuration(session, lsep, stream,
&err, lsep->user_data);
}
pending_req_free(req);
}
static void avdtp_sep_set_state(struct avdtp *session,
struct avdtp_local_sep *sep,
avdtp_state_t state)
{
struct avdtp_stream *stream = sep->stream;
avdtp_state_t old_state;
struct avdtp_error err, *err_ptr = NULL;
GSList *l;
if (!stream) {
error("Error changing sep state: stream not available");
return;
}
if (sep->state == state) {
avdtp_error_init(&err, AVDTP_ERRNO, EIO);
DBG("stream state change failed: %s", avdtp_strerror(&err));
err_ptr = &err;
} else {
err_ptr = NULL;
DBG("stream state changed: %s -> %s",
avdtp_statestr(sep->state),
avdtp_statestr(state));
}
old_state = sep->state;
sep->state = state;
for (l = stream->callbacks; l != NULL; l = g_slist_next(l)) {
struct stream_callback *cb = l->data;
cb->cb(stream, old_state, state, err_ptr, cb->user_data);
}
switch (state) {
case AVDTP_STATE_CONFIGURED:
if (sep->info.type == AVDTP_SEP_TYPE_SINK)
avdtp_delay_report(session, stream, stream->delay);
break;
case AVDTP_STATE_OPEN:
if (old_state > AVDTP_STATE_OPEN && session->auto_dc)
stream->idle_timer = g_timeout_add_seconds(STREAM_TIMEOUT,
stream_timeout,
stream);
break;
case AVDTP_STATE_STREAMING:
case AVDTP_STATE_CLOSING:
case AVDTP_STATE_ABORTING:
if (stream->idle_timer) {
g_source_remove(stream->idle_timer);
stream->idle_timer = 0;
}
break;
case AVDTP_STATE_IDLE:
if (stream->idle_timer) {
g_source_remove(stream->idle_timer);
stream->idle_timer = 0;
}
session->streams = g_slist_remove(session->streams, stream);
if (session->pending_open == stream)
handle_transport_connect(session, NULL, 0, 0);
if (session->req && session->req->stream == stream)
handle_unanswered_req(session, stream);
/* Remove pending commands for this stream from the queue */
cleanup_queue(session, stream);
stream_free(stream);
break;
default:
break;
}
}
static void finalize_discovery(struct avdtp *session, int err)
{
struct avdtp_error avdtp_err;
avdtp_error_init(&avdtp_err, AVDTP_ERRNO, err);
if (!session->discov_cb)
return;
session->discov_cb(session, session->seps,
err ? &avdtp_err : NULL,
session->user_data);
session->discov_cb = NULL;
session->user_data = NULL;
}
static void release_stream(struct avdtp_stream *stream, struct avdtp *session)
{
struct avdtp_local_sep *sep = stream->lsep;
if (sep->cfm && sep->cfm->abort &&
(sep->state != AVDTP_STATE_ABORTING ||
stream->abort_int))
sep->cfm->abort(session, sep, stream, NULL, sep->user_data);
avdtp_sep_set_state(session, sep, AVDTP_STATE_IDLE);
}
static void connection_lost(struct avdtp *session, int err)
{
char address[18];
struct audio_device *dev;
ba2str(&session->dst, address);
DBG("Disconnected from %s", address);
dev = manager_get_device(&session->server->src, &session->dst, FALSE);
if (dev != NULL && session->state == AVDTP_SESSION_STATE_CONNECTING &&
err != EACCES)
audio_device_cancel_authorization(dev, auth_cb, session);
session->free_lock = 1;
finalize_discovery(session, err);
g_slist_foreach(session->streams, (GFunc) release_stream, session);
session->streams = NULL;
session->free_lock = 0;
if (session->io) {
g_io_channel_shutdown(session->io, FALSE, NULL);
g_io_channel_unref(session->io);
session->io = NULL;
}
avdtp_set_state(session, AVDTP_SESSION_STATE_DISCONNECTED);
if (session->io_id) {
g_source_remove(session->io_id);
session->io_id = 0;
}
if (session->dc_timer)
remove_disconnect_timer(session);
session->auto_dc = TRUE;
if (session->ref != 1)
error("connection_lost: ref count not 1 after all callbacks");
else
avdtp_unref(session);
}
void avdtp_unref(struct avdtp *session)
{
struct avdtp_server *server;
if (!session)
return;
session->ref--;
DBG("%p: ref=%d", session, session->ref);
if (session->ref == 1) {
if (session->state == AVDTP_SESSION_STATE_CONNECTING &&
session->io) {
struct audio_device *dev;
dev = manager_get_device(&session->server->src,
&session->dst, FALSE);
audio_device_cancel_authorization(dev, auth_cb,
session);
g_io_channel_shutdown(session->io, TRUE, NULL);
g_io_channel_unref(session->io);
session->io = NULL;
avdtp_set_state(session,
AVDTP_SESSION_STATE_DISCONNECTED);
}
if (session->io)
set_disconnect_timer(session);
else if (!session->free_lock) /* Drop the local ref if we
aren't connected */
session->ref--;
}
if (session->ref > 0)
return;
server = session->server;
DBG("%p: freeing session and removing from list", session);
if (session->dc_timer)
remove_disconnect_timer(session);
server->sessions = g_slist_remove(server->sessions, session);
if (session->req)
pending_req_free(session->req);
g_slist_foreach(session->seps, (GFunc) g_free, NULL);
g_slist_free(session->seps);
g_free(session->buf);
g_free(session);
}
struct avdtp *avdtp_ref(struct avdtp *session)
{
session->ref++;
DBG("%p: ref=%d", session, session->ref);
if (session->dc_timer)
remove_disconnect_timer(session);
return session;
}
static struct avdtp_local_sep *find_local_sep_by_seid(struct avdtp_server *server,
uint8_t seid)
{
GSList *l;
for (l = server->seps; l != NULL; l = g_slist_next(l)) {
struct avdtp_local_sep *sep = l->data;
if (sep->info.seid == seid)
return sep;
}
return NULL;
}
struct avdtp_remote_sep *avdtp_find_remote_sep(struct avdtp *session,
struct avdtp_local_sep *lsep)
{
GSList *l;
if (lsep->info.inuse)
return NULL;
for (l = session->seps; l != NULL; l = g_slist_next(l)) {
struct avdtp_remote_sep *sep = l->data;
struct avdtp_service_capability *cap;
struct avdtp_media_codec_capability *codec_data;
/* Type must be different: source <-> sink */
if (sep->type == lsep->info.type)
continue;
if (sep->media_type != lsep->info.media_type)
continue;
if (!sep->codec)
continue;
cap = sep->codec;
codec_data = (void *) cap->data;
if (codec_data->media_codec_type != lsep->codec)
continue;
if (sep->stream == NULL)
return sep;
}
return NULL;
}
static GSList *caps_to_list(uint8_t *data, int size,
struct avdtp_service_capability **codec,
gboolean *delay_reporting)
{
GSList *caps;
int processed;
if (delay_reporting)
*delay_reporting = FALSE;
for (processed = 0, caps = NULL; processed + 2 <= size;) {
struct avdtp_service_capability *cap;
uint8_t length, category;
category = data[0];
length = data[1];
if (processed + 2 + length > size) {
error("Invalid capability data in getcap resp");
break;
}
cap = g_malloc(sizeof(struct avdtp_service_capability) +
length);
memcpy(cap, data, 2 + length);
processed += 2 + length;
data += 2 + length;
caps = g_slist_append(caps, cap);
if (category == AVDTP_MEDIA_CODEC &&
length >=
sizeof(struct avdtp_media_codec_capability))
*codec = cap;
else if (category == AVDTP_DELAY_REPORTING && delay_reporting)
*delay_reporting = TRUE;
}
return caps;
}
static gboolean avdtp_unknown_cmd(struct avdtp *session, uint8_t transaction,
uint8_t signal_id)
{
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_GEN_REJECT,
signal_id, NULL, 0);
}
static gboolean avdtp_discover_cmd(struct avdtp *session, uint8_t transaction,
void *buf, int size)
{
GSList *l;
unsigned int rsp_size, sep_count, i;
struct seid_info *seps;
gboolean ret;
sep_count = g_slist_length(session->server->seps);
if (sep_count == 0) {
uint8_t err = AVDTP_NOT_SUPPORTED_COMMAND;
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_DISCOVER, &err, sizeof(err));
}
rsp_size = sep_count * sizeof(struct seid_info);
seps = g_new0(struct seid_info, sep_count);
for (l = session->server->seps, i = 0; l != NULL; l = l->next, i++) {
struct avdtp_local_sep *sep = l->data;
memcpy(&seps[i], &sep->info, sizeof(struct seid_info));
}
ret = avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_DISCOVER, seps, rsp_size);
g_free(seps);
return ret;
}
static gboolean avdtp_getcap_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, unsigned int size,
gboolean get_all)
{
GSList *l, *caps;
struct avdtp_local_sep *sep = NULL;
unsigned int rsp_size;
uint8_t err, buf[1024], *ptr = buf;
uint8_t cmd;
cmd = get_all ? AVDTP_GET_ALL_CAPABILITIES : AVDTP_GET_CAPABILITIES;
if (size < sizeof(struct seid_req)) {
err = AVDTP_BAD_LENGTH;
goto failed;
}
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
if (get_all && session->server->version < 0x0103)
return avdtp_unknown_cmd(session, transaction, cmd);
if (!sep->ind->get_capability(session, sep, get_all, &caps,
&err, sep->user_data))
goto failed;
for (l = caps, rsp_size = 0; l != NULL; l = g_slist_next(l)) {
struct avdtp_service_capability *cap = l->data;
if (rsp_size + cap->length + 2 > sizeof(buf))
break;
memcpy(ptr, cap, cap->length + 2);
rsp_size += cap->length + 2;
ptr += cap->length + 2;
g_free(cap);
}
g_slist_free(caps);
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT, cmd,
buf, rsp_size);
failed:
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT, cmd,
&err, sizeof(err));
}
static void setconf_cb(struct avdtp *session, struct avdtp_stream *stream,
struct avdtp_error *err)
{
struct conf_rej rej;
struct avdtp_local_sep *sep;
if (err != NULL) {
rej.error = AVDTP_UNSUPPORTED_CONFIGURATION;
rej.category = err->err.error_code;
avdtp_send(session, session->in.transaction,
AVDTP_MSG_TYPE_REJECT, AVDTP_SET_CONFIGURATION,
&rej, sizeof(rej));
return;
}
if (!avdtp_send(session, session->in.transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_SET_CONFIGURATION, NULL, 0)) {
stream_free(stream);
return;
}
sep = stream->lsep;
sep->stream = stream;
sep->info.inuse = 1;
session->streams = g_slist_append(session->streams, stream);
avdtp_sep_set_state(session, sep, AVDTP_STATE_CONFIGURED);
}
static gboolean avdtp_setconf_cmd(struct avdtp *session, uint8_t transaction,
struct setconf_req *req, unsigned int size)
{
struct conf_rej rej;
struct avdtp_local_sep *sep;
struct avdtp_stream *stream;
uint8_t err, category = 0x00;
struct audio_device *dev;
bdaddr_t src, dst;
GSList *l;
if (size < sizeof(struct setconf_req)) {
error("Too short getcap request");
return FALSE;
}
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
if (sep->stream) {
err = AVDTP_SEP_IN_USE;
goto failed;
}
avdtp_get_peers(session, &src, &dst);
dev = manager_get_device(&src, &dst, FALSE);
if (!dev) {
error("Unable to get a audio device object");
err = AVDTP_BAD_STATE;
goto failed;
}
switch (sep->info.type) {
case AVDTP_SEP_TYPE_SOURCE:
if (!dev->sink) {
btd_device_add_uuid(dev->btd_dev, A2DP_SINK_UUID);
if (!dev->sink) {
error("Unable to get a audio sink object");
err = AVDTP_BAD_STATE;
goto failed;
}
}
break;
case AVDTP_SEP_TYPE_SINK:
if (!dev->source) {
btd_device_add_uuid(dev->btd_dev, A2DP_SOURCE_UUID);
if (!dev->sink) {
error("Unable to get a audio source object");
err = AVDTP_BAD_STATE;
goto failed;
}
}
break;
}
stream = g_new0(struct avdtp_stream, 1);
stream->session = session;
stream->lsep = sep;
stream->rseid = req->int_seid;
stream->caps = caps_to_list(req->caps,
size - sizeof(struct setconf_req),
&stream->codec,
&stream->delay_reporting);
/* Verify that the Media Transport capability's length = 0. Reject otherwise */
for (l = stream->caps; l != NULL; l = g_slist_next(l)) {
struct avdtp_service_capability *cap = l->data;
if (cap->category == AVDTP_MEDIA_TRANSPORT && cap->length != 0) {
err = AVDTP_BAD_MEDIA_TRANSPORT_FORMAT;
goto failed_stream;
}
}
if (stream->delay_reporting && session->version < 0x0103)
session->version = 0x0103;
if (sep->ind && sep->ind->set_configuration) {
if (!sep->ind->set_configuration(session, sep, stream,
stream->caps,
setconf_cb,
sep->user_data)) {
err = AVDTP_UNSUPPORTED_CONFIGURATION;
category = 0x00;
goto failed_stream;
}
} else {
if (!avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_SET_CONFIGURATION, NULL, 0)) {
stream_free(stream);
return FALSE;
}
sep->stream = stream;
sep->info.inuse = 1;
session->streams = g_slist_append(session->streams, stream);
avdtp_sep_set_state(session, sep, AVDTP_STATE_CONFIGURED);
}
return TRUE;
failed_stream:
stream_free(stream);
failed:
rej.error = err;
rej.category = category;
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_SET_CONFIGURATION, &rej, sizeof(rej));
}
static gboolean avdtp_getconf_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, int size)
{
GSList *l;
struct avdtp_local_sep *sep = NULL;
int rsp_size;
uint8_t err;
uint8_t buf[1024];
uint8_t *ptr = buf;
if (size < (int) sizeof(struct seid_req)) {
error("Too short getconf request");
return FALSE;
}
memset(buf, 0, sizeof(buf));
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
if (!sep->stream || !sep->stream->caps) {
err = AVDTP_UNSUPPORTED_CONFIGURATION;
goto failed;
}
for (l = sep->stream->caps, rsp_size = 0; l != NULL; l = g_slist_next(l)) {
struct avdtp_service_capability *cap = l->data;
if (rsp_size + cap->length + 2 > (int) sizeof(buf))
break;
memcpy(ptr, cap, cap->length + 2);
rsp_size += cap->length + 2;
ptr += cap->length + 2;
}
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_GET_CONFIGURATION, buf, rsp_size);
failed:
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_GET_CONFIGURATION, &err, sizeof(err));
}
static gboolean avdtp_reconf_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, int size)
{
return avdtp_unknown_cmd(session, transaction, AVDTP_RECONFIGURE);
}
static gboolean avdtp_open_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, unsigned int size)
{
struct avdtp_local_sep *sep;
struct avdtp_stream *stream;
uint8_t err;
if (size < sizeof(struct seid_req)) {
error("Too short abort request");
return FALSE;
}
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
if (sep->state != AVDTP_STATE_CONFIGURED) {
err = AVDTP_BAD_STATE;
goto failed;
}
stream = sep->stream;
if (sep->ind && sep->ind->open) {
if (!sep->ind->open(session, sep, stream, &err,
sep->user_data))
goto failed;
}
if (!avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_OPEN, NULL, 0))
return FALSE;
stream->open_acp = TRUE;
session->pending_open = stream;
stream->timer = g_timeout_add_seconds(REQ_TIMEOUT,
stream_open_timeout,
stream);
return TRUE;
failed:
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_OPEN, &err, sizeof(err));
}
static gboolean avdtp_start_cmd(struct avdtp *session, uint8_t transaction,
struct start_req *req, unsigned int size)
{
struct avdtp_local_sep *sep;
struct avdtp_stream *stream;
struct stream_rej rej;
struct seid *seid;
uint8_t err, failed_seid;
int seid_count, i;
if (size < sizeof(struct start_req)) {
error("Too short start request");
return FALSE;
}
seid_count = 1 + size - sizeof(struct start_req);
seid = &req->first_seid;
for (i = 0; i < seid_count; i++, seid++) {
failed_seid = seid->seid;
sep = find_local_sep_by_seid(session->server,
req->first_seid.seid);
if (!sep || !sep->stream) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
stream = sep->stream;
if (sep->state != AVDTP_STATE_OPEN) {
err = AVDTP_BAD_STATE;
goto failed;
}
if (sep->ind && sep->ind->start) {
if (!sep->ind->start(session, sep, stream, &err,
sep->user_data))
goto failed;
}
avdtp_sep_set_state(session, sep, AVDTP_STATE_STREAMING);
}
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_START, NULL, 0);
failed:
memset(&rej, 0, sizeof(rej));
rej.acp_seid = failed_seid;
rej.error = err;
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_START, &rej, sizeof(rej));
}
static gboolean avdtp_close_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, unsigned int size)
{
struct avdtp_local_sep *sep;
struct avdtp_stream *stream;
uint8_t err;
if (size < sizeof(struct seid_req)) {
error("Too short close request");
return FALSE;
}
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep || !sep->stream) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
if (sep->state != AVDTP_STATE_OPEN &&
sep->state != AVDTP_STATE_STREAMING) {
err = AVDTP_BAD_STATE;
goto failed;
}
stream = sep->stream;
if (sep->ind && sep->ind->close) {
if (!sep->ind->close(session, sep, stream, &err,
sep->user_data))
goto failed;
}
avdtp_sep_set_state(session, sep, AVDTP_STATE_CLOSING);
if (!avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_CLOSE, NULL, 0))
return FALSE;
stream->timer = g_timeout_add_seconds(REQ_TIMEOUT,
stream_close_timeout,
stream);
return TRUE;
failed:
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_CLOSE, &err, sizeof(err));
}
static gboolean avdtp_suspend_cmd(struct avdtp *session, uint8_t transaction,
struct suspend_req *req, unsigned int size)
{
struct avdtp_local_sep *sep;
struct avdtp_stream *stream;
struct stream_rej rej;
struct seid *seid;
uint8_t err, failed_seid;
int seid_count, i;
if (size < sizeof(struct suspend_req)) {
error("Too short suspend request");
return FALSE;
}
seid_count = 1 + size - sizeof(struct suspend_req);
seid = &req->first_seid;
for (i = 0; i < seid_count; i++, seid++) {
failed_seid = seid->seid;
sep = find_local_sep_by_seid(session->server,
req->first_seid.seid);
if (!sep || !sep->stream) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
stream = sep->stream;
if (sep->state != AVDTP_STATE_STREAMING) {
err = AVDTP_BAD_STATE;
goto failed;
}
if (sep->ind && sep->ind->suspend) {
if (!sep->ind->suspend(session, sep, stream, &err,
sep->user_data))
goto failed;
}
avdtp_sep_set_state(session, sep, AVDTP_STATE_OPEN);
}
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_SUSPEND, NULL, 0);
failed:
memset(&rej, 0, sizeof(rej));
rej.acp_seid = failed_seid;
rej.error = err;
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_SUSPEND, &rej, sizeof(rej));
}
static gboolean avdtp_abort_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, unsigned int size)
{
struct avdtp_local_sep *sep;
uint8_t err;
gboolean ret;
if (size < sizeof(struct seid_req)) {
error("Too short abort request");
return FALSE;
}
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep || !sep->stream) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
if (sep->ind && sep->ind->abort) {
if (!sep->ind->abort(session, sep, sep->stream, &err,
sep->user_data))
goto failed;
}
ret = avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_ABORT, NULL, 0);
if (ret)
avdtp_sep_set_state(session, sep, AVDTP_STATE_ABORTING);
return ret;
failed:
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_ABORT, &err, sizeof(err));
}
static gboolean avdtp_secctl_cmd(struct avdtp *session, uint8_t transaction,
struct seid_req *req, int size)
{
return avdtp_unknown_cmd(session, transaction, AVDTP_SECURITY_CONTROL);
}
static gboolean avdtp_delayreport_cmd(struct avdtp *session,
uint8_t transaction,
struct delay_req *req,
unsigned int size)
{
struct avdtp_local_sep *sep;
struct avdtp_stream *stream;
uint8_t err;
if (size < sizeof(struct delay_req)) {
error("Too short delay report request");
return FALSE;
}
sep = find_local_sep_by_seid(session->server, req->acp_seid);
if (!sep || !sep->stream) {
err = AVDTP_BAD_ACP_SEID;
goto failed;
}
stream = sep->stream;
if (sep->state != AVDTP_STATE_CONFIGURED &&
sep->state != AVDTP_STATE_STREAMING) {
err = AVDTP_BAD_STATE;
goto failed;
}
stream->delay = ntohs(req->delay);
if (sep->ind && sep->ind->delayreport) {
if (!sep->ind->delayreport(session, sep, stream->rseid,
stream->delay, &err,
sep->user_data))
goto failed;
}
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_ACCEPT,
AVDTP_DELAY_REPORT, NULL, 0);
failed:
return avdtp_send(session, transaction, AVDTP_MSG_TYPE_REJECT,
AVDTP_DELAY_REPORT, &err, sizeof(err));
}
static gboolean avdtp_parse_cmd(struct avdtp *session, uint8_t transaction,
uint8_t signal_id, void *buf, int size)
{
switch (signal_id) {
case AVDTP_DISCOVER:
DBG("Received DISCOVER_CMD");
return avdtp_discover_cmd(session, transaction, buf, size);
case AVDTP_GET_CAPABILITIES:
DBG("Received GET_CAPABILITIES_CMD");
return avdtp_getcap_cmd(session, transaction, buf, size,
FALSE);
case AVDTP_GET_ALL_CAPABILITIES:
DBG("Received GET_ALL_CAPABILITIES_CMD");
return avdtp_getcap_cmd(session, transaction, buf, size, TRUE);
case AVDTP_SET_CONFIGURATION:
DBG("Received SET_CONFIGURATION_CMD");
return avdtp_setconf_cmd(session, transaction, buf, size);
case AVDTP_GET_CONFIGURATION:
DBG("Received GET_CONFIGURATION_CMD");
return avdtp_getconf_cmd(session, transaction, buf, size);
case AVDTP_RECONFIGURE:
DBG("Received RECONFIGURE_CMD");
return avdtp_reconf_cmd(session, transaction, buf, size);
case AVDTP_OPEN:
DBG("Received OPEN_CMD");
return avdtp_open_cmd(session, transaction, buf, size);
case AVDTP_START:
DBG("Received START_CMD");
return avdtp_start_cmd(session, transaction, buf, size);
case AVDTP_CLOSE:
DBG("Received CLOSE_CMD");
return avdtp_close_cmd(session, transaction, buf, size);
case AVDTP_SUSPEND:
DBG("Received SUSPEND_CMD");
return avdtp_suspend_cmd(session, transaction, buf, size);
case AVDTP_ABORT:
DBG("Received ABORT_CMD");
return avdtp_abort_cmd(session, transaction, buf, size);
case AVDTP_SECURITY_CONTROL:
DBG("Received SECURITY_CONTROL_CMD");
return avdtp_secctl_cmd(session, transaction, buf, size);
case AVDTP_DELAY_REPORT:
DBG("Received DELAY_REPORT_CMD");
return avdtp_delayreport_cmd(session, transaction, buf, size);
default:
DBG("Received unknown request id %u", signal_id);
return avdtp_unknown_cmd(session, transaction, signal_id);
}
}
enum avdtp_parse_result { PARSE_ERROR, PARSE_FRAGMENT, PARSE_SUCCESS };
static enum avdtp_parse_result avdtp_parse_data(struct avdtp *session,
void *buf, size_t size)
{
struct avdtp_common_header *header = buf;
struct avdtp_single_header *single = (void *) session->buf;
struct avdtp_start_header *start = (void *) session->buf;
void *payload;
gsize payload_size;
switch (header->packet_type) {
case AVDTP_PKT_TYPE_SINGLE:
if (size < sizeof(*single)) {
error("Received too small single packet (%zu bytes)", size);
return PARSE_ERROR;
}
if (session->in.active) {
error("SINGLE: Invalid AVDTP packet fragmentation");
return PARSE_ERROR;
}
payload = session->buf + sizeof(*single);
payload_size = size - sizeof(*single);
session->in.active = TRUE;
session->in.data_size = 0;
session->in.no_of_packets = 1;
session->in.transaction = header->transaction;
session->in.message_type = header->message_type;
session->in.signal_id = single->signal_id;
break;
case AVDTP_PKT_TYPE_START:
if (size < sizeof(*start)) {
error("Received too small start packet (%zu bytes)", size);
return PARSE_ERROR;
}
if (session->in.active) {
error("START: Invalid AVDTP packet fragmentation");
return PARSE_ERROR;
}
session->in.active = TRUE;
session->in.data_size = 0;
session->in.transaction = header->transaction;
session->in.message_type = header->message_type;
session->in.no_of_packets = start->no_of_packets;
session->in.signal_id = start->signal_id;
payload = session->buf + sizeof(*start);
payload_size = size - sizeof(*start);
break;
case AVDTP_PKT_TYPE_CONTINUE:
if (size < sizeof(struct avdtp_continue_header)) {
error("Received too small continue packet (%zu bytes)",
size);
return PARSE_ERROR;
}
if (!session->in.active) {
error("CONTINUE: Invalid AVDTP packet fragmentation");
return PARSE_ERROR;
}
if (session->in.transaction != header->transaction) {
error("Continue transaction id doesn't match");
return PARSE_ERROR;
}
if (session->in.no_of_packets <= 1) {
error("Too few continue packets");
return PARSE_ERROR;
}
payload = session->buf + sizeof(struct avdtp_continue_header);
payload_size = size - sizeof(struct avdtp_continue_header);
break;
case AVDTP_PKT_TYPE_END:
if (size < sizeof(struct avdtp_continue_header)) {
error("Received too small end packet (%zu bytes)", size);
return PARSE_ERROR;
}
if (!session->in.active) {
error("END: Invalid AVDTP packet fragmentation");
return PARSE_ERROR;
}
if (session->in.transaction != header->transaction) {
error("End transaction id doesn't match");
return PARSE_ERROR;
}
if (session->in.no_of_packets > 1) {
error("Got an end packet too early");
return PARSE_ERROR;
}
payload = session->buf + sizeof(struct avdtp_continue_header);
payload_size = size - sizeof(struct avdtp_continue_header);
break;
default:
error("Invalid AVDTP packet type 0x%02X", header->packet_type);
return PARSE_ERROR;
}
if (session->in.data_size + payload_size >
sizeof(session->in.buf)) {
error("Not enough incoming buffer space!");
return PARSE_ERROR;
}
memcpy(session->in.buf + session->in.data_size, payload, payload_size);
session->in.data_size += payload_size;
if (session->in.no_of_packets > 1) {
session->in.no_of_packets--;
DBG("Received AVDTP fragment. %d to go",
session->in.no_of_packets);
return PARSE_FRAGMENT;
}
session->in.active = FALSE;
return PARSE_SUCCESS;
}
static gboolean session_cb(GIOChannel *chan, GIOCondition cond,
gpointer data)
{
struct avdtp *session = data;
struct avdtp_common_header *header;
ssize_t size;
int fd;
DBG("");
if (cond & G_IO_NVAL)
return FALSE;
header = (void *) session->buf;
if (cond & (G_IO_HUP | G_IO_ERR))
goto failed;
fd = g_io_channel_unix_get_fd(chan);
size = read(fd, session->buf, session->imtu);
if (size < 0) {
error("IO Channel read error");
goto failed;
}
if ((size_t) size < sizeof(struct avdtp_common_header)) {
error("Received too small packet (%zu bytes)", size);
goto failed;
}
switch (avdtp_parse_data(session, session->buf, size)) {
case PARSE_ERROR:
goto failed;
case PARSE_FRAGMENT:
return TRUE;
case PARSE_SUCCESS:
break;
}
if (session->in.message_type == AVDTP_MSG_TYPE_COMMAND) {
if (!avdtp_parse_cmd(session, session->in.transaction,
session->in.signal_id,
session->in.buf,
session->in.data_size)) {
error("Unable to handle command. Disconnecting");
goto failed;
}
if (session->ref == 1 && !session->streams && !session->req)
set_disconnect_timer(session);
if (session->streams && session->dc_timer)
remove_disconnect_timer(session);
return TRUE;
}
if (session->req == NULL) {
error("No pending request, ignoring message");
return TRUE;
}
if (header->transaction != session->req->transaction) {
error("Transaction label doesn't match");
return TRUE;
}
if (session->in.signal_id != session->req->signal_id) {
error("Reponse signal doesn't match");
return TRUE;
}
g_source_remove(session->req->timeout);
session->req->timeout = 0;
switch (header->message_type) {
case AVDTP_MSG_TYPE_ACCEPT:
if (!avdtp_parse_resp(session, session->req->stream,
session->in.transaction,
session->in.signal_id,
session->in.buf,
session->in.data_size)) {
error("Unable to parse accept response");
goto failed;
}
break;
case AVDTP_MSG_TYPE_REJECT:
if (!avdtp_parse_rej(session, session->req->stream,
session->in.transaction,
session->in.signal_id,
session->in.buf,
session->in.data_size)) {
error("Unable to parse reject response");
goto failed;
}
break;
case AVDTP_MSG_TYPE_GEN_REJECT:
error("Received a General Reject message");
break;
default:
error("Unknown message type 0x%02X", header->message_type);
break;
}
pending_req_free(session->req);
session->req = NULL;
process_queue(session);
return TRUE;
failed:
connection_lost(session, EIO);
return FALSE;
}
static struct avdtp *find_session(GSList *list, const bdaddr_t *dst)
{
GSList *l;
for (l = list; l != NULL; l = g_slist_next(l)) {
struct avdtp *s = l->data;
if (bacmp(dst, &s->dst))
continue;
return s;
}
return NULL;
}
static uint16_t get_version(struct avdtp *session)
{
struct btd_adapter *adapter;
struct btd_device *device;
const sdp_record_t *rec;
sdp_list_t *protos;
sdp_data_t *proto_desc;
char addr[18];
uint16_t ver = 0x0100;
adapter = manager_find_adapter(&session->server->src);
if (!adapter)
goto done;
ba2str(&session->dst, addr);
device = adapter_find_device(adapter, addr);
if (!device)
goto done;
rec = btd_device_get_record(device, A2DP_SINK_UUID);
if (!rec)
rec = btd_device_get_record(device, A2DP_SOURCE_UUID);
if (!rec)
goto done;
if (sdp_get_access_protos(rec, &protos) < 0)
goto done;
proto_desc = sdp_get_proto_desc(protos, AVDTP_UUID);
if (proto_desc && proto_desc->dtd == SDP_UINT16)
ver = proto_desc->val.uint16;
sdp_list_foreach(protos, (sdp_list_func_t) sdp_list_free, NULL);
sdp_list_free(protos, NULL);
done:
return ver;
}
static struct avdtp *avdtp_get_internal(const bdaddr_t *src, const bdaddr_t *dst)
{
struct avdtp_server *server;
struct avdtp *session;
assert(src != NULL);
assert(dst != NULL);
server = find_server(servers, src);
if (server == NULL)
return NULL;
session = find_session(server->sessions, dst);
if (session) {
if (session->pending_auth)
return NULL;
else
return session;
}
session = g_new0(struct avdtp, 1);
session->server = server;
bacpy(&session->dst, dst);
session->ref = 1;
/* We don't use avdtp_set_state() here since this isn't a state change
* but just setting of the initial state */
session->state = AVDTP_SESSION_STATE_DISCONNECTED;
session->auto_dc = TRUE;
session->version = get_version(session);
server->sessions = g_slist_append(server->sessions, session);
return session;
}
struct avdtp *avdtp_get(bdaddr_t *src, bdaddr_t *dst)
{
struct avdtp *session;
session = avdtp_get_internal(src, dst);
if (!session)
return NULL;
return avdtp_ref(session);
}
static void avdtp_connect_cb(GIOChannel *chan, GError *err, gpointer user_data)
{
struct avdtp *session = user_data;
char address[18];
GError *gerr = NULL;
if (err) {
error("%s", err->message);
goto failed;
}
if (!session->io)
session->io = g_io_channel_ref(chan);
bt_io_get(chan, BT_IO_L2CAP, &gerr,
BT_IO_OPT_OMTU, &session->omtu,
BT_IO_OPT_IMTU, &session->imtu,
BT_IO_OPT_INVALID);
if (gerr) {
error("%s", gerr->message);
g_error_free(gerr);
goto failed;
}
ba2str(&session->dst, address);
DBG("AVDTP: connected %s channel to %s",
session->pending_open ? "transport" : "signaling",
address);
if (session->state == AVDTP_SESSION_STATE_CONNECTING) {
DBG("AVDTP imtu=%u, omtu=%u", session->imtu, session->omtu);
session->buf = g_malloc0(session->imtu);
avdtp_set_state(session, AVDTP_SESSION_STATE_CONNECTED);
if (session->io_id)
g_source_remove(session->io_id);
/* This watch should be low priority since otherwise the
* connect callback might be dispatched before the session
* callback if the kernel wakes us up at the same time for
* them. This could happen if a headset is very quick in
* sending the Start command after connecting the stream
* transport channel.
*/
session->io_id = g_io_add_watch_full(chan,
G_PRIORITY_LOW,
G_IO_IN | G_IO_ERR | G_IO_HUP
| G_IO_NVAL,
(GIOFunc) session_cb, session,
NULL);
if (session->stream_setup) {
set_disconnect_timer(session);
avdtp_set_auto_disconnect(session, FALSE);
}
} else if (session->pending_open)
handle_transport_connect(session, chan, session->imtu,
session->omtu);
else
goto failed;
process_queue(session);
return;
failed:
if (session->pending_open) {
struct avdtp_stream *stream = session->pending_open;
handle_transport_connect(session, NULL, 0, 0);
if (avdtp_abort(session, stream) < 0)
avdtp_sep_set_state(session, stream->lsep,
AVDTP_STATE_IDLE);
} else
connection_lost(session, EIO);
}
static void auth_cb(DBusError *derr, void *user_data)
{
struct avdtp *session = user_data;
GError *err = NULL;
if (derr && dbus_error_is_set(derr)) {
error("Access denied: %s", derr->message);
connection_lost(session, EACCES);
return;
}
if (!bt_io_accept(session->io, avdtp_connect_cb, session, NULL,
&err)) {
error("bt_io_accept: %s", err->message);
connection_lost(session, EACCES);
g_error_free(err);
return;
}
/* This is so that avdtp_connect_cb will know to do the right thing
* with respect to the disconnect timer */
session->stream_setup = TRUE;
}
static void avdtp_confirm_cb(GIOChannel *chan, gpointer data)
{
struct avdtp *session;
struct audio_device *dev;
char address[18];
bdaddr_t src, dst;
int perr;
GError *err = NULL;
bt_io_get(chan, BT_IO_L2CAP, &err,
BT_IO_OPT_SOURCE_BDADDR, &src,
BT_IO_OPT_DEST_BDADDR, &dst,
BT_IO_OPT_DEST, address,
BT_IO_OPT_INVALID);
if (err) {
error("%s", err->message);
g_error_free(err);
goto drop;
}
DBG("AVDTP: incoming connect from %s", address);
session = avdtp_get_internal(&src, &dst);
if (!session)
goto drop;
/* This state (ie, session is already *connecting*) happens when the
* device initiates a connect (really a config'd L2CAP channel) even
* though there is a connect we initiated in progress. In sink.c &
* source.c, this state is referred to as XCASE connect:connect.
* Abort the device's channel in favor of our own.
*/
if (session->state == AVDTP_SESSION_STATE_CONNECTING) {
DBG("connect already in progress (XCASE connect:connect)");
goto drop;
}
if (session->pending_open && session->pending_open->open_acp) {
if (!bt_io_accept(chan, avdtp_connect_cb, session, NULL, NULL))
goto drop;
return;
}
if (session->io) {
error("Refusing unexpected connect from %s", address);
goto drop;
}
dev = manager_get_device(&src, &dst, FALSE);
if (!dev) {
dev = manager_get_device(&src, &dst, TRUE);
if (!dev) {
error("Unable to get audio device object for %s",
address);
goto drop;
}
btd_device_add_uuid(dev->btd_dev, ADVANCED_AUDIO_UUID);
}
session->io = g_io_channel_ref(chan);
avdtp_set_state(session, AVDTP_SESSION_STATE_CONNECTING);
session->io_id = g_io_add_watch(chan, G_IO_ERR | G_IO_HUP | G_IO_NVAL,
(GIOFunc) session_cb, session);
perr = audio_device_request_authorization(dev, ADVANCED_AUDIO_UUID,
auth_cb, session);
if (perr < 0) {
avdtp_unref(session);
goto drop;
}
dev->auto_connect = auto_connect;
return;
drop:
g_io_channel_shutdown(chan, TRUE, NULL);
}
static GIOChannel *l2cap_connect(struct avdtp *session)
{
GError *err = NULL;
GIOChannel *io;
io = bt_io_connect(BT_IO_L2CAP, avdtp_connect_cb, session,
NULL, &err,
BT_IO_OPT_SOURCE_BDADDR, &session->server->src,
BT_IO_OPT_DEST_BDADDR, &session->dst,
BT_IO_OPT_PSM, AVDTP_PSM,
BT_IO_OPT_INVALID);
if (!io) {
error("%s", err->message);
g_error_free(err);
return NULL;
}
return io;
}
static void queue_request(struct avdtp *session, struct pending_req *req,
gboolean priority)
{
if (priority)
session->prio_queue = g_slist_append(session->prio_queue, req);
else
session->req_queue = g_slist_append(session->req_queue, req);
}
static uint8_t req_get_seid(struct pending_req *req)
{
if (req->signal_id == AVDTP_DISCOVER)
return 0;
return ((struct seid_req *) (req->data))->acp_seid;
}
static int cancel_request(struct avdtp *session, int err)
{
struct pending_req *req;
struct seid_req sreq;
struct avdtp_local_sep *lsep;
struct avdtp_stream *stream;
uint8_t seid;
struct avdtp_error averr;
req = session->req;
session->req = NULL;
avdtp_error_init(&averr, AVDTP_ERRNO, err);
seid = req_get_seid(req);
if (seid)
stream = find_stream_by_rseid(session, seid);
else
stream = NULL;
if (stream) {
stream->abort_int = TRUE;
lsep = stream->lsep;
} else
lsep = NULL;
switch (req->signal_id) {
case AVDTP_RECONFIGURE:
error("Reconfigure: %s (%d)", strerror(err), err);
if (lsep && lsep->cfm && lsep->cfm->reconfigure)
lsep->cfm->reconfigure(session, lsep, stream, &averr,
lsep->user_data);
break;
case AVDTP_OPEN:
error("Open: %s (%d)", strerror(err), err);
if (lsep && lsep->cfm && lsep->cfm->open)
lsep->cfm->open(session, lsep, stream, &averr,
lsep->user_data);
break;
case AVDTP_START:
error("Start: %s (%d)", strerror(err), err);
if (lsep && lsep->cfm && lsep->cfm->start)
lsep->cfm->start(session, lsep, stream, &averr,
lsep->user_data);
break;
case AVDTP_SUSPEND:
error("Suspend: %s (%d)", strerror(err), err);
if (lsep && lsep->cfm && lsep->cfm->suspend)
lsep->cfm->suspend(session, lsep, stream, &averr,
lsep->user_data);
break;
case AVDTP_CLOSE:
error("Close: %s (%d)", strerror(err), err);
if (lsep && lsep->cfm && lsep->cfm->close) {
lsep->cfm->close(session, lsep, stream, &averr,
lsep->user_data);
if (stream)
stream->close_int = FALSE;
}
break;
case AVDTP_SET_CONFIGURATION:
error("SetConfiguration: %s (%d)", strerror(err), err);
if (lsep && lsep->cfm && lsep->cfm->set_configuration)
lsep->cfm->set_configuration(session, lsep, stream,
&averr, lsep->user_data);
goto failed;
case AVDTP_DISCOVER:
error("Discover: %s (%d)", strerror(err), err);
goto failed;
case AVDTP_GET_CAPABILITIES:
error("GetCapabilities: %s (%d)", strerror(err), err);
goto failed;
case AVDTP_ABORT:
error("Abort: %s (%d)", strerror(err), err);
goto failed;
}
if (!stream)
goto failed;
memset(&sreq, 0, sizeof(sreq));
sreq.acp_seid = seid;
err = send_request(session, TRUE, stream, AVDTP_ABORT, &sreq,
sizeof(sreq));
if (err < 0) {
error("Unable to send abort request");
goto failed;
}
goto done;
failed:
connection_lost(session, err);
done:
pending_req_free(req);
return err;
}
static gboolean request_timeout(gpointer user_data)
{
struct avdtp *session = user_data;
cancel_request(session, ETIMEDOUT);
return FALSE;
}
static int send_req(struct avdtp *session, gboolean priority,
struct pending_req *req)
{
static int transaction = 0;
int err;
if (session->state == AVDTP_SESSION_STATE_DISCONNECTED) {
session->io = l2cap_connect(session);
if (!session->io)
goto failed;
avdtp_set_state(session, AVDTP_SESSION_STATE_CONNECTING);
}
if (session->state < AVDTP_SESSION_STATE_CONNECTED ||
session->req != NULL) {
queue_request(session, req, priority);
return 0;
}
req->transaction = transaction++;
transaction %= 16;
/* FIXME: Should we retry to send if the buffer
was not totally sent or in case of EINTR? */
if (!avdtp_send(session, req->transaction, AVDTP_MSG_TYPE_COMMAND,
req->signal_id, req->data, req->data_size)) {
err = -EIO;
goto failed;
}
session->req = req;
req->timeout = g_timeout_add_seconds(req->signal_id == AVDTP_ABORT ?
ABORT_TIMEOUT : REQ_TIMEOUT,
request_timeout,
session);
return 0;
failed:
g_free(req->data);
g_free(req);
return err;
}
static int send_request(struct avdtp *session, gboolean priority,
struct avdtp_stream *stream, uint8_t signal_id,
void *buffer, size_t size)
{
struct pending_req *req;
if (stream && stream->abort_int && signal_id != AVDTP_ABORT) {
DBG("Unable to send requests while aborting");
return -EINVAL;
}
req = g_new0(struct pending_req, 1);
req->signal_id = signal_id;
req->data = g_malloc(size);
memcpy(req->data, buffer, size);
req->data_size = size;
req->stream = stream;
return send_req(session, priority, req);
}
static gboolean avdtp_discover_resp(struct avdtp *session,
struct discover_resp *resp, int size)
{
int sep_count, i;
uint8_t getcap_cmd;
if (session->version >= 0x0103 && session->server->version >= 0x0103)
getcap_cmd = AVDTP_GET_ALL_CAPABILITIES;
else
getcap_cmd = AVDTP_GET_CAPABILITIES;
sep_count = size / sizeof(struct seid_info);
for (i = 0; i < sep_count; i++) {
struct avdtp_remote_sep *sep;
struct avdtp_stream *stream;
struct seid_req req;
int ret;
DBG("seid %d type %d media %d in use %d",
resp->seps[i].seid, resp->seps[i].type,
resp->seps[i].media_type, resp->seps[i].inuse);
stream = find_stream_by_rseid(session, resp->seps[i].seid);
sep = find_remote_sep(session->seps, resp->seps[i].seid);
if (!sep) {
if (resp->seps[i].inuse && !stream)
continue;
sep = g_new0(struct avdtp_remote_sep, 1);
session->seps = g_slist_append(session->seps, sep);
}
sep->stream = stream;
sep->seid = resp->seps[i].seid;
sep->type = resp->seps[i].type;
sep->media_type = resp->seps[i].media_type;
memset(&req, 0, sizeof(req));
req.acp_seid = sep->seid;
ret = send_request(session, TRUE, NULL, getcap_cmd,
&req, sizeof(req));
if (ret < 0) {
finalize_discovery(session, -ret);
break;
}
}
return TRUE;
}
static gboolean avdtp_get_capabilities_resp(struct avdtp *session,
struct getcap_resp *resp,
unsigned int size)
{
struct avdtp_remote_sep *sep;
uint8_t seid;
/* Check for minimum required packet size includes:
* 1. getcap resp header
* 2. media transport capability (2 bytes)
* 3. media codec capability type + length (2 bytes)
* 4. the actual media codec elements
* */
if (size < (sizeof(struct getcap_resp) + 4 +
sizeof(struct avdtp_media_codec_capability))) {