/******************************************************************************
*
* Copyright 1999-2012 Broadcom Corporation
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
******************************************************************************/
/******************************************************************************
*
* this file contains the functions relating to link management. A "link"
* is a connection between this device and another device. Only ACL links
* are managed.
*
******************************************************************************/
#include <base/logging.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include "bt_common.h"
#include "bt_types.h"
#include "bt_utils.h"
#include "btm_api.h"
#include "btm_int.h"
#include "btu.h"
#include "device/include/controller.h"
#include "hcimsgs.h"
#include "l2c_api.h"
#include "l2c_int.h"
#include "l2cdefs.h"
#include "osi/include/osi.h"
static bool l2c_link_send_to_lower(tL2C_LCB* p_lcb, BT_HDR* p_buf,
tL2C_TX_COMPLETE_CB_INFO* p_cbi);
/*******************************************************************************
*
* Function l2c_link_hci_conn_req
*
* Description This function is called when an HCI Connection Request
* event is received.
*
* Returns true, if accept conn
*
******************************************************************************/
bool l2c_link_hci_conn_req(const RawAddress& bd_addr) {
tL2C_LCB* p_lcb;
tL2C_LCB* p_lcb_cur;
int xx;
bool no_links;
/* See if we have a link control block for the remote device */
p_lcb = l2cu_find_lcb_by_bd_addr(bd_addr, BT_TRANSPORT_BR_EDR);
/* If we don't have one, create one and accept the connection. */
if (!p_lcb) {
p_lcb = l2cu_allocate_lcb(bd_addr, false, BT_TRANSPORT_BR_EDR);
if (!p_lcb) {
btsnd_hcic_reject_conn(bd_addr, HCI_ERR_HOST_REJECT_RESOURCES);
L2CAP_TRACE_ERROR("L2CAP failed to allocate LCB");
return false;
}
no_links = true;
/* If we already have connection, accept as a master */
for (xx = 0, p_lcb_cur = &l2cb.lcb_pool[0]; xx < MAX_L2CAP_LINKS;
xx++, p_lcb_cur++) {
if (p_lcb_cur == p_lcb) continue;
if (p_lcb_cur->in_use) {
no_links = false;
p_lcb->link_role = HCI_ROLE_MASTER;
break;
}
}
if (no_links) {
if (!btm_dev_support_switch(bd_addr))
p_lcb->link_role = HCI_ROLE_SLAVE;
else
p_lcb->link_role = l2cu_get_conn_role(p_lcb);
}
/* Tell the other side we accept the connection */
btsnd_hcic_accept_conn(bd_addr, p_lcb->link_role);
p_lcb->link_state = LST_CONNECTING;
/* Start a timer waiting for connect complete */
alarm_set_on_mloop(p_lcb->l2c_lcb_timer, L2CAP_LINK_CONNECT_TIMEOUT_MS,
l2c_lcb_timer_timeout, p_lcb);
return (true);
}
/* We already had a link control block to the guy. Check what state it is in
*/
if ((p_lcb->link_state == LST_CONNECTING) ||
(p_lcb->link_state == LST_CONNECT_HOLDING)) {
/* Connection collision. Accept the connection anyways. */
if (!btm_dev_support_switch(bd_addr))
p_lcb->link_role = HCI_ROLE_SLAVE;
else
p_lcb->link_role = l2cu_get_conn_role(p_lcb);
btsnd_hcic_accept_conn(bd_addr, p_lcb->link_role);
p_lcb->link_state = LST_CONNECTING;
return (true);
} else if (p_lcb->link_state == LST_DISCONNECTING) {
/* In disconnecting state, reject the connection. */
btsnd_hcic_reject_conn(bd_addr, HCI_ERR_HOST_REJECT_DEVICE);
} else {
L2CAP_TRACE_ERROR(
"L2CAP got conn_req while connected (state:%d). Reject it",
p_lcb->link_state);
/* Reject the connection with ACL Connection Already exist reason */
btsnd_hcic_reject_conn(bd_addr, HCI_ERR_CONNECTION_EXISTS);
}
return (false);
}
/*******************************************************************************
*
* Function l2c_link_hci_conn_comp
*
* Description This function is called when an HCI Connection Complete
* event is received.
*
* Returns void
*
******************************************************************************/
bool l2c_link_hci_conn_comp(uint8_t status, uint16_t handle,
const RawAddress& p_bda) {
tL2C_CONN_INFO ci;
tL2C_LCB* p_lcb;
tL2C_CCB* p_ccb;
tBTM_SEC_DEV_REC* p_dev_info = NULL;
btm_acl_update_busy_level(BTM_BLI_PAGE_DONE_EVT);
/* Save the parameters */
ci.status = status;
ci.bd_addr = p_bda;
/* See if we have a link control block for the remote device */
p_lcb = l2cu_find_lcb_by_bd_addr(ci.bd_addr, BT_TRANSPORT_BR_EDR);
/* If we don't have one, allocate one */
if (p_lcb == nullptr) {
L2CAP_TRACE_WARNING("No available link control block, try allocate one");
p_lcb = l2cu_allocate_lcb(ci.bd_addr, false, BT_TRANSPORT_BR_EDR);
if (p_lcb == nullptr) {
L2CAP_TRACE_WARNING("%s: Failed to allocate an LCB", __func__);
return (false);
}
p_lcb->link_state = LST_CONNECTING;
}
if (p_lcb->link_state != LST_CONNECTING) {
L2CAP_TRACE_ERROR("L2CAP got conn_comp in bad state: %d status: 0x%d",
p_lcb->link_state, status);
if (status != HCI_SUCCESS) l2c_link_hci_disc_comp(p_lcb->handle, status);
return (false);
}
/* Save the handle */
p_lcb->handle = handle;
if (ci.status == HCI_SUCCESS) {
/* Connected OK. Change state to connected */
p_lcb->link_state = LST_CONNECTED;
/* Get the peer information if the l2cap flow-control/rtrans is supported */
l2cu_send_peer_info_req(p_lcb, L2CAP_EXTENDED_FEATURES_INFO_TYPE);
/* Tell BTM Acl management about the link */
p_dev_info = btm_find_dev(p_bda);
if (p_dev_info != NULL)
btm_acl_created(ci.bd_addr, p_dev_info->dev_class,
p_dev_info->sec_bd_name, handle, p_lcb->link_role,
BT_TRANSPORT_BR_EDR);
else
btm_acl_created(ci.bd_addr, NULL, NULL, handle, p_lcb->link_role,
BT_TRANSPORT_BR_EDR);
BTM_SetLinkSuperTout(ci.bd_addr, btm_cb.btm_def_link_super_tout);
/* If dedicated bonding do not process any further */
if (p_lcb->is_bonding) {
if (l2cu_start_post_bond_timer(handle)) return (true);
}
/* Update the timeouts in the hold queue */
l2c_process_held_packets(false);
alarm_cancel(p_lcb->l2c_lcb_timer);
/* For all channels, send the event through their FSMs */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;
p_ccb = p_ccb->p_next_ccb) {
l2c_csm_execute(p_ccb, L2CEVT_LP_CONNECT_CFM, &ci);
}
if (p_lcb->p_echo_rsp_cb) {
l2cu_send_peer_echo_req(p_lcb, NULL, 0);
alarm_set_on_mloop(p_lcb->l2c_lcb_timer, L2CAP_ECHO_RSP_TIMEOUT_MS,
l2c_lcb_timer_timeout, p_lcb);
} else if (!p_lcb->ccb_queue.p_first_ccb) {
uint64_t timeout_ms = L2CAP_LINK_STARTUP_TOUT * 1000;
alarm_set_on_mloop(p_lcb->l2c_lcb_timer, timeout_ms,
l2c_lcb_timer_timeout, p_lcb);
}
}
/* Max number of acl connections. */
/* If there's an lcb disconnecting set this one to holding */
else if ((ci.status == HCI_ERR_MAX_NUM_OF_CONNECTIONS) &&
l2cu_lcb_disconnecting()) {
p_lcb->link_state = LST_CONNECT_HOLDING;
p_lcb->handle = HCI_INVALID_HANDLE;
} else {
/* Just in case app decides to try again in the callback context */
p_lcb->link_state = LST_DISCONNECTING;
/* Connection failed. For all channels, send the event through */
/* their FSMs. The CCBs should remove themselves from the LCB */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;) {
tL2C_CCB* pn = p_ccb->p_next_ccb;
l2c_csm_execute(p_ccb, L2CEVT_LP_CONNECT_CFM_NEG, &ci);
p_ccb = pn;
}
p_lcb->disc_reason = status;
/* Release the LCB */
if (p_lcb->ccb_queue.p_first_ccb == NULL)
l2cu_release_lcb(p_lcb);
else /* there are any CCBs remaining */
{
if (ci.status == HCI_ERR_CONNECTION_EXISTS) {
/* we are in collision situation, wait for connecttion request from
* controller */
p_lcb->link_state = LST_CONNECTING;
} else {
l2cu_create_conn_br_edr(p_lcb);
}
}
}
return (true);
}
/*******************************************************************************
*
* Function l2c_link_sec_comp
*
* Description This function is called when required security procedures
* are completed.
*
* Returns void
*
******************************************************************************/
void l2c_link_sec_comp(const RawAddress* p_bda,
UNUSED_ATTR tBT_TRANSPORT transport, void* p_ref_data,
uint8_t status) {
l2c_link_sec_comp2(*p_bda, transport, p_ref_data, status);
}
void l2c_link_sec_comp2(const RawAddress& p_bda,
UNUSED_ATTR tBT_TRANSPORT transport, void* p_ref_data,
uint8_t status) {
tL2C_CONN_INFO ci;
tL2C_LCB* p_lcb;
tL2C_CCB* p_ccb;
tL2C_CCB* p_next_ccb;
uint8_t event;
L2CAP_TRACE_DEBUG("%s: status=%d, p_ref_data=%p, BD_ADDR=%s", __func__,
status, p_ref_data, p_bda.ToString().c_str());
if (status == BTM_SUCCESS_NO_SECURITY) status = BTM_SUCCESS;
/* Save the parameters */
ci.status = status;
ci.bd_addr = p_bda;
p_lcb = l2cu_find_lcb_by_bd_addr(p_bda, transport);
/* If we don't have one, this is an error */
if (!p_lcb) {
L2CAP_TRACE_WARNING("L2CAP got sec_comp for unknown BD_ADDR");
return;
}
/* Match p_ccb with p_ref_data returned by sec manager */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb; p_ccb = p_next_ccb) {
p_next_ccb = p_ccb->p_next_ccb;
if (p_ccb == p_ref_data) {
switch (status) {
case BTM_SUCCESS:
event = L2CEVT_SEC_COMP;
break;
case BTM_DELAY_CHECK:
/* start a timer - encryption change not received before L2CAP connect
* req */
alarm_set_on_mloop(p_ccb->l2c_ccb_timer,
L2CAP_DELAY_CHECK_SM4_TIMEOUT_MS,
l2c_ccb_timer_timeout, p_ccb);
return;
default:
event = L2CEVT_SEC_COMP_NEG;
}
l2c_csm_execute(p_ccb, event, &ci);
break;
}
}
}
/*******************************************************************************
*
* Function l2c_link_hci_disc_comp
*
* Description This function is called when an HCI Disconnect Complete
* event is received.
*
* Returns true if the link is known about, else false
*
******************************************************************************/
bool l2c_link_hci_disc_comp(uint16_t handle, uint8_t reason) {
tL2C_LCB* p_lcb;
tL2C_CCB* p_ccb;
bool status = true;
bool lcb_is_free = true;
tBT_TRANSPORT transport = BT_TRANSPORT_BR_EDR;
/* See if we have a link control block for the connection */
p_lcb = l2cu_find_lcb_by_handle(handle);
/* If we don't have one, maybe an SCO link. Send to MM */
if (!p_lcb) {
status = false;
} else {
/* There can be a case when we rejected PIN code authentication */
/* otherwise save a new reason */
if (btm_cb.acl_disc_reason != HCI_ERR_HOST_REJECT_SECURITY)
btm_cb.acl_disc_reason = reason;
p_lcb->disc_reason = btm_cb.acl_disc_reason;
/* Just in case app decides to try again in the callback context */
p_lcb->link_state = LST_DISCONNECTING;
/* Check for BLE and handle that differently */
if (p_lcb->transport == BT_TRANSPORT_LE)
btm_ble_update_link_topology_mask(p_lcb->link_role, false);
/* Link is disconnected. For all channels, send the event through */
/* their FSMs. The CCBs should remove themselves from the LCB */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;) {
tL2C_CCB* pn = p_ccb->p_next_ccb;
/* Keep connect pending control block (if exists)
* Possible Race condition when a reconnect occurs
* on the channel during a disconnect of link. This
* ccb will be automatically retried after link disconnect
* arrives
*/
if (p_ccb != p_lcb->p_pending_ccb) {
l2c_csm_execute(p_ccb, L2CEVT_LP_DISCONNECT_IND, &reason);
}
p_ccb = pn;
}
if (p_lcb->transport == BT_TRANSPORT_BR_EDR)
/* Tell SCO management to drop any SCOs on this ACL */
btm_sco_acl_removed(&p_lcb->remote_bd_addr);
/* If waiting for disconnect and reconnect is pending start the reconnect
now
race condition where layer above issued connect request on link that was
disconnecting
*/
if (p_lcb->ccb_queue.p_first_ccb != NULL || p_lcb->p_pending_ccb) {
L2CAP_TRACE_DEBUG(
"l2c_link_hci_disc_comp: Restarting pending ACL request");
/* Release any held buffers */
while (!list_is_empty(p_lcb->link_xmit_data_q)) {
BT_HDR* p_buf =
static_cast<BT_HDR*>(list_front(p_lcb->link_xmit_data_q));
list_remove(p_lcb->link_xmit_data_q, p_buf);
osi_free(p_buf);
}
transport = p_lcb->transport;
/* for LE link, always drop and re-open to ensure to get LE remote feature
*/
if (p_lcb->transport == BT_TRANSPORT_LE) {
btm_acl_removed(p_lcb->remote_bd_addr, p_lcb->transport);
} else {
#if (L2CAP_NUM_FIXED_CHNLS > 0)
/* If we are going to re-use the LCB without dropping it, release all
fixed channels
here */
int xx;
for (xx = 0; xx < L2CAP_NUM_FIXED_CHNLS; xx++) {
if (p_lcb->p_fixed_ccbs[xx] &&
p_lcb->p_fixed_ccbs[xx] != p_lcb->p_pending_ccb) {
(*l2cb.fixed_reg[xx].pL2CA_FixedConn_Cb)(
xx + L2CAP_FIRST_FIXED_CHNL, p_lcb->remote_bd_addr, false,
p_lcb->disc_reason, p_lcb->transport);
if (p_lcb->p_fixed_ccbs[xx] == NULL) {
L2CAP_TRACE_ERROR(
"%s: unexpected p_fixed_ccbs[%d] is NULL remote_bd_addr = %s "
"p_lcb = %p in_use = %d link_state = %d handle = %d "
"link_role = %d is_bonding = %d disc_reason = %d transport = "
"%d",
__func__, xx, p_lcb->remote_bd_addr.ToString().c_str(), p_lcb,
p_lcb->in_use, p_lcb->link_state, p_lcb->handle,
p_lcb->link_role, p_lcb->is_bonding, p_lcb->disc_reason,
p_lcb->transport);
}
CHECK(p_lcb->p_fixed_ccbs[xx] != NULL);
l2cu_release_ccb(p_lcb->p_fixed_ccbs[xx]);
p_lcb->p_fixed_ccbs[xx] = NULL;
}
}
#endif
}
if (p_lcb->transport == BT_TRANSPORT_LE) {
if (l2cu_create_conn_le(p_lcb))
lcb_is_free = false; /* still using this lcb */
} else {
if (l2cu_create_conn_br_edr(p_lcb))
lcb_is_free = false; /* still using this lcb */
}
}
p_lcb->p_pending_ccb = NULL;
/* Release the LCB */
if (lcb_is_free) l2cu_release_lcb(p_lcb);
}
/* Now that we have a free acl connection, see if any lcbs are pending */
if (lcb_is_free &&
((p_lcb = l2cu_find_lcb_by_state(LST_CONNECT_HOLDING)) != NULL)) {
/* we found one-- create a connection */
l2cu_create_conn_br_edr(p_lcb);
}
return status;
}
/*******************************************************************************
*
* Function l2c_link_hci_qos_violation
*
* Description This function is called when an HCI QOS Violation
* event is received.
*
* Returns true if the link is known about, else false
*
******************************************************************************/
bool l2c_link_hci_qos_violation(uint16_t handle) {
tL2C_LCB* p_lcb;
tL2C_CCB* p_ccb;
/* See if we have a link control block for the connection */
p_lcb = l2cu_find_lcb_by_handle(handle);
/* If we don't have one, maybe an SCO link. */
if (!p_lcb) return (false);
/* For all channels, tell the upper layer about it */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb; p_ccb = p_ccb->p_next_ccb) {
if (p_ccb->p_rcb->api.pL2CA_QoSViolationInd_Cb)
l2c_csm_execute(p_ccb, L2CEVT_LP_QOS_VIOLATION_IND, NULL);
}
return (true);
}
/*******************************************************************************
*
* Function l2c_link_timeout
*
* Description This function is called when a link timer expires
*
* Returns void
*
******************************************************************************/
void l2c_link_timeout(tL2C_LCB* p_lcb) {
tL2C_CCB* p_ccb;
tBTM_STATUS rc;
L2CAP_TRACE_EVENT(
"L2CAP - l2c_link_timeout() link state %d first CCB %p is_bonding:%d",
p_lcb->link_state, p_lcb->ccb_queue.p_first_ccb, p_lcb->is_bonding);
/* If link was connecting or disconnecting, clear all channels and drop the
* LCB */
if ((p_lcb->link_state == LST_CONNECTING_WAIT_SWITCH) ||
(p_lcb->link_state == LST_CONNECTING) ||
(p_lcb->link_state == LST_CONNECT_HOLDING) ||
(p_lcb->link_state == LST_DISCONNECTING)) {
p_lcb->p_pending_ccb = NULL;
/* For all channels, send a disconnect indication event through */
/* their FSMs. The CCBs should remove themselves from the LCB */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;) {
tL2C_CCB* pn = p_ccb->p_next_ccb;
l2c_csm_execute(p_ccb, L2CEVT_LP_DISCONNECT_IND, NULL);
p_ccb = pn;
}
/* Release the LCB */
l2cu_release_lcb(p_lcb);
}
/* If link is connected, check for inactivity timeout */
if (p_lcb->link_state == LST_CONNECTED) {
/* Check for ping outstanding */
if (p_lcb->p_echo_rsp_cb) {
tL2CA_ECHO_RSP_CB* p_cb = p_lcb->p_echo_rsp_cb;
/* Zero out the callback in case app immediately calls us again */
p_lcb->p_echo_rsp_cb = NULL;
(*p_cb)(L2CAP_PING_RESULT_NO_RESP);
L2CAP_TRACE_WARNING("L2CAP - ping timeout");
/* For all channels, send a disconnect indication event through */
/* their FSMs. The CCBs should remove themselves from the LCB */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;) {
tL2C_CCB* pn = p_ccb->p_next_ccb;
l2c_csm_execute(p_ccb, L2CEVT_LP_DISCONNECT_IND, NULL);
p_ccb = pn;
}
}
/* If no channels in use, drop the link. */
if (!p_lcb->ccb_queue.p_first_ccb) {
uint64_t timeout_ms;
bool start_timeout = true;
rc = btm_sec_disconnect(p_lcb->handle, HCI_ERR_PEER_USER);
if (rc == BTM_CMD_STORED) {
/* Security Manager will take care of disconnecting, state will be
* updated at that time */
start_timeout = false;
} else if (rc == BTM_CMD_STARTED) {
p_lcb->link_state = LST_DISCONNECTING;
timeout_ms = L2CAP_LINK_DISCONNECT_TIMEOUT_MS;
} else if (rc == BTM_SUCCESS) {
l2cu_process_fixed_disc_cback(p_lcb);
/* BTM SEC will make sure that link is release (probably after pairing
* is done) */
p_lcb->link_state = LST_DISCONNECTING;
start_timeout = false;
} else if (rc == BTM_BUSY) {
/* BTM is still executing security process. Let lcb stay as connected */
start_timeout = false;
} else if (p_lcb->is_bonding) {
btsnd_hcic_disconnect(p_lcb->handle, HCI_ERR_PEER_USER);
l2cu_process_fixed_disc_cback(p_lcb);
p_lcb->link_state = LST_DISCONNECTING;
timeout_ms = L2CAP_LINK_DISCONNECT_TIMEOUT_MS;
} else {
/* probably no buffer to send disconnect */
timeout_ms = BT_1SEC_TIMEOUT_MS;
}
if (start_timeout) {
alarm_set_on_mloop(p_lcb->l2c_lcb_timer, timeout_ms,
l2c_lcb_timer_timeout, p_lcb);
}
} else {
/* Check in case we were flow controlled */
l2c_link_check_send_pkts(p_lcb, NULL, NULL);
}
}
}
/*******************************************************************************
*
* Function l2c_info_resp_timer_timeout
*
* Description This function is called when an info request times out
*
* Returns void
*
******************************************************************************/
void l2c_info_resp_timer_timeout(void* data) {
tL2C_LCB* p_lcb = (tL2C_LCB*)data;
tL2C_CCB* p_ccb;
tL2C_CONN_INFO ci;
/* If we timed out waiting for info response, just continue using basic if
* allowed */
if (p_lcb->w4_info_rsp) {
/* If waiting for security complete, restart the info response timer */
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;
p_ccb = p_ccb->p_next_ccb) {
if ((p_ccb->chnl_state == CST_ORIG_W4_SEC_COMP) ||
(p_ccb->chnl_state == CST_TERM_W4_SEC_COMP)) {
alarm_set_on_mloop(p_lcb->info_resp_timer,
L2CAP_WAIT_INFO_RSP_TIMEOUT_MS,
l2c_info_resp_timer_timeout, p_lcb);
return;
}
}
p_lcb->w4_info_rsp = false;
/* If link is in process of being brought up */
if ((p_lcb->link_state != LST_DISCONNECTED) &&
(p_lcb->link_state != LST_DISCONNECTING)) {
/* Notify active channels that peer info is finished */
if (p_lcb->ccb_queue.p_first_ccb) {
ci.status = HCI_SUCCESS;
ci.bd_addr = p_lcb->remote_bd_addr;
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;
p_ccb = p_ccb->p_next_ccb) {
l2c_csm_execute(p_ccb, L2CEVT_L2CAP_INFO_RSP, &ci);
}
}
}
}
}
/*******************************************************************************
*
* Function l2c_link_adjust_allocation
*
* Description This function is called when a link is created or removed
* to calculate the amount of packets each link may send to
* the HCI without an ack coming back.
*
* Currently, this is a simple allocation, dividing the
* number of Controller Packets by the number of links. In
* the future, QOS configuration should be examined.
*
* Returns void
*
******************************************************************************/
void l2c_link_adjust_allocation(void) {
uint16_t qq, yy, qq_remainder;
tL2C_LCB* p_lcb;
uint16_t hi_quota, low_quota;
uint16_t num_lowpri_links = 0;
uint16_t num_hipri_links = 0;
uint16_t controller_xmit_quota = l2cb.num_lm_acl_bufs;
uint16_t high_pri_link_quota = L2CAP_HIGH_PRI_MIN_XMIT_QUOTA_A;
/* If no links active, reset buffer quotas and controller buffers */
if (l2cb.num_links_active == 0) {
l2cb.controller_xmit_window = l2cb.num_lm_acl_bufs;
l2cb.round_robin_quota = l2cb.round_robin_unacked = 0;
return;
}
/* First, count the links */
for (yy = 0, p_lcb = &l2cb.lcb_pool[0]; yy < MAX_L2CAP_LINKS; yy++, p_lcb++) {
if (p_lcb->in_use) {
if (p_lcb->acl_priority == L2CAP_PRIORITY_HIGH)
num_hipri_links++;
else
num_lowpri_links++;
}
}
/* now adjust high priority link quota */
low_quota = num_lowpri_links ? 1 : 0;
while ((num_hipri_links * high_pri_link_quota + low_quota) >
controller_xmit_quota)
high_pri_link_quota--;
/* Work out the xmit quota and buffer quota high and low priorities */
hi_quota = num_hipri_links * high_pri_link_quota;
low_quota =
(hi_quota < controller_xmit_quota) ? controller_xmit_quota - hi_quota : 1;
/* Work out and save the HCI xmit quota for each low priority link */
/* If each low priority link cannot have at least one buffer */
if (num_lowpri_links > low_quota) {
l2cb.round_robin_quota = low_quota;
qq = qq_remainder = 1;
}
/* If each low priority link can have at least one buffer */
else if (num_lowpri_links > 0) {
l2cb.round_robin_quota = 0;
l2cb.round_robin_unacked = 0;
qq = low_quota / num_lowpri_links;
qq_remainder = low_quota % num_lowpri_links;
}
/* If no low priority link */
else {
l2cb.round_robin_quota = 0;
l2cb.round_robin_unacked = 0;
qq = qq_remainder = 1;
}
L2CAP_TRACE_EVENT(
"l2c_link_adjust_allocation num_hipri: %u num_lowpri: %u low_quota: "
"%u round_robin_quota: %u qq: %u",
num_hipri_links, num_lowpri_links, low_quota, l2cb.round_robin_quota, qq);
/* Now, assign the quotas to each link */
for (yy = 0, p_lcb = &l2cb.lcb_pool[0]; yy < MAX_L2CAP_LINKS; yy++, p_lcb++) {
if (p_lcb->in_use) {
if (p_lcb->acl_priority == L2CAP_PRIORITY_HIGH) {
p_lcb->link_xmit_quota = high_pri_link_quota;
} else {
/* Safety check in case we switched to round-robin with something
* outstanding */
/* if sent_not_acked is added into round_robin_unacked then don't add it
* again */
/* l2cap keeps updating sent_not_acked for exiting from round robin */
if ((p_lcb->link_xmit_quota > 0) && (qq == 0))
l2cb.round_robin_unacked += p_lcb->sent_not_acked;
p_lcb->link_xmit_quota = qq;
if (qq_remainder > 0) {
p_lcb->link_xmit_quota++;
qq_remainder--;
}
}
L2CAP_TRACE_EVENT(
"l2c_link_adjust_allocation LCB %d Priority: %d XmitQuota: %d", yy,
p_lcb->acl_priority, p_lcb->link_xmit_quota);
L2CAP_TRACE_EVENT(" SentNotAcked: %d RRUnacked: %d",
p_lcb->sent_not_acked, l2cb.round_robin_unacked);
/* There is a special case where we have readjusted the link quotas and */
/* this link may have sent anything but some other link sent packets so */
/* so we may need a timer to kick off this link's transmissions. */
if ((p_lcb->link_state == LST_CONNECTED) &&
(!list_is_empty(p_lcb->link_xmit_data_q)) &&
(p_lcb->sent_not_acked < p_lcb->link_xmit_quota)) {
alarm_set_on_mloop(p_lcb->l2c_lcb_timer,
L2CAP_LINK_FLOW_CONTROL_TIMEOUT_MS,
l2c_lcb_timer_timeout, p_lcb);
}
}
}
}
/*******************************************************************************
*
* Function l2c_link_adjust_chnl_allocation
*
* Description This function is called to calculate the amount of packets
* each non-F&EC channel may have outstanding.
*
* Currently, this is a simple allocation, dividing the number
* of packets allocated to the link by the number of channels.
* In the future, QOS configuration should be examined.
*
* Returns void
*
******************************************************************************/
void l2c_link_adjust_chnl_allocation(void) {
uint8_t xx;
L2CAP_TRACE_DEBUG("%s", __func__);
/* assign buffer quota to each channel based on its data rate requirement */
for (xx = 0; xx < MAX_L2CAP_CHANNELS; xx++) {
tL2C_CCB* p_ccb = l2cb.ccb_pool + xx;
if (!p_ccb->in_use) continue;
tL2CAP_CHNL_DATA_RATE data_rate = p_ccb->tx_data_rate + p_ccb->rx_data_rate;
p_ccb->buff_quota = L2CAP_CBB_DEFAULT_DATA_RATE_BUFF_QUOTA * data_rate;
L2CAP_TRACE_EVENT(
"CID:0x%04x FCR Mode:%u Priority:%u TxDataRate:%u RxDataRate:%u "
"Quota:%u",
p_ccb->local_cid, p_ccb->peer_cfg.fcr.mode, p_ccb->ccb_priority,
p_ccb->tx_data_rate, p_ccb->rx_data_rate, p_ccb->buff_quota);
/* quota may be change so check congestion */
l2cu_check_channel_congestion(p_ccb);
}
}
/*******************************************************************************
*
* Function l2c_link_processs_num_bufs
*
* Description This function is called when a "controller buffer size"
* event is first received from the controller. It updates
* the L2CAP values.
*
* Returns void
*
******************************************************************************/
void l2c_link_processs_num_bufs(uint16_t num_lm_acl_bufs) {
l2cb.num_lm_acl_bufs = l2cb.controller_xmit_window = num_lm_acl_bufs;
}
/*******************************************************************************
*
* Function l2c_link_pkts_rcvd
*
* Description This function is called from the HCI transport when it is
* time to send a "Host ready for packets" command. This is
* only when host to controller flow control is used. It fills
* in the arrays of numbers of packets and handles.
*
* Returns count of number of entries filled in
*
******************************************************************************/
uint8_t l2c_link_pkts_rcvd(UNUSED_ATTR uint16_t* num_pkts,
UNUSED_ATTR uint16_t* handles) {
uint8_t num_found = 0;
return (num_found);
}
/*******************************************************************************
*
* Function l2c_link_role_changed
*
* Description This function is called whan a link's master/slave role
* change event is received. It simply updates the link control
* block.
*
* Returns void
*
******************************************************************************/
void l2c_link_role_changed(const RawAddress* bd_addr, uint8_t new_role,
uint8_t hci_status) {
tL2C_LCB* p_lcb;
int xx;
/* Make sure not called from HCI Command Status (bd_addr and new_role are
* invalid) */
if (bd_addr) {
/* If here came form hci role change event */
p_lcb = l2cu_find_lcb_by_bd_addr(*bd_addr, BT_TRANSPORT_BR_EDR);
if (p_lcb) {
p_lcb->link_role = new_role;
/* Reset high priority link if needed */
if (hci_status == HCI_SUCCESS)
l2cu_set_acl_priority(*bd_addr, p_lcb->acl_priority, true);
}
}
/* Check if any LCB was waiting for switch to be completed */
for (xx = 0, p_lcb = &l2cb.lcb_pool[0]; xx < MAX_L2CAP_LINKS; xx++, p_lcb++) {
if ((p_lcb->in_use) && (p_lcb->link_state == LST_CONNECTING_WAIT_SWITCH)) {
l2cu_create_conn_after_switch(p_lcb);
}
}
}
/*******************************************************************************
*
* Function l2c_pin_code_request
*
* Description This function is called whan a pin-code request is received
* on a connection. If there are no channels active yet on the
* link, it extends the link first connection timer. Make sure
* that inactivity timer is not extended if PIN code happens
* to be after last ccb released.
*
* Returns void
*
******************************************************************************/
void l2c_pin_code_request(const RawAddress& bd_addr) {
tL2C_LCB* p_lcb = l2cu_find_lcb_by_bd_addr(bd_addr, BT_TRANSPORT_BR_EDR);
if ((p_lcb) && (!p_lcb->ccb_queue.p_first_ccb)) {
alarm_set_on_mloop(p_lcb->l2c_lcb_timer, L2CAP_LINK_CONNECT_EXT_TIMEOUT_MS,
l2c_lcb_timer_timeout, p_lcb);
}
}
#if (L2CAP_WAKE_PARKED_LINK == TRUE)
/*******************************************************************************
*
* Function l2c_link_check_power_mode
*
* Description This function is called to check power mode.
*
* Returns true if link is going to be active from park
* false if nothing to send or not in park mode
*
******************************************************************************/
bool l2c_link_check_power_mode(tL2C_LCB* p_lcb) {
tBTM_PM_MODE mode;
tL2C_CCB* p_ccb;
bool need_to_active = false;
/*
* We only switch park to active only if we have unsent packets
*/
if (list_is_empty(p_lcb->link_xmit_data_q)) {
for (p_ccb = p_lcb->ccb_queue.p_first_ccb; p_ccb;
p_ccb = p_ccb->p_next_ccb) {
if (!fixed_queue_is_empty(p_ccb->xmit_hold_q)) {
need_to_active = true;
break;
}
}
} else
need_to_active = true;
/* if we have packets to send */
if (need_to_active) {
/* check power mode */
if (BTM_ReadPowerMode(p_lcb->remote_bd_addr, &mode) == BTM_SUCCESS) {
if (mode == BTM_PM_STS_PENDING) {
L2CAP_TRACE_DEBUG("LCB(0x%x) is in PM pending state", p_lcb->handle);
return true;
}
}
}
return false;
}
#endif /* L2CAP_WAKE_PARKED_LINK == TRUE) */
/*******************************************************************************
*
* Function l2c_link_check_send_pkts
*
* Description This function is called to check if it can send packets
* to the Host Controller. It may be passed the address of
* a packet to send.
*
* Returns void
*
******************************************************************************/
void l2c_link_check_send_pkts(tL2C_LCB* p_lcb, tL2C_CCB* p_ccb, BT_HDR* p_buf) {
int xx;
bool single_write = false;
/* Save the channel ID for faster counting */
if (p_buf) {
if (p_ccb != NULL) {
p_buf->event = p_ccb->local_cid;
single_write = true;
} else
p_buf->event = 0;
p_buf->layer_specific = 0;
list_append(p_lcb->link_xmit_data_q, p_buf);
if (p_lcb->link_xmit_quota == 0) {
if (p_lcb->transport == BT_TRANSPORT_LE)
l2cb.ble_check_round_robin = true;
else
l2cb.check_round_robin = true;
}
}
/* If this is called from uncongested callback context break recursive
*calling.
** This LCB will be served when receiving number of completed packet event.
*/
if (l2cb.is_cong_cback_context) return;
/* If we are in a scenario where there are not enough buffers for each link to
** have at least 1, then do a round-robin for all the LCBs
*/
if ((p_lcb == NULL) || (p_lcb->link_xmit_quota == 0)) {
if (p_lcb == NULL)
p_lcb = l2cb.lcb_pool;
else if (!single_write)
p_lcb++;
/* Loop through, starting at the next */
for (xx = 0; xx < MAX_L2CAP_LINKS; xx++, p_lcb++) {
/* Check for wraparound */
if (p_lcb == &l2cb.lcb_pool[MAX_L2CAP_LINKS]) p_lcb = &l2cb.lcb_pool[0];
/* If controller window is full, nothing to do */
if (((l2cb.controller_xmit_window == 0 ||
(l2cb.round_robin_unacked >= l2cb.round_robin_quota)) &&
(p_lcb->transport == BT_TRANSPORT_BR_EDR)) ||
(p_lcb->transport == BT_TRANSPORT_LE &&
(l2cb.ble_round_robin_unacked >= l2cb.ble_round_robin_quota ||
l2cb.controller_le_xmit_window == 0)))
continue;
if ((!p_lcb->in_use) || (p_lcb->partial_segment_being_sent) ||
(p_lcb->link_state != LST_CONNECTED) ||
(p_lcb->link_xmit_quota != 0) || (L2C_LINK_CHECK_POWER_MODE(p_lcb)))
continue;
/* See if we can send anything from the Link Queue */
if (!list_is_empty(p_lcb->link_xmit_data_q)) {
p_buf = (BT_HDR*)list_front(p_lcb->link_xmit_data_q);
list_remove(p_lcb->link_xmit_data_q, p_buf);
l2c_link_send_to_lower(p_lcb, p_buf, NULL);
} else if (single_write) {
/* If only doing one write, break out */
break;
}
/* If nothing on the link queue, check the channel queue */
else {
tL2C_TX_COMPLETE_CB_INFO cbi;
p_buf = l2cu_get_next_buffer_to_send(p_lcb, &cbi);
if (p_buf != NULL) {
l2c_link_send_to_lower(p_lcb, p_buf, &cbi);
}
}
}
/* If we finished without using up our quota, no need for a safety check */
if ((l2cb.controller_xmit_window > 0) &&
(l2cb.round_robin_unacked < l2cb.round_robin_quota) &&
(p_lcb->transport == BT_TRANSPORT_BR_EDR))
l2cb.check_round_robin = false;
if ((l2cb.controller_le_xmit_window > 0) &&
(l2cb.ble_round_robin_unacked < l2cb.ble_round_robin_quota) &&
(p_lcb->transport == BT_TRANSPORT_LE))
l2cb.ble_check_round_robin = false;
} else /* if this is not round-robin service */
{
/* If a partial segment is being sent, can't send anything else */
if ((p_lcb->partial_segment_being_sent) ||
(p_lcb->link_state != LST_CONNECTED) ||
(L2C_LINK_CHECK_POWER_MODE(p_lcb)))
return;
/* See if we can send anything from the link queue */
while (((l2cb.controller_xmit_window != 0 &&
(p_lcb->transport == BT_TRANSPORT_BR_EDR)) ||
(l2cb.controller_le_xmit_window != 0 &&
(p_lcb->transport == BT_TRANSPORT_LE))) &&
(p_lcb->sent_not_acked < p_lcb->link_xmit_quota)) {
if (list_is_empty(p_lcb->link_xmit_data_q)) break;
p_buf = (BT_HDR*)list_front(p_lcb->link_xmit_data_q);
list_remove(p_lcb->link_xmit_data_q, p_buf);
if (!l2c_link_send_to_lower(p_lcb, p_buf, NULL)) break;
}
if (!single_write) {
/* See if we can send anything for any channel */
while (((l2cb.controller_xmit_window != 0 &&
(p_lcb->transport == BT_TRANSPORT_BR_EDR)) ||
(l2cb.controller_le_xmit_window != 0 &&
(p_lcb->transport == BT_TRANSPORT_LE))) &&
(p_lcb->sent_not_acked < p_lcb->link_xmit_quota)) {
tL2C_TX_COMPLETE_CB_INFO cbi;
p_buf = l2cu_get_next_buffer_to_send(p_lcb, &cbi);
if (p_buf == NULL) break;
if (!l2c_link_send_to_lower(p_lcb, p_buf, &cbi)) break;
}
}
/* There is a special case where we have readjusted the link quotas and */
/* this link may have sent anything but some other link sent packets so */
/* so we may need a timer to kick off this link's transmissions. */
if ((!list_is_empty(p_lcb->link_xmit_data_q)) &&
(p_lcb->sent_not_acked < p_lcb->link_xmit_quota)) {
alarm_set_on_mloop(p_lcb->l2c_lcb_timer,
L2CAP_LINK_FLOW_CONTROL_TIMEOUT_MS,
l2c_lcb_timer_timeout, p_lcb);
}
}
}
/*******************************************************************************
*
* Function l2c_link_send_to_lower
*
* Description This function queues the buffer for HCI transmission
*
* Returns true for success, false for fail
*
******************************************************************************/
static bool l2c_link_send_to_lower(tL2C_LCB* p_lcb, BT_HDR* p_buf,
tL2C_TX_COMPLETE_CB_INFO* p_cbi) {
uint16_t num_segs;
uint16_t xmit_window, acl_data_size;
const controller_t* controller = controller_get_interface();
if ((p_buf->len <= controller->get_acl_packet_size_classic() &&
(p_lcb->transport == BT_TRANSPORT_BR_EDR)) ||
((p_lcb->transport == BT_TRANSPORT_LE) &&
(p_buf->len <= controller->get_acl_packet_size_ble()))) {
if (p_lcb->link_xmit_quota == 0) {
if (p_lcb->transport == BT_TRANSPORT_LE)
l2cb.ble_round_robin_unacked++;
else
l2cb.round_robin_unacked++;
}
p_lcb->sent_not_acked++;
p_buf->layer_specific = 0;
if (p_lcb->transport == BT_TRANSPORT_LE) {
l2cb.controller_le_xmit_window--;
bte_main_hci_send(
p_buf, (uint16_t)(BT_EVT_TO_LM_HCI_ACL | LOCAL_BLE_CONTROLLER_ID));
} else {
l2cb.controller_xmit_window--;
bte_main_hci_send(p_buf, BT_EVT_TO_LM_HCI_ACL);
}
} else {
if (p_lcb->transport == BT_TRANSPORT_LE) {
acl_data_size = controller->get_acl_data_size_ble();
xmit_window = l2cb.controller_le_xmit_window;
} else {
acl_data_size = controller->get_acl_data_size_classic();
xmit_window = l2cb.controller_xmit_window;
}
num_segs = (p_buf->len - HCI_DATA_PREAMBLE_SIZE + acl_data_size - 1) /
acl_data_size;
/* If doing round-robin, then only 1 segment each time */
if (p_lcb->link_xmit_quota == 0) {
num_segs = 1;
p_lcb->partial_segment_being_sent = true;
} else {
/* Multi-segment packet. Make sure it can fit */
if (num_segs > xmit_window) {
num_segs = xmit_window;
p_lcb->partial_segment_being_sent = true;
}
if (num_segs > (p_lcb->link_xmit_quota - p_lcb->sent_not_acked)) {
num_segs = (p_lcb->link_xmit_quota - p_lcb->sent_not_acked);
p_lcb->partial_segment_being_sent = true;
}
}
p_buf->layer_specific = num_segs;
if (p_lcb->transport == BT_TRANSPORT_LE) {
l2cb.controller_le_xmit_window -= num_segs;
if (p_lcb->link_xmit_quota == 0) l2cb.ble_round_robin_unacked += num_segs;
} else {
l2cb.controller_xmit_window -= num_segs;
if (p_lcb->link_xmit_quota == 0) l2cb.round_robin_unacked += num_segs;
}
p_lcb->sent_not_acked += num_segs;
if (p_lcb->transport == BT_TRANSPORT_LE) {
bte_main_hci_send(
p_buf, (uint16_t)(BT_EVT_TO_LM_HCI_ACL | LOCAL_BLE_CONTROLLER_ID));
} else {
bte_main_hci_send(p_buf, BT_EVT_TO_LM_HCI_ACL);
}
}
#if (L2CAP_HCI_FLOW_CONTROL_DEBUG == TRUE)
if (p_lcb->transport == BT_TRANSPORT_LE) {
L2CAP_TRACE_DEBUG(
"TotalWin=%d,Hndl=0x%x,Quota=%d,Unack=%d,RRQuota=%d,RRUnack=%d",
l2cb.controller_le_xmit_window, p_lcb->handle, p_lcb->link_xmit_quota,
p_lcb->sent_not_acked, l2cb.ble_round_robin_quota,
l2cb.ble_round_robin_unacked);
} else {
L2CAP_TRACE_DEBUG(
"TotalWin=%d,Hndl=0x%x,Quota=%d,Unack=%d,RRQuota=%d,RRUnack=%d",
l2cb.controller_xmit_window, p_lcb->handle, p_lcb->link_xmit_quota,
p_lcb->sent_not_acked, l2cb.round_robin_quota,
l2cb.round_robin_unacked);
}
#endif
if (p_cbi) l2cu_tx_complete(p_cbi);
return true;
}
/*******************************************************************************
*
* Function l2c_link_process_num_completed_pkts
*
* Description This function is called when a "number-of-completed-packets"
* event is received from the controller. It updates all the
* LCB transmit counts.
*
* Returns void
*
******************************************************************************/
void l2c_link_process_num_completed_pkts(uint8_t* p) {
uint8_t num_handles, xx;
uint16_t handle;
uint16_t num_sent;
tL2C_LCB* p_lcb;
STREAM_TO_UINT8(num_handles, p);
for (xx = 0; xx < num_handles; xx++) {
STREAM_TO_UINT16(handle, p);
STREAM_TO_UINT16(num_sent, p);
p_lcb = l2cu_find_lcb_by_handle(handle);
/* Callback for number of completed packet event */
/* Originally designed for [3DSG] */
if ((p_lcb != NULL) && (p_lcb->p_nocp_cb)) {
L2CAP_TRACE_DEBUG("L2CAP - calling NoCP callback");
(*p_lcb->p_nocp_cb)(p_lcb->remote_bd_addr);
}
if (p_lcb) {
if (p_lcb && (p_lcb->transport == BT_TRANSPORT_LE))
l2cb.controller_le_xmit_window += num_sent;
else {
/* Maintain the total window to the controller */
l2cb.controller_xmit_window += num_sent;
}
/* If doing round-robin, adjust communal counts */
if (p_lcb->link_xmit_quota == 0) {
if (p_lcb->transport == BT_TRANSPORT_LE) {
/* Don't go negative */
if (l2cb.ble_round_robin_unacked > num_sent)
l2cb.ble_round_robin_unacked -= num_sent;
else
l2cb.ble_round_robin_unacked = 0;
} else {
/* Don't go negative */
if (l2cb.round_robin_unacked > num_sent)
l2cb.round_robin_unacked -= num_sent;
else
l2cb.round_robin_unacked = 0;
}
}
/* Don't go negative */
if (p_lcb->sent_not_acked > num_sent)
p_lcb->sent_not_acked -= num_sent;
else
p_lcb->sent_not_acked = 0;
l2c_link_check_send_pkts(p_lcb, NULL, NULL);
/* If we were doing round-robin for low priority links, check 'em */
if ((p_lcb->acl_priority == L2CAP_PRIORITY_HIGH) &&
(l2cb.check_round_robin) &&
(l2cb.round_robin_unacked < l2cb.round_robin_quota)) {
l2c_link_check_send_pkts(NULL, NULL, NULL);
}
if ((p_lcb->transport == BT_TRANSPORT_LE) &&
(p_lcb->acl_priority == L2CAP_PRIORITY_HIGH) &&
((l2cb.ble_check_round_robin) &&
(l2cb.ble_round_robin_unacked < l2cb.ble_round_robin_quota))) {
l2c_link_check_send_pkts(NULL, NULL, NULL);
}
}
#if (L2CAP_HCI_FLOW_CONTROL_DEBUG == TRUE)
if (p_lcb) {
if (p_lcb->transport == BT_TRANSPORT_LE) {
L2CAP_TRACE_DEBUG(
"TotalWin=%d,LinkUnack(0x%x)=%d,RRCheck=%d,RRUnack=%d",
l2cb.controller_le_xmit_window, p_lcb->handle,
p_lcb->sent_not_acked, l2cb.ble_check_round_robin,
l2cb.ble_round_robin_unacked);
} else {
L2CAP_TRACE_DEBUG(
"TotalWin=%d,LinkUnack(0x%x)=%d,RRCheck=%d,RRUnack=%d",
l2cb.controller_xmit_window, p_lcb->handle, p_lcb->sent_not_acked,
l2cb.check_round_robin, l2cb.round_robin_unacked);
}
} else {
L2CAP_TRACE_DEBUG(
"TotalWin=%d LE_Win: %d, Handle=0x%x, RRCheck=%d, RRUnack=%d",
l2cb.controller_xmit_window, l2cb.controller_le_xmit_window, handle,
l2cb.ble_check_round_robin, l2cb.ble_round_robin_unacked);
}
#endif
}
}
/*******************************************************************************
*
* Function l2c_link_segments_xmitted
*
* Description This function is called from the HCI Interface when an ACL
* data packet segment is transmitted.
*
* Returns void
*
******************************************************************************/
void l2c_link_segments_xmitted(BT_HDR* p_msg) {
uint8_t* p = (uint8_t*)(p_msg + 1) + p_msg->offset;
uint16_t handle;
tL2C_LCB* p_lcb;
/* Extract the handle */
STREAM_TO_UINT16(handle, p);
handle = HCID_GET_HANDLE(handle);
/* Find the LCB based on the handle */
p_lcb = l2cu_find_lcb_by_handle(handle);
if (p_lcb == NULL) {
L2CAP_TRACE_WARNING("L2CAP - rcvd segment complete, unknown handle: %d",
handle);
osi_free(p_msg);
return;
}
if (p_lcb->link_state == LST_CONNECTED) {
/* Enqueue the buffer to the head of the transmit queue, and see */
/* if we can transmit anything more. */
list_prepend(p_lcb->link_xmit_data_q, p_msg);
p_lcb->partial_segment_being_sent = false;
l2c_link_check_send_pkts(p_lcb, NULL, NULL);
} else
osi_free(p_msg);
}