1365 lines
60 KiB
C++
1365 lines
60 KiB
C++
/* Copyright (C) 2012 Kristian Lauszus, TKJ Electronics. All rights reserved.
|
|
|
|
This software may be distributed and modified under the terms of the GNU
|
|
General Public License version 2 (GPL2) as published by the Free Software
|
|
Foundation and appearing in the file GPL2.TXT included in the packaging of
|
|
this file. Please note that GPL2 Section 2[b] requires that all works based
|
|
on this software must also be made publicly available under the terms of
|
|
the GPL2 ("Copyleft").
|
|
|
|
Contact information
|
|
-------------------
|
|
|
|
Kristian Lauszus, TKJ Electronics
|
|
Web : http://www.tkjelectronics.com
|
|
e-mail : kristianl@tkjelectronics.com
|
|
*/
|
|
|
|
#include "BTD.h"
|
|
// To enable serial debugging see "settings.h"
|
|
//#define EXTRADEBUG // Uncomment to get even more debugging data
|
|
|
|
const uint8_t BTD::BTD_CONTROL_PIPE = 0;
|
|
const uint8_t BTD::BTD_EVENT_PIPE = 1;
|
|
const uint8_t BTD::BTD_DATAIN_PIPE = 2;
|
|
const uint8_t BTD::BTD_DATAOUT_PIPE = 3;
|
|
|
|
BTD::BTD(USB *p) :
|
|
connectToWii(false),
|
|
pairWithWii(false),
|
|
connectToHIDDevice(false),
|
|
pairWithHIDDevice(false),
|
|
pUsb(p), // Pointer to USB class instance - mandatory
|
|
bAddress(0), // Device address - mandatory
|
|
bNumEP(1), // If config descriptor needs to be parsed
|
|
qNextPollTime(0), // Reset NextPollTime
|
|
pollInterval(0),
|
|
bPollEnable(false) // Don't start polling before dongle is connected
|
|
{
|
|
for(uint8_t i = 0; i < BTD_NUM_SERVICES; i++)
|
|
btService[i] = NULL;
|
|
|
|
Initialize(); // Set all variables, endpoint structs etc. to default values
|
|
|
|
if(pUsb) // Register in USB subsystem
|
|
pUsb->RegisterDeviceClass(this); // Set devConfig[] entry
|
|
}
|
|
|
|
uint8_t BTD::ConfigureDevice(uint8_t parent, uint8_t port, bool lowspeed) {
|
|
const uint8_t constBufSize = sizeof (USB_DEVICE_DESCRIPTOR);
|
|
uint8_t buf[constBufSize];
|
|
USB_DEVICE_DESCRIPTOR * udd = reinterpret_cast<USB_DEVICE_DESCRIPTOR*>(buf);
|
|
uint8_t rcode;
|
|
UsbDevice *p = NULL;
|
|
EpInfo *oldep_ptr = NULL;
|
|
|
|
Initialize(); // Set all variables, endpoint structs etc. to default values
|
|
|
|
AddressPool &addrPool = pUsb->GetAddressPool(); // Get memory address of USB device address pool
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nBTD ConfigureDevice"), 0x80);
|
|
#endif
|
|
|
|
if(bAddress) { // Check if address has already been assigned to an instance
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nAddress in use"), 0x80);
|
|
#endif
|
|
return USB_ERROR_CLASS_INSTANCE_ALREADY_IN_USE;
|
|
}
|
|
|
|
p = addrPool.GetUsbDevicePtr(0); // Get pointer to pseudo device with address 0 assigned
|
|
if(!p) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nAddress not found"), 0x80);
|
|
#endif
|
|
return USB_ERROR_ADDRESS_NOT_FOUND_IN_POOL;
|
|
}
|
|
|
|
if(!p->epinfo) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nepinfo is null"), 0x80);
|
|
#endif
|
|
return USB_ERROR_EPINFO_IS_NULL;
|
|
}
|
|
|
|
oldep_ptr = p->epinfo; // Save old pointer to EP_RECORD of address 0
|
|
p->epinfo = epInfo; // Temporary assign new pointer to epInfo to p->epinfo in order to avoid toggle inconsistence
|
|
p->lowspeed = lowspeed;
|
|
rcode = pUsb->getDevDescr(0, 0, constBufSize, (uint8_t*)buf); // Get device descriptor - addr, ep, nbytes, data
|
|
|
|
p->epinfo = oldep_ptr; // Restore p->epinfo
|
|
|
|
if(rcode)
|
|
goto FailGetDevDescr;
|
|
|
|
bAddress = addrPool.AllocAddress(parent, false, port); // Allocate new address according to device class
|
|
|
|
if(!bAddress) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nOut of address space"), 0x80);
|
|
#endif
|
|
return USB_ERROR_OUT_OF_ADDRESS_SPACE_IN_POOL;
|
|
}
|
|
|
|
epInfo[0].maxPktSize = udd->bMaxPacketSize0; // Extract Max Packet Size from device descriptor
|
|
epInfo[1].epAddr = udd->bNumConfigurations; // Steal and abuse from epInfo structure to save memory
|
|
|
|
VID = udd->idVendor;
|
|
PID = udd->idProduct;
|
|
|
|
return USB_ERROR_CONFIG_REQUIRES_ADDITIONAL_RESET;
|
|
|
|
FailGetDevDescr:
|
|
#ifdef DEBUG_USB_HOST
|
|
NotifyFailGetDevDescr(rcode);
|
|
#endif
|
|
if(rcode != hrJERR)
|
|
rcode = USB_ERROR_FailGetDevDescr;
|
|
Release();
|
|
return rcode;
|
|
};
|
|
|
|
uint8_t BTD::Init(uint8_t parent, uint8_t port, bool lowspeed) {
|
|
uint8_t rcode;
|
|
uint8_t num_of_conf = epInfo[1].epAddr; // Number of configurations
|
|
epInfo[1].epAddr = 0;
|
|
|
|
AddressPool &addrPool = pUsb->GetAddressPool();
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nBTD Init"), 0x80);
|
|
#endif
|
|
UsbDevice *p = addrPool.GetUsbDevicePtr(bAddress); // Get pointer to assigned address record
|
|
|
|
if(!p) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nAddress not found"), 0x80);
|
|
#endif
|
|
return USB_ERROR_ADDRESS_NOT_FOUND_IN_POOL;
|
|
}
|
|
|
|
delay(300); // Assign new address to the device
|
|
|
|
rcode = pUsb->setAddr(0, 0, bAddress); // Assign new address to the device
|
|
if(rcode) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nsetAddr: "), 0x80);
|
|
D_PrintHex<uint8_t > (rcode, 0x80);
|
|
#endif
|
|
p->lowspeed = false;
|
|
goto Fail;
|
|
}
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nAddr: "), 0x80);
|
|
D_PrintHex<uint8_t > (bAddress, 0x80);
|
|
#endif
|
|
|
|
p->lowspeed = false;
|
|
|
|
p = addrPool.GetUsbDevicePtr(bAddress); // Get pointer to assigned address record
|
|
if(!p) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nAddress not found"), 0x80);
|
|
#endif
|
|
return USB_ERROR_ADDRESS_NOT_FOUND_IN_POOL;
|
|
}
|
|
|
|
p->lowspeed = lowspeed;
|
|
|
|
rcode = pUsb->setEpInfoEntry(bAddress, 1, epInfo); // Assign epInfo to epinfo pointer - only EP0 is known
|
|
if(rcode)
|
|
goto FailSetDevTblEntry;
|
|
|
|
if(VID == PS3_VID && (PID == PS3_PID || PID == PS3NAVIGATION_PID || PID == PS3MOVE_PID)) {
|
|
delay(100);
|
|
rcode = pUsb->setConf(bAddress, epInfo[ BTD_CONTROL_PIPE ].epAddr, 1); // We only need the Control endpoint, so we don't have to initialize the other endpoints of device
|
|
if(rcode)
|
|
goto FailSetConfDescr;
|
|
|
|
#ifdef DEBUG_USB_HOST
|
|
if(PID == PS3_PID || PID == PS3NAVIGATION_PID) {
|
|
if(PID == PS3_PID)
|
|
Notify(PSTR("\r\nDualshock 3 Controller Connected"), 0x80);
|
|
else // It must be a navigation controller
|
|
Notify(PSTR("\r\nNavigation Controller Connected"), 0x80);
|
|
} else // It must be a Motion controller
|
|
Notify(PSTR("\r\nMotion Controller Connected"), 0x80);
|
|
#endif
|
|
|
|
if(my_bdaddr[0] == 0x00 && my_bdaddr[1] == 0x00 && my_bdaddr[2] == 0x00 && my_bdaddr[3] == 0x00 && my_bdaddr[4] == 0x00 && my_bdaddr[5] == 0x00) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nPlease plug in the dongle before trying to pair with the PS3 Controller\r\nor set the Bluetooth address in the constructor of the PS3BT class"), 0x80);
|
|
#endif
|
|
} else {
|
|
if(PID == PS3_PID || PID == PS3NAVIGATION_PID)
|
|
setBdaddr(my_bdaddr); // Set internal Bluetooth address
|
|
else
|
|
setMoveBdaddr(my_bdaddr); // Set internal Bluetooth address
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nBluetooth Address was set to: "), 0x80);
|
|
for(int8_t i = 5; i > 0; i--) {
|
|
D_PrintHex<uint8_t > (my_bdaddr[i], 0x80);
|
|
Notify(PSTR(":"), 0x80);
|
|
}
|
|
D_PrintHex<uint8_t > (my_bdaddr[0], 0x80);
|
|
#endif
|
|
}
|
|
|
|
pUsb->setConf(bAddress, epInfo[ BTD_CONTROL_PIPE ].epAddr, 0); // Reset configuration value
|
|
pUsb->setAddr(bAddress, 0, 0); // Reset address
|
|
Release(); // Release device
|
|
return USB_DEV_CONFIG_ERROR_DEVICE_NOT_SUPPORTED; // Return
|
|
} else {
|
|
// Check if attached device is a Bluetooth dongle and fill endpoint data structure
|
|
// First interface in the configuration must have Bluetooth assigned Class/Subclass/Protocol
|
|
// And 3 endpoints - interrupt-IN, bulk-IN, bulk-OUT, not necessarily in this order
|
|
for(uint8_t i = 0; i < num_of_conf; i++) {
|
|
if(VID == IOGEAR_GBU521_VID && PID == IOGEAR_GBU521_PID) {
|
|
ConfigDescParser<USB_CLASS_VENDOR_SPECIFIC, WI_SUBCLASS_RF, WI_PROTOCOL_BT, CP_MASK_COMPARE_ALL> confDescrParser(this); // Needed for the IOGEAR GBU521
|
|
rcode = pUsb->getConfDescr(bAddress, 0, i, &confDescrParser);
|
|
} else {
|
|
ConfigDescParser<USB_CLASS_WIRELESS_CTRL, WI_SUBCLASS_RF, WI_PROTOCOL_BT, CP_MASK_COMPARE_ALL> confDescrParser(this);
|
|
rcode = pUsb->getConfDescr(bAddress, 0, i, &confDescrParser);
|
|
}
|
|
if(rcode) // Check error code
|
|
goto FailGetConfDescr;
|
|
if(bNumEP >= BTD_MAX_ENDPOINTS) // All endpoints extracted
|
|
break;
|
|
}
|
|
|
|
if(bNumEP < BTD_MAX_ENDPOINTS)
|
|
goto FailUnknownDevice;
|
|
|
|
// Assign epInfo to epinfo pointer - this time all 3 endpoins
|
|
rcode = pUsb->setEpInfoEntry(bAddress, bNumEP, epInfo);
|
|
if(rcode)
|
|
goto FailSetDevTblEntry;
|
|
|
|
// Set Configuration Value
|
|
rcode = pUsb->setConf(bAddress, epInfo[ BTD_CONTROL_PIPE ].epAddr, bConfNum);
|
|
if(rcode)
|
|
goto FailSetConfDescr;
|
|
|
|
hci_num_reset_loops = 100; // only loop 100 times before trying to send the hci reset command
|
|
hci_counter = 0;
|
|
hci_state = HCI_INIT_STATE;
|
|
watingForConnection = false;
|
|
bPollEnable = true;
|
|
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nBluetooth Dongle Initialized"), 0x80);
|
|
#endif
|
|
}
|
|
return 0; // Successful configuration
|
|
|
|
/* Diagnostic messages */
|
|
FailSetDevTblEntry:
|
|
#ifdef DEBUG_USB_HOST
|
|
NotifyFailSetDevTblEntry();
|
|
goto Fail;
|
|
#endif
|
|
|
|
FailGetConfDescr:
|
|
#ifdef DEBUG_USB_HOST
|
|
NotifyFailGetConfDescr();
|
|
goto Fail;
|
|
#endif
|
|
|
|
FailSetConfDescr:
|
|
#ifdef DEBUG_USB_HOST
|
|
NotifyFailSetConfDescr();
|
|
#endif
|
|
goto Fail;
|
|
|
|
FailUnknownDevice:
|
|
#ifdef DEBUG_USB_HOST
|
|
NotifyFailUnknownDevice(VID, PID);
|
|
#endif
|
|
pUsb->setAddr(bAddress, 0, 0); // Reset address
|
|
rcode = USB_DEV_CONFIG_ERROR_DEVICE_NOT_SUPPORTED;
|
|
Fail:
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nBTD Init Failed, error code: "), 0x80);
|
|
NotifyFail(rcode);
|
|
#endif
|
|
Release();
|
|
return rcode;
|
|
}
|
|
|
|
void BTD::Initialize() {
|
|
uint8_t i;
|
|
for(i = 0; i < BTD_MAX_ENDPOINTS; i++) {
|
|
epInfo[i].epAddr = 0;
|
|
epInfo[i].maxPktSize = (i) ? 0 : 8;
|
|
epInfo[i].epAttribs = 0;
|
|
epInfo[i].bmNakPower = (i) ? USB_NAK_NOWAIT : USB_NAK_MAX_POWER;
|
|
}
|
|
for(i = 0; i < BTD_NUM_SERVICES; i++) {
|
|
if(btService[i])
|
|
btService[i]->Reset(); // Reset all Bluetooth services
|
|
}
|
|
|
|
connectToWii = false;
|
|
incomingWii = false;
|
|
connectToHIDDevice = false;
|
|
incomingHIDDevice = false;
|
|
incomingPS4 = false;
|
|
bAddress = 0; // Clear device address
|
|
bNumEP = 1; // Must have to be reset to 1
|
|
qNextPollTime = 0; // Reset next poll time
|
|
pollInterval = 0;
|
|
bPollEnable = false; // Don't start polling before dongle is connected
|
|
}
|
|
|
|
/* Extracts interrupt-IN, bulk-IN, bulk-OUT endpoint information from config descriptor */
|
|
void BTD::EndpointXtract(uint8_t conf, uint8_t iface, uint8_t alt, uint8_t proto, const USB_ENDPOINT_DESCRIPTOR *pep) {
|
|
//ErrorMessage<uint8_t>(PSTR("Conf.Val"),conf);
|
|
//ErrorMessage<uint8_t>(PSTR("Iface Num"),iface);
|
|
//ErrorMessage<uint8_t>(PSTR("Alt.Set"),alt);
|
|
|
|
if(alt) // Wrong interface - by BT spec, no alt setting
|
|
return;
|
|
|
|
bConfNum = conf;
|
|
uint8_t index;
|
|
|
|
if((pep->bmAttributes & 0x03) == 3 && (pep->bEndpointAddress & 0x80) == 0x80) { // Interrupt In endpoint found
|
|
index = BTD_EVENT_PIPE;
|
|
epInfo[index].bmNakPower = USB_NAK_NOWAIT;
|
|
} else {
|
|
if((pep->bmAttributes & 0x02) == 2) // Bulk endpoint found
|
|
index = ((pep->bEndpointAddress & 0x80) == 0x80) ? BTD_DATAIN_PIPE : BTD_DATAOUT_PIPE;
|
|
else
|
|
return;
|
|
}
|
|
|
|
// Fill the rest of endpoint data structure
|
|
epInfo[index].epAddr = (pep->bEndpointAddress & 0x0F);
|
|
epInfo[index].maxPktSize = (uint8_t)pep->wMaxPacketSize;
|
|
#ifdef EXTRADEBUG
|
|
PrintEndpointDescriptor(pep);
|
|
#endif
|
|
if(pollInterval < pep->bInterval) // Set the polling interval as the largest polling interval obtained from endpoints
|
|
pollInterval = pep->bInterval;
|
|
bNumEP++;
|
|
}
|
|
|
|
void BTD::PrintEndpointDescriptor(const USB_ENDPOINT_DESCRIPTOR* ep_ptr) {
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nEndpoint descriptor:"), 0x80);
|
|
Notify(PSTR("\r\nLength:\t\t"), 0x80);
|
|
D_PrintHex<uint8_t > (ep_ptr->bLength, 0x80);
|
|
Notify(PSTR("\r\nType:\t\t"), 0x80);
|
|
D_PrintHex<uint8_t > (ep_ptr->bDescriptorType, 0x80);
|
|
Notify(PSTR("\r\nAddress:\t"), 0x80);
|
|
D_PrintHex<uint8_t > (ep_ptr->bEndpointAddress, 0x80);
|
|
Notify(PSTR("\r\nAttributes:\t"), 0x80);
|
|
D_PrintHex<uint8_t > (ep_ptr->bmAttributes, 0x80);
|
|
Notify(PSTR("\r\nMaxPktSize:\t"), 0x80);
|
|
D_PrintHex<uint16_t > (ep_ptr->wMaxPacketSize, 0x80);
|
|
Notify(PSTR("\r\nPoll Intrv:\t"), 0x80);
|
|
D_PrintHex<uint8_t > (ep_ptr->bInterval, 0x80);
|
|
#endif
|
|
}
|
|
|
|
/* Performs a cleanup after failed Init() attempt */
|
|
uint8_t BTD::Release() {
|
|
Initialize(); // Set all variables, endpoint structs etc. to default values
|
|
pUsb->GetAddressPool().FreeAddress(bAddress);
|
|
return 0;
|
|
}
|
|
|
|
uint8_t BTD::Poll() {
|
|
if(!bPollEnable)
|
|
return 0;
|
|
if((long)(millis() - qNextPollTime) >= 0L) { // Don't poll if shorter than polling interval
|
|
qNextPollTime = millis() + pollInterval; // Set new poll time
|
|
HCI_event_task(); // Poll the HCI event pipe
|
|
HCI_task(); // HCI state machine
|
|
ACL_event_task(); // Poll the ACL input pipe too
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
void BTD::disconnect() {
|
|
for(uint8_t i = 0; i < BTD_NUM_SERVICES; i++)
|
|
if(btService[i])
|
|
btService[i]->disconnect();
|
|
};
|
|
|
|
void BTD::HCI_event_task() {
|
|
uint16_t length = BULK_MAXPKTSIZE; // Request more than 16 bytes anyway, the inTransfer routine will take care of this
|
|
uint8_t rcode = pUsb->inTransfer(bAddress, epInfo[ BTD_EVENT_PIPE ].epAddr, &length, hcibuf); // Input on endpoint 1
|
|
|
|
if(!rcode || rcode == hrNAK) { // Check for errors
|
|
switch(hcibuf[0]) { // Switch on event type
|
|
case EV_COMMAND_COMPLETE:
|
|
if(!hcibuf[5]) { // Check if command succeeded
|
|
hci_set_flag(HCI_FLAG_CMD_COMPLETE); // Set command complete flag
|
|
if((hcibuf[3] == 0x01) && (hcibuf[4] == 0x10)) { // Parameters from read local version information
|
|
hci_version = hcibuf[6]; // Used to check if it supports 2.0+EDR - see http://www.bluetooth.org/Technical/AssignedNumbers/hci.htm
|
|
hci_set_flag(HCI_FLAG_READ_VERSION);
|
|
} else if((hcibuf[3] == 0x09) && (hcibuf[4] == 0x10)) { // Parameters from read local bluetooth address
|
|
for(uint8_t i = 0; i < 6; i++)
|
|
my_bdaddr[i] = hcibuf[6 + i];
|
|
hci_set_flag(HCI_FLAG_READ_BDADDR);
|
|
}
|
|
}
|
|
break;
|
|
|
|
case EV_COMMAND_STATUS:
|
|
if(hcibuf[2]) { // Show status on serial if not OK
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nHCI Command Failed: "), 0x80);
|
|
D_PrintHex<uint8_t > (hcibuf[2], 0x80);
|
|
#endif
|
|
}
|
|
break;
|
|
|
|
case EV_INQUIRY_COMPLETE:
|
|
if(inquiry_counter >= 5 && (pairWithWii || pairWithHIDDevice)) {
|
|
inquiry_counter = 0;
|
|
#ifdef DEBUG_USB_HOST
|
|
if(pairWithWii)
|
|
Notify(PSTR("\r\nCouldn't find Wiimote"), 0x80);
|
|
else
|
|
Notify(PSTR("\r\nCouldn't find HID device"), 0x80);
|
|
#endif
|
|
connectToWii = false;
|
|
pairWithWii = false;
|
|
connectToHIDDevice = false;
|
|
pairWithHIDDevice = false;
|
|
hci_state = HCI_SCANNING_STATE;
|
|
}
|
|
inquiry_counter++;
|
|
break;
|
|
|
|
case EV_INQUIRY_RESULT:
|
|
if(hcibuf[2]) { // Check that there is more than zero responses
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nNumber of responses: "), 0x80);
|
|
Notify(hcibuf[2], 0x80);
|
|
#endif
|
|
for(uint8_t i = 0; i < hcibuf[2]; i++) {
|
|
uint8_t offset = 8 * hcibuf[2] + 3 * i;
|
|
|
|
for(uint8_t j = 0; j < 3; j++)
|
|
classOfDevice[j] = hcibuf[j + 4 + offset];
|
|
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nClass of device: "), 0x80);
|
|
D_PrintHex<uint8_t > (classOfDevice[2], 0x80);
|
|
Notify(PSTR(" "), 0x80);
|
|
D_PrintHex<uint8_t > (classOfDevice[1], 0x80);
|
|
Notify(PSTR(" "), 0x80);
|
|
D_PrintHex<uint8_t > (classOfDevice[0], 0x80);
|
|
#endif
|
|
|
|
if(pairWithWii && classOfDevice[2] == 0x00 && (classOfDevice[1] & 0x05) && (classOfDevice[0] & 0x0C)) { // See http://wiibrew.org/wiki/Wiimote#SDP_information
|
|
checkRemoteName = true; // Check remote name to distinguish between the different controllers
|
|
|
|
for(uint8_t j = 0; j < 6; j++)
|
|
disc_bdaddr[j] = hcibuf[j + 3 + 6 * i];
|
|
|
|
hci_set_flag(HCI_FLAG_DEVICE_FOUND);
|
|
break;
|
|
} else if(pairWithHIDDevice && (classOfDevice[1] & 0x05) && (classOfDevice[0] & 0xC8)) { // Check if it is a mouse, keyboard or a gamepad - see: http://bluetooth-pentest.narod.ru/software/bluetooth_class_of_device-service_generator.html
|
|
#ifdef DEBUG_USB_HOST
|
|
if(classOfDevice[0] & 0x80)
|
|
Notify(PSTR("\r\nMouse found"), 0x80);
|
|
if(classOfDevice[0] & 0x40)
|
|
Notify(PSTR("\r\nKeyboard found"), 0x80);
|
|
if(classOfDevice[0] & 0x08)
|
|
Notify(PSTR("\r\nGamepad found"), 0x80);
|
|
#endif
|
|
|
|
for(uint8_t j = 0; j < 6; j++)
|
|
disc_bdaddr[j] = hcibuf[j + 3 + 6 * i];
|
|
|
|
hci_set_flag(HCI_FLAG_DEVICE_FOUND);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
break;
|
|
|
|
case EV_CONNECT_COMPLETE:
|
|
hci_set_flag(HCI_FLAG_CONNECT_EVENT);
|
|
if(!hcibuf[2]) { // Check if connected OK
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nConnection established"), 0x80);
|
|
#endif
|
|
hci_handle = hcibuf[3] | ((hcibuf[4] & 0x0F) << 8); // Store the handle for the ACL connection
|
|
hci_set_flag(HCI_FLAG_CONNECT_COMPLETE); // Set connection complete flag
|
|
} else {
|
|
hci_state = HCI_CHECK_DEVICE_SERVICE;
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nConnection Failed: "), 0x80);
|
|
D_PrintHex<uint8_t > (hcibuf[2], 0x80);
|
|
#endif
|
|
}
|
|
break;
|
|
|
|
case EV_DISCONNECT_COMPLETE:
|
|
if(!hcibuf[2]) { // Check if disconnected OK
|
|
hci_set_flag(HCI_FLAG_DISCONNECT_COMPLETE); // Set disconnect command complete flag
|
|
hci_clear_flag(HCI_FLAG_CONNECT_COMPLETE); // Clear connection complete flag
|
|
}
|
|
break;
|
|
|
|
case EV_REMOTE_NAME_COMPLETE:
|
|
if(!hcibuf[2]) { // Check if reading is OK
|
|
for(uint8_t i = 0; i < min(sizeof (remote_name), sizeof (hcibuf) - 9); i++) {
|
|
remote_name[i] = hcibuf[9 + i];
|
|
if(remote_name[i] == '\0') // End of string
|
|
break;
|
|
}
|
|
// TODO: Altid sæt '\0' i remote name!
|
|
hci_set_flag(HCI_FLAG_REMOTE_NAME_COMPLETE);
|
|
}
|
|
break;
|
|
|
|
case EV_INCOMING_CONNECT:
|
|
for(uint8_t i = 0; i < 6; i++)
|
|
disc_bdaddr[i] = hcibuf[i + 2];
|
|
|
|
for(uint8_t i = 0; i < 3; i++)
|
|
classOfDevice[i] = hcibuf[i + 8];
|
|
|
|
if((classOfDevice[1] & 0x05) && (classOfDevice[0] & 0xC8)) { // Check if it is a mouse, keyboard or a gamepad
|
|
#ifdef DEBUG_USB_HOST
|
|
if(classOfDevice[0] & 0x80)
|
|
Notify(PSTR("\r\nMouse is connecting"), 0x80);
|
|
if(classOfDevice[0] & 0x40)
|
|
Notify(PSTR("\r\nKeyboard is connecting"), 0x80);
|
|
if(classOfDevice[0] & 0x08)
|
|
Notify(PSTR("\r\nGamepad is connecting"), 0x80);
|
|
#endif
|
|
incomingHIDDevice = true;
|
|
}
|
|
|
|
#ifdef EXTRADEBUG
|
|
Notify(PSTR("\r\nClass of device: "), 0x80);
|
|
D_PrintHex<uint8_t > (classOfDevice[2], 0x80);
|
|
Notify(PSTR(" "), 0x80);
|
|
D_PrintHex<uint8_t > (classOfDevice[1], 0x80);
|
|
Notify(PSTR(" "), 0x80);
|
|
D_PrintHex<uint8_t > (classOfDevice[0], 0x80);
|
|
#endif
|
|
hci_set_flag(HCI_FLAG_INCOMING_REQUEST);
|
|
break;
|
|
|
|
case EV_PIN_CODE_REQUEST:
|
|
if(pairWithWii) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nPairing with Wiimote"), 0x80);
|
|
#endif
|
|
hci_pin_code_request_reply();
|
|
} else if(btdPin != NULL) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nBluetooth pin is set too: "), 0x80);
|
|
NotifyStr(btdPin, 0x80);
|
|
#endif
|
|
hci_pin_code_request_reply();
|
|
} else {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nNo pin was set"), 0x80);
|
|
#endif
|
|
hci_pin_code_negative_request_reply();
|
|
}
|
|
break;
|
|
|
|
case EV_LINK_KEY_REQUEST:
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nReceived Key Request"), 0x80);
|
|
#endif
|
|
hci_link_key_request_negative_reply();
|
|
break;
|
|
|
|
case EV_AUTHENTICATION_COMPLETE:
|
|
if(pairWithWii && !connectToWii) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nPairing successful with Wiimote"), 0x80);
|
|
#endif
|
|
connectToWii = true; // Used to indicate to the Wii service, that it should connect to this device
|
|
} else if(pairWithHIDDevice && !connectToHIDDevice) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nPairing successful with HID device"), 0x80);
|
|
#endif
|
|
connectToHIDDevice = true; // Used to indicate to the BTHID service, that it should connect to this device
|
|
}
|
|
break;
|
|
/* We will just ignore the following events */
|
|
case EV_NUM_COMPLETE_PKT:
|
|
case EV_ROLE_CHANGED:
|
|
case EV_PAGE_SCAN_REP_MODE:
|
|
case EV_LOOPBACK_COMMAND:
|
|
case EV_DATA_BUFFER_OVERFLOW:
|
|
case EV_CHANGE_CONNECTION_LINK:
|
|
case EV_MAX_SLOTS_CHANGE:
|
|
case EV_QOS_SETUP_COMPLETE:
|
|
case EV_LINK_KEY_NOTIFICATION:
|
|
case EV_ENCRYPTION_CHANGE:
|
|
case EV_READ_REMOTE_VERSION_INFORMATION_COMPLETE:
|
|
break;
|
|
#ifdef EXTRADEBUG
|
|
default:
|
|
if(hcibuf[0] != 0x00) {
|
|
Notify(PSTR("\r\nUnmanaged HCI Event: "), 0x80);
|
|
D_PrintHex<uint8_t > (hcibuf[0], 0x80);
|
|
}
|
|
break;
|
|
#endif
|
|
} // Switch
|
|
}
|
|
#ifdef EXTRADEBUG
|
|
else {
|
|
Notify(PSTR("\r\nHCI event error: "), 0x80);
|
|
D_PrintHex<uint8_t > (rcode, 0x80);
|
|
}
|
|
#endif
|
|
}
|
|
|
|
/* Poll Bluetooth and print result */
|
|
void BTD::HCI_task() {
|
|
switch(hci_state) {
|
|
case HCI_INIT_STATE:
|
|
hci_counter++;
|
|
if(hci_counter > hci_num_reset_loops) { // wait until we have looped x times to clear any old events
|
|
hci_reset();
|
|
hci_state = HCI_RESET_STATE;
|
|
hci_counter = 0;
|
|
}
|
|
break;
|
|
|
|
case HCI_RESET_STATE:
|
|
hci_counter++;
|
|
if(hci_check_flag(HCI_FLAG_CMD_COMPLETE)) {
|
|
hci_counter = 0;
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nHCI Reset complete"), 0x80);
|
|
#endif
|
|
hci_state = HCI_CLASS_STATE;
|
|
hci_write_class_of_device();
|
|
} else if(hci_counter > hci_num_reset_loops) {
|
|
hci_num_reset_loops *= 10;
|
|
if(hci_num_reset_loops > 2000)
|
|
hci_num_reset_loops = 2000;
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nNo response to HCI Reset"), 0x80);
|
|
#endif
|
|
hci_state = HCI_INIT_STATE;
|
|
hci_counter = 0;
|
|
}
|
|
break;
|
|
|
|
case HCI_CLASS_STATE:
|
|
if(hci_check_flag(HCI_FLAG_CMD_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nWrite class of device"), 0x80);
|
|
#endif
|
|
hci_state = HCI_BDADDR_STATE;
|
|
hci_read_bdaddr();
|
|
}
|
|
break;
|
|
|
|
case HCI_BDADDR_STATE:
|
|
if(hci_check_flag(HCI_FLAG_READ_BDADDR)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nLocal Bluetooth Address: "), 0x80);
|
|
for(int8_t i = 5; i > 0; i--) {
|
|
D_PrintHex<uint8_t > (my_bdaddr[i], 0x80);
|
|
Notify(PSTR(":"), 0x80);
|
|
}
|
|
D_PrintHex<uint8_t > (my_bdaddr[0], 0x80);
|
|
#endif
|
|
hci_read_local_version_information();
|
|
hci_state = HCI_LOCAL_VERSION_STATE;
|
|
}
|
|
break;
|
|
|
|
case HCI_LOCAL_VERSION_STATE: // The local version is used by the PS3BT class
|
|
if(hci_check_flag(HCI_FLAG_READ_VERSION)) {
|
|
if(btdName != NULL) {
|
|
hci_set_local_name(btdName);
|
|
hci_state = HCI_SET_NAME_STATE;
|
|
} else
|
|
hci_state = HCI_CHECK_DEVICE_SERVICE;
|
|
}
|
|
break;
|
|
|
|
case HCI_SET_NAME_STATE:
|
|
if(hci_check_flag(HCI_FLAG_CMD_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nThe name is set to: "), 0x80);
|
|
NotifyStr(btdName, 0x80);
|
|
#endif
|
|
hci_state = HCI_CHECK_DEVICE_SERVICE;
|
|
}
|
|
break;
|
|
|
|
case HCI_CHECK_DEVICE_SERVICE:
|
|
if(pairWithHIDDevice || pairWithWii) { // Check if it should try to connect to a Wiimote
|
|
#ifdef DEBUG_USB_HOST
|
|
if(pairWithWii)
|
|
Notify(PSTR("\r\nStarting inquiry\r\nPress 1 & 2 on the Wiimote\r\nOr press the SYNC button if you are using a Wii U Pro Controller or a Wii Balance Board"), 0x80);
|
|
else
|
|
Notify(PSTR("\r\nPlease enable discovery of your device"), 0x80);
|
|
#endif
|
|
hci_inquiry();
|
|
hci_state = HCI_INQUIRY_STATE;
|
|
} else
|
|
hci_state = HCI_SCANNING_STATE; // Don't try to connect to a Wiimote
|
|
break;
|
|
|
|
case HCI_INQUIRY_STATE:
|
|
if(hci_check_flag(HCI_FLAG_DEVICE_FOUND)) {
|
|
hci_inquiry_cancel(); // Stop inquiry
|
|
#ifdef DEBUG_USB_HOST
|
|
if(pairWithWii)
|
|
Notify(PSTR("\r\nWiimote found"), 0x80);
|
|
else
|
|
Notify(PSTR("\r\nHID device found"), 0x80);
|
|
|
|
Notify(PSTR("\r\nNow just create the instance like so:"), 0x80);
|
|
if(pairWithWii)
|
|
Notify(PSTR("\r\nWII Wii(&Btd);"), 0x80);
|
|
else
|
|
Notify(PSTR("\r\nBTHID bthid(&Btd);"), 0x80);
|
|
|
|
Notify(PSTR("\r\nAnd then press any button on the "), 0x80);
|
|
if(pairWithWii)
|
|
Notify(PSTR("Wiimote"), 0x80);
|
|
else
|
|
Notify(PSTR("device"), 0x80);
|
|
#endif
|
|
if(checkRemoteName) {
|
|
hci_remote_name(); // We need to know the name to distinguish between the Wiimote, the new Wiimote with Motion Plus inside, a Wii U Pro Controller and a Wii Balance Board
|
|
hci_state = HCI_REMOTE_NAME_STATE;
|
|
} else
|
|
hci_state = HCI_CONNECT_DEVICE_STATE;
|
|
}
|
|
break;
|
|
|
|
case HCI_CONNECT_DEVICE_STATE:
|
|
if(hci_check_flag(HCI_FLAG_CMD_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
if(pairWithWii)
|
|
Notify(PSTR("\r\nConnecting to Wiimote"), 0x80);
|
|
else
|
|
Notify(PSTR("\r\nConnecting to HID device"), 0x80);
|
|
#endif
|
|
checkRemoteName = false;
|
|
hci_connect();
|
|
hci_state = HCI_CONNECTED_DEVICE_STATE;
|
|
}
|
|
break;
|
|
|
|
case HCI_CONNECTED_DEVICE_STATE:
|
|
if(hci_check_flag(HCI_FLAG_CONNECT_EVENT)) {
|
|
if(hci_check_flag(HCI_FLAG_CONNECT_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
if(pairWithWii)
|
|
Notify(PSTR("\r\nConnected to Wiimote"), 0x80);
|
|
else
|
|
Notify(PSTR("\r\nConnected to HID device"), 0x80);
|
|
#endif
|
|
hci_authentication_request(); // This will start the pairing with the Wiimote
|
|
hci_state = HCI_SCANNING_STATE;
|
|
} else {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nTrying to connect one more time..."), 0x80);
|
|
#endif
|
|
hci_connect(); // Try to connect one more time
|
|
}
|
|
}
|
|
break;
|
|
|
|
case HCI_SCANNING_STATE:
|
|
if(!connectToWii && !pairWithWii && !connectToHIDDevice && !pairWithHIDDevice) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nWait For Incoming Connection Request"), 0x80);
|
|
#endif
|
|
hci_write_scan_enable();
|
|
watingForConnection = true;
|
|
hci_state = HCI_CONNECT_IN_STATE;
|
|
}
|
|
break;
|
|
|
|
case HCI_CONNECT_IN_STATE:
|
|
if(hci_check_flag(HCI_FLAG_INCOMING_REQUEST)) {
|
|
watingForConnection = false;
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nIncoming Connection Request"), 0x80);
|
|
#endif
|
|
hci_remote_name();
|
|
hci_state = HCI_REMOTE_NAME_STATE;
|
|
} else if(hci_check_flag(HCI_FLAG_DISCONNECT_COMPLETE))
|
|
hci_state = HCI_DISCONNECT_STATE;
|
|
break;
|
|
|
|
case HCI_REMOTE_NAME_STATE:
|
|
if(hci_check_flag(HCI_FLAG_REMOTE_NAME_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nRemote Name: "), 0x80);
|
|
for(uint8_t i = 0; i < strlen(remote_name); i++)
|
|
Notifyc(remote_name[i], 0x80);
|
|
#endif
|
|
if(strncmp((const char*)remote_name, "Nintendo", 8) == 0) {
|
|
incomingWii = true;
|
|
motionPlusInside = false;
|
|
wiiUProController = false;
|
|
pairWiiUsingSync = false;
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nWiimote is connecting"), 0x80);
|
|
#endif
|
|
if(strncmp((const char*)remote_name, "Nintendo RVL-CNT-01-TR", 22) == 0) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR(" with Motion Plus Inside"), 0x80);
|
|
#endif
|
|
motionPlusInside = true;
|
|
} else if(strncmp((const char*)remote_name, "Nintendo RVL-CNT-01-UC", 22) == 0) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR(" - Wii U Pro Controller"), 0x80);
|
|
#endif
|
|
wiiUProController = motionPlusInside = pairWiiUsingSync = true;
|
|
} else if(strncmp((const char*)remote_name, "Nintendo RVL-WBC-01", 19) == 0) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR(" - Wii Balance Board"), 0x80);
|
|
#endif
|
|
pairWiiUsingSync = true;
|
|
}
|
|
}
|
|
if(classOfDevice[2] == 0 && classOfDevice[1] == 0x25 && classOfDevice[0] == 0x08 && strncmp((const char*)remote_name, "Wireless Controller", 19) == 0) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nPS4 controller is connecting"), 0x80);
|
|
#endif
|
|
incomingPS4 = true;
|
|
}
|
|
if(pairWithWii && checkRemoteName)
|
|
hci_state = HCI_CONNECT_DEVICE_STATE;
|
|
else {
|
|
hci_accept_connection();
|
|
hci_state = HCI_CONNECTED_STATE;
|
|
}
|
|
}
|
|
break;
|
|
|
|
case HCI_CONNECTED_STATE:
|
|
if(hci_check_flag(HCI_FLAG_CONNECT_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nConnected to Device: "), 0x80);
|
|
for(int8_t i = 5; i > 0; i--) {
|
|
D_PrintHex<uint8_t > (disc_bdaddr[i], 0x80);
|
|
Notify(PSTR(":"), 0x80);
|
|
}
|
|
D_PrintHex<uint8_t > (disc_bdaddr[0], 0x80);
|
|
#endif
|
|
if(incomingPS4)
|
|
connectToHIDDevice = true; // We should always connect to the PS4 controller
|
|
|
|
// Clear these flags for a new connection
|
|
l2capConnectionClaimed = false;
|
|
sdpConnectionClaimed = false;
|
|
rfcommConnectionClaimed = false;
|
|
|
|
hci_event_flag = 0;
|
|
hci_state = HCI_DONE_STATE;
|
|
}
|
|
break;
|
|
|
|
case HCI_DONE_STATE:
|
|
hci_counter++;
|
|
if(hci_counter > 1000) { // Wait until we have looped 1000 times to make sure that the L2CAP connection has been started
|
|
hci_counter = 0;
|
|
hci_state = HCI_SCANNING_STATE;
|
|
}
|
|
break;
|
|
|
|
case HCI_DISCONNECT_STATE:
|
|
if(hci_check_flag(HCI_FLAG_DISCONNECT_COMPLETE)) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nHCI Disconnected from Device"), 0x80);
|
|
#endif
|
|
hci_event_flag = 0; // Clear all flags
|
|
|
|
// Reset all buffers
|
|
memset(hcibuf, 0, BULK_MAXPKTSIZE);
|
|
memset(l2capinbuf, 0, BULK_MAXPKTSIZE);
|
|
|
|
connectToWii = incomingWii = pairWithWii = false;
|
|
connectToHIDDevice = incomingHIDDevice = pairWithHIDDevice = checkRemoteName = false;
|
|
incomingPS4 = false;
|
|
|
|
hci_state = HCI_SCANNING_STATE;
|
|
}
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
|
|
void BTD::ACL_event_task() {
|
|
uint16_t length = BULK_MAXPKTSIZE;
|
|
uint8_t rcode = pUsb->inTransfer(bAddress, epInfo[ BTD_DATAIN_PIPE ].epAddr, &length, l2capinbuf); // Input on endpoint 2
|
|
|
|
if(!rcode) { // Check for errors
|
|
if(length > 0) { // Check if any data was read
|
|
for(uint8_t i = 0; i < BTD_NUM_SERVICES; i++) {
|
|
if(btService[i])
|
|
btService[i]->ACLData(l2capinbuf);
|
|
}
|
|
}
|
|
}
|
|
#ifdef EXTRADEBUG
|
|
else if(rcode != hrNAK) {
|
|
Notify(PSTR("\r\nACL data in error: "), 0x80);
|
|
D_PrintHex<uint8_t > (rcode, 0x80);
|
|
}
|
|
#endif
|
|
for(uint8_t i = 0; i < BTD_NUM_SERVICES; i++)
|
|
if(btService[i])
|
|
btService[i]->Run();
|
|
}
|
|
|
|
/************************************************************/
|
|
/* HCI Commands */
|
|
|
|
/************************************************************/
|
|
void BTD::HCI_Command(uint8_t* data, uint16_t nbytes) {
|
|
hci_clear_flag(HCI_FLAG_CMD_COMPLETE);
|
|
pUsb->ctrlReq(bAddress, epInfo[ BTD_CONTROL_PIPE ].epAddr, bmREQ_HCI_OUT, 0x00, 0x00, 0x00, 0x00, nbytes, nbytes, data, NULL);
|
|
}
|
|
|
|
void BTD::hci_reset() {
|
|
hci_event_flag = 0; // Clear all the flags
|
|
hcibuf[0] = 0x03; // HCI OCF = 3
|
|
hcibuf[1] = 0x03 << 2; // HCI OGF = 3
|
|
hcibuf[2] = 0x00;
|
|
|
|
HCI_Command(hcibuf, 3);
|
|
}
|
|
|
|
void BTD::hci_write_scan_enable() {
|
|
hci_clear_flag(HCI_FLAG_INCOMING_REQUEST);
|
|
hcibuf[0] = 0x1A; // HCI OCF = 1A
|
|
hcibuf[1] = 0x03 << 2; // HCI OGF = 3
|
|
hcibuf[2] = 0x01; // parameter length = 1
|
|
if(btdName != NULL)
|
|
hcibuf[3] = 0x03; // Inquiry Scan enabled. Page Scan enabled.
|
|
else
|
|
hcibuf[3] = 0x02; // Inquiry Scan disabled. Page Scan enabled.
|
|
|
|
HCI_Command(hcibuf, 4);
|
|
}
|
|
|
|
void BTD::hci_write_scan_disable() {
|
|
hcibuf[0] = 0x1A; // HCI OCF = 1A
|
|
hcibuf[1] = 0x03 << 2; // HCI OGF = 3
|
|
hcibuf[2] = 0x01; // parameter length = 1
|
|
hcibuf[3] = 0x00; // Inquiry Scan disabled. Page Scan disabled.
|
|
|
|
HCI_Command(hcibuf, 4);
|
|
}
|
|
|
|
void BTD::hci_read_bdaddr() {
|
|
hci_clear_flag(HCI_FLAG_READ_BDADDR);
|
|
hcibuf[0] = 0x09; // HCI OCF = 9
|
|
hcibuf[1] = 0x04 << 2; // HCI OGF = 4
|
|
hcibuf[2] = 0x00;
|
|
|
|
HCI_Command(hcibuf, 3);
|
|
}
|
|
|
|
void BTD::hci_read_local_version_information() {
|
|
hci_clear_flag(HCI_FLAG_READ_VERSION);
|
|
hcibuf[0] = 0x01; // HCI OCF = 1
|
|
hcibuf[1] = 0x04 << 2; // HCI OGF = 4
|
|
hcibuf[2] = 0x00;
|
|
|
|
HCI_Command(hcibuf, 3);
|
|
}
|
|
|
|
void BTD::hci_accept_connection() {
|
|
hci_clear_flag(HCI_FLAG_CONNECT_COMPLETE);
|
|
hcibuf[0] = 0x09; // HCI OCF = 9
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x07; // parameter length 7
|
|
hcibuf[3] = disc_bdaddr[0]; // 6 octet bdaddr
|
|
hcibuf[4] = disc_bdaddr[1];
|
|
hcibuf[5] = disc_bdaddr[2];
|
|
hcibuf[6] = disc_bdaddr[3];
|
|
hcibuf[7] = disc_bdaddr[4];
|
|
hcibuf[8] = disc_bdaddr[5];
|
|
hcibuf[9] = 0x00; // Switch role to master
|
|
|
|
HCI_Command(hcibuf, 10);
|
|
}
|
|
|
|
void BTD::hci_remote_name() {
|
|
hci_clear_flag(HCI_FLAG_REMOTE_NAME_COMPLETE);
|
|
hcibuf[0] = 0x19; // HCI OCF = 19
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x0A; // parameter length = 10
|
|
hcibuf[3] = disc_bdaddr[0]; // 6 octet bdaddr
|
|
hcibuf[4] = disc_bdaddr[1];
|
|
hcibuf[5] = disc_bdaddr[2];
|
|
hcibuf[6] = disc_bdaddr[3];
|
|
hcibuf[7] = disc_bdaddr[4];
|
|
hcibuf[8] = disc_bdaddr[5];
|
|
hcibuf[9] = 0x01; // Page Scan Repetition Mode
|
|
hcibuf[10] = 0x00; // Reserved
|
|
hcibuf[11] = 0x00; // Clock offset - low byte
|
|
hcibuf[12] = 0x00; // Clock offset - high byte
|
|
|
|
HCI_Command(hcibuf, 13);
|
|
}
|
|
|
|
void BTD::hci_set_local_name(const char* name) {
|
|
hcibuf[0] = 0x13; // HCI OCF = 13
|
|
hcibuf[1] = 0x03 << 2; // HCI OGF = 3
|
|
hcibuf[2] = strlen(name) + 1; // parameter length = the length of the string + end byte
|
|
uint8_t i;
|
|
for(i = 0; i < strlen(name); i++)
|
|
hcibuf[i + 3] = name[i];
|
|
hcibuf[i + 3] = 0x00; // End of string
|
|
|
|
HCI_Command(hcibuf, 4 + strlen(name));
|
|
}
|
|
|
|
void BTD::hci_inquiry() {
|
|
hci_clear_flag(HCI_FLAG_DEVICE_FOUND);
|
|
hcibuf[0] = 0x01;
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x05; // Parameter Total Length = 5
|
|
hcibuf[3] = 0x33; // LAP: Genera/Unlimited Inquiry Access Code (GIAC = 0x9E8B33) - see https://www.bluetooth.org/Technical/AssignedNumbers/baseband.htm
|
|
hcibuf[4] = 0x8B;
|
|
hcibuf[5] = 0x9E;
|
|
hcibuf[6] = 0x30; // Inquiry time = 61.44 sec (maximum)
|
|
hcibuf[7] = 0x0A; // 10 number of responses
|
|
|
|
HCI_Command(hcibuf, 8);
|
|
}
|
|
|
|
void BTD::hci_inquiry_cancel() {
|
|
hcibuf[0] = 0x02;
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x00; // Parameter Total Length = 0
|
|
|
|
HCI_Command(hcibuf, 3);
|
|
}
|
|
|
|
void BTD::hci_connect() {
|
|
hci_connect(disc_bdaddr); // Use last discovered device
|
|
}
|
|
|
|
void BTD::hci_connect(uint8_t *bdaddr) {
|
|
hci_clear_flag(HCI_FLAG_CONNECT_COMPLETE | HCI_FLAG_CONNECT_EVENT);
|
|
hcibuf[0] = 0x05;
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x0D; // parameter Total Length = 13
|
|
hcibuf[3] = bdaddr[0]; // 6 octet bdaddr (LSB)
|
|
hcibuf[4] = bdaddr[1];
|
|
hcibuf[5] = bdaddr[2];
|
|
hcibuf[6] = bdaddr[3];
|
|
hcibuf[7] = bdaddr[4];
|
|
hcibuf[8] = bdaddr[5];
|
|
hcibuf[9] = 0x18; // DM1 or DH1 may be used
|
|
hcibuf[10] = 0xCC; // DM3, DH3, DM5, DH5 may be used
|
|
hcibuf[11] = 0x01; // Page repetition mode R1
|
|
hcibuf[12] = 0x00; // Reserved
|
|
hcibuf[13] = 0x00; // Clock offset
|
|
hcibuf[14] = 0x00; // Invalid clock offset
|
|
hcibuf[15] = 0x00; // Do not allow role switch
|
|
|
|
HCI_Command(hcibuf, 16);
|
|
}
|
|
|
|
void BTD::hci_pin_code_request_reply() {
|
|
hcibuf[0] = 0x0D; // HCI OCF = 0D
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x17; // parameter length 23
|
|
hcibuf[3] = disc_bdaddr[0]; // 6 octet bdaddr
|
|
hcibuf[4] = disc_bdaddr[1];
|
|
hcibuf[5] = disc_bdaddr[2];
|
|
hcibuf[6] = disc_bdaddr[3];
|
|
hcibuf[7] = disc_bdaddr[4];
|
|
hcibuf[8] = disc_bdaddr[5];
|
|
if(pairWithWii) {
|
|
hcibuf[9] = 6; // Pin length is the length of the Bluetooth address
|
|
if(pairWiiUsingSync) {
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nParing with Wii controller via SYNC"), 0x80);
|
|
#endif
|
|
for(uint8_t i = 0; i < 6; i++)
|
|
hcibuf[10 + i] = my_bdaddr[i]; // The pin is the Bluetooth dongles Bluetooth address backwards
|
|
} else {
|
|
for(uint8_t i = 0; i < 6; i++)
|
|
hcibuf[10 + i] = disc_bdaddr[i]; // The pin is the Wiimote's Bluetooth address backwards
|
|
}
|
|
for(uint8_t i = 16; i < 26; i++)
|
|
hcibuf[i] = 0x00; // The rest should be 0
|
|
} else {
|
|
hcibuf[9] = strlen(btdPin); // Length of pin
|
|
uint8_t i;
|
|
for(i = 0; i < strlen(btdPin); i++) // The maximum size of the pin is 16
|
|
hcibuf[i + 10] = btdPin[i];
|
|
for(; i < 16; i++)
|
|
hcibuf[i + 10] = 0x00; // The rest should be 0
|
|
}
|
|
|
|
HCI_Command(hcibuf, 26);
|
|
}
|
|
|
|
void BTD::hci_pin_code_negative_request_reply() {
|
|
hcibuf[0] = 0x0E; // HCI OCF = 0E
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x06; // parameter length 6
|
|
hcibuf[3] = disc_bdaddr[0]; // 6 octet bdaddr
|
|
hcibuf[4] = disc_bdaddr[1];
|
|
hcibuf[5] = disc_bdaddr[2];
|
|
hcibuf[6] = disc_bdaddr[3];
|
|
hcibuf[7] = disc_bdaddr[4];
|
|
hcibuf[8] = disc_bdaddr[5];
|
|
|
|
HCI_Command(hcibuf, 9);
|
|
}
|
|
|
|
void BTD::hci_link_key_request_negative_reply() {
|
|
hcibuf[0] = 0x0C; // HCI OCF = 0C
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x06; // parameter length 6
|
|
hcibuf[3] = disc_bdaddr[0]; // 6 octet bdaddr
|
|
hcibuf[4] = disc_bdaddr[1];
|
|
hcibuf[5] = disc_bdaddr[2];
|
|
hcibuf[6] = disc_bdaddr[3];
|
|
hcibuf[7] = disc_bdaddr[4];
|
|
hcibuf[8] = disc_bdaddr[5];
|
|
|
|
HCI_Command(hcibuf, 9);
|
|
}
|
|
|
|
void BTD::hci_authentication_request() {
|
|
hcibuf[0] = 0x11; // HCI OCF = 11
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x02; // parameter length = 2
|
|
hcibuf[3] = (uint8_t)(hci_handle & 0xFF); //connection handle - low byte
|
|
hcibuf[4] = (uint8_t)((hci_handle >> 8) & 0x0F); //connection handle - high byte
|
|
|
|
HCI_Command(hcibuf, 5);
|
|
}
|
|
|
|
void BTD::hci_disconnect(uint16_t handle) { // This is called by the different services
|
|
hci_clear_flag(HCI_FLAG_DISCONNECT_COMPLETE);
|
|
hcibuf[0] = 0x06; // HCI OCF = 6
|
|
hcibuf[1] = 0x01 << 2; // HCI OGF = 1
|
|
hcibuf[2] = 0x03; // parameter length = 3
|
|
hcibuf[3] = (uint8_t)(handle & 0xFF); //connection handle - low byte
|
|
hcibuf[4] = (uint8_t)((handle >> 8) & 0x0F); //connection handle - high byte
|
|
hcibuf[5] = 0x13; // reason
|
|
|
|
HCI_Command(hcibuf, 6);
|
|
}
|
|
|
|
void BTD::hci_write_class_of_device() { // See http://bluetooth-pentest.narod.ru/software/bluetooth_class_of_device-service_generator.html
|
|
hcibuf[0] = 0x24; // HCI OCF = 24
|
|
hcibuf[1] = 0x03 << 2; // HCI OGF = 3
|
|
hcibuf[2] = 0x03; // parameter length = 3
|
|
hcibuf[3] = 0x04; // Robot
|
|
hcibuf[4] = 0x08; // Toy
|
|
hcibuf[5] = 0x00;
|
|
|
|
HCI_Command(hcibuf, 6);
|
|
}
|
|
/*******************************************************************
|
|
* *
|
|
* HCI ACL Data Packet *
|
|
* *
|
|
* buf[0] buf[1] buf[2] buf[3]
|
|
* 0 4 8 11 12 16 24 31 MSB
|
|
* .-+-+-+-+-+-+-+-|-+-+-+-|-+-|-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-.
|
|
* | HCI Handle |PB |BC | Data Total Length | HCI ACL Data Packet
|
|
* .-+-+-+-+-+-+-+-|-+-+-+-|-+-|-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-.
|
|
*
|
|
* buf[4] buf[5] buf[6] buf[7]
|
|
* 0 8 16 31 MSB
|
|
* .-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-.
|
|
* | Length | Channel ID | Basic L2CAP header
|
|
* .-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-.
|
|
*
|
|
* buf[8] buf[9] buf[10] buf[11]
|
|
* 0 8 16 31 MSB
|
|
* .-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-.
|
|
* | Code | Identifier | Length | Control frame (C-frame)
|
|
* .-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-|-+-+-+-+-+-+-+-. (signaling packet format)
|
|
*/
|
|
/************************************************************/
|
|
/* L2CAP Commands */
|
|
|
|
/************************************************************/
|
|
void BTD::L2CAP_Command(uint16_t handle, uint8_t* data, uint8_t nbytes, uint8_t channelLow, uint8_t channelHigh) {
|
|
uint8_t buf[8 + nbytes];
|
|
buf[0] = (uint8_t)(handle & 0xff); // HCI handle with PB,BC flag
|
|
buf[1] = (uint8_t)(((handle >> 8) & 0x0f) | 0x20);
|
|
buf[2] = (uint8_t)((4 + nbytes) & 0xff); // HCI ACL total data length
|
|
buf[3] = (uint8_t)((4 + nbytes) >> 8);
|
|
buf[4] = (uint8_t)(nbytes & 0xff); // L2CAP header: Length
|
|
buf[5] = (uint8_t)(nbytes >> 8);
|
|
buf[6] = channelLow;
|
|
buf[7] = channelHigh;
|
|
|
|
for(uint16_t i = 0; i < nbytes; i++) // L2CAP C-frame
|
|
buf[8 + i] = data[i];
|
|
|
|
uint8_t rcode = pUsb->outTransfer(bAddress, epInfo[ BTD_DATAOUT_PIPE ].epAddr, (8 + nbytes), buf);
|
|
if(rcode) {
|
|
delay(100); // This small delay prevents it from overflowing if it fails
|
|
#ifdef DEBUG_USB_HOST
|
|
Notify(PSTR("\r\nError sending L2CAP message: 0x"), 0x80);
|
|
D_PrintHex<uint8_t > (rcode, 0x80);
|
|
Notify(PSTR(" - Channel ID: "), 0x80);
|
|
D_PrintHex<uint8_t > (channelHigh, 0x80);
|
|
Notify(PSTR(" "), 0x80);
|
|
D_PrintHex<uint8_t > (channelLow, 0x80);
|
|
#endif
|
|
}
|
|
}
|
|
|
|
void BTD::l2cap_connection_request(uint16_t handle, uint8_t rxid, uint8_t* scid, uint16_t psm) {
|
|
l2capoutbuf[0] = L2CAP_CMD_CONNECTION_REQUEST; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x04; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = (uint8_t)(psm & 0xff); // PSM
|
|
l2capoutbuf[5] = (uint8_t)(psm >> 8);
|
|
l2capoutbuf[6] = scid[0]; // Source CID
|
|
l2capoutbuf[7] = scid[1];
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 8);
|
|
}
|
|
|
|
void BTD::l2cap_connection_response(uint16_t handle, uint8_t rxid, uint8_t* dcid, uint8_t* scid, uint8_t result) {
|
|
l2capoutbuf[0] = L2CAP_CMD_CONNECTION_RESPONSE; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x08; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = dcid[0]; // Destination CID
|
|
l2capoutbuf[5] = dcid[1];
|
|
l2capoutbuf[6] = scid[0]; // Source CID
|
|
l2capoutbuf[7] = scid[1];
|
|
l2capoutbuf[8] = result; // Result: Pending or Success
|
|
l2capoutbuf[9] = 0x00;
|
|
l2capoutbuf[10] = 0x00; // No further information
|
|
l2capoutbuf[11] = 0x00;
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 12);
|
|
}
|
|
|
|
void BTD::l2cap_config_request(uint16_t handle, uint8_t rxid, uint8_t* dcid) {
|
|
l2capoutbuf[0] = L2CAP_CMD_CONFIG_REQUEST; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x08; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = dcid[0]; // Destination CID
|
|
l2capoutbuf[5] = dcid[1];
|
|
l2capoutbuf[6] = 0x00; // Flags
|
|
l2capoutbuf[7] = 0x00;
|
|
l2capoutbuf[8] = 0x01; // Config Opt: type = MTU (Maximum Transmission Unit) - Hint
|
|
l2capoutbuf[9] = 0x02; // Config Opt: length
|
|
l2capoutbuf[10] = 0xFF; // MTU
|
|
l2capoutbuf[11] = 0xFF;
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 12);
|
|
}
|
|
|
|
void BTD::l2cap_config_response(uint16_t handle, uint8_t rxid, uint8_t* scid) {
|
|
l2capoutbuf[0] = L2CAP_CMD_CONFIG_RESPONSE; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x0A; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = scid[0]; // Source CID
|
|
l2capoutbuf[5] = scid[1];
|
|
l2capoutbuf[6] = 0x00; // Flag
|
|
l2capoutbuf[7] = 0x00;
|
|
l2capoutbuf[8] = 0x00; // Result
|
|
l2capoutbuf[9] = 0x00;
|
|
l2capoutbuf[10] = 0x01; // Config
|
|
l2capoutbuf[11] = 0x02;
|
|
l2capoutbuf[12] = 0xA0;
|
|
l2capoutbuf[13] = 0x02;
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 14);
|
|
}
|
|
|
|
void BTD::l2cap_disconnection_request(uint16_t handle, uint8_t rxid, uint8_t* dcid, uint8_t* scid) {
|
|
l2capoutbuf[0] = L2CAP_CMD_DISCONNECT_REQUEST; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x04; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = dcid[0];
|
|
l2capoutbuf[5] = dcid[1];
|
|
l2capoutbuf[6] = scid[0];
|
|
l2capoutbuf[7] = scid[1];
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 8);
|
|
}
|
|
|
|
void BTD::l2cap_disconnection_response(uint16_t handle, uint8_t rxid, uint8_t* dcid, uint8_t* scid) {
|
|
l2capoutbuf[0] = L2CAP_CMD_DISCONNECT_RESPONSE; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x04; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = dcid[0];
|
|
l2capoutbuf[5] = dcid[1];
|
|
l2capoutbuf[6] = scid[0];
|
|
l2capoutbuf[7] = scid[1];
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 8);
|
|
}
|
|
|
|
void BTD::l2cap_information_response(uint16_t handle, uint8_t rxid, uint8_t infoTypeLow, uint8_t infoTypeHigh) {
|
|
l2capoutbuf[0] = L2CAP_CMD_INFORMATION_RESPONSE; // Code
|
|
l2capoutbuf[1] = rxid; // Identifier
|
|
l2capoutbuf[2] = 0x08; // Length
|
|
l2capoutbuf[3] = 0x00;
|
|
l2capoutbuf[4] = infoTypeLow;
|
|
l2capoutbuf[5] = infoTypeHigh;
|
|
l2capoutbuf[6] = 0x00; // Result = success
|
|
l2capoutbuf[7] = 0x00; // Result = success
|
|
l2capoutbuf[8] = 0x00;
|
|
l2capoutbuf[9] = 0x00;
|
|
l2capoutbuf[10] = 0x00;
|
|
l2capoutbuf[11] = 0x00;
|
|
|
|
L2CAP_Command(handle, l2capoutbuf, 12);
|
|
}
|
|
|
|
/* PS3 Commands - only set Bluetooth address is implemented in this library */
|
|
void BTD::setBdaddr(uint8_t* bdaddr) {
|
|
/* Set the internal Bluetooth address */
|
|
uint8_t buf[8];
|
|
buf[0] = 0x01;
|
|
buf[1] = 0x00;
|
|
|
|
for(uint8_t i = 0; i < 6; i++)
|
|
buf[i + 2] = bdaddr[5 - i]; // Copy into buffer, has to be written reversed, so it is MSB first
|
|
|
|
// bmRequest = Host to device (0x00) | Class (0x20) | Interface (0x01) = 0x21, bRequest = Set Report (0x09), Report ID (0xF5), Report Type (Feature 0x03), interface (0x00), datalength, datalength, data
|
|
pUsb->ctrlReq(bAddress, epInfo[BTD_CONTROL_PIPE].epAddr, bmREQ_HID_OUT, HID_REQUEST_SET_REPORT, 0xF5, 0x03, 0x00, 8, 8, buf, NULL);
|
|
}
|
|
|
|
void BTD::setMoveBdaddr(uint8_t* bdaddr) {
|
|
/* Set the internal Bluetooth address */
|
|
uint8_t buf[11];
|
|
buf[0] = 0x05;
|
|
buf[7] = 0x10;
|
|
buf[8] = 0x01;
|
|
buf[9] = 0x02;
|
|
buf[10] = 0x12;
|
|
|
|
for(uint8_t i = 0; i < 6; i++)
|
|
buf[i + 1] = bdaddr[i];
|
|
|
|
// bmRequest = Host to device (0x00) | Class (0x20) | Interface (0x01) = 0x21, bRequest = Set Report (0x09), Report ID (0x05), Report Type (Feature 0x03), interface (0x00), datalength, datalength, data
|
|
pUsb->ctrlReq(bAddress, epInfo[BTD_CONTROL_PIPE].epAddr, bmREQ_HID_OUT, HID_REQUEST_SET_REPORT, 0x05, 0x03, 0x00, 11, 11, buf, NULL);
|
|
}
|