| /****************************************************************************** |
| * |
| * Copyright 2009-2012 Broadcom Corporation |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at: |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| * |
| ******************************************************************************/ |
| |
| /******************************************************************************* |
| * |
| * Filename: btif_dm.c |
| * |
| * Description: Contains Device Management (DM) related functionality |
| * |
| * |
| ******************************************************************************/ |
| |
| #define LOG_TAG "bt_btif_dm" |
| |
| #include "btif_dm.h" |
| |
| #ifdef OS_ANDROID |
| #include <android/sysprop/BluetoothProperties.sysprop.h> |
| #endif |
| |
| #include <base/bind.h> |
| #include <base/logging.h> |
| #include <bluetooth/uuid.h> |
| #include <hardware/bluetooth.h> |
| #include <hardware/bt_csis.h> |
| #include <hardware/bt_hearing_aid.h> |
| #include <hardware/bt_le_audio.h> |
| #include <hardware/bt_vc.h> |
| #include <signal.h> |
| #include <stdio.h> |
| #include <stdlib.h> |
| #include <string.h> |
| #include <sys/types.h> |
| #include <time.h> |
| #include <unistd.h> |
| |
| #include <mutex> |
| |
| #ifdef OS_ANDROID |
| #include <android/sysprop/BluetoothProperties.sysprop.h> |
| #endif |
| |
| #include "advertise_data_parser.h" |
| #include "bta_csis_api.h" |
| #include "bta_dm_int.h" |
| #include "bta_gatt_api.h" |
| #include "bta_le_audio_api.h" |
| #include "bta_vc_api.h" |
| #include "btif/include/stack_manager.h" |
| #include "btif_api.h" |
| #include "btif_av.h" |
| #include "btif_bqr.h" |
| #include "btif_config.h" |
| #include "btif_dm.h" |
| #include "btif_gatt.h" |
| #include "btif_hd.h" |
| #include "btif_hf.h" |
| #include "btif_hh.h" |
| #include "btif_metrics_logging.h" |
| #include "btif_sdp.h" |
| #include "btif_storage.h" |
| #include "btif_util.h" |
| #include "common/metrics.h" |
| #include "device/include/controller.h" |
| #include "device/include/interop.h" |
| #include "internal_include/stack_config.h" |
| #include "main/shim/dumpsys.h" |
| #include "main/shim/shim.h" |
| #include "osi/include/allocator.h" |
| #include "osi/include/log.h" |
| #include "osi/include/osi.h" |
| #include "osi/include/properties.h" |
| #include "stack/btm/btm_dev.h" |
| #include "stack/btm/btm_sec.h" |
| #include "stack/include/bt_octets.h" |
| #include "stack_config.h" |
| #include "types/raw_address.h" |
| |
| bool btif_get_device_type(const RawAddress& bda, int* p_device_type); |
| |
| using bluetooth::Uuid; |
| /****************************************************************************** |
| * Constants & Macros |
| *****************************************************************************/ |
| |
| const Uuid UUID_HEARING_AID = Uuid::FromString("FDF0"); |
| const Uuid UUID_VC = Uuid::FromString("1844"); |
| const Uuid UUID_CSIS = Uuid::FromString("1846"); |
| const Uuid UUID_LE_AUDIO = Uuid::FromString("184E"); |
| const Uuid UUID_LE_MIDI = Uuid::FromString("03B80E5A-EDE8-4B33-A751-6CE34EC4C700"); |
| const Uuid UUID_HAS = Uuid::FromString("1854"); |
| const Uuid UUID_BASS = Uuid::FromString("184F"); |
| const Uuid UUID_BATTERY = Uuid::FromString("180F"); |
| const bool enable_address_consolidate = true; // TODO remove |
| |
| #define COD_MASK 0x07FF |
| |
| #define COD_UNCLASSIFIED ((0x1F) << 8) |
| #define COD_HID_KEYBOARD 0x0540 |
| #define COD_HID_POINTING 0x0580 |
| #define COD_HID_COMBO 0x05C0 |
| #define COD_HID_MAJOR 0x0500 |
| #define COD_HID_MASK 0x0700 |
| #define COD_AV_HEADSETS 0x0404 |
| #define COD_AV_HANDSFREE 0x0408 |
| #define COD_AV_HEADPHONES 0x0418 |
| #define COD_AV_PORTABLE_AUDIO 0x041C |
| #define COD_AV_HIFI_AUDIO 0x0428 |
| |
| #define BTIF_DM_MAX_SDP_ATTEMPTS_AFTER_PAIRING 2 |
| |
| #ifndef PROPERTY_CLASS_OF_DEVICE |
| #define PROPERTY_CLASS_OF_DEVICE "bluetooth.device.class_of_device" |
| #endif |
| |
| #define NUM_TIMEOUT_RETRIES 5 |
| #ifndef PROPERTY_DEFAULT_DEVICE_NAME |
| #define PROPERTY_DEFAULT_DEVICE_NAME "bluetooth.device.default_name" |
| #endif |
| #ifndef PROPERTY_PRODUCT_MODEL |
| #define PROPERTY_PRODUCT_MODEL "ro.product.model" |
| #endif |
| #define DEFAULT_LOCAL_NAME_MAX 31 |
| #if (DEFAULT_LOCAL_NAME_MAX > BTM_MAX_LOC_BD_NAME_LEN) |
| #error "default btif local name size exceeds stack supported length" |
| #endif |
| |
| #ifndef PROPERTY_BLE_PRIVACY_ENABLED |
| #define PROPERTY_BLE_PRIVACY_ENABLED "bluetooth.core.gap.le.privacy.enabled" |
| #endif |
| |
| #define ENCRYPTED_BREDR 2 |
| #define ENCRYPTED_LE 4 |
| |
| typedef struct { |
| bt_bond_state_t state; |
| RawAddress static_bdaddr; |
| RawAddress bd_addr; |
| tBTM_SEC_DEV_REC::tBTM_BOND_TYPE bond_type; |
| uint8_t pin_code_len; |
| uint8_t is_ssp; |
| uint8_t auth_req; |
| uint8_t io_cap; |
| uint8_t autopair_attempts; |
| uint8_t timeout_retries; |
| uint8_t is_local_initiated; |
| uint8_t sdp_attempts; |
| bool is_le_only; |
| bool is_le_nc; /* LE Numeric comparison */ |
| btif_dm_ble_cb_t ble; |
| uint8_t fail_reason; |
| } btif_dm_pairing_cb_t; |
| |
| // TODO(jpawlowski): unify ? |
| // btif_dm_local_key_id_t == tBTM_BLE_LOCAL_ID_KEYS == tBTA_BLE_LOCAL_ID_KEYS |
| typedef struct { |
| Octet16 ir; |
| Octet16 irk; |
| Octet16 dhk; |
| } btif_dm_local_key_id_t; |
| |
| typedef struct { |
| bool is_er_rcvd; |
| Octet16 er; |
| bool is_id_keys_rcvd; |
| btif_dm_local_key_id_t id_keys; /* ID kyes */ |
| |
| } btif_dm_local_key_cb_t; |
| |
| /* this structure holds optional OOB data for remote device */ |
| typedef struct { |
| RawAddress bdaddr; /* peer bdaddr */ |
| tBT_TRANSPORT transport; /* BR/EDR or LE */ |
| int data_present; /* What type(s) of OOB Data present */ |
| bt_oob_data_t p192_data; /* P192 Data or empty */ |
| bt_oob_data_t p256_data; /* P256 Data or empty */ |
| } btif_dm_oob_cb_t; |
| |
| typedef struct { unsigned int manufact_id; } skip_sdp_entry_t; |
| |
| typedef enum { |
| BTIF_DM_FUNC_CREATE_BOND, |
| BTIF_DM_FUNC_CANCEL_BOND, |
| BTIF_DM_FUNC_REMOVE_BOND, |
| BTIF_DM_FUNC_BOND_STATE_CHANGED, |
| } bt_bond_function_t; |
| |
| typedef struct { |
| RawAddress bd_addr; |
| bt_bond_function_t function; |
| bt_bond_state_t state; |
| struct timespec timestamp; |
| } btif_bond_event_t; |
| |
| #define BTA_SERVICE_ID_TO_SERVICE_MASK(id) (1 << (id)) |
| |
| #define MAX_BTIF_BOND_EVENT_ENTRIES 15 |
| |
| static skip_sdp_entry_t sdp_rejectlist[] = {{76}}; // Apple Mouse and Keyboard |
| |
| /* This flag will be true if HCI_Inquiry is in progress */ |
| static bool btif_dm_inquiry_in_progress = false; |
| |
| /******************************************************************************* |
| * Static variables |
| ******************************************************************************/ |
| static char btif_default_local_name[DEFAULT_LOCAL_NAME_MAX + 1] = {'\0'}; |
| static uid_set_t* uid_set = NULL; |
| |
| /* A circular array to keep track of the most recent bond events */ |
| static btif_bond_event_t btif_dm_bond_events[MAX_BTIF_BOND_EVENT_ENTRIES + 1]; |
| |
| static std::mutex bond_event_lock; |
| |
| /* |btif_num_bond_events| keeps track of the total number of events and can be |
| greater than |MAX_BTIF_BOND_EVENT_ENTRIES| */ |
| static size_t btif_num_bond_events = 0; |
| static size_t btif_events_start_index = 0; |
| static size_t btif_events_end_index = 0; |
| |
| /****************************************************************************** |
| * Static functions |
| *****************************************************************************/ |
| static void btif_dm_ble_sec_req_evt(tBTA_DM_BLE_SEC_REQ* p_ble_req, |
| bool is_consent); |
| static void btif_dm_remove_ble_bonding_keys(void); |
| static void btif_dm_save_ble_bonding_keys(RawAddress& bd_addr); |
| static btif_dm_pairing_cb_t pairing_cb; |
| static btif_dm_oob_cb_t oob_cb; |
| static void btif_dm_cb_create_bond(const RawAddress bd_addr, |
| tBT_TRANSPORT transport); |
| static void btif_update_remote_properties(const RawAddress& bd_addr, |
| BD_NAME bd_name, DEV_CLASS dev_class, |
| tBT_DEVICE_TYPE dev_type); |
| static btif_dm_local_key_cb_t ble_local_key_cb; |
| static void btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF* p_ssp_key_notif); |
| static void btif_dm_ble_auth_cmpl_evt(tBTA_DM_AUTH_CMPL* p_auth_cmpl); |
| static void btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ* p_pin_req); |
| static void btif_dm_ble_key_nc_req_evt(tBTA_DM_SP_KEY_NOTIF* p_notif_req); |
| static void btif_dm_ble_oob_req_evt(tBTA_DM_SP_RMT_OOB* req_oob_type); |
| static void btif_dm_ble_sc_oob_req_evt(tBTA_DM_SP_RMT_OOB* req_oob_type); |
| |
| static const char* btif_get_default_local_name(); |
| |
| static void btif_stats_add_bond_event(const RawAddress& bd_addr, |
| bt_bond_function_t function, |
| bt_bond_state_t state); |
| |
| /****************************************************************************** |
| * Externs |
| *****************************************************************************/ |
| extern bt_status_t btif_av_sink_execute_service(bool b_enable); |
| extern bt_status_t btif_hh_execute_service(bool b_enable); |
| extern bt_status_t btif_hf_client_execute_service(bool b_enable); |
| extern bt_status_t btif_sdp_execute_service(bool b_enable); |
| extern bt_status_t btif_hh_connect(const RawAddress* bd_addr); |
| extern bt_status_t btif_hd_execute_service(bool b_enable); |
| extern bluetooth::hearing_aid::HearingAidInterface* |
| btif_hearing_aid_get_interface(); |
| extern bluetooth::csis::CsisClientInterface* btif_csis_client_get_interface(); |
| extern bluetooth::le_audio::LeAudioClientInterface* |
| btif_le_audio_get_interface(); |
| extern bluetooth::vc::VolumeControlInterface* |
| btif_volume_control_get_interface(); |
| |
| /****************************************************************************** |
| * Functions |
| *****************************************************************************/ |
| |
| static bool is_empty_128bit(uint8_t* data) { |
| static const uint8_t zero[16] = {0}; |
| return !memcmp(zero, data, sizeof(zero)); |
| } |
| |
| static bool is_bonding_or_sdp() { |
| return pairing_cb.state == BT_BOND_STATE_BONDING || |
| (pairing_cb.state == BT_BOND_STATE_BONDED && pairing_cb.sdp_attempts); |
| } |
| |
| void btif_dm_init(uid_set_t* set) { |
| uid_set = set; |
| } |
| |
| void btif_dm_cleanup(void) { |
| if (uid_set) { |
| uid_set_destroy(uid_set); |
| uid_set = NULL; |
| } |
| } |
| |
| bt_status_t btif_in_execute_service_request(tBTA_SERVICE_ID service_id, |
| bool b_enable) { |
| BTIF_TRACE_DEBUG("%s service_id: %d", __func__, service_id); |
| /* Check the service_ID and invoke the profile's BT state changed API */ |
| switch (service_id) { |
| case BTA_HFP_SERVICE_ID: |
| case BTA_HSP_SERVICE_ID: { |
| bluetooth::headset::ExecuteService(b_enable); |
| } break; |
| case BTA_A2DP_SOURCE_SERVICE_ID: { |
| btif_av_source_execute_service(b_enable); |
| } break; |
| case BTA_A2DP_SINK_SERVICE_ID: { |
| btif_av_sink_execute_service(b_enable); |
| } break; |
| case BTA_HID_SERVICE_ID: { |
| btif_hh_execute_service(b_enable); |
| } break; |
| case BTA_HFP_HS_SERVICE_ID: { |
| btif_hf_client_execute_service(b_enable); |
| } break; |
| case BTA_SDP_SERVICE_ID: { |
| btif_sdp_execute_service(b_enable); |
| } break; |
| case BTA_HIDD_SERVICE_ID: { |
| btif_hd_execute_service(b_enable); |
| } break; |
| case BTA_PBAP_SERVICE_ID: |
| FALLTHROUGH_INTENDED; /* FALLTHROUGH */ |
| case BTA_PCE_SERVICE_ID: |
| FALLTHROUGH_INTENDED; /* FALLTHROUGH */ |
| case BTA_MAP_SERVICE_ID: |
| FALLTHROUGH_INTENDED; /* FALLTHROUGH */ |
| case BTA_MN_SERVICE_ID: { |
| /** |
| * Do nothing; these services were started elsewhere. However, we need to flow through this |
| * codepath in order to properly report back the local UUIDs back to adapter properties in |
| * Java. To achieve this, we need to catch these service IDs in order for {@link |
| * btif_in_execute_service_request} to return {@code BT_STATUS_SUCCESS}, so that in {@link |
| * btif_dm_enable_service} the check passes and the UUIDs are allowed to be passed up into |
| * the Java layer. |
| */ |
| } break; |
| default: |
| BTIF_TRACE_ERROR("%s: Unknown service %d being %s", __func__, service_id, |
| (b_enable) ? "enabled" : "disabled"); |
| return BT_STATUS_FAIL; |
| } |
| return BT_STATUS_SUCCESS; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function check_eir_remote_name |
| * |
| * Description Check if remote name is in the EIR data |
| * |
| * Returns true if remote name found |
| * Populate p_remote_name, if provided and remote name found |
| * |
| ******************************************************************************/ |
| static bool check_eir_remote_name(tBTA_DM_SEARCH* p_search_data, |
| uint8_t* p_remote_name, |
| uint8_t* p_remote_name_len) { |
| const uint8_t* p_eir_remote_name = NULL; |
| uint8_t remote_name_len = 0; |
| |
| /* Check EIR for remote name and services */ |
| if (p_search_data->inq_res.p_eir) { |
| p_eir_remote_name = AdvertiseDataParser::GetFieldByType( |
| p_search_data->inq_res.p_eir, p_search_data->inq_res.eir_len, |
| HCI_EIR_COMPLETE_LOCAL_NAME_TYPE, &remote_name_len); |
| if (!p_eir_remote_name) { |
| p_eir_remote_name = AdvertiseDataParser::GetFieldByType( |
| p_search_data->inq_res.p_eir, p_search_data->inq_res.eir_len, |
| HCI_EIR_SHORTENED_LOCAL_NAME_TYPE, &remote_name_len); |
| } |
| |
| if (p_eir_remote_name) { |
| if (remote_name_len > BD_NAME_LEN) remote_name_len = BD_NAME_LEN; |
| |
| if (p_remote_name && p_remote_name_len) { |
| memcpy(p_remote_name, p_eir_remote_name, remote_name_len); |
| *(p_remote_name + remote_name_len) = 0; |
| *p_remote_name_len = remote_name_len; |
| } |
| |
| return true; |
| } |
| } |
| |
| return false; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function check_cached_remote_name |
| * |
| * Description Check if remote name is in the NVRAM cache |
| * |
| * Returns true if remote name found |
| * Populate p_remote_name, if provided and remote name found |
| * |
| ******************************************************************************/ |
| static bool check_cached_remote_name(tBTA_DM_SEARCH* p_search_data, |
| uint8_t* p_remote_name, |
| uint8_t* p_remote_name_len) { |
| bt_bdname_t bdname; |
| bt_property_t prop_name; |
| |
| /* check if we already have it in our btif_storage cache */ |
| |
| BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_BDNAME, |
| sizeof(bt_bdname_t), &bdname); |
| if (btif_storage_get_remote_device_property( |
| &p_search_data->inq_res.bd_addr, &prop_name) == BT_STATUS_SUCCESS) { |
| if (p_remote_name && p_remote_name_len) { |
| strcpy((char*)p_remote_name, (char*)bdname.name); |
| *p_remote_name_len = strlen((char*)p_remote_name); |
| } |
| return true; |
| } |
| |
| return false; |
| } |
| |
| static uint32_t get_cod(const RawAddress* remote_bdaddr) { |
| uint32_t remote_cod; |
| bt_property_t prop_name; |
| |
| /* check if we already have it in our btif_storage cache */ |
| BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_CLASS_OF_DEVICE, |
| sizeof(uint32_t), &remote_cod); |
| if (btif_storage_get_remote_device_property( |
| (RawAddress*)remote_bdaddr, &prop_name) == BT_STATUS_SUCCESS) { |
| LOG_INFO("%s remote_cod = 0x%08x", __func__, remote_cod); |
| return remote_cod & COD_MASK; |
| } |
| |
| return 0; |
| } |
| |
| bool check_cod(const RawAddress* remote_bdaddr, uint32_t cod) { |
| return get_cod(remote_bdaddr) == cod; |
| } |
| |
| bool check_cod_hid(const RawAddress* remote_bdaddr) { |
| return (get_cod(remote_bdaddr) & COD_HID_MASK) == COD_HID_MAJOR; |
| } |
| |
| bool check_cod_hid(const RawAddress& bd_addr) { |
| return (get_cod(&bd_addr) & COD_HID_MASK) == COD_HID_MAJOR; |
| } |
| |
| /***************************************************************************** |
| * |
| * Function check_sdp_bl |
| * |
| * Description Checks if a given device is rejectlisted to skip sdp |
| * |
| * Parameters skip_sdp_entry |
| * |
| * Returns true if the device is present in rejectlist, else false |
| * |
| ******************************************************************************/ |
| static bool check_sdp_bl(const RawAddress* remote_bdaddr) { |
| bt_property_t prop_name; |
| bt_remote_version_t info; |
| |
| if (remote_bdaddr == NULL) return false; |
| |
| /* if not available yet, try fetching from config database */ |
| BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_REMOTE_VERSION_INFO, |
| sizeof(bt_remote_version_t), &info); |
| |
| if (btif_storage_get_remote_device_property(remote_bdaddr, &prop_name) != |
| BT_STATUS_SUCCESS) { |
| return false; |
| } |
| uint16_t manufacturer = info.manufacturer; |
| |
| for (unsigned int i = 0; i < ARRAY_SIZE(sdp_rejectlist); i++) { |
| if (manufacturer == sdp_rejectlist[i].manufact_id) return true; |
| } |
| return false; |
| } |
| |
| static void bond_state_changed(bt_status_t status, const RawAddress& bd_addr, |
| bt_bond_state_t state) { |
| btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_BOND_STATE_CHANGED, state); |
| |
| if ((pairing_cb.state == state) && (state == BT_BOND_STATE_BONDING)) { |
| // Cross key pairing so send callback for static address |
| if (!pairing_cb.static_bdaddr.IsEmpty()) { |
| invoke_bond_state_changed_cb(status, bd_addr, state, |
| pairing_cb.fail_reason); |
| } |
| return; |
| } |
| |
| if (pairing_cb.bond_type == tBTM_SEC_DEV_REC::BOND_TYPE_TEMPORARY) { |
| state = BT_BOND_STATE_NONE; |
| } |
| |
| LOG_INFO( |
| "Bond state changed to state=%d [0:none, 1:bonding, 2:bonded]," |
| " prev_state=%d, sdp_attempts = %d", |
| state, pairing_cb.state, pairing_cb.sdp_attempts); |
| |
| if (state == BT_BOND_STATE_NONE) { |
| forget_device_from_metric_id_allocator(bd_addr); |
| } else if (state == BT_BOND_STATE_BONDED) { |
| allocate_metric_id_from_metric_id_allocator(bd_addr); |
| if (!save_metric_id_from_metric_id_allocator(bd_addr)) { |
| LOG(FATAL) << __func__ << ": Fail to save metric id for device " |
| << bd_addr; |
| } |
| } |
| invoke_bond_state_changed_cb(status, bd_addr, state, pairing_cb.fail_reason); |
| |
| int dev_type; |
| if (!btif_get_device_type(bd_addr, &dev_type)) { |
| dev_type = BT_DEVICE_TYPE_BREDR; |
| } |
| |
| if (state == BT_BOND_STATE_BONDING || |
| (state == BT_BOND_STATE_BONDED && pairing_cb.sdp_attempts > 0)) { |
| // Save state for the device is bonding or SDP. |
| pairing_cb.state = state; |
| pairing_cb.bd_addr = bd_addr; |
| } else { |
| pairing_cb = {}; |
| } |
| } |
| |
| /* store remote version in bt config to always have access |
| to it post pairing*/ |
| static void btif_update_remote_version_property(RawAddress* p_bd) { |
| bt_property_t property; |
| uint8_t lmp_ver = 0; |
| uint16_t lmp_subver = 0; |
| uint16_t mfct_set = 0; |
| bt_remote_version_t info; |
| bt_status_t status; |
| |
| CHECK(p_bd != nullptr); |
| |
| const bool version_info_valid = |
| BTM_ReadRemoteVersion(*p_bd, &lmp_ver, &mfct_set, &lmp_subver); |
| |
| LOG_INFO("Remote version info valid:%s [%s]: %x, %x, %x", |
| logbool(version_info_valid).c_str(), PRIVATE_ADDRESS((*p_bd)), |
| lmp_ver, mfct_set, lmp_subver); |
| |
| if (version_info_valid) { |
| // Always update cache to ensure we have availability whenever BTM API is |
| // not populated |
| info.manufacturer = mfct_set; |
| info.sub_ver = lmp_subver; |
| info.version = lmp_ver; |
| BTIF_STORAGE_FILL_PROPERTY(&property, BT_PROPERTY_REMOTE_VERSION_INFO, |
| sizeof(bt_remote_version_t), &info); |
| status = btif_storage_set_remote_device_property(p_bd, &property); |
| ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote version", |
| status); |
| } |
| } |
| |
| static void btif_update_remote_properties(const RawAddress& bdaddr, |
| BD_NAME bd_name, DEV_CLASS dev_class, |
| tBT_DEVICE_TYPE device_type) { |
| int num_properties = 0; |
| bt_property_t properties[3]; |
| bt_status_t status = BT_STATUS_UNHANDLED; |
| uint32_t cod; |
| bt_device_type_t dev_type; |
| |
| memset(properties, 0, sizeof(properties)); |
| |
| /* remote name */ |
| if (strlen((const char*)bd_name)) { |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], BT_PROPERTY_BDNAME, |
| strlen((char*)bd_name), bd_name); |
| if (!bluetooth::shim::is_gd_security_enabled()) { |
| status = btif_storage_set_remote_device_property( |
| &bdaddr, &properties[num_properties]); |
| ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device name", |
| status); |
| } |
| num_properties++; |
| } |
| |
| /* class of device */ |
| cod = devclass2uint(dev_class); |
| if (cod == 0) { |
| /* Try to retrieve cod from storage */ |
| LOG_VERBOSE("class of device (cod) is unclassified, checking storage"); |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod); |
| status = btif_storage_get_remote_device_property( |
| &bdaddr, &properties[num_properties]); |
| LOG_VERBOSE("cod retrieved from storage is 0x%06x", cod); |
| if (cod == 0) { |
| LOG_INFO("cod from storage is also unclassified"); |
| cod = COD_UNCLASSIFIED; |
| } |
| } else { |
| LOG_INFO("class of device (cod) is 0x%06x", cod); |
| } |
| |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod); |
| |
| if (!bluetooth::shim::is_gd_security_enabled()) { |
| status = btif_storage_set_remote_device_property( |
| &bdaddr, &properties[num_properties]); |
| ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device class", |
| status); |
| } |
| num_properties++; |
| |
| /* device type */ |
| bt_property_t prop_name; |
| uint8_t remote_dev_type; |
| BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_TYPE_OF_DEVICE, |
| sizeof(uint8_t), &remote_dev_type); |
| if (btif_storage_get_remote_device_property(&bdaddr, &prop_name) == |
| BT_STATUS_SUCCESS) { |
| dev_type = (bt_device_type_t)(remote_dev_type | device_type); |
| } else { |
| dev_type = (bt_device_type_t)device_type; |
| } |
| |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_TYPE_OF_DEVICE, sizeof(dev_type), |
| &dev_type); |
| if (!bluetooth::shim::is_gd_security_enabled()) { |
| status = btif_storage_set_remote_device_property( |
| &bdaddr, &properties[num_properties]); |
| ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device type", |
| status); |
| } |
| num_properties++; |
| |
| invoke_remote_device_properties_cb(status, bdaddr, num_properties, |
| properties); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_cb_create_bond |
| * |
| * Description Create bond initiated from the BTIF thread context |
| * Special handling for HID devices |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_cb_create_bond(const RawAddress bd_addr, |
| tBT_TRANSPORT transport) { |
| bool is_hid = check_cod(&bd_addr, COD_HID_POINTING); |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| |
| int device_type = 0; |
| tBLE_ADDR_TYPE addr_type = BLE_ADDR_PUBLIC; |
| std::string addrstr = bd_addr.ToString(); |
| const char* bdstr = addrstr.c_str(); |
| if (transport == BT_TRANSPORT_LE) { |
| if (!btif_config_get_int(bdstr, "DevType", &device_type)) { |
| btif_config_set_int(bdstr, "DevType", BT_DEVICE_TYPE_BLE); |
| } |
| if (btif_storage_get_remote_addr_type(&bd_addr, &addr_type) != |
| BT_STATUS_SUCCESS) { |
| // Try to read address type. OOB pairing might have set it earlier, but |
| // didn't store it, it defaults to BLE_ADDR_PUBLIC |
| uint8_t tmp_dev_type; |
| tBLE_ADDR_TYPE tmp_addr_type = BLE_ADDR_PUBLIC; |
| BTM_ReadDevInfo(bd_addr, &tmp_dev_type, &tmp_addr_type); |
| addr_type = tmp_addr_type; |
| |
| btif_storage_set_remote_addr_type(&bd_addr, addr_type); |
| } |
| } |
| if ((btif_config_get_int(bdstr, "DevType", &device_type) && |
| (btif_storage_get_remote_addr_type(&bd_addr, &addr_type) == |
| BT_STATUS_SUCCESS) && |
| (device_type & BT_DEVICE_TYPE_BLE) == BT_DEVICE_TYPE_BLE) || |
| (transport == BT_TRANSPORT_LE)) { |
| BTA_DmAddBleDevice(bd_addr, addr_type, |
| static_cast<tBT_DEVICE_TYPE>(device_type)); |
| } |
| |
| if (is_hid && (device_type & BT_DEVICE_TYPE_BLE) == 0) { |
| const bt_status_t status = btif_hh_connect(&bd_addr); |
| if (status != BT_STATUS_SUCCESS) |
| bond_state_changed(status, bd_addr, BT_BOND_STATE_NONE); |
| } else { |
| BTA_DmBond(bd_addr, addr_type, transport, device_type); |
| } |
| /* Track originator of bond creation */ |
| pairing_cb.is_local_initiated = true; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_get_connection_state |
| * |
| * Description Returns whether the remote device is currently connected |
| * and whether encryption is active for the connection |
| * |
| * Returns 0 if not connected; 1 if connected and > 1 if connection is |
| * encrypted |
| * |
| ******************************************************************************/ |
| uint16_t btif_dm_get_connection_state(const RawAddress* bd_addr) { |
| uint16_t rc = BTA_DmGetConnectionState(*bd_addr); |
| |
| if (rc != 0) { |
| if (BTM_IsEncrypted(*bd_addr, BT_TRANSPORT_BR_EDR)) { |
| rc |= ENCRYPTED_BREDR; |
| } |
| if (BTM_IsEncrypted(*bd_addr, BT_TRANSPORT_LE)) { |
| rc |= ENCRYPTED_LE; |
| } |
| } |
| |
| return rc; |
| } |
| |
| /****************************************************************************** |
| * |
| * BTIF DM callback events |
| * |
| ****************************************************************************/ |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_pin_req_evt |
| * |
| * Description Executes pin request event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_pin_req_evt(tBTA_DM_PIN_REQ* p_pin_req) { |
| bt_bdname_t bd_name; |
| uint32_t cod; |
| bt_pin_code_t pin_code; |
| int dev_type; |
| |
| /* Remote properties update */ |
| if (BTM_GetPeerDeviceTypeFromFeatures(p_pin_req->bd_addr) == |
| BT_DEVICE_TYPE_DUMO) { |
| dev_type = BT_DEVICE_TYPE_DUMO; |
| } else if (!btif_get_device_type(p_pin_req->bd_addr, &dev_type)) { |
| // Failed to get device type, defaulting to BR/EDR. |
| dev_type = BT_DEVICE_TYPE_BREDR; |
| } |
| btif_update_remote_properties(p_pin_req->bd_addr, p_pin_req->bd_name, |
| p_pin_req->dev_class, |
| (tBT_DEVICE_TYPE)dev_type); |
| |
| const RawAddress& bd_addr = p_pin_req->bd_addr; |
| memcpy(bd_name.name, p_pin_req->bd_name, BD_NAME_LEN); |
| bd_name.name[BD_NAME_LEN] = '\0'; |
| |
| if (pairing_cb.state == BT_BOND_STATE_BONDING && |
| bd_addr != pairing_cb.bd_addr) { |
| BTIF_TRACE_WARNING("%s(): already in bonding state, reject request", |
| __FUNCTION__); |
| return; |
| } |
| |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| |
| cod = devclass2uint(p_pin_req->dev_class); |
| |
| if (cod == 0) { |
| BTIF_TRACE_DEBUG("%s cod is 0, set as unclassified", __func__); |
| cod = COD_UNCLASSIFIED; |
| } |
| |
| /* check for auto pair possiblity only if bond was initiated by local device |
| */ |
| if (pairing_cb.is_local_initiated && !p_pin_req->min_16_digit) { |
| if (check_cod(&bd_addr, COD_AV_HEADSETS) || |
| check_cod(&bd_addr, COD_AV_HEADPHONES) || |
| check_cod(&bd_addr, COD_AV_PORTABLE_AUDIO) || |
| check_cod(&bd_addr, COD_AV_HIFI_AUDIO) || |
| check_cod(&bd_addr, COD_HID_POINTING)) { |
| /* Check if this device can be auto paired */ |
| if (!interop_match_addr(INTEROP_DISABLE_AUTO_PAIRING, &bd_addr) && |
| !interop_match_name(INTEROP_DISABLE_AUTO_PAIRING, |
| (const char*)bd_name.name) && |
| (pairing_cb.autopair_attempts == 0)) { |
| BTIF_TRACE_DEBUG("%s() Attempting auto pair", __func__); |
| pin_code.pin[0] = 0x30; |
| pin_code.pin[1] = 0x30; |
| pin_code.pin[2] = 0x30; |
| pin_code.pin[3] = 0x30; |
| |
| pairing_cb.autopair_attempts++; |
| BTA_DmPinReply(bd_addr, true, 4, pin_code.pin); |
| return; |
| } |
| } else if (check_cod(&bd_addr, COD_HID_KEYBOARD) || |
| check_cod(&bd_addr, COD_HID_COMBO)) { |
| if ((interop_match_addr(INTEROP_KEYBOARD_REQUIRES_FIXED_PIN, &bd_addr) == |
| true) && |
| (pairing_cb.autopair_attempts == 0)) { |
| BTIF_TRACE_DEBUG("%s() Attempting auto pair", __func__); |
| pin_code.pin[0] = 0x30; |
| pin_code.pin[1] = 0x30; |
| pin_code.pin[2] = 0x30; |
| pin_code.pin[3] = 0x30; |
| |
| pairing_cb.autopair_attempts++; |
| BTA_DmPinReply(bd_addr, true, 4, pin_code.pin); |
| return; |
| } |
| } |
| } |
| invoke_pin_request_cb(bd_addr, bd_name, cod, p_pin_req->min_16_digit); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_ssp_cfm_req_evt |
| * |
| * Description Executes SSP confirm request event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_ssp_cfm_req_evt(tBTA_DM_SP_CFM_REQ* p_ssp_cfm_req) { |
| bt_bdname_t bd_name; |
| bool is_incoming = !(pairing_cb.state == BT_BOND_STATE_BONDING); |
| uint32_t cod; |
| int dev_type; |
| |
| BTIF_TRACE_DEBUG("%s", __func__); |
| |
| /* Remote properties update */ |
| if (BTM_GetPeerDeviceTypeFromFeatures(p_ssp_cfm_req->bd_addr) == |
| BT_DEVICE_TYPE_DUMO) { |
| dev_type = BT_DEVICE_TYPE_DUMO; |
| } else if (!btif_get_device_type(p_ssp_cfm_req->bd_addr, &dev_type)) { |
| // Failed to get device type, defaulting to BR/EDR. |
| dev_type = BT_DEVICE_TYPE_BREDR; |
| } |
| btif_update_remote_properties(p_ssp_cfm_req->bd_addr, p_ssp_cfm_req->bd_name, |
| p_ssp_cfm_req->dev_class, |
| (tBT_DEVICE_TYPE)dev_type); |
| |
| RawAddress bd_addr = p_ssp_cfm_req->bd_addr; |
| memcpy(bd_name.name, p_ssp_cfm_req->bd_name, BD_NAME_LEN); |
| |
| if (pairing_cb.state == BT_BOND_STATE_BONDING && |
| bd_addr != pairing_cb.bd_addr) { |
| BTIF_TRACE_WARNING("%s(): already in bonding state, reject request", |
| __FUNCTION__); |
| btif_dm_ssp_reply(bd_addr, BT_SSP_VARIANT_PASSKEY_CONFIRMATION, 0); |
| return; |
| } |
| |
| /* Set the pairing_cb based on the local & remote authentication requirements |
| */ |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| |
| BTIF_TRACE_EVENT("%s: just_works:%d, loc_auth_req=%d, rmt_auth_req=%d", |
| __func__, p_ssp_cfm_req->just_works, |
| p_ssp_cfm_req->loc_auth_req, p_ssp_cfm_req->rmt_auth_req); |
| |
| /* if just_works and bonding bit is not set treat this as temporary */ |
| if (p_ssp_cfm_req->just_works && |
| !(p_ssp_cfm_req->loc_auth_req & BTM_AUTH_BONDS) && |
| !(p_ssp_cfm_req->rmt_auth_req & BTM_AUTH_BONDS) && |
| !(check_cod((RawAddress*)&p_ssp_cfm_req->bd_addr, COD_HID_POINTING))) |
| pairing_cb.bond_type = tBTM_SEC_DEV_REC::BOND_TYPE_TEMPORARY; |
| else |
| pairing_cb.bond_type = tBTM_SEC_DEV_REC::BOND_TYPE_PERSISTENT; |
| |
| btm_set_bond_type_dev(p_ssp_cfm_req->bd_addr, pairing_cb.bond_type); |
| |
| pairing_cb.is_ssp = true; |
| |
| /* If JustWorks auto-accept */ |
| if (p_ssp_cfm_req->just_works) { |
| /* Pairing consent for JustWorks NOT needed if: |
| * 1. Incoming temporary pairing is detected |
| */ |
| if (is_incoming && |
| pairing_cb.bond_type == tBTM_SEC_DEV_REC::BOND_TYPE_TEMPORARY) { |
| BTIF_TRACE_EVENT( |
| "%s: Auto-accept JustWorks pairing for temporary incoming", __func__); |
| btif_dm_ssp_reply(bd_addr, BT_SSP_VARIANT_CONSENT, true); |
| return; |
| } |
| } |
| |
| cod = devclass2uint(p_ssp_cfm_req->dev_class); |
| |
| if (cod == 0) { |
| LOG_INFO("%s cod is 0, set as unclassified", __func__); |
| cod = COD_UNCLASSIFIED; |
| } |
| |
| pairing_cb.sdp_attempts = 0; |
| invoke_ssp_request_cb( |
| bd_addr, bd_name, cod, |
| (p_ssp_cfm_req->just_works ? BT_SSP_VARIANT_CONSENT |
| : BT_SSP_VARIANT_PASSKEY_CONFIRMATION), |
| p_ssp_cfm_req->num_val); |
| } |
| |
| static void btif_dm_ssp_key_notif_evt(tBTA_DM_SP_KEY_NOTIF* p_ssp_key_notif) { |
| bt_bdname_t bd_name; |
| uint32_t cod; |
| int dev_type; |
| |
| BTIF_TRACE_DEBUG("%s", __func__); |
| |
| /* Remote properties update */ |
| if (BTM_GetPeerDeviceTypeFromFeatures(p_ssp_key_notif->bd_addr) == |
| BT_DEVICE_TYPE_DUMO) { |
| dev_type = BT_DEVICE_TYPE_DUMO; |
| } else if (!btif_get_device_type(p_ssp_key_notif->bd_addr, &dev_type)) { |
| // Failed to get device type, defaulting to BR/EDR. |
| dev_type = BT_DEVICE_TYPE_BREDR; |
| } |
| btif_update_remote_properties( |
| p_ssp_key_notif->bd_addr, p_ssp_key_notif->bd_name, |
| p_ssp_key_notif->dev_class, (tBT_DEVICE_TYPE)dev_type); |
| |
| RawAddress bd_addr = p_ssp_key_notif->bd_addr; |
| memcpy(bd_name.name, p_ssp_key_notif->bd_name, BD_NAME_LEN); |
| bd_name.name[BD_NAME_LEN] = '\0'; |
| |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| pairing_cb.is_ssp = true; |
| cod = devclass2uint(p_ssp_key_notif->dev_class); |
| |
| if (cod == 0) { |
| LOG_INFO("%s cod is 0, set as unclassified", __func__); |
| cod = COD_UNCLASSIFIED; |
| } |
| |
| invoke_ssp_request_cb(bd_addr, bd_name, cod, |
| BT_SSP_VARIANT_PASSKEY_NOTIFICATION, |
| p_ssp_key_notif->passkey); |
| } |
| /******************************************************************************* |
| * |
| * Function btif_dm_auth_cmpl_evt |
| * |
| * Description Executes authentication complete event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_auth_cmpl_evt(tBTA_DM_AUTH_CMPL* p_auth_cmpl) { |
| /* Save link key, if not temporary */ |
| bt_status_t status = BT_STATUS_FAIL; |
| bt_bond_state_t state = BT_BOND_STATE_NONE; |
| bool skip_sdp = false; |
| |
| BTIF_TRACE_DEBUG("%s: bond state=%d, success=%d, key_present=%d", __func__, |
| pairing_cb.state, p_auth_cmpl->success, |
| p_auth_cmpl->key_present); |
| |
| pairing_cb.fail_reason = p_auth_cmpl->fail_reason; |
| |
| RawAddress bd_addr = p_auth_cmpl->bd_addr; |
| if (!bluetooth::shim::is_gd_security_enabled()) { |
| if ((p_auth_cmpl->success) && (p_auth_cmpl->key_present)) { |
| if ((p_auth_cmpl->key_type < HCI_LKEY_TYPE_DEBUG_COMB) || |
| (p_auth_cmpl->key_type == HCI_LKEY_TYPE_AUTH_COMB) || |
| (p_auth_cmpl->key_type == HCI_LKEY_TYPE_CHANGED_COMB) || |
| (p_auth_cmpl->key_type == HCI_LKEY_TYPE_AUTH_COMB_P_256) || |
| pairing_cb.bond_type == tBTM_SEC_DEV_REC::BOND_TYPE_PERSISTENT) { |
| bt_status_t ret; |
| BTIF_TRACE_DEBUG("%s: Storing link key. key_type=0x%x, bond_type=%d", |
| __func__, p_auth_cmpl->key_type, pairing_cb.bond_type); |
| if (!bd_addr.IsEmpty()) { |
| ret = btif_storage_add_bonded_device(&bd_addr, p_auth_cmpl->key, |
| p_auth_cmpl->key_type, |
| pairing_cb.pin_code_len); |
| } else { |
| LOG_WARN("bd_addr is empty"); |
| ret = BT_STATUS_FAIL; |
| } |
| ASSERTC(ret == BT_STATUS_SUCCESS, "storing link key failed", ret); |
| } else { |
| BTIF_TRACE_DEBUG( |
| "%s: Temporary key. Not storing. key_type=0x%x, bond_type=%d", |
| __func__, p_auth_cmpl->key_type, pairing_cb.bond_type); |
| if (pairing_cb.bond_type == tBTM_SEC_DEV_REC::BOND_TYPE_TEMPORARY) { |
| BTIF_TRACE_DEBUG("%s: sending BT_BOND_STATE_NONE for Temp pairing", |
| __func__); |
| btif_storage_remove_bonded_device(&bd_addr); |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_NONE); |
| return; |
| } |
| } |
| } |
| } |
| |
| if (p_auth_cmpl->success) { |
| // We could have received a new link key without going through the pairing |
| // flow. If so, we don't want to perform SDP or any other operations on the |
| // authenticated device. Also, make sure that the link key is not derived |
| // from secure LTK, because we will need to perform SDP in case of link key |
| // derivation to allow bond state change notification for the BR/EDR |
| // transport so that the subsequent BR/EDR connections to the remote can use |
| // the derived link key. |
| if (p_auth_cmpl->bd_addr != pairing_cb.bd_addr && |
| (!pairing_cb.ble.is_penc_key_rcvd)) { |
| LOG(INFO) << __func__ |
| << " skipping SDP since we did not initiate pairing to " |
| << p_auth_cmpl->bd_addr; |
| return; |
| } |
| |
| if (!bluetooth::shim::is_gd_security_enabled()) { |
| btif_storage_set_remote_addr_type(&bd_addr, p_auth_cmpl->addr_type); |
| } |
| |
| int dev_type; |
| if (BTM_GetPeerDeviceTypeFromFeatures(bd_addr) == BT_DEVICE_TYPE_DUMO) { |
| dev_type = BT_DEVICE_TYPE_DUMO; |
| } else { |
| dev_type = p_auth_cmpl->dev_type; |
| } |
| |
| bool is_crosskey = false; |
| if (pairing_cb.state == BT_BOND_STATE_BONDING && |
| p_auth_cmpl->bd_addr != pairing_cb.bd_addr) { |
| LOG_INFO("bonding initiated due to cross key pairing"); |
| is_crosskey = true; |
| } |
| |
| if (!is_crosskey || !enable_address_consolidate) { |
| btif_update_remote_properties(p_auth_cmpl->bd_addr, p_auth_cmpl->bd_name, |
| NULL, dev_type); |
| } |
| |
| pairing_cb.timeout_retries = 0; |
| status = BT_STATUS_SUCCESS; |
| state = BT_BOND_STATE_BONDED; |
| bd_addr = p_auth_cmpl->bd_addr; |
| |
| if (check_sdp_bl(&bd_addr) && check_cod_hid(&bd_addr)) { |
| LOG_WARN("%s:skip SDP", __func__); |
| skip_sdp = true; |
| } |
| if (!pairing_cb.is_local_initiated && skip_sdp) { |
| bond_state_changed(status, bd_addr, state); |
| |
| LOG_WARN("%s: Incoming HID Connection", __func__); |
| bt_property_t prop; |
| Uuid uuid = Uuid::From16Bit(UUID_SERVCLASS_HUMAN_INTERFACE); |
| |
| prop.type = BT_PROPERTY_UUIDS; |
| prop.val = &uuid; |
| prop.len = Uuid::kNumBytes128; |
| |
| invoke_remote_device_properties_cb(BT_STATUS_SUCCESS, bd_addr, 1, &prop); |
| } else { |
| /* If bonded due to cross-key, save the static address too*/ |
| if (pairing_cb.state == BT_BOND_STATE_BONDING && |
| p_auth_cmpl->bd_addr != pairing_cb.bd_addr) { |
| BTIF_TRACE_DEBUG( |
| "%s: bonding initiated due to cross key, adding static address", |
| __func__); |
| pairing_cb.static_bdaddr = bd_addr; |
| } |
| if (!is_crosskey || |
| !(stack_config_get_interface()->get_pts_crosskey_sdp_disable())) { |
| // Ensure inquiry is stopped before attempting service discovery |
| btif_dm_cancel_discovery(); |
| |
| /* Trigger SDP on the device */ |
| pairing_cb.sdp_attempts = 1; |
| |
| if (is_crosskey && enable_address_consolidate) { |
| // If bonding occurred due to cross-key pairing, send address |
| // consolidate callback |
| invoke_address_consolidate_cb(pairing_cb.bd_addr, bd_addr); |
| } else if (is_crosskey && !enable_address_consolidate) { |
| // TODO remove |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDED); |
| } else { |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDED); |
| } |
| btif_dm_get_remote_services(bd_addr, BT_TRANSPORT_AUTO); |
| } |
| } |
| // Do not call bond_state_changed_cb yet. Wait until remote service |
| // discovery is complete |
| } else { |
| bool is_bonded_device_removed = false; |
| // Map the HCI fail reason to bt status |
| switch (p_auth_cmpl->fail_reason) { |
| case HCI_ERR_PAGE_TIMEOUT: |
| case HCI_ERR_LMP_RESPONSE_TIMEOUT: |
| if (interop_match_addr(INTEROP_AUTO_RETRY_PAIRING, &bd_addr) && |
| pairing_cb.timeout_retries) { |
| BTIF_TRACE_WARNING("%s() - Pairing timeout; retrying (%d) ...", |
| __func__, pairing_cb.timeout_retries); |
| --pairing_cb.timeout_retries; |
| btif_dm_cb_create_bond(bd_addr, BT_TRANSPORT_AUTO); |
| return; |
| } |
| FALLTHROUGH_INTENDED; /* FALLTHROUGH */ |
| case HCI_ERR_CONNECTION_TOUT: |
| status = BT_STATUS_RMT_DEV_DOWN; |
| break; |
| |
| case HCI_ERR_PAIRING_NOT_ALLOWED: |
| is_bonded_device_removed = false; |
| status = BT_STATUS_AUTH_REJECTED; |
| break; |
| |
| /* map the auth failure codes, so we can retry pairing if necessary */ |
| case HCI_ERR_AUTH_FAILURE: |
| case HCI_ERR_KEY_MISSING: |
| is_bonded_device_removed = false; |
| [[fallthrough]]; |
| case HCI_ERR_HOST_REJECT_SECURITY: |
| case HCI_ERR_ENCRY_MODE_NOT_ACCEPTABLE: |
| case HCI_ERR_UNIT_KEY_USED: |
| case HCI_ERR_PAIRING_WITH_UNIT_KEY_NOT_SUPPORTED: |
| case HCI_ERR_INSUFFCIENT_SECURITY: |
| case HCI_ERR_PEER_USER: |
| case HCI_ERR_UNSPECIFIED: |
| BTIF_TRACE_DEBUG(" %s() Authentication fail reason %d", __func__, |
| p_auth_cmpl->fail_reason); |
| if (pairing_cb.autopair_attempts == 1) { |
| /* Create the Bond once again */ |
| BTIF_TRACE_WARNING("%s() auto pair failed. Reinitiate Bond", |
| __func__); |
| btif_dm_cb_create_bond(bd_addr, BT_TRANSPORT_AUTO); |
| return; |
| } else { |
| /* if autopair attempts are more than 1, or not attempted */ |
| status = BT_STATUS_AUTH_FAILURE; |
| } |
| break; |
| |
| default: |
| status = BT_STATUS_FAIL; |
| } |
| /* Special Handling for HID Devices */ |
| if (check_cod(&bd_addr, COD_HID_POINTING)) { |
| /* Remove Device as bonded in nvram as authentication failed */ |
| BTIF_TRACE_DEBUG("%s(): removing hid pointing device from nvram", |
| __func__); |
| is_bonded_device_removed = false; |
| } |
| // Report bond state change to java only if we are bonding to a device or |
| // a device is removed from the pairing list. |
| if (pairing_cb.state == BT_BOND_STATE_BONDING || is_bonded_device_removed) { |
| bond_state_changed(status, bd_addr, state); |
| } |
| } |
| } |
| |
| /****************************************************************************** |
| * |
| * Function btif_dm_search_devices_evt |
| * |
| * Description Executes search devices callback events in btif context |
| * |
| * Returns void |
| * |
| *****************************************************************************/ |
| static void btif_dm_search_devices_evt(tBTA_DM_SEARCH_EVT event, |
| tBTA_DM_SEARCH* p_search_data) { |
| BTIF_TRACE_EVENT("%s event=%s", __func__, dump_dm_search_event(event)); |
| |
| switch (event) { |
| case BTA_DM_DISC_RES_EVT: { |
| /* Remote name update */ |
| if (strlen((const char*)p_search_data->disc_res.bd_name)) { |
| bt_property_t properties[1]; |
| bt_status_t status; |
| |
| properties[0].type = BT_PROPERTY_BDNAME; |
| properties[0].val = p_search_data->disc_res.bd_name; |
| properties[0].len = strlen((char*)p_search_data->disc_res.bd_name); |
| RawAddress& bdaddr = p_search_data->disc_res.bd_addr; |
| |
| status = |
| btif_storage_set_remote_device_property(&bdaddr, &properties[0]); |
| ASSERTC(status == BT_STATUS_SUCCESS, |
| "failed to save remote device property", status); |
| invoke_remote_device_properties_cb(status, bdaddr, 1, properties); |
| } |
| /* TODO: Services? */ |
| } break; |
| |
| case BTA_DM_INQ_RES_EVT: { |
| /* inquiry result */ |
| bt_bdname_t bdname; |
| uint8_t remote_name_len; |
| tBTA_SERVICE_MASK services = 0; |
| |
| p_search_data->inq_res.remt_name_not_required = |
| check_eir_remote_name(p_search_data, NULL, NULL); |
| RawAddress& bdaddr = p_search_data->inq_res.bd_addr; |
| |
| BTIF_TRACE_DEBUG("%s() %s device_type = 0x%x\n", __func__, |
| bdaddr.ToString().c_str(), |
| p_search_data->inq_res.device_type); |
| bdname.name[0] = 0; |
| |
| if (!check_eir_remote_name(p_search_data, bdname.name, &remote_name_len)) |
| check_cached_remote_name(p_search_data, bdname.name, &remote_name_len); |
| |
| /* Check EIR for remote name and services */ |
| if (p_search_data->inq_res.p_eir) { |
| BTA_GetEirService(p_search_data->inq_res.p_eir, |
| p_search_data->inq_res.eir_len, &services); |
| BTIF_TRACE_DEBUG("%s()EIR BTA services = %08X", __func__, |
| (uint32_t)services); |
| /* TODO: Get the service list and check to see which uuids we got and |
| * send it back to the client. */ |
| } |
| |
| { |
| bt_property_t properties[6]; |
| bt_device_type_t dev_type; |
| uint32_t num_properties = 0; |
| bt_status_t status; |
| tBLE_ADDR_TYPE addr_type = BLE_ADDR_PUBLIC; |
| |
| memset(properties, 0, sizeof(properties)); |
| /* RawAddress */ |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_BDADDR, sizeof(bdaddr), &bdaddr); |
| num_properties++; |
| /* BD_NAME */ |
| /* Don't send BDNAME if it is empty */ |
| if (bdname.name[0]) { |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_BDNAME, |
| strlen((char*)bdname.name), &bdname); |
| num_properties++; |
| } |
| |
| /* DEV_CLASS */ |
| uint32_t cod = devclass2uint(p_search_data->inq_res.dev_class); |
| BTIF_TRACE_DEBUG("%s cod is 0x%06x", __func__, cod); |
| if (cod != 0) { |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), |
| &cod); |
| num_properties++; |
| } |
| |
| /* DEV_TYPE */ |
| /* FixMe: Assumption is that bluetooth.h and BTE enums match */ |
| |
| /* Verify if the device is dual mode in NVRAM */ |
| int stored_device_type = 0; |
| if (btif_get_device_type(bdaddr, &stored_device_type) && |
| ((stored_device_type != BT_DEVICE_TYPE_BREDR && |
| p_search_data->inq_res.device_type == BT_DEVICE_TYPE_BREDR) || |
| (stored_device_type != BT_DEVICE_TYPE_BLE && |
| p_search_data->inq_res.device_type == BT_DEVICE_TYPE_BLE))) { |
| dev_type = (bt_device_type_t)BT_DEVICE_TYPE_DUMO; |
| } else { |
| dev_type = (bt_device_type_t)p_search_data->inq_res.device_type; |
| } |
| |
| if (p_search_data->inq_res.device_type == BT_DEVICE_TYPE_BLE) |
| addr_type = p_search_data->inq_res.ble_addr_type; |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_TYPE_OF_DEVICE, sizeof(dev_type), |
| &dev_type); |
| num_properties++; |
| /* RSSI */ |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_REMOTE_RSSI, sizeof(int8_t), |
| &(p_search_data->inq_res.rssi)); |
| num_properties++; |
| |
| /* CSIP supported device */ |
| BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties], |
| BT_PROPERTY_REMOTE_IS_COORDINATED_SET_MEMBER, |
| sizeof(bool), |
| &(p_search_data->inq_res.include_rsi)); |
| num_properties++; |
| |
| status = |
| btif_storage_add_remote_device(&bdaddr, num_properties, properties); |
| ASSERTC(status == BT_STATUS_SUCCESS, |
| "failed to save remote device (inquiry)", status); |
| status = btif_storage_set_remote_addr_type(&bdaddr, addr_type); |
| ASSERTC(status == BT_STATUS_SUCCESS, |
| "failed to save remote addr type (inquiry)", status); |
| /* Callback to notify upper layer of device */ |
| invoke_device_found_cb(num_properties, properties); |
| } |
| } break; |
| |
| case BTA_DM_INQ_CMPL_EVT: { |
| /* do nothing */ |
| } break; |
| case BTA_DM_DISC_CMPL_EVT: { |
| invoke_discovery_state_changed_cb(BT_DISCOVERY_STOPPED); |
| } break; |
| case BTA_DM_SEARCH_CANCEL_CMPL_EVT: { |
| /* if inquiry is not in progress and we get a cancel event, then |
| * it means we are done with inquiry, but remote_name fetches are in |
| * progress |
| * |
| * if inquiry is in progress, then we don't want to act on this |
| * cancel_cmpl_evt |
| * but instead wait for the cancel_cmpl_evt via the Busy Level |
| * |
| */ |
| if (!btif_dm_inquiry_in_progress) { |
| invoke_discovery_state_changed_cb(BT_DISCOVERY_STOPPED); |
| } |
| } break; |
| } |
| } |
| |
| /* Returns true if |uuid| should be passed as device property */ |
| static bool btif_is_interesting_le_service(bluetooth::Uuid uuid) { |
| return (uuid.As16Bit() == UUID_SERVCLASS_LE_HID || uuid == UUID_HEARING_AID || |
| uuid == UUID_VC || uuid == UUID_CSIS || uuid == UUID_LE_AUDIO || |
| uuid == UUID_LE_MIDI || uuid == UUID_HAS || uuid == UUID_BASS || |
| uuid == UUID_BATTERY); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_search_services_evt |
| * |
| * Description Executes search services event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_search_services_evt(tBTA_DM_SEARCH_EVT event, |
| tBTA_DM_SEARCH* p_data) { |
| switch (event) { |
| case BTA_DM_DISC_RES_EVT: { |
| bt_property_t prop; |
| uint32_t i = 0; |
| bt_status_t ret; |
| |
| RawAddress& bd_addr = p_data->disc_res.bd_addr; |
| |
| LOG_VERBOSE("result=0x%x, services 0x%x", p_data->disc_res.result, |
| p_data->disc_res.services); |
| if (p_data->disc_res.result != BTA_SUCCESS && |
| pairing_cb.state == BT_BOND_STATE_BONDED && |
| pairing_cb.sdp_attempts < BTIF_DM_MAX_SDP_ATTEMPTS_AFTER_PAIRING) { |
| if (pairing_cb.sdp_attempts) { |
| LOG_WARN("SDP failed after bonding re-attempting"); |
| pairing_cb.sdp_attempts++; |
| btif_dm_get_remote_services(bd_addr, BT_TRANSPORT_AUTO); |
| } else { |
| LOG_WARN("SDP triggered by someone failed when bonding"); |
| } |
| return; |
| } |
| prop.type = BT_PROPERTY_UUIDS; |
| prop.len = 0; |
| if ((p_data->disc_res.result == BTA_SUCCESS) && |
| (p_data->disc_res.num_uuids > 0)) { |
| prop.val = p_data->disc_res.p_uuid_list; |
| prop.len = p_data->disc_res.num_uuids * Uuid::kNumBytes128; |
| for (i = 0; i < p_data->disc_res.num_uuids; i++) { |
| std::string temp = ((p_data->disc_res.p_uuid_list + i))->ToString(); |
| LOG_INFO("index:%d uuid:%s", i, temp.c_str()); |
| } |
| } |
| |
| /* onUuidChanged requires getBondedDevices to be populated. |
| ** bond_state_changed needs to be sent prior to remote_device_property |
| */ |
| if (pairing_cb.state == BT_BOND_STATE_BONDED && pairing_cb.sdp_attempts && |
| (p_data->disc_res.bd_addr == pairing_cb.bd_addr || |
| p_data->disc_res.bd_addr == pairing_cb.static_bdaddr)) { |
| LOG_INFO("SDP search done for %s", bd_addr.ToString().c_str()); |
| pairing_cb.sdp_attempts = 0; |
| |
| // Both SDP and bonding are done, clear pairing control block in case |
| // it is not already cleared |
| pairing_cb = {}; |
| |
| // Send one empty UUID to Java to unblock pairing intent when SDP failed |
| // or no UUID is discovered |
| if (p_data->disc_res.result != BTA_SUCCESS || |
| p_data->disc_res.num_uuids == 0) { |
| LOG_INFO("SDP failed, send empty UUID to unblock bonding %s", |
| bd_addr.ToString().c_str()); |
| bt_property_t prop_uuids; |
| Uuid uuid = {}; |
| |
| prop_uuids.type = BT_PROPERTY_UUIDS; |
| prop_uuids.val = &uuid; |
| prop_uuids.len = Uuid::kNumBytes128; |
| |
| /* Send the event to the BTIF */ |
| invoke_remote_device_properties_cb(BT_STATUS_SUCCESS, bd_addr, 1, |
| &prop_uuids); |
| break; |
| } |
| } |
| |
| if (p_data->disc_res.num_uuids != 0) { |
| /* Also write this to the NVRAM */ |
| ret = btif_storage_set_remote_device_property(&bd_addr, &prop); |
| ASSERTC(ret == BT_STATUS_SUCCESS, "storing remote services failed", |
| ret); |
| /* Send the event to the BTIF */ |
| invoke_remote_device_properties_cb(BT_STATUS_SUCCESS, bd_addr, 1, |
| &prop); |
| } |
| } break; |
| |
| case BTA_DM_DISC_CMPL_EVT: |
| /* fixme */ |
| break; |
| |
| case BTA_DM_SEARCH_CANCEL_CMPL_EVT: |
| /* no-op */ |
| break; |
| |
| case BTA_DM_DISC_BLE_RES_EVT: { |
| int num_properties = 0; |
| bt_property_t prop[2]; |
| std::vector<uint8_t> property_value; |
| int num_uuids = 0; |
| |
| for (Uuid uuid : *p_data->disc_ble_res.services) { |
| LOG_VERBOSE("service %s", uuid.ToString().c_str()); |
| if (btif_is_interesting_le_service(uuid)) { |
| num_uuids++; |
| auto valAsBe = uuid.To128BitBE(); |
| property_value.insert(property_value.end(), valAsBe.begin(), |
| valAsBe.end()); |
| } |
| } |
| |
| if (num_uuids == 0) { |
| LOG_INFO("No well known BLE services discovered"); |
| return; |
| } |
| |
| RawAddress& bd_addr = p_data->disc_ble_res.bd_addr; |
| prop[0].type = BT_PROPERTY_UUIDS; |
| prop[0].val = (void*)property_value.data(); |
| prop[0].len = Uuid::kNumBytes128 * num_uuids; |
| |
| /* Also write this to the NVRAM */ |
| bt_status_t ret = |
| btif_storage_set_remote_device_property(&bd_addr, &prop[0]); |
| ASSERTC(ret == BT_STATUS_SUCCESS, "storing remote services failed", ret); |
| num_properties++; |
| |
| /* Remote name update */ |
| if (strnlen((const char*)p_data->disc_ble_res.bd_name, BD_NAME_LEN)) { |
| prop[1].type = BT_PROPERTY_BDNAME; |
| prop[1].val = p_data->disc_ble_res.bd_name; |
| prop[1].len = strnlen((char*)p_data->disc_ble_res.bd_name, BD_NAME_LEN); |
| |
| ret = btif_storage_set_remote_device_property(&bd_addr, &prop[1]); |
| ASSERTC(ret == BT_STATUS_SUCCESS, |
| "failed to save remote device property", ret); |
| num_properties++; |
| } |
| |
| /* Send the event to the BTIF */ |
| invoke_remote_device_properties_cb(BT_STATUS_SUCCESS, bd_addr, |
| num_properties, prop); |
| } break; |
| |
| default: { ASSERTC(0, "unhandled search services event", event); } break; |
| } |
| } |
| |
| void BTIF_dm_report_inquiry_status_change(tBTM_STATUS status) { |
| if (status == BTM_INQUIRY_STARTED) { |
| invoke_discovery_state_changed_cb(BT_DISCOVERY_STARTED); |
| btif_dm_inquiry_in_progress = true; |
| } else if (status == BTM_INQUIRY_CANCELLED) { |
| invoke_discovery_state_changed_cb(BT_DISCOVERY_STOPPED); |
| btif_dm_inquiry_in_progress = false; |
| } else if (status == BTM_INQUIRY_COMPLETE) { |
| btif_dm_inquiry_in_progress = false; |
| } |
| } |
| |
| void BTIF_dm_on_hw_error() { |
| BTIF_TRACE_ERROR("Received H/W Error. "); |
| /* Flush storage data */ |
| btif_config_flush(); |
| usleep(100000); /* 100milliseconds */ |
| /* Killing the process to force a restart as part of fault tolerance */ |
| kill(getpid(), SIGKILL); |
| } |
| |
| void BTIF_dm_enable() { |
| BD_NAME bdname; |
| bt_status_t status; |
| bt_property_t prop; |
| prop.type = BT_PROPERTY_BDNAME; |
| prop.len = BD_NAME_LEN; |
| prop.val = (void*)bdname; |
| |
| status = btif_storage_get_adapter_property(&prop); |
| if (status == BT_STATUS_SUCCESS) { |
| /* A name exists in the storage. Make this the device name */ |
| BTA_DmSetDeviceName((const char*)prop.val); |
| } else { |
| /* Storage does not have a name yet. |
| * Use the default name and write it to the chip |
| */ |
| BTA_DmSetDeviceName(btif_get_default_local_name()); |
| } |
| |
| /* Enable or disable local privacy */ |
| bool ble_privacy_enabled = true; |
| #ifdef OS_ANDROID |
| ble_privacy_enabled = |
| android::sysprop::BluetoothProperties::isGapLePrivacyEnabled().value_or( |
| true); |
| #else |
| char ble_privacy_text[PROPERTY_VALUE_MAX] = "true"; // default is enabled |
| if (osi_property_get(PROPERTY_BLE_PRIVACY_ENABLED, ble_privacy_text, |
| "true") && |
| !strcmp(ble_privacy_text, "false")) { |
| ble_privacy_enabled = false; |
| } |
| #endif |
| LOG_INFO("%s BLE Privacy: %d", __func__, ble_privacy_enabled); |
| BTA_DmBleConfigLocalPrivacy(ble_privacy_enabled); |
| |
| /* for each of the enabled services in the mask, trigger the profile |
| * enable */ |
| tBTA_SERVICE_MASK service_mask = btif_get_enabled_services_mask(); |
| for (uint32_t i = 0; i <= BTA_MAX_SERVICE_ID; i++) { |
| if (service_mask & (tBTA_SERVICE_MASK)(BTA_SERVICE_ID_TO_SERVICE_MASK(i))) { |
| btif_in_execute_service_request(i, true); |
| } |
| } |
| /* clear control blocks */ |
| memset(&pairing_cb, 0, sizeof(btif_dm_pairing_cb_t)); |
| pairing_cb.bond_type = tBTM_SEC_DEV_REC::BOND_TYPE_PERSISTENT; |
| if (enable_address_consolidate) { |
| LOG_INFO("enable address consolidate"); |
| btif_storage_load_consolidate_devices(); |
| } |
| |
| /* This function will also trigger the adapter_properties_cb |
| ** and bonded_devices_info_cb |
| */ |
| btif_storage_load_bonded_devices(); |
| bluetooth::bqr::EnableBtQualityReport(true); |
| btif_enable_bluetooth_evt(); |
| } |
| |
| void BTIF_dm_disable() { |
| /* for each of the enabled services in the mask, trigger the profile |
| * disable */ |
| tBTA_SERVICE_MASK service_mask = btif_get_enabled_services_mask(); |
| for (uint32_t i = 0; i <= BTA_MAX_SERVICE_ID; i++) { |
| if (service_mask & (tBTA_SERVICE_MASK)(BTA_SERVICE_ID_TO_SERVICE_MASK(i))) { |
| btif_in_execute_service_request(i, false); |
| } |
| } |
| bluetooth::bqr::EnableBtQualityReport(false); |
| LOG_INFO("Stack device manager shutdown finished"); |
| future_ready(stack_manager_get_hack_future(), FUTURE_SUCCESS); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_upstreams_cback |
| * |
| * Description Executes UPSTREAMS events in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_upstreams_evt(uint16_t event, char* p_param) { |
| tBTA_DM_SEC* p_data = (tBTA_DM_SEC*)p_param; |
| RawAddress bd_addr; |
| |
| BTIF_TRACE_EVENT("%s: ev: %s", __func__, dump_dm_event(event)); |
| |
| switch (event) { |
| case BTA_DM_PIN_REQ_EVT: |
| btif_dm_pin_req_evt(&p_data->pin_req); |
| break; |
| |
| case BTA_DM_AUTH_CMPL_EVT: |
| btif_dm_auth_cmpl_evt(&p_data->auth_cmpl); |
| break; |
| |
| case BTA_DM_BOND_CANCEL_CMPL_EVT: |
| if (is_bonding_or_sdp()) { |
| bd_addr = pairing_cb.bd_addr; |
| btm_set_bond_type_dev(pairing_cb.bd_addr, |
| tBTM_SEC_DEV_REC::BOND_TYPE_UNKNOWN); |
| bond_state_changed((bt_status_t)p_data->bond_cancel_cmpl.result, |
| bd_addr, BT_BOND_STATE_NONE); |
| } |
| break; |
| |
| case BTA_DM_SP_CFM_REQ_EVT: |
| btif_dm_ssp_cfm_req_evt(&p_data->cfm_req); |
| break; |
| case BTA_DM_SP_KEY_NOTIF_EVT: |
| btif_dm_ssp_key_notif_evt(&p_data->key_notif); |
| break; |
| |
| case BTA_DM_DEV_UNPAIRED_EVT: |
| bd_addr = p_data->link_down.bd_addr; |
| btm_set_bond_type_dev(p_data->link_down.bd_addr, |
| tBTM_SEC_DEV_REC::BOND_TYPE_UNKNOWN); |
| |
| /*special handling for HID devices */ |
| #if (defined(BTA_HH_INCLUDED) && (BTA_HH_INCLUDED == TRUE)) |
| btif_hh_remove_device(bd_addr); |
| #endif |
| #if (defined(BTA_HD_INCLUDED) && (BTA_HD_INCLUDED == TRUE)) |
| btif_hd_remove_device(bd_addr); |
| #endif |
| btif_hearing_aid_get_interface()->RemoveDevice(bd_addr); |
| |
| if (bluetooth::csis::CsisClient::IsCsisClientRunning()) |
| btif_csis_client_get_interface()->RemoveDevice(bd_addr); |
| |
| if (LeAudioClient::IsLeAudioClientRunning()) |
| btif_le_audio_get_interface()->RemoveDevice(bd_addr); |
| |
| if (VolumeControl::IsVolumeControlRunning()) { |
| btif_volume_control_get_interface()->RemoveDevice(bd_addr); |
| } |
| |
| btif_storage_remove_bonded_device(&bd_addr); |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_NONE); |
| break; |
| |
| case BTA_DM_LINK_UP_EVT: |
| bd_addr = p_data->link_up.bd_addr; |
| BTIF_TRACE_DEBUG("BTA_DM_LINK_UP_EVT. Sending BT_ACL_STATE_CONNECTED"); |
| |
| btif_update_remote_version_property(&bd_addr); |
| |
| invoke_acl_state_changed_cb( |
| BT_STATUS_SUCCESS, bd_addr, BT_ACL_STATE_CONNECTED, |
| (int)p_data->link_up.transport_link_type, HCI_SUCCESS); |
| break; |
| |
| case BTA_DM_LINK_DOWN_EVT: |
| bd_addr = p_data->link_down.bd_addr; |
| btm_set_bond_type_dev(p_data->link_down.bd_addr, |
| tBTM_SEC_DEV_REC::BOND_TYPE_UNKNOWN); |
| btif_av_acl_disconnected(bd_addr); |
| invoke_acl_state_changed_cb( |
| BT_STATUS_SUCCESS, bd_addr, BT_ACL_STATE_DISCONNECTED, |
| (int)p_data->link_down.transport_link_type, |
| static_cast<bt_hci_error_code_t>(btm_get_acl_disc_reason_code())); |
| LOG_DEBUG( |
| "Sent BT_ACL_STATE_DISCONNECTED upward as ACL link down event " |
| "device:%s reason:%s", |
| PRIVATE_ADDRESS(bd_addr), |
| hci_reason_code_text( |
| static_cast<tHCI_REASON>(btm_get_acl_disc_reason_code())) |
| .c_str()); |
| break; |
| |
| case BTA_DM_BLE_KEY_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_KEY_EVT key_type=0x%02x ", |
| p_data->ble_key.key_type); |
| |
| /* If this pairing is by-product of local initiated GATT client Read or |
| Write, |
| BTA would not have sent BTA_DM_BLE_SEC_REQ_EVT event and Bond state would |
| not |
| have setup properly. Setup pairing_cb and notify App about Bonding state |
| now*/ |
| if (pairing_cb.state != BT_BOND_STATE_BONDING) { |
| BTIF_TRACE_DEBUG( |
| "Bond state not sent to App so far.Notify the app now"); |
| bond_state_changed(BT_STATUS_SUCCESS, p_data->ble_key.bd_addr, |
| BT_BOND_STATE_BONDING); |
| } else if (pairing_cb.bd_addr != p_data->ble_key.bd_addr) { |
| BTIF_TRACE_ERROR("BD mismatch discard BLE key_type=%d ", |
| p_data->ble_key.key_type); |
| break; |
| } |
| |
| switch (p_data->ble_key.key_type) { |
| case BTM_LE_KEY_PENC: |
| BTIF_TRACE_DEBUG("Rcv BTM_LE_KEY_PENC"); |
| pairing_cb.ble.is_penc_key_rcvd = true; |
| pairing_cb.ble.penc_key = p_data->ble_key.p_key_value->penc_key; |
| break; |
| |
| case BTM_LE_KEY_PID: |
| BTIF_TRACE_DEBUG("Rcv BTM_LE_KEY_PID"); |
| pairing_cb.ble.is_pid_key_rcvd = true; |
| pairing_cb.ble.pid_key = p_data->ble_key.p_key_value->pid_key; |
| break; |
| |
| case BTM_LE_KEY_PCSRK: |
| BTIF_TRACE_DEBUG("Rcv BTM_LE_KEY_PCSRK"); |
| pairing_cb.ble.is_pcsrk_key_rcvd = true; |
| pairing_cb.ble.pcsrk_key = p_data->ble_key.p_key_value->pcsrk_key; |
| break; |
| |
| case BTM_LE_KEY_LENC: |
| BTIF_TRACE_DEBUG("Rcv BTM_LE_KEY_LENC"); |
| pairing_cb.ble.is_lenc_key_rcvd = true; |
| pairing_cb.ble.lenc_key = p_data->ble_key.p_key_value->lenc_key; |
| break; |
| |
| case BTM_LE_KEY_LCSRK: |
| BTIF_TRACE_DEBUG("Rcv BTM_LE_KEY_LCSRK"); |
| pairing_cb.ble.is_lcsrk_key_rcvd = true; |
| pairing_cb.ble.lcsrk_key = p_data->ble_key.p_key_value->lcsrk_key; |
| break; |
| |
| case BTM_LE_KEY_LID: |
| BTIF_TRACE_DEBUG("Rcv BTM_LE_KEY_LID"); |
| pairing_cb.ble.is_lidk_key_rcvd = true; |
| break; |
| |
| default: |
| BTIF_TRACE_ERROR("unknown BLE key type (0x%02x)", |
| p_data->ble_key.key_type); |
| break; |
| } |
| break; |
| case BTA_DM_BLE_CONSENT_REQ_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_CONSENT_REQ_EVT. "); |
| btif_dm_ble_sec_req_evt(&p_data->ble_req, true); |
| break; |
| case BTA_DM_BLE_SEC_REQ_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_SEC_REQ_EVT. "); |
| btif_dm_ble_sec_req_evt(&p_data->ble_req, false); |
| break; |
| case BTA_DM_BLE_PASSKEY_NOTIF_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_NOTIF_EVT. "); |
| btif_dm_ble_key_notif_evt(&p_data->key_notif); |
| break; |
| case BTA_DM_BLE_PASSKEY_REQ_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_REQ_EVT. "); |
| btif_dm_ble_passkey_req_evt(&p_data->pin_req); |
| break; |
| case BTA_DM_BLE_NC_REQ_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_REQ_EVT. "); |
| btif_dm_ble_key_nc_req_evt(&p_data->key_notif); |
| break; |
| case BTA_DM_BLE_OOB_REQ_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_OOB_REQ_EVT. "); |
| btif_dm_ble_oob_req_evt(&p_data->rmt_oob); |
| break; |
| case BTA_DM_BLE_SC_OOB_REQ_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_SC_OOB_REQ_EVT. "); |
| btif_dm_ble_sc_oob_req_evt(&p_data->rmt_oob); |
| break; |
| case BTA_DM_BLE_SC_CR_LOC_OOB_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_SC_CR_LOC_OOB_EVT"); |
| btif_dm_proc_loc_oob(BT_TRANSPORT_LE, true, |
| p_data->local_oob_data.local_oob_c, |
| p_data->local_oob_data.local_oob_r); |
| break; |
| |
| case BTA_DM_BLE_LOCAL_IR_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_LOCAL_IR_EVT. "); |
| ble_local_key_cb.is_id_keys_rcvd = true; |
| ble_local_key_cb.id_keys.irk = p_data->ble_id_keys.irk; |
| ble_local_key_cb.id_keys.ir = p_data->ble_id_keys.ir; |
| ble_local_key_cb.id_keys.dhk = p_data->ble_id_keys.dhk; |
| btif_storage_add_ble_local_key(ble_local_key_cb.id_keys.irk, |
| BTIF_DM_LE_LOCAL_KEY_IRK); |
| btif_storage_add_ble_local_key(ble_local_key_cb.id_keys.ir, |
| BTIF_DM_LE_LOCAL_KEY_IR); |
| btif_storage_add_ble_local_key(ble_local_key_cb.id_keys.dhk, |
| BTIF_DM_LE_LOCAL_KEY_DHK); |
| break; |
| case BTA_DM_BLE_LOCAL_ER_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_LOCAL_ER_EVT. "); |
| ble_local_key_cb.is_er_rcvd = true; |
| ble_local_key_cb.er = p_data->ble_er; |
| btif_storage_add_ble_local_key(ble_local_key_cb.er, |
| BTIF_DM_LE_LOCAL_KEY_ER); |
| break; |
| |
| case BTA_DM_BLE_AUTH_CMPL_EVT: |
| BTIF_TRACE_DEBUG("BTA_DM_BLE_AUTH_CMPL_EVT. "); |
| btif_dm_ble_auth_cmpl_evt(&p_data->auth_cmpl); |
| break; |
| |
| case BTA_DM_LE_FEATURES_READ: |
| btif_get_adapter_property(BT_PROPERTY_LOCAL_LE_FEATURES); |
| break; |
| /* add case for HANDLE_KEY_MISSING */ |
| case BTA_DM_REPORT_BONDING_EVT: |
| LOG_WARN("Received encryption failed: Report bonding firstly."); |
| bd_addr = p_data->delete_key_RC_to_unpair.bd_addr; |
| invoke_bond_state_changed_cb(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING, |
| pairing_cb.fail_reason); |
| btif_dm_remove_bond(bd_addr); |
| break; |
| default: |
| BTIF_TRACE_WARNING("%s: unhandled event (%d)", __func__, event); |
| break; |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bte_dm_evt |
| * |
| * Description Switches context from BTE to BTIF for all DM events |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| |
| void bte_dm_evt(tBTA_DM_SEC_EVT event, tBTA_DM_SEC* p_data) { |
| btif_dm_upstreams_evt(event, (char*)p_data); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function bta_energy_info_cb |
| * |
| * Description Switches context from BTE to BTIF for DM energy info event |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void bta_energy_info_cb(tBTM_BLE_TX_TIME_MS tx_time, |
| tBTM_BLE_RX_TIME_MS rx_time, |
| tBTM_BLE_IDLE_TIME_MS idle_time, |
| tBTM_BLE_ENERGY_USED energy_used, |
| tBTM_CONTRL_STATE ctrl_state, |
| tBTA_STATUS status) { |
| BTIF_TRACE_DEBUG( |
| "energy_info_cb-Status:%d,state=%d,tx_t=%ld, rx_t=%ld, " |
| "idle_time=%ld,used=%ld", |
| status, ctrl_state, tx_time, rx_time, idle_time, energy_used); |
| |
| bt_activity_energy_info energy_info; |
| energy_info.status = status; |
| energy_info.ctrl_state = ctrl_state; |
| energy_info.rx_time = rx_time; |
| energy_info.tx_time = tx_time; |
| energy_info.idle_time = idle_time; |
| energy_info.energy_used = energy_used; |
| |
| bt_uid_traffic_t* data = uid_set_read_and_clear(uid_set); |
| invoke_energy_info_cb(energy_info, data); |
| } |
| |
| /***************************************************************************** |
| * |
| * btif api functions (no context switch) |
| * |
| ****************************************************************************/ |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_start_discovery |
| * |
| * Description Start device discovery/inquiry |
| * |
| ******************************************************************************/ |
| void btif_dm_start_discovery(void) { |
| BTIF_TRACE_EVENT("%s", __func__); |
| |
| if (bta_dm_is_search_request_queued()) { |
| LOG_INFO("%s skipping start discovery because a request is queued", |
| __func__); |
| return; |
| } |
| |
| /* Will be enabled to true once inquiry busy level has been received */ |
| btif_dm_inquiry_in_progress = false; |
| /* find nearby devices */ |
| BTA_DmSearch(btif_dm_search_devices_evt, is_bonding_or_sdp()); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_cancel_discovery |
| * |
| * Description Cancels search |
| * |
| ******************************************************************************/ |
| void btif_dm_cancel_discovery(void) { |
| LOG_INFO("Cancel search"); |
| BTA_DmSearchCancel(); |
| } |
| |
| bool btif_dm_pairing_is_busy() { |
| return pairing_cb.state != BT_BOND_STATE_NONE; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_create_bond |
| * |
| * Description Initiate bonding with the specified device |
| * |
| ******************************************************************************/ |
| void btif_dm_create_bond(const RawAddress bd_addr, int transport) { |
| BTIF_TRACE_EVENT("%s: bd_addr=%s, transport=%d", __func__, |
| bd_addr.ToString().c_str(), transport); |
| btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_CREATE_BOND, |
| pairing_cb.state); |
| |
| pairing_cb.timeout_retries = NUM_TIMEOUT_RETRIES; |
| btif_dm_cb_create_bond(bd_addr, transport); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_create_bond_out_of_band |
| * |
| * Description Initiate bonding with the specified device using out of band |
| * data |
| * |
| ******************************************************************************/ |
| void btif_dm_create_bond_out_of_band(const RawAddress bd_addr, |
| tBT_TRANSPORT transport, |
| const bt_oob_data_t p192_data, |
| const bt_oob_data_t p256_data) { |
| bt_oob_data_t empty_data; |
| memset(&empty_data, 0, sizeof(empty_data)); |
| |
| oob_cb.bdaddr = bd_addr; |
| oob_cb.transport = transport; |
| oob_cb.data_present = (int)BTM_OOB_NONE; |
| if (memcmp(&p192_data, &empty_data, sizeof(p192_data)) != 0) { |
| memcpy(&oob_cb.p192_data, &p192_data, sizeof(bt_oob_data_t)); |
| oob_cb.data_present = (int)BTM_OOB_PRESENT_192; |
| } |
| |
| if (memcmp(&p256_data, &empty_data, sizeof(p256_data)) != 0) { |
| memcpy(&oob_cb.p256_data, &p256_data, sizeof(bt_oob_data_t)); |
| if (oob_cb.data_present == (int)BTM_OOB_PRESENT_192) { |
| oob_cb.data_present = (int)BTM_OOB_PRESENT_192_AND_256; |
| } else { |
| oob_cb.data_present = (int)BTM_OOB_PRESENT_256; |
| } |
| } |
| |
| uint8_t empty[] = {0, 0, 0, 0, 0, 0, 0}; |
| switch (transport) { |
| case BT_TRANSPORT_BR_EDR: |
| // TODO(182162589): Flesh out classic impl in legacy BTMSec |
| // Nothing to do yet, but not an error |
| |
| // The controller only supports P192 |
| switch (oob_cb.data_present) { |
| case BTM_OOB_PRESENT_192_AND_256: |
| LOG_INFO("Have both P192 and P256"); |
| [[fallthrough]]; |
| case BTM_OOB_PRESENT_192: |
| LOG_INFO("Using P192"); |
| break; |
| case BTM_OOB_PRESENT_256: |
| LOG_INFO("Using P256"); |
| [[fallthrough]]; |
| default: |
| // TODO(181889116): |
| // Upgrade to support p256 (for now we just ignore P256) |
| // because the controllers do not yet support it. |
| LOG_ERROR("Invalid data present for controller: %d", |
| oob_cb.data_present); |
| bond_state_changed(BT_STATUS_FAIL, bd_addr, BT_BOND_STATE_NONE); |
| return; |
| } |
| pairing_cb.is_local_initiated = true; |
| LOG_ERROR("Classic not implemented yet"); |
| bond_state_changed(BT_STATUS_FAIL, bd_addr, BT_BOND_STATE_NONE); |
| return; |
| case BT_TRANSPORT_LE: { |
| // Guess default RANDOM for address type for LE |
| tBLE_ADDR_TYPE address_type = BLE_ADDR_RANDOM; |
| LOG_INFO("Using LE Transport"); |
| switch (oob_cb.data_present) { |
| case BTM_OOB_PRESENT_192_AND_256: |
| LOG_INFO("Have both P192 and P256"); |
| [[fallthrough]]; |
| // Always prefer 256 for LE |
| case BTM_OOB_PRESENT_256: |
| LOG_INFO("Using P256"); |
| // If we have an address, lets get the type |
| if (memcmp(p256_data.address, empty, 7) != 0) { |
| /* byte no 7 is address type in LE Bluetooth Address OOB data */ |
| address_type = static_cast<tBLE_ADDR_TYPE>(p256_data.address[6]); |
| } |
| break; |
| case BTM_OOB_PRESENT_192: |
| LOG_INFO("Using P192"); |
| // If we have an address, lets get the type |
| if (memcmp(p192_data.address, empty, 7) != 0) { |
| /* byte no 7 is address type in LE Bluetooth Address OOB data */ |
| address_type = static_cast<tBLE_ADDR_TYPE>(p192_data.address[6]); |
| } |
| break; |
| } |
| pairing_cb.is_local_initiated = true; |
| BTM_SecAddBleDevice(bd_addr, BT_DEVICE_TYPE_BLE, address_type); |
| BTA_DmBond(bd_addr, address_type, transport, BT_DEVICE_TYPE_BLE); |
| break; |
| } |
| default: |
| LOG_ERROR("Invalid transport: %d", transport); |
| bond_state_changed(BT_STATUS_FAIL, bd_addr, BT_BOND_STATE_NONE); |
| return; |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_cancel_bond |
| * |
| * Description Initiate bonding with the specified device |
| * |
| ******************************************************************************/ |
| void btif_dm_cancel_bond(const RawAddress bd_addr) { |
| BTIF_TRACE_EVENT("%s: bd_addr=%s", __func__, bd_addr.ToString().c_str()); |
| |
| btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_CANCEL_BOND, |
| pairing_cb.state); |
| |
| /* TODO: |
| ** 1. Restore scan modes |
| ** 2. special handling for HID devices |
| */ |
| if (is_bonding_or_sdp()) { |
| if (pairing_cb.is_ssp) { |
| if (pairing_cb.is_le_only) { |
| BTA_DmBleSecurityGrant(bd_addr, BTA_DM_SEC_PAIR_NOT_SPT); |
| } else { |
| BTA_DmConfirm(bd_addr, false); |
| BTA_DmBondCancel(bd_addr); |
| btif_storage_remove_bonded_device(&bd_addr); |
| } |
| } else { |
| if (pairing_cb.is_le_only) { |
| BTA_DmBondCancel(bd_addr); |
| } else { |
| BTA_DmPinReply(bd_addr, false, 0, NULL); |
| } |
| /* Cancel bonding, in case it is in ACL connection setup state */ |
| BTA_DmBondCancel(bd_addr); |
| } |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_hh_open_failed |
| * |
| * Description informs the upper layers if the HH have failed during |
| * bonding |
| * |
| * Returns none |
| * |
| ******************************************************************************/ |
| |
| void btif_dm_hh_open_failed(RawAddress* bdaddr) { |
| if (pairing_cb.state == BT_BOND_STATE_BONDING && |
| *bdaddr == pairing_cb.bd_addr) { |
| bond_state_changed(BT_STATUS_FAIL, *bdaddr, BT_BOND_STATE_NONE); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_remove_bond |
| * |
| * Description Removes bonding with the specified device |
| * |
| ******************************************************************************/ |
| |
| void btif_dm_remove_bond(const RawAddress bd_addr) { |
| BTIF_TRACE_EVENT("%s: bd_addr=%s", __func__, bd_addr.ToString().c_str()); |
| |
| btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_REMOVE_BOND, |
| pairing_cb.state); |
| |
| // special handling for HID devices |
| // VUP needs to be sent if its a HID Device. The HID HOST module will check if |
| // there is a valid hid connection with this bd_addr. If yes VUP will be |
| // issued. |
| #if (BTA_HH_INCLUDED == TRUE) |
| if (btif_hh_virtual_unplug(&bd_addr) != BT_STATUS_SUCCESS) |
| #endif |
| { |
| BTIF_TRACE_DEBUG("%s: Removing HH device", __func__); |
| BTA_DmRemoveDevice(bd_addr); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_pin_reply |
| * |
| * Description BT legacy pairing - PIN code reply |
| * |
| ******************************************************************************/ |
| |
| void btif_dm_pin_reply(const RawAddress bd_addr, uint8_t accept, |
| uint8_t pin_len, bt_pin_code_t pin_code) { |
| BTIF_TRACE_EVENT("%s: accept=%d", __func__, accept); |
| |
| if (pairing_cb.is_le_only) { |
| int i; |
| uint32_t passkey = 0; |
| int multi[] = {100000, 10000, 1000, 100, 10, 1}; |
| for (i = 0; i < 6; i++) { |
| passkey += (multi[i] * (pin_code.pin[i] - '0')); |
| } |
| BTIF_TRACE_DEBUG("btif_dm_pin_reply: passkey: %d", passkey); |
| BTA_DmBlePasskeyReply(bd_addr, accept, passkey); |
| |
| } else { |
| BTA_DmPinReply(bd_addr, accept, pin_len, pin_code.pin); |
| if (accept) pairing_cb.pin_code_len = pin_len; |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_ssp_reply |
| * |
| * Description BT SSP Reply - Just Works, Numeric Comparison & Passkey |
| * Entry |
| * |
| ******************************************************************************/ |
| void btif_dm_ssp_reply(const RawAddress bd_addr, bt_ssp_variant_t variant, |
| uint8_t accept) { |
| BTIF_TRACE_EVENT("%s: accept=%d", __func__, accept); |
| if (pairing_cb.is_le_only) { |
| if (pairing_cb.is_le_nc) { |
| BTA_DmBleConfirmReply(bd_addr, accept); |
| } else { |
| if (accept) |
| BTA_DmBleSecurityGrant(bd_addr, BTA_DM_SEC_GRANTED); |
| else |
| BTA_DmBleSecurityGrant(bd_addr, BTA_DM_SEC_PAIR_NOT_SPT); |
| } |
| } else { |
| BTA_DmConfirm(bd_addr, accept); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_get_local_class_of_device |
| * |
| * Description Reads the system property configured class of device |
| * |
| * Inputs A pointer to a DEV_CLASS that you want filled with the |
| * current class of device. Size is assumed to be 3. |
| * |
| * Returns Nothing. device_class will contain the current class of |
| * device. If no value is present, or the value is malformed |
| * the default "unclassified" value will be used |
| * |
| ******************************************************************************/ |
| void btif_dm_get_local_class_of_device(DEV_CLASS device_class) { |
| /* A class of device is a {SERVICE_CLASS, MAJOR_CLASS, MINOR_CLASS} |
| * |
| * The input is expected to be a string of the following format: |
| * <decimal number>,<decimal number>,<decimal number> |
| * |
| * For example, "90,2,12" (Hex: 0x5A, 0x2, 0xC) |
| * |
| * Notice there is always two commas and no spaces. |
| */ |
| |
| device_class[0] = 0x00; |
| device_class[1] = BTM_COD_MAJOR_UNCLASSIFIED; |
| device_class[2] = BTM_COD_MINOR_UNCLASSIFIED; |
| |
| #ifdef OS_ANDROID |
| std::vector<std::optional<std::uint32_t>> local_device_class = |
| android::sysprop::BluetoothProperties::getClassOfDevice(); |
| // Error check the inputs. Use the default if problems are found |
| if (local_device_class.size() != 3) { |
| LOG_ERROR("COD malformed, must have unsigned 3 integers."); |
| } else if (!local_device_class[0].has_value() |
| || local_device_class[0].value() > 0xFF) { |
| LOG_ERROR("COD malformed, first value is missing or too large."); |
| } else if (!local_device_class[1].has_value() |
| || local_device_class[1].value() > 0xFF) { |
| LOG_ERROR("COD malformed, second value is missing or too large."); |
| } else if (!local_device_class[2].has_value() |
| || local_device_class[2].value() > 0xFF) { |
| LOG_ERROR("COD malformed, third value is missing or too large."); |
| } else { |
| device_class[0] = (uint8_t) local_device_class[0].value(); |
| device_class[1] = (uint8_t) local_device_class[1].value(); |
| device_class[2] = (uint8_t) local_device_class[2].value(); |
| } |
| #else |
| char prop_cod[PROPERTY_VALUE_MAX]; |
| osi_property_get(PROPERTY_CLASS_OF_DEVICE, prop_cod, ""); |
| |
| // If the property is empty, use the default |
| if (prop_cod[0] == '\0') { |
| LOG_ERROR("%s: COD property is empty", __func__); |
| return; |
| } |
| |
| // Start reading the contents of the property string. If at any point anything |
| // is malformed, use the default. |
| DEV_CLASS temp_device_class; |
| int i = 0; |
| int j = 0; |
| for (;;) { |
| // Build a string of all the chars until the next comma, null, or end of the |
| // buffer is reached. If any char is not a digit, then return the default. |
| std::string value; |
| while (i < PROPERTY_VALUE_MAX && prop_cod[i] != ',' && prop_cod[i] != '\0') { |
| char c = prop_cod[i++]; |
| if (!std::isdigit(c)) { |
| LOG_ERROR("%s: COD malformed, '%c' is a non-digit", __func__, c); |
| return; |
| } |
| value += c; |
| } |
| |
| // If we hit the end and it wasn't null terminated then return the default |
| if (i == PROPERTY_VALUE_MAX && prop_cod[PROPERTY_VALUE_MAX - 1] != '\0') { |
| LOG_ERROR("%s: COD malformed, value was truncated", __func__); |
| return; |
| } |
| |
| // Each number in the list must be one byte, meaning 0 (0x00) -> 255 (0xFF) |
| if (value.size() > 3 || value.size() == 0) { |
| LOG_ERROR("%s: COD malformed, '%s' must be between [0, 255]", __func__, |
| value.c_str()); |
| return; |
| } |
| |
| // Grab the value. If it's too large, then return the default |
| uint32_t uint32_val = static_cast<uint32_t>(std::stoul(value.c_str())); |
| if (uint32_val > 0xFF) { |
| LOG_ERROR("%s: COD malformed, '%s' must be between [0, 255]", __func__, |
| value.c_str()); |
| return; |
| } |
| |
| // Otherwise, it's safe to use |
| temp_device_class[j++] = uint32_val; |
| |
| // If we've reached 3 numbers then make sure we're at a null terminator |
| if (j >= 3) { |
| if (prop_cod[i] != '\0') { |
| LOG_ERROR("%s: COD malformed, more than three numbers", __func__); |
| return; |
| } |
| break; |
| } |
| |
| // If we're at a null terminator then we're done |
| if (prop_cod[i] == '\0') { |
| break; |
| } |
| |
| // Otherwise, skip over the comma |
| ++i; |
| } |
| |
| // We must have read exactly 3 numbers |
| if (j == 3) { |
| device_class[0] = temp_device_class[0]; |
| device_class[1] = temp_device_class[1]; |
| device_class[2] = temp_device_class[2]; |
| } else { |
| LOG_ERROR("%s: COD malformed, fewer than three numbers", __func__); |
| } |
| #endif |
| |
| LOG_DEBUG("%s: Using class of device '0x%x, 0x%x, 0x%x'", __func__, |
| device_class[0], device_class[1], device_class[2]); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_get_adapter_property |
| * |
| * Description Queries the BTA for the adapter property |
| * |
| * Returns bt_status_t |
| * |
| ******************************************************************************/ |
| bt_status_t btif_dm_get_adapter_property(bt_property_t* prop) { |
| BTIF_TRACE_EVENT("%s: type=0x%x", __func__, prop->type); |
| switch (prop->type) { |
| case BT_PROPERTY_BDNAME: { |
| bt_bdname_t* bd_name = (bt_bdname_t*)prop->val; |
| strncpy((char*)bd_name->name, (char*)btif_get_default_local_name(), |
| sizeof(bd_name->name) - 1); |
| bd_name->name[sizeof(bd_name->name) - 1] = 0; |
| prop->len = strlen((char*)bd_name->name); |
| } break; |
| |
| case BT_PROPERTY_ADAPTER_SCAN_MODE: { |
| /* if the storage does not have it. Most likely app never set it. Default |
| * is NONE */ |
| bt_scan_mode_t* mode = (bt_scan_mode_t*)prop->val; |
| *mode = BT_SCAN_MODE_NONE; |
| prop->len = sizeof(bt_scan_mode_t); |
| } break; |
| |
| case BT_PROPERTY_ADAPTER_DISCOVERABLE_TIMEOUT: { |
| uint32_t* tmt = (uint32_t*)prop->val; |
| *tmt = 120; /* default to 120s, if not found in NV */ |
| prop->len = sizeof(uint32_t); |
| } break; |
| |
| case BT_PROPERTY_CLASS_OF_DEVICE: { |
| DEV_CLASS dev_class; |
| btif_dm_get_local_class_of_device(dev_class); |
| memcpy(prop->val, dev_class, sizeof(DEV_CLASS)); |
| prop->len = sizeof(DEV_CLASS); |
| } break; |
| |
| // While fetching IO_CAP* values for the local device, we maintain backward |
| // compatibility by using the value from #define macros BTM_LOCAL_IO_CAPS, |
| // BTM_LOCAL_IO_CAPS_BLE if the values have never been explicitly set. |
| |
| case BT_PROPERTY_LOCAL_IO_CAPS: { |
| *(bt_io_cap_t*)prop->val = (bt_io_cap_t)BTM_LOCAL_IO_CAPS; |
| prop->len = sizeof(bt_io_cap_t); |
| } break; |
| |
| case BT_PROPERTY_LOCAL_IO_CAPS_BLE: { |
| *(bt_io_cap_t*)prop->val = (bt_io_cap_t)BTM_LOCAL_IO_CAPS_BLE; |
| prop->len = sizeof(bt_io_cap_t); |
| } break; |
| |
| default: |
| prop->len = 0; |
| return BT_STATUS_FAIL; |
| } |
| return BT_STATUS_SUCCESS; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_get_remote_services |
| * |
| * Description Start SDP to get remote services by transport |
| * |
| * Returns bt_status_t |
| * |
| ******************************************************************************/ |
| void btif_dm_get_remote_services(RawAddress remote_addr, const int transport) { |
| BTIF_TRACE_EVENT("%s: transport=%d, remote_addr=%s", __func__, transport, |
| remote_addr.ToString().c_str()); |
| |
| BTA_DmDiscover(remote_addr, btif_dm_search_services_evt, transport, |
| remote_addr != pairing_cb.bd_addr && |
| remote_addr != pairing_cb.static_bdaddr && |
| is_bonding_or_sdp()); |
| } |
| |
| void btif_dm_enable_service(tBTA_SERVICE_ID service_id, bool enable) { |
| bt_status_t status = btif_in_execute_service_request(service_id, enable); |
| if (status == BT_STATUS_SUCCESS) { |
| bt_property_t property; |
| Uuid local_uuids[BT_MAX_NUM_UUIDS]; |
| |
| /* Now send the UUID_PROPERTY_CHANGED event to the upper layer */ |
| BTIF_STORAGE_FILL_PROPERTY(&property, BT_PROPERTY_UUIDS, |
| sizeof(local_uuids), local_uuids); |
| btif_storage_get_adapter_property(&property); |
| invoke_adapter_properties_cb(BT_STATUS_SUCCESS, 1, &property); |
| } |
| return; |
| } |
| |
| void btif_dm_proc_io_req(tBTM_AUTH_REQ* p_auth_req, bool is_orig) { |
| uint8_t yes_no_bit = BTA_AUTH_SP_YES & *p_auth_req; |
| /* if local initiated: |
| ** 1. set DD + MITM |
| ** if remote initiated: |
| ** 1. Copy over the auth_req from peer's io_rsp |
| ** 2. Set the MITM if peer has it set or if peer has DisplayYesNo |
| *(iPhone) |
| ** as a fallback set MITM+GB if peer had MITM set |
| */ |
| |
| BTIF_TRACE_DEBUG("+%s: p_auth_req=%d", __func__, *p_auth_req); |
| if (pairing_cb.is_local_initiated) { |
| /* if initing/responding to a dedicated bonding, use dedicate bonding bit */ |
| *p_auth_req = BTA_AUTH_DD_BOND | BTA_AUTH_SP_YES; |
| } else if (!is_orig) { |
| /* peer initiated paring. They probably know what they want. |
| ** Copy the mitm from peer device. |
| */ |
| BTIF_TRACE_DEBUG("%s: setting p_auth_req to peer's: %d", __func__, |
| pairing_cb.auth_req); |
| *p_auth_req = (pairing_cb.auth_req & BTA_AUTH_BONDS); |
| |
| /* copy over the MITM bit as well. In addition if the peer has DisplayYesNo, |
| * force MITM */ |
| if ((yes_no_bit) || (pairing_cb.io_cap & BTM_IO_CAP_IO)) |
| *p_auth_req |= BTA_AUTH_SP_YES; |
| } else if (yes_no_bit) { |
| /* set the general bonding bit for stored device */ |
| *p_auth_req = BTA_AUTH_GEN_BOND | yes_no_bit; |
| } |
| BTIF_TRACE_DEBUG("-%s: p_auth_req=%d", __func__, *p_auth_req); |
| } |
| |
| void btif_dm_proc_io_rsp(UNUSED_ATTR const RawAddress& bd_addr, |
| tBTM_IO_CAP io_cap, UNUSED_ATTR tBTM_OOB_DATA oob_data, |
| tBTM_AUTH_REQ auth_req) { |
| if (auth_req & BTA_AUTH_BONDS) { |
| BTIF_TRACE_DEBUG("%s auth_req:%d", __func__, auth_req); |
| pairing_cb.auth_req = auth_req; |
| pairing_cb.io_cap = io_cap; |
| } |
| } |
| |
| void btif_dm_set_oob_for_io_req(tBTM_OOB_DATA* p_has_oob_data) { |
| if (is_empty_128bit(oob_cb.p192_data.c)) { |
| *p_has_oob_data = false; |
| } else { |
| *p_has_oob_data = true; |
| } |
| BTIF_TRACE_DEBUG("%s: *p_has_oob_data=%d", __func__, *p_has_oob_data); |
| } |
| |
| void btif_dm_set_oob_for_le_io_req(const RawAddress& bd_addr, |
| tBTM_OOB_DATA* p_has_oob_data, |
| tBTM_LE_AUTH_REQ* p_auth_req) { |
| switch (oob_cb.data_present) { |
| case BTM_OOB_PRESENT_192_AND_256: |
| LOG_INFO("Have both P192 and P256"); |
| [[fallthrough]]; |
| // Always prefer 256 for LE |
| case BTM_OOB_PRESENT_256: |
| LOG_INFO("Using P256"); |
| if (!is_empty_128bit(oob_cb.p256_data.c) && |
| !is_empty_128bit(oob_cb.p256_data.r)) { |
| /* make sure OOB data is for this particular device */ |
| if (bd_addr == oob_cb.bdaddr) { |
| *p_auth_req = ((*p_auth_req) | BTM_LE_AUTH_REQ_SC_ONLY); |
| *p_has_oob_data = true; |
| } else { |
| *p_has_oob_data = false; |
| LOG_WARN("P256-1: Remote address didn't match OOB data address"); |
| } |
| } else if (!is_empty_128bit(oob_cb.p256_data.sm_tk)) { |
| /* We have security manager TK */ |
| |
| /* make sure OOB data is for this particular device */ |
| if (bd_addr == oob_cb.bdaddr) { |
| // When using OOB with TK, SC Secure Connections bit must be disabled. |
| tBTM_LE_AUTH_REQ mask = ~BTM_LE_AUTH_REQ_SC_ONLY; |
| *p_auth_req = ((*p_auth_req) & mask); |
| *p_has_oob_data = true; |
| } else { |
| *p_has_oob_data = false; |
| LOG_WARN("P256-2: Remote address didn't match OOB data address"); |
| } |
| } else { |
| *p_has_oob_data = false; |
| } |
| break; |
| case BTM_OOB_PRESENT_192: |
| LOG_INFO("Using P192"); |
| if (!is_empty_128bit(oob_cb.p192_data.c) && |
| !is_empty_128bit(oob_cb.p192_data.r)) { |
| /* make sure OOB data is for this particular device */ |
| if (bd_addr == oob_cb.bdaddr) { |
| *p_auth_req = ((*p_auth_req) | BTM_LE_AUTH_REQ_SC_ONLY); |
| *p_has_oob_data = true; |
| } else { |
| *p_has_oob_data = false; |
| LOG_WARN("P192-1: Remote address didn't match OOB data address"); |
| } |
| } else if (!is_empty_128bit(oob_cb.p192_data.sm_tk)) { |
| /* We have security manager TK */ |
| |
| /* make sure OOB data is for this particular device */ |
| if (bd_addr == oob_cb.bdaddr) { |
| // When using OOB with TK, SC Secure Connections bit must be disabled. |
| tBTM_LE_AUTH_REQ mask = ~BTM_LE_AUTH_REQ_SC_ONLY; |
| *p_auth_req = ((*p_auth_req) & mask); |
| *p_has_oob_data = true; |
| } else { |
| *p_has_oob_data = false; |
| LOG_WARN("P192-2: Remote address didn't match OOB data address"); |
| } |
| } else { |
| *p_has_oob_data = false; |
| } |
| break; |
| } |
| BTIF_TRACE_DEBUG("%s *p_has_oob_data=%d", __func__, *p_has_oob_data); |
| } |
| |
| #ifdef BTIF_DM_OOB_TEST |
| void btif_dm_load_local_oob(void) { |
| char prop_oob[PROPERTY_VALUE_MAX]; |
| osi_property_get("service.brcm.bt.oob", prop_oob, "3"); |
| BTIF_TRACE_DEBUG("%s: prop_oob = %s", __func__, prop_oob); |
| if (prop_oob[0] != '3') { |
| if (is_empty_128bit(oob_cb.p192_data.c)) { |
| BTIF_TRACE_DEBUG("%s: read OOB, call BTA_DmLocalOob()", __func__); |
| BTA_DmLocalOob(); |
| } |
| } |
| } |
| |
| static bool waiting_on_oob_advertiser_start = false; |
| static uint8_t oob_advertiser_id = 0; |
| static void stop_oob_advertiser() { |
| auto advertiser = get_ble_advertiser_instance(); |
| advertiser->Unregister(oob_advertiser_id); |
| oob_advertiser_id = 0; |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_generate_local_oob_data |
| * |
| * Description Initiate oob data fetch from controller |
| * |
| * Parameters transport; Classic or LE |
| * |
| ******************************************************************************/ |
| void btif_dm_generate_local_oob_data(tBT_TRANSPORT transport) { |
| LOG_DEBUG("Transport %s", bt_transport_text(transport).c_str()); |
| if (transport == BT_TRANSPORT_BR_EDR) { |
| BTM_ReadLocalOobData(); |
| } else if (transport == BT_TRANSPORT_LE) { |
| // Call create data first, so we don't have to hold on to the address for |
| // the state machine lifecycle. Rather, lets create the data, then start |
| // advertising then request the address. |
| if (!waiting_on_oob_advertiser_start) { |
| if (oob_advertiser_id != 0) { |
| stop_oob_advertiser(); |
| } |
| waiting_on_oob_advertiser_start = true; |
| SMP_CrLocScOobData(); |
| } else { |
| invoke_oob_data_request_cb(transport, false, Octet16{}, Octet16{}, |
| RawAddress{}, 0x00); |
| } |
| } |
| } |
| |
| // Step Four: CallBack from Step Three |
| static void get_address_callback(tBT_TRANSPORT transport, bool is_valid, |
| const Octet16& c, const Octet16& r, |
| uint8_t address_type, RawAddress address) { |
| invoke_oob_data_request_cb(transport, is_valid, c, r, address, address_type); |
| waiting_on_oob_advertiser_start = false; |
| } |
| |
| // Step Three: CallBack from Step Two, advertise and get address |
| static void start_advertising_callback(uint8_t id, tBT_TRANSPORT transport, |
| bool is_valid, const Octet16& c, |
| const Octet16& r, tBTM_STATUS status) { |
| if (status != 0) { |
| LOG_INFO("OOB get advertiser ID failed with status %hhd", status); |
| invoke_oob_data_request_cb(transport, false, c, r, RawAddress{}, 0x00); |
| SMP_ClearLocScOobData(); |
| waiting_on_oob_advertiser_start = false; |
| oob_advertiser_id = 0; |
| return; |
| } |
| LOG_DEBUG("OOB advertiser with id %hhd", id); |
| auto advertiser = get_ble_advertiser_instance(); |
| advertiser->GetOwnAddress( |
| id, base::Bind(&get_address_callback, transport, is_valid, c, r)); |
| } |
| |
| static void timeout_cb(uint8_t id, tBTM_STATUS status) { |
| LOG_INFO("OOB advertiser with id %hhd timed out with status %hhd", id, |
| status); |
| auto advertiser = get_ble_advertiser_instance(); |
| advertiser->Unregister(id); |
| SMP_ClearLocScOobData(); |
| waiting_on_oob_advertiser_start = false; |
| oob_advertiser_id = 0; |
| } |
| |
| // Step Two: CallBack from Step One, advertise and get address |
| static void id_status_callback(tBT_TRANSPORT transport, bool is_valid, |
| const Octet16& c, const Octet16& r, uint8_t id, |
| tBTM_STATUS status) { |
| if (status != 0) { |
| LOG_INFO("OOB get advertiser ID failed with status %hhd", status); |
| invoke_oob_data_request_cb(transport, false, c, r, RawAddress{}, 0x00); |
| SMP_ClearLocScOobData(); |
| waiting_on_oob_advertiser_start = false; |
| oob_advertiser_id = 0; |
| return; |
| } |
| |
| oob_advertiser_id = id; |
| |
| auto advertiser = get_ble_advertiser_instance(); |
| AdvertiseParameters parameters; |
| parameters.advertising_event_properties = 0x0041 /* connectable, tx power */; |
| parameters.min_interval = 0xa0; // 100 ms |
| parameters.max_interval = 0x500; // 800 ms |
| parameters.channel_map = 0x7; // Use all the channels |
| parameters.tx_power = 0; // 0 dBm |
| parameters.primary_advertising_phy = 1; |
| parameters.secondary_advertising_phy = 2; |
| parameters.scan_request_notification_enable = 0; |
| |
| std::vector<uint8_t> advertisement{0x02, 0x01 /* Flags */, |
| 0x02 /* Connectable */}; |
| std::vector<uint8_t> scan_data{}; |
| |
| advertiser->StartAdvertising( |
| id, |
| base::Bind(&start_advertising_callback, id, transport, is_valid, c, r), |
| parameters, advertisement, scan_data, 3600 /* timeout_s */, |
| base::Bind(&timeout_cb, id)); |
| } |
| |
| // Step One: Start the advertiser |
| static void start_oob_advertiser(tBT_TRANSPORT transport, bool is_valid, |
| const Octet16& c, const Octet16& r) { |
| auto advertiser = get_ble_advertiser_instance(); |
| advertiser->RegisterAdvertiser( |
| base::Bind(&id_status_callback, transport, is_valid, c, r)); |
| } |
| |
| void btif_dm_proc_loc_oob(tBT_TRANSPORT transport, bool is_valid, |
| const Octet16& c, const Octet16& r) { |
| // is_valid is important for deciding which OobDataCallback function to use |
| if (!is_valid) { |
| invoke_oob_data_request_cb(transport, false, c, r, RawAddress{}, 0x00); |
| waiting_on_oob_advertiser_start = false; |
| return; |
| } |
| if (transport == BT_TRANSPORT_LE) { |
| // Now that we have the data, lets start advertising and get the address. |
| start_oob_advertiser(transport, is_valid, c, r); |
| } else { |
| invoke_oob_data_request_cb(transport, is_valid, c, r, |
| *controller_get_interface()->get_address(), |
| 0x00); |
| } |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_get_smp_config |
| * |
| * Description Retrieve the SMP pairing options from the bt_stack.conf |
| * file. To provide specific pairing options for the host |
| * add a node with label "SmpOptions" to the config file |
| * and assign it a comma separated list of 5 values in the |
| * format: auth, io, ikey, rkey, ksize, oob |
| * eg: PTS_SmpOptions=0xD,0x4,0xf,0xf,0x10 |
| * |
| * Parameters: tBTE_APPL_CFG*: pointer to struct defining pairing options |
| * |
| * Returns true if the options were successfully read, else false |
| * |
| ******************************************************************************/ |
| bool btif_dm_get_smp_config(tBTE_APPL_CFG* p_cfg) { |
| const std::string* recv = stack_config_get_interface()->get_pts_smp_options(); |
| if (!recv) { |
| LOG_DEBUG("SMP pairing options not found in stack configuration"); |
| return false; |
| } |
| |
| char conf[64]; |
| char* pch; |
| char* endptr; |
| |
| strncpy(conf, recv->c_str(), 64); |
| conf[63] = 0; // null terminate |
| |
| pch = strtok(conf, ","); |
| if (pch != NULL) |
| p_cfg->ble_auth_req = (uint8_t)strtoul(pch, &endptr, 16); |
| else |
| return false; |
| |
| pch = strtok(NULL, ","); |
| if (pch != NULL) |
| p_cfg->ble_io_cap = (uint8_t)strtoul(pch, &endptr, 16); |
| else |
| return false; |
| |
| pch = strtok(NULL, ","); |
| if (pch != NULL) |
| p_cfg->ble_init_key = (uint8_t)strtoul(pch, &endptr, 16); |
| else |
| return false; |
| |
| pch = strtok(NULL, ","); |
| if (pch != NULL) |
| p_cfg->ble_resp_key = (uint8_t)strtoul(pch, &endptr, 16); |
| else |
| return false; |
| |
| pch = strtok(NULL, ","); |
| if (pch != NULL) |
| p_cfg->ble_max_key_size = (uint8_t)strtoul(pch, &endptr, 16); |
| else |
| return false; |
| |
| return true; |
| } |
| |
| bool btif_dm_proc_rmt_oob(const RawAddress& bd_addr, Octet16* p_c, |
| Octet16* p_r) { |
| const char* path_a = "/data/misc/bluedroid/LOCAL/a.key"; |
| const char* path_b = "/data/misc/bluedroid/LOCAL/b.key"; |
| const char* path = NULL; |
| char prop_oob[PROPERTY_VALUE_MAX]; |
| osi_property_get("service.brcm.bt.oob", prop_oob, "3"); |
| BTIF_TRACE_DEBUG("%s: prop_oob = %s", __func__, prop_oob); |
| if (prop_oob[0] == '1') |
| path = path_b; |
| else if (prop_oob[0] == '2') |
| path = path_a; |
| if (!path) { |
| BTIF_TRACE_DEBUG("%s: can't open path!", __func__); |
| return false; |
| } |
| |
| FILE* fp = fopen(path, "rb"); |
| if (fp == NULL) { |
| BTIF_TRACE_DEBUG("%s: failed to read OOB keys from %s", __func__, path); |
| return false; |
| } |
| |
| BTIF_TRACE_DEBUG("%s: read OOB data from %s", __func__, path); |
| (void)fread(p_c->data(), 1, OCTET16_LEN, fp); |
| (void)fread(p_r->data(), 1, OCTET16_LEN, fp); |
| fclose(fp); |
| |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| return true; |
| } |
| #endif /* BTIF_DM_OOB_TEST */ |
| |
| static void btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF* p_ssp_key_notif) { |
| RawAddress bd_addr; |
| bt_bdname_t bd_name; |
| uint32_t cod; |
| int dev_type; |
| |
| BTIF_TRACE_DEBUG("%s", __func__); |
| |
| /* Remote name update */ |
| if (!btif_get_device_type(p_ssp_key_notif->bd_addr, &dev_type)) { |
| dev_type = BT_DEVICE_TYPE_BLE; |
| } |
| btif_dm_update_ble_remote_properties(p_ssp_key_notif->bd_addr, |
| p_ssp_key_notif->bd_name, |
| (tBT_DEVICE_TYPE)dev_type); |
| bd_addr = p_ssp_key_notif->bd_addr; |
| memcpy(bd_name.name, p_ssp_key_notif->bd_name, BD_NAME_LEN); |
| bd_name.name[BD_NAME_LEN] = '\0'; |
| |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| pairing_cb.is_ssp = false; |
| cod = COD_UNCLASSIFIED; |
| |
| invoke_ssp_request_cb(bd_addr, bd_name, cod, |
| BT_SSP_VARIANT_PASSKEY_NOTIFICATION, |
| p_ssp_key_notif->passkey); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_ble_auth_cmpl_evt |
| * |
| * Description Executes authentication complete event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_ble_auth_cmpl_evt(tBTA_DM_AUTH_CMPL* p_auth_cmpl) { |
| /* Save link key, if not temporary */ |
| bt_status_t status = BT_STATUS_FAIL; |
| bt_bond_state_t state = BT_BOND_STATE_NONE; |
| |
| RawAddress bd_addr = p_auth_cmpl->bd_addr; |
| |
| /* Clear OOB data */ |
| memset(&oob_cb, 0, sizeof(oob_cb)); |
| |
| if ((p_auth_cmpl->success) && (p_auth_cmpl->key_present)) { |
| /* store keys */ |
| } |
| if (p_auth_cmpl->success) { |
| status = BT_STATUS_SUCCESS; |
| state = BT_BOND_STATE_BONDED; |
| tBLE_ADDR_TYPE addr_type; |
| RawAddress bdaddr = p_auth_cmpl->bd_addr; |
| if (btif_storage_get_remote_addr_type(&bdaddr, &addr_type) != |
| BT_STATUS_SUCCESS) |
| btif_storage_set_remote_addr_type(&bdaddr, p_auth_cmpl->addr_type); |
| |
| /* Test for temporary bonding */ |
| if (btm_get_bond_type_dev(p_auth_cmpl->bd_addr) == |
| tBTM_SEC_DEV_REC::BOND_TYPE_TEMPORARY) { |
| BTIF_TRACE_DEBUG("%s: sending BT_BOND_STATE_NONE for Temp pairing", |
| __func__); |
| btif_storage_remove_bonded_device(&bdaddr); |
| state = BT_BOND_STATE_NONE; |
| } else { |
| btif_dm_save_ble_bonding_keys(bdaddr); |
| btif_dm_get_remote_services(bd_addr, BT_TRANSPORT_LE); |
| } |
| } else { |
| /*Map the HCI fail reason to bt status */ |
| // TODO This is not a proper use of the type |
| uint8_t fail_reason = static_cast<uint8_t>(p_auth_cmpl->fail_reason); |
| switch (fail_reason) { |
| case BTA_DM_AUTH_SMP_PAIR_AUTH_FAIL: |
| case BTA_DM_AUTH_SMP_CONFIRM_VALUE_FAIL: |
| case BTA_DM_AUTH_SMP_UNKNOWN_ERR: |
| btif_dm_remove_ble_bonding_keys(); |
| status = BT_STATUS_AUTH_FAILURE; |
| break; |
| |
| case BTA_DM_AUTH_SMP_CONN_TOUT: { |
| if (btm_sec_is_a_bonded_dev(bd_addr)) { |
| LOG(INFO) << __func__ << " Bonded device addr=" << bd_addr |
| << " timed out - will not remove the keys"; |
| // Don't send state change to upper layers - otherwise Java think we |
| // unbonded, and will disconnect HID profile. |
| return; |
| } |
| |
| btif_dm_remove_ble_bonding_keys(); |
| status = BT_STATUS_AUTH_FAILURE; |
| break; |
| } |
| case BTA_DM_AUTH_SMP_PAIR_NOT_SUPPORT: |
| status = BT_STATUS_AUTH_REJECTED; |
| break; |
| default: |
| btif_dm_remove_ble_bonding_keys(); |
| status = BT_STATUS_FAIL; |
| break; |
| } |
| } |
| if (state == BT_BOND_STATE_BONDED && !pairing_cb.static_bdaddr.IsEmpty() && |
| bd_addr != pairing_cb.static_bdaddr) { |
| // Report RPA bonding state to Java in crosskey paring |
| bond_state_changed(status, bd_addr, BT_BOND_STATE_BONDING); |
| } |
| bond_state_changed(status, bd_addr, state); |
| } |
| |
| void btif_dm_load_ble_local_keys(void) { |
| memset(&ble_local_key_cb, 0, sizeof(btif_dm_local_key_cb_t)); |
| |
| if (btif_storage_get_ble_local_key( |
| BTIF_DM_LE_LOCAL_KEY_ER, &ble_local_key_cb.er) == BT_STATUS_SUCCESS) { |
| ble_local_key_cb.is_er_rcvd = true; |
| BTIF_TRACE_DEBUG("%s BLE ER key loaded", __func__); |
| } |
| |
| if ((btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_IR, |
| &ble_local_key_cb.id_keys.ir) == |
| BT_STATUS_SUCCESS) && |
| (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_IRK, |
| &ble_local_key_cb.id_keys.irk) == |
| BT_STATUS_SUCCESS) && |
| (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_DHK, |
| &ble_local_key_cb.id_keys.dhk) == |
| BT_STATUS_SUCCESS)) { |
| ble_local_key_cb.is_id_keys_rcvd = true; |
| BTIF_TRACE_DEBUG("%s BLE ID keys loaded", __func__); |
| } |
| } |
| void btif_dm_get_ble_local_keys(tBTA_DM_BLE_LOCAL_KEY_MASK* p_key_mask, |
| Octet16* p_er, |
| tBTA_BLE_LOCAL_ID_KEYS* p_id_keys) { |
| ASSERT(p_key_mask != nullptr); |
| if (ble_local_key_cb.is_er_rcvd) { |
| ASSERT(p_er != nullptr); |
| *p_er = ble_local_key_cb.er; |
| *p_key_mask |= BTA_BLE_LOCAL_KEY_TYPE_ER; |
| } |
| |
| if (ble_local_key_cb.is_id_keys_rcvd) { |
| ASSERT(p_id_keys != nullptr); |
| p_id_keys->ir = ble_local_key_cb.id_keys.ir; |
| p_id_keys->irk = ble_local_key_cb.id_keys.irk; |
| p_id_keys->dhk = ble_local_key_cb.id_keys.dhk; |
| *p_key_mask |= BTA_BLE_LOCAL_KEY_TYPE_ID; |
| } |
| BTIF_TRACE_DEBUG("%s *p_key_mask=0x%02x", __func__, *p_key_mask); |
| } |
| |
| static void btif_dm_save_ble_bonding_keys(RawAddress& bd_addr) { |
| BTIF_TRACE_DEBUG("%s", __func__); |
| |
| if (bd_addr.IsEmpty()) { |
| LOG_WARN("bd_addr is empty"); |
| return; |
| } |
| |
| if (pairing_cb.ble.is_penc_key_rcvd) { |
| btif_storage_add_ble_bonding_key( |
| &bd_addr, (uint8_t*)&pairing_cb.ble.penc_key, BTM_LE_KEY_PENC, |
| sizeof(tBTM_LE_PENC_KEYS)); |
| } |
| |
| if (pairing_cb.ble.is_pid_key_rcvd) { |
| btif_storage_add_ble_bonding_key(&bd_addr, |
| (uint8_t*)&pairing_cb.ble.pid_key, |
| BTM_LE_KEY_PID, sizeof(tBTM_LE_PID_KEYS)); |
| } |
| |
| if (pairing_cb.ble.is_pcsrk_key_rcvd) { |
| btif_storage_add_ble_bonding_key( |
| &bd_addr, (uint8_t*)&pairing_cb.ble.pcsrk_key, BTM_LE_KEY_PCSRK, |
| sizeof(tBTM_LE_PCSRK_KEYS)); |
| } |
| |
| if (pairing_cb.ble.is_lenc_key_rcvd) { |
| btif_storage_add_ble_bonding_key( |
| &bd_addr, (uint8_t*)&pairing_cb.ble.lenc_key, BTM_LE_KEY_LENC, |
| sizeof(tBTM_LE_LENC_KEYS)); |
| } |
| |
| if (pairing_cb.ble.is_lcsrk_key_rcvd) { |
| btif_storage_add_ble_bonding_key( |
| &bd_addr, (uint8_t*)&pairing_cb.ble.lcsrk_key, BTM_LE_KEY_LCSRK, |
| sizeof(tBTM_LE_LCSRK_KEYS)); |
| } |
| |
| if (pairing_cb.ble.is_lidk_key_rcvd) { |
| uint8_t empty[] = {}; |
| btif_storage_add_ble_bonding_key(&bd_addr, empty, BTM_LE_KEY_LID, 0); |
| } |
| } |
| |
| static void btif_dm_remove_ble_bonding_keys(void) { |
| BTIF_TRACE_DEBUG("%s", __func__); |
| |
| RawAddress bd_addr = pairing_cb.bd_addr; |
| btif_storage_remove_ble_bonding_keys(&bd_addr); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_ble_sec_req_evt |
| * |
| * Description Eprocess security request event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_ble_sec_req_evt(tBTA_DM_BLE_SEC_REQ* p_ble_req, |
| bool is_consent) { |
| bt_bdname_t bd_name; |
| uint32_t cod; |
| int dev_type; |
| |
| BTIF_TRACE_DEBUG("%s", __func__); |
| |
| if (!is_consent && pairing_cb.state == BT_BOND_STATE_BONDING) { |
| BTIF_TRACE_DEBUG("%s Discard security request", __func__); |
| return; |
| } |
| |
| /* Remote name update */ |
| if (!btif_get_device_type(p_ble_req->bd_addr, &dev_type)) { |
| dev_type = BT_DEVICE_TYPE_BLE; |
| } |
| btif_dm_update_ble_remote_properties(p_ble_req->bd_addr, p_ble_req->bd_name, |
| (tBT_DEVICE_TYPE)dev_type); |
| |
| RawAddress bd_addr = p_ble_req->bd_addr; |
| memcpy(bd_name.name, p_ble_req->bd_name, BD_NAME_LEN); |
| bd_name.name[BD_NAME_LEN] = '\0'; |
| |
| bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING); |
| |
| pairing_cb.bond_type = tBTM_SEC_DEV_REC::BOND_TYPE_PERSISTENT; |
| pairing_cb.is_le_only = true; |
| pairing_cb.is_le_nc = false; |
| pairing_cb.is_ssp = true; |
| btm_set_bond_type_dev(p_ble_req->bd_addr, pairing_cb.bond_type); |
| |
| cod = COD_UNCLASSIFIED; |
| |
| invoke_ssp_request_cb(bd_addr, bd_name, cod, BT_SSP_VARIANT_CONSENT, 0); |
| } |
| |
| /******************************************************************************* |
| * |
| * Function btif_dm_ble_passkey_req_evt |
| * |
| * Description Executes pin request event in btif context |
| * |
| * Returns void |
| * |
| ******************************************************************************/ |
| static void btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ* p_pin_req) { |
| bt_bdname_t bd_name; |
| uint32_t cod; |
| int dev_type; |
| |
| /* Remote name update */ |
| if (!btif_get_device_type(p_pin_req->bd_addr, &dev_type)) { |
| dev_type = BT_DEVICE_TYPE_BLE; |
| } |
| btif_dm_update_ble_remote_properties(p_pin_req->bd_addr, p_pin_req->bd_name, |
| (tBT_DEVICE_TYPE) |