btif/src/btif_dm.c

   1 /******************************************************************************
   2  *
   3  *  Copyright (C) 2009-2012 Broadcom Corporation
   4  *
   5  *  Licensed under the Apache License, Version 2.0 (the "License");
   6  *  you may not use this file except in compliance with the License.
   7  *  You may obtain a copy of the License at:
   8  *
   9  *  http://www.apache.org/licenses/LICENSE-2.0
  10  *
  11  *  Unless required by applicable law or agreed to in writing, software
  12  *  distributed under the License is distributed on an "AS IS" BASIS,
  13  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14  *  See the License for the specific language governing permissions and
  15  *  limitations under the License.
  16  *
  17  ******************************************************************************/
  18
  19 /************************************************************************************
  20  *
  21  *  Filename:      btif_dm.c
  22  *
  23  *  Description:   Contains Device Management (DM) related functionality
  24  *
  25  *
  26  ***********************************************************************************/
  27
  28 #define LOG_TAG "bt_btif_dm"
  29
  30 #include "btif_dm.h"
  31
  32 #include <assert.h>
  33 #include <pthread.h>
  34 #include <signal.h>
  35 #include <stdio.h>
  36 #include <stdlib.h>
  37 #include <string.h>
  38 #include <sys/types.h>
  39 #include <time.h>
  40 #include <unistd.h>
  41
  42 #include <hardware/bluetooth.h>
  43
  44 #include "bdaddr.h"
  45 #include "bta_gatt_api.h"
  46 #include "btif_api.h"
  47 #include "btif_config.h"
  48 #include "btif_hh.h"
  49 #include "btif_sdp.h"
  50 #include "btif_storage.h"
  51 #include "btif_util.h"
  52 #include "btu.h"
  53 #include "bt_common.h"
  54 #include "bta_gatt_api.h"
  55 #include "device/include/interop.h"
  56 #include "include/stack_config.h"
  57 #include "osi/include/allocator.h"
  58 #include "osi/include/log.h"
  59 #include "osi/include/metrics.h"
  60 #include "osi/include/properties.h"
  61 #include "stack_config.h"
  62 #include "stack/btm/btm_int.h"
  63
  64 /******************************************************************************
  65 **  Constants & Macros
  66 ******************************************************************************/
  67
  68 #define COD_MASK                            0x07FF
  69
  70 #define COD_UNCLASSIFIED ((0x1F) << 8)
  71 #define COD_HID_KEYBOARD                    0x0540
  72 #define COD_HID_POINTING                    0x0580
  73 #define COD_HID_COMBO                       0x05C0
  74 #define COD_HID_MAJOR                       0x0500
  75 #define COD_HID_MASK                        0x0700
  76 #define COD_AV_HEADSETS                     0x0404
  77 #define COD_AV_HANDSFREE                    0x0408
  78 #define COD_AV_HEADPHONES                   0x0418
  79 #define COD_AV_PORTABLE_AUDIO               0x041C
  80 #define COD_AV_HIFI_AUDIO                   0x0428
  81
  82 #define BTIF_DM_DEFAULT_INQ_MAX_RESULTS     0
  83 #define BTIF_DM_DEFAULT_INQ_MAX_DURATION    10
  84 #define BTIF_DM_MAX_SDP_ATTEMPTS_AFTER_PAIRING 2
  85
  86 #define NUM_TIMEOUT_RETRIES                 5
  87
  88 #define PROPERTY_PRODUCT_MODEL "ro.product.model"
  89 #define DEFAULT_LOCAL_NAME_MAX  31
  90 #if (DEFAULT_LOCAL_NAME_MAX > BTM_MAX_LOC_BD_NAME_LEN)
  91     #error "default btif local name size exceeds stack supported length"
  92 #endif
  93
  94 #if (defined(BTA_HOST_INTERLEAVE_SEARCH) && BTA_HOST_INTERLEAVE_SEARCH == TRUE)
  95 #define BTIF_DM_INTERLEAVE_DURATION_BR_ONE    2
  96 #define BTIF_DM_INTERLEAVE_DURATION_LE_ONE    2
  97 #define BTIF_DM_INTERLEAVE_DURATION_BR_TWO    3
  98 #define BTIF_DM_INTERLEAVE_DURATION_LE_TWO    4
  99 #endif
 100
 101 #define ENCRYPTED_BREDR       2
 102 #define ENCRYPTED_LE          4
 103
 104 typedef struct
 105 {
 106     bt_bond_state_t state;
 107     bt_bdaddr_t static_bdaddr;
 108     BD_ADDR bd_addr;
 109     tBTM_BOND_TYPE bond_type;
 110     UINT8 pin_code_len;
 111     UINT8 is_ssp;
 112     UINT8 auth_req;
 113     UINT8 io_cap;
 114     UINT8 autopair_attempts;
 115     UINT8 timeout_retries;
 116     UINT8 is_local_initiated;
 117     UINT8 sdp_attempts;
 118 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
 119     BOOLEAN is_le_only;
 120     BOOLEAN is_le_nc; /* LE Numeric comparison */
 121     btif_dm_ble_cb_t ble;
 122 #endif
 123 } btif_dm_pairing_cb_t;
 124
 125 typedef struct
 126 {
 127     UINT8       ir[BT_OCTET16_LEN];
 128     UINT8       irk[BT_OCTET16_LEN];
 129     UINT8       dhk[BT_OCTET16_LEN];
 130 }btif_dm_local_key_id_t;
 131
 132 typedef struct
 133 {
 134     BOOLEAN                 is_er_rcvd;
 135     UINT8                   er[BT_OCTET16_LEN];
 136     BOOLEAN                 is_id_keys_rcvd;
 137     btif_dm_local_key_id_t  id_keys;  /* ID kyes */
 138
 139 }btif_dm_local_key_cb_t;
 140
 141 typedef struct
 142 {
 143     BD_ADDR bd_addr;
 144     BD_NAME bd_name;
 145 } btif_dm_remote_name_t;
 146
 147 /* this structure holds optional OOB data for remote device */
 148 typedef struct
 149 {
 150     BD_ADDR  bdaddr;    /* peer bdaddr */
 151     bt_out_of_band_data_t oob_data;
 152 } btif_dm_oob_cb_t;
 153
 154 typedef struct
 155 {
 156     bt_bdaddr_t  bdaddr;
 157     UINT8        transport; /* 0=Unknown, 1=BR/EDR, 2=LE */
 158 } btif_dm_create_bond_cb_t;
 159
 160 typedef struct
 161 {
 162     uint8_t  status;
 163     uint8_t  ctrl_state;
 164     uint64_t tx_time;
 165     uint64_t rx_time;
 166     uint64_t idle_time;
 167     uint64_t energy_used;
 168 } btif_activity_energy_info_cb_t;
 169
 170 typedef struct
 171 {
 172     unsigned int   manufact_id;
 173 }skip_sdp_entry_t;
 174
 175 typedef enum
 176 {
 177     BTIF_DM_FUNC_CREATE_BOND,
 178     BTIF_DM_FUNC_CANCEL_BOND,
 179     BTIF_DM_FUNC_REMOVE_BOND,
 180     BTIF_DM_FUNC_BOND_STATE_CHANGED,
 181 } bt_bond_function_t;
 182
 183 typedef struct
 184 {
 185     bt_bdaddr_t bd_addr;
 186     bt_bond_function_t function;
 187     bt_bond_state_t state;
 188     struct timespec timestamp;
 189 } btif_bond_event_t;
 190
 191 #define BTA_SERVICE_ID_TO_SERVICE_MASK(id)       (1 << (id))
 192
 193 #define UUID_HUMAN_INTERFACE_DEVICE "00001124-0000-1000-8000-00805f9b34fb"
 194
 195 #define MAX_BTIF_BOND_EVENT_ENTRIES 15
 196
 197 static skip_sdp_entry_t sdp_blacklist[] = {{76}}; //Apple Mouse and Keyboard
 198
 199 /* This flag will be true if HCI_Inquiry is in progress */
 200 static BOOLEAN btif_dm_inquiry_in_progress = FALSE;
 201
 202 /************************************************************************************
 203 **  Static variables
 204 ************************************************************************************/
 205 static char btif_default_local_name[DEFAULT_LOCAL_NAME_MAX+1] = {'\0'};
 206 static uid_set_t* uid_set = NULL;
 207
 208 /* A circular array to keep track of the most recent bond events */
 209 static btif_bond_event_t btif_dm_bond_events[MAX_BTIF_BOND_EVENT_ENTRIES + 1];
 210
 211 static pthread_mutex_t bond_event_lock;
 212
 213 /* |btif_num_bond_events| keeps track of the total number of events and can be
 214    greater than |MAX_BTIF_BOND_EVENT_ENTRIES| */
 215 static size_t btif_num_bond_events = 0;
 216 static size_t btif_events_start_index = 0;
 217 static size_t btif_events_end_index = 0;
 218
 219 /******************************************************************************
 220 **  Static functions
 221 ******************************************************************************/
 222 static btif_dm_pairing_cb_t pairing_cb;
 223 static btif_dm_oob_cb_t     oob_cb;
 224 static void btif_dm_generic_evt(UINT16 event, char* p_param);
 225 static void btif_dm_cb_create_bond(bt_bdaddr_t *bd_addr, tBTA_TRANSPORT transport);
 226 static void btif_dm_cb_hid_remote_name(tBTM_REMOTE_DEV_NAME *p_remote_name);
 227 static void btif_update_remote_properties(BD_ADDR bd_addr, BD_NAME bd_name,
 228                                           DEV_CLASS dev_class, tBT_DEVICE_TYPE dev_type);
 229 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
 230 static btif_dm_local_key_cb_t ble_local_key_cb;
 231 static void btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF *p_ssp_key_notif);
 232 static void btif_dm_ble_auth_cmpl_evt (tBTA_DM_AUTH_CMPL *p_auth_cmpl);
 233 static void btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ *p_pin_req);
 234 static void btif_dm_ble_key_nc_req_evt(tBTA_DM_SP_KEY_NOTIF *p_notif_req) ;
 235 static void btif_dm_ble_oob_req_evt(tBTA_DM_SP_RMT_OOB *req_oob_type);
 236 #endif
 237
 238 static void bte_scan_filt_param_cfg_evt(UINT8 action_type,
 239                                            tBTA_DM_BLE_PF_AVBL_SPACE avbl_space,
 240                                            tBTA_DM_BLE_REF_VALUE ref_value,
 241                                            tBTA_STATUS status);
 242
 243 static char* btif_get_default_local_name();
 244
 245 static void btif_stats_add_bond_event(const bt_bdaddr_t *bd_addr,
 246                                       bt_bond_function_t function,
 247                                       bt_bond_state_t state);
 248
 249 /******************************************************************************
 250 **  Externs
 251 ******************************************************************************/
 252 extern UINT16 bta_service_id_to_uuid_lkup_tbl [BTA_MAX_SERVICE_ID];
 253 extern bt_status_t btif_hf_execute_service(BOOLEAN b_enable);
 254 extern bt_status_t btif_av_execute_service(BOOLEAN b_enable);
 255 extern bt_status_t btif_av_sink_execute_service(BOOLEAN b_enable);
 256 extern bt_status_t btif_hh_execute_service(BOOLEAN b_enable);
 257 extern bt_status_t btif_hf_client_execute_service(BOOLEAN b_enable);
 258 extern bt_status_t btif_sdp_execute_service(BOOLEAN b_enable);
 259 extern int btif_hh_connect(bt_bdaddr_t *bd_addr);
 260 extern void bta_gatt_convert_uuid16_to_uuid128(UINT8 uuid_128[LEN_UUID_128], UINT16 uuid_16);
 261
 262 /******************************************************************************
 263 **  Functions
 264 ******************************************************************************/
 265
 266 static bool is_empty_128bit(uint8_t *data)
 267 {
 268     static const uint8_t zero[16] = { 0 };
 269     return !memcmp(zero, data, sizeof(zero));
 270 }
 271
 272 static void btif_dm_data_copy(uint16_t event, char *dst, char *src)
 273 {
 274     tBTA_DM_SEC *dst_dm_sec = (tBTA_DM_SEC*)dst;
 275     tBTA_DM_SEC *src_dm_sec = (tBTA_DM_SEC*)src;
 276
 277     if (!src_dm_sec)
 278         return;
 279
 280     assert(dst_dm_sec);
 281     maybe_non_aligned_memcpy(dst_dm_sec, src_dm_sec, sizeof(*src_dm_sec));
 282
 283     if (event == BTA_DM_BLE_KEY_EVT)
 284     {
 285         dst_dm_sec->ble_key.p_key_value = osi_malloc(sizeof(tBTM_LE_KEY_VALUE));
 286         assert(src_dm_sec->ble_key.p_key_value);
 287         memcpy(dst_dm_sec->ble_key.p_key_value, src_dm_sec->ble_key.p_key_value, sizeof(tBTM_LE_KEY_VALUE));
 288     }
 289 }
 290
 291 static void btif_dm_data_free(uint16_t event, tBTA_DM_SEC *dm_sec)
 292 {
 293     if (event == BTA_DM_BLE_KEY_EVT)
 294         osi_free_and_reset((void **)&dm_sec->ble_key.p_key_value);
 295 }
 296
 297 void btif_dm_init(uid_set_t* set)
 298 {
 299     uid_set = set;
 300     pthread_mutex_init(&bond_event_lock, NULL);
 301 }
 302
 303 void btif_dm_cleanup(void)
 304 {
 305     if (uid_set) {
 306         uid_set_destroy(uid_set);
 307         uid_set = NULL;
 308     }
 309     pthread_mutex_destroy(&bond_event_lock);
 310 }
 311
 312 bt_status_t btif_in_execute_service_request(tBTA_SERVICE_ID service_id,
 313                                                 BOOLEAN b_enable)
 314 {
 315     BTIF_TRACE_DEBUG("%s service_id: %d", __FUNCTION__, service_id);
 316     /* Check the service_ID and invoke the profile's BT state changed API */
 317     switch (service_id)
 318     {
 319          case BTA_HFP_SERVICE_ID:
 320          case BTA_HSP_SERVICE_ID:
 321          {
 322               btif_hf_execute_service(b_enable);
 323          }break;
 324          case BTA_A2DP_SOURCE_SERVICE_ID:
 325          {
 326               btif_av_execute_service(b_enable);
 327          }break;
 328          case BTA_A2DP_SINK_SERVICE_ID:
 329          {
 330             btif_av_sink_execute_service(b_enable);
 331          }break;
 332          case BTA_HID_SERVICE_ID:
 333          {
 334               btif_hh_execute_service(b_enable);
 335          }break;
 336          case BTA_HFP_HS_SERVICE_ID:
 337          {
 338              btif_hf_client_execute_service(b_enable);
 339          }break;
 340          case BTA_SDP_SERVICE_ID:
 341          {
 342              btif_sdp_execute_service(b_enable);
 343          }break;
 344          default:
 345            BTIF_TRACE_ERROR("%s: Unknown service %d being %s",
 346                             __func__, service_id,
 347                             (b_enable) ? "enabled" : "disabled");
 348               return BT_STATUS_FAIL;
 349     }
 350     return BT_STATUS_SUCCESS;
 351 }
 352
 353 /*******************************************************************************
 354 **
 355 ** Function         check_eir_remote_name
 356 **
 357 ** Description      Check if remote name is in the EIR data
 358 **
 359 ** Returns          TRUE if remote name found
 360 **                  Populate p_remote_name, if provided and remote name found
 361 **
 362 *******************************************************************************/
 363 static BOOLEAN check_eir_remote_name(tBTA_DM_SEARCH *p_search_data,
 364                             UINT8 *p_remote_name, UINT8 *p_remote_name_len)
 365 {
 366     UINT8 *p_eir_remote_name = NULL;
 367     UINT8 remote_name_len = 0;
 368
 369     /* Check EIR for remote name and services */
 370     if (p_search_data->inq_res.p_eir)
 371     {
 372         p_eir_remote_name = BTM_CheckEirData(p_search_data->inq_res.p_eir,
 373                 BTM_EIR_COMPLETE_LOCAL_NAME_TYPE, &remote_name_len);
 374         if (!p_eir_remote_name)
 375         {
 376             p_eir_remote_name = BTM_CheckEirData(p_search_data->inq_res.p_eir,
 377                     BTM_EIR_SHORTENED_LOCAL_NAME_TYPE, &remote_name_len);
 378         }
 379
 380         if (p_eir_remote_name)
 381         {
 382             if (remote_name_len > BD_NAME_LEN)
 383                 remote_name_len = BD_NAME_LEN;
 384
 385             if (p_remote_name && p_remote_name_len)
 386             {
 387                 memcpy(p_remote_name, p_eir_remote_name, remote_name_len);
 388                 *(p_remote_name + remote_name_len) = 0;
 389                 *p_remote_name_len = remote_name_len;
 390             }
 391
 392             return TRUE;
 393         }
 394     }
 395
 396     return FALSE;
 397
 398 }
 399
 400 /*******************************************************************************
 401 **
 402 ** Function         check_cached_remote_name
 403 **
 404 ** Description      Check if remote name is in the NVRAM cache
 405 **
 406 ** Returns          TRUE if remote name found
 407 **                  Populate p_remote_name, if provided and remote name found
 408 **
 409 *******************************************************************************/
 410 static BOOLEAN check_cached_remote_name(tBTA_DM_SEARCH *p_search_data,
 411                                 UINT8 *p_remote_name, UINT8 *p_remote_name_len)
 412 {
 413     bt_bdname_t bdname;
 414     bt_bdaddr_t remote_bdaddr;
 415     bt_property_t prop_name;
 416
 417     /* check if we already have it in our btif_storage cache */
 418     bdcpy(remote_bdaddr.address, p_search_data->inq_res.bd_addr);
 419     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_BDNAME,
 420                                sizeof(bt_bdname_t), &bdname);
 421     if (btif_storage_get_remote_device_property(
 422         &remote_bdaddr, &prop_name) == BT_STATUS_SUCCESS)
 423     {
 424         if (p_remote_name && p_remote_name_len)
 425         {
 426             strcpy((char *)p_remote_name, (char *)bdname.name);
 427             *p_remote_name_len = strlen((char *)p_remote_name);
 428         }
 429         return TRUE;
 430     }
 431
 432     return FALSE;
 433 }
 434
 435 static uint32_t get_cod(const bt_bdaddr_t *remote_bdaddr) {
 436     uint32_t    remote_cod;
 437     bt_property_t prop_name;
 438
 439     /* check if we already have it in our btif_storage cache */
 440     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_CLASS_OF_DEVICE,
 441                                sizeof(uint32_t), &remote_cod);
 442     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr, &prop_name) == BT_STATUS_SUCCESS)
 443     {
 444         LOG_INFO(LOG_TAG, "%s remote_cod = 0x%08x", __func__, remote_cod);
 445         return remote_cod & COD_MASK;
 446     }
 447
 448     return 0;
 449 }
 450
 451 BOOLEAN check_cod(const bt_bdaddr_t *remote_bdaddr, uint32_t cod)
 452 {
 453     return get_cod(remote_bdaddr) == cod;
 454 }
 455
 456 BOOLEAN check_cod_hid(const bt_bdaddr_t *remote_bdaddr)
 457 {
 458     return (get_cod(remote_bdaddr) & COD_HID_MASK) == COD_HID_MAJOR;
 459 }
 460
 461 BOOLEAN check_hid_le(const bt_bdaddr_t *remote_bdaddr)
 462 {
 463     uint32_t    remote_dev_type;
 464     bt_property_t prop_name;
 465
 466     /* check if we already have it in our btif_storage cache */
 467     BTIF_STORAGE_FILL_PROPERTY(&prop_name,BT_PROPERTY_TYPE_OF_DEVICE,
 468                                sizeof(uint32_t), &remote_dev_type);
 469     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr,
 470                                 &prop_name) == BT_STATUS_SUCCESS)
 471     {
 472         if (remote_dev_type == BT_DEVICE_DEVTYPE_BLE)
 473         {
 474             bdstr_t bdstr;
 475             bdaddr_to_string(remote_bdaddr, bdstr, sizeof(bdstr));
 476             if(btif_config_exist(bdstr, "HidAppId"))
 477                 return TRUE;
 478         }
 479     }
 480     return FALSE;
 481 }
 482
 483 /*****************************************************************************
 484 **
 485 ** Function        check_sdp_bl
 486 **
 487 ** Description     Checks if a given device is blacklisted to skip sdp
 488 **
 489 ** Parameters     skip_sdp_entry
 490 **
 491 ** Returns         TRUE if the device is present in blacklist, else FALSE
 492 **
 493 *******************************************************************************/
 494 BOOLEAN check_sdp_bl(const bt_bdaddr_t *remote_bdaddr)
 495 {
 496     UINT16 manufacturer = 0;
 497     UINT8 lmp_ver = 0;
 498     UINT16 lmp_subver = 0;
 499     bt_property_t prop_name;
 500     bt_remote_version_t info;
 501
 502     if (remote_bdaddr == NULL)
 503         return FALSE;
 504
 505 /* fetch additional info about remote device used in iop query */
 506     BTM_ReadRemoteVersion(*(BD_ADDR*)remote_bdaddr, &lmp_ver,
 507                     &manufacturer, &lmp_subver);
 508
 509  /* if not available yet, try fetching from config database */
 510     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_REMOTE_VERSION_INFO,
 511                             sizeof(bt_remote_version_t), &info);
 512
 513     if (btif_storage_get_remote_device_property((bt_bdaddr_t *)remote_bdaddr,
 514                                               &prop_name) != BT_STATUS_SUCCESS)
 515     {
 516
 517         return FALSE;
 518     }
 519     manufacturer = info.manufacturer;
 520
 521     for (unsigned int i = 0; i < ARRAY_SIZE(sdp_blacklist); i++)
 522     {
 523         if (manufacturer == sdp_blacklist[i].manufact_id)
 524             return TRUE;
 525     }
 526     return FALSE;
 527 }
 528
 529 static void bond_state_changed(bt_status_t status, bt_bdaddr_t *bd_addr, bt_bond_state_t state)
 530 {
 531
 532     btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_BOND_STATE_CHANGED, state);
 533
 534     // Send bonding state only once - based on outgoing/incoming we may receive duplicates
 535     if ((pairing_cb.state == state) && (state == BT_BOND_STATE_BONDING))
 536     {
 537         // Cross key pairing so send callback for static address
 538         if (!bdaddr_is_empty(&pairing_cb.static_bdaddr))
 539         {
 540             HAL_CBACK(bt_hal_cbacks, bond_state_changed_cb, status, bd_addr, state);
 541         }
 542         return;
 543     }
 544
 545     if (pairing_cb.bond_type == BOND_TYPE_TEMPORARY)
 546         state = BT_BOND_STATE_NONE;
 547
 548     BTIF_TRACE_DEBUG("%s: state=%d, prev_state=%d, sdp_attempts = %d", __func__,
 549                       state, pairing_cb.state, pairing_cb.sdp_attempts);
 550
 551     HAL_CBACK(bt_hal_cbacks, bond_state_changed_cb, status, bd_addr, state);
 552
 553     if (state == BT_BOND_STATE_BONDING)
 554     {
 555         pairing_cb.state = state;
 556         bdcpy(pairing_cb.bd_addr, bd_addr->address);
 557     } else {
 558         if (!pairing_cb.sdp_attempts)
 559             memset(&pairing_cb, 0, sizeof(pairing_cb));
 560         else
 561             BTIF_TRACE_DEBUG("%s: BR-EDR service discovery active", __func__);
 562     }
 563 }
 564
 565 /* store remote version in bt config to always have access
 566    to it post pairing*/
 567 static void btif_update_remote_version_property(bt_bdaddr_t *p_bd)
 568 {
 569     bt_property_t property;
 570     UINT8 lmp_ver = 0;
 571     UINT16 lmp_subver = 0;
 572     UINT16 mfct_set = 0;
 573     tBTM_STATUS btm_status;
 574     bt_remote_version_t info;
 575     bt_status_t status;
 576     bdstr_t bdstr;
 577
 578     btm_status = BTM_ReadRemoteVersion(*(BD_ADDR*)p_bd, &lmp_ver,
 579                           &mfct_set, &lmp_subver);
 580
 581     LOG_DEBUG(LOG_TAG, "remote version info [%s]: %x, %x, %x", bdaddr_to_string(p_bd, bdstr, sizeof(bdstr)),
 582                lmp_ver, mfct_set, lmp_subver);
 583
 584     if (btm_status == BTM_SUCCESS)
 585     {
 586         // Always update cache to ensure we have availability whenever BTM API is not populated
 587         info.manufacturer = mfct_set;
 588         info.sub_ver = lmp_subver;
 589         info.version = lmp_ver;
 590         BTIF_STORAGE_FILL_PROPERTY(&property,
 591                             BT_PROPERTY_REMOTE_VERSION_INFO, sizeof(bt_remote_version_t),
 592                             &info);
 593         status = btif_storage_set_remote_device_property(p_bd, &property);
 594         ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote version", status);
 595     }
 596 }
 597
 598 static void btif_update_remote_properties(BD_ADDR bd_addr, BD_NAME bd_name,
 599                                           DEV_CLASS dev_class, tBT_DEVICE_TYPE device_type)
 600 {
 601     int num_properties = 0;
 602     bt_property_t properties[3];
 603     bt_bdaddr_t bdaddr;
 604     bt_status_t status;
 605     UINT32 cod;
 606     bt_device_type_t dev_type;
 607
 608     memset(properties, 0, sizeof(properties));
 609     bdcpy(bdaddr.address, bd_addr);
 610
 611     /* remote name */
 612     if (strlen((const char *) bd_name))
 613     {
 614         BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
 615                             BT_PROPERTY_BDNAME, strlen((char *)bd_name), bd_name);
 616         status = btif_storage_set_remote_device_property(&bdaddr, &properties[num_properties]);
 617         ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device name", status);
 618         num_properties++;
 619     }
 620
 621     /* class of device */
 622     cod = devclass2uint(dev_class);
 623     BTIF_TRACE_DEBUG("%s cod is 0x%06x", __func__, cod);
 624     if ( cod == 0) {
 625        /* Try to retrieve cod from storage */
 626         BTIF_TRACE_DEBUG("%s cod is 0, checking cod from storage", __func__);
 627         BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
 628             BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod);
 629         status = btif_storage_get_remote_device_property(&bdaddr, &properties[num_properties]);
 630         BTIF_TRACE_DEBUG("%s cod retrieved from storage is 0x%06x", __func__, cod);
 631         if ( cod == 0) {
 632             BTIF_TRACE_DEBUG("%s cod is again 0, set as unclassified", __func__);
 633             cod = COD_UNCLASSIFIED;
 634         }
 635     }
 636
 637     BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
 638                         BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod);
 639     status = btif_storage_set_remote_device_property(&bdaddr, &properties[num_properties]);
 640     ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device class", status);
 641     num_properties++;
 642
 643     /* device type */
 644     bt_property_t prop_name;
 645     uint8_t remote_dev_type;
 646     BTIF_STORAGE_FILL_PROPERTY(&prop_name, BT_PROPERTY_TYPE_OF_DEVICE,
 647                                 sizeof(uint8_t), &remote_dev_type);
 648     if (btif_storage_get_remote_device_property(&bdaddr, &prop_name) == BT_STATUS_SUCCESS)
 649          dev_type = remote_dev_type | device_type;
 650     else
 651          dev_type = device_type;
 652
 653     BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
 654                         BT_PROPERTY_TYPE_OF_DEVICE, sizeof(dev_type), &dev_type);
 655     status = btif_storage_set_remote_device_property(&bdaddr, &properties[num_properties]);
 656     ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device type", status);
 657     num_properties++;
 658
 659     HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
 660                      status, &bdaddr, num_properties, properties);
 661 }
 662
 663 /*******************************************************************************
 664 **
 665 ** Function         btif_dm_cb_hid_remote_name
 666 **
 667 ** Description      Remote name callback for HID device. Called in btif context
 668 **                  Special handling for HID devices
 669 **
 670 ** Returns          void
 671 **
 672 *******************************************************************************/
 673 static void btif_dm_cb_hid_remote_name(tBTM_REMOTE_DEV_NAME *p_remote_name)
 674 {
 675     BTIF_TRACE_DEBUG("%s: status=%d pairing_cb.state=%d", __FUNCTION__, p_remote_name->status, pairing_cb.state);
 676     if (pairing_cb.state == BT_BOND_STATE_BONDING)
 677     {
 678         bt_bdaddr_t remote_bd;
 679
 680         bdcpy(remote_bd.address, pairing_cb.bd_addr);
 681
 682         if (p_remote_name->status == BTM_SUCCESS)
 683         {
 684             bond_state_changed(BT_STATUS_SUCCESS, &remote_bd, BT_BOND_STATE_BONDED);
 685         }
 686         else
 687             bond_state_changed(BT_STATUS_FAIL, &remote_bd, BT_BOND_STATE_NONE);
 688     }
 689 }
 690
 691 /*******************************************************************************
 692 **
 693 ** Function         btif_dm_cb_create_bond
 694 **
 695 ** Description      Create bond initiated from the BTIF thread context
 696 **                  Special handling for HID devices
 697 **
 698 ** Returns          void
 699 **
 700 *******************************************************************************/
 701 static void btif_dm_cb_create_bond(bt_bdaddr_t *bd_addr, tBTA_TRANSPORT transport)
 702 {
 703     BOOLEAN is_hid = check_cod(bd_addr, COD_HID_POINTING);
 704     bond_state_changed(BT_STATUS_SUCCESS, bd_addr, BT_BOND_STATE_BONDING);
 705
 706 #if BLE_INCLUDED == TRUE
 707     int device_type;
 708     int addr_type;
 709     bdstr_t bdstr;
 710     bdaddr_to_string(bd_addr, bdstr, sizeof(bdstr));
 711     if (transport == BT_TRANSPORT_LE)
 712     {
 713         if (!btif_config_get_int((char const *)&bdstr,"DevType", &device_type))
 714         {
 715             btif_config_set_int(bdstr, "DevType", BT_DEVICE_TYPE_BLE);
 716         }
 717         if (btif_storage_get_remote_addr_type(bd_addr, &addr_type) != BT_STATUS_SUCCESS)
 718         {
 719             btif_storage_set_remote_addr_type(bd_addr, BLE_ADDR_PUBLIC);
 720         }
 721     }
 722     if((btif_config_get_int((char const *)&bdstr,"DevType", &device_type) &&
 723        (btif_storage_get_remote_addr_type(bd_addr, &addr_type) == BT_STATUS_SUCCESS) &&
 724        (device_type & BT_DEVICE_TYPE_BLE) == BT_DEVICE_TYPE_BLE) || (transport == BT_TRANSPORT_LE))
 725     {
 726         BTA_DmAddBleDevice(bd_addr->address, addr_type, device_type);
 727     }
 728 #endif
 729
 730 #if BLE_INCLUDED == TRUE
 731     if(is_hid && (device_type & BT_DEVICE_TYPE_BLE) == 0)
 732 #else
 733     if(is_hid)
 734 #endif
 735     {
 736         int status;
 737         status = btif_hh_connect(bd_addr);
 738         if(status != BT_STATUS_SUCCESS)
 739             bond_state_changed(status, bd_addr, BT_BOND_STATE_NONE);
 740     }
 741     else
 742     {
 743         BTA_DmBondByTransport((UINT8 *)bd_addr->address, transport);
 744     }
 745     /*  Track  originator of bond creation  */
 746     pairing_cb.is_local_initiated = TRUE;
 747
 748 }
 749
 750 /*******************************************************************************
 751 **
 752 ** Function         btif_dm_cb_remove_bond
 753 **
 754 ** Description      remove bond initiated from the BTIF thread context
 755 **                  Special handling for HID devices
 756 **
 757 ** Returns          void
 758 **
 759 *******************************************************************************/
 760 void btif_dm_cb_remove_bond(bt_bdaddr_t *bd_addr)
 761 {
 762      /*special handling for HID devices */
 763      /*  VUP needs to be sent if its a HID Device. The HID HOST module will check if there
 764      is a valid hid connection with this bd_addr. If yes VUP will be issued.*/
 765 #if (defined(BTA_HH_INCLUDED) && (BTA_HH_INCLUDED == TRUE))
 766     if (btif_hh_virtual_unplug(bd_addr) != BT_STATUS_SUCCESS)
 767 #endif
 768     {
 769          BTIF_TRACE_DEBUG("%s: Removing HH device", __func__);
 770          BTA_DmRemoveDevice((UINT8 *)bd_addr->address);
 771     }
 772 }
 773
 774 /*******************************************************************************
 775 **
 776 ** Function         btif_dm_get_connection_state
 777 **
 778 ** Description      Returns whether the remote device is currently connected
 779 **                  and whether encryption is active for the connection
 780 **
 781 ** Returns          0 if not connected; 1 if connected and > 1 if connection is
 782 **                  encrypted
 783 **
 784 *******************************************************************************/
 785 uint16_t btif_dm_get_connection_state(const bt_bdaddr_t *bd_addr)
 786 {
 787     uint8_t *bda = (uint8_t*)bd_addr->address;
 788     uint16_t rc = BTA_DmGetConnectionState(bda);
 789
 790     if (rc != 0)
 791     {
 792         uint8_t flags = 0;
 793
 794         BTM_GetSecurityFlagsByTransport(bda, &flags, BT_TRANSPORT_BR_EDR);
 795         BTIF_TRACE_DEBUG("%s: security flags (BR/EDR)=0x%02x", __FUNCTION__, flags);
 796         if (flags & BTM_SEC_FLAG_ENCRYPTED)
 797             rc |= ENCRYPTED_BREDR;
 798
 799         BTM_GetSecurityFlagsByTransport(bda, &flags, BT_TRANSPORT_LE);
 800         BTIF_TRACE_DEBUG("%s: security flags (LE)=0x%02x", __FUNCTION__, flags);
 801         if (flags & BTM_SEC_FLAG_ENCRYPTED)
 802             rc |= ENCRYPTED_LE;
 803     }
 804
 805     return rc;
 806 }
 807
 808 /*******************************************************************************
 809 **
 810 ** Function         search_devices_copy_cb
 811 **
 812 ** Description      Deep copy callback for search devices event
 813 **
 814 ** Returns          void
 815 **
 816 *******************************************************************************/
 817 static void search_devices_copy_cb(UINT16 event, char *p_dest, char *p_src)
 818 {
 819     tBTA_DM_SEARCH *p_dest_data =  (tBTA_DM_SEARCH *) p_dest;
 820     tBTA_DM_SEARCH *p_src_data =  (tBTA_DM_SEARCH *) p_src;
 821
 822     if (!p_src)
 823         return;
 824
 825     BTIF_TRACE_DEBUG("%s: event=%s", __FUNCTION__, dump_dm_search_event(event));
 826     maybe_non_aligned_memcpy(p_dest_data, p_src_data, sizeof(*p_src_data));
 827     switch (event)
 828     {
 829         case BTA_DM_INQ_RES_EVT:
 830         {
 831             if (p_src_data->inq_res.p_eir)
 832             {
 833                 p_dest_data->inq_res.p_eir = (UINT8 *)(p_dest + sizeof(tBTA_DM_SEARCH));
 834                 memcpy(p_dest_data->inq_res.p_eir, p_src_data->inq_res.p_eir, HCI_EXT_INQ_RESPONSE_LEN);
 835             }
 836         }
 837         break;
 838
 839         case BTA_DM_DISC_RES_EVT:
 840         {
 841             if (p_src_data->disc_res.raw_data_size && p_src_data->disc_res.p_raw_data)
 842             {
 843                 p_dest_data->disc_res.p_raw_data = (UINT8 *)(p_dest + sizeof(tBTA_DM_SEARCH));
 844                 memcpy(p_dest_data->disc_res.p_raw_data,
 845                     p_src_data->disc_res.p_raw_data, p_src_data->disc_res.raw_data_size);
 846             }
 847         }
 848         break;
 849     }
 850 }
 851
 852 static void search_services_copy_cb(UINT16 event, char *p_dest, char *p_src)
 853 {
 854     tBTA_DM_SEARCH *p_dest_data =  (tBTA_DM_SEARCH *) p_dest;
 855     tBTA_DM_SEARCH *p_src_data =  (tBTA_DM_SEARCH *) p_src;
 856
 857     if (!p_src)
 858         return;
 859     maybe_non_aligned_memcpy(p_dest_data, p_src_data, sizeof(*p_src_data));
 860     switch (event)
 861     {
 862          case BTA_DM_DISC_RES_EVT:
 863          {
 864               if (p_src_data->disc_res.result == BTA_SUCCESS)
 865               {
 866                   if (p_src_data->disc_res.num_uuids > 0)
 867                   {
 868                        p_dest_data->disc_res.p_uuid_list =
 869                                                         (UINT8*)(p_dest + sizeof(tBTA_DM_SEARCH));
 870                        memcpy(p_dest_data->disc_res.p_uuid_list, p_src_data->disc_res.p_uuid_list,
 871                               p_src_data->disc_res.num_uuids*MAX_UUID_SIZE);
 872                        osi_free_and_reset((void **)&p_src_data->disc_res.p_uuid_list);
 873                   }
 874                   osi_free_and_reset((void **)&p_src_data->disc_res.p_raw_data);
 875               }
 876          } break;
 877     }
 878 }
 879 /******************************************************************************
 880 **
 881 **  BTIF DM callback events
 882 **
 883 *****************************************************************************/
 884
 885 /*******************************************************************************
 886 **
 887 ** Function         btif_dm_pin_req_evt
 888 **
 889 ** Description      Executes pin request event in btif context
 890 **
 891 ** Returns          void
 892 **
 893 *******************************************************************************/
 894 static void btif_dm_pin_req_evt(tBTA_DM_PIN_REQ *p_pin_req)
 895 {
 896     bt_bdaddr_t bd_addr;
 897     bt_bdname_t bd_name;
 898     UINT32 cod;
 899     bt_pin_code_t pin_code;
 900     int dev_type;
 901
 902     /* Remote properties update */
 903     if (!btif_get_device_type(p_pin_req->bd_addr, &dev_type))
 904     {
 905         dev_type = BT_DEVICE_TYPE_BREDR;
 906     }
 907     btif_update_remote_properties(p_pin_req->bd_addr, p_pin_req->bd_name,
 908                                   p_pin_req->dev_class, (tBT_DEVICE_TYPE) dev_type);
 909
 910     bdcpy(bd_addr.address, p_pin_req->bd_addr);
 911     memcpy(bd_name.name, p_pin_req->bd_name, BD_NAME_LEN);
 912
 913     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
 914
 915     cod = devclass2uint(p_pin_req->dev_class);
 916
 917     if (cod == 0) {
 918         BTIF_TRACE_DEBUG("%s cod is 0, set as unclassified", __func__);
 919         cod = COD_UNCLASSIFIED;
 920     }
 921
 922     /* check for auto pair possiblity only if bond was initiated by local device */
 923     if (pairing_cb.is_local_initiated && (p_pin_req->min_16_digit == FALSE))
 924     {
 925         if (check_cod(&bd_addr, COD_AV_HEADSETS) ||
 926             check_cod(&bd_addr, COD_AV_HEADPHONES) ||
 927             check_cod(&bd_addr, COD_AV_PORTABLE_AUDIO) ||
 928             check_cod(&bd_addr, COD_AV_HIFI_AUDIO) ||
 929             check_cod(&bd_addr, COD_HID_POINTING))
 930         {
 931             /*  Check if this device can be auto paired  */
 932             if (!interop_match_addr(INTEROP_DISABLE_AUTO_PAIRING, &bd_addr) &&
 933                 !interop_match_name(INTEROP_DISABLE_AUTO_PAIRING, (const char *)bd_name.name) &&
 934                 (pairing_cb.autopair_attempts == 0))
 935             {
 936                 BTIF_TRACE_DEBUG("%s() Attempting auto pair", __FUNCTION__);
 937                 pin_code.pin[0] = 0x30;
 938                 pin_code.pin[1] = 0x30;
 939                 pin_code.pin[2] = 0x30;
 940                 pin_code.pin[3] = 0x30;
 941
 942                 pairing_cb.autopair_attempts++;
 943                 BTA_DmPinReply( (UINT8*)bd_addr.address, TRUE, 4, pin_code.pin);
 944                 return;
 945             }
 946         }
 947         else if (check_cod(&bd_addr, COD_HID_KEYBOARD) ||
 948                  check_cod(&bd_addr, COD_HID_COMBO))
 949         {
 950             if ((interop_match_addr(INTEROP_KEYBOARD_REQUIRES_FIXED_PIN, &bd_addr) == TRUE) &&
 951                 (pairing_cb.autopair_attempts == 0))
 952             {
 953                 BTIF_TRACE_DEBUG("%s() Attempting auto pair", __FUNCTION__);
 954                 pin_code.pin[0] = 0x30;
 955                 pin_code.pin[1] = 0x30;
 956                 pin_code.pin[2] = 0x30;
 957                 pin_code.pin[3] = 0x30;
 958
 959                 pairing_cb.autopair_attempts++;
 960                 BTA_DmPinReply( (UINT8*)bd_addr.address, TRUE, 4, pin_code.pin);
 961                 return;
 962             }
 963         }
 964     }
 965     HAL_CBACK(bt_hal_cbacks, pin_request_cb,
 966                      &bd_addr, &bd_name, cod, p_pin_req->min_16_digit);
 967 }
 968
 969 /*******************************************************************************
 970 **
 971 ** Function         btif_dm_ssp_cfm_req_evt
 972 **
 973 ** Description      Executes SSP confirm request event in btif context
 974 **
 975 ** Returns          void
 976 **
 977 *******************************************************************************/
 978 static void btif_dm_ssp_cfm_req_evt(tBTA_DM_SP_CFM_REQ *p_ssp_cfm_req)
 979 {
 980     bt_bdaddr_t bd_addr;
 981     bt_bdname_t bd_name;
 982     UINT32 cod;
 983     BOOLEAN is_incoming = !(pairing_cb.state == BT_BOND_STATE_BONDING);
 984     int dev_type;
 985
 986     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
 987
 988     /* Remote properties update */
 989     if (!btif_get_device_type(p_ssp_cfm_req->bd_addr, &dev_type))
 990     {
 991         dev_type = BT_DEVICE_TYPE_BREDR;
 992     }
 993     btif_update_remote_properties(p_ssp_cfm_req->bd_addr, p_ssp_cfm_req->bd_name,
 994                                   p_ssp_cfm_req->dev_class, (tBT_DEVICE_TYPE) dev_type);
 995
 996     bdcpy(bd_addr.address, p_ssp_cfm_req->bd_addr);
 997     memcpy(bd_name.name, p_ssp_cfm_req->bd_name, BD_NAME_LEN);
 998
 999     /* Set the pairing_cb based on the local & remote authentication requirements */
1000     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
1001
1002     /* if just_works and bonding bit is not set treat this as temporary */
1003     if (p_ssp_cfm_req->just_works && !(p_ssp_cfm_req->loc_auth_req & BTM_AUTH_BONDS) &&
1004         !(p_ssp_cfm_req->rmt_auth_req & BTM_AUTH_BONDS) &&
1005         !(check_cod((bt_bdaddr_t*)&p_ssp_cfm_req->bd_addr, COD_HID_POINTING)))
1006         pairing_cb.bond_type = BOND_TYPE_TEMPORARY;
1007     else
1008         pairing_cb.bond_type = BOND_TYPE_PERSISTENT;
1009
1010     btm_set_bond_type_dev(p_ssp_cfm_req->bd_addr, pairing_cb.bond_type);
1011
1012     pairing_cb.is_ssp = TRUE;
1013
1014     /* If JustWorks auto-accept */
1015     if (p_ssp_cfm_req->just_works)
1016     {
1017         /* Pairing consent for JustWorks needed if:
1018          * 1. Incoming (non-temporary) pairing is detected AND
1019          * 2. local IO capabilities are DisplayYesNo AND
1020          * 3. remote IO capabiltiies are DisplayOnly or NoInputNoOutput;
1021          */
1022         if (is_incoming && pairing_cb.bond_type != BOND_TYPE_TEMPORARY &&
1023                ((p_ssp_cfm_req->loc_io_caps == HCI_IO_CAP_DISPLAY_YESNO) &&
1024                 (p_ssp_cfm_req->rmt_io_caps == HCI_IO_CAP_DISPLAY_ONLY ||
1025                  p_ssp_cfm_req->rmt_io_caps == HCI_IO_CAP_NO_IO)))
1026         {
1027             BTIF_TRACE_EVENT("%s: User consent needed for incoming pairing request. loc_io_caps: %d, rmt_io_caps: %d",
1028                 __FUNCTION__, p_ssp_cfm_req->loc_io_caps, p_ssp_cfm_req->rmt_io_caps);
1029         }
1030         else
1031         {
1032             BTIF_TRACE_EVENT("%s: Auto-accept JustWorks pairing", __FUNCTION__);
1033             btif_dm_ssp_reply(&bd_addr, BT_SSP_VARIANT_CONSENT, TRUE, 0);
1034             return;
1035         }
1036     }
1037
1038     cod = devclass2uint(p_ssp_cfm_req->dev_class);
1039
1040     if (cod == 0) {
1041         LOG_DEBUG(LOG_TAG, "%s cod is 0, set as unclassified", __func__);
1042         cod = COD_UNCLASSIFIED;
1043     }
1044
1045     pairing_cb.sdp_attempts = 0;
1046     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name, cod,
1047                      (p_ssp_cfm_req->just_works ? BT_SSP_VARIANT_CONSENT : BT_SSP_VARIANT_PASSKEY_CONFIRMATION),
1048                      p_ssp_cfm_req->num_val);
1049 }
1050
1051 static void btif_dm_ssp_key_notif_evt(tBTA_DM_SP_KEY_NOTIF *p_ssp_key_notif)
1052 {
1053     bt_bdaddr_t bd_addr;
1054     bt_bdname_t bd_name;
1055     UINT32 cod;
1056     int dev_type;
1057
1058     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
1059
1060     /* Remote properties update */
1061     if (!btif_get_device_type(p_ssp_key_notif->bd_addr, &dev_type))
1062     {
1063         dev_type = BT_DEVICE_TYPE_BREDR;
1064     }
1065     btif_update_remote_properties(p_ssp_key_notif->bd_addr, p_ssp_key_notif->bd_name,
1066                                   p_ssp_key_notif->dev_class, (tBT_DEVICE_TYPE) dev_type);
1067
1068     bdcpy(bd_addr.address, p_ssp_key_notif->bd_addr);
1069     memcpy(bd_name.name, p_ssp_key_notif->bd_name, BD_NAME_LEN);
1070
1071     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
1072     pairing_cb.is_ssp = TRUE;
1073     cod = devclass2uint(p_ssp_key_notif->dev_class);
1074
1075     if (cod == 0) {
1076         LOG_DEBUG(LOG_TAG, "%s cod is 0, set as unclassified", __func__);
1077         cod = COD_UNCLASSIFIED;
1078     }
1079
1080     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name,
1081                      cod, BT_SSP_VARIANT_PASSKEY_NOTIFICATION,
1082                      p_ssp_key_notif->passkey);
1083 }
1084 /*******************************************************************************
1085 **
1086 ** Function         btif_dm_auth_cmpl_evt
1087 **
1088 ** Description      Executes authentication complete event in btif context
1089 **
1090 ** Returns          void
1091 **
1092 *******************************************************************************/
1093 static void btif_dm_auth_cmpl_evt (tBTA_DM_AUTH_CMPL *p_auth_cmpl)
1094 {
1095     /* Save link key, if not temporary */
1096     bt_bdaddr_t bd_addr;
1097     bt_status_t status = BT_STATUS_FAIL;
1098     bt_bond_state_t state = BT_BOND_STATE_NONE;
1099     BOOLEAN skip_sdp = FALSE;
1100
1101     BTIF_TRACE_DEBUG("%s: bond state=%d", __func__, pairing_cb.state);
1102
1103     bdcpy(bd_addr.address, p_auth_cmpl->bd_addr);
1104     if ( (p_auth_cmpl->success == TRUE) && (p_auth_cmpl->key_present) )
1105     {
1106         if ((p_auth_cmpl->key_type < HCI_LKEY_TYPE_DEBUG_COMB) ||
1107             (p_auth_cmpl->key_type == HCI_LKEY_TYPE_AUTH_COMB) ||
1108             (p_auth_cmpl->key_type == HCI_LKEY_TYPE_CHANGED_COMB) ||
1109             (p_auth_cmpl->key_type == HCI_LKEY_TYPE_AUTH_COMB_P_256) ||
1110             pairing_cb.bond_type == BOND_TYPE_PERSISTENT)
1111         {
1112             bt_status_t ret;
1113             BTIF_TRACE_DEBUG("%s: Storing link key. key_type=0x%x, bond_type=%d",
1114                 __FUNCTION__, p_auth_cmpl->key_type, pairing_cb.bond_type);
1115             ret = btif_storage_add_bonded_device(&bd_addr,
1116                                 p_auth_cmpl->key, p_auth_cmpl->key_type,
1117                                 pairing_cb.pin_code_len);
1118             ASSERTC(ret == BT_STATUS_SUCCESS, "storing link key failed", ret);
1119         }
1120         else
1121         {
1122             BTIF_TRACE_DEBUG("%s: Temporary key. Not storing. key_type=0x%x, bond_type=%d",
1123                 __FUNCTION__, p_auth_cmpl->key_type, pairing_cb.bond_type);
1124             if(pairing_cb.bond_type == BOND_TYPE_TEMPORARY)
1125             {
1126                 BTIF_TRACE_DEBUG("%s: sending BT_BOND_STATE_NONE for Temp pairing",
1127                         __FUNCTION__);
1128                 btif_storage_remove_bonded_device(&bd_addr);
1129                 bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_NONE);
1130                 return;
1131             }
1132         }
1133     }
1134
1135     // We could have received a new link key without going through the pairing flow.
1136     // If so, we don't want to perform SDP or any other operations on the authenticated
1137     // device.
1138     if (bdcmp(p_auth_cmpl->bd_addr, pairing_cb.bd_addr) != 0) {
1139       char address[32];
1140       bt_bdaddr_t bt_bdaddr;
1141
1142       memcpy(bt_bdaddr.address, p_auth_cmpl->bd_addr,
1143              sizeof(bt_bdaddr.address));
1144       bdaddr_to_string(&bt_bdaddr, address, sizeof(address));
1145       LOG_INFO(LOG_TAG, "%s skipping SDP since we did not initiate pairing to %s.", __func__, address);
1146       return;
1147     }
1148
1149     // Skip SDP for certain  HID Devices
1150     if (p_auth_cmpl->success)
1151     {
1152 #if BLE_INCLUDED == TRUE
1153         btif_storage_set_remote_addr_type(&bd_addr, p_auth_cmpl->addr_type);
1154 #endif
1155         btif_update_remote_properties(p_auth_cmpl->bd_addr,
1156                                       p_auth_cmpl->bd_name, NULL, p_auth_cmpl->dev_type);
1157         pairing_cb.timeout_retries = 0;
1158         status = BT_STATUS_SUCCESS;
1159         state = BT_BOND_STATE_BONDED;
1160         bdcpy(bd_addr.address, p_auth_cmpl->bd_addr);
1161
1162         if (check_sdp_bl(&bd_addr) && check_cod_hid(&bd_addr))
1163         {
1164             LOG_WARN(LOG_TAG, "%s:skip SDP", __FUNCTION__);
1165             skip_sdp = TRUE;
1166         }
1167         if(!pairing_cb.is_local_initiated && skip_sdp)
1168         {
1169             bond_state_changed(status, &bd_addr, state);
1170
1171             LOG_WARN(LOG_TAG, "%s: Incoming HID Connection",__FUNCTION__);
1172             bt_property_t prop;
1173             bt_bdaddr_t bd_addr;
1174             bt_uuid_t  uuid;
1175             char uuid_str[128] = UUID_HUMAN_INTERFACE_DEVICE;
1176
1177             string_to_uuid(uuid_str, &uuid);
1178
1179             prop.type = BT_PROPERTY_UUIDS;
1180             prop.val = uuid.uu;
1181             prop.len = MAX_UUID_SIZE;
1182
1183             /* Send the event to the BTIF */
1184             HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1185                              BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1186         }
1187         else
1188         {
1189 #if BLE_INCLUDED == TRUE
1190             BOOLEAN is_crosskey = FALSE;
1191             /* If bonded due to cross-key, save the static address too*/
1192             if(pairing_cb.state == BT_BOND_STATE_BONDING &&
1193               (bdcmp(p_auth_cmpl->bd_addr, pairing_cb.bd_addr) != 0))
1194             {
1195                 BTIF_TRACE_DEBUG("%s: bonding initiated due to cross key, adding static address",
1196                                  __func__);
1197                 bdcpy(pairing_cb.static_bdaddr.address, p_auth_cmpl->bd_addr);
1198                 is_crosskey = TRUE;
1199             }
1200             if (!is_crosskey || !(stack_config_get_interface()->get_pts_crosskey_sdp_disable()))
1201             {
1202 #endif
1203
1204                 // Ensure inquiry is stopped before attempting service discovery
1205                 btif_dm_cancel_discovery();
1206
1207                 /* Trigger SDP on the device */
1208                 pairing_cb.sdp_attempts = 1;
1209                 btif_dm_get_remote_services(&bd_addr);
1210 #if BLE_INCLUDED == TRUE
1211             }
1212 #endif
1213         }
1214         // Do not call bond_state_changed_cb yet. Wait until remote service discovery is complete
1215     }
1216     else
1217     {
1218         // Map the HCI fail reason  to  bt status
1219         switch(p_auth_cmpl->fail_reason)
1220         {
1221             case HCI_ERR_PAGE_TIMEOUT:
1222                 if (interop_match_addr(INTEROP_AUTO_RETRY_PAIRING, &bd_addr)
1223                     && pairing_cb.timeout_retries)
1224                 {
1225                     BTIF_TRACE_WARNING("%s() - Pairing timeout; retrying (%d) ...", __FUNCTION__, pairing_cb.timeout_retries);
1226                     --pairing_cb.timeout_retries;
1227                     btif_dm_cb_create_bond (&bd_addr, BTA_TRANSPORT_UNKNOWN);
1228                     return;
1229                 }
1230                 /* Fall-through */
1231             case HCI_ERR_CONNECTION_TOUT:
1232                 status =  BT_STATUS_RMT_DEV_DOWN;
1233                 break;
1234
1235             case HCI_ERR_PAIRING_NOT_ALLOWED:
1236                 status = BT_STATUS_AUTH_REJECTED;
1237                 break;
1238
1239             case HCI_ERR_LMP_RESPONSE_TIMEOUT:
1240                 status =  BT_STATUS_AUTH_FAILURE;
1241                 break;
1242
1243             /* map the auth failure codes, so we can retry pairing if necessary */
1244             case HCI_ERR_AUTH_FAILURE:
1245             case HCI_ERR_KEY_MISSING:
1246                 btif_storage_remove_bonded_device(&bd_addr);
1247             case HCI_ERR_HOST_REJECT_SECURITY:
1248             case HCI_ERR_ENCRY_MODE_NOT_ACCEPTABLE:
1249             case HCI_ERR_UNIT_KEY_USED:
1250             case HCI_ERR_PAIRING_WITH_UNIT_KEY_NOT_SUPPORTED:
1251             case HCI_ERR_INSUFFCIENT_SECURITY:
1252             case HCI_ERR_PEER_USER:
1253             case HCI_ERR_UNSPECIFIED:
1254                 BTIF_TRACE_DEBUG(" %s() Authentication fail reason %d",
1255                     __FUNCTION__, p_auth_cmpl->fail_reason);
1256                 if (pairing_cb.autopair_attempts  == 1)
1257                 {
1258                     /* Create the Bond once again */
1259                     BTIF_TRACE_WARNING("%s() auto pair failed. Reinitiate Bond", __FUNCTION__);
1260                     btif_dm_cb_create_bond (&bd_addr, BTA_TRANSPORT_UNKNOWN);
1261                     return;
1262                 }
1263                 else
1264                 {
1265                     /* if autopair attempts are more than 1, or not attempted */
1266                     status =  BT_STATUS_AUTH_FAILURE;
1267                 }
1268                 break;
1269
1270             default:
1271                 status =  BT_STATUS_FAIL;
1272         }
1273         /* Special Handling for HID Devices */
1274         if (check_cod(&bd_addr, COD_HID_POINTING)) {
1275             /* Remove Device as bonded in nvram as authentication failed */
1276             BTIF_TRACE_DEBUG("%s(): removing hid pointing device from nvram", __FUNCTION__);
1277             btif_storage_remove_bonded_device(&bd_addr);
1278         }
1279         bond_state_changed(status, &bd_addr, state);
1280     }
1281 }
1282
1283 /******************************************************************************
1284 **
1285 ** Function         btif_dm_search_devices_evt
1286 **
1287 ** Description      Executes search devices callback events in btif context
1288 **
1289 ** Returns          void
1290 **
1291 ******************************************************************************/
1292 static void btif_dm_search_devices_evt (UINT16 event, char *p_param)
1293 {
1294     tBTA_DM_SEARCH *p_search_data;
1295     BTIF_TRACE_EVENT("%s event=%s", __FUNCTION__, dump_dm_search_event(event));
1296
1297     switch (event)
1298     {
1299         case BTA_DM_DISC_RES_EVT:
1300         {
1301             p_search_data = (tBTA_DM_SEARCH *)p_param;
1302             /* Remote name update */
1303             if (strlen((const char *) p_search_data->disc_res.bd_name))
1304             {
1305                 bt_property_t properties[1];
1306                 bt_bdaddr_t bdaddr;
1307                 bt_status_t status;
1308
1309                 properties[0].type = BT_PROPERTY_BDNAME;
1310                 properties[0].val = p_search_data->disc_res.bd_name;
1311                 properties[0].len = strlen((char *)p_search_data->disc_res.bd_name);
1312                 bdcpy(bdaddr.address, p_search_data->disc_res.bd_addr);
1313
1314                 status = btif_storage_set_remote_device_property(&bdaddr, &properties[0]);
1315                 ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device property", status);
1316                 HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1317                                  status, &bdaddr, 1, properties);
1318             }
1319             /* TODO: Services? */
1320         }
1321         break;
1322
1323         case BTA_DM_INQ_RES_EVT:
1324         {
1325             /* inquiry result */
1326             UINT32 cod;
1327             bt_bdname_t bdname;
1328             bt_bdaddr_t bdaddr;
1329             UINT8 remote_name_len;
1330             tBTA_SERVICE_MASK services = 0;
1331             bdstr_t bdstr;
1332
1333             p_search_data = (tBTA_DM_SEARCH *)p_param;
1334             bdcpy(bdaddr.address, p_search_data->inq_res.bd_addr);
1335
1336             BTIF_TRACE_DEBUG("%s() %s device_type = 0x%x\n", __FUNCTION__, bdaddr_to_string(&bdaddr, bdstr, sizeof(bdstr)),
1337 #if (BLE_INCLUDED == TRUE)
1338                     p_search_data->inq_res.device_type);
1339 #else
1340                     BT_DEVICE_TYPE_BREDR);
1341 #endif
1342             bdname.name[0] = 0;
1343
1344             cod = devclass2uint (p_search_data->inq_res.dev_class);
1345
1346             if (cod == 0) {
1347                 LOG_DEBUG(LOG_TAG, "%s cod is 0, set as unclassified", __func__);
1348                 cod = COD_UNCLASSIFIED;
1349             }
1350
1351             if (!check_eir_remote_name(p_search_data, bdname.name, &remote_name_len))
1352                 check_cached_remote_name(p_search_data, bdname.name, &remote_name_len);
1353
1354             /* Check EIR for remote name and services */
1355             if (p_search_data->inq_res.p_eir)
1356             {
1357                 BTA_GetEirService(p_search_data->inq_res.p_eir, &services);
1358                 BTIF_TRACE_DEBUG("%s()EIR BTA services = %08X", __FUNCTION__, (UINT32)services);
1359                 /* TODO:  Get the service list and check to see which uuids we got and send it back to the client. */
1360             }
1361
1362             {
1363                 bt_property_t properties[5];
1364                 bt_device_type_t dev_type;
1365                 uint32_t num_properties = 0;
1366                 bt_status_t status;
1367                 int addr_type = 0;
1368
1369                 memset(properties, 0, sizeof(properties));
1370                 /* BD_ADDR */
1371                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1372                                     BT_PROPERTY_BDADDR, sizeof(bdaddr), &bdaddr);
1373                 num_properties++;
1374                 /* BD_NAME */
1375                 /* Don't send BDNAME if it is empty */
1376                 if (bdname.name[0])
1377                 {
1378                     BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1379                                                BT_PROPERTY_BDNAME,
1380                                                strlen((char *)bdname.name), &bdname);
1381                     num_properties++;
1382                 }
1383
1384                 /* DEV_CLASS */
1385                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1386                                     BT_PROPERTY_CLASS_OF_DEVICE, sizeof(cod), &cod);
1387                 num_properties++;
1388                 /* DEV_TYPE */
1389 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1390                 /* FixMe: Assumption is that bluetooth.h and BTE enums match */
1391
1392                 /* Verify if the device is dual mode in NVRAM */
1393                 int stored_device_type = 0;
1394                 if (btif_get_device_type(bdaddr.address, &stored_device_type) &&
1395                     ((stored_device_type != BT_DEVICE_TYPE_BREDR &&
1396                         p_search_data->inq_res.device_type == BT_DEVICE_TYPE_BREDR) ||
1397                      (stored_device_type != BT_DEVICE_TYPE_BLE &&
1398                         p_search_data->inq_res.device_type == BT_DEVICE_TYPE_BLE))) {
1399                     dev_type = BT_DEVICE_TYPE_DUMO;
1400                 } else {
1401                     dev_type = p_search_data->inq_res.device_type;
1402                 }
1403
1404                 if (p_search_data->inq_res.device_type == BT_DEVICE_TYPE_BLE)
1405                     addr_type = p_search_data->inq_res.ble_addr_type;
1406 #else
1407                 dev_type = BT_DEVICE_TYPE_BREDR;
1408 #endif
1409                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1410                                     BT_PROPERTY_TYPE_OF_DEVICE, sizeof(dev_type), &dev_type);
1411                 num_properties++;
1412                 /* RSSI */
1413                 BTIF_STORAGE_FILL_PROPERTY(&properties[num_properties],
1414                                     BT_PROPERTY_REMOTE_RSSI, sizeof(int8_t),
1415                                     &(p_search_data->inq_res.rssi));
1416                 num_properties++;
1417
1418                 status = btif_storage_add_remote_device(&bdaddr, num_properties, properties);
1419                 ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote device (inquiry)", status);
1420 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1421                 status = btif_storage_set_remote_addr_type(&bdaddr, addr_type);
1422                 ASSERTC(status == BT_STATUS_SUCCESS, "failed to save remote addr type (inquiry)", status);
1423 #endif
1424                 /* Callback to notify upper layer of device */
1425                 HAL_CBACK(bt_hal_cbacks, device_found_cb,
1426                                  num_properties, properties);
1427             }
1428         }
1429         break;
1430
1431         case BTA_DM_INQ_CMPL_EVT:
1432         {
1433 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1434             tBTA_DM_BLE_PF_FILT_PARAMS adv_filt_param;
1435             memset(&adv_filt_param, 0, sizeof(tBTA_DM_BLE_PF_FILT_PARAMS));
1436             BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_DELETE, 0, &adv_filt_param, NULL,
1437                                      bte_scan_filt_param_cfg_evt, 0);
1438 #endif
1439         }
1440         break;
1441         case BTA_DM_DISC_CMPL_EVT:
1442         {
1443             HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb, BT_DISCOVERY_STOPPED);
1444         }
1445         break;
1446         case BTA_DM_SEARCH_CANCEL_CMPL_EVT:
1447         {
1448            /* if inquiry is not in progress and we get a cancel event, then
1449             * it means we are done with inquiry, but remote_name fetches are in
1450             * progress
1451             *
1452             * if inquiry  is in progress, then we don't want to act on this cancel_cmpl_evt
1453             * but instead wait for the cancel_cmpl_evt via the Busy Level
1454             *
1455             */
1456            if (btif_dm_inquiry_in_progress == FALSE)
1457            {
1458 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1459                tBTA_DM_BLE_PF_FILT_PARAMS adv_filt_param;
1460                memset(&adv_filt_param, 0, sizeof(tBTA_DM_BLE_PF_FILT_PARAMS));
1461                BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_DELETE, 0, &adv_filt_param, NULL,
1462                                         bte_scan_filt_param_cfg_evt, 0);
1463 #endif
1464                HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb, BT_DISCOVERY_STOPPED);
1465            }
1466         }
1467         break;
1468     }
1469 }
1470
1471 /*******************************************************************************
1472 **
1473 ** Function         btif_dm_search_services_evt
1474 **
1475 ** Description      Executes search services event in btif context
1476 **
1477 ** Returns          void
1478 **
1479 *******************************************************************************/
1480 static void btif_dm_search_services_evt(UINT16 event, char *p_param)
1481 {
1482     tBTA_DM_SEARCH *p_data = (tBTA_DM_SEARCH*)p_param;
1483
1484     BTIF_TRACE_EVENT("%s:  event = %d", __FUNCTION__, event);
1485     switch (event)
1486     {
1487         case BTA_DM_DISC_RES_EVT:
1488         {
1489             bt_property_t prop;
1490             uint32_t i = 0;
1491             bt_bdaddr_t bd_addr;
1492             bt_status_t ret;
1493
1494             bdcpy(bd_addr.address, p_data->disc_res.bd_addr);
1495
1496             BTIF_TRACE_DEBUG("%s:(result=0x%x, services 0x%x)", __FUNCTION__,
1497                     p_data->disc_res.result, p_data->disc_res.services);
1498             if  ((p_data->disc_res.result != BTA_SUCCESS) &&
1499                  (pairing_cb.state == BT_BOND_STATE_BONDING ) &&
1500                  (pairing_cb.sdp_attempts < BTIF_DM_MAX_SDP_ATTEMPTS_AFTER_PAIRING))
1501             {
1502                 BTIF_TRACE_WARNING("%s:SDP failed after bonding re-attempting", __FUNCTION__);
1503                 pairing_cb.sdp_attempts++;
1504                 btif_dm_get_remote_services(&bd_addr);
1505                 return;
1506             }
1507             prop.type = BT_PROPERTY_UUIDS;
1508             prop.len = 0;
1509             if ((p_data->disc_res.result == BTA_SUCCESS) && (p_data->disc_res.num_uuids > 0))
1510             {
1511                  prop.val = p_data->disc_res.p_uuid_list;
1512                  prop.len = p_data->disc_res.num_uuids * MAX_UUID_SIZE;
1513                  for (i=0; i < p_data->disc_res.num_uuids; i++)
1514                  {
1515                       char temp[256];
1516                       uuid_to_string_legacy((bt_uuid_t*)(p_data->disc_res.p_uuid_list + (i*MAX_UUID_SIZE)), temp);
1517                       LOG_INFO(LOG_TAG, "%s index:%d uuid:%s", __func__, i, temp);
1518                  }
1519             }
1520
1521             /* onUuidChanged requires getBondedDevices to be populated.
1522             ** bond_state_changed needs to be sent prior to remote_device_property
1523             */
1524             if ((pairing_cb.state == BT_BOND_STATE_BONDING) &&
1525                 ((bdcmp(p_data->disc_res.bd_addr, pairing_cb.bd_addr) == 0) ||
1526                  (bdcmp(p_data->disc_res.bd_addr, pairing_cb.static_bdaddr.address) == 0)) &&
1527                   pairing_cb.sdp_attempts > 0)
1528             {
1529                  BTIF_TRACE_DEBUG("%s Remote Service SDP done. Call bond_state_changed_cb BONDED",
1530                                    __FUNCTION__);
1531                  pairing_cb.sdp_attempts  = 0;
1532
1533                  // If bonding occured due to cross-key pairing, send bonding callback
1534                  // for static address now
1535                  if (bdcmp(p_data->disc_res.bd_addr, pairing_cb.static_bdaddr.address) == 0)
1536                     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
1537
1538                  bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDED);
1539             }
1540
1541             if (p_data->disc_res.num_uuids != 0)
1542             {
1543                 /* Also write this to the NVRAM */
1544                 ret = btif_storage_set_remote_device_property(&bd_addr, &prop);
1545                 ASSERTC(ret == BT_STATUS_SUCCESS, "storing remote services failed", ret);
1546                 /* Send the event to the BTIF */
1547                 HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1548                                  BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1549             }
1550         }
1551         break;
1552
1553         case BTA_DM_DISC_CMPL_EVT:
1554             /* fixme */
1555         break;
1556
1557         case BTA_DM_SEARCH_CANCEL_CMPL_EVT:
1558             /* no-op */
1559         break;
1560
1561 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1562         case BTA_DM_DISC_BLE_RES_EVT:
1563              BTIF_TRACE_DEBUG("%s:, services 0x%x)", __FUNCTION__,
1564                                 p_data->disc_ble_res.service.uu.uuid16);
1565              bt_uuid_t  uuid;
1566              int i = 0;
1567              int j = 15;
1568              if (p_data->disc_ble_res.service.uu.uuid16 == UUID_SERVCLASS_LE_HID)
1569              {
1570                 BTIF_TRACE_DEBUG("%s: Found HOGP UUID",__FUNCTION__);
1571                 bt_property_t prop;
1572                 bt_bdaddr_t bd_addr;
1573                 char temp[256];
1574                 bt_status_t ret;
1575
1576                 bta_gatt_convert_uuid16_to_uuid128(uuid.uu,p_data->disc_ble_res.service.uu.uuid16);
1577
1578                 while(i < j )
1579                 {
1580                     unsigned char c = uuid.uu[j];
1581                     uuid.uu[j] = uuid.uu[i];
1582                     uuid.uu[i] = c;
1583                     i++;
1584                     j--;
1585                 }
1586
1587                 uuid_to_string_legacy(&uuid, temp);
1588                 LOG_INFO(LOG_TAG, "%s uuid:%s", __func__, temp);
1589
1590                 bdcpy(bd_addr.address, p_data->disc_ble_res.bd_addr);
1591                 prop.type = BT_PROPERTY_UUIDS;
1592                 prop.val = uuid.uu;
1593                 prop.len = MAX_UUID_SIZE;
1594
1595                 /* Also write this to the NVRAM */
1596                 ret = btif_storage_set_remote_device_property(&bd_addr, &prop);
1597                 ASSERTC(ret == BT_STATUS_SUCCESS, "storing remote services failed", ret);
1598
1599                 /* Send the event to the BTIF */
1600                 HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1601                                  BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1602
1603             }
1604         break;
1605 #endif /* BLE_INCLUDED */
1606
1607         default:
1608         {
1609             ASSERTC(0, "unhandled search services event", event);
1610         }
1611         break;
1612     }
1613 }
1614
1615 /*******************************************************************************
1616 **
1617 ** Function         btif_dm_remote_service_record_evt
1618 **
1619 ** Description      Executes search service record event in btif context
1620 **
1621 ** Returns          void
1622 **
1623 *******************************************************************************/
1624 static void btif_dm_remote_service_record_evt(UINT16 event, char *p_param)
1625 {
1626     tBTA_DM_SEARCH *p_data = (tBTA_DM_SEARCH*)p_param;
1627
1628     BTIF_TRACE_EVENT("%s:  event = %d", __FUNCTION__, event);
1629     switch (event)
1630     {
1631         case BTA_DM_DISC_RES_EVT:
1632         {
1633             bt_service_record_t rec;
1634             bt_property_t prop;
1635             bt_bdaddr_t bd_addr;
1636
1637             memset(&rec, 0, sizeof(bt_service_record_t));
1638             bdcpy(bd_addr.address, p_data->disc_res.bd_addr);
1639
1640             BTIF_TRACE_DEBUG("%s:(result=0x%x, services 0x%x)", __FUNCTION__,
1641                     p_data->disc_res.result, p_data->disc_res.services);
1642             prop.type = BT_PROPERTY_SERVICE_RECORD;
1643             prop.val = (void*)&rec;
1644             prop.len = sizeof(rec);
1645
1646             /* disc_res.result is overloaded with SCN. Cannot check result */
1647             p_data->disc_res.services &= ~BTA_USER_SERVICE_MASK;
1648             /* TODO: Get the UUID as well */
1649             rec.channel = p_data->disc_res.result - 3;
1650             /* TODO: Need to get the service name using p_raw_data */
1651             rec.name[0] = 0;
1652
1653             HAL_CBACK(bt_hal_cbacks, remote_device_properties_cb,
1654                              BT_STATUS_SUCCESS, &bd_addr, 1, &prop);
1655         }
1656         break;
1657
1658         default:
1659         {
1660            ASSERTC(0, "unhandled remote service record event", event);
1661         }
1662         break;
1663     }
1664 }
1665
1666 /*******************************************************************************
1667 **
1668 ** Function         btif_dm_upstreams_cback
1669 **
1670 ** Description      Executes UPSTREAMS events in btif context
1671 **
1672 ** Returns          void
1673 **
1674 *******************************************************************************/
1675 static void btif_dm_upstreams_evt(UINT16 event, char* p_param)
1676 {
1677     tBTA_DM_SEC *p_data = (tBTA_DM_SEC*)p_param;
1678     tBTA_SERVICE_MASK service_mask;
1679     uint32_t i;
1680     bt_bdaddr_t bd_addr;
1681
1682     BTIF_TRACE_EVENT("btif_dm_upstreams_cback  ev: %s", dump_dm_event(event));
1683
1684     switch (event)
1685     {
1686         case BTA_DM_ENABLE_EVT:
1687         {
1688              BD_NAME bdname;
1689              bt_status_t status;
1690              bt_property_t prop;
1691              prop.type = BT_PROPERTY_BDNAME;
1692              prop.len = BD_NAME_LEN;
1693              prop.val = (void*)bdname;
1694
1695              status = btif_storage_get_adapter_property(&prop);
1696              if (status == BT_STATUS_SUCCESS)
1697              {
1698                  /* A name exists in the storage. Make this the device name */
1699                  BTA_DmSetDeviceName((char*)prop.val);
1700              }
1701              else
1702              {
1703                  /* Storage does not have a name yet.
1704                   * Use the default name and write it to the chip
1705                   */
1706                  BTA_DmSetDeviceName(btif_get_default_local_name());
1707              }
1708
1709 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1710              /* Enable local privacy */
1711              BTA_DmBleConfigLocalPrivacy(BLE_LOCAL_PRIVACY_ENABLED);
1712 #endif
1713
1714              /* for each of the enabled services in the mask, trigger the profile
1715               * enable */
1716              service_mask = btif_get_enabled_services_mask();
1717              for (i=0; i <= BTA_MAX_SERVICE_ID; i++)
1718              {
1719                  if (service_mask &
1720                      (tBTA_SERVICE_MASK)(BTA_SERVICE_ID_TO_SERVICE_MASK(i)))
1721                  {
1722                      btif_in_execute_service_request(i, TRUE);
1723                  }
1724              }
1725              /* clear control blocks */
1726              memset(&pairing_cb, 0, sizeof(btif_dm_pairing_cb_t));
1727              pairing_cb.bond_type = BOND_TYPE_PERSISTENT;
1728
1729              /* This function will also trigger the adapter_properties_cb
1730              ** and bonded_devices_info_cb
1731              */
1732              btif_storage_load_bonded_devices();
1733
1734              btif_enable_bluetooth_evt(p_data->enable.status);
1735         }
1736         break;
1737
1738         case BTA_DM_DISABLE_EVT:
1739             /* for each of the enabled services in the mask, trigger the profile
1740              * disable */
1741             service_mask = btif_get_enabled_services_mask();
1742             for (i=0; i <= BTA_MAX_SERVICE_ID; i++)
1743             {
1744                 if (service_mask &
1745                     (tBTA_SERVICE_MASK)(BTA_SERVICE_ID_TO_SERVICE_MASK(i)))
1746                 {
1747                     btif_in_execute_service_request(i, FALSE);
1748                 }
1749             }
1750             btif_disable_bluetooth_evt();
1751             break;
1752
1753         case BTA_DM_PIN_REQ_EVT:
1754             btif_dm_pin_req_evt(&p_data->pin_req);
1755             break;
1756
1757         case BTA_DM_AUTH_CMPL_EVT:
1758             btif_dm_auth_cmpl_evt(&p_data->auth_cmpl);
1759             break;
1760
1761         case BTA_DM_BOND_CANCEL_CMPL_EVT:
1762             if (pairing_cb.state == BT_BOND_STATE_BONDING)
1763             {
1764                 bdcpy(bd_addr.address, pairing_cb.bd_addr);
1765                 btm_set_bond_type_dev(pairing_cb.bd_addr, BOND_TYPE_UNKNOWN);
1766                 bond_state_changed(p_data->bond_cancel_cmpl.result, &bd_addr, BT_BOND_STATE_NONE);
1767             }
1768             break;
1769
1770         case BTA_DM_SP_CFM_REQ_EVT:
1771             btif_dm_ssp_cfm_req_evt(&p_data->cfm_req);
1772             break;
1773         case BTA_DM_SP_KEY_NOTIF_EVT:
1774             btif_dm_ssp_key_notif_evt(&p_data->key_notif);
1775             break;
1776
1777         case BTA_DM_DEV_UNPAIRED_EVT:
1778             bdcpy(bd_addr.address, p_data->link_down.bd_addr);
1779             btm_set_bond_type_dev(p_data->link_down.bd_addr, BOND_TYPE_UNKNOWN);
1780
1781             /*special handling for HID devices */
1782             #if (defined(BTA_HH_INCLUDED) && (BTA_HH_INCLUDED == TRUE))
1783             btif_hh_remove_device(bd_addr);
1784             #endif
1785             btif_storage_remove_bonded_device(&bd_addr);
1786             bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_NONE);
1787             break;
1788
1789         case BTA_DM_BUSY_LEVEL_EVT:
1790         {
1791
1792             if (p_data->busy_level.level_flags & BTM_BL_INQUIRY_PAGING_MASK)
1793             {
1794                 if (p_data->busy_level.level_flags == BTM_BL_INQUIRY_STARTED)
1795                 {
1796                        HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb,
1797                                                 BT_DISCOVERY_STARTED);
1798                        btif_dm_inquiry_in_progress = TRUE;
1799                 }
1800                 else if (p_data->busy_level.level_flags == BTM_BL_INQUIRY_CANCELLED)
1801                 {
1802                        HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb,
1803                                                 BT_DISCOVERY_STOPPED);
1804                        btif_dm_inquiry_in_progress = FALSE;
1805                 }
1806                 else if (p_data->busy_level.level_flags == BTM_BL_INQUIRY_COMPLETE)
1807                 {
1808                        btif_dm_inquiry_in_progress = FALSE;
1809                 }
1810             }
1811         }break;
1812
1813         case BTA_DM_LINK_UP_EVT:
1814             bdcpy(bd_addr.address, p_data->link_up.bd_addr);
1815             BTIF_TRACE_DEBUG("BTA_DM_LINK_UP_EVT. Sending BT_ACL_STATE_CONNECTED");
1816
1817             btif_update_remote_version_property(&bd_addr);
1818
1819             HAL_CBACK(bt_hal_cbacks, acl_state_changed_cb, BT_STATUS_SUCCESS,
1820                       &bd_addr, BT_ACL_STATE_CONNECTED);
1821             break;
1822
1823         case BTA_DM_LINK_DOWN_EVT:
1824             bdcpy(bd_addr.address, p_data->link_down.bd_addr);
1825             btm_set_bond_type_dev(p_data->link_down.bd_addr, BOND_TYPE_UNKNOWN);
1826             BTIF_TRACE_DEBUG("BTA_DM_LINK_DOWN_EVT. Sending BT_ACL_STATE_DISCONNECTED");
1827             HAL_CBACK(bt_hal_cbacks, acl_state_changed_cb, BT_STATUS_SUCCESS,
1828                       &bd_addr, BT_ACL_STATE_DISCONNECTED);
1829             break;
1830
1831         case BTA_DM_HW_ERROR_EVT:
1832             BTIF_TRACE_ERROR("Received H/W Error. ");
1833             /* Flush storage data */
1834             btif_config_flush();
1835             usleep(100000); /* 100milliseconds */
1836             /* Killing the process to force a restart as part of fault tolerance */
1837             kill(getpid(), SIGKILL);
1838             break;
1839
1840 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
1841         case BTA_DM_BLE_KEY_EVT:
1842             BTIF_TRACE_DEBUG("BTA_DM_BLE_KEY_EVT key_type=0x%02x ", p_data->ble_key.key_type);
1843
1844             /* If this pairing is by-product of local initiated GATT client Read or Write,
1845             BTA would not have sent BTA_DM_BLE_SEC_REQ_EVT event and Bond state would not
1846             have setup properly. Setup pairing_cb and notify App about Bonding state now*/
1847             if (pairing_cb.state != BT_BOND_STATE_BONDING)
1848             {
1849                 BTIF_TRACE_DEBUG("Bond state not sent to App so far.Notify the app now");
1850                 bond_state_changed(BT_STATUS_SUCCESS, (bt_bdaddr_t*)p_data->ble_key.bd_addr,
1851                                    BT_BOND_STATE_BONDING);
1852             }
1853             else if (memcmp (pairing_cb.bd_addr, p_data->ble_key.bd_addr, BD_ADDR_LEN)!=0)
1854             {
1855                 BTIF_TRACE_ERROR("BD mismatch discard BLE key_type=%d ",p_data->ble_key.key_type);
1856                 break;
1857             }
1858
1859             switch (p_data->ble_key.key_type)
1860             {
1861                 case BTA_LE_KEY_PENC:
1862                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_PENC");
1863                     pairing_cb.ble.is_penc_key_rcvd = TRUE;
1864                     pairing_cb.ble.penc_key = p_data->ble_key.p_key_value->penc_key;
1865                     break;
1866
1867                 case BTA_LE_KEY_PID:
1868                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_PID");
1869                     pairing_cb.ble.is_pid_key_rcvd = TRUE;
1870                     pairing_cb.ble.pid_key = p_data->ble_key.p_key_value->pid_key;
1871                     break;
1872
1873                 case BTA_LE_KEY_PCSRK:
1874                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_PCSRK");
1875                     pairing_cb.ble.is_pcsrk_key_rcvd = TRUE;
1876                     pairing_cb.ble.pcsrk_key = p_data->ble_key.p_key_value->pcsrk_key;
1877                     break;
1878
1879                 case BTA_LE_KEY_LENC:
1880                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_LENC");
1881                     pairing_cb.ble.is_lenc_key_rcvd = TRUE;
1882                     pairing_cb.ble.lenc_key = p_data->ble_key.p_key_value->lenc_key;
1883                     break;
1884
1885                 case BTA_LE_KEY_LCSRK:
1886                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_LCSRK");
1887                     pairing_cb.ble.is_lcsrk_key_rcvd = TRUE;
1888                     pairing_cb.ble.lcsrk_key = p_data->ble_key.p_key_value->lcsrk_key;
1889                     break;
1890
1891                 case BTA_LE_KEY_LID:
1892                     BTIF_TRACE_DEBUG("Rcv BTA_LE_KEY_LID");
1893                     pairing_cb.ble.is_lidk_key_rcvd =  TRUE;
1894                     break;
1895
1896                 default:
1897                     BTIF_TRACE_ERROR("unknown BLE key type (0x%02x)", p_data->ble_key.key_type);
1898                     break;
1899             }
1900             break;
1901         case BTA_DM_BLE_SEC_REQ_EVT:
1902             BTIF_TRACE_DEBUG("BTA_DM_BLE_SEC_REQ_EVT. ");
1903             btif_dm_ble_sec_req_evt(&p_data->ble_req);
1904             break;
1905         case BTA_DM_BLE_PASSKEY_NOTIF_EVT:
1906             BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_NOTIF_EVT. ");
1907             btif_dm_ble_key_notif_evt(&p_data->key_notif);
1908             break;
1909         case BTA_DM_BLE_PASSKEY_REQ_EVT:
1910             BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_REQ_EVT. ");
1911             btif_dm_ble_passkey_req_evt(&p_data->pin_req);
1912             break;
1913         case BTA_DM_BLE_NC_REQ_EVT:
1914             BTIF_TRACE_DEBUG("BTA_DM_BLE_PASSKEY_REQ_EVT. ");
1915             btif_dm_ble_key_nc_req_evt(&p_data->key_notif);
1916             break;
1917         case BTA_DM_BLE_OOB_REQ_EVT:
1918             BTIF_TRACE_DEBUG("BTA_DM_BLE_OOB_REQ_EVT. ");
1919             btif_dm_ble_oob_req_evt(&p_data->rmt_oob);
1920             break;
1921         case BTA_DM_BLE_LOCAL_IR_EVT:
1922             BTIF_TRACE_DEBUG("BTA_DM_BLE_LOCAL_IR_EVT. ");
1923             ble_local_key_cb.is_id_keys_rcvd = TRUE;
1924             memcpy(&ble_local_key_cb.id_keys.irk[0],
1925                    &p_data->ble_id_keys.irk[0], sizeof(BT_OCTET16));
1926             memcpy(&ble_local_key_cb.id_keys.ir[0],
1927                    &p_data->ble_id_keys.ir[0], sizeof(BT_OCTET16));
1928             memcpy(&ble_local_key_cb.id_keys.dhk[0],
1929                    &p_data->ble_id_keys.dhk[0], sizeof(BT_OCTET16));
1930             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.id_keys.irk[0],
1931                                             BTIF_DM_LE_LOCAL_KEY_IRK,
1932                                             BT_OCTET16_LEN);
1933             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.id_keys.ir[0],
1934                                             BTIF_DM_LE_LOCAL_KEY_IR,
1935                                             BT_OCTET16_LEN);
1936             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.id_keys.dhk[0],
1937                                             BTIF_DM_LE_LOCAL_KEY_DHK,
1938                                             BT_OCTET16_LEN);
1939             break;
1940         case BTA_DM_BLE_LOCAL_ER_EVT:
1941             BTIF_TRACE_DEBUG("BTA_DM_BLE_LOCAL_ER_EVT. ");
1942             ble_local_key_cb.is_er_rcvd = TRUE;
1943             memcpy(&ble_local_key_cb.er[0], &p_data->ble_er[0], sizeof(BT_OCTET16));
1944             btif_storage_add_ble_local_key( (char *)&ble_local_key_cb.er[0],
1945                                             BTIF_DM_LE_LOCAL_KEY_ER,
1946                                             BT_OCTET16_LEN);
1947             break;
1948
1949         case BTA_DM_BLE_AUTH_CMPL_EVT:
1950             BTIF_TRACE_DEBUG("BTA_DM_BLE_AUTH_CMPL_EVT. ");
1951             btif_dm_ble_auth_cmpl_evt(&p_data->auth_cmpl);
1952             break;
1953
1954         case BTA_DM_LE_FEATURES_READ:
1955         {
1956             tBTM_BLE_VSC_CB cmn_vsc_cb;
1957             bt_local_le_features_t local_le_features;
1958             char buf[512];
1959             bt_property_t prop;
1960             prop.type = BT_PROPERTY_LOCAL_LE_FEATURES;
1961             prop.val = (void*)buf;
1962             prop.len = sizeof(buf);
1963
1964            /* LE features are not stored in storage. Should be retrived from stack */
1965             BTM_BleGetVendorCapabilities(&cmn_vsc_cb);
1966             local_le_features.local_privacy_enabled = BTM_BleLocalPrivacyEnabled();
1967
1968             prop.len = sizeof (bt_local_le_features_t);
1969             if (cmn_vsc_cb.filter_support == 1)
1970                 local_le_features.max_adv_filter_supported = cmn_vsc_cb.max_filter;
1971              else
1972                 local_le_features.max_adv_filter_supported = 0;
1973             local_le_features.max_adv_instance = cmn_vsc_cb.adv_inst_max;
1974             local_le_features.max_irk_list_size = cmn_vsc_cb.max_irk_list_sz;
1975             local_le_features.rpa_offload_supported = cmn_vsc_cb.rpa_offloading;
1976             local_le_features.activity_energy_info_supported = cmn_vsc_cb.energy_support;
1977             local_le_features.scan_result_storage_size = cmn_vsc_cb.tot_scan_results_strg;
1978             local_le_features.version_supported = cmn_vsc_cb.version_supported;
1979             local_le_features.total_trackable_advertisers =
1980                         cmn_vsc_cb.total_trackable_advertisers;
1981
1982             local_le_features.extended_scan_support = cmn_vsc_cb.extended_scan_support > 0;
1983             local_le_features.debug_logging_supported = cmn_vsc_cb.debug_logging_supported > 0;
1984
1985             memcpy(prop.val, &local_le_features, prop.len);
1986             HAL_CBACK(bt_hal_cbacks, adapter_properties_cb, BT_STATUS_SUCCESS, 1, &prop);
1987             break;
1988          }
1989
1990         case BTA_DM_ENER_INFO_READ:
1991         {
1992             btif_activity_energy_info_cb_t *p_ener_data = (btif_activity_energy_info_cb_t*) p_param;
1993             bt_activity_energy_info energy_info;
1994             energy_info.status = p_ener_data->status;
1995             energy_info.ctrl_state = p_ener_data->ctrl_state;
1996             energy_info.rx_time = p_ener_data->rx_time;
1997             energy_info.tx_time = p_ener_data->tx_time;
1998             energy_info.idle_time = p_ener_data->idle_time;
1999             energy_info.energy_used = p_ener_data->energy_used;
2000
2001             bt_uid_traffic_t* data = uid_set_read_and_clear(uid_set);
2002             HAL_CBACK(bt_hal_cbacks, energy_info_cb, &energy_info, data);
2003             osi_free(data);
2004             break;
2005         }
2006 #endif
2007
2008         case BTA_DM_AUTHORIZE_EVT:
2009         case BTA_DM_SIG_STRENGTH_EVT:
2010         case BTA_DM_SP_RMT_OOB_EVT:
2011         case BTA_DM_SP_KEYPRESS_EVT:
2012         case BTA_DM_ROLE_CHG_EVT:
2013
2014         default:
2015             BTIF_TRACE_WARNING( "btif_dm_cback : unhandled event (%d)", event );
2016             break;
2017     }
2018
2019     btif_dm_data_free(event, p_data);
2020 }
2021
2022 /*******************************************************************************
2023 **
2024 ** Function         btif_dm_generic_evt
2025 **
2026 ** Description      Executes non-BTA upstream events in BTIF context
2027 **
2028 ** Returns          void
2029 **
2030 *******************************************************************************/
2031 static void btif_dm_generic_evt(UINT16 event, char* p_param)
2032 {
2033     BTIF_TRACE_EVENT("%s: event=%d", __FUNCTION__, event);
2034     switch(event)
2035     {
2036         case BTIF_DM_CB_DISCOVERY_STARTED:
2037         {
2038             HAL_CBACK(bt_hal_cbacks, discovery_state_changed_cb, BT_DISCOVERY_STARTED);
2039         }
2040         break;
2041
2042         case BTIF_DM_CB_CREATE_BOND:
2043         {
2044             pairing_cb.timeout_retries = NUM_TIMEOUT_RETRIES;
2045             btif_dm_create_bond_cb_t *create_bond_cb = (btif_dm_create_bond_cb_t*)p_param;
2046             btif_dm_cb_create_bond(&create_bond_cb->bdaddr, create_bond_cb->transport);
2047         }
2048         break;
2049
2050         case BTIF_DM_CB_REMOVE_BOND:
2051         {
2052             btif_dm_cb_remove_bond((bt_bdaddr_t *)p_param);
2053         }
2054         break;
2055
2056         case BTIF_DM_CB_HID_REMOTE_NAME:
2057         {
2058             btif_dm_cb_hid_remote_name((tBTM_REMOTE_DEV_NAME *)p_param);
2059         }
2060         break;
2061
2062         case BTIF_DM_CB_BOND_STATE_BONDING:
2063             {
2064                 bond_state_changed(BT_STATUS_SUCCESS, (bt_bdaddr_t *)p_param, BT_BOND_STATE_BONDING);
2065             }
2066             break;
2067         case BTIF_DM_CB_LE_TX_TEST:
2068         case BTIF_DM_CB_LE_RX_TEST:
2069             {
2070                 uint8_t status;
2071                 STREAM_TO_UINT8(status, p_param);
2072                 HAL_CBACK(bt_hal_cbacks, le_test_mode_cb,
2073                       (status == 0) ? BT_STATUS_SUCCESS : BT_STATUS_FAIL, 0);
2074             }
2075             break;
2076         case BTIF_DM_CB_LE_TEST_END:
2077             {
2078                 uint8_t status;
2079                 uint16_t count = 0;
2080                 STREAM_TO_UINT8(status, p_param);
2081                 if (status == 0)
2082                     STREAM_TO_UINT16(count, p_param);
2083                 HAL_CBACK(bt_hal_cbacks, le_test_mode_cb,
2084                       (status == 0) ? BT_STATUS_SUCCESS : BT_STATUS_FAIL, count);
2085             }
2086             break;
2087         default:
2088         {
2089             BTIF_TRACE_WARNING("%s : Unknown event 0x%x", __FUNCTION__, event);
2090         }
2091         break;
2092     }
2093 }
2094
2095 /*******************************************************************************
2096 **
2097 ** Function         bte_dm_evt
2098 **
2099 ** Description      Switches context from BTE to BTIF for all DM events
2100 **
2101 ** Returns          void
2102 **
2103 *******************************************************************************/
2104
2105 void bte_dm_evt(tBTA_DM_SEC_EVT event, tBTA_DM_SEC *p_data)
2106 {
2107     /* switch context to btif task context (copy full union size for convenience) */
2108     bt_status_t status = btif_transfer_context(btif_dm_upstreams_evt, (uint16_t)event,
2109                                 (void*)p_data, sizeof(tBTA_DM_SEC), btif_dm_data_copy);
2110
2111     /* catch any failed context transfers */
2112     ASSERTC(status == BT_STATUS_SUCCESS, "context transfer failed", status);
2113 }
2114
2115 /*******************************************************************************
2116 **
2117 ** Function         bte_search_devices_evt
2118 **
2119 ** Description      Switches context from BTE to BTIF for DM search events
2120 **
2121 ** Returns          void
2122 **
2123 *******************************************************************************/
2124 static void bte_search_devices_evt(tBTA_DM_SEARCH_EVT event, tBTA_DM_SEARCH *p_data)
2125 {
2126     UINT16 param_len = 0;
2127
2128     if (p_data)
2129         param_len += sizeof(tBTA_DM_SEARCH);
2130     /* Allocate buffer to hold the pointers (deep copy). The pointers will point to the end of the tBTA_DM_SEARCH */
2131     switch (event)
2132     {
2133         case BTA_DM_INQ_RES_EVT:
2134         {
2135             if (p_data->inq_res.p_eir)
2136                 param_len += HCI_EXT_INQ_RESPONSE_LEN;
2137         }
2138         break;
2139
2140         case BTA_DM_DISC_RES_EVT:
2141         {
2142             if (p_data->disc_res.raw_data_size && p_data->disc_res.p_raw_data)
2143                 param_len += p_data->disc_res.raw_data_size;
2144         }
2145         break;
2146     }
2147     BTIF_TRACE_DEBUG("%s event=%s param_len=%d", __FUNCTION__, dump_dm_search_event(event), param_len);
2148
2149     /* if remote name is available in EIR, set teh flag so that stack doesnt trigger RNR */
2150     if (event == BTA_DM_INQ_RES_EVT)
2151         p_data->inq_res.remt_name_not_required = check_eir_remote_name(p_data, NULL, NULL);
2152
2153     btif_transfer_context (btif_dm_search_devices_evt , (UINT16) event, (void *)p_data, param_len,
2154         (param_len > sizeof(tBTA_DM_SEARCH)) ? search_devices_copy_cb : NULL);
2155 }
2156
2157 /*******************************************************************************
2158 **
2159 ** Function         bte_dm_search_services_evt
2160 **
2161 ** Description      Switches context from BTE to BTIF for DM search services
2162 **                  event
2163 **
2164 ** Returns          void
2165 **
2166 *******************************************************************************/
2167 static void bte_dm_search_services_evt(tBTA_DM_SEARCH_EVT event, tBTA_DM_SEARCH *p_data)
2168 {
2169     UINT16 param_len = 0;
2170    if (p_data)
2171        param_len += sizeof(tBTA_DM_SEARCH);
2172    switch (event)
2173    {
2174          case BTA_DM_DISC_RES_EVT:
2175          {
2176              if ((p_data->disc_res.result == BTA_SUCCESS) && (p_data->disc_res.num_uuids > 0)) {
2177                   param_len += (p_data->disc_res.num_uuids * MAX_UUID_SIZE);
2178              }
2179          } break;
2180    }
2181    /* TODO: The only other member that needs a deep copy is the p_raw_data. But not sure
2182     * if raw_data is needed. */
2183    btif_transfer_context(btif_dm_search_services_evt, event, (char*)p_data, param_len,
2184          (param_len > sizeof(tBTA_DM_SEARCH)) ? search_services_copy_cb : NULL);
2185 }
2186
2187 /*******************************************************************************
2188 **
2189 ** Function         bte_dm_remote_service_record_evt
2190 **
2191 ** Description      Switches context from BTE to BTIF for DM search service
2192 **                  record event
2193 **
2194 ** Returns          void
2195 **
2196 *******************************************************************************/
2197 static void bte_dm_remote_service_record_evt(tBTA_DM_SEARCH_EVT event, tBTA_DM_SEARCH *p_data)
2198 {
2199    /* TODO: The only member that needs a deep copy is the p_raw_data. But not sure yet if this is needed. */
2200    btif_transfer_context(btif_dm_remote_service_record_evt, event, (char*)p_data, sizeof(tBTA_DM_SEARCH), NULL);
2201 }
2202
2203 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2204 /*******************************************************************************
2205 **
2206 ** Function         bta_energy_info_cb
2207 **
2208 ** Description      Switches context from BTE to BTIF for DM energy info event
2209 **
2210 ** Returns          void
2211 **
2212 *******************************************************************************/
2213 static void bta_energy_info_cb(tBTA_DM_BLE_TX_TIME_MS tx_time, tBTA_DM_BLE_RX_TIME_MS rx_time,
2214                                     tBTA_DM_BLE_IDLE_TIME_MS idle_time,
2215                                     tBTA_DM_BLE_ENERGY_USED energy_used,
2216                                     tBTA_DM_CONTRL_STATE ctrl_state, tBTA_STATUS status)
2217 {
2218     BTIF_TRACE_DEBUG("energy_info_cb-Status:%d,state=%d,tx_t=%ld, rx_t=%ld, idle_time=%ld,used=%ld",
2219         status, ctrl_state, tx_time, rx_time, idle_time, energy_used);
2220
2221     btif_activity_energy_info_cb_t btif_cb;
2222     btif_cb.status = status;
2223     btif_cb.ctrl_state = ctrl_state;
2224     btif_cb.tx_time = (uint64_t) tx_time;
2225     btif_cb.rx_time = (uint64_t) rx_time;
2226     btif_cb.idle_time =(uint64_t) idle_time;
2227     btif_cb.energy_used =(uint64_t) energy_used;
2228     btif_transfer_context(btif_dm_upstreams_evt, BTA_DM_ENER_INFO_READ,
2229                           (char*) &btif_cb, sizeof(btif_activity_energy_info_cb_t), NULL);
2230 }
2231 #endif
2232
2233 /*******************************************************************************
2234 **
2235 ** Function         bte_scan_filt_param_cfg_evt
2236 **
2237 ** Description      Scan filter param config event
2238 **
2239 ** Returns          void
2240 **
2241 *******************************************************************************/
2242 static void bte_scan_filt_param_cfg_evt(UINT8 action_type,
2243                                         tBTA_DM_BLE_PF_AVBL_SPACE avbl_space,
2244                                         tBTA_DM_BLE_REF_VALUE ref_value, tBTA_STATUS status)
2245 {
2246     /* This event occurs on calling BTA_DmBleCfgFilterCondition internally,
2247     ** and that is why there is no HAL callback
2248     */
2249     if(BTA_SUCCESS != status)
2250     {
2251         BTIF_TRACE_ERROR("%s, %d", __FUNCTION__, status);
2252     }
2253     else
2254     {
2255         BTIF_TRACE_DEBUG("%s", __FUNCTION__);
2256     }
2257 }
2258
2259 /*****************************************************************************
2260 **
2261 **   btif api functions (no context switch)
2262 **
2263 *****************************************************************************/
2264
2265 /*******************************************************************************
2266 **
2267 ** Function         btif_dm_start_discovery
2268 **
2269 ** Description      Start device discovery/inquiry
2270 **
2271 ** Returns          bt_status_t
2272 **
2273 *******************************************************************************/
2274 bt_status_t btif_dm_start_discovery(void)
2275 {
2276     tBTA_DM_INQ inq_params;
2277     tBTA_SERVICE_MASK services = 0;
2278     tBTA_DM_BLE_PF_FILT_PARAMS adv_filt_param;
2279
2280     BTIF_TRACE_EVENT("%s", __FUNCTION__);
2281
2282 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2283     memset(&adv_filt_param, 0, sizeof(tBTA_DM_BLE_PF_FILT_PARAMS));
2284     /* Cleanup anything remaining on index 0 */
2285     BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_DELETE, 0, &adv_filt_param, NULL,
2286                              bte_scan_filt_param_cfg_evt, 0);
2287
2288     /* Add an allow-all filter on index 0*/
2289     adv_filt_param.dely_mode = IMMEDIATE_DELY_MODE;
2290     adv_filt_param.feat_seln = ALLOW_ALL_FILTER;
2291     adv_filt_param.filt_logic_type = BTA_DM_BLE_PF_FILT_LOGIC_OR;
2292     adv_filt_param.list_logic_type = BTA_DM_BLE_PF_LIST_LOGIC_OR;
2293     adv_filt_param.rssi_low_thres = LOWEST_RSSI_VALUE;
2294     adv_filt_param.rssi_high_thres = LOWEST_RSSI_VALUE;
2295     BTA_DmBleScanFilterSetup(BTA_DM_BLE_SCAN_COND_ADD, 0, &adv_filt_param, NULL,
2296                              bte_scan_filt_param_cfg_evt, 0);
2297
2298     /* TODO: Do we need to handle multiple inquiries at the same time? */
2299
2300     /* Set inquiry params and call API */
2301     inq_params.mode = BTA_DM_GENERAL_INQUIRY|BTA_BLE_GENERAL_INQUIRY;
2302 #if (defined(BTA_HOST_INTERLEAVE_SEARCH) && BTA_HOST_INTERLEAVE_SEARCH == TRUE)
2303     inq_params.intl_duration[0]= BTIF_DM_INTERLEAVE_DURATION_BR_ONE;
2304     inq_params.intl_duration[1]= BTIF_DM_INTERLEAVE_DURATION_LE_ONE;
2305     inq_params.intl_duration[2]= BTIF_DM_INTERLEAVE_DURATION_BR_TWO;
2306     inq_params.intl_duration[3]= BTIF_DM_INTERLEAVE_DURATION_LE_TWO;
2307 #endif
2308 #else
2309     inq_params.mode = BTA_DM_GENERAL_INQUIRY;
2310 #endif
2311     inq_params.duration = BTIF_DM_DEFAULT_INQ_MAX_DURATION;
2312
2313     inq_params.max_resps = BTIF_DM_DEFAULT_INQ_MAX_RESULTS;
2314     inq_params.report_dup = TRUE;
2315
2316     inq_params.filter_type = BTA_DM_INQ_CLR;
2317     /* TODO: Filter device by BDA needs to be implemented here */
2318
2319     /* Will be enabled to TRUE once inquiry busy level has been received */
2320     btif_dm_inquiry_in_progress = FALSE;
2321     /* find nearby devices */
2322     BTA_DmSearch(&inq_params, services, bte_search_devices_evt);
2323
2324     return BT_STATUS_SUCCESS;
2325 }
2326
2327 /*******************************************************************************
2328 **
2329 ** Function         btif_dm_cancel_discovery
2330 **
2331 ** Description      Cancels search
2332 **
2333 ** Returns          bt_status_t
2334 **
2335 *******************************************************************************/
2336 bt_status_t btif_dm_cancel_discovery(void)
2337 {
2338     BTIF_TRACE_EVENT("%s", __FUNCTION__);
2339     BTA_DmSearchCancel();
2340     return BT_STATUS_SUCCESS;
2341 }
2342
2343 /*******************************************************************************
2344 **
2345 ** Function         btif_dm_create_bond
2346 **
2347 ** Description      Initiate bonding with the specified device
2348 **
2349 ** Returns          bt_status_t
2350 **
2351 *******************************************************************************/
2352 bt_status_t btif_dm_create_bond(const bt_bdaddr_t *bd_addr, int transport)
2353 {
2354     btif_dm_create_bond_cb_t create_bond_cb;
2355     create_bond_cb.transport = transport;
2356     bdcpy(create_bond_cb.bdaddr.address, bd_addr->address);
2357
2358     bdstr_t bdstr;
2359     BTIF_TRACE_EVENT("%s: bd_addr=%s, transport=%d", __FUNCTION__, bdaddr_to_string(bd_addr, bdstr, sizeof(bdstr)), transport);
2360     if (pairing_cb.state != BT_BOND_STATE_NONE)
2361         return BT_STATUS_BUSY;
2362
2363     btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_CREATE_BOND, pairing_cb.state);
2364
2365     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_CREATE_BOND,
2366                           (char *)&create_bond_cb, sizeof(btif_dm_create_bond_cb_t), NULL);
2367
2368     return BT_STATUS_SUCCESS;
2369 }
2370
2371 /*******************************************************************************
2372 **
2373 ** Function         btif_dm_create_bond_out_of_band
2374 **
2375 ** Description      Initiate bonding with the specified device using out of band data
2376 **
2377 ** Returns          bt_status_t
2378 **
2379 *******************************************************************************/
2380 bt_status_t btif_dm_create_bond_out_of_band(const bt_bdaddr_t *bd_addr, int transport, const bt_out_of_band_data_t *oob_data)
2381 {
2382     bdcpy(oob_cb.bdaddr, bd_addr->address);
2383     memcpy(&oob_cb.oob_data, oob_data, sizeof(bt_out_of_band_data_t));
2384
2385     bdstr_t bdstr;
2386     BTIF_TRACE_EVENT("%s: bd_addr=%s, transport=%d", __FUNCTION__, bdaddr_to_string(bd_addr, bdstr, sizeof(bdstr)), transport);
2387     return btif_dm_create_bond(bd_addr, transport);
2388 }
2389
2390 /*******************************************************************************
2391 **
2392 ** Function         btif_dm_cancel_bond
2393 **
2394 ** Description      Initiate bonding with the specified device
2395 **
2396 ** Returns          bt_status_t
2397 **
2398 *******************************************************************************/
2399
2400 bt_status_t btif_dm_cancel_bond(const bt_bdaddr_t *bd_addr)
2401 {
2402     bdstr_t bdstr;
2403
2404     BTIF_TRACE_EVENT("%s: bd_addr=%s", __FUNCTION__, bdaddr_to_string(bd_addr, bdstr, sizeof(bdstr)));
2405
2406     btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_CANCEL_BOND, pairing_cb.state);
2407
2408     /* TODO:
2409     **  1. Restore scan modes
2410     **  2. special handling for HID devices
2411     */
2412     if (pairing_cb.state == BT_BOND_STATE_BONDING)
2413     {
2414
2415 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2416
2417         if (pairing_cb.is_ssp)
2418         {
2419             if (pairing_cb.is_le_only)
2420             {
2421                 BTA_DmBleSecurityGrant((UINT8 *)bd_addr->address,BTA_DM_SEC_PAIR_NOT_SPT);
2422             }
2423             else
2424             {
2425                 BTA_DmConfirm( (UINT8 *)bd_addr->address, FALSE);
2426                 BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2427                 btif_storage_remove_bonded_device((bt_bdaddr_t *)bd_addr);
2428             }
2429         }
2430         else
2431         {
2432             if (pairing_cb.is_le_only)
2433             {
2434                 BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2435             }
2436             else
2437             {
2438                 BTA_DmPinReply( (UINT8 *)bd_addr->address, FALSE, 0, NULL);
2439             }
2440         /* Cancel bonding, in case it is in ACL connection setup state */
2441         BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2442         }
2443
2444 #else
2445         if (pairing_cb.is_ssp)
2446         {
2447             BTA_DmConfirm( (UINT8 *)bd_addr->address, FALSE);
2448         }
2449         else
2450         {
2451             BTA_DmPinReply( (UINT8 *)bd_addr->address, FALSE, 0, NULL);
2452         }
2453         /* Cancel bonding, in case it is in ACL connection setup state */
2454         BTA_DmBondCancel ((UINT8 *)bd_addr->address);
2455         btif_storage_remove_bonded_device((bt_bdaddr_t *)bd_addr);
2456 #endif
2457     }
2458
2459     return BT_STATUS_SUCCESS;
2460 }
2461
2462 /*******************************************************************************
2463 **
2464 ** Function         btif_dm_hh_open_failed
2465 **
2466 ** Description      informs the upper layers if the HH have failed during bonding
2467 **
2468 ** Returns          none
2469 **
2470 *******************************************************************************/
2471
2472 void btif_dm_hh_open_failed(bt_bdaddr_t *bdaddr)
2473 {
2474     if (pairing_cb.state == BT_BOND_STATE_BONDING &&
2475             bdcmp(bdaddr->address, pairing_cb.bd_addr) == 0)
2476     {
2477         bond_state_changed(BT_STATUS_FAIL, bdaddr, BT_BOND_STATE_NONE);
2478     }
2479 }
2480
2481 /*******************************************************************************
2482 **
2483 ** Function         btif_dm_remove_bond
2484 **
2485 ** Description      Removes bonding with the specified device
2486 **
2487 ** Returns          bt_status_t
2488 **
2489 *******************************************************************************/
2490
2491 bt_status_t btif_dm_remove_bond(const bt_bdaddr_t *bd_addr)
2492 {
2493     bdstr_t bdstr;
2494
2495     BTIF_TRACE_EVENT("%s: bd_addr=%s", __FUNCTION__, bdaddr_to_string(bd_addr, bdstr, sizeof(bdstr)));
2496
2497     btif_stats_add_bond_event(bd_addr, BTIF_DM_FUNC_REMOVE_BOND, pairing_cb.state);
2498
2499     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_REMOVE_BOND,
2500                           (char *)bd_addr, sizeof(bt_bdaddr_t), NULL);
2501
2502     return BT_STATUS_SUCCESS;
2503 }
2504
2505 /*******************************************************************************
2506 **
2507 ** Function         btif_dm_pin_reply
2508 **
2509 ** Description      BT legacy pairing - PIN code reply
2510 **
2511 ** Returns          bt_status_t
2512 **
2513 *******************************************************************************/
2514
2515 bt_status_t btif_dm_pin_reply( const bt_bdaddr_t *bd_addr, uint8_t accept,
2516                                uint8_t pin_len, bt_pin_code_t *pin_code)
2517 {
2518     BTIF_TRACE_EVENT("%s: accept=%d", __FUNCTION__, accept);
2519     if (pin_code == NULL || pin_len > PIN_CODE_LEN)
2520         return BT_STATUS_FAIL;
2521 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2522
2523     if (pairing_cb.is_le_only)
2524     {
2525         int i;
2526         UINT32 passkey = 0;
2527         int multi[] = {100000, 10000, 1000, 100, 10,1};
2528         BD_ADDR remote_bd_addr;
2529         bdcpy(remote_bd_addr, bd_addr->address);
2530         for (i = 0; i < 6; i++)
2531         {
2532             passkey += (multi[i] * (pin_code->pin[i] - '0'));
2533         }
2534         BTIF_TRACE_DEBUG("btif_dm_pin_reply: passkey: %d", passkey);
2535         BTA_DmBlePasskeyReply(remote_bd_addr, accept, passkey);
2536
2537     }
2538     else
2539     {
2540         BTA_DmPinReply( (UINT8 *)bd_addr->address, accept, pin_len, pin_code->pin);
2541         if (accept)
2542             pairing_cb.pin_code_len = pin_len;
2543     }
2544 #else
2545     BTA_DmPinReply( (UINT8 *)bd_addr->address, accept, pin_len, pin_code->pin);
2546
2547     if (accept)
2548         pairing_cb.pin_code_len = pin_len;
2549 #endif
2550     return BT_STATUS_SUCCESS;
2551 }
2552
2553 /*******************************************************************************
2554 **
2555 ** Function         btif_dm_ssp_reply
2556 **
2557 ** Description      BT SSP Reply - Just Works, Numeric Comparison & Passkey Entry
2558 **
2559 ** Returns          bt_status_t
2560 **
2561 *******************************************************************************/
2562 bt_status_t btif_dm_ssp_reply(const bt_bdaddr_t *bd_addr,
2563                                  bt_ssp_variant_t variant, uint8_t accept,
2564                                  uint32_t passkey)
2565 {
2566     UNUSED(passkey);
2567
2568     if (variant == BT_SSP_VARIANT_PASSKEY_ENTRY)
2569     {
2570         /* This is not implemented in the stack.
2571          * For devices with display, this is not needed
2572         */
2573         BTIF_TRACE_WARNING("%s: Not implemented", __FUNCTION__);
2574         return BT_STATUS_FAIL;
2575     }
2576     /* BT_SSP_VARIANT_CONSENT & BT_SSP_VARIANT_PASSKEY_CONFIRMATION supported */
2577     BTIF_TRACE_EVENT("%s: accept=%d", __FUNCTION__, accept);
2578 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
2579     if (pairing_cb.is_le_only)
2580     {
2581         if(pairing_cb.is_le_nc)
2582         {
2583             BTA_DmBleConfirmReply((UINT8 *)bd_addr->address,accept);
2584         } else {
2585             if (accept)
2586                 BTA_DmBleSecurityGrant((UINT8 *)bd_addr->address,BTA_DM_SEC_GRANTED);
2587             else
2588                 BTA_DmBleSecurityGrant((UINT8 *)bd_addr->address,BTA_DM_SEC_PAIR_NOT_SPT);
2589         }
2590     } else {
2591         BTA_DmConfirm( (UINT8 *)bd_addr->address, accept);
2592     }
2593 #else
2594     BTA_DmConfirm( (UINT8 *)bd_addr->address, accept);
2595 #endif
2596     return BT_STATUS_SUCCESS;
2597 }
2598
2599 /*******************************************************************************
2600 **
2601 ** Function         btif_dm_get_adapter_property
2602 **
2603 ** Description     Queries the BTA for the adapter property
2604 **
2605 ** Returns          bt_status_t
2606 **
2607 *******************************************************************************/
2608 bt_status_t btif_dm_get_adapter_property(bt_property_t *prop)
2609 {
2610     BTIF_TRACE_EVENT("%s: type=0x%x", __FUNCTION__, prop->type);
2611     switch (prop->type)
2612     {
2613         case BT_PROPERTY_BDNAME:
2614         {
2615             bt_bdname_t *bd_name = (bt_bdname_t*)prop->val;
2616             strncpy((char *)bd_name->name, (char *)btif_get_default_local_name(),
2617                    sizeof(bd_name->name) - 1);
2618             bd_name->name[sizeof(bd_name->name) - 1] = 0;
2619             prop->len = strlen((char *)bd_name->name);
2620         }
2621         break;
2622
2623         case BT_PROPERTY_ADAPTER_SCAN_MODE:
2624         {
2625             /* if the storage does not have it. Most likely app never set it. Default is NONE */
2626             bt_scan_mode_t *mode = (bt_scan_mode_t*)prop->val;
2627             *mode = BT_SCAN_MODE_NONE;
2628             prop->len = sizeof(bt_scan_mode_t);
2629         }
2630         break;
2631
2632         case BT_PROPERTY_ADAPTER_DISCOVERY_TIMEOUT:
2633         {
2634             uint32_t *tmt = (uint32_t*)prop->val;
2635             *tmt = 120; /* default to 120s, if not found in NV */
2636             prop->len = sizeof(uint32_t);
2637         }
2638         break;
2639
2640         default:
2641             prop->len = 0;
2642             return BT_STATUS_FAIL;
2643     }
2644     return BT_STATUS_SUCCESS;
2645 }
2646
2647 /*******************************************************************************
2648 **
2649 ** Function         btif_dm_get_remote_services
2650 **
2651 ** Description      Start SDP to get remote services
2652 **
2653 ** Returns          bt_status_t
2654 **
2655 *******************************************************************************/
2656 bt_status_t btif_dm_get_remote_services(bt_bdaddr_t *remote_addr)
2657 {
2658     bdstr_t bdstr;
2659
2660     BTIF_TRACE_EVENT("%s: remote_addr=%s", __FUNCTION__, bdaddr_to_string(remote_addr, bdstr, sizeof(bdstr)));
2661
2662     BTA_DmDiscover(remote_addr->address, BTA_ALL_SERVICE_MASK,
2663                    bte_dm_search_services_evt, TRUE);
2664
2665     return BT_STATUS_SUCCESS;
2666 }
2667
2668 /*******************************************************************************
2669 **
2670 ** Function         btif_dm_get_remote_services_transport
2671 **
2672 ** Description      Start SDP to get remote services by transport
2673 **
2674 ** Returns          bt_status_t
2675 **
2676 *******************************************************************************/
2677 bt_status_t btif_dm_get_remote_services_by_transport(bt_bdaddr_t *remote_addr, const int transport)
2678 {
2679     BTIF_TRACE_EVENT("%s", __func__);
2680
2681     /* Set the mask extension */
2682     tBTA_SERVICE_MASK_EXT mask_ext;
2683     mask_ext.num_uuid = 0;
2684     mask_ext.p_uuid = NULL;
2685     mask_ext.srvc_mask = BTA_ALL_SERVICE_MASK;
2686
2687     BTA_DmDiscoverByTransport(remote_addr->address, &mask_ext,
2688                    bte_dm_search_services_evt, TRUE, transport);
2689
2690     return BT_STATUS_SUCCESS;
2691 }
2692
2693 /*******************************************************************************
2694 **
2695 ** Function         btif_dm_get_remote_service_record
2696 **
2697 ** Description      Start SDP to get remote service record
2698 **
2699 **
2700 ** Returns          bt_status_t
2701 *******************************************************************************/
2702 bt_status_t btif_dm_get_remote_service_record(bt_bdaddr_t *remote_addr,
2703                                                     bt_uuid_t *uuid)
2704 {
2705     tSDP_UUID sdp_uuid;
2706     bdstr_t bdstr;
2707
2708     BTIF_TRACE_EVENT("%s: remote_addr=%s", __FUNCTION__, bdaddr_to_string(remote_addr, bdstr, sizeof(bdstr)));
2709
2710     sdp_uuid.len = MAX_UUID_SIZE;
2711     memcpy(sdp_uuid.uu.uuid128, uuid->uu, MAX_UUID_SIZE);
2712
2713     BTA_DmDiscoverUUID(remote_addr->address, &sdp_uuid,
2714                        bte_dm_remote_service_record_evt, TRUE);
2715
2716     return BT_STATUS_SUCCESS;
2717 }
2718
2719 void btif_dm_execute_service_request(UINT16 event, char *p_param)
2720 {
2721     BOOLEAN b_enable = FALSE;
2722     bt_status_t status;
2723     if (event == BTIF_DM_ENABLE_SERVICE)
2724     {
2725         b_enable = TRUE;
2726     }
2727     status = btif_in_execute_service_request(*((tBTA_SERVICE_ID*)p_param), b_enable);
2728     if (status == BT_STATUS_SUCCESS)
2729     {
2730         bt_property_t property;
2731         bt_uuid_t local_uuids[BT_MAX_NUM_UUIDS];
2732
2733         /* Now send the UUID_PROPERTY_CHANGED event to the upper layer */
2734         BTIF_STORAGE_FILL_PROPERTY(&property, BT_PROPERTY_UUIDS,
2735                                     sizeof(local_uuids), local_uuids);
2736         btif_storage_get_adapter_property(&property);
2737         HAL_CBACK(bt_hal_cbacks, adapter_properties_cb,
2738                           BT_STATUS_SUCCESS, 1, &property);
2739     }
2740     return;
2741 }
2742
2743 void btif_dm_proc_io_req(BD_ADDR bd_addr, tBTA_IO_CAP *p_io_cap, tBTA_OOB_DATA *p_oob_data,
2744                       tBTA_AUTH_REQ *p_auth_req, BOOLEAN is_orig)
2745 {
2746     UINT8   yes_no_bit = BTA_AUTH_SP_YES & *p_auth_req;
2747     /* if local initiated:
2748     **      1. set DD + MITM
2749     ** if remote initiated:
2750     **      1. Copy over the auth_req from peer's io_rsp
2751     **      2. Set the MITM if peer has it set or if peer has DisplayYesNo (iPhone)
2752     ** as a fallback set MITM+GB if peer had MITM set
2753     */
2754     UNUSED (bd_addr);
2755     UNUSED (p_io_cap);
2756     UNUSED (p_oob_data);
2757
2758     BTIF_TRACE_DEBUG("+%s: p_auth_req=%d", __FUNCTION__, *p_auth_req);
2759     if(pairing_cb.is_local_initiated)
2760     {
2761         /* if initing/responding to a dedicated bonding, use dedicate bonding bit */
2762         *p_auth_req = BTA_AUTH_DD_BOND | BTA_AUTH_SP_YES;
2763     }
2764     else if (!is_orig)
2765     {
2766         /* peer initiated paring. They probably know what they want.
2767         ** Copy the mitm from peer device.
2768         */
2769         BTIF_TRACE_DEBUG("%s: setting p_auth_req to peer's: %d",
2770                 __FUNCTION__, pairing_cb.auth_req);
2771         *p_auth_req = (pairing_cb.auth_req & BTA_AUTH_BONDS);
2772
2773         /* copy over the MITM bit as well. In addition if the peer has DisplayYesNo, force MITM */
2774         if ((yes_no_bit) || (pairing_cb.io_cap & BTM_IO_CAP_IO) )
2775             *p_auth_req |= BTA_AUTH_SP_YES;
2776     }
2777     else if (yes_no_bit)
2778     {
2779         /* set the general bonding bit for stored device */
2780         *p_auth_req = BTA_AUTH_GEN_BOND | yes_no_bit;
2781     }
2782     BTIF_TRACE_DEBUG("-%s: p_auth_req=%d", __FUNCTION__, *p_auth_req);
2783 }
2784
2785 void btif_dm_proc_io_rsp(BD_ADDR bd_addr, tBTA_IO_CAP io_cap,
2786                       tBTA_OOB_DATA oob_data, tBTA_AUTH_REQ auth_req)
2787 {
2788     UNUSED (bd_addr);
2789     UNUSED (oob_data);
2790
2791     if(auth_req & BTA_AUTH_BONDS)
2792     {
2793         BTIF_TRACE_DEBUG("%s auth_req:%d", __FUNCTION__, auth_req);
2794         pairing_cb.auth_req = auth_req;
2795         pairing_cb.io_cap = io_cap;
2796     }
2797 }
2798
2799 void btif_dm_set_oob_for_io_req(tBTA_OOB_DATA  *p_has_oob_data)
2800 {
2801     if (is_empty_128bit(oob_cb.oob_data.c192))
2802     {
2803         *p_has_oob_data = FALSE;
2804     }
2805     else
2806     {
2807         *p_has_oob_data = TRUE;
2808     }
2809     BTIF_TRACE_DEBUG("%s: *p_has_oob_data=%d", __func__, *p_has_oob_data);
2810 }
2811
2812 void btif_dm_set_oob_for_le_io_req(BD_ADDR bd_addr, tBTA_OOB_DATA  *p_has_oob_data,
2813                                    tBTA_LE_AUTH_REQ *p_auth_req)
2814 {
2815
2816     /* We currently support only Security Manager TK as OOB data for LE transport.
2817        If it's not present mark no OOB data.
2818      */
2819     if (!is_empty_128bit(oob_cb.oob_data.sm_tk))
2820     {
2821         /* make sure OOB data is for this particular device */
2822         if (memcmp(bd_addr, oob_cb.bdaddr, BD_ADDR_LEN) == 0) {
2823             // When using OOB with TK, SC Secure Connections bit must be disabled.
2824             tBTA_LE_AUTH_REQ mask = ~BTM_LE_AUTH_REQ_SC_ONLY;
2825             *p_auth_req = ((*p_auth_req) & mask);
2826
2827             *p_has_oob_data = TRUE;
2828         }
2829         else
2830         {
2831             *p_has_oob_data = FALSE;
2832             BTIF_TRACE_WARNING("%s: remote address didn't match OOB data address",
2833                                __func__);
2834         }
2835     }
2836     else
2837     {
2838         *p_has_oob_data = FALSE;
2839     }
2840     BTIF_TRACE_DEBUG("%s *p_has_oob_data=%d", __func__, *p_has_oob_data);
2841 }
2842
2843 #ifdef BTIF_DM_OOB_TEST
2844 void btif_dm_load_local_oob(void)
2845 {
2846     char prop_oob[PROPERTY_VALUE_MAX];
2847     osi_property_get("service.brcm.bt.oob", prop_oob, "3");
2848     BTIF_TRACE_DEBUG("%s: prop_oob = %s", __func__, prop_oob);
2849     if (prop_oob[0] != '3')
2850     {
2851         if (is_empty_128bit(oob_cb.oob_data.c192))
2852         {
2853             BTIF_TRACE_DEBUG("%s: read OOB, call BTA_DmLocalOob()", __func__);
2854             BTA_DmLocalOob();
2855         }
2856     }
2857 }
2858
2859 void btif_dm_proc_loc_oob(BOOLEAN valid, BT_OCTET16 c, BT_OCTET16 r)
2860 {
2861     FILE *fp;
2862     char *path_a = "/data/misc/bluedroid/LOCAL/a.key";
2863     char *path_b = "/data/misc/bluedroid/LOCAL/b.key";
2864     char *path = NULL;
2865     char prop_oob[PROPERTY_VALUE_MAX];
2866     BTIF_TRACE_DEBUG("%s: valid=%d", __func__, valid);
2867     if (is_empty_128bit(oob_cb.oob_data.c192) && valid)
2868     {
2869         BTIF_TRACE_DEBUG("save local OOB data in memory");
2870         memcpy(oob_cb.oob_data.c192, c, BT_OCTET16_LEN);
2871         memcpy(oob_cb.oob_data.r192, r, BT_OCTET16_LEN);
2872         osi_property_get("service.brcm.bt.oob", prop_oob, "3");
2873         BTIF_TRACE_DEBUG("%s: prop_oob = %s", __func__, prop_oob);
2874         if (prop_oob[0] == '1')
2875             path = path_a;
2876         else if (prop_oob[0] == '2')
2877             path = path_b;
2878         if (path)
2879         {
2880             fp = fopen(path, "wb+");
2881             if (fp == NULL)
2882             {
2883                 BTIF_TRACE_DEBUG("%s: failed to save local OOB data to %s", __func__, path);
2884             }
2885             else
2886             {
2887                 BTIF_TRACE_DEBUG("%s: save local OOB data into file %s", __func__, path);
2888                 fwrite (c , 1 , BT_OCTET16_LEN , fp );
2889                 fwrite (r , 1 , BT_OCTET16_LEN , fp );
2890                 fclose(fp);
2891             }
2892         }
2893     }
2894 }
2895
2896 /*******************************************************************************
2897 **
2898 ** Function         btif_dm_get_smp_config
2899 **
2900 ** Description      Retrieve the SMP pairing options from the bt_stack.conf
2901 **                  file. To provide specific pairing options for the host
2902 **                  add a node with label "SmpOptions" to the config file
2903 **                  and assign it a comma separated list of 5 values in the
2904 **                  format: auth, io, ikey, rkey, ksize, oob
2905 **                  eg: PTS_SmpOptions=0xD,0x4,0xf,0xf,0x10
2906 **
2907 ** Parameters:      tBTE_APPL_CFG*: pointer to struct defining pairing options
2908 **
2909 ** Returns          TRUE if the options were successfully read, else FALSE
2910 **
2911 *******************************************************************************/
2912 BOOLEAN btif_dm_get_smp_config(tBTE_APPL_CFG* p_cfg) {
2913
2914     if(!stack_config_get_interface()->get_pts_smp_options()) {
2915         BTIF_TRACE_DEBUG ("%s: SMP options not found in configuration", __func__);
2916         return FALSE;
2917     }
2918
2919     char conf[64];
2920     const char* recv = stack_config_get_interface()->get_pts_smp_options();
2921     char* pch;
2922     char* endptr;
2923
2924     strncpy(conf, recv, 64);
2925     conf[63] = 0; // null terminate
2926
2927     if ((pch = strtok(conf, ",")) != NULL)
2928         p_cfg->ble_auth_req = (UINT8) strtoul(pch, &endptr, 16);
2929     else
2930         return FALSE;
2931
2932     if ((pch = strtok(NULL, ",")) != NULL)
2933         p_cfg->ble_io_cap =  (UINT8) strtoul(pch, &endptr, 16);
2934     else
2935         return FALSE;
2936
2937     if ((pch = strtok(NULL, ",")) != NULL)
2938         p_cfg->ble_init_key =  (UINT8) strtoul(pch, &endptr, 16);
2939     else
2940         return FALSE;
2941
2942     if ((pch = strtok(NULL, ",")) != NULL)
2943         p_cfg->ble_resp_key =  (UINT8) strtoul(pch, &endptr, 16);
2944     else
2945         return FALSE;
2946
2947     if ((pch = strtok(NULL, ",")) != NULL)
2948         p_cfg->ble_max_key_size =  (UINT8) strtoul(pch, &endptr, 16);
2949     else
2950         return FALSE;
2951
2952     return TRUE;
2953 }
2954
2955 BOOLEAN btif_dm_proc_rmt_oob(BD_ADDR bd_addr,  BT_OCTET16 p_c, BT_OCTET16 p_r)
2956 {
2957     char t[128];
2958     FILE *fp;
2959     char *path_a = "/data/misc/bluedroid/LOCAL/a.key";
2960     char *path_b = "/data/misc/bluedroid/LOCAL/b.key";
2961     char *path = NULL;
2962     char prop_oob[PROPERTY_VALUE_MAX];
2963     BOOLEAN result = FALSE;
2964     bt_bdaddr_t bt_bd_addr;
2965     bdcpy(oob_cb.bdaddr, bd_addr);
2966     osi_property_get("service.brcm.bt.oob", prop_oob, "3");
2967     BTIF_TRACE_DEBUG("%s: prop_oob = %s", __func__, prop_oob);
2968     if (prop_oob[0] == '1')
2969         path = path_b;
2970     else if (prop_oob[0] == '2')
2971         path = path_a;
2972     if (path)
2973     {
2974         fp = fopen(path, "rb");
2975         if (fp == NULL)
2976         {
2977             BTIF_TRACE_DEBUG("%s: failed to read OOB keys from %s", __func__, path);
2978             return FALSE;
2979         }
2980         else
2981         {
2982             BTIF_TRACE_DEBUG("%s: read OOB data from %s", __func__, path);
2983             fread (p_c , 1 , BT_OCTET16_LEN , fp );
2984             fread (p_r , 1 , BT_OCTET16_LEN , fp );
2985             fclose(fp);
2986         }
2987         BTIF_TRACE_DEBUG("----%s: TRUE", __func__);
2988         sprintf(t, "%02x:%02x:%02x:%02x:%02x:%02x",
2989                 oob_cb.bdaddr[0], oob_cb.bdaddr[1], oob_cb.bdaddr[2],
2990                 oob_cb.bdaddr[3], oob_cb.bdaddr[4], oob_cb.bdaddr[5]);
2991         BTIF_TRACE_DEBUG("----%s: peer_bdaddr = %s", __func__, t);
2992         sprintf(t, "%02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x",
2993                 p_c[0], p_c[1], p_c[2],  p_c[3],  p_c[4],  p_c[5],  p_c[6],  p_c[7],
2994                 p_c[8], p_c[9], p_c[10], p_c[11], p_c[12], p_c[13], p_c[14], p_c[15]);
2995         BTIF_TRACE_DEBUG("----%s: c = %s", __func__, t);
2996         sprintf(t, "%02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x",
2997                 p_r[0], p_r[1], p_r[2],  p_r[3],  p_r[4],  p_r[5],  p_r[6],  p_r[7],
2998                 p_r[8], p_r[9], p_r[10], p_r[11], p_r[12], p_r[13], p_r[14], p_r[15]);
2999         BTIF_TRACE_DEBUG("----%s: r = %s", __func__, t);
3000         bdcpy(bt_bd_addr.address, bd_addr);
3001         btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_BOND_STATE_BONDING,
3002                               (char *)&bt_bd_addr, sizeof(bt_bdaddr_t), NULL);
3003         result = TRUE;
3004     }
3005     BTIF_TRACE_DEBUG("%s: result=%d", __func__, result);
3006     return result;
3007 }
3008 #endif /*  BTIF_DM_OOB_TEST */
3009 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
3010
3011 static void btif_dm_ble_key_notif_evt(tBTA_DM_SP_KEY_NOTIF *p_ssp_key_notif)
3012 {
3013     bt_bdaddr_t bd_addr;
3014     bt_bdname_t bd_name;
3015     UINT32 cod;
3016     int dev_type;
3017
3018     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
3019
3020     /* Remote name update */
3021     if (!btif_get_device_type(p_ssp_key_notif->bd_addr, &dev_type))
3022     {
3023         dev_type = BT_DEVICE_TYPE_BLE;
3024     }
3025     btif_dm_update_ble_remote_properties(p_ssp_key_notif->bd_addr , p_ssp_key_notif->bd_name,
3026                                          (tBT_DEVICE_TYPE) dev_type);
3027     bdcpy(bd_addr.address, p_ssp_key_notif->bd_addr);
3028     memcpy(bd_name.name, p_ssp_key_notif->bd_name, BD_NAME_LEN);
3029
3030     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3031     pairing_cb.is_ssp = FALSE;
3032     cod = COD_UNCLASSIFIED;
3033
3034     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name,
3035               cod, BT_SSP_VARIANT_PASSKEY_NOTIFICATION,
3036               p_ssp_key_notif->passkey);
3037 }
3038
3039 /*******************************************************************************
3040 **
3041 ** Function         btif_dm_ble_auth_cmpl_evt
3042 **
3043 ** Description      Executes authentication complete event in btif context
3044 **
3045 ** Returns          void
3046 **
3047 *******************************************************************************/
3048 static void btif_dm_ble_auth_cmpl_evt (tBTA_DM_AUTH_CMPL *p_auth_cmpl)
3049 {
3050     /* Save link key, if not temporary */
3051     bt_bdaddr_t bd_addr;
3052     bt_status_t status = BT_STATUS_FAIL;
3053     bt_bond_state_t state = BT_BOND_STATE_NONE;
3054
3055     bdcpy(bd_addr.address, p_auth_cmpl->bd_addr);
3056
3057     /* Clear OOB data */
3058     memset(&oob_cb, 0, sizeof(oob_cb));
3059
3060     if ( (p_auth_cmpl->success == TRUE) && (p_auth_cmpl->key_present) )
3061     {
3062         /* store keys */
3063     }
3064     if (p_auth_cmpl->success)
3065     {
3066         status = BT_STATUS_SUCCESS;
3067         state = BT_BOND_STATE_BONDED;
3068         int addr_type;
3069         bt_bdaddr_t bdaddr;
3070         bdcpy(bdaddr.address, p_auth_cmpl->bd_addr);
3071         if (btif_storage_get_remote_addr_type(&bdaddr, &addr_type) != BT_STATUS_SUCCESS)
3072             btif_storage_set_remote_addr_type(&bdaddr, p_auth_cmpl->addr_type);
3073
3074         /* Test for temporary bonding */
3075         if (btm_get_bond_type_dev(p_auth_cmpl->bd_addr) == BOND_TYPE_TEMPORARY) {
3076             BTIF_TRACE_DEBUG("%s: sending BT_BOND_STATE_NONE for Temp pairing",
3077                              __func__);
3078             btif_storage_remove_bonded_device(&bdaddr);
3079             state = BT_BOND_STATE_NONE;
3080         } else {
3081             btif_dm_save_ble_bonding_keys();
3082             BTA_GATTC_Refresh(bd_addr.address);
3083             btif_dm_get_remote_services_by_transport(&bd_addr, BTA_GATT_TRANSPORT_LE);
3084         }
3085     }
3086     else
3087     {
3088         /*Map the HCI fail reason  to  bt status  */
3089         switch (p_auth_cmpl->fail_reason)
3090         {
3091             case BTA_DM_AUTH_SMP_PAIR_AUTH_FAIL:
3092             case BTA_DM_AUTH_SMP_CONFIRM_VALUE_FAIL:
3093             case BTA_DM_AUTH_SMP_UNKNOWN_ERR:
3094             case BTA_DM_AUTH_SMP_CONN_TOUT:
3095                 btif_dm_remove_ble_bonding_keys();
3096                 status = BT_STATUS_AUTH_FAILURE;
3097                 break;
3098             case BTA_DM_AUTH_SMP_PAIR_NOT_SUPPORT:
3099                 status = BT_STATUS_AUTH_REJECTED;
3100                 break;
3101             default:
3102                 btif_dm_remove_ble_bonding_keys();
3103                 status =  BT_STATUS_FAIL;
3104                 break;
3105         }
3106     }
3107     bond_state_changed(status, &bd_addr, state);
3108 }
3109
3110 void    btif_dm_load_ble_local_keys(void)
3111 {
3112     memset(&ble_local_key_cb, 0, sizeof(btif_dm_local_key_cb_t));
3113
3114     if (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_ER,(char*)&ble_local_key_cb.er[0],
3115                                        BT_OCTET16_LEN)== BT_STATUS_SUCCESS)
3116     {
3117         ble_local_key_cb.is_er_rcvd = TRUE;
3118         BTIF_TRACE_DEBUG("%s BLE ER key loaded",__FUNCTION__ );
3119     }
3120
3121     if ((btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_IR,(char*)&ble_local_key_cb.id_keys.ir[0],
3122                                         BT_OCTET16_LEN)== BT_STATUS_SUCCESS )&&
3123         (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_IRK, (char*)&ble_local_key_cb.id_keys.irk[0],
3124                                         BT_OCTET16_LEN)== BT_STATUS_SUCCESS)&&
3125         (btif_storage_get_ble_local_key(BTIF_DM_LE_LOCAL_KEY_DHK,(char*)&ble_local_key_cb.id_keys.dhk[0],
3126                                         BT_OCTET16_LEN)== BT_STATUS_SUCCESS))
3127     {
3128         ble_local_key_cb.is_id_keys_rcvd = TRUE;
3129         BTIF_TRACE_DEBUG("%s BLE ID keys loaded",__FUNCTION__ );
3130     }
3131
3132 }
3133 void    btif_dm_get_ble_local_keys(tBTA_DM_BLE_LOCAL_KEY_MASK *p_key_mask, BT_OCTET16 er,
3134                                    tBTA_BLE_LOCAL_ID_KEYS *p_id_keys)
3135 {
3136     if (ble_local_key_cb.is_er_rcvd )
3137     {
3138         memcpy(&er[0], &ble_local_key_cb.er[0], sizeof(BT_OCTET16));
3139         *p_key_mask |= BTA_BLE_LOCAL_KEY_TYPE_ER;
3140     }
3141
3142     if (ble_local_key_cb.is_id_keys_rcvd)
3143     {
3144         memcpy(&p_id_keys->ir[0], &ble_local_key_cb.id_keys.ir[0], sizeof(BT_OCTET16));
3145         memcpy(&p_id_keys->irk[0],  &ble_local_key_cb.id_keys.irk[0], sizeof(BT_OCTET16));
3146         memcpy(&p_id_keys->dhk[0],  &ble_local_key_cb.id_keys.dhk[0], sizeof(BT_OCTET16));
3147         *p_key_mask |= BTA_BLE_LOCAL_KEY_TYPE_ID;
3148     }
3149     BTIF_TRACE_DEBUG("%s  *p_key_mask=0x%02x",__FUNCTION__,   *p_key_mask);
3150 }
3151
3152 void btif_dm_save_ble_bonding_keys(void)
3153 {
3154
3155     bt_bdaddr_t bd_addr;
3156
3157     BTIF_TRACE_DEBUG("%s",__FUNCTION__ );
3158
3159     bdcpy(bd_addr.address, pairing_cb.bd_addr);
3160
3161     if (pairing_cb.ble.is_penc_key_rcvd)
3162     {
3163         btif_storage_add_ble_bonding_key(&bd_addr,
3164                                          (char *) &pairing_cb.ble.penc_key,
3165                                          BTIF_DM_LE_KEY_PENC,
3166                                          sizeof(tBTM_LE_PENC_KEYS));
3167     }
3168
3169     if (pairing_cb.ble.is_pid_key_rcvd)
3170     {
3171         btif_storage_add_ble_bonding_key(&bd_addr,
3172                                          (char *) &pairing_cb.ble.pid_key,
3173                                          BTIF_DM_LE_KEY_PID,
3174                                          sizeof(tBTM_LE_PID_KEYS));
3175     }
3176
3177     if (pairing_cb.ble.is_pcsrk_key_rcvd)
3178     {
3179         btif_storage_add_ble_bonding_key(&bd_addr,
3180                                          (char *) &pairing_cb.ble.pcsrk_key,
3181                                          BTIF_DM_LE_KEY_PCSRK,
3182                                          sizeof(tBTM_LE_PCSRK_KEYS));
3183     }
3184
3185     if (pairing_cb.ble.is_lenc_key_rcvd)
3186     {
3187         btif_storage_add_ble_bonding_key(&bd_addr,
3188                                          (char *) &pairing_cb.ble.lenc_key,
3189                                          BTIF_DM_LE_KEY_LENC,
3190                                          sizeof(tBTM_LE_LENC_KEYS));
3191     }
3192
3193     if (pairing_cb.ble.is_lcsrk_key_rcvd)
3194     {
3195         btif_storage_add_ble_bonding_key(&bd_addr,
3196                                          (char *) &pairing_cb.ble.lcsrk_key,
3197                                          BTIF_DM_LE_KEY_LCSRK,
3198                                          sizeof(tBTM_LE_LCSRK_KEYS));
3199     }
3200
3201     if (pairing_cb.ble.is_lidk_key_rcvd)
3202     {
3203         btif_storage_add_ble_bonding_key(&bd_addr,
3204                                          NULL,
3205                                          BTIF_DM_LE_KEY_LID,
3206                                          0);
3207     }
3208
3209 }
3210
3211 void btif_dm_remove_ble_bonding_keys(void)
3212 {
3213     bt_bdaddr_t bd_addr;
3214
3215     BTIF_TRACE_DEBUG("%s",__FUNCTION__ );
3216
3217     bdcpy(bd_addr.address, pairing_cb.bd_addr);
3218     btif_storage_remove_ble_bonding_keys(&bd_addr);
3219 }
3220
3221 /*******************************************************************************
3222 **
3223 ** Function         btif_dm_ble_sec_req_evt
3224 **
3225 ** Description      Eprocess security request event in btif context
3226 **
3227 ** Returns          void
3228 **
3229 *******************************************************************************/
3230 void btif_dm_ble_sec_req_evt(tBTA_DM_BLE_SEC_REQ *p_ble_req)
3231 {
3232     bt_bdaddr_t bd_addr;
3233     bt_bdname_t bd_name;
3234     UINT32 cod;
3235     int dev_type;
3236
3237     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
3238
3239     if (pairing_cb.state == BT_BOND_STATE_BONDING)
3240     {
3241         BTIF_TRACE_DEBUG("%s Discard security request", __FUNCTION__);
3242         return;
3243     }
3244
3245     /* Remote name update */
3246     if (!btif_get_device_type(p_ble_req->bd_addr, &dev_type))
3247     {
3248         dev_type = BT_DEVICE_TYPE_BLE;
3249     }
3250     btif_dm_update_ble_remote_properties(p_ble_req->bd_addr, p_ble_req->bd_name,
3251                                          (tBT_DEVICE_TYPE) dev_type);
3252
3253     bdcpy(bd_addr.address, p_ble_req->bd_addr);
3254     memcpy(bd_name.name, p_ble_req->bd_name, BD_NAME_LEN);
3255
3256     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3257
3258     pairing_cb.bond_type = BOND_TYPE_PERSISTENT;
3259     pairing_cb.is_le_only = TRUE;
3260     pairing_cb.is_le_nc = FALSE;
3261     pairing_cb.is_ssp = TRUE;
3262     btm_set_bond_type_dev(p_ble_req->bd_addr, pairing_cb.bond_type);
3263
3264     cod = COD_UNCLASSIFIED;
3265
3266     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name, cod,
3267               BT_SSP_VARIANT_CONSENT, 0);
3268 }
3269
3270 /*******************************************************************************
3271 **
3272 ** Function         btif_dm_ble_passkey_req_evt
3273 **
3274 ** Description      Executes pin request event in btif context
3275 **
3276 ** Returns          void
3277 **
3278 *******************************************************************************/
3279 static void btif_dm_ble_passkey_req_evt(tBTA_DM_PIN_REQ *p_pin_req)
3280 {
3281     bt_bdaddr_t bd_addr;
3282     bt_bdname_t bd_name;
3283     UINT32 cod;
3284     int dev_type;
3285
3286     /* Remote name update */
3287     if (!btif_get_device_type(p_pin_req->bd_addr, &dev_type))
3288     {
3289         dev_type = BT_DEVICE_TYPE_BLE;
3290     }
3291     btif_dm_update_ble_remote_properties(p_pin_req->bd_addr,p_pin_req->bd_name,
3292                                          (tBT_DEVICE_TYPE) dev_type);
3293
3294     bdcpy(bd_addr.address, p_pin_req->bd_addr);
3295     memcpy(bd_name.name, p_pin_req->bd_name, BD_NAME_LEN);
3296
3297     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3298     pairing_cb.is_le_only = TRUE;
3299
3300     cod = COD_UNCLASSIFIED;
3301
3302     HAL_CBACK(bt_hal_cbacks, pin_request_cb,
3303               &bd_addr, &bd_name, cod, FALSE);
3304 }
3305 static void btif_dm_ble_key_nc_req_evt(tBTA_DM_SP_KEY_NOTIF *p_notif_req)
3306 {
3307     /* TODO implement key notification for numeric comparison */
3308     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
3309
3310     /* Remote name update */
3311     btif_update_remote_properties(p_notif_req->bd_addr , p_notif_req->bd_name,
3312                                           NULL, BT_DEVICE_TYPE_BLE);
3313
3314     bt_bdaddr_t bd_addr;
3315     bdcpy(bd_addr.address, p_notif_req->bd_addr);
3316
3317     bt_bdname_t bd_name;
3318     memcpy(bd_name.name, p_notif_req->bd_name, BD_NAME_LEN);
3319
3320     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3321     pairing_cb.is_ssp = FALSE;
3322     pairing_cb.is_le_only = TRUE;
3323     pairing_cb.is_le_nc = TRUE;
3324
3325     HAL_CBACK(bt_hal_cbacks, ssp_request_cb, &bd_addr, &bd_name,
3326               COD_UNCLASSIFIED, BT_SSP_VARIANT_PASSKEY_CONFIRMATION,
3327               p_notif_req->passkey);
3328 }
3329
3330 static void btif_dm_ble_oob_req_evt(tBTA_DM_SP_RMT_OOB *req_oob_type)
3331 {
3332     BTIF_TRACE_DEBUG("%s", __FUNCTION__);
3333
3334     bt_bdaddr_t bd_addr;
3335     bdcpy(bd_addr.address, req_oob_type->bd_addr);
3336
3337     /* We currently support only Security Manager TK as OOB data. We already
3338      * checked if it's present in btif_dm_set_oob_for_le_io_req, but check here
3339      * again. If it's not present do nothing, pairing will timeout.
3340      */
3341     if (is_empty_128bit(oob_cb.oob_data.sm_tk)) {
3342         return;
3343     }
3344
3345     /* make sure OOB data is for this particular device */
3346     if (memcmp(req_oob_type->bd_addr, oob_cb.bdaddr, BD_ADDR_LEN) != 0) {
3347         BTIF_TRACE_WARNING("%s: remote address didn't match OOB data address", __func__);
3348         return;
3349     }
3350
3351     /* Remote name update */
3352     btif_update_remote_properties(req_oob_type->bd_addr , req_oob_type->bd_name,
3353                                           NULL, BT_DEVICE_TYPE_BLE);
3354
3355     bond_state_changed(BT_STATUS_SUCCESS, &bd_addr, BT_BOND_STATE_BONDING);
3356     pairing_cb.is_ssp = FALSE;
3357     pairing_cb.is_le_only = TRUE;
3358     pairing_cb.is_le_nc = FALSE;
3359
3360     BTM_BleOobDataReply(req_oob_type->bd_addr, 0, 16, oob_cb.oob_data.sm_tk);
3361 }
3362
3363 void btif_dm_update_ble_remote_properties( BD_ADDR bd_addr, BD_NAME bd_name,
3364                                            tBT_DEVICE_TYPE dev_type)
3365 {
3366    btif_update_remote_properties(bd_addr,bd_name,NULL,dev_type);
3367 }
3368
3369 static void btif_dm_ble_tx_test_cback(void *p)
3370 {
3371     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_LE_TX_TEST,
3372                           (char *)p, 1, NULL);
3373 }
3374
3375 static void btif_dm_ble_rx_test_cback(void *p)
3376 {
3377     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_LE_RX_TEST,
3378                           (char *)p, 1, NULL);
3379 }
3380
3381 static void btif_dm_ble_test_end_cback(void *p)
3382 {
3383     btif_transfer_context(btif_dm_generic_evt, BTIF_DM_CB_LE_TEST_END,
3384                           (char *)p, 3, NULL);
3385 }
3386 /*******************************************************************************
3387 **
3388 ** Function         btif_le_test_mode
3389 **
3390 ** Description     Sends a HCI BLE Test command to the Controller
3391 **
3392 ** Returns          BT_STATUS_SUCCESS on success
3393 **
3394 *******************************************************************************/
3395 bt_status_t btif_le_test_mode(uint16_t opcode, uint8_t *buf, uint8_t len)
3396 {
3397      switch (opcode) {
3398          case HCI_BLE_TRANSMITTER_TEST:
3399              if (len != 3) return BT_STATUS_PARM_INVALID;
3400              BTM_BleTransmitterTest(buf[0],buf[1],buf[2], btif_dm_ble_tx_test_cback);
3401              break;
3402          case HCI_BLE_RECEIVER_TEST:
3403              if (len != 1) return BT_STATUS_PARM_INVALID;
3404              BTM_BleReceiverTest(buf[0], btif_dm_ble_rx_test_cback);
3405              break;
3406          case HCI_BLE_TEST_END:
3407              BTM_BleTestEnd((tBTM_CMPL_CB*) btif_dm_ble_test_end_cback);
3408              break;
3409          default:
3410              BTIF_TRACE_ERROR("%s: Unknown LE Test Mode Command 0x%x", __FUNCTION__, opcode);
3411              return BT_STATUS_UNSUPPORTED;
3412      }
3413      return BT_STATUS_SUCCESS;
3414 }
3415 #endif
3416
3417 void btif_dm_on_disable()
3418 {
3419     /* cancel any pending pairing requests */
3420     if (pairing_cb.state == BT_BOND_STATE_BONDING)
3421     {
3422         bt_bdaddr_t bd_addr;
3423
3424         BTIF_TRACE_DEBUG("%s: Cancel pending pairing request", __FUNCTION__);
3425         bdcpy(bd_addr.address, pairing_cb.bd_addr);
3426         btif_dm_cancel_bond(&bd_addr);
3427     }
3428 }
3429
3430 /*******************************************************************************
3431 **
3432 ** Function         btif_dm_read_energy_info
3433 **
3434 ** Description     Reads the energy info from controller
3435 **
3436 ** Returns         void
3437 **
3438 *******************************************************************************/
3439 void btif_dm_read_energy_info()
3440 {
3441 #if (defined(BLE_INCLUDED) && (BLE_INCLUDED == TRUE))
3442     BTA_DmBleGetEnergyInfo(bta_energy_info_cb);
3443 #endif
3444 }
3445
3446 static char* btif_get_default_local_name() {
3447     if (btif_default_local_name[0] == '\0')
3448     {
3449         int max_len = sizeof(btif_default_local_name) - 1;
3450         if (BTM_DEF_LOCAL_NAME[0] != '\0')
3451         {
3452             strncpy(btif_default_local_name, BTM_DEF_LOCAL_NAME, max_len);
3453         }
3454         else
3455         {
3456             char prop_model[PROPERTY_VALUE_MAX];
3457             osi_property_get(PROPERTY_PRODUCT_MODEL, prop_model, "");
3458             strncpy(btif_default_local_name, prop_model, max_len);
3459         }
3460         btif_default_local_name[max_len] = '\0';
3461     }
3462     return btif_default_local_name;
3463 }
3464
3465 static void btif_stats_add_bond_event(const bt_bdaddr_t *bd_addr,
3466                                       bt_bond_function_t function,
3467                                       bt_bond_state_t state) {
3468     pthread_mutex_lock(&bond_event_lock);
3469
3470     btif_bond_event_t* event = &btif_dm_bond_events[btif_events_end_index];
3471     memcpy(&event->bd_addr, bd_addr, sizeof(bt_bdaddr_t));
3472     event->function = function;
3473     event->state = state;
3474     clock_gettime(CLOCK_REALTIME, &event->timestamp);
3475
3476     btif_num_bond_events++;
3477     btif_events_end_index = (btif_events_end_index + 1) % (MAX_BTIF_BOND_EVENT_ENTRIES + 1);
3478     if (btif_events_end_index == btif_events_start_index) {
3479         btif_events_start_index = (btif_events_start_index + 1) % (MAX_BTIF_BOND_EVENT_ENTRIES + 1);
3480     }
3481
3482     int type;
3483     btif_get_device_type(bd_addr->address, &type);
3484
3485     device_type_t device_type;
3486     switch (type) {
3487         case BT_DEVICE_TYPE_BREDR:
3488             device_type = DEVICE_TYPE_BREDR;
3489             break;
3490         case BT_DEVICE_TYPE_BLE:
3491             device_type = DEVICE_TYPE_LE;
3492             break;
3493         case BT_DEVICE_TYPE_DUMO:
3494             device_type = DEVICE_TYPE_DUMO;
3495             break;
3496         default:
3497             device_type = DEVICE_TYPE_UNKNOWN;
3498             break;
3499     }
3500
3501     uint32_t cod = get_cod(bd_addr);
3502     uint64_t ts = event->timestamp.tv_sec * 1000 +
3503                   event->timestamp.tv_nsec / 1000000;
3504     metrics_pair_event(0, ts, cod, device_type);
3505
3506     pthread_mutex_unlock(&bond_event_lock);
3507 }
3508
3509 void btif_debug_bond_event_dump(int fd) {
3510     pthread_mutex_lock(&bond_event_lock);
3511     dprintf(fd, "\nBond Events: \n");
3512     dprintf(fd, "  Total Number of events: %zu\n", btif_num_bond_events);
3513     if (btif_num_bond_events > 0)
3514         dprintf(fd, "  Time          BD_ADDR            Function             State\n");
3515
3516     for (size_t i = btif_events_start_index; i != btif_events_end_index;
3517          i = (i + 1) % (MAX_BTIF_BOND_EVENT_ENTRIES + 1)) {
3518         btif_bond_event_t* event = &btif_dm_bond_events[i];
3519
3520         char eventtime[20];
3521         char temptime[20];
3522         struct tm *tstamp = localtime(&event->timestamp.tv_sec);
3523         strftime(temptime, sizeof(temptime), "%H:%M:%S", tstamp);
3524         snprintf(eventtime, sizeof(eventtime), "%s.%03ld", temptime,
3525                  event->timestamp.tv_nsec / 1000000);
3526
3527         char bdaddr[18];
3528         bdaddr_to_string(&event->bd_addr, bdaddr, sizeof(bdaddr));
3529
3530         char* func_name;
3531         switch (event->function) {
3532             case BTIF_DM_FUNC_CREATE_BOND:
3533                 func_name = "btif_dm_create_bond";
3534                 break;
3535             case BTIF_DM_FUNC_REMOVE_BOND:
3536                 func_name = "btif_dm_remove_bond";
3537                 break;
3538             case BTIF_DM_FUNC_BOND_STATE_CHANGED:
3539                 func_name = "bond_state_changed ";
3540                 break;
3541             default:
3542                 func_name = "Invalid value      ";
3543                 break;
3544         }
3545
3546         char* bond_state;
3547         switch (event->state) {
3548             case BT_BOND_STATE_NONE:
3549                 bond_state = "BOND_STATE_NONE";
3550                 break;
3551             case BT_BOND_STATE_BONDING:
3552                 bond_state = "BOND_STATE_BONDING";
3553                 break;
3554             case BT_BOND_STATE_BONDED:
3555                 bond_state = "BOND_STATE_BONDED";
3556                 break;
3557             default:
3558                 bond_state = "Invalid bond state";
3559                 break;
3560         }
3561         dprintf(fd, "  %s  %s  %s  %s\n", eventtime, bdaddr, func_name, bond_state);
3562     }
3563     pthread_mutex_unlock(&bond_event_lock);
3564 }