OSDN Git Service

51a34c00135d78210d26ee73489c206e061e2777
[android-x86/system-bt.git] / stack / btm / btm_ble_gap.c
1 /******************************************************************************
2  *
3  *  Copyright (C) 2008-2014 Broadcom Corporation
4  *
5  *  Licensed under the Apache License, Version 2.0 (the "License");
6  *  you may not use this file except in compliance with the License.
7  *  You may obtain a copy of the License at:
8  *
9  *  http://www.apache.org/licenses/LICENSE-2.0
10  *
11  *  Unless required by applicable law or agreed to in writing, software
12  *  distributed under the License is distributed on an "AS IS" BASIS,
13  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14  *  See the License for the specific language governing permissions and
15  *  limitations under the License.
16  *
17  ******************************************************************************/
18
19 /******************************************************************************
20  *
21  *  This file contains functions for BLE GAP.
22  *
23  ******************************************************************************/
24
25 #include <string.h>
26 #include <stdio.h>
27 #include <stddef.h>
28
29 #include "bt_types.h"
30 #include "bt_utils.h"
31 #include "btu.h"
32 #include "btm_int.h"
33 #include "hcimsgs.h"
34 #if (GAP_INCLUDED == TRUE)
35 #include "gap_api.h"
36 #endif
37 #if (BLE_INCLUDED == TRUE)
38 #if (defined BLE_VND_INCLUDED && BLE_VND_INCLUDED == TRUE)
39 #include "vendor_ble.h"
40 #endif
41 #include "gattdefs.h"
42 #include "gatt_int.h"
43
44 #include "btm_ble_int.h"
45
46 #define BTM_BLE_NAME_SHORT                  0x01
47 #define BTM_BLE_NAME_CMPL                   0x02
48
49 #define BTM_BLE_FILTER_TARGET_UNKNOWN       0xff
50 #define BTM_BLE_POLICY_UNKNOWN              0xff
51
52 #define BTM_EXT_BLE_RMT_NAME_TIMEOUT        30
53 #define MIN_ADV_LENGTH                       2
54
55 static tBTM_BLE_VSC_CB cmn_ble_vsc_cb;
56 static tBTM_BLE_CTRL_FEATURES_CBACK    *p_ctrl_le_feature_rd_cmpl_cback = NULL;
57
58 /*******************************************************************************
59 **  Local functions
60 *******************************************************************************/
61 static void btm_ble_update_adv_flag(UINT8 flag);
62 static void btm_ble_process_adv_pkt_cont(BD_ADDR bda, UINT8 addr_type, UINT8 evt_type, UINT8 *p);
63 UINT8 *btm_ble_build_adv_data(tBTM_BLE_AD_MASK *p_data_mask, UINT8 **p_dst,
64                               tBTM_BLE_ADV_DATA *p_data);
65 static UINT8 btm_set_conn_mode_adv_init_addr(tBTM_BLE_INQ_CB *p_cb,
66                                      BD_ADDR_PTR p_addr_ptr,
67                                      tBLE_ADDR_TYPE *p_init_addr_type,
68                                      tBLE_ADDR_TYPE *p_own_addr_type);
69 static void btm_ble_stop_observe(void);
70
71 #define BTM_BLE_INQ_RESULT          0x01
72 #define BTM_BLE_OBS_RESULT          0x02
73 #define BTM_BLE_SEL_CONN_RESULT     0x04
74
75 /* LE states combo bit to check */
76 const UINT8 btm_le_state_combo_tbl[BTM_BLE_STATE_MAX][BTM_BLE_STATE_MAX][2] =
77 {
78     {/* single state support */
79         {HCI_SUPP_LE_STATES_CONN_ADV_MASK, HCI_SUPP_LE_STATES_CONN_ADV_OFF},  /* conn_adv */
80         {HCI_SUPP_LE_STATES_INIT_MASK, HCI_SUPP_LE_STATES_INIT_OFF}, /* init */
81         {HCI_SUPP_LE_STATES_INIT_MASK, HCI_SUPP_LE_STATES_INIT_OFF}, /* master */
82         {HCI_SUPP_LE_STATES_SLAVE_MASK, HCI_SUPP_LE_STATES_SLAVE_OFF}, /* slave */
83         {0, 0},                   /* todo: lo du dir adv, not covered ? */
84         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_OFF}, /* hi duty dir adv */
85         {HCI_SUPP_LE_STATES_NON_CONN_ADV_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_OFF},  /* non connectable adv */
86         {HCI_SUPP_LE_STATES_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_OFF},   /*  passive scan */
87         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_OFF},  /*   active scan */
88         {HCI_SUPP_LE_STATES_SCAN_ADV_MASK, HCI_SUPP_LE_STATESSCAN_ADV_OFF}   /* scanable adv */
89     },
90     {    /* conn_adv =0 */
91         {0, 0},                                                                           /* conn_adv */
92         {HCI_SUPP_LE_STATES_CONN_ADV_INIT_MASK, HCI_SUPP_LE_STATES_CONN_ADV_INIT_OFF},      /* init: 32 */
93         {HCI_SUPP_LE_STATES_CONN_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_CONN_ADV_MASTER_OFF},  /* master: 35 */
94         {HCI_SUPP_LE_STATES_CONN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_CONN_ADV_SLAVE_OFF}, /* slave: 38,*/
95         {0, 0},                                                                           /* lo du dir adv */
96         {0, 0},                                                                            /* hi duty dir adv */
97         {0, 0},  /* non connectable adv */
98         {HCI_SUPP_LE_STATES_CONN_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_CONN_ADV_PASS_SCAN_OFF},   /*  passive scan */
99         {HCI_SUPP_LE_STATES_CONN_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_CONN_ADV_ACTIVE_SCAN_OFF},  /*   active scan */
100         {0, 0}   /* scanable adv */
101     },
102     {   /* init */
103         {HCI_SUPP_LE_STATES_CONN_ADV_INIT_MASK, HCI_SUPP_LE_STATES_CONN_ADV_INIT_OFF},      /* conn_adv: 32 */
104         {0, 0},                                                                             /* init */
105         {HCI_SUPP_LE_STATES_INIT_MASTER_MASK, HCI_SUPP_LE_STATES_INIT_MASTER_OFF},          /* master 28 */
106         {HCI_SUPP_LE_STATES_INIT_MASTER_SLAVE_MASK, HCI_SUPP_LE_STATES_INIT_MASTER_SLAVE_OFF}, /* slave 41 */
107         {HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_INIT_MASK, HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_INIT_OFF} ,/* lo du dir adv 34 */
108         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_INIT_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_INIT_OFF},     /* hi duty dir adv 33 */
109         {HCI_SUPP_LE_STATES_NON_CONN_INIT_MASK, HCI_SUPP_LE_STATES_NON_CONN_INIT_OFF},  /*  non connectable adv */
110         {HCI_SUPP_LE_STATES_PASS_SCAN_INIT_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_INIT_OFF},   /* passive scan */
111         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_INIT_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_INIT_OFF},  /*  active scan */
112         {HCI_SUPP_LE_STATES_SCAN_ADV_INIT_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_INIT_OFF}   /* scanable adv */
113
114     },
115     {   /* master */
116         {HCI_SUPP_LE_STATES_CONN_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_CONN_ADV_MASTER_OFF},  /* conn_adv: 35 */
117         {HCI_SUPP_LE_STATES_INIT_MASTER_MASK, HCI_SUPP_LE_STATES_INIT_MASTER_OFF},          /* init 28 */
118         {HCI_SUPP_LE_STATES_INIT_MASTER_MASK, HCI_SUPP_LE_STATES_INIT_MASTER_OFF},          /* master 28 */
119         {HCI_SUPP_LE_STATES_CONN_ADV_INIT_MASK, HCI_SUPP_LE_STATES_CONN_ADV_INIT_OFF},      /* slave: 32 */
120         {HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_MASTER_OFF},  /* lo duty cycle adv 37 */
121         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_MASTER_OFF},   /* hi duty cycle adv 36 */
122         {HCI_SUPP_LE_STATES_NON_CONN_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_MASTER_OFF},  /*  non connectable adv */
123         {HCI_SUPP_LE_STATES_PASS_SCAN_MASTER_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_MASTER_OFF},   /*  passive scan */
124         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_MASTER_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_MASTER_OFF},  /*   active scan */
125         {HCI_SUPP_LE_STATES_SCAN_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_MASTER_OFF}   /*  scanable adv */
126
127     },
128     { /* slave */
129         {HCI_SUPP_LE_STATES_CONN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_CONN_ADV_SLAVE_OFF}, /* conn_adv: 38,*/
130         {HCI_SUPP_LE_STATES_INIT_MASTER_SLAVE_MASK, HCI_SUPP_LE_STATES_INIT_MASTER_SLAVE_OFF}, /* init 41 */
131         {HCI_SUPP_LE_STATES_INIT_MASTER_SLAVE_MASK, HCI_SUPP_LE_STATES_INIT_MASTER_SLAVE_OFF}, /* master 41 */
132         {HCI_SUPP_LE_STATES_CONN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_CONN_ADV_SLAVE_OFF},        /* slave: 38,*/
133         {HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_SLAVE_OFF},  /* lo duty cycle adv 40 */
134         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_SLAVE_OFF},   /* hi duty cycle adv 39 */
135         {HCI_SUPP_LE_STATES_NON_CONN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_SLAVE_OFF},  /* non connectable adv */
136         {HCI_SUPP_LE_STATES_PASS_SCAN_SLAVE_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_SLAVE_OFF},   /* passive scan */
137         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_SLAVE_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_SLAVE_OFF},  /*  active scan */
138         {HCI_SUPP_LE_STATES_SCAN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_SLAVE_OFF}   /* scanable adv */
139
140     },
141     { /* lo duty cycle adv */
142         {0, 0}, /* conn_adv: 38,*/
143         {HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_INIT_MASK, HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_INIT_OFF} ,/* init 34 */
144         {HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_MASTER_OFF}, /* master 37 */
145         {HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_LO_DUTY_DIR_ADV_SLAVE_OFF}, /* slave: 40 */
146         {0, 0},  /* lo duty cycle adv 40 */
147         {0, 0},   /* hi duty cycle adv 39 */
148         {0, 0},  /*  non connectable adv */
149         {0, 0},   /* TODO: passive scan, not covered? */
150         {0, 0},  /* TODO:  active scan, not covered? */
151         {0, 0}   /*  scanable adv */
152     },
153     { /* hi duty cycle adv */
154         {0, 0}, /* conn_adv: 38,*/
155         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_INIT_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_INIT_OFF}, /* init 33 */
156         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_MASTER_OFF}, /* master 36 */
157         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_SLAVE_OFF},   /* slave: 39*/
158         {0, 0},  /* lo duty cycle adv 40 */
159         {0, 0},   /* hi duty cycle adv 39 */
160         {0, 0},  /* non connectable adv */
161         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_PASS_SCAN_OFF},   /* passive scan */
162         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_ACTIVE_SCAN_OFF},  /* active scan */
163         {0, 0}   /* scanable adv */
164     },
165     { /* non connectable adv */
166         {0, 0}, /* conn_adv: */
167         {HCI_SUPP_LE_STATES_NON_CONN_INIT_MASK, HCI_SUPP_LE_STATES_NON_CONN_INIT_OFF}, /* init  */
168         {HCI_SUPP_LE_STATES_NON_CONN_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_MASTER_OFF}, /* master  */
169         {HCI_SUPP_LE_STATES_NON_CONN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_SLAVE_OFF},   /* slave: */
170         {0, 0},  /* lo duty cycle adv */
171         {0, 0},   /* hi duty cycle adv */
172         {0, 0},  /* non connectable adv */
173         {HCI_SUPP_LE_STATES_NON_CONN_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_PASS_SCAN_OFF},   /* passive scan */
174         {HCI_SUPP_LE_STATES_NON_CONN_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_ACTIVE_SCAN_OFF},  /*  active scan */
175         {0, 0}   /* scanable adv */
176     },
177     { /* passive scan */
178         {HCI_SUPP_LE_STATES_CONN_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_CONN_ADV_PASS_SCAN_OFF}, /* conn_adv: */
179         {HCI_SUPP_LE_STATES_PASS_SCAN_INIT_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_INIT_OFF}, /* init  */
180         {HCI_SUPP_LE_STATES_PASS_SCAN_MASTER_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_MASTER_OFF}, /* master  */
181         {HCI_SUPP_LE_STATES_PASS_SCAN_SLAVE_MASK, HCI_SUPP_LE_STATES_PASS_SCAN_SLAVE_OFF},   /* slave: */
182         {0, 0},  /* lo duty cycle adv */
183         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_PASS_SCAN_OFF},   /* hi duty cycle adv */
184         {HCI_SUPP_LE_STATES_NON_CONN_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_PASS_SCAN_OFF},  /*  non connectable adv */
185         {0, 0},   /* passive scan */
186         {0, 0},  /* active scan */
187          {HCI_SUPP_LE_STATES_SCAN_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_PASS_SCAN_OFF}   /* scanable adv */
188     },
189     { /* active scan */
190         {HCI_SUPP_LE_STATES_CONN_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_CONN_ADV_ACTIVE_SCAN_OFF}, /* conn_adv: */
191         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_INIT_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_INIT_OFF}, /* init  */
192         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_MASTER_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_MASTER_OFF}, /* master  */
193         {HCI_SUPP_LE_STATES_ACTIVE_SCAN_SLAVE_MASK, HCI_SUPP_LE_STATES_ACTIVE_SCAN_SLAVE_OFF},   /* slave: */
194         {0, 0},  /* lo duty cycle adv */
195         {HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_HI_DUTY_DIR_ADV_ACTIVE_SCAN_OFF},   /* hi duty cycle adv */
196         {HCI_SUPP_LE_STATES_NON_CONN_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_NON_CONN_ADV_ACTIVE_SCAN_OFF},  /*  non connectable adv */
197         {0, 0},   /* TODO: passive scan */
198         {0, 0},  /* TODO:  active scan */
199         {HCI_SUPP_LE_STATES_SCAN_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_ACTIVE_SCAN_OFF}   /*  scanable adv */
200     },
201     { /* scanable adv */
202         {0, 0}, /* conn_adv: */
203         {HCI_SUPP_LE_STATES_SCAN_ADV_INIT_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_INIT_OFF}, /* init  */
204         {HCI_SUPP_LE_STATES_SCAN_ADV_MASTER_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_MASTER_OFF}, /* master  */
205         {HCI_SUPP_LE_STATES_SCAN_ADV_SLAVE_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_SLAVE_OFF},   /* slave: */
206         {0, 0},  /* lo duty cycle adv */
207         {0, 0},   /* hi duty cycle adv */
208         {0, 0},  /* non connectable adv */
209         {HCI_SUPP_LE_STATES_SCAN_ADV_PASS_SCAN_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_PASS_SCAN_OFF},   /*  passive scan */
210         {HCI_SUPP_LE_STATES_SCAN_ADV_ACTIVE_SCAN_MASK, HCI_SUPP_LE_STATES_SCAN_ADV_ACTIVE_SCAN_OFF},  /*  active scan */
211         {0, 0}   /* scanable adv */
212     }
213
214 };
215 /* check LE combo state supported */
216 #define BTM_LE_STATES_SUPPORTED(x, y, z)      ((x)[(z)] & (y))
217
218
219 /*******************************************************************************
220 **
221 ** Function         BTM_BleUpdateAdvWhitelist
222 **
223 ** Description      Add or remove device from advertising white list
224 **
225 ** Returns          void
226 **
227 *******************************************************************************/
228 BOOLEAN BTM_BleUpdateAdvWhitelist(BOOLEAN add_remove, BD_ADDR remote_bda)
229 {
230     UNUSED(add_remove);
231     UNUSED(remote_bda);
232
233     return FALSE;
234 }
235
236 /*******************************************************************************
237 **
238 ** Function         BTM_BleUpdateAdvFilterPolicy
239 **
240 ** Description      This function update the filter policy of advertiser.
241 **
242 ** Parameter        adv_policy: advertising filter policy
243 **
244 ** Return           void
245 *******************************************************************************/
246 void BTM_BleUpdateAdvFilterPolicy(tBTM_BLE_AFP adv_policy)
247 {
248     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
249     tBLE_ADDR_TYPE   init_addr_type = BLE_ADDR_PUBLIC;
250     BD_ADDR          p_addr_ptr= {0};
251     UINT8            adv_mode = p_cb->adv_mode;
252
253     BTM_TRACE_EVENT ("BTM_BleUpdateAdvFilterPolicy");
254
255     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
256         return;
257
258     if (p_cb->afp != adv_policy)
259     {
260         p_cb->afp = adv_policy;
261
262         /* if adv active, stop and restart */
263         btm_ble_stop_adv ();
264
265         if (p_cb->connectable_mode & BTM_BLE_CONNECTABLE)
266             p_cb->evt_type = btm_set_conn_mode_adv_init_addr(p_cb, p_addr_ptr, &init_addr_type,
267                                                               &p_cb->adv_addr_type);
268
269         btsnd_hcic_ble_write_adv_params ((UINT16)(p_cb->adv_interval_min ? p_cb->adv_interval_min :
270                                          BTM_BLE_GAP_ADV_SLOW_INT),
271                                          (UINT16)(p_cb->adv_interval_max ? p_cb->adv_interval_max :
272                                          BTM_BLE_GAP_ADV_SLOW_INT),
273                                          p_cb->evt_type,
274                                          p_cb->adv_addr_type,
275                                          init_addr_type,
276                                          p_addr_ptr,
277                                          p_cb->adv_chnl_map,
278                                          p_cb->afp);
279
280         if (adv_mode == BTM_BLE_ADV_ENABLE)
281             btm_ble_start_adv ();
282
283     }
284 }
285 /*******************************************************************************
286 **
287 ** Function         BTM_BleObserve
288 **
289 ** Description      This procedure keep the device listening for advertising
290 **                  events from a broadcast device.
291 **
292 ** Parameters       start: start or stop observe.
293 **                  white_list: use white list in observer mode or not.
294 **
295 ** Returns          void
296 **
297 *******************************************************************************/
298 tBTM_STATUS BTM_BleObserve(BOOLEAN start, UINT8 duration,
299                            tBTM_INQ_RESULTS_CB *p_results_cb, tBTM_CMPL_CB *p_cmpl_cb)
300 {
301     tBTM_BLE_INQ_CB *p_inq = &btm_cb.ble_ctr_cb.inq_var;
302     tBTM_STATUS     status = BTM_WRONG_MODE;
303
304     BTM_TRACE_EVENT ("BTM_BleObserve : scan_type:%d",btm_cb.btm_inq_vars.scan_type);
305
306     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
307         return BTM_ILLEGAL_VALUE;
308
309     if (start)
310     {
311         /* shared inquiry database, do not allow observe if any inquiry is active */
312         if (BTM_BLE_IS_OBS_ACTIVE(btm_cb.ble_ctr_cb.scan_activity))
313         {
314             BTM_TRACE_ERROR("Observe Already Active");
315             return status;
316         }
317
318         btm_cb.ble_ctr_cb.p_obs_results_cb = p_results_cb;
319         btm_cb.ble_ctr_cb.p_obs_cmpl_cb = p_cmpl_cb;
320         status = BTM_CMD_STARTED;
321
322         /* scan is not started */
323         if (!BTM_BLE_IS_SCAN_ACTIVE(btm_cb.ble_ctr_cb.scan_activity))
324         {
325             p_inq->scan_type = (p_inq->scan_type == BTM_BLE_SCAN_MODE_NONE) ? BTM_BLE_SCAN_MODE_ACTI: p_inq->scan_type;
326             /* allow config scanning type */
327             btsnd_hcic_ble_set_scan_params (p_inq->scan_type,
328                                             (UINT16)(!p_inq->scan_interval ? BTM_BLE_GAP_DISC_SCAN_INT : p_inq->scan_interval),
329                                             (UINT16)(!p_inq->scan_window ? BTM_BLE_GAP_DISC_SCAN_WIN : p_inq->scan_window),
330                                             btm_cb.ble_ctr_cb.addr_mgnt_cb.own_addr_type,
331                                             BTM_BLE_DEFAULT_SFP); /* assume observe always not using white list */
332
333 #if (defined BLE_VND_INCLUDED && BLE_VND_INCLUDED == TRUE)
334 #if (defined BLE_PRIVACY_SPT && BLE_PRIVACY_SPT == TRUE)
335             /* enable IRK list */
336             btm_ble_vendor_irk_list_known_dev (TRUE);
337 #endif
338 #endif
339             status = btm_ble_start_scan(BTM_BLE_DUPLICATE_DISABLE);
340         }
341         if (status == BTM_CMD_STARTED)
342         {
343             btm_cb.ble_ctr_cb.scan_activity |= BTM_LE_OBSERVE_ACTIVE;
344
345             if (duration != 0)
346                 /* start observer timer */
347                 btu_start_timer (&btm_cb.ble_ctr_cb.obs_timer_ent, BTU_TTYPE_BLE_OBSERVE, duration);
348         }
349     }
350     else if (BTM_BLE_IS_OBS_ACTIVE(btm_cb.ble_ctr_cb.scan_activity))
351     {
352         status = BTM_CMD_STARTED;
353         btm_ble_stop_observe();
354     }
355     else
356     {
357         BTM_TRACE_ERROR("Observe not active");
358     }
359
360     return status;
361
362 }
363
364 /*******************************************************************************
365 **
366 ** Function         BTM_BleBroadcast
367 **
368 ** Description      This function is to start or stop broadcasting.
369 **
370 ** Parameters       start: start or stop broadcasting.
371 **
372 ** Returns          status.
373 **
374 *******************************************************************************/
375 tBTM_STATUS BTM_BleBroadcast(BOOLEAN start)
376 {
377     tBTM_STATUS status = BTM_NO_RESOURCES;
378     tBTM_LE_RANDOM_CB *p_addr_cb = &btm_cb.ble_ctr_cb.addr_mgnt_cb;
379     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
380     UINT8 evt_type = p_cb->scan_rsp ? BTM_BLE_DISCOVER_EVT: BTM_BLE_NON_CONNECT_EVT;
381
382     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
383         return BTM_ILLEGAL_VALUE;
384
385 #ifdef  BTM_BLE_PC_ADV_TEST_MODE
386     if (BTM_BLE_PC_ADV_TEST_MODE)
387     {
388         evt_type = p_cb->scan_rsp ? BTM_BLE_CONNECT_EVT: BTM_BLE_NON_CONNECT_EVT;
389     }
390 #endif
391
392     if (start && p_cb->adv_mode == BTM_BLE_ADV_DISABLE)
393     {
394         /* update adv params */
395         if (!btsnd_hcic_ble_write_adv_params ((UINT16)(p_cb->adv_interval_min ? p_cb->adv_interval_min :
396                                               BTM_BLE_GAP_ADV_INT),
397                                               (UINT16)(p_cb->adv_interval_max ? p_cb->adv_interval_max :
398                                               BTM_BLE_GAP_ADV_INT),
399                                               evt_type,
400                                               p_addr_cb->own_addr_type,
401                                               p_cb->direct_bda.type,
402                                               p_cb->direct_bda.bda,
403                                               p_cb->adv_chnl_map,
404                                               p_cb->afp))
405
406             status = BTM_NO_RESOURCES;
407         else
408             p_cb->evt_type = evt_type;
409
410         status = btm_ble_start_adv ();
411     }
412     else if (!start)
413     {
414         status = btm_ble_stop_adv();
415     }
416     else
417     {
418         status = BTM_WRONG_MODE;
419         BTM_TRACE_ERROR("Can not %s Broadcast, device %s in Broadcast mode",
420             (start ? "Start" : "Stop"), (start ? "already" :"not"));
421     }
422     return status;
423 }
424
425 /*******************************************************************************
426 **
427 ** Function         btm_vsc_brcm_features_complete
428 **
429 ** Description      Command Complete callback for HCI_BLE_VENDOR_CAP_OCF
430 **
431 ** Returns          void
432 **
433 *******************************************************************************/
434 static void btm_ble_vendor_capability_vsc_cmpl_cback (tBTM_VSC_CMPL *p_vcs_cplt_params)
435 {
436 #if BLE_VND_INCLUDED == TRUE
437     UINT8  status = 0xFF, *p;
438     UINT8  rpa_offloading, max_irk_list_sz, filtering_support, max_filter;
439     UINT16 scan_result_storage;
440     tBTM_BLE_VENDOR_CB  *p_vcb = &btm_ble_vendor_cb;
441     max_irk_list_sz = 0;
442
443     BTM_TRACE_DEBUG("btm_ble_vendor_capability_vsc_cmpl_cback");
444
445     /* Check status of command complete event */
446     if((p_vcs_cplt_params->opcode == HCI_BLE_VENDOR_CAP_OCF)
447         &&(p_vcs_cplt_params->param_len > 0 ))
448     {
449         p = p_vcs_cplt_params->p_param_buf;
450         STREAM_TO_UINT8  (status, p);
451     }
452
453     if(status == HCI_SUCCESS)
454     {
455         STREAM_TO_UINT8  (btm_cb.cmn_ble_vsc_cb.adv_inst_max, p);
456         STREAM_TO_UINT8  (btm_cb.cmn_ble_vsc_cb.rpa_offloading, p);
457         STREAM_TO_UINT16 (btm_cb.cmn_ble_vsc_cb.tot_scan_results_strg, p);
458         STREAM_TO_UINT8  (btm_cb.cmn_ble_vsc_cb.max_irk_list_sz, p);
459         STREAM_TO_UINT8  (btm_cb.cmn_ble_vsc_cb.filter_support, p);
460         STREAM_TO_UINT8  (btm_cb.cmn_ble_vsc_cb.max_filter, p);
461         STREAM_TO_UINT8  (btm_cb.cmn_ble_vsc_cb.energy_support, p);
462     }
463
464     p_vcb->irk_avail_size = max_irk_list_sz;
465
466     if (p_ctrl_le_feature_rd_cmpl_cback != NULL)
467         p_ctrl_le_feature_rd_cmpl_cback(status);
468
469     BTM_TRACE_DEBUG("btm_ble_vendor_capability_vsc_cmpl_cback: status=%d, max_irk_size=%d",
470          status, btm_ble_vendor_cb.irk_avail_size);
471 #else
472     UNUSED(p_vcs_cplt_params);
473 #endif
474 }
475
476 /*******************************************************************************
477 **
478 ** Function         BTM_BleGetVendorCapabilities
479 **
480 ** Description      This function reads local LE features
481 **
482 ** Parameters       p_cmn_vsc_cb : Locala LE capability structure
483 **
484 ** Returns          void
485 **
486 *******************************************************************************/
487 BTM_API extern void BTM_BleGetVendorCapabilities(tBTM_BLE_VSC_CB *p_cmn_vsc_cb)
488 {
489     BTM_TRACE_DEBUG("BTM_BleGetVendorCapabilities");
490
491     if(NULL != p_cmn_vsc_cb)
492     {
493         *p_cmn_vsc_cb = btm_cb.cmn_ble_vsc_cb;
494     }
495 }
496
497 /******************************************************************************
498 **
499 ** Function         BTM_BleReadControllerFeatures
500 **
501 ** Description      Reads BLE specific controller features
502 **
503 ** Parameters:      tBTM_BLE_CTRL_FEATURES_CBACK : Callback to notify when features are read
504 **
505 ** Returns          void
506 **
507 *******************************************************************************/
508 BTM_API extern void BTM_BleReadControllerFeatures(tBTM_BLE_CTRL_FEATURES_CBACK  *p_vsc_cback)
509 {
510 #if BLE_VND_INCLUDED == TRUE
511     BTM_TRACE_DEBUG("BTM_BleReadControllerFeatures");
512
513     memset(&btm_ble_vendor_cb, 0, sizeof(tBTM_BLE_VENDOR_CB));
514
515     p_ctrl_le_feature_rd_cmpl_cback = p_vsc_cback;
516     if ( BTM_VendorSpecificCommand (HCI_BLE_VENDOR_CAP_OCF,
517                                     0,
518                                     NULL,
519                                     btm_ble_vendor_capability_vsc_cmpl_cback)
520                                     != BTM_CMD_STARTED)
521     {
522         BTM_TRACE_ERROR("LE Get_Vendor Capabilities Command Failed.");
523     }
524 #else
525     UNUSED(p_vsc_cback);
526 #endif
527     return ;
528 }
529
530 /*******************************************************************************
531 **
532 ** Function         BTM_RegisterScanReqEvt
533 **
534 ** Description      This function is called to register a scan request callback
535 **                  on the advertiser.
536 **
537 ** Parameters       p_scan_req_cback: scan request callback.  If NULL, remove the
538 **                                    registration.
539 **
540 ** Returns          void
541 **
542 *******************************************************************************/
543 void BTM_RegisterScanReqEvt(tBTM_BLE_SCAN_REQ_CBACK   *p_scan_req_cback)
544 {
545 #ifdef BTM_BLE_PC_ADV_TEST_MODE /* For general stack code (e.g. BTInsight testing), we simply do not define it to exclude or set it to TRUE to include */
546     if (BTM_BLE_PC_ADV_TEST_MODE)   /* For stack component, it is always defined and maps to a global variable g_bDraculaAdvertisingMode */
547     {
548         tBTM_BLE_CB *p_cb = &btm_cb.ble_ctr_cb;
549         p_cb->p_scan_req_cback = p_scan_req_cback;
550     }
551 #else
552     UNUSED(p_scan_req_cback);
553 #endif
554 }
555
556 #if BLE_PRIVACY_SPT == TRUE
557 /*******************************************************************************
558 **
559 ** Function         BTM_BleConfigPrivacy
560 **
561 ** Description      This function is called to enable or disable the privacy in
562 **                   LE channel of the local device.
563 **
564 ** Parameters       enable: TRUE to enable it; FALSE to disable it.
565 **
566 ** Returns          void
567 **
568 *******************************************************************************/
569 void BTM_BleConfigPrivacy(BOOLEAN enable)
570 {
571     tBTM_BLE_CB     *p_cb = &btm_cb.ble_ctr_cb;
572
573     BTM_TRACE_EVENT (" BTM_BleConfigPrivacy");
574
575     if (p_cb->privacy != enable)
576     {
577         p_cb->privacy = enable;
578
579         if (p_cb->privacy)
580         {
581             /* generate resolvable private address */
582             btm_gen_resolvable_private_addr(NULL);
583         }
584         else /* if privacy disabled, always use public address */
585         {
586             p_cb->addr_mgnt_cb.own_addr_type = BLE_ADDR_PUBLIC;
587         }
588         btm_ble_multi_adv_enb_privacy(p_cb->privacy);
589     }
590 }
591
592 /*******************************************************************************
593 **
594 ** Function         btm_ble_resolve_random_addr_on_adv
595 **
596 ** Description      resolve random address complete callback.
597 **
598 ** Returns          void
599 **
600 *******************************************************************************/
601 static void btm_ble_resolve_random_addr_on_adv(void * p_rec, void *p)
602 {
603     tBTM_SEC_DEV_REC    *match_rec = (tBTM_SEC_DEV_REC *) p_rec;
604     UINT8       addr_type = BLE_ADDR_RANDOM;
605     BD_ADDR     bda;
606     UINT8       *pp = (UINT8 *)p + 1;
607     UINT8           evt_type;
608
609     BTM_TRACE_EVENT ("btm_ble_resolve_random_addr_on_adv ");
610
611     STREAM_TO_UINT8    (evt_type, pp);
612     STREAM_TO_UINT8    (addr_type, pp);
613     STREAM_TO_BDADDR   (bda, pp);
614
615     if (match_rec)
616     {
617         BTM_TRACE_ERROR("Random match");
618         match_rec->ble.active_addr_type = BTM_BLE_ADDR_RRA;
619         memcpy(match_rec->ble.cur_rand_addr, bda, BD_ADDR_LEN);
620         memcpy(bda, match_rec->bd_addr, BD_ADDR_LEN);
621         addr_type = match_rec->ble.ble_addr_type;
622     }
623     else
624     {
625         BTM_TRACE_ERROR("Random unmatch");
626     }
627
628     btm_ble_process_adv_pkt_cont(bda, addr_type, evt_type, pp);
629
630     return;
631 }
632 #endif
633
634 /*******************************************************************************
635 **
636 ** Function         BTM_BleLocalPrivacyEnabled
637 **
638 ** Description        Checks if local device supports private address
639 **
640 ** Returns          Return TRUE if local privacy is enabled else FALSE
641 **
642 *******************************************************************************/
643 BOOLEAN BTM_BleLocalPrivacyEnabled()
644 {
645 #if BLE_PRIVACY_SPT == TRUE
646     return btm_cb.ble_ctr_cb.privacy;
647 #else
648     return false;
649 #endif
650 }
651
652 /*******************************************************************************
653 **
654 ** Function         BTM_BleSetBgConnType
655 **
656 ** Description      This function is called to set BLE connectable mode for a
657 **                  peripheral device.
658 **
659 ** Parameters       bg_conn_type: it can be auto connection, or selective connection.
660 **                  p_select_cback: callback function when selective connection procedure
661 **                              is being used.
662 **
663 ** Returns          void
664 **
665 *******************************************************************************/
666 BOOLEAN BTM_BleSetBgConnType(tBTM_BLE_CONN_TYPE   bg_conn_type,
667                              tBTM_BLE_SEL_CBACK   *p_select_cback)
668 {
669     BOOLEAN started = TRUE;
670
671     BTM_TRACE_EVENT ("BTM_BleSetBgConnType ");
672     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
673         return FALSE;
674
675     if (btm_cb.ble_ctr_cb.bg_conn_type != bg_conn_type)
676     {
677         switch (bg_conn_type)
678         {
679             case BTM_BLE_CONN_AUTO:
680                 btm_ble_start_auto_conn(TRUE);
681                 break;
682
683             case BTM_BLE_CONN_SELECTIVE:
684                 if (btm_cb.ble_ctr_cb.bg_conn_type == BTM_BLE_CONN_AUTO)
685                 {
686                     btm_ble_start_auto_conn(FALSE);
687                 }
688                 started = btm_ble_start_select_conn(TRUE, p_select_cback);
689                 break;
690
691             case BTM_BLE_CONN_NONE:
692                 if (btm_cb.ble_ctr_cb.bg_conn_type == BTM_BLE_CONN_AUTO)
693                 {
694                     btm_ble_start_auto_conn(FALSE);
695                 }
696                 else if (btm_cb.ble_ctr_cb.bg_conn_type == BTM_BLE_CONN_SELECTIVE)
697                 {
698                     btm_ble_start_select_conn(FALSE, NULL);
699                 }
700                 started = TRUE;
701                 break;
702
703             default:
704                 BTM_TRACE_ERROR("invalid bg connection type : %d ", bg_conn_type);
705                 started = FALSE;
706                 break;
707         }
708
709         if (started)
710             btm_cb.ble_ctr_cb.bg_conn_type = bg_conn_type;
711     }
712     return started;
713 }
714
715 /*******************************************************************************
716 **
717 ** Function         BTM_BleClearBgConnDev
718 **
719 ** Description      This function is called to clear the whitelist,
720 **                  end any pending whitelist connections,
721 *                   and reset the local bg device list.
722 **
723 ** Parameters       void
724 **
725 ** Returns          void
726 **
727 *******************************************************************************/
728 void BTM_BleClearBgConnDev(void)
729 {
730     btm_ble_start_auto_conn(FALSE);
731     btm_ble_clear_white_list();
732     gatt_reset_bgdev_list();
733 }
734
735 /*******************************************************************************
736 **
737 ** Function         BTM_BleUpdateBgConnDev
738 **
739 ** Description      This function is called to add or remove a device into/from
740 **                  background connection procedure. The background connection
741 *                   procedure is decided by the background connection type, it can be
742 *                   auto connection, or selective connection.
743 **
744 ** Parameters       add_remove: TRUE to add; FALSE to remove.
745 **                  remote_bda: device address to add/remove.
746 **
747 ** Returns          void
748 **
749 *******************************************************************************/
750 BOOLEAN BTM_BleUpdateBgConnDev(BOOLEAN add_remove, BD_ADDR   remote_bda)
751 {
752     BOOLEAN ret = TRUE;
753     UINT8   dev_wl_type = 0;
754     BTM_TRACE_EVENT (" BTM_BleUpdateBgConnDev");
755
756     /* update white list */
757     ret = btm_update_bg_conn_list(add_remove, remote_bda, &dev_wl_type);
758
759     btm_update_dev_to_white_list(add_remove, remote_bda, dev_wl_type);
760
761     return ret;
762 }
763
764 /*******************************************************************************
765 **
766 ** Function         BTM_BleSetConnMode
767 **
768 ** Description      This function is called to set BLE connectable mode for a
769 **                  peripheral device.
770 **
771 ** Parameters       directed: is directed connectable mode, or non-directed.
772 **                  p_dir_bda: connectable direct initiator's LE device address
773 **
774 ** Returns          void
775 **
776 *******************************************************************************/
777 tBTM_STATUS BTM_BleSetConnMode(BOOLEAN is_directed)
778 {
779     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
780
781     BTM_TRACE_EVENT ("BTM_BleSetConnMode is_directed = %d ", is_directed);
782     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
783         return BTM_ILLEGAL_VALUE;
784
785     p_cb->directed_conn = is_directed;
786     return btm_ble_set_connectability( p_cb->connectable_mode);
787
788 }
789
790 /*******************************************************************************
791 **
792 ** Function         btm_set_conn_mode_adv_init_addr
793 **
794 ** Description      set initator address type and local address type based on adv
795 **                  mode.
796 **
797 **
798 *******************************************************************************/
799 static UINT8 btm_set_conn_mode_adv_init_addr(tBTM_BLE_INQ_CB *p_cb,
800                                      BD_ADDR_PTR p_addr_ptr,
801                                      tBLE_ADDR_TYPE *p_init_addr_type,
802                                      tBLE_ADDR_TYPE *p_own_addr_type)
803 {
804     UINT8 evt_type;
805
806     UNUSED(p_own_addr_type);
807
808     if ( p_cb->directed_conn)
809     {
810         /*  direct adv mode does not have privacy if privacy
811         is not enabled or no reconn addr config */
812
813         *p_init_addr_type  = p_cb->direct_bda.type;
814          memcpy(p_addr_ptr, p_cb->direct_bda.bda, BD_ADDR_LEN);
815         evt_type = BTM_BLE_CONNECT_DIR_EVT;
816     }
817     else /* undirect adv mode */
818     {
819         evt_type = BTM_BLE_CONNECT_EVT;
820
821 #if BLE_PRIVACY_SPT == TRUE
822         /* may need to reset random address if privacy is enabled */
823         if (btm_cb.ble_ctr_cb.privacy && /* own addr_type is random */
824             !BTM_BLE_IS_RESOLVE_BDA(btm_cb.ble_ctr_cb.addr_mgnt_cb.private_addr))
825         {
826             /* need to generate RRA and update random addresss in controller */
827             btm_gen_resolvable_private_addr((void *)btm_gen_resolve_paddr_low);
828         }
829 #endif
830     }
831
832     return evt_type;
833
834 }
835
836 /*******************************************************************************
837 **
838 ** Function         BTM_BleSetAdvParams
839 **
840 ** Description      This function is called to set advertising parameters.
841 **
842 ** Parameters       adv_int_min: minimum advertising interval
843 **                  adv_int_max: maximum advertising interval
844 **                  p_dir_bda: connectable direct initiator's LE device address
845 **                  chnl_map: advertising channel map.
846 **
847 ** Returns          void
848 **
849 *******************************************************************************/
850 tBTM_STATUS BTM_BleSetAdvParams(UINT16 adv_int_min, UINT16 adv_int_max,
851                                 tBLE_BD_ADDR *p_dir_bda,
852                                 tBTM_BLE_ADV_CHNL_MAP chnl_map)
853 {
854     tBTM_LE_RANDOM_CB *p_addr_cb = &btm_cb.ble_ctr_cb.addr_mgnt_cb;
855     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
856     tBTM_STATUS status = BTM_SUCCESS;
857     BD_ADDR     p_addr_ptr =  {0};
858     tBLE_ADDR_TYPE   init_addr_type = BLE_ADDR_PUBLIC;
859     tBLE_ADDR_TYPE   own_addr_type = p_addr_cb->own_addr_type;
860     UINT8            adv_mode = p_cb->adv_mode;
861
862     BTM_TRACE_EVENT ("BTM_BleSetAdvParams");
863
864     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
865         return BTM_ILLEGAL_VALUE;
866
867     if (!BTM_BLE_VALID_PRAM(adv_int_min, BTM_BLE_ADV_INT_MIN, BTM_BLE_ADV_INT_MAX) ||
868         !BTM_BLE_VALID_PRAM(adv_int_max, BTM_BLE_ADV_INT_MIN, BTM_BLE_ADV_INT_MAX))
869     {
870         return BTM_ILLEGAL_VALUE;
871     }
872
873     p_cb->adv_interval_min = adv_int_min;
874     p_cb->adv_interval_max = adv_int_max;
875     p_cb->adv_chnl_map = chnl_map;
876
877     if (p_dir_bda)
878     {
879         memcpy(&p_cb->direct_bda, p_dir_bda, sizeof(tBLE_BD_ADDR));
880     }
881
882     BTM_TRACE_EVENT ("update params for an active adv");
883
884     btm_ble_stop_adv();
885
886     if (p_cb->connectable_mode & BTM_BLE_CONNECTABLE)
887         p_cb->evt_type = btm_set_conn_mode_adv_init_addr(p_cb, p_addr_ptr, &init_addr_type, &own_addr_type);
888
889     /* update adv params */
890     btsnd_hcic_ble_write_adv_params (p_cb->adv_interval_min,
891                                      p_cb->adv_interval_max,
892                                      p_cb->evt_type,
893                                      own_addr_type,
894                                      init_addr_type,
895                                      p_addr_ptr,
896                                      p_cb->adv_chnl_map,
897                                      p_cb->afp);
898
899     if (adv_mode == BTM_BLE_ADV_ENABLE)
900         btm_ble_start_adv();
901
902     return status;
903 }
904
905 /*******************************************************************************
906 **
907 ** Function         BTM_BleReadAdvParams
908 **
909 ** Description      This function is called to set advertising parameters.
910 **
911 ** Parameters       adv_int_min: minimum advertising interval
912 **                  adv_int_max: maximum advertising interval
913 **                  p_dir_bda: connectable direct initiator's LE device address
914 **                  chnl_map: advertising channel map.
915 **
916 ** Returns          void
917 **
918 *******************************************************************************/
919 void BTM_BleReadAdvParams (UINT16 *adv_int_min, UINT16 *adv_int_max,
920                            tBLE_BD_ADDR *p_dir_bda, tBTM_BLE_ADV_CHNL_MAP *p_chnl_map)
921 {
922     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
923
924     BTM_TRACE_EVENT ("BTM_BleReadAdvParams ");
925     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
926         return ;
927
928     *adv_int_min = p_cb->adv_interval_min;
929     *adv_int_max = p_cb->adv_interval_max;
930     *p_chnl_map = p_cb->adv_chnl_map;
931
932     if (p_dir_bda != NULL)
933     {
934         memcpy(p_dir_bda, &p_cb->direct_bda, sizeof(tBLE_BD_ADDR));
935     }
936 }
937
938 /*******************************************************************************
939 **
940 ** Function         BTM_BleSetScanParams
941 **
942 ** Description      This function is called to set Scan parameters.
943 **
944 ** Parameters       adv_int_min: minimum advertising interval
945 **                  adv_int_max: maximum advertising interval
946 **                  p_dir_bda: connectable direct initiator's LE device address
947 **                  chnl_map: advertising channel map.
948 **                  scan_type: active scan or passive scan
949 **
950 ** Returns          void
951 **
952 *******************************************************************************/
953 void BTM_BleSetScanParams(UINT16 scan_interval, UINT16 scan_window, tBTM_BLE_SCAN_MODE scan_mode)
954 {
955     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
956
957     BTM_TRACE_EVENT (" BTM_BleSetScanParams");
958     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
959         return ;
960
961     if (BTM_BLE_VALID_PRAM(scan_interval, BTM_BLE_SCAN_INT_MIN, BTM_BLE_SCAN_INT_MAX) &&
962         BTM_BLE_VALID_PRAM(scan_window, BTM_BLE_SCAN_WIN_MIN, BTM_BLE_SCAN_WIN_MAX) &&
963         (scan_mode == BTM_BLE_SCAN_MODE_ACTI || scan_mode == BTM_BLE_SCAN_MODE_PASS))
964     {
965         p_cb->scan_type     = scan_mode;
966
967         if (BTM_BLE_CONN_PARAM_UNDEF != scan_interval)
968             p_cb->scan_interval = scan_interval;
969
970         if (BTM_BLE_CONN_PARAM_UNDEF != scan_window)
971             p_cb->scan_window   = scan_window;
972     }
973     else
974     {
975         BTM_TRACE_ERROR("Illegal params: scan_interval = %d scan_window = %d",
976                         scan_interval, scan_window);
977     }
978
979 }
980
981 /*******************************************************************************
982 **
983 ** Function         BTM_BleWriteScanRsp
984 **
985 ** Description      This function is called to write LE scan response.
986 **
987 ** Parameters:      p_scan_rsp: scan response information.
988 **
989 ** Returns          void
990 **
991 *******************************************************************************/
992 tBTM_STATUS BTM_BleWriteScanRsp(tBTM_BLE_AD_MASK data_mask, tBTM_BLE_ADV_DATA *p_data)
993 {
994     tBTM_STATUS     status = BTM_NO_RESOURCES;
995     UINT8   rsp_data[BTM_BLE_AD_DATA_LEN],
996             *p = rsp_data;
997
998     BTM_TRACE_EVENT (" BTM_BleWriteScanRsp");
999
1000     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
1001         return BTM_ILLEGAL_VALUE;
1002
1003     memset(rsp_data, 0, BTM_BLE_AD_DATA_LEN);
1004     btm_ble_build_adv_data(&data_mask, &p, p_data);
1005
1006     if (btsnd_hcic_ble_set_scan_rsp_data((UINT8)(p - rsp_data), rsp_data))
1007     {
1008         status = BTM_SUCCESS;
1009
1010         if (data_mask != 0)
1011             btm_cb.ble_ctr_cb.inq_var.scan_rsp = TRUE;
1012         else
1013             btm_cb.ble_ctr_cb.inq_var.scan_rsp = FALSE;
1014     }
1015     else
1016         status = BTM_ILLEGAL_VALUE;
1017
1018     return status;
1019 }
1020
1021 /*******************************************************************************
1022 **
1023 ** Function         BTM_BleWriteAdvData
1024 **
1025 ** Description      This function is called to write advertising data.
1026 **
1027 ** Parameters:       None.
1028 **
1029 ** Returns          void
1030 **
1031 *******************************************************************************/
1032 tBTM_STATUS BTM_BleWriteAdvData(tBTM_BLE_AD_MASK data_mask, tBTM_BLE_ADV_DATA *p_data)
1033 {
1034     tBTM_BLE_LOCAL_ADV_DATA *p_cb_data = &btm_cb.ble_ctr_cb.inq_var.adv_data;
1035     UINT8  *p;
1036     tBTM_BLE_AD_MASK   mask = data_mask;
1037
1038     BTM_TRACE_EVENT ("BTM_BleWriteAdvData ");
1039
1040     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
1041         return BTM_ILLEGAL_VALUE;
1042
1043     memset(p_cb_data, 0, sizeof(tBTM_BLE_LOCAL_ADV_DATA));
1044     p = p_cb_data->ad_data;
1045     p_cb_data->data_mask = data_mask;
1046
1047     p_cb_data->p_flags = btm_ble_build_adv_data(&mask, &p, p_data);
1048
1049     p_cb_data->p_pad = p;
1050
1051     if (mask != 0)
1052     {
1053         BTM_TRACE_ERROR("Partial data write into ADV");
1054     }
1055
1056     p_cb_data->data_mask &= ~mask;
1057
1058     if (btsnd_hcic_ble_set_adv_data((UINT8)(p_cb_data->p_pad - p_cb_data->ad_data),
1059                                     p_cb_data->ad_data))
1060         return BTM_SUCCESS;
1061     else
1062         return BTM_NO_RESOURCES;
1063
1064 }
1065
1066 /*******************************************************************************
1067 **
1068 ** Function         BTM_CheckAdvData
1069 **
1070 ** Description      This function is called to get ADV data for a specific type.
1071 **
1072 ** Parameters       p_adv - pointer of ADV data
1073 **                  type   - finding ADV data type
1074 **                  p_length - return the length of ADV data not including type
1075 **
1076 ** Returns          pointer of ADV data
1077 **
1078 *******************************************************************************/
1079 UINT8 *BTM_CheckAdvData( UINT8 *p_adv, UINT8 type, UINT8 *p_length)
1080 {
1081     UINT8 *p = p_adv;
1082     UINT8 length;
1083     UINT8 adv_type;
1084     BTM_TRACE_API("BTM_CheckAdvData type=0x%02X", type);
1085
1086     STREAM_TO_UINT8(length, p);
1087
1088     while ( length && (p - p_adv <= BTM_BLE_CACHE_ADV_DATA_MAX))
1089     {
1090         STREAM_TO_UINT8(adv_type, p);
1091
1092         if ( adv_type == type )
1093         {
1094             /* length doesn't include itself */
1095             *p_length = length - 1; /* minus the length of type */
1096             return p;
1097         }
1098         p += length - 1; /* skip the length of data */
1099         STREAM_TO_UINT8(length, p);
1100     }
1101
1102     *p_length = 0;
1103     return NULL;
1104 }
1105
1106 /*******************************************************************************
1107 **
1108 ** Function         btm_ble_build_adv_data
1109 **
1110 ** Description      This function is called build the adv data and rsp data.
1111 *******************************************************************************/
1112 UINT8 *btm_ble_build_adv_data(tBTM_BLE_AD_MASK *p_data_mask, UINT8 **p_dst,
1113                               tBTM_BLE_ADV_DATA *p_data)
1114 {
1115     UINT32 data_mask = *p_data_mask;
1116     UINT8   *p = *p_dst,
1117     *p_flag = NULL;
1118     UINT16  len = BTM_BLE_AD_DATA_LEN, cp_len = 0;
1119     UINT8   i = 0;
1120     tBTM_BLE_PROP_ELEM      *p_elem;
1121
1122     BTM_TRACE_EVENT (" btm_ble_build_adv_data");
1123
1124     /* build the adv data structure and build the data string */
1125     if (data_mask)
1126     {
1127         /* flags */
1128         if (data_mask & BTM_BLE_AD_BIT_FLAGS)
1129         {
1130             *p++ = MIN_ADV_LENGTH;
1131             *p++ = BTM_BLE_AD_TYPE_FLAG;
1132             p_flag = p;
1133             if (p_data)
1134                 *p++ = p_data->flag;
1135             else
1136                 *p++ = 0;
1137
1138             len -= 3;
1139
1140             data_mask &= ~BTM_BLE_AD_BIT_FLAGS;
1141         }
1142         /* appearance data */
1143         if (len > 3 && data_mask & BTM_BLE_AD_BIT_APPEARANCE)
1144         {
1145             *p++ = 3; /* length */
1146             *p++ = BTM_BLE_AD_TYPE_APPEARANCE;
1147             UINT16_TO_STREAM(p, p_data->appearance);
1148             len -= 4;
1149
1150             data_mask &= ~BTM_BLE_AD_BIT_APPEARANCE;
1151         }
1152         /* device name */
1153 #if BTM_MAX_LOC_BD_NAME_LEN > 0
1154         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_DEV_NAME)
1155         {
1156             if (strlen(btm_cb.cfg.bd_name) > (UINT16)(len - MIN_ADV_LENGTH))
1157             {
1158                 *p++ = len - MIN_ADV_LENGTH + 1;
1159                 *p++ = BTM_BLE_AD_TYPE_NAME_SHORT;
1160                 ARRAY_TO_STREAM(p, btm_cb.cfg.bd_name, len - MIN_ADV_LENGTH);
1161             }
1162             else
1163             {
1164                 cp_len = (UINT16)strlen(btm_cb.cfg.bd_name);
1165                 *p++ = cp_len + 1;
1166                 *p++ = BTM_BLE_AD_TYPE_NAME_CMPL;
1167                 ARRAY_TO_STREAM(p, btm_cb.cfg.bd_name, cp_len);
1168             }
1169             len -= (cp_len + MIN_ADV_LENGTH);
1170             data_mask &= ~BTM_BLE_AD_BIT_DEV_NAME;
1171         }
1172 #endif
1173         /* manufacturer data */
1174         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_MANU &&
1175             p_data && p_data->p_manu &&
1176             p_data->p_manu->len != 0 && p_data->p_manu->p_val)
1177         {
1178             if (p_data->p_manu->len > (len - MIN_ADV_LENGTH))
1179                 cp_len = len - MIN_ADV_LENGTH;
1180             else
1181                 cp_len = p_data->p_manu->len;
1182
1183             *p++ = cp_len + 1;
1184             *p++ = BTM_BLE_AD_TYPE_MANU;
1185             ARRAY_TO_STREAM(p, p_data->p_manu->p_val, cp_len);
1186
1187             len -= (cp_len + MIN_ADV_LENGTH);
1188             data_mask &= ~BTM_BLE_AD_BIT_MANU;
1189         }
1190         /* TX power */
1191         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_TX_PWR)
1192         {
1193             *p++ = MIN_ADV_LENGTH;
1194             *p++ = BTM_BLE_AD_TYPE_TX_PWR;
1195             if (p_data->tx_power > BTM_BLE_ADV_TX_POWER_MAX)
1196                 p_data->tx_power = BTM_BLE_ADV_TX_POWER_MAX;
1197             *p++ = btm_ble_map_adv_tx_power(p_data->tx_power);
1198             len -= 3;
1199             data_mask &= ~BTM_BLE_AD_BIT_TX_PWR;
1200         }
1201         /* 16 bits services */
1202         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_SERVICE &&
1203             p_data && p_data->p_services &&
1204             p_data->p_services->num_service != 0 &&
1205             p_data->p_services->p_uuid)
1206         {
1207             if (p_data->p_services->num_service * LEN_UUID_16 > (len - MIN_ADV_LENGTH))
1208             {
1209                 cp_len = (len - MIN_ADV_LENGTH)/LEN_UUID_16;
1210                 *p ++ = 1 + cp_len * LEN_UUID_16;
1211                 *p++ = BTM_BLE_AD_TYPE_16SRV_PART;
1212             }
1213             else
1214             {
1215                 cp_len = p_data->p_services->num_service;
1216                 *p++ = 1 + cp_len * LEN_UUID_16;
1217                 *p++ = BTM_BLE_AD_TYPE_16SRV_CMPL;
1218             }
1219             for (i = 0; i < cp_len; i ++)
1220             {
1221                 UINT16_TO_STREAM(p, *(p_data->p_services->p_uuid + i));
1222             }
1223
1224             len -= (cp_len * MIN_ADV_LENGTH + MIN_ADV_LENGTH);
1225             data_mask &= ~BTM_BLE_AD_BIT_SERVICE;
1226         }
1227         /* 32 bits service uuid */
1228         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_SERVICE_32 &&
1229             p_data && p_data->p_service_32b &&
1230             p_data->p_service_32b->num_service != 0 &&
1231             p_data->p_service_32b->p_uuid)
1232         {
1233             if ((p_data->p_service_32b->num_service * LEN_UUID_32) > (len - MIN_ADV_LENGTH))
1234             {
1235                 cp_len = (len - MIN_ADV_LENGTH)/LEN_UUID_32;
1236                 *p ++ = 1 + cp_len * LEN_UUID_32;
1237                 *p++ = BTM_BLE_AD_TYPE_32SRV_PART;
1238             }
1239             else
1240             {
1241                 cp_len = p_data->p_service_32b->num_service;
1242                 *p++ = 1 + cp_len * LEN_UUID_32;
1243                 *p++ = BTM_BLE_AD_TYPE_32SRV_CMPL;
1244             }
1245             for (i = 0; i < cp_len; i ++)
1246             {
1247                 UINT32_TO_STREAM(p, *(p_data->p_service_32b->p_uuid + i));
1248             }
1249
1250             len -= (cp_len * LEN_UUID_32 + MIN_ADV_LENGTH);
1251             data_mask &= ~BTM_BLE_AD_BIT_SERVICE_32;
1252         }
1253         /* 128 bits services */
1254         if (len >= (MAX_UUID_SIZE + 2) && data_mask & BTM_BLE_AD_BIT_SERVICE_128 &&
1255             p_data && p_data->p_services_128b)
1256         {
1257             *p ++ = 1 + MAX_UUID_SIZE;
1258             if (!p_data->p_services_128b->list_cmpl)
1259                 *p++ = BTM_BLE_AD_TYPE_128SRV_PART;
1260             else
1261                 *p++ = BTM_BLE_AD_TYPE_128SRV_CMPL;
1262
1263             ARRAY_TO_STREAM(p, p_data->p_services_128b->uuid128, MAX_UUID_SIZE);
1264
1265             len -= (MAX_UUID_SIZE + MIN_ADV_LENGTH);
1266             data_mask &= ~BTM_BLE_AD_BIT_SERVICE_128;
1267         }
1268         /* 32 bits Service Solicitation UUIDs */
1269         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_SERVICE_32SOL &&
1270             p_data && p_data->p_sol_service_32b &&
1271             p_data->p_sol_service_32b->num_service != 0 &&
1272             p_data->p_sol_service_32b->p_uuid)
1273         {
1274             if ((p_data->p_sol_service_32b->num_service * LEN_UUID_32) > (len - MIN_ADV_LENGTH))
1275             {
1276                 cp_len = (len - MIN_ADV_LENGTH)/LEN_UUID_32;
1277                 *p ++ = 1 + cp_len * LEN_UUID_32;
1278             }
1279             else
1280             {
1281                 cp_len = p_data->p_sol_service_32b->num_service;
1282                 *p++ = 1 + cp_len * LEN_UUID_32;
1283             }
1284
1285             *p++ = BTM_BLE_AD_TYPE_32SOL_SRV_UUID;
1286             for (i = 0; i < cp_len; i ++)
1287             {
1288                 UINT32_TO_STREAM(p, *(p_data->p_sol_service_32b->p_uuid + i));
1289             }
1290
1291             len -= (cp_len * LEN_UUID_32 + MIN_ADV_LENGTH);
1292             data_mask &= ~BTM_BLE_AD_BIT_SERVICE_32SOL;
1293         }
1294         /* 128 bits Solicitation services UUID */
1295         if (len >= (MAX_UUID_SIZE + MIN_ADV_LENGTH) && data_mask & BTM_BLE_AD_BIT_SERVICE_128SOL &&
1296             p_data && p_data->p_sol_service_128b)
1297         {
1298             *p ++ = 1 + MAX_UUID_SIZE;
1299             *p++ = BTM_BLE_AD_TYPE_128SOL_SRV_UUID;
1300             ARRAY_TO_STREAM(p, p_data->p_sol_service_128b->uuid128, MAX_UUID_SIZE);
1301             len -= (MAX_UUID_SIZE + MIN_ADV_LENGTH);
1302             data_mask &= ~BTM_BLE_AD_BIT_SERVICE_128SOL;
1303         }
1304         /* 16bits/32bits/128bits Service Data */
1305         if (len > MIN_ADV_LENGTH && data_mask & BTM_BLE_AD_BIT_SERVICE_DATA &&
1306             p_data && p_data->p_service_data->len != 0 && p_data->p_service_data->p_val)
1307         {
1308             if (len  > (p_data->p_service_data->service_uuid.len + MIN_ADV_LENGTH))
1309             {
1310                 if (p_data->p_service_data->len > (len - MIN_ADV_LENGTH))
1311                     cp_len = len - MIN_ADV_LENGTH- p_data->p_service_data->service_uuid.len;
1312                 else
1313                     cp_len = p_data->p_service_data->len;
1314
1315                 *p++ = cp_len + 1 + p_data->p_service_data->service_uuid.len;
1316                 if (p_data->p_service_data->service_uuid.len == LEN_UUID_16)
1317                 {
1318                     *p++ = BTM_BLE_AD_TYPE_SERVICE_DATA;
1319                     UINT16_TO_STREAM(p, p_data->p_service_data->service_uuid.uu.uuid16);
1320                 }
1321                 else if (p_data->p_service_data->service_uuid.len == LEN_UUID_32)
1322                 {
1323                     *p++ = BTM_BLE_AD_TYPE_32SERVICE_DATA;
1324                     UINT32_TO_STREAM(p, p_data->p_service_data->service_uuid.uu.uuid32);
1325                 }
1326                 else
1327                 {
1328                     *p++ = BTM_BLE_AD_TYPE_128SERVICE_DATA;
1329                     ARRAY_TO_STREAM(p, p_data->p_service_data->service_uuid.uu.uuid128,
1330                                     LEN_UUID_128);
1331                 }
1332
1333                 ARRAY_TO_STREAM(p, p_data->p_service_data->p_val, cp_len);
1334
1335                 len -= (cp_len + MIN_ADV_LENGTH + p_data->p_service_data->service_uuid.len);
1336                 data_mask &= ~BTM_BLE_AD_BIT_SERVICE_DATA;
1337             }
1338             else
1339             {
1340                 BTM_TRACE_WARNING("service data does not fit");
1341             }
1342         }
1343
1344         if (len >= 6 && data_mask & BTM_BLE_AD_BIT_INT_RANGE &&
1345             p_data)
1346         {
1347             *p++ = 5;
1348             *p++ = BTM_BLE_AD_TYPE_INT_RANGE;
1349             UINT16_TO_STREAM(p, p_data->int_range.low);
1350             UINT16_TO_STREAM(p, p_data->int_range.hi);
1351             len -= 6;
1352             data_mask &= ~BTM_BLE_AD_BIT_INT_RANGE;
1353         }
1354         if (data_mask & BTM_BLE_AD_BIT_PROPRIETARY && p_data && p_data->p_proprietary)
1355         {
1356             for (i = 0; i < p_data->p_proprietary->num_elem ; i ++)
1357             {
1358                 p_elem = p_data->p_proprietary->p_elem  + i;
1359
1360                 if (len >= (MIN_ADV_LENGTH + p_elem->len))/* len byte(1) + ATTR type(1) + Uuid len(2)
1361                                                           + value length */
1362                 {
1363                     *p ++ = p_elem->len + 1; /* Uuid len + value length */
1364                     *p ++ = p_elem->adv_type;
1365                     ARRAY_TO_STREAM(p, p_elem->p_val, p_elem->len);
1366
1367                     len -= (MIN_ADV_LENGTH + p_elem->len);
1368                 }
1369                 else
1370                 {
1371                     BTM_TRACE_WARNING("data exceed max adv packet length");
1372                     break;
1373                 }
1374             }
1375             data_mask &= ~BTM_BLE_AD_BIT_PROPRIETARY;
1376         }
1377     }
1378
1379     *p_data_mask = data_mask;
1380     *p_dst = p;
1381
1382     return p_flag;
1383 }
1384 /*******************************************************************************
1385 **
1386 ** Function         btm_ble_select_adv_interval
1387 **
1388 ** Description      select adv interval based on device mode
1389 **
1390 ** Returns          void
1391 **
1392 *******************************************************************************/
1393 void btm_ble_select_adv_interval(tBTM_BLE_INQ_CB *p_cb, UINT8 evt_type, UINT16 *p_adv_int_min, UINT16 *p_adv_int_max)
1394 {
1395     if (p_cb->adv_interval_min && p_cb->adv_interval_max)
1396     {
1397         *p_adv_int_min = p_cb->adv_interval_min;
1398         *p_adv_int_max = p_cb->adv_interval_max;
1399     }
1400     else
1401     {
1402         switch (evt_type)
1403         {
1404         case BTM_BLE_CONNECT_EVT:
1405             *p_adv_int_min = *p_adv_int_max = BTM_BLE_GAP_ADV_FAST_INT_1;
1406             break;
1407
1408         case BTM_BLE_NON_CONNECT_EVT:
1409         case BTM_BLE_DISCOVER_EVT:
1410             *p_adv_int_min = *p_adv_int_max = BTM_BLE_GAP_ADV_FAST_INT_2;
1411             break;
1412         /* connectable directed event */
1413         case BTM_BLE_CONNECT_DIR_EVT:
1414             *p_adv_int_min = BTM_BLE_GAP_ADV_DIR_MIN_INT;
1415             *p_adv_int_max = BTM_BLE_GAP_ADV_DIR_MAX_INT;
1416             break;
1417
1418         default:
1419             *p_adv_int_min = *p_adv_int_max = BTM_BLE_GAP_ADV_SLOW_INT;
1420             break;
1421         }
1422     }
1423     return;
1424 }
1425 /*******************************************************************************
1426 **
1427 ** Function         btm_ble_set_adv_flag
1428 **
1429 ** Description      Set adv flag in adv data.
1430 **
1431 ** Returns          void
1432 **
1433 *******************************************************************************/
1434 void btm_ble_set_adv_flag(UINT16 connect_mode, UINT16 disc_mode)
1435 {
1436     UINT8 flag = 0, old_flag = 0;
1437     tBTM_BLE_LOCAL_ADV_DATA *p_adv_data = &btm_cb.ble_ctr_cb.inq_var.adv_data;
1438
1439     if (p_adv_data->p_flags != NULL)
1440         flag = old_flag = *(p_adv_data->p_flags);
1441
1442     /* BR/EDR non-discoverable , non-connectable */
1443     if ((disc_mode & BTM_DISCOVERABLE_MASK) == 0 &&
1444         (connect_mode & BTM_CONNECTABLE_MASK) == 0)
1445         flag |= BTM_BLE_BREDR_NOT_SPT;
1446     else
1447         flag &= ~BTM_BLE_BREDR_NOT_SPT;
1448
1449     /* if local controller support, mark both controller and host support in flag */
1450     if (HCI_SIMUL_LE_BREDR_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_0]))
1451         flag |= (BTM_BLE_DMT_CONTROLLER_SPT|BTM_BLE_DMT_HOST_SPT);
1452     else
1453         flag &= ~(BTM_BLE_DMT_CONTROLLER_SPT|BTM_BLE_DMT_HOST_SPT);
1454
1455     BTM_TRACE_ERROR("disc_mode %04x", disc_mode);
1456     /* update discoverable flag */
1457     if (disc_mode & BTM_BLE_LIMITED_DISCOVERABLE)
1458     {
1459         flag &= ~BTM_BLE_GEN_DISC_FLAG;
1460         flag |= BTM_BLE_LIMIT_DISC_FLAG ;
1461     }
1462     else if (disc_mode & BTM_BLE_GENERAL_DISCOVERABLE)
1463     {
1464         flag |= BTM_BLE_GEN_DISC_FLAG;
1465         flag &= ~BTM_BLE_LIMIT_DISC_FLAG;
1466     }
1467     else /* remove all discoverable flags */
1468     {
1469         flag &= ~(BTM_BLE_LIMIT_DISC_FLAG|BTM_BLE_GEN_DISC_FLAG);
1470     }
1471
1472     if (flag != old_flag)
1473     {
1474         btm_ble_update_adv_flag(flag);
1475     }
1476 }
1477 /*******************************************************************************
1478 **
1479 ** Function         btm_ble_set_discoverability
1480 **
1481 ** Description      This function is called to set BLE discoverable mode.
1482 **
1483 ** Parameters:      combined_mode: discoverability mode.
1484 **
1485 ** Returns          BTM_SUCCESS is status set successfully; otherwise failure.
1486 **
1487 *******************************************************************************/
1488 tBTM_STATUS btm_ble_set_discoverability(UINT16 combined_mode)
1489 {
1490     tBTM_LE_RANDOM_CB   *p_addr_cb = &btm_cb.ble_ctr_cb.addr_mgnt_cb;
1491     tBTM_BLE_INQ_CB     *p_cb = &btm_cb.ble_ctr_cb.inq_var;
1492     UINT16              mode = (combined_mode &  BTM_BLE_DISCOVERABLE_MASK);
1493     UINT8               new_mode = BTM_BLE_ADV_ENABLE;
1494     UINT8               evt_type = (p_cb->connectable_mode == BTM_BLE_NON_CONNECTABLE) ? \
1495                                    ((p_cb->scan_rsp) ? BTM_BLE_DISCOVER_EVT : BTM_BLE_NON_CONNECT_EVT )\
1496                                    : BTM_BLE_CONNECT_EVT;
1497     tBTM_STATUS         status = BTM_SUCCESS;
1498     BD_ADDR             p_addr_ptr= {0};
1499     tBLE_ADDR_TYPE      init_addr_type = BLE_ADDR_PUBLIC,
1500                         own_addr_type = p_addr_cb->own_addr_type;
1501     UINT16              adv_int_min, adv_int_max;
1502
1503     BTM_TRACE_EVENT ("btm_ble_set_discoverability mode=0x%0x combined_mode=0x%x", mode, combined_mode);
1504
1505     /*** Check mode parameter ***/
1506     if (mode > BTM_BLE_MAX_DISCOVERABLE)
1507         return(BTM_ILLEGAL_VALUE);
1508
1509     btm_ble_set_adv_flag (btm_cb.btm_inq_vars.connectable_mode, combined_mode);
1510
1511     evt_type = btm_set_conn_mode_adv_init_addr(p_cb, p_addr_ptr, &init_addr_type, &own_addr_type);
1512
1513     if (p_cb->connectable_mode == BTM_BLE_NON_CONNECTABLE && mode == BTM_BLE_NON_DISCOVERABLE)
1514         new_mode = BTM_BLE_ADV_DISABLE;
1515
1516     btm_ble_select_adv_interval(p_cb, evt_type, &adv_int_min, &adv_int_max);
1517
1518     btu_stop_timer(&p_cb->fast_adv_timer);
1519
1520     /* update adv params if start advertising */
1521     BTM_TRACE_EVENT ("evt_type=0x%x p-cb->evt_type=0x%x ", evt_type, p_cb->evt_type);
1522
1523     if (new_mode == BTM_BLE_ADV_ENABLE &&
1524         (evt_type != p_cb->evt_type ||p_cb->adv_addr_type != own_addr_type || !p_cb->fast_adv_on))
1525     {
1526         btm_ble_stop_adv();
1527
1528         /* update adv params */
1529         if (!btsnd_hcic_ble_write_adv_params (adv_int_min,
1530                                               adv_int_max,
1531                                               evt_type,
1532                                               own_addr_type,
1533                                               init_addr_type,
1534                                               p_addr_ptr,
1535                                               p_cb->adv_chnl_map,
1536                                               p_cb->afp))
1537
1538             status = BTM_NO_RESOURCES;
1539         else
1540         {
1541             p_cb->evt_type = evt_type;
1542             p_cb->adv_addr_type = own_addr_type;
1543         }
1544
1545     }
1546
1547     if (status == BTM_SUCCESS && p_cb->adv_mode != new_mode)
1548     {
1549         if (new_mode == BTM_BLE_ADV_ENABLE)
1550             status = btm_ble_start_adv();
1551         else
1552             status = btm_ble_stop_adv();
1553     }
1554     if (p_cb->adv_mode == BTM_BLE_ADV_ENABLE)
1555     {
1556         p_cb->fast_adv_on = TRUE;
1557         /* start initial GAP mode adv timer */
1558         btu_start_timer (&p_cb->fast_adv_timer, BTU_TTYPE_BLE_GAP_FAST_ADV,
1559                           BTM_BLE_GAP_FAST_ADV_TOUT);
1560     }
1561
1562     /* set up stop advertising timer */
1563     if (status == BTM_SUCCESS && mode == BTM_BLE_LIMITED_DISCOVERABLE)
1564     {
1565         BTM_TRACE_EVENT ("start timer for limited disc mode duration=%d (180 secs)", BTM_BLE_GAP_LIM_TOUT);
1566         /* start Tgap(lim_timeout) */
1567         btu_start_timer (&p_cb->inq_timer_ent, BTU_TTYPE_BLE_GAP_LIM_DISC,
1568                          BTM_BLE_GAP_LIM_TOUT);
1569     }
1570     return status;
1571 }
1572
1573 /*******************************************************************************
1574 **
1575 ** Function         btm_ble_set_connectability
1576 **
1577 ** Description      This function is called to set BLE connectability mode.
1578 **
1579 ** Parameters:      combined_mode: connectability mode.
1580 **
1581 ** Returns          BTM_SUCCESS is status set successfully; otherwise failure.
1582 **
1583 *******************************************************************************/
1584 tBTM_STATUS btm_ble_set_connectability(UINT16 combined_mode)
1585 {
1586     tBTM_LE_RANDOM_CB       *p_addr_cb = &btm_cb.ble_ctr_cb.addr_mgnt_cb;
1587     tBTM_BLE_INQ_CB         *p_cb = &btm_cb.ble_ctr_cb.inq_var;
1588     UINT16                  mode = (combined_mode & BTM_BLE_CONNECTABLE_MASK);
1589     UINT8                   new_mode = BTM_BLE_ADV_ENABLE;
1590     UINT8                   evt_type = (p_cb->scan_rsp) ? BTM_BLE_DISCOVER_EVT: BTM_BLE_NON_CONNECT_EVT;
1591     tBTM_STATUS             status = BTM_SUCCESS;
1592     BD_ADDR                 p_addr_ptr =  {0};
1593     tBLE_ADDR_TYPE          init_addr_type = BLE_ADDR_PUBLIC,
1594                             own_addr_type = p_addr_cb->own_addr_type;
1595     UINT16                  adv_int_min, adv_int_max;
1596
1597     BTM_TRACE_EVENT ("btm_ble_set_connectability mode=0x%0x combined_mode=0x%x", mode, combined_mode);
1598
1599     /*** Check mode parameter ***/
1600     if (mode > BTM_BLE_MAX_CONNECTABLE)
1601         return(BTM_ILLEGAL_VALUE);
1602
1603     p_cb->connectable_mode = mode;
1604
1605     btm_ble_set_adv_flag (combined_mode,  btm_cb.btm_inq_vars.discoverable_mode);
1606
1607     evt_type = btm_set_conn_mode_adv_init_addr(p_cb, p_addr_ptr, &init_addr_type, &own_addr_type);
1608
1609     if (mode == BTM_BLE_NON_CONNECTABLE && p_cb->discoverable_mode == BTM_BLE_NON_DISCOVERABLE)
1610         new_mode = BTM_BLE_ADV_DISABLE;
1611
1612     btm_ble_select_adv_interval(p_cb, evt_type, &adv_int_min, &adv_int_max);
1613
1614     btu_stop_timer(&p_cb->fast_adv_timer);
1615     /* update adv params if needed */
1616     if ((p_cb->evt_type != evt_type || p_cb->adv_addr_type != p_addr_cb->own_addr_type || !p_cb->fast_adv_on))
1617     {
1618         btm_ble_stop_adv();
1619
1620         if (!btsnd_hcic_ble_write_adv_params (adv_int_min,
1621                                               adv_int_max,
1622                                               evt_type,
1623                                               own_addr_type,
1624                                               init_addr_type,
1625                                               p_addr_ptr,
1626                                               p_cb->adv_chnl_map,
1627                                               p_cb->afp))
1628             status = BTM_NO_RESOURCES;
1629         else
1630         {
1631             p_cb->evt_type = evt_type;
1632             p_cb->adv_addr_type = own_addr_type;
1633         }
1634     }
1635
1636     /* update advertising mode */
1637     if (status == BTM_SUCCESS && new_mode != p_cb->adv_mode)
1638     {
1639         if (new_mode == BTM_BLE_ADV_ENABLE)
1640             status = btm_ble_start_adv();
1641         else
1642             status = btm_ble_stop_adv();
1643     }
1644     if (p_cb->adv_mode == BTM_BLE_ADV_ENABLE)
1645     {
1646         p_cb->fast_adv_on = TRUE;
1647         /* start initial GAP mode adv timer */
1648         btu_start_timer (&p_cb->fast_adv_timer, BTU_TTYPE_BLE_GAP_FAST_ADV,
1649                              BTM_BLE_GAP_FAST_ADV_TOUT);
1650     }
1651     return status;
1652 }
1653
1654
1655 /*******************************************************************************
1656 **
1657 ** Function         btm_ble_start_inquiry
1658 **
1659 ** Description      This function is called to start BLE inquiry procedure.
1660 **                  If the duration is zero, the periodic inquiry mode is cancelled.
1661 **
1662 ** Parameters:      mode - GENERAL or LIMITED inquiry
1663 **                  p_inq_params - pointer to the BLE inquiry parameter.
1664 **                  p_results_cb - callback returning pointer to results (tBTM_INQ_RESULTS)
1665 **                  p_cmpl_cb - callback indicating the end of an inquiry
1666 **
1667 **
1668 **
1669 ** Returns          BTM_CMD_STARTED if successfully started
1670 **                  BTM_NO_RESOURCES if could not allocate a message buffer
1671 **                  BTM_BUSY - if an inquiry is already active
1672 **
1673 *******************************************************************************/
1674 tBTM_STATUS btm_ble_start_inquiry (UINT8 mode, UINT8   duration)
1675 {
1676     tBTM_STATUS status = BTM_CMD_STARTED;
1677     tBTM_BLE_CB *p_ble_cb = &btm_cb.ble_ctr_cb;
1678     tBTM_INQUIRY_VAR_ST      *p_inq = &btm_cb.btm_inq_vars;
1679
1680     BTM_TRACE_DEBUG("btm_ble_start_inquiry: mode = %02x inq_active = 0x%02x", mode, btm_cb.btm_inq_vars.inq_active);
1681
1682     /* if selective connection is active, or inquiry is already active, reject it */
1683     if (BTM_BLE_IS_INQ_ACTIVE(p_ble_cb->scan_activity) ||
1684         BTM_BLE_IS_SEL_CONN_ACTIVE (p_ble_cb->scan_activity))
1685     {
1686         BTM_TRACE_ERROR("LE Inquiry is active, can not start inquiry");
1687         return(BTM_BUSY);
1688     }
1689
1690     if (!BTM_BLE_IS_SCAN_ACTIVE(p_ble_cb->scan_activity))
1691     {
1692         btm_update_scanner_filter_policy(SP_ADV_ALL);
1693
1694 #if (defined BLE_PRIVACY_SPT && BLE_PRIVACY_SPT == TRUE)
1695 #if (defined BLE_VND_INCLUDED && BLE_VND_INCLUDED == TRUE)
1696         /* enable IRK list */
1697         btm_ble_vendor_irk_list_known_dev (TRUE);
1698 #endif
1699 #endif
1700         status = btm_ble_start_scan(BTM_BLE_DUPLICATE_DISABLE);
1701     }
1702
1703     if (status == BTM_CMD_STARTED)
1704     {
1705         p_inq->inq_active |= mode;
1706         p_ble_cb->scan_activity |= mode;
1707
1708         BTM_TRACE_DEBUG("btm_ble_start_inquiry inq_active = 0x%02x", p_inq->inq_active);
1709
1710         if (duration != 0)
1711         {
1712             /* start inquiry timer */
1713             btu_start_timer (&p_inq->inq_timer_ent, BTU_TTYPE_BLE_INQUIRY, duration);
1714         }
1715     }
1716
1717     return status;
1718
1719 }
1720
1721 /*******************************************************************************
1722 **
1723 ** Function         btm_ble_read_remote_name_cmpl
1724 **
1725 ** Description      This function is called when BLE remote name is received.
1726 **
1727 ** Returns          void
1728 **
1729 *******************************************************************************/
1730 void btm_ble_read_remote_name_cmpl(BOOLEAN status, BD_ADDR bda, UINT16 length, char *p_name)
1731 {
1732     UINT8   hci_status = HCI_SUCCESS;
1733     BD_NAME bd_name;
1734
1735     memset(bd_name, 0, (BD_NAME_LEN + 1));
1736     if (length > BD_NAME_LEN)
1737     {
1738         length = BD_NAME_LEN;
1739     }
1740     memcpy((UINT8*)bd_name, p_name, length);
1741
1742     if ((!status) || (length==0))
1743     {
1744         hci_status = HCI_ERR_HOST_TIMEOUT;
1745     }
1746
1747     btm_process_remote_name(bda, bd_name, length +1, hci_status);
1748     btm_sec_rmt_name_request_complete (bda, (UINT8 *)p_name, hci_status);
1749 }
1750
1751 /*******************************************************************************
1752 **
1753 ** Function         btm_ble_read_remote_name
1754 **
1755 ** Description      This function read remote LE device name using GATT read
1756 **                  procedure.
1757 **
1758 ** Parameters:       None.
1759 **
1760 ** Returns          void
1761 **
1762 *******************************************************************************/
1763 tBTM_STATUS btm_ble_read_remote_name(BD_ADDR remote_bda, tBTM_INQ_INFO *p_cur, tBTM_CMPL_CB *p_cb)
1764 {
1765     tBTM_INQUIRY_VAR_ST      *p_inq = &btm_cb.btm_inq_vars;
1766
1767     if (!HCI_LE_HOST_SUPPORTED(btm_cb.devcb.local_lmp_features[HCI_EXT_FEATURES_PAGE_1]))
1768         return BTM_ERR_PROCESSING;
1769
1770     if (p_cur &&
1771         p_cur->results.ble_evt_type != BTM_BLE_EVT_CONN_ADV &&
1772         p_cur->results.ble_evt_type != BTM_BLE_EVT_CONN_DIR_ADV)
1773     {
1774         BTM_TRACE_DEBUG("name request to non-connectable device failed.");
1775         return BTM_ERR_PROCESSING;
1776     }
1777
1778     /* read remote device name using GATT procedure */
1779     if (p_inq->remname_active)
1780         return BTM_BUSY;
1781
1782     if (!GAP_BleReadPeerDevName(remote_bda, btm_ble_read_remote_name_cmpl))
1783         return BTM_BUSY;
1784
1785     p_inq->p_remname_cmpl_cb = p_cb;
1786     p_inq->remname_active = TRUE;
1787
1788     memcpy(p_inq->remname_bda, remote_bda, BD_ADDR_LEN);
1789
1790     btu_start_timer (&p_inq->rmt_name_timer_ent,
1791                      BTU_TTYPE_BTM_RMT_NAME,
1792                      BTM_EXT_BLE_RMT_NAME_TIMEOUT);
1793
1794     return BTM_CMD_STARTED;
1795 }
1796
1797 /*******************************************************************************
1798 **
1799 ** Function         btm_ble_cancel_remote_name
1800 **
1801 ** Description      This function cancel read remote LE device name.
1802 **
1803 ** Parameters:       None.
1804 **
1805 ** Returns          void
1806 **
1807 *******************************************************************************/
1808 BOOLEAN btm_ble_cancel_remote_name(BD_ADDR remote_bda)
1809 {
1810     tBTM_INQUIRY_VAR_ST      *p_inq = &btm_cb.btm_inq_vars;
1811     BOOLEAN     status;
1812
1813     status = GAP_BleCancelReadPeerDevName(remote_bda);
1814
1815     p_inq->remname_active = FALSE;
1816     memset(p_inq->remname_bda, 0, BD_ADDR_LEN);
1817     btu_stop_timer(&p_inq->rmt_name_timer_ent);
1818
1819     return status;
1820 }
1821
1822 /*******************************************************************************
1823 **
1824 ** Function         btm_ble_update_adv_flag
1825 **
1826 ** Description      This function update the limited discoverable flag in the adv
1827 **                  data.
1828 **
1829 ** Parameters:       None.
1830 **
1831 ** Returns          void
1832 **
1833 *******************************************************************************/
1834 static void btm_ble_update_adv_flag(UINT8 flag)
1835 {
1836     tBTM_BLE_LOCAL_ADV_DATA *p_adv_data = &btm_cb.ble_ctr_cb.inq_var.adv_data;
1837     UINT8   *p;
1838
1839     BTM_TRACE_DEBUG ("btm_ble_update_adv_flag new=0x%x", flag);
1840
1841     if (p_adv_data->p_flags != NULL)
1842     {
1843         BTM_TRACE_DEBUG ("btm_ble_update_adv_flag old=0x%x",   *p_adv_data->p_flags);
1844         *p_adv_data->p_flags = flag;
1845     }
1846     else /* no FLAGS in ADV data*/
1847     {
1848         p = (p_adv_data->p_pad == NULL) ? p_adv_data->ad_data : p_adv_data->p_pad;
1849         /* need 3 bytes space to stuff in the flags, if not */
1850         /* erase all written data, just for flags */
1851         if ((BTM_BLE_AD_DATA_LEN - (p - p_adv_data->ad_data)) < 3)
1852         {
1853             p = p_adv_data->p_pad = p_adv_data->ad_data;
1854             memset(p_adv_data->ad_data, 0, BTM_BLE_AD_DATA_LEN);
1855         }
1856
1857         *p++ = 2;
1858         *p++ = BTM_BLE_AD_TYPE_FLAG;
1859         p_adv_data->p_flags = p;
1860         *p++ = flag;
1861         p_adv_data->p_pad = p;
1862     }
1863
1864     if (btsnd_hcic_ble_set_adv_data((UINT8)(p_adv_data->p_pad - p_adv_data->ad_data),
1865                                     p_adv_data->ad_data))
1866         p_adv_data->data_mask |= BTM_BLE_AD_BIT_FLAGS;
1867
1868 }
1869
1870 #if 0
1871 /*******************************************************************************
1872 **
1873 ** Function         btm_ble_parse_adv_data
1874 **
1875 ** Description      This function parse the adv data into a structure.
1876 **
1877 ** Returns          pointer to entry, or NULL if not found
1878 **
1879 *******************************************************************************/
1880 static void btm_ble_parse_adv_data(tBTM_INQ_INFO *p_info, UINT8 *p_data,
1881                                    UINT8 len, tBTM_BLE_INQ_DATA *p_adv_data, UINT8 *p_buf)
1882 {
1883     UINT8   *p_cur = p_data;
1884     UINT8   ad_len, ad_type, ad_flag;
1885
1886     BTM_TRACE_EVENT (" btm_ble_parse_adv_data");
1887
1888     while (len > 0)
1889     {
1890         BTM_TRACE_DEBUG("btm_ble_parse_adv_data: len = %d", len);
1891         if ((ad_len = *p_cur ++) == 0)
1892             break;
1893
1894         ad_type = *p_cur ++;
1895
1896         BTM_TRACE_DEBUG("     ad_type = %02x ad_len = %d", ad_type, ad_len);
1897
1898         switch (ad_type)
1899         {
1900             case BTM_BLE_AD_TYPE_NAME_SHORT:
1901
1902             case BTM_BLE_AD_TYPE_NAME_CMPL:
1903                 p_adv_data->ad_mask |= BTM_BLE_AD_BIT_DEV_NAME;
1904                 if (p_info)
1905                 {
1906                     p_info->remote_name_type =(ad_type == BTM_BLE_AD_TYPE_NAME_SHORT) ?
1907                                               BTM_BLE_NAME_SHORT: BTM_BLE_NAME_CMPL;
1908                     memcpy(p_info->remote_name, p_cur, ad_len -1);
1909                     p_info->remote_name[ad_len] = 0;
1910                     p_adv_data->p_remote_name = p_info->remote_name;
1911                     p_info->remote_name_len = p_adv_data->remote_name_len = ad_len - 1;
1912                     BTM_TRACE_DEBUG("BTM_BLE_AD_TYPE_NAME name = %s",p_adv_data->p_remote_name);
1913                 }
1914                 p_cur += (ad_len -1);
1915
1916                 break;
1917
1918             case BTM_BLE_AD_TYPE_FLAG:
1919                 p_adv_data->ad_mask |= BTM_BLE_AD_BIT_FLAGS;
1920                 ad_flag = *p_cur ++;
1921                 p_adv_data->flag = (UINT8)(ad_flag & BTM_BLE_ADV_FLAG_MASK) ;
1922                 BTM_TRACE_DEBUG("BTM_BLE_AD_TYPE_FLAG flag = %s | %s | %s",
1923                                  (p_adv_data->flag & BTM_BLE_LIMIT_DISC_FLAG)? "LE_LIMIT_DISC" : "",
1924                                  (p_adv_data->flag & BTM_BLE_GEN_DISC_FLAG)? "LE_GENERAL_DISC" : "",
1925                                  (p_adv_data->flag & BTM_BLE_BREDR_NOT_SPT)? "LE Only device" : "");
1926                 break;
1927
1928             case BTM_BLE_AD_TYPE_TX_PWR:
1929                 p_adv_data->ad_mask |= BTM_BLE_AD_BIT_TX_PWR;
1930                 p_adv_data->tx_power_level = (INT8)*p_cur ++;
1931                 BTM_TRACE_DEBUG("BTM_BLE_AD_TYPE_TX_PWR tx_level = %d", p_adv_data->tx_power_level);
1932                 break;
1933
1934             case BTM_BLE_AD_TYPE_MANU:
1935
1936             case BTM_BLE_AD_TYPE_16SRV_PART:
1937             case BTM_BLE_AD_TYPE_16SRV_CMPL:
1938                 p_adv_data->ad_mask |= BTM_BLE_AD_BIT_SERVICE;
1939                 /* need allocate memory to store UUID list */
1940                 p_adv_data->service.num_service = (ad_len - 1)/2;
1941                 BTM_TRACE_DEBUG("service UUID list, num = %d", p_adv_data->service.num_service);
1942                 p_cur += (ad_len - 1);
1943                 break;
1944
1945             case BTM_BLE_AD_TYPE_SOL_SRV_UUID:
1946                 p_adv_data->ad_mask |= BTM_BLE_AD_BIT_SERVICE_SOL;
1947                 /* need allocate memory to store UUID list */
1948                 p_adv_data->service.num_service = (ad_len - 1)/2;
1949                 BTM_TRACE_DEBUG("service UUID list, num = %d", p_adv_data->service.num_service);
1950                 p_cur += (ad_len - 1);
1951                 break;
1952
1953             case BTM_BLE_AD_TYPE_128SOL_SRV_UUID:
1954                 p_adv_data->ad_mask |= BTM_BLE_AD_BIT_SERVICE_128SOL;
1955                 /* need allocate memory to store UUID list */
1956                 p_adv_data->service.num_service = (ad_len - 1)/16;
1957                 BTM_TRACE_DEBUG("service UUID list, num = %d", p_adv_data->service.num_service);
1958                 p_cur += (ad_len - 1);
1959                 break;
1960
1961             case BTM_BLE_AD_TYPE_APPEARANCE:
1962             case BTM_BLE_AD_TYPE_PUBLIC_TARGET:
1963             case BTM_BLE_AD_TYPE_RANDOM_TARGET:
1964             default:
1965                 break;
1966         }
1967         len -= (ad_len + 1);
1968     }
1969 }
1970 #endif
1971
1972 /*******************************************************************************
1973 **
1974 ** Function         btm_ble_cache_adv_data
1975 **
1976 ** Description      Update advertising cache data.
1977 **
1978 ** Returns          void
1979 **
1980 *******************************************************************************/
1981 void btm_ble_cache_adv_data(tBTM_INQ_RESULTS *p_cur, UINT8 data_len, UINT8 *p, UINT8 evt_type)
1982 {
1983     tBTM_BLE_INQ_CB     *p_le_inq_cb = &btm_cb.ble_ctr_cb.inq_var;
1984     UINT8 *p_cache;
1985     UINT8 length;
1986     UNUSED(p_cur);
1987
1988     /* cache adv report/scan response data */
1989     if (evt_type != BTM_BLE_SCAN_RSP_EVT)
1990     {
1991         p_le_inq_cb->adv_len = 0;
1992         memset(p_le_inq_cb->adv_data_cache, 0, BTM_BLE_CACHE_ADV_DATA_MAX);
1993     }
1994
1995     if (data_len > 0)
1996     {
1997         p_cache = &p_le_inq_cb->adv_data_cache[p_le_inq_cb->adv_len];
1998         STREAM_TO_UINT8(length, p);
1999         while ( length && ((p_le_inq_cb->adv_len + length + 1) <= BTM_BLE_CACHE_ADV_DATA_MAX))
2000         {
2001             /* copy from the length byte & data into cache */
2002             memcpy(p_cache, p-1, length+1);
2003             /* advance the cache pointer past data */
2004             p_cache += length+1;
2005             /* increment cache length */
2006             p_le_inq_cb->adv_len += length+1;
2007             /* skip the length of data */
2008             p += length;
2009             STREAM_TO_UINT8(length, p);
2010         }
2011     }
2012
2013     /* parse service UUID from adv packet and save it in inq db eir_uuid */
2014     /* TODO */
2015 }
2016
2017 /*******************************************************************************
2018 **
2019 ** Function         btm_ble_is_discoverable
2020 **
2021 ** Description      check ADV flag to make sure device is discoverable and match
2022 **                  the search condition
2023 **
2024 ** Parameters
2025 **
2026 ** Returns          void
2027 **
2028 *******************************************************************************/
2029 UINT8 btm_ble_is_discoverable(BD_ADDR bda, UINT8 evt_type, UINT8 *p)
2030 {
2031     UINT8               *p_flag, flag = 0, rt = 0;
2032     UINT8                data_len;
2033     tBTM_INQ_PARMS      *p_cond = &btm_cb.btm_inq_vars.inqparms;
2034     tBTM_BLE_INQ_CB     *p_le_inq_cb = &btm_cb.ble_ctr_cb.inq_var;
2035
2036     UNUSED(p);
2037
2038     /* for observer, always "discoverable */
2039     if (BTM_BLE_IS_OBS_ACTIVE(btm_cb.ble_ctr_cb.scan_activity))
2040         rt |= BTM_BLE_OBS_RESULT;
2041
2042     if (BTM_BLE_IS_SEL_CONN_ACTIVE(btm_cb.ble_ctr_cb.scan_activity) &&
2043         (evt_type == BTM_BLE_CONNECT_EVT || evt_type == BTM_BLE_CONNECT_DIR_EVT))
2044         rt |= BTM_BLE_SEL_CONN_RESULT;
2045
2046     /* does not match filter condition */
2047     if (p_cond->filter_cond_type == BTM_FILTER_COND_BD_ADDR &&
2048         memcmp(bda, p_cond->filter_cond.bdaddr_cond, BD_ADDR_LEN) != 0)
2049     {
2050         BTM_TRACE_DEBUG("BD ADDR does not meet filter condition");
2051         return rt;
2052     }
2053
2054     if (p_le_inq_cb->adv_len != 0)
2055     {
2056         if ((p_flag = BTM_CheckAdvData(p_le_inq_cb->adv_data_cache,
2057             BTM_BLE_AD_TYPE_FLAG, &data_len)) != NULL)
2058         {
2059             flag = * p_flag;
2060
2061             if ((btm_cb.btm_inq_vars.inq_active & BTM_BLE_GENERAL_INQUIRY) &&
2062                 (flag & (BTM_BLE_LIMIT_DISC_FLAG|BTM_BLE_GEN_DISC_FLAG)) != 0)
2063             {
2064                 BTM_TRACE_DEBUG("Find Generable Discoverable device");
2065                 rt |= BTM_BLE_INQ_RESULT;
2066             }
2067
2068             else if (btm_cb.btm_inq_vars.inq_active & BTM_BLE_LIMITED_INQUIRY &&
2069                      (flag & BTM_BLE_LIMIT_DISC_FLAG) != 0)
2070             {
2071                 BTM_TRACE_DEBUG("Find limited discoverable device");
2072                 rt |= BTM_BLE_INQ_RESULT;
2073             }
2074         }
2075     }
2076     return rt;
2077 }
2078
2079 static void btm_ble_appearance_to_cod(UINT16 appearance, UINT8 *dev_class)
2080 {
2081     dev_class[0] = 0;
2082
2083     switch (appearance)
2084     {
2085         case BTM_BLE_APPEARANCE_GENERIC_PHONE:
2086             dev_class[1] = BTM_COD_MAJOR_PHONE;
2087             dev_class[2] = BTM_COD_MINOR_UNCLASSIFIED;
2088             break;
2089         case BTM_BLE_APPEARANCE_GENERIC_COMPUTER:
2090             dev_class[1] = BTM_COD_MAJOR_COMPUTER;
2091             dev_class[2] = BTM_COD_MINOR_UNCLASSIFIED;
2092             break;
2093         case BTM_BLE_APPEARANCE_GENERIC_REMOTE:
2094             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2095             dev_class[2] = BTM_COD_MINOR_REMOTE_CONTROL;
2096             break;
2097         case BTM_BLE_APPEARANCE_GENERIC_THERMOMETER:
2098         case BTM_BLE_APPEARANCE_THERMOMETER_EAR:
2099             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2100             dev_class[2] = BTM_COD_MINOR_THERMOMETER;
2101             break;
2102         case BTM_BLE_APPEARANCE_GENERIC_HEART_RATE:
2103         case BTM_BLE_APPEARANCE_HEART_RATE_BELT:
2104             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2105             dev_class[2] = BTM_COD_MINOR_HEART_PULSE_MONITOR;
2106             break;
2107         case BTM_BLE_APPEARANCE_GENERIC_BLOOD_PRESSURE:
2108         case BTM_BLE_APPEARANCE_BLOOD_PRESSURE_ARM:
2109         case BTM_BLE_APPEARANCE_BLOOD_PRESSURE_WRIST:
2110             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2111             dev_class[2] = BTM_COD_MINOR_BLOOD_MONITOR;
2112             break;
2113         case BTM_BLE_APPEARANCE_GENERIC_PULSE_OXIMETER:
2114         case BTM_BLE_APPEARANCE_PULSE_OXIMETER_FINGERTIP:
2115         case BTM_BLE_APPEARANCE_PULSE_OXIMETER_WRIST:
2116             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2117             dev_class[2] = BTM_COD_MINOR_PULSE_OXIMETER;
2118             break;
2119         case BTM_BLE_APPEARANCE_GENERIC_GLUCOSE:
2120             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2121             dev_class[2] = BTM_COD_MINOR_GLUCOSE_METER;
2122             break;
2123         case BTM_BLE_APPEARANCE_GENERIC_WEIGHT:
2124             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2125             dev_class[2] = BTM_COD_MINOR_WEIGHING_SCALE;
2126             break;
2127         case BTM_BLE_APPEARANCE_GENERIC_WALKING:
2128         case BTM_BLE_APPEARANCE_WALKING_IN_SHOE:
2129         case BTM_BLE_APPEARANCE_WALKING_ON_SHOE:
2130         case BTM_BLE_APPEARANCE_WALKING_ON_HIP:
2131             dev_class[1] = BTM_COD_MAJOR_HEALTH;
2132             dev_class[2] = BTM_COD_MINOR_STEP_COUNTER;
2133             break;
2134         case BTM_BLE_APPEARANCE_GENERIC_WATCH:
2135         case BTM_BLE_APPEARANCE_SPORTS_WATCH:
2136             dev_class[1] = BTM_COD_MAJOR_WEARABLE;
2137             dev_class[2] = BTM_COD_MINOR_WRIST_WATCH;
2138             break;
2139         case BTM_BLE_APPEARANCE_GENERIC_EYEGLASSES:
2140             dev_class[1] = BTM_COD_MAJOR_WEARABLE;
2141             dev_class[2] = BTM_COD_MINOR_GLASSES;
2142             break;
2143         case BTM_BLE_APPEARANCE_GENERIC_DISPLAY:
2144             dev_class[1] = BTM_COD_MAJOR_IMAGING;
2145             dev_class[2] = BTM_COD_MINOR_DISPLAY;
2146             break;
2147         case BTM_BLE_APPEARANCE_GENERIC_MEDIA_PLAYER:
2148             dev_class[1] = BTM_COD_MAJOR_AUDIO;
2149             dev_class[2] = BTM_COD_MINOR_UNCLASSIFIED;
2150             break;
2151         case BTM_BLE_APPEARANCE_GENERIC_BARCODE_SCANNER:
2152         case BTM_BLE_APPEARANCE_HID_BARCODE_SCANNER:
2153         case BTM_BLE_APPEARANCE_GENERIC_HID:
2154             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2155             dev_class[2] = BTM_COD_MINOR_UNCLASSIFIED;
2156             break;
2157         case BTM_BLE_APPEARANCE_HID_KEYBOARD:
2158             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2159             dev_class[2] = BTM_COD_MINOR_KEYBOARD;
2160             break;
2161         case BTM_BLE_APPEARANCE_HID_MOUSE:
2162             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2163             dev_class[2] = BTM_COD_MINOR_POINTING;
2164             break;
2165         case BTM_BLE_APPEARANCE_HID_JOYSTICK:
2166             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2167             dev_class[2] = BTM_COD_MINOR_JOYSTICK;
2168             break;
2169         case BTM_BLE_APPEARANCE_HID_GAMEPAD:
2170             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2171             dev_class[2] = BTM_COD_MINOR_GAMEPAD;
2172             break;
2173         case BTM_BLE_APPEARANCE_HID_DIGITIZER_TABLET:
2174             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2175             dev_class[2] = BTM_COD_MINOR_DIGITIZING_TABLET;
2176             break;
2177         case BTM_BLE_APPEARANCE_HID_CARD_READER:
2178             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2179             dev_class[2] = BTM_COD_MINOR_CARD_READER;
2180             break;
2181         case BTM_BLE_APPEARANCE_HID_DIGITAL_PEN:
2182             dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2183             dev_class[2] = BTM_COD_MINOR_DIGITAL_PAN;
2184             break;
2185         case BTM_BLE_APPEARANCE_UKNOWN:
2186         case BTM_BLE_APPEARANCE_GENERIC_CLOCK:
2187         case BTM_BLE_APPEARANCE_GENERIC_TAG:
2188         case BTM_BLE_APPEARANCE_GENERIC_KEYRING:
2189         case BTM_BLE_APPEARANCE_GENERIC_CYCLING:
2190         case BTM_BLE_APPEARANCE_CYCLING_COMPUTER:
2191         case BTM_BLE_APPEARANCE_CYCLING_SPEED:
2192         case BTM_BLE_APPEARANCE_CYCLING_CADENCE:
2193         case BTM_BLE_APPEARANCE_CYCLING_POWER:
2194         case BTM_BLE_APPEARANCE_CYCLING_SPEED_CADENCE:
2195         case BTM_BLE_APPEARANCE_GENERIC_OUTDOOR_SPORTS:
2196         case BTM_BLE_APPEARANCE_OUTDOOR_SPORTS_LOCATION:
2197         case BTM_BLE_APPEARANCE_OUTDOOR_SPORTS_LOCATION_AND_NAV:
2198         case BTM_BLE_APPEARANCE_OUTDOOR_SPORTS_LOCATION_POD:
2199         case BTM_BLE_APPEARANCE_OUTDOOR_SPORTS_LOCATION_POD_AND_NAV:
2200         default:
2201             dev_class[1] = BTM_COD_MAJOR_UNCLASSIFIED;
2202             dev_class[2] = BTM_COD_MINOR_UNCLASSIFIED;
2203     };
2204 }
2205
2206 /*******************************************************************************
2207 **
2208 ** Function         btm_ble_update_inq_result
2209 **
2210 ** Description      Update adv packet information into inquiry result.
2211 **
2212 ** Parameters
2213 **
2214 ** Returns          void
2215 **
2216 *******************************************************************************/
2217 BOOLEAN btm_ble_update_inq_result(tINQ_DB_ENT *p_i, UINT8 addr_type, UINT8 evt_type, UINT8 *p)
2218 {
2219     BOOLEAN             to_report = TRUE;
2220     tBTM_INQ_RESULTS     *p_cur = &p_i->inq_info.results;
2221     UINT8               len;
2222     UINT8               *p_flag;
2223     tBTM_INQUIRY_VAR_ST  *p_inq = &btm_cb.btm_inq_vars;
2224     UINT8                data_len, rssi;
2225     tBTM_BLE_INQ_CB     *p_le_inq_cb = &btm_cb.ble_ctr_cb.inq_var;
2226     UINT8 *p1;
2227     UINT8               *p_uuid16;
2228
2229     STREAM_TO_UINT8    (data_len, p);
2230
2231     if (data_len > BTM_BLE_ADV_DATA_LEN_MAX)
2232     {
2233         BTM_TRACE_WARNING("EIR data too long %d. discard", data_len);
2234         return FALSE;
2235     }
2236     btm_ble_cache_adv_data(p_cur, data_len, p, evt_type);
2237
2238     p1 = (p + data_len);
2239     STREAM_TO_UINT8 (rssi, p1);
2240
2241     /* Save the info */
2242     p_cur->inq_result_type = BTM_INQ_RESULT_BLE;
2243     p_cur->ble_addr_type    = addr_type;
2244     p_cur->rssi = rssi;
2245
2246     /* active scan, always wait until get scan_rsp to report the result */
2247     if ((btm_cb.ble_ctr_cb.inq_var.scan_type == BTM_BLE_SCAN_MODE_ACTI &&
2248          (evt_type == BTM_BLE_CONNECT_EVT || evt_type == BTM_BLE_DISCOVER_EVT)))
2249     {
2250         BTM_TRACE_DEBUG("btm_ble_update_inq_result scan_rsp=false, to_report=false,\
2251                               scan_type_active=%d", btm_cb.ble_ctr_cb.inq_var.scan_type);
2252         p_i->scan_rsp = FALSE;
2253         to_report = FALSE;
2254     }
2255     else
2256         p_i->scan_rsp = TRUE;
2257
2258     if (p_i->inq_count != p_inq->inq_counter)
2259         p_cur->device_type = BT_DEVICE_TYPE_BLE;
2260     else
2261         p_cur->device_type |= BT_DEVICE_TYPE_BLE;
2262
2263     if (evt_type != BTM_BLE_SCAN_RSP_EVT)
2264         p_cur->ble_evt_type     = evt_type;
2265
2266     p_i->inq_count = p_inq->inq_counter;   /* Mark entry for current inquiry */
2267
2268     if (p_le_inq_cb->adv_len != 0)
2269     {
2270         if ((p_flag = BTM_CheckAdvData(p_le_inq_cb->adv_data_cache, BTM_BLE_AD_TYPE_FLAG, &len)) != NULL)
2271             p_cur->flag = * p_flag;
2272     }
2273
2274     if (p_le_inq_cb->adv_len != 0)
2275     {
2276         /* Check to see the BLE device has the Appearance UUID in the advertising data.  If it does
2277          * then try to convert the appearance value to a class of device value Bluedroid can use.
2278          * Otherwise fall back to trying to infer if it is a HID device based on the service class.
2279          */
2280         p_uuid16 = BTM_CheckAdvData(p_le_inq_cb->adv_data_cache, BTM_BLE_AD_TYPE_APPEARANCE, &len);
2281         if (p_uuid16 && len == 2)
2282         {
2283             btm_ble_appearance_to_cod((UINT16)p_uuid16[0] | (p_uuid16[1] << 8), p_cur->dev_class);
2284         }
2285         else
2286         {
2287             if ((p_uuid16 = BTM_CheckAdvData(p_le_inq_cb->adv_data_cache,
2288                                              BTM_BLE_AD_TYPE_16SRV_CMPL, &len)) != NULL)
2289             {
2290                 UINT8 i;
2291                 for (i = 0; i + 2 <= len; i = i + 2)
2292                 {
2293                     /* if this BLE device support HID over LE, set HID Major in class of device */
2294                     if ((p_uuid16[i] | (p_uuid16[i+1] << 8)) == UUID_SERVCLASS_LE_HID)
2295                     {
2296                         p_cur->dev_class[0] = 0;
2297                         p_cur->dev_class[1] = BTM_COD_MAJOR_PERIPHERAL;
2298                         p_cur->dev_class[2] = 0;
2299                         break;
2300                     }
2301                 }
2302             }
2303         }
2304     }
2305
2306     /* if BR/EDR not supported is not set, assume is a DUMO device */
2307     if ((p_cur->flag & BTM_BLE_BREDR_NOT_SPT) == 0 &&
2308          evt_type != BTM_BLE_CONNECT_DIR_EVT)
2309     {
2310         if (p_cur->ble_addr_type != BLE_ADDR_RANDOM)
2311         {
2312             BTM_TRACE_DEBUG("BR/EDR NOT support bit not set, treat as DUMO");
2313             p_cur->device_type |= BT_DEVICE_TYPE_DUMO;
2314         } else {
2315             BTM_TRACE_DEBUG("Random address, treating device as LE only");
2316         }
2317     }
2318     else
2319     {
2320         BTM_TRACE_DEBUG("BR/EDR NOT SUPPORT bit set, LE only device");
2321     }
2322
2323     return to_report;
2324
2325 }
2326
2327 /*******************************************************************************
2328 **
2329 ** Function         btm_send_sel_conn_callback
2330 **
2331 ** Description      send selection connection request callback.
2332 **
2333 ** Parameters
2334 **
2335 ** Returns          void
2336 **
2337 *******************************************************************************/
2338 void btm_send_sel_conn_callback(BD_ADDR remote_bda, UINT8 evt_type, UINT8 *p_data, UINT8 addr_type)
2339 {
2340     UINT8   data_len, len;
2341     UINT8   *p_dev_name, remname[31] = {0};
2342     UNUSED(addr_type);
2343
2344     if (btm_cb.ble_ctr_cb.p_select_cback == NULL ||
2345         /* non-connectable device */
2346         (evt_type != BTM_BLE_EVT_CONN_ADV && evt_type != BTM_BLE_EVT_CONN_DIR_ADV))
2347         return;
2348
2349     STREAM_TO_UINT8    (data_len, p_data);
2350
2351     /* get the device name if exist in ADV data */
2352     if (data_len != 0)
2353     {
2354         p_dev_name = BTM_CheckAdvData(p_data, BTM_BLE_AD_TYPE_NAME_CMPL, &len);
2355
2356         if (p_dev_name == NULL)
2357             p_dev_name = BTM_CheckAdvData(p_data, BTM_BLE_AD_TYPE_NAME_SHORT, &len);
2358
2359         if (p_dev_name)
2360             memcpy(remname, p_dev_name, len);
2361     }
2362     /* allow connection */
2363     if ((* btm_cb.ble_ctr_cb.p_select_cback)(remote_bda, remname))
2364     {
2365         /* terminate selective connection, initiate connection */
2366         btm_ble_initiate_select_conn(remote_bda);
2367     }
2368 }
2369
2370 /*******************************************************************************
2371 **
2372 ** Function         btm_ble_process_adv_pkt
2373 **
2374 ** Description      This function is called when adv packet report events are
2375 **                  received from the device. It updates the inquiry database.
2376 **                  If the inquiry database is full, the oldest entry is discarded.
2377 **
2378 ** Parameters
2379 **
2380 ** Returns          void
2381 **
2382 *******************************************************************************/
2383 void btm_ble_process_adv_pkt (UINT8 *p_data)
2384 {
2385     BD_ADDR             bda;
2386     UINT8               evt_type = 0, *p = p_data;
2387     UINT8               addr_type = 0;
2388     UINT8               num_reports;
2389     UINT8               data_len;
2390 #if (defined BLE_PRIVACY_SPT && BLE_PRIVACY_SPT == TRUE)
2391     BOOLEAN             match = FALSE;
2392 #endif
2393
2394     /* Extract the number of reports in this event. */
2395     STREAM_TO_UINT8(num_reports, p);
2396
2397     while (num_reports--)
2398     {
2399         /* Extract inquiry results */
2400         STREAM_TO_UINT8    (evt_type, p);
2401         STREAM_TO_UINT8    (addr_type, p);
2402         STREAM_TO_BDADDR   (bda, p);
2403
2404 #ifdef BTM_BLE_PC_ADV_TEST_MODE /* For general stack code (e.g. BTInsight testing), we simply do not define it to exclude or set it to TRUE to include */
2405         if (BTM_BLE_PC_ADV_TEST_MODE)   /* For stack component, it is always defined and maps to a global variable g_bDraculaAdvertisingMode */
2406         {
2407             if (btm_cb.ble_ctr_cb.p_scan_req_cback)
2408                 (*btm_cb.ble_ctr_cb.p_scan_req_cback)(bda, addr_type, evt_type);
2409         }
2410 #endif
2411
2412 #if (defined BLE_PRIVACY_SPT && BLE_PRIVACY_SPT == TRUE)
2413 #if (defined BLE_VND_INCLUDED && BLE_VND_INCLUDED == TRUE)
2414     /* map address to security record */
2415     btm_public_addr_to_random_pseudo(bda, &addr_type);
2416     BTM_TRACE_ERROR("new address: %02x:%02x:%02x:%02x:%02x:%02x",
2417                      bda[0], bda[1], bda[2], bda[3], bda[4], bda[5]);
2418 #endif
2419 #endif
2420
2421         /* Only process the results if the inquiry is still active */
2422         if (!BTM_BLE_IS_SCAN_ACTIVE(btm_cb.ble_ctr_cb.scan_activity))
2423             return;
2424
2425     BTM_TRACE_DEBUG("btm_ble_process_adv_pkt:bda= %0x:%0x:%0x:%0x:%0x:%0x",
2426                                      bda[0],bda[1],bda[2],bda[3],bda[4],bda[5]);
2427 #if (defined BLE_PRIVACY_SPT && BLE_PRIVACY_SPT == TRUE)
2428 #if SMP_INCLUDED == TRUE
2429         /* always do RRA resolution on host */
2430         if (!match && BTM_BLE_IS_RESOLVE_BDA(bda))
2431         {
2432             btm_ble_resolve_random_addr(bda, btm_ble_resolve_random_addr_on_adv, p_data);
2433         }
2434         else
2435 #endif
2436 #endif
2437         {
2438             btm_ble_process_adv_pkt_cont(bda, addr_type, evt_type, p);
2439         }
2440
2441         STREAM_TO_UINT8(data_len, p);
2442
2443         /* Advance to the next event data_len + rssi byte */
2444         p += data_len + 1;
2445     }
2446 }
2447
2448 /*******************************************************************************
2449 **
2450 ** Function         btm_ble_process_adv_pkt_cont
2451 **
2452 ** Description      This function is called after random address resolution is
2453 **                  done, and proceed to process adv packet.
2454 **
2455 ** Parameters
2456 **
2457 ** Returns          void
2458 **
2459 *******************************************************************************/
2460 static void btm_ble_process_adv_pkt_cont(BD_ADDR bda, UINT8 addr_type, UINT8 evt_type, UINT8 *p)
2461 {
2462     tINQ_DB_ENT          *p_i;
2463     tBTM_INQUIRY_VAR_ST  *p_inq = &btm_cb.btm_inq_vars;
2464     tBTM_INQ_RESULTS_CB  *p_inq_results_cb = p_inq->p_inq_results_cb;
2465     tBTM_INQ_RESULTS_CB  *p_obs_results_cb = btm_cb.ble_ctr_cb.p_obs_results_cb;
2466     tBTM_BLE_INQ_CB      *p_le_inq_cb = &btm_cb.ble_ctr_cb.inq_var;
2467     BOOLEAN     update = TRUE;
2468     UINT8       result = 0;
2469
2470     p_i = btm_inq_db_find (bda);
2471
2472     /* Check if this address has already been processed for this inquiry */
2473     if (btm_inq_find_bdaddr(bda))
2474     {
2475         /* never been report as an LE device */
2476         if (p_i &&
2477             (!(p_i->inq_info.results.device_type & BT_DEVICE_TYPE_BLE) ||
2478               /* scan repsonse to be updated */
2479               (!p_i->scan_rsp)))
2480         {
2481             update = TRUE;
2482         }
2483         else if (BTM_BLE_IS_OBS_ACTIVE(btm_cb.ble_ctr_cb.scan_activity))
2484         {
2485             update = FALSE;
2486         }
2487         else
2488         {
2489             /* if yes, skip it */
2490             return; /* assumption: one result per event */
2491         }
2492     }
2493     /* If existing entry, use that, else get  a new one (possibly reusing the oldest) */
2494     if (p_i == NULL)
2495     {
2496         if ((p_i = btm_inq_db_new (bda)) != NULL)
2497         {
2498             p_inq->inq_cmpl_info.num_resp++;
2499         }
2500         else
2501             return;
2502     }
2503     else if (p_i->inq_count != p_inq->inq_counter) /* first time seen in this inquiry */
2504     {
2505         p_inq->inq_cmpl_info.num_resp++;
2506     }
2507     /* update the LE device information in inquiry database */
2508     if (!btm_ble_update_inq_result(p_i, addr_type, evt_type, p))
2509         return;
2510
2511     if ((result = btm_ble_is_discoverable(bda, evt_type, p)) == 0)
2512     {
2513         BTM_TRACE_ERROR("discard adv pkt");
2514         return;
2515     }
2516     if (!update)
2517         result &= ~BTM_BLE_INQ_RESULT;
2518 #if BTM_USE_INQ_RESULTS_FILTER == TRUE
2519     /* If the number of responses found and limited, issue a cancel inquiry */
2520     if (p_inq->inqparms.max_resps &&
2521         p_inq->inq_cmpl_info.num_resp == p_inq->inqparms.max_resps)
2522     {
2523         /* new device */
2524         if (p_i == NULL ||
2525             (/* assume a DUMO device, BR/EDR inquiry is always active */
2526              p_i && p_i->inq_info.results.device_type == BT_DEVICE_TYPE_BLE && p_i->scan_rsp))
2527         {
2528             BTM_TRACE_WARNING("INQ RES: Extra Response Received...cancelling inquiry..");
2529
2530             /* if is non-periodic inquiry active, cancel now */
2531             if ((p_inq->inq_active & BTM_BR_INQ_ACTIVE_MASK) != 0 &&
2532                 (p_inq->inq_active & BTM_PERIODIC_INQUIRY_ACTIVE) == 0)
2533                 btsnd_hcic_inq_cancel();
2534
2535             btm_ble_stop_inquiry();
2536
2537 #if BTM_BUSY_LEVEL_CHANGE_INCLUDED == TRUE
2538             btm_acl_update_busy_level (BTM_BLI_INQ_DONE_EVT);
2539 #endif
2540         }
2541     }
2542 #endif
2543     /* background connection in selective connection mode */
2544     if (btm_cb.ble_ctr_cb.bg_conn_type == BTM_BLE_CONN_SELECTIVE)
2545     {
2546         if (result & BTM_BLE_SEL_CONN_RESULT)
2547             btm_send_sel_conn_callback(bda, evt_type, p, addr_type);
2548         else
2549         {
2550             BTM_TRACE_DEBUG("None LE device, can not initiate selective connection");
2551         }
2552     }
2553     else
2554     {
2555         if (p_inq_results_cb && (result & BTM_BLE_INQ_RESULT))
2556         {
2557             (p_inq_results_cb)((tBTM_INQ_RESULTS *) &p_i->inq_info.results, p_le_inq_cb->adv_data_cache);
2558         }
2559         if (p_obs_results_cb && (result & BTM_BLE_OBS_RESULT))
2560         {
2561             (p_obs_results_cb)((tBTM_INQ_RESULTS *) &p_i->inq_info.results, p_le_inq_cb->adv_data_cache);
2562         }
2563     }
2564 }
2565
2566 /*******************************************************************************
2567 **
2568 ** Function         btm_ble_start_scan
2569 **
2570 ** Description      Start the BLE scan.
2571 **
2572 ** Returns          void
2573 **
2574 *******************************************************************************/
2575 tBTM_STATUS btm_ble_start_scan (UINT8 filter_enable)
2576 {
2577     tBTM_BLE_INQ_CB *p_inq = &btm_cb.ble_ctr_cb.inq_var;
2578     tBTM_STATUS status = BTM_CMD_STARTED;
2579
2580     /* start scan, disable duplicate filtering */
2581     if (!btsnd_hcic_ble_set_scan_enable (BTM_BLE_SCAN_ENABLE, filter_enable)) {
2582         status = BTM_NO_RESOURCES;
2583         btm_cb.ble_ctr_cb.wl_state &= ~BTM_BLE_WL_SCAN;
2584     }
2585     else
2586     {
2587         btm_cb.ble_ctr_cb.wl_state |= BTM_BLE_WL_SCAN;
2588         if (p_inq->scan_type == BTM_BLE_SCAN_MODE_ACTI)
2589             btm_ble_set_topology_mask(BTM_BLE_STATE_ACTIVE_SCAN_BIT);
2590         else
2591             btm_ble_set_topology_mask(BTM_BLE_STATE_PASSIVE_SCAN_BIT);
2592     }
2593     return status;
2594 }
2595
2596 /*******************************************************************************
2597 **
2598 ** Function         btm_ble_stop_scan
2599 **
2600 ** Description      Stop the BLE scan.
2601 **
2602 ** Returns          void
2603 **
2604 *******************************************************************************/
2605 void btm_ble_stop_scan(void)
2606 {
2607     BTM_TRACE_EVENT ("btm_ble_stop_scan ");
2608
2609     /* Clear the inquiry callback if set */
2610     btm_cb.ble_ctr_cb.inq_var.scan_type = BTM_BLE_SCAN_MODE_NONE;
2611
2612     /* stop discovery now */
2613     btsnd_hcic_ble_set_scan_enable (BTM_BLE_SCAN_DISABLE, BTM_BLE_DUPLICATE_ENABLE);
2614
2615     btm_update_scanner_filter_policy(SP_ADV_ALL);
2616
2617     btm_cb.ble_ctr_cb.wl_state &= ~BTM_BLE_WL_SCAN;
2618 }
2619 /*******************************************************************************
2620 **
2621 ** Function         btm_ble_stop_inquiry
2622 **
2623 ** Description      Stop the BLE Inquiry.
2624 **
2625 ** Returns          void
2626 **
2627 *******************************************************************************/
2628 void btm_ble_stop_inquiry(void)
2629 {
2630     tBTM_INQUIRY_VAR_ST *p_inq = &btm_cb.btm_inq_vars;
2631     tBTM_BLE_CB *p_ble_cb = &btm_cb.ble_ctr_cb;
2632
2633     btu_stop_timer (&p_ble_cb->inq_var.inq_timer_ent);
2634
2635     p_ble_cb->scan_activity &=  ~BTM_BLE_INQUIRY_MASK;
2636
2637     /* If no more scan activity, stop LE scan now */
2638     if (!BTM_BLE_IS_SCAN_ACTIVE(p_ble_cb->scan_activity))
2639         btm_ble_stop_scan();
2640
2641     /* If we have a callback registered for inquiry complete, call it */
2642     BTM_TRACE_DEBUG ("BTM Inq Compl Callback: status 0x%02x, num results %d",
2643                       p_inq->inq_cmpl_info.status, p_inq->inq_cmpl_info.num_resp);
2644
2645     btm_process_inq_complete(HCI_SUCCESS, (UINT8)(p_inq->inqparms.mode & BTM_BLE_INQUIRY_MASK));
2646 }
2647
2648 /*******************************************************************************
2649 **
2650 ** Function         btm_ble_stop_observe
2651 **
2652 ** Description      Stop the BLE Observe.
2653 **
2654 ** Returns          void
2655 **
2656 *******************************************************************************/
2657 static void btm_ble_stop_observe(void)
2658 {
2659     tBTM_BLE_CB *p_ble_cb = & btm_cb.ble_ctr_cb;
2660     tBTM_CMPL_CB *p_obs_cb = p_ble_cb->p_obs_cmpl_cb;
2661
2662     btu_stop_timer (&p_ble_cb->obs_timer_ent);
2663
2664     p_ble_cb->scan_activity &= ~BTM_LE_OBSERVE_ACTIVE;
2665
2666     p_ble_cb->p_obs_results_cb = NULL;
2667     p_ble_cb->p_obs_cmpl_cb = NULL;
2668
2669     if (!BTM_BLE_IS_SCAN_ACTIVE(p_ble_cb->scan_activity))
2670         btm_ble_stop_scan();
2671
2672     if (p_obs_cb)
2673         (p_obs_cb)((tBTM_INQUIRY_CMPL *) &btm_cb.btm_inq_vars.inq_cmpl_info);
2674 }
2675 /*******************************************************************************
2676 **
2677 ** Function         btm_ble_adv_states_operation
2678 **
2679 ** Description      Set or clear adv states in topology mask
2680 **
2681 ** Returns          operation status. TRUE if sucessful, FALSE otherwise.
2682 **
2683 *******************************************************************************/
2684 typedef BOOLEAN (BTM_TOPOLOGY_FUNC_PTR)(tBTM_BLE_STATE_MASK);
2685 static BOOLEAN btm_ble_adv_states_operation(BTM_TOPOLOGY_FUNC_PTR *p_handler, UINT8 adv_evt)
2686 {
2687     BOOLEAN rt = FALSE;
2688
2689     switch (adv_evt)
2690     {
2691     case BTM_BLE_CONNECT_EVT:
2692         rt  = (*p_handler)(BTM_BLE_STATE_CONN_ADV_BIT);
2693         break;
2694
2695     case  BTM_BLE_NON_CONNECT_EVT:
2696         rt  = (*p_handler) (BTM_BLE_STATE_NON_CONN_ADV_BIT);
2697         break;
2698     case BTM_BLE_CONNECT_DIR_EVT:
2699         rt  =  (*p_handler) (BTM_BLE_STATE_HI_DUTY_DIR_ADV_BIT);
2700         break;
2701
2702     case BTM_BLE_DISCOVER_EVT:
2703         rt  =  (*p_handler) (BTM_BLE_STATE_SCAN_ADV_BIT);
2704         break;
2705
2706     default:
2707         BTM_TRACE_ERROR("unknown adv event : %d", adv_evt);
2708         break;
2709     }
2710
2711     return rt;
2712 }
2713
2714
2715 /*******************************************************************************
2716 **
2717 ** Function         btm_ble_start_adv
2718 **
2719 ** Description      start the BLE advertising.
2720 **
2721 ** Returns          void
2722 **
2723 *******************************************************************************/
2724 tBTM_STATUS btm_ble_start_adv(void)
2725 {
2726     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
2727     tBTM_STATUS     rt = BTM_NO_RESOURCES;
2728
2729     if (!btm_ble_adv_states_operation (btm_ble_topology_check, p_cb->evt_type))
2730         return BTM_WRONG_MODE;
2731
2732     if (p_cb->afp != AP_SCAN_CONN_ALL)
2733     {
2734         btm_execute_wl_dev_operation();
2735         btm_cb.ble_ctr_cb.wl_state |= BTM_BLE_WL_ADV;
2736     }
2737
2738     if (btsnd_hcic_ble_set_adv_enable (BTM_BLE_ADV_ENABLE))
2739     {
2740         if (p_cb->afp != AP_SCAN_CONN_ALL)
2741              btm_cb.ble_ctr_cb.wl_state |= BTM_BLE_WL_ADV;
2742
2743          p_cb->adv_mode = BTM_BLE_ADV_ENABLE;
2744
2745          rt = BTM_SUCCESS;
2746     }
2747     else
2748     {
2749         p_cb->adv_mode = BTM_BLE_ADV_DISABLE;
2750         btm_cb.ble_ctr_cb.wl_state &= ~BTM_BLE_WL_ADV;
2751     }
2752     return rt;
2753 }
2754 /*******************************************************************************
2755 **
2756 ** Function         btm_ble_stop_adv
2757 **
2758 ** Description      Stop the BLE advertising.
2759 **
2760 ** Returns          void
2761 **
2762 *******************************************************************************/
2763 tBTM_STATUS btm_ble_stop_adv(void)
2764 {
2765     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
2766     tBTM_STATUS rt = BTM_SUCCESS;
2767
2768     if (p_cb->adv_mode == BTM_BLE_ADV_ENABLE)
2769     {
2770         if (btsnd_hcic_ble_set_adv_enable (BTM_BLE_ADV_DISABLE))
2771         {
2772             p_cb->fast_adv_on = FALSE;
2773             p_cb->adv_mode = BTM_BLE_ADV_DISABLE;
2774             btm_cb.ble_ctr_cb.wl_state &= ~BTM_BLE_WL_ADV;
2775
2776             /* clear all adv states */
2777             btm_ble_clear_topology_mask (BTM_BLE_STATE_ALL_ADV_MASK);
2778         }
2779         else
2780             rt = BTM_NO_RESOURCES;
2781     }
2782     return rt;
2783 }
2784
2785
2786 /*******************************************************************************
2787 **
2788 ** Function         btm_ble_set_topology_mask
2789 **
2790 ** Description      set BLE topology mask
2791 **
2792 ** Returns          TRUE is request is allowed, FALSE otherwise.
2793 **
2794 *******************************************************************************/
2795 BOOLEAN btm_ble_set_topology_mask(tBTM_BLE_STATE_MASK request_state_mask)
2796 {
2797     BOOLEAN rt = TRUE;
2798
2799     request_state_mask &= BTM_BLE_STATE_ALL_MASK;
2800
2801     btm_cb.ble_ctr_cb.cur_states |= request_state_mask;
2802
2803     return rt;
2804 }
2805 /*******************************************************************************
2806 **
2807 ** Function         btm_ble_clear_topology_mask
2808 **
2809 ** Description      Clear BLE topology bit mask
2810 **
2811 ** Returns          TRUE is request is allowed, FALSE otherwise.
2812 **
2813 *******************************************************************************/
2814 BOOLEAN btm_ble_clear_topology_mask (tBTM_BLE_STATE_MASK request_state_mask)
2815 {
2816     request_state_mask &= BTM_BLE_STATE_ALL_MASK;
2817
2818     btm_cb.ble_ctr_cb.cur_states &= ~request_state_mask;
2819
2820     return TRUE;
2821 }
2822 /*******************************************************************************
2823 **
2824 ** Function         btm_ble_update_mode_operation
2825 **
2826 ** Description      This function update the GAP role operation when a link status
2827 **                  is updated.
2828 **
2829 ** Returns          void
2830 **
2831 *******************************************************************************/
2832 void btm_ble_update_mode_operation(UINT8 link_role, BD_ADDR bd_addr, BOOLEAN conn_cancel)
2833 {
2834     tACL_CONN   *pa = &btm_cb.acl_db[0];
2835     UINT16       xx;
2836     UINT16       mask = BTM_BLE_STATE_ALL_CONN_MASK;
2837
2838     UNUSED(bd_addr);
2839     UNUSED (conn_cancel);
2840
2841     if (link_role == HCI_ROLE_SLAVE)
2842     {
2843         btm_cb.ble_ctr_cb.inq_var.adv_mode  = BTM_BLE_ADV_DISABLE;
2844         /* clear all adv states */
2845         mask |= BTM_BLE_STATE_ALL_ADV_MASK;
2846     }
2847
2848     btm_ble_clear_topology_mask (mask);
2849
2850     /* check the device link role maps */
2851     for (xx = 0; xx < MAX_L2CAP_LINKS; xx++, pa++)
2852     {
2853         if (pa->in_use && pa->transport == BT_TRANSPORT_LE)
2854         {
2855             if (pa->link_role == HCI_ROLE_MASTER)
2856                 btm_ble_set_topology_mask (BTM_BLE_STATE_MASTER_BIT);
2857             else
2858                 btm_ble_set_topology_mask (BTM_BLE_STATE_SLAVE_BIT);
2859         }
2860     }
2861
2862     if (btm_cb.cmn_ble_vsc_cb.adv_inst_max == 0 &&
2863         btm_cb.ble_ctr_cb.inq_var.connectable_mode == BTM_BLE_CONNECTABLE)
2864     {
2865         btm_ble_set_connectability ( btm_cb.ble_ctr_cb.inq_var.connectable_mode );
2866     }
2867
2868     if (btm_ble_get_conn_st() == BLE_CONN_IDLE)
2869     {
2870         if (!btm_send_pending_direct_conn())
2871         {
2872             btm_ble_resume_bg_conn();
2873         }
2874     }
2875 }
2876
2877 /*******************************************************************************
2878 **
2879 ** Function         btm_ble_start_slow_adv
2880 **
2881 ** Description      Restart adv with slow adv interval
2882 **
2883 ** Returns          void
2884 **
2885 *******************************************************************************/
2886 static void btm_ble_start_slow_adv (void)
2887 {
2888     tBTM_BLE_INQ_CB         *p_cb = &btm_cb.ble_ctr_cb.inq_var;
2889     BD_ADDR                 p_addr_ptr= {0};
2890
2891     if (p_cb->adv_mode == BTM_BLE_ADV_ENABLE)
2892     {
2893         btm_ble_stop_adv();
2894
2895         btsnd_hcic_ble_write_adv_params (BTM_BLE_GAP_ADV_SLOW_INT,
2896                                          BTM_BLE_GAP_ADV_SLOW_INT,
2897                                          p_cb->evt_type,
2898                                          p_cb->adv_addr_type,
2899                                          btm_cb.ble_ctr_cb.addr_mgnt_cb.own_addr_type,/* slow adv
2900                                          mode never goes into directed adv */
2901                                          p_addr_ptr,
2902                                          p_cb->adv_chnl_map,
2903                                          p_cb->afp);
2904
2905         btm_ble_start_adv();
2906     }
2907 }
2908 /*******************************************************************************
2909 **
2910 ** Function         btm_ble_timeout
2911 **
2912 ** Description      Called when BTM BLE inquiry timer expires
2913 **
2914 ** Returns          void
2915 **
2916 *******************************************************************************/
2917 void btm_ble_timeout(TIMER_LIST_ENT *p_tle)
2918 {
2919     BTM_TRACE_EVENT ("btm_ble_timeout");
2920
2921     switch (p_tle->event)
2922     {
2923         case BTU_TTYPE_BLE_OBSERVE:
2924             btm_ble_stop_observe();
2925             break;
2926
2927         case BTU_TTYPE_BLE_INQUIRY:
2928             btm_ble_stop_inquiry();
2929             break;
2930
2931         case BTU_TTYPE_BLE_GAP_LIM_DISC:
2932             /* lim_timeout expiried, limited discovery should exit now */
2933             btm_cb.btm_inq_vars.discoverable_mode &= ~BTM_BLE_LIMITED_DISCOVERABLE;
2934             btm_ble_set_adv_flag(btm_cb.btm_inq_vars.connectable_mode, btm_cb.btm_inq_vars.discoverable_mode);
2935             break;
2936
2937         case BTU_TTYPE_BLE_RANDOM_ADDR:
2938             if (btm_cb.ble_ctr_cb.addr_mgnt_cb.own_addr_type == BLE_ADDR_RANDOM)
2939             {
2940                 if ((void *)(p_tle->param) == NULL)
2941                 /* refresh the random addr */
2942                 btm_gen_resolvable_private_addr((void *)btm_gen_resolve_paddr_low);
2943                 else
2944                 {
2945 #if BLE_MULTI_ADV_INCLUDED == TRUE
2946                   btm_ble_multi_adv_configure_rpa((tBTM_BLE_MULTI_ADV_INST*)p_tle->param);
2947 #endif
2948                 }
2949             }
2950             break;
2951
2952         case BTU_TTYPE_BLE_GAP_FAST_ADV:
2953             /* fast adv is completed, fall back to slow adv interval */
2954             btm_ble_start_slow_adv();
2955             break;
2956
2957         default:
2958             break;
2959
2960     }
2961 }
2962
2963
2964 /*******************************************************************************
2965 **
2966 ** Function         btm_ble_read_remote_features_complete
2967 **
2968 ** Description      This function is called when the command complete message
2969 **                  is received from the HCI for the read LE remote feature supported
2970 **                  complete event.
2971 **
2972 ** Returns          void
2973 **
2974 *******************************************************************************/
2975 void btm_ble_read_remote_features_complete(UINT8 *p)
2976 {
2977     tACL_CONN        *p_acl_cb = &btm_cb.acl_db[0];
2978     UINT16            handle;
2979     int               xx;
2980
2981     BTM_TRACE_EVENT ("btm_ble_read_remote_features_complete ");
2982
2983     /* Skip status */
2984     p++;
2985     STREAM_TO_UINT16 (handle, p);
2986
2987     /* Look up the connection by handle and copy features */
2988     for (xx = 0; xx < MAX_L2CAP_LINKS; xx++, p_acl_cb++)
2989     {
2990         if ((p_acl_cb->in_use) && (p_acl_cb->hci_handle == handle))
2991         {
2992             STREAM_TO_ARRAY(p_acl_cb->peer_le_features, p, BD_FEATURES_LEN);
2993             break;
2994         }
2995     }
2996
2997 }
2998
2999 /*******************************************************************************
3000 **
3001 ** Function         btm_ble_write_adv_enable_complete
3002 **
3003 ** Description      This function process the write adv enable command complete.
3004 **
3005 ** Returns          void
3006 **
3007 *******************************************************************************/
3008 void btm_ble_write_adv_enable_complete(UINT8 * p)
3009 {
3010     tBTM_BLE_INQ_CB *p_cb = &btm_cb.ble_ctr_cb.inq_var;
3011
3012     /* if write adv enable/disbale not succeed */
3013     if (*p != HCI_SUCCESS)
3014     {
3015         /* toggle back the adv mode */
3016         p_cb->adv_mode = !p_cb->adv_mode;
3017     }
3018
3019 #if (BLE_VND_INCLUDED == TRUE && BLE_PRIVACY_SPT == TRUE)
3020     if (p_cb->adv_mode == BTM_BLE_ADV_DISABLE)
3021         btm_ble_vendor_disable_irk_list();
3022 #endif
3023 }
3024
3025 /*******************************************************************************
3026 **
3027 ** Function         btm_ble_dir_adv_tout
3028 **
3029 ** Description      when directed adv time out
3030 **
3031 ** Returns          void
3032 **
3033 *******************************************************************************/
3034 void btm_ble_dir_adv_tout(void)
3035 {
3036     btm_cb.ble_ctr_cb.inq_var.adv_mode = BTM_BLE_ADV_DISABLE;
3037
3038     /* make device fall back into undirected adv mode by default */
3039     btm_cb.ble_ctr_cb.inq_var.directed_conn = FALSE;
3040 }
3041
3042 /*******************************************************************************
3043 **
3044 ** Function         btm_ble_init
3045 **
3046 ** Description      Initialize the control block variable values.
3047 **
3048 ** Returns          void
3049 **
3050 *******************************************************************************/
3051 void btm_ble_init (void)
3052 {
3053     tBTM_BLE_CB *p_cb = &btm_cb.ble_ctr_cb;
3054
3055     BTM_TRACE_EVENT ("btm_ble_init ");
3056
3057     memset(p_cb, 0, sizeof(tBTM_BLE_CB));
3058     memset(&btm_cb.cmn_ble_vsc_cb, 0 , sizeof(tBTM_BLE_VSC_CB));
3059     p_cb->cur_states       = 0;
3060
3061     p_cb->inq_var.adv_mode = BTM_BLE_ADV_DISABLE;
3062     p_cb->inq_var.scan_type = BTM_BLE_SCAN_MODE_NONE;
3063     p_cb->inq_var.adv_chnl_map = BTM_BLE_DEFAULT_ADV_CHNL_MAP;
3064     p_cb->inq_var.afp = BTM_BLE_DEFAULT_AFP;
3065     p_cb->inq_var.sfp = BTM_BLE_DEFAULT_SFP;
3066     p_cb->inq_var.connectable_mode = BTM_BLE_NON_CONNECTABLE;
3067     p_cb->inq_var.discoverable_mode = BTM_BLE_NON_DISCOVERABLE;
3068
3069     /* for background connection, reset connection params to be undefined */
3070     p_cb->scan_int = p_cb->scan_win = BTM_BLE_CONN_PARAM_UNDEF;
3071
3072     p_cb->inq_var.evt_type = BTM_BLE_NON_CONNECT_EVT;
3073 #if BLE_MULTI_ADV_INCLUDED == TRUE
3074     btm_ble_multi_adv_init();
3075 #endif
3076
3077 #if BLE_BATCH_SCAN_INCLUDED == TRUE
3078     btm_ble_batchscan_init();
3079 #endif
3080
3081 #if BLE_ANDROID_CONTROLLER_SCAN_FILTER == TRUE
3082     btm_ble_adv_filter_init();
3083 #endif
3084 }
3085
3086 /*******************************************************************************
3087 **
3088 ** Function         btm_ble_topology_check
3089 **
3090 ** Description      check to see requested state is supported. One state check at
3091 **                  a time is supported
3092 **
3093 ** Returns          TRUE is request is allowed, FALSE otherwise.
3094 **
3095 *******************************************************************************/
3096 BOOLEAN btm_ble_topology_check(tBTM_BLE_STATE_MASK request_state_mask)
3097 {
3098     BOOLEAN rt = FALSE;
3099     UINT32  llt_mask = 0;
3100     UINT8   *p;
3101
3102     UINT8   state_offset = 0;
3103     UINT16  cur_states = btm_cb.ble_ctr_cb.cur_states;
3104     UINT8   mask, offset;
3105     UINT8   request_state = 0;
3106
3107     /* check only one bit is set and within valid range */
3108     if (request_state_mask == BTM_BLE_STATE_INVALID ||
3109         request_state_mask > BTM_BLE_STATE_SCAN_ADV_BIT ||
3110         (request_state_mask & (request_state_mask -1 )) != 0)
3111     {
3112         BTM_TRACE_ERROR("illegal state requested: %d", request_state_mask);
3113         return rt;
3114     }
3115
3116     while (request_state_mask)
3117     {
3118         request_state_mask >>= 1;
3119         request_state ++;
3120     }
3121
3122     /* check if the requested state is supported or not */
3123     mask = btm_le_state_combo_tbl[0][request_state - 1][0];
3124     offset = btm_le_state_combo_tbl[0][request_state-1][1];
3125
3126     if (!BTM_LE_STATES_SUPPORTED(btm_cb.devcb.le_supported_states, mask, offset))
3127     {
3128         BTM_TRACE_ERROR("state requested not supported: %d", request_state);
3129         return rt;
3130     }
3131
3132     rt = TRUE;
3133     /* make sure currently active states are all supported in conjunction with the requested
3134        state. If the bit in table is not set, the combination is not supported */
3135     while (cur_states != 0)
3136     {
3137         if (cur_states & 0x01)
3138         {
3139             mask = btm_le_state_combo_tbl[request_state][state_offset][0];
3140             offset = btm_le_state_combo_tbl[request_state][state_offset][1];
3141
3142             if (mask != 0 && offset != 0)
3143             {
3144                 if (!BTM_LE_STATES_SUPPORTED(btm_cb.devcb.le_supported_states, mask, offset))
3145                 {
3146                     rt = FALSE;
3147                     break;
3148                 }
3149             }
3150         }
3151         cur_states >>= 1;
3152         state_offset ++;
3153     }
3154     return rt;
3155 }
3156
3157
3158 #endif  /* BLE_INCLUDED */