sandy
/
PL286
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1 Commit
1 Branch
0 Tags
18 GiB
Tree: 99da0f2c72
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '99da0f2c72'
${ noResults }
PL286/system/bt/stack/gatt/gatt_cl.cc

1135 lines
38 KiB
Raw Blame History

/******************************************************************************
*
* Copyright (C) 1999-2012 Broadcom Corporation
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
******************************************************************************/
/******************************************************************************
*
* this file contains the main GATT client functions
*
******************************************************************************/
#include "bt_target.h"
#include <string.h>
#include "bt_common.h"
#include "bt_utils.h"
#include "gatt_int.h"
#include "l2c_int.h"
#include "log/log.h"
#include "osi/include/osi.h"
#define GATT_WRITE_LONG_HDR_SIZE 5 /* 1 opcode + 2 handle + 2 offset */
#define GATT_READ_CHAR_VALUE_HDL (GATT_READ_CHAR_VALUE | 0x80)
#define GATT_READ_INC_SRV_UUID128 (GATT_DISC_INC_SRVC | 0x90)
#define GATT_PREP_WRITE_RSP_MIN_LEN 4
#define GATT_NOTIFICATION_MIN_LEN 2
#define GATT_WRITE_RSP_MIN_LEN 2
#define GATT_INFO_RSP_MIN_LEN 1
#define GATT_MTU_RSP_MIN_LEN 2
#define GATT_READ_BY_TYPE_RSP_MIN_LEN 1
using base::StringPrintf;
/*******************************************************************************
* G L O B A L G A T T D A T A *
******************************************************************************/
void gatt_send_prepare_write(tGATT_TCB& tcb, tGATT_CLCB* p_clcb);
uint8_t disc_type_to_att_opcode[GATT_DISC_MAX] = {
0,
GATT_REQ_READ_BY_GRP_TYPE, /* GATT_DISC_SRVC_ALL = 1, */
GATT_REQ_FIND_TYPE_VALUE, /* GATT_DISC_SRVC_BY_UUID, */
GATT_REQ_READ_BY_TYPE, /* GATT_DISC_INC_SRVC, */
GATT_REQ_READ_BY_TYPE, /* GATT_DISC_CHAR, */
GATT_REQ_FIND_INFO /* GATT_DISC_CHAR_DSCPT, */
};
uint16_t disc_type_to_uuid[GATT_DISC_MAX] = {
0, /* reserved */
GATT_UUID_PRI_SERVICE, /* <service> DISC_SRVC_ALL */
GATT_UUID_PRI_SERVICE, /* <service> for DISC_SERVC_BY_UUID */
GATT_UUID_INCLUDE_SERVICE, /* <include_service> for DISC_INC_SRVC */
GATT_UUID_CHAR_DECLARE, /* <characteristic> for DISC_CHAR */
0 /* no type filtering for DISC_CHAR_DSCPT */
};
/*******************************************************************************
*
* Function gatt_act_discovery
*
* Description GATT discovery operation.
*
* Returns void.
*
******************************************************************************/
void gatt_act_discovery(tGATT_CLCB* p_clcb) {
uint8_t op_code = disc_type_to_att_opcode[p_clcb->op_subtype];
tGATT_CL_MSG cl_req;
tGATT_STATUS st;
if (p_clcb->s_handle <= p_clcb->e_handle && p_clcb->s_handle != 0) {
memset(&cl_req, 0, sizeof(tGATT_CL_MSG));
cl_req.browse.s_handle = p_clcb->s_handle;
cl_req.browse.e_handle = p_clcb->e_handle;
if (disc_type_to_uuid[p_clcb->op_subtype] != 0) {
cl_req.browse.uuid.len = 2;
cl_req.browse.uuid.uu.uuid16 = disc_type_to_uuid[p_clcb->op_subtype];
}
if (p_clcb->op_subtype ==
GATT_DISC_SRVC_BY_UUID) /* fill in the FindByTypeValue request info*/
{
cl_req.find_type_value.uuid.len = 2;
cl_req.find_type_value.uuid.uu.uuid16 =
disc_type_to_uuid[p_clcb->op_subtype];
cl_req.find_type_value.s_handle = p_clcb->s_handle;
cl_req.find_type_value.e_handle = p_clcb->e_handle;
cl_req.find_type_value.value_len = p_clcb->uuid.len;
/* if service type is 32 bits UUID, convert it now */
if (p_clcb->uuid.len == LEN_UUID_32) {
cl_req.find_type_value.value_len = LEN_UUID_128;
gatt_convert_uuid32_to_uuid128(cl_req.find_type_value.value,
p_clcb->uuid.uu.uuid32);
} else
memcpy(cl_req.find_type_value.value, &p_clcb->uuid.uu,
p_clcb->uuid.len);
}
st = attp_send_cl_msg(*p_clcb->p_tcb, p_clcb, op_code, &cl_req);
if (st != GATT_SUCCESS && st != GATT_CMD_STARTED) {
gatt_end_operation(p_clcb, GATT_ERROR, NULL);
}
} else /* end of handle range */
gatt_end_operation(p_clcb, GATT_SUCCESS, NULL);
}
/*******************************************************************************
*
* Function gatt_act_read
*
* Description GATT read operation.
*
* Returns void.
*
******************************************************************************/
void gatt_act_read(tGATT_CLCB* p_clcb, uint16_t offset) {
tGATT_TCB& tcb = *p_clcb->p_tcb;
uint8_t rt = GATT_INTERNAL_ERROR;
tGATT_CL_MSG msg;
uint8_t op_code = 0;
memset(&msg, 0, sizeof(tGATT_CL_MSG));
switch (p_clcb->op_subtype) {
case GATT_READ_CHAR_VALUE:
case GATT_READ_BY_TYPE:
op_code = GATT_REQ_READ_BY_TYPE;
msg.browse.s_handle = p_clcb->s_handle;
msg.browse.e_handle = p_clcb->e_handle;
if (p_clcb->op_subtype == GATT_READ_BY_TYPE)
memcpy(&msg.browse.uuid, &p_clcb->uuid, sizeof(tBT_UUID));
else {
msg.browse.uuid.len = LEN_UUID_16;
msg.browse.uuid.uu.uuid16 = GATT_UUID_CHAR_DECLARE;
}
break;
case GATT_READ_CHAR_VALUE_HDL:
case GATT_READ_BY_HANDLE:
if (!p_clcb->counter) {
op_code = GATT_REQ_READ;
msg.handle = p_clcb->s_handle;
} else {
if (!p_clcb->first_read_blob_after_read)
p_clcb->first_read_blob_after_read = true;
else
p_clcb->first_read_blob_after_read = false;
VLOG(1) << __func__ << ": first_read_blob_after_read="
<< p_clcb->first_read_blob_after_read;
op_code = GATT_REQ_READ_BLOB;
msg.read_blob.offset = offset;
msg.read_blob.handle = p_clcb->s_handle;
}
p_clcb->op_subtype &= ~0x80;
break;
case GATT_READ_PARTIAL:
op_code = GATT_REQ_READ_BLOB;
msg.read_blob.handle = p_clcb->s_handle;
msg.read_blob.offset = offset;
break;
case GATT_READ_MULTIPLE:
op_code = GATT_REQ_READ_MULTI;
memcpy(&msg.read_multi, p_clcb->p_attr_buf, sizeof(tGATT_READ_MULTI));
break;
case GATT_READ_INC_SRV_UUID128:
op_code = GATT_REQ_READ;
msg.handle = p_clcb->s_handle;
p_clcb->op_subtype &= ~0x90;
break;
default:
LOG(ERROR) << "Unknown read type:" << +p_clcb->op_subtype;
break;
}
if (op_code != 0) rt = attp_send_cl_msg(tcb, p_clcb, op_code, &msg);
if (op_code == 0 || (rt != GATT_SUCCESS && rt != GATT_CMD_STARTED)) {
gatt_end_operation(p_clcb, rt, NULL);
}
}
/** GATT write operation */
void gatt_act_write(tGATT_CLCB* p_clcb, uint8_t sec_act) {
tGATT_TCB& tcb = *p_clcb->p_tcb;
CHECK(p_clcb->p_attr_buf);
tGATT_VALUE& attr = *((tGATT_VALUE*)p_clcb->p_attr_buf);
switch (p_clcb->op_subtype) {
case GATT_WRITE_NO_RSP: {
p_clcb->s_handle = attr.handle;
uint8_t op_code = (sec_act == GATT_SEC_SIGN_DATA) ? GATT_SIGN_CMD_WRITE
: GATT_CMD_WRITE;
uint8_t rt = gatt_send_write_msg(tcb, p_clcb, op_code, attr.handle,
attr.len, 0, attr.value);
if (rt != GATT_CMD_STARTED) {
if (rt != GATT_SUCCESS) {
LOG(ERROR) << StringPrintf(
"gatt_act_write() failed op_code=0x%x rt=%d", op_code, rt);
}
gatt_end_operation(p_clcb, rt, NULL);
}
return;
}
case GATT_WRITE: {
if (attr.len <= (tcb.payload_size - GATT_HDR_SIZE)) {
p_clcb->s_handle = attr.handle;
uint8_t rt = gatt_send_write_msg(tcb, p_clcb, GATT_REQ_WRITE,
attr.handle, attr.len, 0, attr.value);
if (rt != GATT_SUCCESS && rt != GATT_CMD_STARTED &&
rt != GATT_CONGESTED) {
if (rt != GATT_SUCCESS) {
LOG(ERROR) << StringPrintf(
"gatt_act_write() failed op_code=0x%x rt=%d", GATT_REQ_WRITE,
rt);
}
gatt_end_operation(p_clcb, rt, NULL);
}
} else {
/* prepare write for long attribute */
gatt_send_prepare_write(tcb, p_clcb);
}
return;
}
case GATT_WRITE_PREPARE:
gatt_send_prepare_write(tcb, p_clcb);
return;
default:
CHECK(false) << "Unknown write type" << p_clcb->op_subtype;
return;
}
}
/*******************************************************************************
*
* Function gatt_send_queue_write_cancel
*
* Description send queue write cancel
*
* Returns void.
*
******************************************************************************/
void gatt_send_queue_write_cancel(tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
tGATT_EXEC_FLAG flag) {
uint8_t rt;
VLOG(1) << __func__;
tGATT_CL_MSG gatt_cl_msg;
gatt_cl_msg.exec_write = flag;
rt = attp_send_cl_msg(tcb, p_clcb, GATT_REQ_EXEC_WRITE, &gatt_cl_msg);
if (rt != GATT_SUCCESS) {
gatt_end_operation(p_clcb, rt, NULL);
}
}
/*******************************************************************************
*
* Function gatt_check_write_long_terminate
*
* Description To terminate write long or not.
*
* Returns true: write long is terminated; false keep sending.
*
******************************************************************************/
bool gatt_check_write_long_terminate(tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
tGATT_VALUE* p_rsp_value) {
tGATT_VALUE* p_attr = (tGATT_VALUE*)p_clcb->p_attr_buf;
bool exec = false;
tGATT_EXEC_FLAG flag = GATT_PREP_WRITE_EXEC;
VLOG(1) << __func__;
/* check the first write response status */
if (p_rsp_value != NULL) {
if (p_rsp_value->handle != p_attr->handle ||
p_rsp_value->len != p_clcb->counter ||
memcmp(p_rsp_value->value, p_attr->value + p_attr->offset,
p_rsp_value->len)) {
/* data does not match */
p_clcb->status = GATT_ERROR;
flag = GATT_PREP_WRITE_CANCEL;
exec = true;
} else /* response checking is good */
{
p_clcb->status = GATT_SUCCESS;
/* update write offset and check if end of attribute value */
if ((p_attr->offset += p_rsp_value->len) >= p_attr->len) exec = true;
}
}
if (exec) {
gatt_send_queue_write_cancel(tcb, p_clcb, flag);
return true;
}
return false;
}
/** Send prepare write */
void gatt_send_prepare_write(tGATT_TCB& tcb, tGATT_CLCB* p_clcb) {
tGATT_VALUE* p_attr = (tGATT_VALUE*)p_clcb->p_attr_buf;
uint8_t type = p_clcb->op_subtype;
VLOG(1) << __func__ << StringPrintf(" type=0x%x", type);
uint16_t to_send = p_attr->len - p_attr->offset;
if (to_send > (tcb.payload_size -
GATT_WRITE_LONG_HDR_SIZE)) /* 2 = uint16_t offset bytes */
to_send = tcb.payload_size - GATT_WRITE_LONG_HDR_SIZE;
p_clcb->s_handle = p_attr->handle;
uint16_t offset = p_attr->offset;
if (type == GATT_WRITE_PREPARE) {
offset += p_clcb->start_offset;
}
VLOG(1) << StringPrintf("offset =0x%x len=%d", offset, to_send);
uint8_t rt = gatt_send_write_msg(tcb, p_clcb, GATT_REQ_PREPARE_WRITE,
p_attr->handle, to_send, /* length */
offset, /* used as offset */
p_attr->value + p_attr->offset); /* data */
/* remember the write long attribute length */
p_clcb->counter = to_send;
if (rt != GATT_SUCCESS && rt != GATT_CMD_STARTED && rt != GATT_CONGESTED) {
gatt_end_operation(p_clcb, rt, NULL);
}
}
/*******************************************************************************
*
* Function gatt_process_find_type_value_rsp
*
* Description This function handles the find by type value response.
*
*
* Returns void
*
******************************************************************************/
void gatt_process_find_type_value_rsp(UNUSED_ATTR tGATT_TCB& tcb,
tGATT_CLCB* p_clcb, uint16_t len,
uint8_t* p_data) {
tGATT_DISC_RES result;
uint8_t* p = p_data;
VLOG(1) << __func__;
/* unexpected response */
if (p_clcb->operation != GATTC_OPTYPE_DISCOVERY ||
p_clcb->op_subtype != GATT_DISC_SRVC_BY_UUID)
return;
memset(&result, 0, sizeof(tGATT_DISC_RES));
result.type.len = 2;
result.type.uu.uuid16 = GATT_UUID_PRI_SERVICE;
/* returns a series of handle ranges */
while (len >= 4) {
STREAM_TO_UINT16(result.handle, p);
STREAM_TO_UINT16(result.value.group_value.e_handle, p);
memcpy(&result.value.group_value.service_type, &p_clcb->uuid,
sizeof(tBT_UUID));
len -= 4;
if (p_clcb->p_reg->app_cb.p_disc_res_cb)
(*p_clcb->p_reg->app_cb.p_disc_res_cb)(p_clcb->conn_id,
p_clcb->op_subtype, &result);
}
/* last handle + 1 */
p_clcb->s_handle = (result.value.group_value.e_handle == 0)
? 0
: (result.value.group_value.e_handle + 1);
/* initiate another request */
gatt_act_discovery(p_clcb);
}
/*******************************************************************************
*
* Function gatt_process_read_info_rsp
*
* Description This function is called to handle the read information
* response.
*
*
* Returns void
*
******************************************************************************/
void gatt_process_read_info_rsp(UNUSED_ATTR tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
UNUSED_ATTR uint8_t op_code, uint16_t len,
uint8_t* p_data) {
tGATT_DISC_RES result;
uint8_t *p = p_data, uuid_len = 0, type;
if (len < GATT_INFO_RSP_MIN_LEN) {
LOG(ERROR) << "invalid Info Response PDU received, discard.";
gatt_end_operation(p_clcb, GATT_INVALID_PDU, NULL);
return;
}
/* unexpected response */
if (p_clcb->operation != GATTC_OPTYPE_DISCOVERY ||
p_clcb->op_subtype != GATT_DISC_CHAR_DSCPT)
return;
STREAM_TO_UINT8(type, p);
len -= 1;
if (type == GATT_INFO_TYPE_PAIR_16)
uuid_len = LEN_UUID_16;
else if (type == GATT_INFO_TYPE_PAIR_128)
uuid_len = LEN_UUID_128;
while (len >= uuid_len + 2) {
STREAM_TO_UINT16(result.handle, p);
if (uuid_len > 0) {
if (!gatt_parse_uuid_from_cmd(&result.type, uuid_len, &p)) break;
} else
memcpy(&result.type, &p_clcb->uuid, sizeof(tBT_UUID));
len -= (uuid_len + 2);
if (p_clcb->p_reg->app_cb.p_disc_res_cb)
(*p_clcb->p_reg->app_cb.p_disc_res_cb)(p_clcb->conn_id,
p_clcb->op_subtype, &result);
}
p_clcb->s_handle = (result.handle == 0) ? 0 : (result.handle + 1);
/* initiate another request */
gatt_act_discovery(p_clcb);
}
/*******************************************************************************
*
* Function gatt_proc_disc_error_rsp
*
* Description Process the read by type response and send another request
* if needed.
*
* Returns void.
*
******************************************************************************/
void gatt_proc_disc_error_rsp(UNUSED_ATTR tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
uint8_t opcode, UNUSED_ATTR uint16_t handle,
uint8_t reason) {
tGATT_STATUS status = (tGATT_STATUS)reason;
VLOG(1) << __func__
<< StringPrintf("reason: %02x cmd_code %04x", reason, opcode);
switch (opcode) {
case GATT_REQ_READ_BY_GRP_TYPE:
case GATT_REQ_FIND_TYPE_VALUE:
case GATT_REQ_READ_BY_TYPE:
case GATT_REQ_FIND_INFO:
if (reason == GATT_NOT_FOUND) {
status = GATT_SUCCESS;
VLOG(1) << "Discovery completed";
}
break;
default:
LOG(ERROR) << StringPrintf("Incorrect discovery opcode %04x", opcode);
break;
}
gatt_end_operation(p_clcb, status, NULL);
}
/*******************************************************************************
*
* Function gatt_process_error_rsp
*
* Description This function is called to handle the error response
*
*
* Returns void
*
******************************************************************************/
void gatt_process_error_rsp(tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
UNUSED_ATTR uint8_t op_code,
UNUSED_ATTR uint16_t len, uint8_t* p_data) {
uint8_t opcode, reason, *p = p_data;
uint16_t handle;
tGATT_VALUE* p_attr = (tGATT_VALUE*)p_clcb->p_attr_buf;
VLOG(1) << __func__;
if (len < 4) {
android_errorWriteLog(0x534e4554, "79591688");
LOG(ERROR) << "Error response too short";
// Specification does not clearly define what should happen if error
// response is too short. General rule in BT Spec 5.0 Vol 3, Part F 3.4.1.1
// is: "If an error code is received in the Error Response that is not
// understood by the client, for example an error code that was reserved for
// future use that is now being used in a future version of this
// specification, then the Error Response shall still be considered to state
// that the given request cannot be performed for an unknown reason."
opcode = handle = 0;
reason = 0x7F;
} else {
STREAM_TO_UINT8(opcode, p);
STREAM_TO_UINT16(handle, p);
STREAM_TO_UINT8(reason, p);
}
if (p_clcb->operation == GATTC_OPTYPE_DISCOVERY) {
gatt_proc_disc_error_rsp(tcb, p_clcb, opcode, handle, reason);
} else {
if ((p_clcb->operation == GATTC_OPTYPE_WRITE) &&
(p_clcb->op_subtype == GATT_WRITE) &&
(opcode == GATT_REQ_PREPARE_WRITE) && (p_attr) &&
(handle == p_attr->handle)) {
p_clcb->status = reason;
gatt_send_queue_write_cancel(tcb, p_clcb, GATT_PREP_WRITE_CANCEL);
} else if ((p_clcb->operation == GATTC_OPTYPE_READ) &&
((p_clcb->op_subtype == GATT_READ_CHAR_VALUE_HDL) ||
(p_clcb->op_subtype == GATT_READ_BY_HANDLE)) &&
(opcode == GATT_REQ_READ_BLOB) &&
p_clcb->first_read_blob_after_read &&
(reason == GATT_NOT_LONG)) {
gatt_end_operation(p_clcb, GATT_SUCCESS, (void*)p_clcb->p_attr_buf);
} else
gatt_end_operation(p_clcb, reason, NULL);
}
}
/*******************************************************************************
*
* Function gatt_process_prep_write_rsp
*
* Description This function is called to handle the read response
*
*
* Returns void
*
******************************************************************************/
void gatt_process_prep_write_rsp(tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
uint8_t op_code, uint16_t len,
uint8_t* p_data) {
uint8_t* p = p_data;
tGATT_VALUE value = {
.conn_id = p_clcb->conn_id, .auth_req = GATT_AUTH_REQ_NONE,
};
LOG(ERROR) << StringPrintf("value resp op_code = %s len = %d",
gatt_dbg_op_name(op_code), len);
if (len < GATT_PREP_WRITE_RSP_MIN_LEN) {
LOG(ERROR) << "illegal prepare write response length, discard";
gatt_end_operation(p_clcb, GATT_INVALID_PDU, &value);
return;
}
STREAM_TO_UINT16(value.handle, p);
STREAM_TO_UINT16(value.offset, p);
value.len = len - 4;
memcpy(value.value, p, value.len);
if (p_clcb->op_subtype == GATT_WRITE_PREPARE) {
p_clcb->status = GATT_SUCCESS;
/* application should verify handle offset
and value are matched or not */
gatt_end_operation(p_clcb, p_clcb->status, &value);
} else if (p_clcb->op_subtype == GATT_WRITE) {
if (!gatt_check_write_long_terminate(tcb, p_clcb, &value))
gatt_send_prepare_write(tcb, p_clcb);
}
}
/*******************************************************************************
*
* Function gatt_process_notification
*
* Description Handle the handle value indication/notification.
*
* Returns void
*
******************************************************************************/
void gatt_process_notification(tGATT_TCB& tcb, uint8_t op_code, uint16_t len,
uint8_t* p_data) {
tGATT_VALUE value;
tGATT_REG* p_reg;
uint16_t conn_id;
tGATT_STATUS encrypt_status;
uint8_t *p = p_data, i, event = (op_code == GATT_HANDLE_VALUE_NOTIF)
? GATTC_OPTYPE_NOTIFICATION
: GATTC_OPTYPE_INDICATION;
VLOG(1) << __func__;
if (len < GATT_NOTIFICATION_MIN_LEN) {
LOG(ERROR) << "illegal notification PDU length, discard";
return;
}
memset(&value, 0, sizeof(value));
STREAM_TO_UINT16(value.handle, p);
value.len = len - 2;
memcpy(value.value, p, value.len);
if (!GATT_HANDLE_IS_VALID(value.handle)) {
/* illegal handle, send ack now */
if (op_code == GATT_HANDLE_VALUE_IND)
attp_send_cl_msg(tcb, nullptr, GATT_HANDLE_VALUE_CONF, NULL);
return;
}
if (event == GATTC_OPTYPE_INDICATION) {
if (tcb.ind_count) {
/* this is an error case that receiving an indication but we
still has an indication not being acked yet.
For now, just log the error reset the counter.
Later we need to disconnect the link unconditionally.
*/
LOG(ERROR) << __func__ << " rcv Ind. but ind_count=" << tcb.ind_count
<< " (will reset ind_count)";
}
tcb.ind_count = 0;
}
/* should notify all registered client with the handle value
notificaion/indication
Note: need to do the indication count and start timer first then do
callback
*/
for (i = 0, p_reg = gatt_cb.cl_rcb; i < GATT_MAX_APPS; i++, p_reg++) {
if (p_reg->in_use && p_reg->app_cb.p_cmpl_cb &&
(event == GATTC_OPTYPE_INDICATION))
tcb.ind_count++;
}
if (event == GATTC_OPTYPE_INDICATION) {
/* start a timer for app confirmation */
if (tcb.ind_count > 0)
gatt_start_ind_ack_timer(tcb);
else /* no app to indicate, or invalid handle */
attp_send_cl_msg(tcb, nullptr, GATT_HANDLE_VALUE_CONF, NULL);
}
encrypt_status = gatt_get_link_encrypt_status(tcb);
tGATT_CL_COMPLETE gatt_cl_complete;
gatt_cl_complete.att_value = value;
for (i = 0, p_reg = gatt_cb.cl_rcb; i < GATT_MAX_APPS; i++, p_reg++) {
if (p_reg->in_use && p_reg->app_cb.p_cmpl_cb) {
conn_id = GATT_CREATE_CONN_ID(tcb.tcb_idx, p_reg->gatt_if);
(*p_reg->app_cb.p_cmpl_cb)(conn_id, event, encrypt_status,
&gatt_cl_complete);
}
}
}
/*******************************************************************************
*
* Function gatt_process_read_by_type_rsp
*
* Description This function is called to handle the read by type response.
* read by type can be used for discovery, or read by type or
* read characteristic value.
*
* Returns void
*
******************************************************************************/
void gatt_process_read_by_type_rsp(tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
uint8_t op_code, uint16_t len,
uint8_t* p_data) {
tGATT_DISC_RES result;
tGATT_DISC_VALUE record_value;
uint8_t *p = p_data, value_len, handle_len = 2;
uint16_t handle = 0;
/* discovery procedure and no callback function registered */
if (((!p_clcb->p_reg) || (!p_clcb->p_reg->app_cb.p_disc_res_cb)) &&
(p_clcb->operation == GATTC_OPTYPE_DISCOVERY))
return;
if (len < GATT_READ_BY_TYPE_RSP_MIN_LEN) {
LOG(ERROR) << "Illegal ReadByType/ReadByGroupType Response length, discard";
gatt_end_operation(p_clcb, GATT_INVALID_PDU, NULL);
return;
}
STREAM_TO_UINT8(value_len, p);
if ((value_len > (tcb.payload_size - 2)) || (value_len > (len - 1))) {
/* this is an error case that server's response containing a value length
which is larger than MTU-2
or value_len > message total length -1 */
LOG(ERROR) << __func__
<< StringPrintf(
": Discard response op_code=%d "
"vale_len=%d > (MTU-2=%d or msg_len-1=%d)",
op_code, value_len, (tcb.payload_size - 2), (len - 1));
gatt_end_operation(p_clcb, GATT_ERROR, NULL);
return;
}
if (op_code == GATT_RSP_READ_BY_GRP_TYPE) handle_len = 4;
value_len -= handle_len; /* substract the handle pairs bytes */
len -= 1;
while (len >= (handle_len + value_len)) {
STREAM_TO_UINT16(handle, p);
if (!GATT_HANDLE_IS_VALID(handle)) {
gatt_end_operation(p_clcb, GATT_INVALID_HANDLE, NULL);
return;
}
memset(&result, 0, sizeof(tGATT_DISC_RES));
memset(&record_value, 0, sizeof(tGATT_DISC_VALUE));
result.handle = handle;
result.type.len = 2;
result.type.uu.uuid16 = disc_type_to_uuid[p_clcb->op_subtype];
/* discover all services */
if (p_clcb->operation == GATTC_OPTYPE_DISCOVERY &&
p_clcb->op_subtype == GATT_DISC_SRVC_ALL &&
op_code == GATT_RSP_READ_BY_GRP_TYPE) {
STREAM_TO_UINT16(handle, p);
if (!GATT_HANDLE_IS_VALID(handle)) {
gatt_end_operation(p_clcb, GATT_INVALID_HANDLE, NULL);
return;
} else {
record_value.group_value.e_handle = handle;
if (!gatt_parse_uuid_from_cmd(&record_value.group_value.service_type,
value_len, &p)) {
LOG(ERROR) << "discover all service response parsing failure";
break;
}
}
}
/* discover included service */
else if (p_clcb->operation == GATTC_OPTYPE_DISCOVERY &&
p_clcb->op_subtype == GATT_DISC_INC_SRVC) {
STREAM_TO_UINT16(record_value.incl_service.s_handle, p);
STREAM_TO_UINT16(record_value.incl_service.e_handle, p);
if (!GATT_HANDLE_IS_VALID(record_value.incl_service.s_handle) ||
!GATT_HANDLE_IS_VALID(record_value.incl_service.e_handle)) {
gatt_end_operation(p_clcb, GATT_INVALID_HANDLE, NULL);
return;
}
if (value_len == 6) {
STREAM_TO_UINT16(record_value.incl_service.service_type.uu.uuid16, p);
record_value.incl_service.service_type.len = LEN_UUID_16;
} else if (value_len == 4) {
p_clcb->s_handle = record_value.incl_service.s_handle;
p_clcb->read_uuid128.wait_for_read_rsp = true;
p_clcb->read_uuid128.next_disc_start_hdl = handle + 1;
memcpy(&p_clcb->read_uuid128.result, &result, sizeof(result));
memcpy(&p_clcb->read_uuid128.result.value, &record_value,
sizeof(result.value));
p_clcb->op_subtype |= 0x90;
gatt_act_read(p_clcb, 0);
return;
} else {
LOG(ERROR) << __func__
<< ": INCL_SRVC failed with invalid data value_len="
<< +value_len;
gatt_end_operation(p_clcb, GATT_INVALID_PDU, (void*)p);
return;
}
}
/* read by type */
else if (p_clcb->operation == GATTC_OPTYPE_READ &&
p_clcb->op_subtype == GATT_READ_BY_TYPE) {
p_clcb->counter = len - 2;
p_clcb->s_handle = handle;
if (p_clcb->counter == (p_clcb->p_tcb->payload_size - 4)) {
p_clcb->op_subtype = GATT_READ_BY_HANDLE;
if (!p_clcb->p_attr_buf)
p_clcb->p_attr_buf = (uint8_t*)osi_malloc(GATT_MAX_ATTR_LEN);
if (p_clcb->counter <= GATT_MAX_ATTR_LEN) {
memcpy(p_clcb->p_attr_buf, p, p_clcb->counter);
gatt_act_read(p_clcb, p_clcb->counter);
} else {
gatt_end_operation(p_clcb, GATT_INTERNAL_ERROR, (void*)p);
}
} else {
gatt_end_operation(p_clcb, GATT_SUCCESS, (void*)p);
}
return;
} else /* discover characterisitic */
{
STREAM_TO_UINT8(record_value.dclr_value.char_prop, p);
STREAM_TO_UINT16(record_value.dclr_value.val_handle, p);
if (!GATT_HANDLE_IS_VALID(record_value.dclr_value.val_handle)) {
gatt_end_operation(p_clcb, GATT_INVALID_HANDLE, NULL);
return;
}
if (!gatt_parse_uuid_from_cmd(&record_value.dclr_value.char_uuid,
(uint16_t)(value_len - 3), &p)) {
gatt_end_operation(p_clcb, GATT_SUCCESS, NULL);
/* invalid format, and skip the result */
return;
}
/* UUID not matching */
if (!gatt_uuid_compare(record_value.dclr_value.char_uuid, p_clcb->uuid)) {
len -= (value_len + 2);
continue; /* skip the result, and look for next one */
} else if (p_clcb->operation == GATTC_OPTYPE_READ)
/* UUID match for read characteristic value */
{
/* only read the first matching UUID characteristic value, and
discard the rest results */
p_clcb->s_handle = record_value.dclr_value.val_handle;
p_clcb->op_subtype |= 0x80;
gatt_act_read(p_clcb, 0);
return;
}
}
len -= (value_len + handle_len);
/* result is (handle, 16bits UUID) pairs */
memcpy(&result.value, &record_value, sizeof(result.value));
/* send callback if is discover procedure */
if (p_clcb->operation == GATTC_OPTYPE_DISCOVERY &&
p_clcb->p_reg->app_cb.p_disc_res_cb)
(*p_clcb->p_reg->app_cb.p_disc_res_cb)(p_clcb->conn_id,
p_clcb->op_subtype, &result);
}
p_clcb->s_handle = (handle == 0) ? 0 : (handle + 1);
if (p_clcb->operation == GATTC_OPTYPE_DISCOVERY) {
/* initiate another request */
gatt_act_discovery(p_clcb);
} else /* read characteristic value */
{
gatt_act_read(p_clcb, 0);
}
}
/*******************************************************************************
*
* Function gatt_process_read_rsp
*
* Description This function is called to handle the read BLOB response
*
*
* Returns void
*
******************************************************************************/
void gatt_process_read_rsp(tGATT_TCB& tcb, tGATT_CLCB* p_clcb,
UNUSED_ATTR uint8_t op_code, uint16_t len,
uint8_t* p_data) {
uint16_t offset = p_clcb->counter;
uint8_t* p = p_data;
if (p_clcb->operation == GATTC_OPTYPE_READ) {
if (p_clcb->op_subtype != GATT_READ_BY_HANDLE) {
p_clcb->counter = len;
gatt_end_operation(p_clcb, GATT_SUCCESS, (void*)p);
} else {
/* allocate GKI buffer holding up long attribute value */
if (!p_clcb->p_attr_buf)
p_clcb->p_attr_buf = (uint8_t*)osi_malloc(GATT_MAX_ATTR_LEN);
/* copy attrobute value into cb buffer */
if (offset < GATT_MAX_ATTR_LEN) {
if ((len + offset) > GATT_MAX_ATTR_LEN)
len = GATT_MAX_ATTR_LEN - offset;
p_clcb->counter += len;
memcpy(p_clcb->p_attr_buf + offset, p, len);
/* send next request if needed */
if (len == (tcb.payload_size -
1) && /* full packet for read or read blob rsp */
len + offset < GATT_MAX_ATTR_LEN) {
VLOG(1) << StringPrintf(
"full pkt issue read blob for remianing bytes old offset=%d "
"len=%d new offset=%d",
offset, len, p_clcb->counter);
gatt_act_read(p_clcb, p_clcb->counter);
} else /* end of request, send callback */
{
gatt_end_operation(p_clcb, GATT_SUCCESS, (void*)p_clcb->p_attr_buf);
}
} else /* exception, should not happen */
{
LOG(ERROR) << "attr offset = " << +offset
<< " p_attr_buf = " << p_clcb->p_attr_buf;
gatt_end_operation(p_clcb, GATT_NO_RESOURCES,
(void*)p_clcb->p_attr_buf);
}
}
} else {
if (p_clcb->operation == GATTC_OPTYPE_DISCOVERY &&
p_clcb->op_subtype == GATT_DISC_INC_SRVC &&
p_clcb->read_uuid128.wait_for_read_rsp) {
p_clcb->s_handle = p_clcb->read_uuid128.next_disc_start_hdl;
p_clcb->read_uuid128.wait_for_read_rsp = false;
if (len == LEN_UUID_128) {
memcpy(p_clcb->read_uuid128.result.value.incl_service.service_type.uu
.uuid128,
p, len);
p_clcb->read_uuid128.result.value.incl_service.service_type.len =
LEN_UUID_128;
if (p_clcb->p_reg->app_cb.p_disc_res_cb)
(*p_clcb->p_reg->app_cb.p_disc_res_cb)(p_clcb->conn_id,
p_clcb->op_subtype,
&p_clcb->read_uuid128.result);
gatt_act_discovery(p_clcb);
} else {
gatt_end_operation(p_clcb, GATT_INVALID_PDU, (void*)p);
}
}
}
}
/*******************************************************************************
*
* Function gatt_process_handle_rsp
*
* Description This function is called to handle the write response
*
*
* Returns void
*
******************************************************************************/
void gatt_process_handle_rsp(tGATT_CLCB* p_clcb) {
gatt_end_operation(p_clcb, GATT_SUCCESS, NULL);
}
/*******************************************************************************
*
* Function gatt_process_mtu_rsp
*
* Description Process the configure MTU response.
*
*
* Returns void
*
******************************************************************************/
void gatt_process_mtu_rsp(tGATT_TCB& tcb, tGATT_CLCB* p_clcb, uint16_t len,
uint8_t* p_data) {
uint16_t mtu;
tGATT_STATUS status = GATT_SUCCESS;
if (len < GATT_MTU_RSP_MIN_LEN) {
LOG(ERROR) << "invalid MTU response PDU received, discard.";
status = GATT_INVALID_PDU;
} else {
STREAM_TO_UINT16(mtu, p_data);
if (mtu < tcb.payload_size && mtu >= GATT_DEF_BLE_MTU_SIZE)
tcb.payload_size = mtu;
}
l2cble_set_fixed_channel_tx_data_length(tcb.peer_bda, L2CAP_ATT_CID,
tcb.payload_size);
gatt_end_operation(p_clcb, status, NULL);
}
/*******************************************************************************
*
* Function gatt_cmd_to_rsp_code
*
* Description Convert an ATT command op code into the corresponding
* response code assume no error occurs.
*
* Returns response code.
*
******************************************************************************/
uint8_t gatt_cmd_to_rsp_code(uint8_t cmd_code) {
uint8_t rsp_code = 0;
if (cmd_code > 1 && cmd_code != GATT_CMD_WRITE) {
rsp_code = cmd_code + 1;
}
return rsp_code;
}
/** Find next command in queue and sent to server */
bool gatt_cl_send_next_cmd_inq(tGATT_TCB& tcb) {
while (!tcb.cl_cmd_q.empty()) {
tGATT_CMD_Q& cmd = tcb.cl_cmd_q.front();
if (!cmd.to_send || cmd.p_cmd == NULL) return false;
tGATT_STATUS att_ret = attp_send_msg_to_l2cap(tcb, cmd.p_cmd);
if (att_ret != GATT_SUCCESS && att_ret != GATT_CONGESTED) {
LOG(ERROR) << __func__ << ": L2CAP sent error";
tcb.cl_cmd_q.pop();
continue;
}
cmd.to_send = false;
cmd.p_cmd = NULL;
if (cmd.op_code == GATT_CMD_WRITE || cmd.op_code == GATT_SIGN_CMD_WRITE) {
/* dequeue the request if is write command or sign write */
uint8_t rsp_code;
tGATT_CLCB* p_clcb = gatt_cmd_dequeue(tcb, &rsp_code);
/* send command complete callback here */
gatt_end_operation(p_clcb, att_ret, NULL);
/* if no ack needed, keep sending */
if (att_ret == GATT_SUCCESS) continue;
return true;
}
gatt_start_rsp_timer(cmd.p_clcb);
return true;
}
return false;
}
/** This function is called to handle the server response to client */
void gatt_client_handle_server_rsp(tGATT_TCB& tcb, uint8_t op_code,
uint16_t len, uint8_t* p_data) {
if (op_code == GATT_HANDLE_VALUE_IND || op_code == GATT_HANDLE_VALUE_NOTIF) {
if (len >= tcb.payload_size) {
LOG(ERROR) << StringPrintf(
"%s: invalid indicate pkt size: %d, PDU size: %d", __func__, len + 1,
tcb.payload_size);
return;
}
gatt_process_notification(tcb, op_code, len, p_data);
return;
}
uint8_t cmd_code = 0;
tGATT_CLCB* p_clcb = gatt_cmd_dequeue(tcb, &cmd_code);
uint8_t rsp_code = gatt_cmd_to_rsp_code(cmd_code);
if (!p_clcb || (rsp_code != op_code && op_code != GATT_RSP_ERROR)) {
LOG(WARNING) << StringPrintf(
"ATT - Ignore wrong response. Receives (%02x) Request(%02x) Ignored",
op_code, rsp_code);
return;
}
if (!p_clcb->in_use) {
LOG(WARNING) << "ATT - clcb already not in use, ignoring response";
gatt_cl_send_next_cmd_inq(tcb);
return;
}
alarm_cancel(p_clcb->gatt_rsp_timer_ent);
p_clcb->retry_count = 0;
/* the size of the message may not be bigger than the local max PDU size*/
/* The message has to be smaller than the agreed MTU, len does not count
* op_code */
if (len >= tcb.payload_size) {
LOG(ERROR) << StringPrintf(
"%s: invalid response pkt size: %d, PDU size: %d", __func__, len + 1,
tcb.payload_size);
gatt_end_operation(p_clcb, GATT_ERROR, NULL);
} else {
switch (op_code) {
case GATT_RSP_ERROR:
gatt_process_error_rsp(tcb, p_clcb, op_code, len, p_data);
break;
case GATT_RSP_MTU: /* 2 bytes mtu */
gatt_process_mtu_rsp(tcb, p_clcb, len, p_data);
break;
case GATT_RSP_FIND_INFO:
gatt_process_read_info_rsp(tcb, p_clcb, op_code, len, p_data);
break;
case GATT_RSP_READ_BY_TYPE:
case GATT_RSP_READ_BY_GRP_TYPE:
gatt_process_read_by_type_rsp(tcb, p_clcb, op_code, len, p_data);
break;
case GATT_RSP_READ:
case GATT_RSP_READ_BLOB:
case GATT_RSP_READ_MULTI:
gatt_process_read_rsp(tcb, p_clcb, op_code, len, p_data);
break;
case GATT_RSP_FIND_TYPE_VALUE: /* disc service with UUID */
gatt_process_find_type_value_rsp(tcb, p_clcb, len, p_data);
break;
case GATT_RSP_WRITE:
gatt_process_handle_rsp(p_clcb);
break;
case GATT_RSP_PREPARE_WRITE:
gatt_process_prep_write_rsp(tcb, p_clcb, op_code, len, p_data);
break;
case GATT_RSP_EXEC_WRITE:
gatt_end_operation(p_clcb, p_clcb->status, NULL);
break;
default:
LOG(ERROR) << __func__ << ": Unknown opcode = " << std::hex << op_code;
break;
}
}
gatt_cl_send_next_cmd_inq(tcb);
}