diff options
Diffstat (limited to 'sap')
-rw-r--r-- | sap/main.c | 55 | ||||
-rw-r--r-- | sap/manager.c | 93 | ||||
-rw-r--r-- | sap/manager.h | 22 | ||||
-rw-r--r-- | sap/sap-dummy.c | 330 | ||||
-rw-r--r-- | sap/sap.h | 186 | ||||
-rw-r--r-- | sap/server.c | 1438 | ||||
-rw-r--r-- | sap/server.h | 26 |
7 files changed, 2150 insertions, 0 deletions
diff --git a/sap/main.c b/sap/main.c new file mode 100644 index 0000000..c9c90bd --- /dev/null +++ b/sap/main.c @@ -0,0 +1,55 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 Instituto Nokia de Tecnologia - INdT + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#ifdef HAVE_CONFIG_H +#include <config.h> +#endif + +#include <errno.h> +#include <gdbus.h> +#include "plugin.h" +#include "manager.h" + +static DBusConnection *connection; + +static int sap_init(void) +{ + connection = dbus_bus_get(DBUS_BUS_SYSTEM, NULL); + + if (!connection) + return -EIO; + + if (sap_manager_init(connection) < 0) { + dbus_connection_unref(connection); + return -EIO; + } + + return 0; +} + +static void sap_exit(void) +{ + sap_manager_exit(); + + dbus_connection_unref(connection); +} + +BLUETOOTH_PLUGIN_DEFINE(sap, VERSION, + BLUETOOTH_PLUGIN_PRIORITY_DEFAULT, sap_init, sap_exit) diff --git a/sap/manager.c b/sap/manager.c new file mode 100644 index 0000000..a97f434 --- /dev/null +++ b/sap/manager.c @@ -0,0 +1,93 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 Instituto Nokia de Tecnologia - INdT + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#ifdef HAVE_CONFIG_H +#include <config.h> +#endif + +#include <errno.h> + +#include <bluetooth/bluetooth.h> +#include <bluetooth/hci.h> +#include <bluetooth/sdp.h> +#include <bluetooth/sdp_lib.h> + +#include <gdbus.h> + +#include "log.h" +#include "adapter.h" +#include "device.h" + +#include "manager.h" +#include "server.h" + +static DBusConnection *connection = NULL; + +static int sap_server_probe(struct btd_adapter *adapter) +{ + const char *path = adapter_get_path(adapter); + bdaddr_t src; + + DBG("path %s", path); + + adapter_get_address(adapter, &src); + + return sap_server_register(path, &src); +} + +static void sap_server_remove(struct btd_adapter *adapter) +{ + const char *path = adapter_get_path(adapter); + + DBG("path %s", path); + + sap_server_unregister(path); +} + +static struct btd_adapter_driver sap_server_driver = { + .name = "sap-server", + .probe = sap_server_probe, + .remove = sap_server_remove, +}; + +int sap_manager_init(DBusConnection *conn) +{ + connection = dbus_connection_ref(conn); + + if (sap_server_init(connection) < 0) { + error("Can't init SAP server"); + dbus_connection_unref(conn); + return -1; + } + + btd_register_adapter_driver(&sap_server_driver); + + return 0; +} + +void sap_manager_exit(void) +{ + btd_unregister_adapter_driver(&sap_server_driver); + + dbus_connection_unref(connection); + connection = NULL; + + sap_server_exit(); +} diff --git a/sap/manager.h b/sap/manager.h new file mode 100644 index 0000000..e08c882 --- /dev/null +++ b/sap/manager.h @@ -0,0 +1,22 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 Instituto Nokia de Tecnologia - INdT + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +int sap_manager_init(DBusConnection *conn); +void sap_manager_exit(void); diff --git a/sap/sap-dummy.c b/sap/sap-dummy.c new file mode 100644 index 0000000..39e1fc9 --- /dev/null +++ b/sap/sap-dummy.c @@ -0,0 +1,330 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 ST-Ericsson SA + * Copyright (C) 2011 Tieto Poland + * + * Author: Waldemar Rymarkiewicz <waldemar.rymarkiewicz@tieto.com> + * for ST-Ericsson + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#ifdef HAVE_CONFIG_H +#include <config.h> +#endif + +#include <unistd.h> +#include <stdlib.h> +#include <stdint.h> +#include <glib.h> +#include <gdbus.h> + +#include "log.h" +#include "sap.h" + +#define SAP_DUMMY_IFACE "org.bluez.SimAccessTest" +#define SAP_DUMMY_PATH "/org/bluez/test" + +enum { + SIM_DISCONNECTED= 0x00, + SIM_CONNECTED = 0x01, + SIM_POWERED_OFF = 0x02, + SIM_MISSING = 0x03 +}; + +static DBusConnection *connection = NULL; + +static int sim_card_conn_status = SIM_DISCONNECTED; +static void *sap_data = NULL; /* SAP server private data.*/ +static gboolean ongoing_call_status = FALSE; +static int max_msg_size_supported = 512; + +void sap_connect_req(void *sap_device, uint16_t maxmsgsize) +{ + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status != SIM_DISCONNECTED) { + sap_connect_rsp(sap_device, SAP_STATUS_CONNECTION_FAILED, + maxmsgsize); + return; + } else if (max_msg_size_supported > maxmsgsize) { + sap_connect_rsp(sap_device, SAP_STATUS_MAX_MSG_SIZE_TOO_SMALL, + max_msg_size_supported); + return; + } else if (max_msg_size_supported < maxmsgsize) { + sap_connect_rsp(sap_device, + SAP_STATUS_MAX_MSG_SIZE_NOT_SUPPORTED, + max_msg_size_supported); + return; + } else if (ongoing_call_status) { + sap_connect_rsp(sap_device, SAP_STATUS_OK_ONGOING_CALL, + maxmsgsize); + return; + } else { + sim_card_conn_status = SIM_CONNECTED; + sap_data = sap_device; + + sap_connect_rsp(sap_device, SAP_STATUS_OK, maxmsgsize); + sap_status_ind(sap_device, SAP_STATUS_CHANGE_CARD_RESET); + } +} + +void sap_disconnect_req(void *sap_device, uint8_t linkloss) +{ + sim_card_conn_status = SIM_DISCONNECTED; + sap_data = NULL; + ongoing_call_status = FALSE; + + DBG("status: %d", sim_card_conn_status); + + if (linkloss) + return; + + sap_disconnect_rsp(sap_device); +} + +void sap_transfer_apdu_req(void *sap_device, struct sap_parameter *param) +{ + char apdu[] = "APDU response!"; + + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status == SIM_MISSING) + sap_transfer_apdu_rsp(sap_device, + SAP_RESULT_ERROR_CARD_REMOVED, NULL, 0); + else if (sim_card_conn_status == SIM_POWERED_OFF) + sap_transfer_apdu_rsp(sap_device, SAP_RESULT_ERROR_POWERED_OFF, + NULL, 0); + else if (sim_card_conn_status != SIM_CONNECTED) + sap_transfer_apdu_rsp(sap_device, + SAP_RESULT_ERROR_NOT_ACCESSIBLE, NULL, 0); + else + sap_transfer_apdu_rsp(sap_device, SAP_RESULT_OK, + (uint8_t*)&apdu, sizeof(apdu)); +} + +void sap_transfer_atr_req(void *sap_device) +{ + char atr[] = "ATR response!"; + + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status == SIM_MISSING) + sap_transfer_atr_rsp(sap_device, SAP_RESULT_ERROR_CARD_REMOVED, + NULL, 0); + else if (sim_card_conn_status == SIM_POWERED_OFF) + sap_transfer_atr_rsp(sap_device, SAP_RESULT_ERROR_POWERED_OFF, + NULL, 0); + else if (sim_card_conn_status != SIM_CONNECTED) + sap_transfer_atr_rsp(sap_device, SAP_RESULT_ERROR_NO_REASON, + NULL, 0); + else + sap_transfer_atr_rsp(sap_device, SAP_RESULT_OK, + (uint8_t*)&atr, sizeof(atr)); +} + +void sap_power_sim_off_req(void *sap_device) +{ + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status == SIM_MISSING) { + sap_power_sim_off_rsp(sap_device, + SAP_RESULT_ERROR_CARD_REMOVED); + } else if (sim_card_conn_status == SIM_POWERED_OFF) { + sap_power_sim_off_rsp(sap_device, + SAP_RESULT_ERROR_POWERED_OFF); + } else if (sim_card_conn_status != SIM_CONNECTED) { + sap_power_sim_off_rsp(sap_device, + SAP_RESULT_ERROR_NO_REASON); + } else { + sap_power_sim_off_rsp(sap_device, SAP_RESULT_OK); + sim_card_conn_status = SIM_POWERED_OFF; + } +} + +void sap_power_sim_on_req(void *sap_device) +{ + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status == SIM_MISSING) { + sap_power_sim_on_rsp(sap_device, + SAP_RESULT_ERROR_CARD_REMOVED); + } else if (sim_card_conn_status == SIM_POWERED_OFF) { + sap_power_sim_on_rsp(sap_device, SAP_RESULT_OK); + sim_card_conn_status = SIM_CONNECTED; + return; + } else if (sim_card_conn_status != SIM_CONNECTED) { + sap_power_sim_on_rsp(sap_device, + SAP_RESULT_ERROR_NOT_ACCESSIBLE); + } else { + sap_power_sim_on_rsp(sap_device, + SAP_RESULT_ERROR_NO_REASON); + } +} + +void sap_reset_sim_req(void *sap_device) +{ + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status == SIM_MISSING) { + sap_reset_sim_rsp(sap_device, SAP_RESULT_ERROR_CARD_REMOVED); + } else if (sim_card_conn_status == SIM_POWERED_OFF) { + sap_reset_sim_rsp(sap_device, SAP_RESULT_ERROR_POWERED_OFF); + } else if (sim_card_conn_status != SIM_CONNECTED) { + sap_reset_sim_rsp(sap_device, SAP_RESULT_ERROR_NO_REASON); + } else { + sap_reset_sim_rsp(sap_device, SAP_RESULT_OK); + } +} + +void sap_transfer_card_reader_status_req(void *sap_device) +{ + DBG("status: %d", sim_card_conn_status); + + if (sim_card_conn_status != SIM_CONNECTED) { + sap_transfer_card_reader_status_rsp(sap_device, + SAP_RESULT_ERROR_NO_REASON, 0xF1); + return; + } + + sap_transfer_card_reader_status_rsp(sap_device, SAP_RESULT_OK, 0xF1); +} + +void sap_set_transport_protocol_req(void *sap_device, + struct sap_parameter *param) +{ + sap_transport_protocol_rsp(sap_device, SAP_RESULT_NOT_SUPPORTED); +} + +static inline DBusMessage *invalid_args(DBusMessage *msg) +{ + return g_dbus_create_error(msg, "org.bluez.Error.InvalidArguments", + "Invalid arguments in method call"); +} + +static DBusMessage *ongoing_call(DBusConnection *conn, DBusMessage *msg, + void *data) +{ + dbus_bool_t ongoing; + + if (!dbus_message_get_args(msg, NULL, DBUS_TYPE_BOOLEAN, &ongoing, + DBUS_TYPE_INVALID)) + return invalid_args(msg); + + if (ongoing_call_status && !ongoing) { + /* An ongoing call has finished. Continue connection.*/ + sap_connect_rsp(sap_data, SAP_STATUS_OK, + max_msg_size_supported); + sap_status_ind(sap_data, SAP_STATUS_CHANGE_CARD_RESET); + ongoing_call_status = ongoing; + } else if (!ongoing_call_status && ongoing) { + /* An ongoing call has started.*/ + ongoing_call_status = ongoing; + } + + DBG("OngoingCall status set to %d", ongoing_call_status); + + return dbus_message_new_method_return(msg); +} + +static DBusMessage *max_msg_size(DBusConnection *conn, DBusMessage *msg, + void *data) +{ + dbus_uint32_t size; + + if (sim_card_conn_status == SIM_CONNECTED) + return g_dbus_create_error(msg, "org.bluez.Error.Failed", + "Can't change msg size when connected."); + + if (!dbus_message_get_args(msg, NULL, DBUS_TYPE_UINT32, &size, + DBUS_TYPE_INVALID)) + return invalid_args(msg); + + max_msg_size_supported = size; + + DBG("MaxMessageSize set to %d", max_msg_size_supported); + + return dbus_message_new_method_return(msg); +} + +static DBusMessage *disconnect(DBusConnection *conn, DBusMessage *msg, + void *data) +{ + sim_card_conn_status = SIM_DISCONNECTED; + sap_status_ind(sap_data, SAP_STATUS_CHANGE_CARD_NOT_ACCESSIBLE); + + return dbus_message_new_method_return(msg); +} + +static DBusMessage *card_status(DBusConnection *conn, DBusMessage *msg, + void *data) +{ + dbus_uint32_t status; + + DBG("status %d", sim_card_conn_status); + + if (sim_card_conn_status != SIM_CONNECTED) + return g_dbus_create_error(msg, "org.bluez.Error.Failed", + "Can't change msg size when not connected."); + + if (!dbus_message_get_args(msg, NULL, DBUS_TYPE_UINT32, &status, + DBUS_TYPE_INVALID)) + return invalid_args(msg); + + if (status) { + if (sim_card_conn_status == SIM_MISSING) { + sim_card_conn_status = SIM_CONNECTED; + sap_status_ind(sap_data, + SAP_STATUS_CHANGE_CARD_INSERTED); + } + } else { + sim_card_conn_status = SIM_MISSING; + sap_status_ind(sap_data, SAP_STATUS_CHANGE_CARD_REMOVED); + } + + DBG("Card status changed to %d", status); + + return dbus_message_new_method_return(msg); +} + +static GDBusMethodTable dummy_methods[] = { + { "OngoingCall", "b", "", ongoing_call}, + { "MaxMessageSize", "u", "", max_msg_size}, + { "Disconnect", "", "", disconnect}, + { "CardStatus", "u", "", card_status}, + { } +}; + +int sap_init(void) +{ + connection = dbus_bus_get(DBUS_BUS_SYSTEM, NULL); + + if (g_dbus_register_interface(connection, SAP_DUMMY_PATH, + SAP_DUMMY_IFACE, dummy_methods, NULL, NULL, + NULL, NULL) == FALSE) { + error("sap-dummy interface %s init failed on path %s", + SAP_DUMMY_IFACE, SAP_DUMMY_PATH); + return -1; + } + + return 0; +} + +void sap_exit(void) +{ + dbus_connection_unref(connection); + connection = NULL; +} diff --git a/sap/sap.h b/sap/sap.h new file mode 100644 index 0000000..24240ca --- /dev/null +++ b/sap/sap.h @@ -0,0 +1,186 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 Instituto Nokia de Tecnologia - INdT + * Copyright (C) 2010 ST-Ericsson SA + * + * Author: Marek Skowron <marek.skowron@tieto.com> for ST-Ericsson. + * Author: Waldemar Rymarkiewicz <waldemar.rymarkiewicz@tieto.com> + * for ST-Ericsson. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#include <stdint.h> +#include <glib.h> + +#define SAP_VERSION 0x0101 + +/* Connection Status - SAP v1.1 section 5.2.2 */ +enum sap_status { + SAP_STATUS_OK = 0x00, + SAP_STATUS_CONNECTION_FAILED = 0x01, + SAP_STATUS_MAX_MSG_SIZE_NOT_SUPPORTED = 0x02, + SAP_STATUS_MAX_MSG_SIZE_TOO_SMALL = 0x03, + SAP_STATUS_OK_ONGOING_CALL = 0x04 +}; + +/* Disconnection Type - SAP v1.1 section 5.2.3 */ +enum sap_disconnection_type { + SAP_DISCONNECTION_TYPE_GRACEFUL = 0x00, + SAP_DISCONNECTION_TYPE_IMMEDIATE = 0x01, + SAP_DISCONNECTION_TYPE_CLIENT = 0xFF +}; + +/* Result codes - SAP v1.1 section 5.2.4 */ +enum sap_result { + SAP_RESULT_OK = 0x00, + SAP_RESULT_ERROR_NO_REASON = 0x01, + SAP_RESULT_ERROR_NOT_ACCESSIBLE = 0x02, + SAP_RESULT_ERROR_POWERED_OFF = 0x03, + SAP_RESULT_ERROR_CARD_REMOVED = 0x04, + SAP_RESULT_ERROR_POWERED_ON = 0x05, + SAP_RESULT_ERROR_NO_DATA = 0x06, + SAP_RESULT_NOT_SUPPORTED = 0x07 +}; + +/* Status Change - SAP v1.1 section 5.2.8 */ +enum sap_status_change { + SAP_STATUS_CHANGE_UNKNOWN_ERROR = 0x00, + SAP_STATUS_CHANGE_CARD_RESET = 0x01, + SAP_STATUS_CHANGE_CARD_NOT_ACCESSIBLE = 0x02, + SAP_STATUS_CHANGE_CARD_REMOVED = 0x03, + SAP_STATUS_CHANGE_CARD_INSERTED = 0x04, + SAP_STATUS_CHANGE_CARD_RECOVERED = 0x05 +}; + +/* Message format - SAP v1.1 section 5.1 */ +struct sap_parameter { + uint8_t id; + uint8_t reserved; + uint16_t len; + uint8_t val[0]; + /* + * Padding bytes 0-3 bytes + */ +} __attribute__((packed)); + +struct sap_message { + uint8_t id; + uint8_t nparam; + uint16_t reserved; + struct sap_parameter param[0]; +} __attribute__((packed)); + +enum { + ICC_READER_UNSPECIFIED_ERROR, /* No further information available */ + ICC_READER_NOT_PRESENT, /* Card Reader removed or not present */ + ICC_READER_BUSY, /* Card Reader in use */ + ICC_READER_CARD_POWERED_ON, /* Card in reader and is powered on */ + ICC_READER_DEACTIVATED, /* Card Reader deactivated */ + ICC_READER_CARD_POWERED_OFF, /* Card in reader, but powered off */ + ICC_READER_NO_CARD, /* No card in reader */ + ICC_READER_LAST +}; + +#define SAP_BUF_SIZE 512 +#define SAP_MSG_HEADER_SIZE 4 + +enum sap_protocol { + SAP_CONNECT_REQ = 0x00, + SAP_CONNECT_RESP = 0x01, + SAP_DISCONNECT_REQ = 0x02, + SAP_DISCONNECT_RESP = 0x03, + SAP_DISCONNECT_IND = 0x04, + SAP_TRANSFER_APDU_REQ = 0x05, + SAP_TRANSFER_APDU_RESP = 0x06, + SAP_TRANSFER_ATR_REQ = 0x07, + SAP_TRANSFER_ATR_RESP = 0x08, + SAP_POWER_SIM_OFF_REQ = 0x09, + SAP_POWER_SIM_OFF_RESP = 0x0A, + SAP_POWER_SIM_ON_REQ = 0x0B, + SAP_POWER_SIM_ON_RESP = 0x0C, + SAP_RESET_SIM_REQ = 0x0D, + SAP_RESET_SIM_RESP = 0x0E, + SAP_TRANSFER_CARD_READER_STATUS_REQ = 0x0F, + SAP_TRANSFER_CARD_READER_STATUS_RESP = 0x10, + SAP_STATUS_IND = 0x11, + SAP_ERROR_RESP = 0x12, + SAP_SET_TRANSPORT_PROTOCOL_REQ = 0x13, + SAP_SET_TRANSPORT_PROTOCOL_RESP = 0x14 +}; + +/* Parameters Ids - SAP 1.1 section 5.2 */ +enum sap_param_id { + SAP_PARAM_ID_MAX_MSG_SIZE = 0x00, + SAP_PARAM_ID_CONN_STATUS = 0x01, + SAP_PARAM_ID_RESULT_CODE = 0x02, + SAP_PARAM_ID_DISCONNECT_IND = 0x03, + SAP_PARAM_ID_COMMAND_APDU = 0x04, + SAP_PARAM_ID_COMMAND_APDU7816 = 0x10, + SAP_PARAM_ID_RESPONSE_APDU = 0x05, + SAP_PARAM_ID_ATR = 0x06, + SAP_PARAM_ID_CARD_READER_STATUS = 0x07, + SAP_PARAM_ID_STATUS_CHANGE = 0x08, + SAP_PARAM_ID_TRANSPORT_PROTOCOL = 0x09 +}; + +#define SAP_PARAM_ID_MAX_MSG_SIZE_LEN 0x02 +#define SAP_PARAM_ID_CONN_STATUS_LEN 0x01 +#define SAP_PARAM_ID_RESULT_CODE_LEN 0x01 +#define SAP_PARAM_ID_DISCONNECT_IND_LEN 0x01 +#define SAP_PARAM_ID_CARD_READER_STATUS_LEN 0x01 +#define SAP_PARAM_ID_STATUS_CHANGE_LEN 0x01 +#define SAP_PARAM_ID_TRANSPORT_PROTO_LEN 0x01 + +/* Transport Protocol - SAP v1.1 section 5.2.9 */ +enum sap_transport_protocol { + SAP_TRANSPORT_PROTOCOL_T0 = 0x00, + SAP_TRANSPORT_PROTOCOL_T1 = 0x01 +}; + +/*SAP driver init and exit routines. Implemented by sap-*.c */ +int sap_init(void); +void sap_exit(void); + +/* SAP requests implemented by sap-*.c */ +void sap_connect_req(void *sap_device, uint16_t maxmsgsize); +void sap_disconnect_req(void *sap_device, uint8_t linkloss); +void sap_transfer_apdu_req(void *sap_device, struct sap_parameter *param); +void sap_transfer_atr_req(void *sap_device); +void sap_power_sim_off_req(void *sap_device); +void sap_power_sim_on_req(void *sap_device); +void sap_reset_sim_req(void *sap_device); +void sap_transfer_card_reader_status_req(void *sap_device); +void sap_set_transport_protocol_req(void *sap_device, + struct sap_parameter *param); + +/*SAP responses to SAP requests. Implemented by server.c */ +int sap_connect_rsp(void *sap_device, uint8_t status, uint16_t maxmsgsize); +int sap_disconnect_rsp(void *sap_device); +int sap_transfer_apdu_rsp(void *sap_device, uint8_t result, + uint8_t *sap_apdu_resp, uint16_t length); +int sap_transfer_atr_rsp(void *sap_device, uint8_t result, + uint8_t *sap_atr, uint16_t length); +int sap_power_sim_off_rsp(void *sap_device, uint8_t result); +int sap_power_sim_on_rsp(void *sap_device, uint8_t result); +int sap_reset_sim_rsp(void *sap_device, uint8_t result); +int sap_transfer_card_reader_status_rsp(void *sap_device, uint8_t result, + uint8_t status); +int sap_error_rsp(void *sap_device); +int sap_transport_protocol_rsp(void *sap_device, uint8_t result); + +/* Event indication. Implemented by server.c*/ +int sap_status_ind(void *sap_device, uint8_t status_change); diff --git a/sap/server.c b/sap/server.c new file mode 100644 index 0000000..c9c9a12 --- /dev/null +++ b/sap/server.c @@ -0,0 +1,1438 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 Instituto Nokia de Tecnologia - INdT + * Copyright (C) 2010 ST-Ericsson SA + * Copyright (C) 2011 Tieto Poland + * + * Author: Marek Skowron <marek.skowron@tieto.com> for ST-Ericsson. + * Author: Waldemar Rymarkiewicz <waldemar.rymarkiewicz@tieto.com> + * for ST-Ericsson. + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#ifdef HAVE_CONFIG_H +#include <config.h> +#endif + +#include <stdio.h> +#include <errno.h> +#include <glib.h> +#include <netinet/in.h> +#include <bluetooth/bluetooth.h> +#include <bluetooth/sdp.h> +#include <bluetooth/sdp_lib.h> + +#include "adapter.h" +#include "btio.h" +#include "sdpd.h" +#include "log.h" +#include "error.h" +#include "dbus-common.h" +#include "sap.h" +#include "server.h" + +#define SAP_SERVER_INTERFACE "org.bluez.SimAccess" +#define SAP_UUID "0000112D-0000-1000-8000-00805F9B34FB" +#define SAP_SERVER_CHANNEL 8 +#define SAP_BUF_SIZE 512 + +#define PADDING4(x) (4 - (x & 0x03)) +#define PARAMETER_SIZE(x) (sizeof(struct sap_parameter) + x + PADDING4(x)) + +#define SAP_NO_REQ 0xFF + +#define SAP_TIMER_GRACEFUL_DISCONNECT 30 +#define SAP_TIMER_NO_ACTIVITY 30 + +enum { + SAP_STATE_DISCONNECTED, + SAP_STATE_CONNECT_IN_PROGRESS, + SAP_STATE_CONNECTED, + SAP_STATE_GRACEFUL_DISCONNECT, + SAP_STATE_IMMEDIATE_DISCONNECT, + SAP_STATE_CLIENT_DISCONNECT +}; + +struct sap_connection { + GIOChannel *io; + uint32_t state; + uint8_t processing_req; + guint timer_id; +}; + +struct sap_server { + bdaddr_t src; + char *path; + uint32_t record_id; + GIOChannel *listen_io; + struct sap_connection *conn; +}; + +static DBusConnection *connection; +static struct sap_server *server; + +static void start_guard_timer(struct sap_connection *conn, guint interval); +static void stop_guard_timer(struct sap_connection *conn); +static gboolean guard_timeout(gpointer data); + +static size_t add_result_parameter(uint8_t result, + struct sap_parameter *param) +{ + param->id = SAP_PARAM_ID_RESULT_CODE; + param->len = htons(SAP_PARAM_ID_RESULT_CODE_LEN); + *param->val = result; + + return PARAMETER_SIZE(SAP_PARAM_ID_RESULT_CODE_LEN); +} + +static int is_power_sim_off_req_allowed(uint8_t processing_req) +{ + switch (processing_req) { + case SAP_NO_REQ: + case SAP_TRANSFER_APDU_REQ: + case SAP_TRANSFER_ATR_REQ: + case SAP_POWER_SIM_ON_REQ: + case SAP_RESET_SIM_REQ: + case SAP_TRANSFER_CARD_READER_STATUS_REQ: + return 1; + default: + return 0; + } +} + +static int is_reset_sim_req_allowed(uint8_t processing_req) +{ + switch (processing_req) { + case SAP_NO_REQ: + case SAP_TRANSFER_APDU_REQ: + case SAP_TRANSFER_ATR_REQ: + case SAP_TRANSFER_CARD_READER_STATUS_REQ: + return 1; + default: + return 0; + } +} + +static int check_msg(struct sap_message *msg) +{ + if (!msg) + return -EINVAL; + + switch (msg->id) { + case SAP_CONNECT_REQ: + if (msg->nparam != 0x01) + return -EBADMSG; + + if (msg->param->id != SAP_PARAM_ID_MAX_MSG_SIZE) + return -EBADMSG; + + if (ntohs(msg->param->len) != SAP_PARAM_ID_MAX_MSG_SIZE_LEN) + return -EBADMSG; + + break; + + case SAP_TRANSFER_APDU_REQ: + if (msg->nparam != 0x01) + return -EBADMSG; + + if (msg->param->id != SAP_PARAM_ID_COMMAND_APDU) + if ( msg->param->id != SAP_PARAM_ID_COMMAND_APDU7816) + return -EBADMSG; + + if (msg->param->len == 0x00) + return -EBADMSG; + + break; + + case SAP_SET_TRANSPORT_PROTOCOL_REQ: + if (msg->nparam != 0x01) + return -EBADMSG; + + if (msg->param->id != SAP_PARAM_ID_TRANSPORT_PROTOCOL) + return -EBADMSG; + + if (ntohs(msg->param->len) != SAP_PARAM_ID_TRANSPORT_PROTO_LEN) + return -EBADMSG; + + if (*msg->param->val != SAP_TRANSPORT_PROTOCOL_T0) + if (*msg->param->val != SAP_TRANSPORT_PROTOCOL_T1) + return -EBADMSG; + + break; + + case SAP_DISCONNECT_REQ: + case SAP_TRANSFER_ATR_REQ: + case SAP_POWER_SIM_OFF_REQ: + case SAP_POWER_SIM_ON_REQ: + case SAP_RESET_SIM_REQ: + case SAP_TRANSFER_CARD_READER_STATUS_REQ: + if (msg->nparam != 0x00) + return -EBADMSG; + + break; + } + + return 0; +} + +static sdp_record_t *create_sap_record(uint8_t channel) +{ + sdp_list_t *apseq, *aproto, *profiles, *proto[2], *root, *svclass_id; + uuid_t sap_uuid, gt_uuid, root_uuid, l2cap, rfcomm; + sdp_profile_desc_t profile; + sdp_record_t *record; + sdp_data_t *ch; + + record = sdp_record_alloc(); + if (!record) + return NULL; + + sdp_uuid16_create(&root_uuid, PUBLIC_BROWSE_GROUP); + root = sdp_list_append(NULL, &root_uuid); + sdp_set_browse_groups(record, root); + sdp_list_free(root, NULL); + + sdp_uuid16_create(&sap_uuid, SAP_SVCLASS_ID); + svclass_id = sdp_list_append(NULL, &sap_uuid); + sdp_uuid16_create(>_uuid, GENERIC_TELEPHONY_SVCLASS_ID); + svclass_id = sdp_list_append(svclass_id, >_uuid); + + sdp_set_service_classes(record, svclass_id); + sdp_list_free(svclass_id, NULL); + + sdp_uuid16_create(&profile.uuid, SAP_PROFILE_ID); + profile.version = SAP_VERSION; + profiles = sdp_list_append(NULL, &profile); + sdp_set_profile_descs(record, profiles); + sdp_list_free(profiles, NULL); + + sdp_uuid16_create(&l2cap, L2CAP_UUID); + proto[0] = sdp_list_append(NULL, &l2cap); + apseq = sdp_list_append(NULL, proto[0]); + + sdp_uuid16_create(&rfcomm, RFCOMM_UUID); + proto[1] = sdp_list_append(NULL, &rfcomm); + ch = sdp_data_alloc(SDP_UINT8, &channel); + proto[1] = sdp_list_append(proto[1], ch); + apseq = sdp_list_append(apseq, proto[1]); + + aproto = sdp_list_append(NULL, apseq); + sdp_set_access_protos(record, aproto); + + sdp_set_info_attr(record, "SIM Access Server", + NULL, NULL); + + sdp_data_free(ch); + sdp_list_free(proto[0], NULL); + sdp_list_free(proto[1], NULL); + sdp_list_free(apseq, NULL); + sdp_list_free(aproto, NULL); + + return record; +} + +static int send_message(struct sap_connection *conn, void *buf, size_t size) +{ + size_t written = 0; + GError *gerr = NULL; + GIOStatus gstatus; + + if (!conn || !buf) + return -EINVAL; + + DBG("size %zu", size); + + gstatus = g_io_channel_write_chars(conn->io, buf, size, &written, + &gerr); + if (gstatus != G_IO_STATUS_NORMAL) { + if (gerr) + g_error_free(gerr); + + error("write error (0x%02x).", gstatus); + return -EINVAL; + } + + if (written != size) + error("write error.(written %zu size %zu)", written, size); + + return 0; +} + +static int disconnect_ind(void *sap_device, uint8_t disc_type) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + struct sap_parameter *param = (struct sap_parameter *) msg->param; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("data %p state %d disc_type 0x%02x", conn, conn->state, disc_type); + + if (conn->state != SAP_STATE_GRACEFUL_DISCONNECT && + conn->state != SAP_STATE_IMMEDIATE_DISCONNECT) { + error("Processing error (state %d pr 0x%02x)", conn->state, + conn->processing_req); + return -EPERM; + } + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_DISCONNECT_IND; + msg->nparam = 0x01; + + /* Add disconnection type param. */ + param->id = SAP_PARAM_ID_DISCONNECT_IND; + param->len = htons(SAP_PARAM_ID_DISCONNECT_IND_LEN); + *param->val = disc_type; + size += PARAMETER_SIZE(SAP_PARAM_ID_DISCONNECT_IND_LEN); + + return send_message(sap_device, buf, size); +} + +static void connect_req(struct sap_connection *conn, + struct sap_parameter *param) +{ + uint16_t maxmsgsize, *val; + + DBG("conn %p state %d", conn, conn->state); + + if (!param) + goto error_rsp; + + if (conn->state != SAP_STATE_DISCONNECTED) + goto error_rsp; + + stop_guard_timer(conn); + + val = (uint16_t *) ¶m->val; + maxmsgsize = ntohs(*val); + + DBG("Connect MaxMsgSize: 0x%04x", maxmsgsize); + + conn->state = SAP_STATE_CONNECT_IN_PROGRESS; + + if (maxmsgsize <= SAP_BUF_SIZE) { + conn->processing_req = SAP_CONNECT_REQ; + sap_connect_req(conn, maxmsgsize); + } else { + sap_connect_rsp(conn, SAP_STATUS_MAX_MSG_SIZE_NOT_SUPPORTED, + SAP_BUF_SIZE); + } + + return; + +error_rsp: + error("Processing error (param %p state %d pr 0x%02x)", param, + conn->state, conn->processing_req); + sap_error_rsp(conn); +} + +static int disconnect_req(struct sap_connection *conn, uint8_t disc_type) +{ + DBG("conn %p state %d disc_type 0x%02x", conn, conn->state, disc_type); + + switch (disc_type) { + case SAP_DISCONNECTION_TYPE_GRACEFUL: + if (conn->state == SAP_STATE_DISCONNECTED) + goto error_req; + + if (conn->state == SAP_STATE_CONNECT_IN_PROGRESS) + goto error_req; + + if (conn->state == SAP_STATE_CONNECTED) { + conn->state = SAP_STATE_GRACEFUL_DISCONNECT; + conn->processing_req = SAP_NO_REQ; + + disconnect_ind(conn, disc_type); + /* Timer will disconnect if client won't do.*/ + start_guard_timer(conn, SAP_TIMER_GRACEFUL_DISCONNECT); + } + + return 0; + + case SAP_DISCONNECTION_TYPE_IMMEDIATE: + if (conn->state == SAP_STATE_DISCONNECTED) + goto error_req; + + if (conn->state == SAP_STATE_CONNECT_IN_PROGRESS) + goto error_req; + + if (conn->state == SAP_STATE_CONNECTED || + conn->state == SAP_STATE_GRACEFUL_DISCONNECT) { + conn->state = SAP_STATE_IMMEDIATE_DISCONNECT; + conn->processing_req = SAP_NO_REQ; + + stop_guard_timer(conn); + disconnect_ind(conn, disc_type); + sap_disconnect_req(conn, 0); + } + + return 0; + + case SAP_DISCONNECTION_TYPE_CLIENT: + if (conn->state != SAP_STATE_CONNECTED && + conn->state != SAP_STATE_GRACEFUL_DISCONNECT) + goto error_rsp; + + conn->state = SAP_STATE_CLIENT_DISCONNECT; + conn->processing_req = SAP_NO_REQ; + + stop_guard_timer(conn); + sap_disconnect_req(conn, 0); + + return 0; + + default: + error("Unknown disconnection type (0x%02x).", disc_type); + return -EINVAL; + } + +error_rsp: + sap_error_rsp(conn); +error_req: + error("Processing error (state %d pr 0x%02x)", conn->state, + conn->processing_req); + return -EPERM; +} + +static void transfer_apdu_req(struct sap_connection *conn, + struct sap_parameter *param) +{ + DBG("conn %p state %d", conn, conn->state); + + if (!param) + goto error_rsp; + + param->len = ntohs(param->len); + + if (conn->state != SAP_STATE_CONNECTED && + conn->state != SAP_STATE_GRACEFUL_DISCONNECT) + goto error_rsp; + + if (conn->processing_req != SAP_NO_REQ) + goto error_rsp; + + conn->processing_req = SAP_TRANSFER_APDU_REQ; + sap_transfer_apdu_req(conn, param); + + return; + +error_rsp: + error("Processing error (param %p state %d pr 0x%02x)", param, + conn->state, conn->processing_req); + sap_error_rsp(conn); +} + +static void transfer_atr_req(struct sap_connection *conn) +{ + DBG("conn %p state %d", conn, conn->state); + + if (conn->state != SAP_STATE_CONNECTED) + goto error_rsp; + + if (conn->processing_req != SAP_NO_REQ) + goto error_rsp; + + conn->processing_req = SAP_TRANSFER_ATR_REQ; + sap_transfer_atr_req(conn); + + return; + +error_rsp: + error("Processing error (state %d pr 0x%02x)", conn->state, + conn->processing_req); + sap_error_rsp(conn); +} + +static void power_sim_off_req(struct sap_connection *conn) +{ + DBG("conn %p state %d", conn, conn->state); + + if (conn->state != SAP_STATE_CONNECTED) + goto error_rsp; + + if (!is_power_sim_off_req_allowed(conn->processing_req)) + goto error_rsp; + + conn->processing_req = SAP_POWER_SIM_OFF_REQ; + sap_power_sim_off_req(conn); + + return; + +error_rsp: + error("Processing error (state %d pr 0x%02x)", conn->state, + conn->processing_req); + sap_error_rsp(conn); +} + +static void power_sim_on_req(struct sap_connection *conn) +{ + DBG("conn %p state %d", conn, conn->state); + + if (conn->state != SAP_STATE_CONNECTED) + goto error_rsp; + + if (conn->processing_req != SAP_NO_REQ) + goto error_rsp; + + conn->processing_req = SAP_POWER_SIM_ON_REQ; + sap_power_sim_on_req(conn); + + return; + +error_rsp: + error("Processing error (state %d pr 0x%02x)", conn->state, + conn->processing_req); + sap_error_rsp(conn); +} + +static void reset_sim_req(struct sap_connection *conn) +{ + DBG("conn %p state %d", conn, conn->state); + + if (conn->state != SAP_STATE_CONNECTED) + goto error_rsp; + + if (!is_reset_sim_req_allowed(conn->processing_req)) + goto error_rsp; + + conn->processing_req = SAP_RESET_SIM_REQ; + sap_reset_sim_req(conn); + + return; + +error_rsp: + error("Processing error (state %d pr 0x%02x param)", conn->state, + conn->processing_req); + sap_error_rsp(conn); +} + +static void transfer_card_reader_status_req(struct sap_connection *conn) +{ + DBG("conn %p state %d", conn, conn->state); + + if (conn->state != SAP_STATE_CONNECTED) + goto error_rsp; + + if (conn->processing_req != SAP_NO_REQ) + goto error_rsp; + + conn->processing_req = SAP_TRANSFER_CARD_READER_STATUS_REQ; + sap_transfer_card_reader_status_req(conn); + + return; + +error_rsp: + error("Processing error (state %d pr 0x%02x)", conn->state, + conn->processing_req); + sap_error_rsp(conn); +} + +static void set_transport_protocol_req(struct sap_connection *conn, + struct sap_parameter *param) +{ + if (!param) + goto error_rsp; + + DBG("conn %p state %d param %p", conn, conn->state, param); + + if (conn->state != SAP_STATE_CONNECTED) + goto error_rsp; + + if (conn->processing_req != SAP_NO_REQ) + goto error_rsp; + + conn->processing_req = SAP_SET_TRANSPORT_PROTOCOL_REQ; + sap_set_transport_protocol_req(conn, param); + + return; + +error_rsp: + error("Processing error (param %p state %d pr 0x%02x)", param, + conn->state, conn->processing_req); + sap_error_rsp(conn); +} + +static void start_guard_timer(struct sap_connection *conn, guint interval) +{ + if (!conn) + return; + + if (!conn->timer_id) + conn->timer_id = g_timeout_add_seconds(interval, guard_timeout, + conn); + else + error("Timer is already active."); +} + +static void stop_guard_timer(struct sap_connection *conn) +{ + if (conn && conn->timer_id) { + g_source_remove(conn->timer_id); + conn->timer_id = 0; + } +} + +static gboolean guard_timeout(gpointer data) +{ + struct sap_connection *conn = data; + + if (!conn) + return FALSE; + + DBG("conn %p state %d pr 0x%02x", conn, conn->state, + conn->processing_req); + + conn->timer_id = 0; + + switch (conn->state) { + case SAP_STATE_DISCONNECTED: + /* Client opened RFCOMM channel but didn't send CONNECT_REQ, + * in fixed time or client disconnected SAP connection but + * didn't closed RFCOMM channel in fixed time.*/ + if (conn->io) { + g_io_channel_shutdown(conn->io, TRUE, NULL); + g_io_channel_unref(conn->io); + } + break; + + case SAP_STATE_GRACEFUL_DISCONNECT: + /* Client didn't disconnect SAP connection in fixed time, + * so close SAP connection immediately. */ + disconnect_req(conn, SAP_DISCONNECTION_TYPE_IMMEDIATE); + break; + + default: + error("Unexpected state (%d).", conn->state); + break; + } + + return FALSE; +} + +int sap_connect_rsp(void *sap_device, uint8_t status, uint16_t maxmsgsize) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + struct sap_parameter *param = (struct sap_parameter *) msg->param; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x status 0x%02x", conn->state, + conn->processing_req, status); + + if (conn->state != SAP_STATE_CONNECT_IN_PROGRESS) + return -EPERM; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_CONNECT_RESP; + msg->nparam = 0x01; + + /* Add connection status */ + param->id = SAP_PARAM_ID_CONN_STATUS; + param->len = htons(SAP_PARAM_ID_CONN_STATUS_LEN); + *param->val = status; + size += PARAMETER_SIZE(SAP_PARAM_ID_CONN_STATUS_LEN); + + /* Add MaxMsgSize */ + if (maxmsgsize && (status == SAP_STATUS_MAX_MSG_SIZE_NOT_SUPPORTED || + status == SAP_STATUS_MAX_MSG_SIZE_TOO_SMALL)) { + uint16_t *len; + + msg->nparam++; + param = (struct sap_parameter *) &buf[size]; + param->id = SAP_PARAM_ID_MAX_MSG_SIZE; + param->len = htons(SAP_PARAM_ID_MAX_MSG_SIZE_LEN); + len = (uint16_t *) ¶m->val; + *len = htons(maxmsgsize); + size += PARAMETER_SIZE(SAP_PARAM_ID_MAX_MSG_SIZE_LEN); + } + + if (status == SAP_STATUS_OK) { + gboolean connected = TRUE; + + emit_property_changed(connection, server->path, + SAP_SERVER_INTERFACE, + "Connected", DBUS_TYPE_BOOLEAN, &connected); + + conn->state = SAP_STATE_CONNECTED; + } else { + conn->state = SAP_STATE_DISCONNECTED; + + /* Timer will shutdown channel if client doesn't send + * CONNECT_REQ or doesn't shutdown channel itself.*/ + start_guard_timer(conn, SAP_TIMER_NO_ACTIVITY); + } + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_disconnect_rsp(void *sap_device) +{ + struct sap_connection *conn = sap_device; + struct sap_message msg; + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x", conn->state, conn->processing_req); + + switch (conn->state) { + case SAP_STATE_CLIENT_DISCONNECT: + memset(&msg, 0, sizeof(msg)); + msg.id = SAP_DISCONNECT_RESP; + + conn->state = SAP_STATE_DISCONNECTED; + conn->processing_req = SAP_NO_REQ; + + /* Timer will close channel if client doesn't do it.*/ + start_guard_timer(conn, SAP_TIMER_NO_ACTIVITY); + + return send_message(sap_device, &msg, sizeof(msg)); + + case SAP_STATE_IMMEDIATE_DISCONNECT: + conn->state = SAP_STATE_DISCONNECTED; + conn->processing_req = SAP_NO_REQ; + + if (conn->io) { + g_io_channel_shutdown(conn->io, TRUE, NULL); + g_io_channel_unref(conn->io); + } + + return 0; + + default: + break; + } + + return 0; +} + +int sap_transfer_apdu_rsp(void *sap_device, uint8_t result, uint8_t *apdu, + uint16_t length) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + struct sap_parameter *param = (struct sap_parameter *) msg->param; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x", conn->state, conn->processing_req); + + if (conn->processing_req != SAP_TRANSFER_APDU_REQ) + return 0; + + if (result == SAP_RESULT_OK && (!apdu || (apdu && length == 0x00))) + return -EINVAL; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_TRANSFER_APDU_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, param); + + /* Add APDU response. */ + if (result == SAP_RESULT_OK) { + msg->nparam++; + param = (struct sap_parameter *) &buf[size]; + param->id = SAP_PARAM_ID_RESPONSE_APDU; + param->len = htons(length); + + size += PARAMETER_SIZE(length); + + if (size > SAP_BUF_SIZE) + return -EOVERFLOW; + + memcpy(param->val, apdu, length); + } + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_transfer_atr_rsp(void *sap_device, uint8_t result, uint8_t *atr, + uint16_t length) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + struct sap_parameter *param = (struct sap_parameter *) msg->param; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("result 0x%02x state %d pr 0x%02x len %d", result, conn->state, + conn->processing_req, length); + + if (conn->processing_req != SAP_TRANSFER_ATR_REQ) + return 0; + + if (result == SAP_RESULT_OK && (!atr || (atr && length == 0x00))) + return -EINVAL; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_TRANSFER_ATR_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, param); + + /* Add ATR response */ + if (result == SAP_RESULT_OK) { + msg->nparam++; + param = (struct sap_parameter *) &buf[size]; + param->id = SAP_PARAM_ID_ATR; + param->len = htons(length); + size += PARAMETER_SIZE(length); + + if (size > SAP_BUF_SIZE) + return -EOVERFLOW; + + memcpy(param->val, atr, length); + } + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_power_sim_off_rsp(void *sap_device, uint8_t result) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x", conn->state, conn->processing_req); + + if (conn->processing_req != SAP_POWER_SIM_OFF_REQ) + return 0; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_POWER_SIM_OFF_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, msg->param); + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_power_sim_on_rsp(void *sap_device, uint8_t result) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x", conn->state, conn->processing_req); + + if (conn->processing_req != SAP_POWER_SIM_ON_REQ) + return 0; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_POWER_SIM_ON_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, msg->param); + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_reset_sim_rsp(void *sap_device, uint8_t result) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x result 0x%02x", conn->state, + conn->processing_req, result); + + if (conn->processing_req != SAP_RESET_SIM_REQ) + return 0; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_RESET_SIM_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, msg->param); + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_transfer_card_reader_status_rsp(void *sap_device, uint8_t result, + uint8_t status) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + struct sap_parameter *param = (struct sap_parameter *) msg->param; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x result 0x%02x", conn->state, + conn->processing_req, result); + + if (conn->processing_req != SAP_TRANSFER_CARD_READER_STATUS_REQ) + return 0; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_TRANSFER_CARD_READER_STATUS_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, param); + + /* Add card reader status. */ + if (result == SAP_RESULT_OK) { + msg->nparam++; + param = (struct sap_parameter *) &buf[size]; + param->id = SAP_PARAM_ID_CARD_READER_STATUS; + param->len = htons(SAP_PARAM_ID_CARD_READER_STATUS_LEN); + *param->val = status; + size += PARAMETER_SIZE(SAP_PARAM_ID_CARD_READER_STATUS_LEN); + } + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_transport_protocol_rsp(void *sap_device, uint8_t result) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x result 0x%02x", conn->state, + conn->processing_req, result); + + if (conn->processing_req != SAP_SET_TRANSPORT_PROTOCOL_REQ) + return 0; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_SET_TRANSPORT_PROTOCOL_RESP; + msg->nparam = 0x01; + size += add_result_parameter(result, msg->param); + + conn->processing_req = SAP_NO_REQ; + + return send_message(sap_device, buf, size); +} + +int sap_error_rsp(void *sap_device) +{ + struct sap_message msg; + struct sap_connection *conn = sap_device; + + memset(&msg, 0, sizeof(msg)); + msg.id = SAP_ERROR_RESP; + + return send_message(conn, &msg, sizeof(msg)); +} + +int sap_status_ind(void *sap_device, uint8_t status_change) +{ + struct sap_connection *conn = sap_device; + char buf[SAP_BUF_SIZE]; + struct sap_message *msg = (struct sap_message *) buf; + struct sap_parameter *param = (struct sap_parameter *) msg->param; + size_t size = sizeof(struct sap_message); + + if (!conn) + return -EINVAL; + + DBG("state %d pr 0x%02x sc 0x%02x", conn->state, conn->processing_req, + status_change); + + if (conn->state != SAP_STATE_CONNECTED && + conn->state != SAP_STATE_GRACEFUL_DISCONNECT) + return 0; + + memset(buf, 0, sizeof(buf)); + msg->id = SAP_STATUS_IND; + msg->nparam = 0x01; + + /* Add status change. */ + param->id = SAP_PARAM_ID_STATUS_CHANGE; + param->len = htons(SAP_PARAM_ID_STATUS_CHANGE_LEN); + *param->val = status_change; + size += PARAMETER_SIZE(SAP_PARAM_ID_STATUS_CHANGE_LEN); + + return send_message(sap_device, buf, size); +} + +static int handle_cmd(void *data, void *buf, size_t size) +{ + struct sap_message *msg = buf; + struct sap_connection *conn = data; + + if (!conn) + return -EINVAL; + + if (size < sizeof(struct sap_message)) + goto error_rsp; + + if (msg->nparam != 0 && size < (sizeof(struct sap_message) + + sizeof(struct sap_parameter) + 4)) + goto error_rsp; + + if (check_msg(msg) < 0) + goto error_rsp; + + switch (msg->id) { + case SAP_CONNECT_REQ: + connect_req(conn, msg->param); + return 0; + case SAP_DISCONNECT_REQ: + disconnect_req(conn, SAP_DISCONNECTION_TYPE_CLIENT); + return 0; + case SAP_TRANSFER_APDU_REQ: + transfer_apdu_req(conn, msg->param); + return 0; + case SAP_TRANSFER_ATR_REQ: + transfer_atr_req(conn); + return 0; + case SAP_POWER_SIM_OFF_REQ: + power_sim_off_req(conn); + return 0; + case SAP_POWER_SIM_ON_REQ: + power_sim_on_req(conn); + return 0; + case SAP_RESET_SIM_REQ: + reset_sim_req(conn); + return 0; + case SAP_TRANSFER_CARD_READER_STATUS_REQ: + transfer_card_reader_status_req(conn); + return 0; + case SAP_SET_TRANSPORT_PROTOCOL_REQ: + set_transport_protocol_req(conn, msg->param); + return 0; + default: + DBG("SAP unknown message."); + break; + } + +error_rsp: + DBG("Bad request message format."); + sap_error_rsp(conn); + return -EBADMSG; +} + +static void sap_conn_remove(struct sap_connection *conn) +{ + DBG("conn %p", conn); + + if (!conn) + return; + + if (conn->io) { + g_io_channel_shutdown(conn->io, TRUE, NULL); + g_io_channel_unref(conn->io); + } + + conn->io = NULL; + g_free(conn); + server->conn = NULL; +} + +static gboolean sap_io_cb(GIOChannel *io, GIOCondition cond, gpointer data) +{ + char buf[SAP_BUF_SIZE]; + size_t bytes_read = 0; + GError *gerr = NULL; + GIOStatus gstatus; + + DBG("io %p", io); + + if (cond & G_IO_NVAL) { + DBG("ERR (G_IO_NVAL) on rfcomm socket."); + return FALSE; + } + + if (cond & G_IO_ERR) { + DBG("ERR (G_IO_ERR) on rfcomm socket."); + return FALSE; + } + + if (cond & G_IO_HUP) { + DBG("HUP on rfcomm socket."); + return FALSE; + } + + gstatus = g_io_channel_read_chars(io, buf, sizeof(buf) - 1, + &bytes_read, &gerr); + if (gstatus != G_IO_STATUS_NORMAL) { + if (gerr) + g_error_free(gerr); + + return TRUE; + } + + if (handle_cmd(data, buf, bytes_read) < 0) + error("Invalid SAP message."); + + return TRUE; +} + +static void sap_io_destroy(void *data) +{ + struct sap_connection *conn = data; + + DBG("conn %p", conn); + + if (conn && conn->io) { + gboolean connected = FALSE; + + stop_guard_timer(conn); + + if (conn->state != SAP_STATE_CONNECT_IN_PROGRESS) + emit_property_changed(connection, server->path, + SAP_SERVER_INTERFACE, "Connected", + DBUS_TYPE_BOOLEAN, &connected); + + if (conn->state == SAP_STATE_CONNECT_IN_PROGRESS || + conn->state == SAP_STATE_CONNECTED || + conn->state == SAP_STATE_GRACEFUL_DISCONNECT) + sap_disconnect_req(NULL, 1); + + conn->io = NULL; + sap_conn_remove(conn); + } +} + +static void sap_connect_cb(GIOChannel *io, GError *gerr, gpointer data) +{ + struct sap_connection *conn = data; + + DBG("io %p gerr %p data %p ", io, gerr, data); + + if (!conn) + return; + + /* Timer will shutdown the channel in case of lack of client + activity */ + start_guard_timer(conn, SAP_TIMER_NO_ACTIVITY); + + g_io_add_watch_full(io, G_PRIORITY_DEFAULT, + G_IO_IN | G_IO_ERR | G_IO_HUP | G_IO_NVAL, + sap_io_cb, conn, sap_io_destroy); +} + +static void connect_auth_cb(DBusError *derr, void *data) +{ + struct sap_connection *conn = data; + GError *gerr = NULL; + + DBG("derr %p data %p ", derr, data); + + if (!conn) + return; + + if (derr && dbus_error_is_set(derr)) { + error("Access denied: %s", derr->message); + sap_conn_remove(conn); + return; + } + + if (!bt_io_accept(conn->io, sap_connect_cb, conn, NULL, &gerr)) { + error("bt_io_accept: %s", gerr->message); + g_error_free(gerr); + sap_conn_remove(conn); + return; + } + + DBG("Client has been authorized."); +} + +static void connect_confirm_cb(GIOChannel *io, gpointer data) +{ + struct sap_connection *conn = server->conn; + GError *gerr = NULL; + bdaddr_t src, dst; + int err; + + DBG("io %p data %p ", io, data); + + if (!io) + return; + + if (conn) { + g_io_channel_shutdown(io, TRUE, NULL); + return; + } + + conn = g_try_new0(struct sap_connection, 1); + if (!conn) { + error("Can't allocate memory for incomming SAP connection."); + g_io_channel_shutdown(io, TRUE, NULL); + return; + } + + g_io_channel_set_encoding(io, NULL, NULL); + g_io_channel_set_buffered(io, FALSE); + + server->conn = conn; + conn->io = g_io_channel_ref(io); + conn->state = SAP_STATE_DISCONNECTED; + + bt_io_get(io, BT_IO_RFCOMM, &gerr, + BT_IO_OPT_SOURCE_BDADDR, &src, + BT_IO_OPT_DEST_BDADDR, &dst, + BT_IO_OPT_INVALID); + if (gerr) { + error("%s", gerr->message); + g_error_free(gerr); + sap_conn_remove(conn); + return; + } + + err = btd_request_authorization(&src, &dst, SAP_UUID, + connect_auth_cb, conn); + if (err < 0) { + DBG("Authorization denied: %d %s", err, strerror(err)); + sap_conn_remove(conn); + return; + } + + DBG("SAP incoming connection (sock %d) authorization.", + g_io_channel_unix_get_fd(io)); +} + +static inline DBusMessage *message_failed(DBusMessage *msg, + const char *description) +{ + return g_dbus_create_error(msg, ERROR_INTERFACE ".Failed", + "%s", description); +} + +static DBusMessage *disconnect(DBusConnection *conn, DBusMessage *msg, + void *data) +{ + struct sap_server *server = data; + + DBG("server %p", server); + + if (!server) + return message_failed(msg, "Server internal error."); + + DBG("conn %p", server->conn); + + if (!server->conn) + return message_failed(msg, "Client already disconnected"); + + if (disconnect_req(server->conn, SAP_DISCONNECTION_TYPE_GRACEFUL) < 0) + return g_dbus_create_error(msg, ERROR_INTERFACE ".Failed", + "There is no active connection"); + + return dbus_message_new_method_return(msg); +} + +static DBusMessage *get_properties(DBusConnection *c, + DBusMessage *msg, void *data) +{ + struct sap_connection *conn = data; + DBusMessage *reply; + DBusMessageIter iter; + DBusMessageIter dict; + dbus_bool_t connected; + + if (!conn) + return message_failed(msg, "Server internal error."); + + reply = dbus_message_new_method_return(msg); + if (!reply) + return NULL; + + dbus_message_iter_init_append(reply, &iter); + + dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY, + DBUS_DICT_ENTRY_BEGIN_CHAR_AS_STRING + DBUS_TYPE_STRING_AS_STRING DBUS_TYPE_VARIANT_AS_STRING + DBUS_DICT_ENTRY_END_CHAR_AS_STRING, &dict); + + connected = (conn->state == SAP_STATE_CONNECTED || + conn->state == SAP_STATE_GRACEFUL_DISCONNECT); + dict_append_entry(&dict, "Connected", DBUS_TYPE_BOOLEAN, &connected); + + dbus_message_iter_close_container(&iter, &dict); + + return reply; +} + +static GDBusMethodTable server_methods[] = { + {"GetProperties", "", "a{sv}", get_properties}, + {"Disconnect", "", "", disconnect}, + { } +}; + +static GDBusSignalTable server_signals[] = { + { "PropertyChanged", "sv"}, + { } +}; + +static void server_free(struct sap_server *server) +{ + if (!server) + return; + + sap_conn_remove(server->conn); + g_free(server->path); + g_free(server); + server = NULL; +} + +static void destroy_sap_interface(void *data) +{ + struct sap_server *server = data; + + DBG("Unregistered interface %s on path %s", + SAP_SERVER_INTERFACE, server->path); + + server_free(server); +} + +int sap_server_register(const char *path, bdaddr_t *src) +{ + sdp_record_t *record = NULL; + GError *gerr = NULL; + GIOChannel *io; + + if (sap_init() < 0) { + error("Sap driver initialization failed."); + return -1; + } + + server = g_try_new0(struct sap_server, 1); + if (!server) { + sap_exit(); + return -ENOMEM; + } + + bacpy(&server->src, src); + server->path = g_strdup(path); + + record = create_sap_record(SAP_SERVER_CHANNEL); + if (!record) { + error("Creating SAP SDP record failed."); + goto sdp_err; + } + + if (add_record_to_server(&server->src, record) < 0) { + error("Adding SAP SDP record to the SDP server failed."); + sdp_record_free(record); + goto sdp_err; + } + + server->record_id = record->handle; + + io = bt_io_listen(BT_IO_RFCOMM, NULL, connect_confirm_cb, server, + NULL, &gerr, + BT_IO_OPT_SOURCE_BDADDR, &server->src, + BT_IO_OPT_CHANNEL, SAP_SERVER_CHANNEL, + BT_IO_OPT_SEC_LEVEL, BT_IO_SEC_HIGH, + BT_IO_OPT_MASTER, TRUE, + BT_IO_OPT_INVALID); + if (!io) { + error("Can't listen at channel %d.", SAP_SERVER_CHANNEL); + g_error_free(gerr); + goto server_err; + } + + DBG("Listen socket 0x%02x", g_io_channel_unix_get_fd(io)); + + server->listen_io = io; + server->conn = NULL; + + if (!g_dbus_register_interface(connection, path, SAP_SERVER_INTERFACE, + server_methods, server_signals, NULL, + server, destroy_sap_interface)) { + error("D-Bus failed to register %s interface", + SAP_SERVER_INTERFACE); + goto server_err; + } + + return 0; + +server_err: + remove_record_from_server(server->record_id); +sdp_err: + server_free(server); + sap_exit(); + + return -1; +} + +int sap_server_unregister(const char *path) +{ + if (!server) + return -EINVAL; + + remove_record_from_server(server->record_id); + + if (server->conn) + sap_conn_remove(server->conn); + + if (server->listen_io) { + g_io_channel_shutdown(server->listen_io, TRUE, NULL); + g_io_channel_unref(server->listen_io); + server->listen_io = NULL; + } + + g_dbus_unregister_interface(connection, path, SAP_SERVER_INTERFACE); + + sap_exit(); + + return 0; +} + +int sap_server_init(DBusConnection *conn) +{ + connection = dbus_connection_ref(conn); + return 0; +} + +void sap_server_exit(void) +{ + dbus_connection_unref(connection); + connection = NULL; +} diff --git a/sap/server.h b/sap/server.h new file mode 100644 index 0000000..ef2b7b8 --- /dev/null +++ b/sap/server.h @@ -0,0 +1,26 @@ +/* + * BlueZ - Bluetooth protocol stack for Linux + * + * Copyright (C) 2010 ST-Ericsson SA + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#include <gdbus.h> + +int sap_server_init(DBusConnection *conn); +void sap_server_exit(void); +int sap_server_register(const char *path, bdaddr_t *src); +int sap_server_unregister(const char *path); |