58 static int rfcomm_queue_disc(struct rfcomm_dlc *d);
60 static int rfcomm_send_pn(struct rfcomm_session *s, int cr, struct rfcomm_dlc *d);
212 static int rfcomm_check_security(struct rfcomm_dlc *d)  in rfcomm_check_security()  argument
214 	struct sock *sk = d->session->sock->sk;  in rfcomm_check_security()
219 	switch (d->sec_level) {  in rfcomm_check_security()
232 	return hci_conn_security(conn->hcon, d->sec_level, auth_type,  in rfcomm_check_security()
233 				 d->out);  in rfcomm_check_security()
263 	struct rfcomm_dlc *d = from_timer(d, t, timer);  in rfcomm_dlc_timeout()  local
265 	BT_DBG("dlc %p state %ld", d, d->state);  in rfcomm_dlc_timeout()
267 	set_bit(RFCOMM_TIMED_OUT, &d->flags);  in rfcomm_dlc_timeout()
268 	rfcomm_dlc_put(d);  in rfcomm_dlc_timeout()
272 static void rfcomm_dlc_set_timer(struct rfcomm_dlc *d, long timeout)  in rfcomm_dlc_set_timer()  argument
274 	BT_DBG("dlc %p state %ld timeout %ld", d, d->state, timeout);  in rfcomm_dlc_set_timer()
276 	if (!mod_timer(&d->timer, jiffies + timeout))  in rfcomm_dlc_set_timer()
277 		rfcomm_dlc_hold(d);  in rfcomm_dlc_set_timer()
280 static void rfcomm_dlc_clear_timer(struct rfcomm_dlc *d)  in rfcomm_dlc_clear_timer()  argument
282 	BT_DBG("dlc %p state %ld", d, d->state);  in rfcomm_dlc_clear_timer()
284 	if (del_timer(&d->timer))  in rfcomm_dlc_clear_timer()
285 		rfcomm_dlc_put(d);  in rfcomm_dlc_clear_timer()
288 static void rfcomm_dlc_clear_state(struct rfcomm_dlc *d)  in rfcomm_dlc_clear_state()  argument
290 	BT_DBG("%p", d);  in rfcomm_dlc_clear_state()
292 	d->state      = BT_OPEN;  in rfcomm_dlc_clear_state()
293 	d->flags      = 0;  in rfcomm_dlc_clear_state()
294 	d->mscex      = 0;  in rfcomm_dlc_clear_state()
295 	d->sec_level  = BT_SECURITY_LOW;  in rfcomm_dlc_clear_state()
296 	d->mtu        = RFCOMM_DEFAULT_MTU;  in rfcomm_dlc_clear_state()
297 	d->v24_sig    = RFCOMM_V24_RTC | RFCOMM_V24_RTR | RFCOMM_V24_DV;  in rfcomm_dlc_clear_state()
299 	d->cfc        = RFCOMM_CFC_DISABLED;  in rfcomm_dlc_clear_state()
300 	d->rx_credits = RFCOMM_DEFAULT_CREDITS;  in rfcomm_dlc_clear_state()
305 	struct rfcomm_dlc *d = kzalloc(sizeof(*d), prio);  in rfcomm_dlc_alloc()  local
307 	if (!d)  in rfcomm_dlc_alloc()
310 	timer_setup(&d->timer, rfcomm_dlc_timeout, 0);  in rfcomm_dlc_alloc()
312 	skb_queue_head_init(&d->tx_queue);  in rfcomm_dlc_alloc()
313 	mutex_init(&d->lock);  in rfcomm_dlc_alloc()
314 	refcount_set(&d->refcnt, 1);  in rfcomm_dlc_alloc()
316 	rfcomm_dlc_clear_state(d);  in rfcomm_dlc_alloc()
318 	BT_DBG("%p", d);  in rfcomm_dlc_alloc()
320 	return d;  in rfcomm_dlc_alloc()
323 void rfcomm_dlc_free(struct rfcomm_dlc *d)  in rfcomm_dlc_free()  argument
325 	BT_DBG("%p", d);  in rfcomm_dlc_free()
327 	skb_queue_purge(&d->tx_queue);  in rfcomm_dlc_free()
328 	kfree(d);  in rfcomm_dlc_free()
331 static void rfcomm_dlc_link(struct rfcomm_session *s, struct rfcomm_dlc *d)  in rfcomm_dlc_link()  argument
333 	BT_DBG("dlc %p session %p", d, s);  in rfcomm_dlc_link()
336 	rfcomm_dlc_hold(d);  in rfcomm_dlc_link()
337 	list_add(&d->list, &s->dlcs);  in rfcomm_dlc_link()
338 	d->session = s;  in rfcomm_dlc_link()
341 static void rfcomm_dlc_unlink(struct rfcomm_dlc *d)  in rfcomm_dlc_unlink()  argument
343 	struct rfcomm_session *s = d->session;  in rfcomm_dlc_unlink()
345 	BT_DBG("dlc %p refcnt %d session %p", d, refcount_read(&d->refcnt), s);  in rfcomm_dlc_unlink()
347 	list_del(&d->list);  in rfcomm_dlc_unlink()
348 	d->session = NULL;  in rfcomm_dlc_unlink()
349 	rfcomm_dlc_put(d);  in rfcomm_dlc_unlink()
357 	struct rfcomm_dlc *d;  in rfcomm_dlc_get()  local
359 	list_for_each_entry(d, &s->dlcs, list)  in rfcomm_dlc_get()
360 		if (d->dlci == dlci)  in rfcomm_dlc_get()
361 			return d;  in rfcomm_dlc_get()
371 static int __rfcomm_dlc_open(struct rfcomm_dlc *d, bdaddr_t *src, bdaddr_t *dst, u8 channel)  in __rfcomm_dlc_open()  argument
378 	       d, d->state, src, dst, channel);  in __rfcomm_dlc_open()
383 	if (d->state != BT_OPEN && d->state != BT_CLOSED)  in __rfcomm_dlc_open()
388 		s = rfcomm_session_create(src, dst, d->sec_level, &err);  in __rfcomm_dlc_open()
399 	rfcomm_dlc_clear_state(d);  in __rfcomm_dlc_open()
401 	d->dlci     = dlci;  in __rfcomm_dlc_open()
402 	d->addr     = __addr(s->initiator, dlci);  in __rfcomm_dlc_open()
403 	d->priority = 7;  in __rfcomm_dlc_open()
405 	d->state = BT_CONFIG;  in __rfcomm_dlc_open()
406 	rfcomm_dlc_link(s, d);  in __rfcomm_dlc_open()
408 	d->out = 1;  in __rfcomm_dlc_open()
410 	d->mtu = s->mtu;  in __rfcomm_dlc_open()
411 	d->cfc = (s->cfc == RFCOMM_CFC_UNKNOWN) ? 0 : s->cfc;  in __rfcomm_dlc_open()
414 		if (rfcomm_check_security(d))  in __rfcomm_dlc_open()
415 			rfcomm_send_pn(s, 1, d);  in __rfcomm_dlc_open()
417 			set_bit(RFCOMM_AUTH_PENDING, &d->flags);  in __rfcomm_dlc_open()
420 	rfcomm_dlc_set_timer(d, RFCOMM_CONN_TIMEOUT);  in __rfcomm_dlc_open()
425 int rfcomm_dlc_open(struct rfcomm_dlc *d, bdaddr_t *src, bdaddr_t *dst, u8 channel)  in rfcomm_dlc_open()  argument
431 	r = __rfcomm_dlc_open(d, src, dst, channel);  in rfcomm_dlc_open()
437 static void __rfcomm_dlc_disconn(struct rfcomm_dlc *d)  in __rfcomm_dlc_disconn()  argument
439 	struct rfcomm_session *s = d->session;  in __rfcomm_dlc_disconn()
441 	d->state = BT_DISCONN;  in __rfcomm_dlc_disconn()
442 	if (skb_queue_empty(&d->tx_queue)) {  in __rfcomm_dlc_disconn()
443 		rfcomm_send_disc(s, d->dlci);  in __rfcomm_dlc_disconn()
444 		rfcomm_dlc_set_timer(d, RFCOMM_DISC_TIMEOUT);  in __rfcomm_dlc_disconn()
446 		rfcomm_queue_disc(d);  in __rfcomm_dlc_disconn()
447 		rfcomm_dlc_set_timer(d, RFCOMM_DISC_TIMEOUT * 2);  in __rfcomm_dlc_disconn()
451 static int __rfcomm_dlc_close(struct rfcomm_dlc *d, int err)  in __rfcomm_dlc_close()  argument
453 	struct rfcomm_session *s = d->session;  in __rfcomm_dlc_close()
458 			d, d->state, d->dlci, err, s);  in __rfcomm_dlc_close()
460 	switch (d->state) {  in __rfcomm_dlc_close()
465 		if (test_and_clear_bit(RFCOMM_DEFER_SETUP, &d->flags)) {  in __rfcomm_dlc_close()
466 			set_bit(RFCOMM_AUTH_REJECT, &d->flags);  in __rfcomm_dlc_close()
472 	switch (d->state) {  in __rfcomm_dlc_close()
475 		__rfcomm_dlc_disconn(d);  in __rfcomm_dlc_close()
480 			__rfcomm_dlc_disconn(d);  in __rfcomm_dlc_close()
489 		rfcomm_dlc_clear_timer(d);  in __rfcomm_dlc_close()
491 		rfcomm_dlc_lock(d);  in __rfcomm_dlc_close()
492 		d->state = BT_CLOSED;  in __rfcomm_dlc_close()
493 		d->state_change(d, err);  in __rfcomm_dlc_close()
494 		rfcomm_dlc_unlock(d);  in __rfcomm_dlc_close()
496 		skb_queue_purge(&d->tx_queue);  in __rfcomm_dlc_close()
497 		rfcomm_dlc_unlink(d);  in __rfcomm_dlc_close()
503 int rfcomm_dlc_close(struct rfcomm_dlc *d, int err)  in rfcomm_dlc_close()  argument
509 	BT_DBG("dlc %p state %ld dlci %d err %d", d, d->state, d->dlci, err);  in rfcomm_dlc_close()
513 	s = d->session;  in rfcomm_dlc_close()
523 				if (d_list == d) {  in rfcomm_dlc_close()
524 					r = __rfcomm_dlc_close(d, err);  in rfcomm_dlc_close()
556 static int rfcomm_dlc_send_frag(struct rfcomm_dlc *d, struct sk_buff *frag)  in rfcomm_dlc_send_frag()  argument
560 	BT_DBG("dlc %p mtu %d len %d", d, d->mtu, len);  in rfcomm_dlc_send_frag()
562 	if (len > d->mtu)  in rfcomm_dlc_send_frag()
565 	rfcomm_make_uih(frag, d->addr);  in rfcomm_dlc_send_frag()
566 	__skb_queue_tail(&d->tx_queue, frag);  in rfcomm_dlc_send_frag()
571 int rfcomm_dlc_send(struct rfcomm_dlc *d, struct sk_buff *skb)  in rfcomm_dlc_send()  argument
577 	if (d->state != BT_CONNECTED)  in rfcomm_dlc_send()
584 	spin_lock_irqsave(&d->tx_queue.lock, flags);  in rfcomm_dlc_send()
586 	len = rfcomm_dlc_send_frag(d, skb);  in rfcomm_dlc_send()
595 		ret = rfcomm_dlc_send_frag(d, frag);  in rfcomm_dlc_send()
605 	spin_unlock_irqrestore(&d->tx_queue.lock, flags);  in rfcomm_dlc_send()
607 	if (len > 0 && !test_bit(RFCOMM_TX_THROTTLED, &d->flags))  in rfcomm_dlc_send()
612 void rfcomm_dlc_send_noerror(struct rfcomm_dlc *d, struct sk_buff *skb)  in rfcomm_dlc_send_noerror()  argument
616 	BT_DBG("dlc %p mtu %d len %d", d, d->mtu, len);  in rfcomm_dlc_send_noerror()
618 	rfcomm_make_uih(skb, d->addr);  in rfcomm_dlc_send_noerror()
619 	skb_queue_tail(&d->tx_queue, skb);  in rfcomm_dlc_send_noerror()
621 	if (d->state == BT_CONNECTED &&  in rfcomm_dlc_send_noerror()
622 	    !test_bit(RFCOMM_TX_THROTTLED, &d->flags))  in rfcomm_dlc_send_noerror()
626 void __rfcomm_dlc_throttle(struct rfcomm_dlc *d)  in __rfcomm_dlc_throttle()  argument
628 	BT_DBG("dlc %p state %ld", d, d->state);  in __rfcomm_dlc_throttle()
630 	if (!d->cfc) {  in __rfcomm_dlc_throttle()
631 		d->v24_sig |= RFCOMM_V24_FC;  in __rfcomm_dlc_throttle()
632 		set_bit(RFCOMM_MSC_PENDING, &d->flags);  in __rfcomm_dlc_throttle()
637 void __rfcomm_dlc_unthrottle(struct rfcomm_dlc *d)  in __rfcomm_dlc_unthrottle()  argument
639 	BT_DBG("dlc %p state %ld", d, d->state);  in __rfcomm_dlc_unthrottle()
641 	if (!d->cfc) {  in __rfcomm_dlc_unthrottle()
642 		d->v24_sig &= ~RFCOMM_V24_FC;  in __rfcomm_dlc_unthrottle()
643 		set_bit(RFCOMM_MSC_PENDING, &d->flags);  in __rfcomm_dlc_unthrottle()
653 int rfcomm_dlc_set_modem_status(struct rfcomm_dlc *d, u8 v24_sig)  in rfcomm_dlc_set_modem_status()  argument
656 			d, d->state, v24_sig);  in rfcomm_dlc_set_modem_status()
658 	if (test_bit(RFCOMM_RX_THROTTLED, &d->flags))  in rfcomm_dlc_set_modem_status()
663 	d->v24_sig = v24_sig;  in rfcomm_dlc_set_modem_status()
665 	if (!test_and_set_bit(RFCOMM_MSC_PENDING, &d->flags))  in rfcomm_dlc_set_modem_status()
671 int rfcomm_dlc_get_modem_status(struct rfcomm_dlc *d, u8 *v24_sig)  in rfcomm_dlc_get_modem_status()  argument
674 			d, d->state, d->v24_sig);  in rfcomm_dlc_get_modem_status()
676 	*v24_sig = d->v24_sig;  in rfcomm_dlc_get_modem_status()
747 	struct rfcomm_dlc *d, *n;  in rfcomm_session_close()  local
754 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_session_close()
755 		d->state = BT_CLOSED;  in rfcomm_session_close()
756 		__rfcomm_dlc_close(d, err);  in rfcomm_session_close()
893 static int rfcomm_queue_disc(struct rfcomm_dlc *d)  in rfcomm_queue_disc()  argument
898 	BT_DBG("dlc %p dlci %d", d, d->dlci);  in rfcomm_queue_disc()
905 	cmd->addr = d->addr;  in rfcomm_queue_disc()
910 	skb_queue_tail(&d->tx_queue, skb);  in rfcomm_queue_disc()
954 static int rfcomm_send_pn(struct rfcomm_session *s, int cr, struct rfcomm_dlc *d)  in rfcomm_send_pn()  argument
961 	BT_DBG("%p cr %d dlci %d mtu %d", s, cr, d->dlci, d->mtu);  in rfcomm_send_pn()
973 	pn->dlci        = d->dlci;  in rfcomm_send_pn()
974 	pn->priority    = d->priority;  in rfcomm_send_pn()
989 		pn->mtu = cpu_to_le16(d->mtu);  in rfcomm_send_pn()
1210 		struct rfcomm_dlc *d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_ua()  local
1211 		if (!d) {  in rfcomm_recv_ua()
1216 		switch (d->state) {  in rfcomm_recv_ua()
1218 			rfcomm_dlc_clear_timer(d);  in rfcomm_recv_ua()
1220 			rfcomm_dlc_lock(d);  in rfcomm_recv_ua()
1221 			d->state = BT_CONNECTED;  in rfcomm_recv_ua()
1222 			d->state_change(d, 0);  in rfcomm_recv_ua()
1223 			rfcomm_dlc_unlock(d);  in rfcomm_recv_ua()
1225 			rfcomm_send_msc(s, 1, dlci, d->v24_sig);  in rfcomm_recv_ua()
1229 			d->state = BT_CLOSED;  in rfcomm_recv_ua()
1230 			__rfcomm_dlc_close(d, 0);  in rfcomm_recv_ua()
1264 		struct rfcomm_dlc *d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_dm()  local
1265 		if (d) {  in rfcomm_recv_dm()
1266 			if (d->state == BT_CONNECT || d->state == BT_CONFIG)  in rfcomm_recv_dm()
1271 			d->state = BT_CLOSED;  in rfcomm_recv_dm()
1272 			__rfcomm_dlc_close(d, err);  in rfcomm_recv_dm()
1293 		struct rfcomm_dlc *d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_disc()  local
1294 		if (d) {  in rfcomm_recv_disc()
1297 			if (d->state == BT_CONNECT || d->state == BT_CONFIG)  in rfcomm_recv_disc()
1302 			d->state = BT_CLOSED;  in rfcomm_recv_disc()
1303 			__rfcomm_dlc_close(d, err);  in rfcomm_recv_disc()
1320 void rfcomm_dlc_accept(struct rfcomm_dlc *d)  in rfcomm_dlc_accept()  argument
1322 	struct sock *sk = d->session->sock->sk;  in rfcomm_dlc_accept()
1325 	BT_DBG("dlc %p", d);  in rfcomm_dlc_accept()
1327 	rfcomm_send_ua(d->session, d->dlci);  in rfcomm_dlc_accept()
1329 	rfcomm_dlc_clear_timer(d);  in rfcomm_dlc_accept()
1331 	rfcomm_dlc_lock(d);  in rfcomm_dlc_accept()
1332 	d->state = BT_CONNECTED;  in rfcomm_dlc_accept()
1333 	d->state_change(d, 0);  in rfcomm_dlc_accept()
1334 	rfcomm_dlc_unlock(d);  in rfcomm_dlc_accept()
1336 	if (d->role_switch)  in rfcomm_dlc_accept()
1339 	rfcomm_send_msc(d->session, 1, d->dlci, d->v24_sig);  in rfcomm_dlc_accept()
1342 static void rfcomm_check_accept(struct rfcomm_dlc *d)  in rfcomm_check_accept()  argument
1344 	if (rfcomm_check_security(d)) {  in rfcomm_check_accept()
1345 		if (d->defer_setup) {  in rfcomm_check_accept()
1346 			set_bit(RFCOMM_DEFER_SETUP, &d->flags);  in rfcomm_check_accept()
1347 			rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_check_accept()
1349 			rfcomm_dlc_lock(d);  in rfcomm_check_accept()
1350 			d->state = BT_CONNECT2;  in rfcomm_check_accept()
1351 			d->state_change(d, 0);  in rfcomm_check_accept()
1352 			rfcomm_dlc_unlock(d);  in rfcomm_check_accept()
1354 			rfcomm_dlc_accept(d);  in rfcomm_check_accept()
1356 		set_bit(RFCOMM_AUTH_PENDING, &d->flags);  in rfcomm_check_accept()
1357 		rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_check_accept()
1363 	struct rfcomm_dlc *d;  in rfcomm_recv_sabm()  local
1379 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_sabm()
1380 	if (d) {  in rfcomm_recv_sabm()
1381 		if (d->state == BT_OPEN) {  in rfcomm_recv_sabm()
1383 			rfcomm_check_accept(d);  in rfcomm_recv_sabm()
1390 	if (rfcomm_connect_ind(s, channel, &d)) {  in rfcomm_recv_sabm()
1391 		d->dlci = dlci;  in rfcomm_recv_sabm()
1392 		d->addr = __addr(s->initiator, dlci);  in rfcomm_recv_sabm()
1393 		rfcomm_dlc_link(s, d);  in rfcomm_recv_sabm()
1395 		rfcomm_check_accept(d);  in rfcomm_recv_sabm()
1403 static int rfcomm_apply_pn(struct rfcomm_dlc *d, int cr, struct rfcomm_pn *pn)  in rfcomm_apply_pn()  argument
1405 	struct rfcomm_session *s = d->session;  in rfcomm_apply_pn()
1408 			d, d->state, d->dlci, pn->mtu, pn->flow_ctrl, pn->credits);  in rfcomm_apply_pn()
1412 		d->cfc = RFCOMM_CFC_ENABLED;  in rfcomm_apply_pn()
1413 		d->tx_credits = pn->credits;  in rfcomm_apply_pn()
1415 		d->cfc = RFCOMM_CFC_DISABLED;  in rfcomm_apply_pn()
1416 		set_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_apply_pn()
1420 		s->cfc = d->cfc;  in rfcomm_apply_pn()
1422 	d->priority = pn->priority;  in rfcomm_apply_pn()
1424 	d->mtu = __le16_to_cpu(pn->mtu);  in rfcomm_apply_pn()
1426 	if (cr && d->mtu > s->mtu)  in rfcomm_apply_pn()
1427 		d->mtu = s->mtu;  in rfcomm_apply_pn()
1435 	struct rfcomm_dlc *d;  in rfcomm_recv_pn()  local
1443 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_pn()
1444 	if (d) {  in rfcomm_recv_pn()
1447 			rfcomm_apply_pn(d, cr, pn);  in rfcomm_recv_pn()
1448 			rfcomm_send_pn(s, 0, d);  in rfcomm_recv_pn()
1451 			switch (d->state) {  in rfcomm_recv_pn()
1453 				rfcomm_apply_pn(d, cr, pn);  in rfcomm_recv_pn()
1455 				d->state = BT_CONNECT;  in rfcomm_recv_pn()
1456 				rfcomm_send_sabm(s, d->dlci);  in rfcomm_recv_pn()
1468 		if (rfcomm_connect_ind(s, channel, &d)) {  in rfcomm_recv_pn()
1469 			d->dlci = dlci;  in rfcomm_recv_pn()
1470 			d->addr = __addr(s->initiator, dlci);  in rfcomm_recv_pn()
1471 			rfcomm_dlc_link(s, d);  in rfcomm_recv_pn()
1473 			rfcomm_apply_pn(d, cr, pn);  in rfcomm_recv_pn()
1475 			d->state = BT_OPEN;  in rfcomm_recv_pn()
1476 			rfcomm_send_pn(s, 0, d);  in rfcomm_recv_pn()
1612 	struct rfcomm_dlc *d;  in rfcomm_recv_msc()  local
1617 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_msc()
1618 	if (!d)  in rfcomm_recv_msc()
1622 		if (msc->v24_sig & RFCOMM_V24_FC && !d->cfc)  in rfcomm_recv_msc()
1623 			set_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_recv_msc()
1625 			clear_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_recv_msc()
1627 		rfcomm_dlc_lock(d);  in rfcomm_recv_msc()
1629 		d->remote_v24_sig = msc->v24_sig;  in rfcomm_recv_msc()
1631 		if (d->modem_status)  in rfcomm_recv_msc()
1632 			d->modem_status(d, msc->v24_sig);  in rfcomm_recv_msc()
1634 		rfcomm_dlc_unlock(d);  in rfcomm_recv_msc()
1638 		d->mscex |= RFCOMM_MSCEX_RX;  in rfcomm_recv_msc()
1640 		d->mscex |= RFCOMM_MSCEX_TX;  in rfcomm_recv_msc()
1707 	struct rfcomm_dlc *d;  in rfcomm_recv_data()  local
1711 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_data()
1712 	if (!d) {  in rfcomm_recv_data()
1717 	if (pf && d->cfc) {  in rfcomm_recv_data()
1720 		d->tx_credits += credits;  in rfcomm_recv_data()
1721 		if (d->tx_credits)  in rfcomm_recv_data()
1722 			clear_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_recv_data()
1725 	if (skb->len && d->state == BT_CONNECTED) {  in rfcomm_recv_data()
1726 		rfcomm_dlc_lock(d);  in rfcomm_recv_data()
1727 		d->rx_credits--;  in rfcomm_recv_data()
1728 		d->data_ready(d, skb);  in rfcomm_recv_data()
1729 		rfcomm_dlc_unlock(d);  in rfcomm_recv_data()
1808 	struct rfcomm_dlc *d, *n;  in rfcomm_process_connect()  local
1812 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_process_connect()
1813 		if (d->state == BT_CONFIG) {  in rfcomm_process_connect()
1814 			d->mtu = s->mtu;  in rfcomm_process_connect()
1815 			if (rfcomm_check_security(d)) {  in rfcomm_process_connect()
1816 				rfcomm_send_pn(s, 1, d);  in rfcomm_process_connect()
1818 				set_bit(RFCOMM_AUTH_PENDING, &d->flags);  in rfcomm_process_connect()
1819 				rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_process_connect()
1828 static int rfcomm_process_tx(struct rfcomm_dlc *d)  in rfcomm_process_tx()  argument
1834 			d, d->state, d->cfc, d->rx_credits, d->tx_credits);  in rfcomm_process_tx()
1837 	if (test_and_clear_bit(RFCOMM_MSC_PENDING, &d->flags))  in rfcomm_process_tx()
1838 		rfcomm_send_msc(d->session, 1, d->dlci, d->v24_sig);  in rfcomm_process_tx()
1840 	if (d->cfc) {  in rfcomm_process_tx()
1843 		if (!test_bit(RFCOMM_RX_THROTTLED, &d->flags) &&  in rfcomm_process_tx()
1844 				d->rx_credits <= (d->cfc >> 2)) {  in rfcomm_process_tx()
1845 			rfcomm_send_credits(d->session, d->addr, d->cfc - d->rx_credits);  in rfcomm_process_tx()
1846 			d->rx_credits = d->cfc;  in rfcomm_process_tx()
1851 		d->tx_credits = 5;  in rfcomm_process_tx()
1854 	if (test_bit(RFCOMM_TX_THROTTLED, &d->flags))  in rfcomm_process_tx()
1855 		return skb_queue_len(&d->tx_queue);  in rfcomm_process_tx()
1857 	while (d->tx_credits && (skb = skb_dequeue(&d->tx_queue))) {  in rfcomm_process_tx()
1858 		err = rfcomm_send_frame(d->session, skb->data, skb->len);  in rfcomm_process_tx()
1860 			skb_queue_head(&d->tx_queue, skb);  in rfcomm_process_tx()
1864 		d->tx_credits--;  in rfcomm_process_tx()
1867 	if (d->cfc && !d->tx_credits) {  in rfcomm_process_tx()
1870 		set_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_process_tx()
1873 	return skb_queue_len(&d->tx_queue);  in rfcomm_process_tx()
1878 	struct rfcomm_dlc *d, *n;  in rfcomm_process_dlcs()  local
1882 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_process_dlcs()
1883 		if (test_bit(RFCOMM_TIMED_OUT, &d->flags)) {  in rfcomm_process_dlcs()
1884 			__rfcomm_dlc_close(d, ETIMEDOUT);  in rfcomm_process_dlcs()
1888 		if (test_bit(RFCOMM_ENC_DROP, &d->flags)) {  in rfcomm_process_dlcs()
1889 			__rfcomm_dlc_close(d, ECONNREFUSED);  in rfcomm_process_dlcs()
1893 		if (test_and_clear_bit(RFCOMM_AUTH_ACCEPT, &d->flags)) {  in rfcomm_process_dlcs()
1894 			rfcomm_dlc_clear_timer(d);  in rfcomm_process_dlcs()
1895 			if (d->out) {  in rfcomm_process_dlcs()
1896 				rfcomm_send_pn(s, 1, d);  in rfcomm_process_dlcs()
1897 				rfcomm_dlc_set_timer(d, RFCOMM_CONN_TIMEOUT);  in rfcomm_process_dlcs()
1899 				if (d->defer_setup) {  in rfcomm_process_dlcs()
1900 					set_bit(RFCOMM_DEFER_SETUP, &d->flags);  in rfcomm_process_dlcs()
1901 					rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_process_dlcs()
1903 					rfcomm_dlc_lock(d);  in rfcomm_process_dlcs()
1904 					d->state = BT_CONNECT2;  in rfcomm_process_dlcs()
1905 					d->state_change(d, 0);  in rfcomm_process_dlcs()
1906 					rfcomm_dlc_unlock(d);  in rfcomm_process_dlcs()
1908 					rfcomm_dlc_accept(d);  in rfcomm_process_dlcs()
1911 		} else if (test_and_clear_bit(RFCOMM_AUTH_REJECT, &d->flags)) {  in rfcomm_process_dlcs()
1912 			rfcomm_dlc_clear_timer(d);  in rfcomm_process_dlcs()
1913 			if (!d->out)  in rfcomm_process_dlcs()
1914 				rfcomm_send_dm(s, d->dlci);  in rfcomm_process_dlcs()
1916 				d->state = BT_CLOSED;  in rfcomm_process_dlcs()
1917 			__rfcomm_dlc_close(d, ECONNREFUSED);  in rfcomm_process_dlcs()
1921 		if (test_bit(RFCOMM_SEC_PENDING, &d->flags))  in rfcomm_process_dlcs()
1927 		if ((d->state == BT_CONNECTED || d->state == BT_DISCONN) &&  in rfcomm_process_dlcs()
1928 						d->mscex == RFCOMM_MSCEX_OK)  in rfcomm_process_dlcs()
1929 			rfcomm_process_tx(d);  in rfcomm_process_dlcs()
2140 	struct rfcomm_dlc *d, *n;  in rfcomm_security_cfm()  local
2148 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_security_cfm()
2149 		if (test_and_clear_bit(RFCOMM_SEC_PENDING, &d->flags)) {  in rfcomm_security_cfm()
2150 			rfcomm_dlc_clear_timer(d);  in rfcomm_security_cfm()
2152 				set_bit(RFCOMM_ENC_DROP, &d->flags);  in rfcomm_security_cfm()
2157 		if (d->state == BT_CONNECTED && !status && encrypt == 0x00) {  in rfcomm_security_cfm()
2158 			if (d->sec_level == BT_SECURITY_MEDIUM) {  in rfcomm_security_cfm()
2159 				set_bit(RFCOMM_SEC_PENDING, &d->flags);  in rfcomm_security_cfm()
2160 				rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_security_cfm()
2162 			} else if (d->sec_level == BT_SECURITY_HIGH ||  in rfcomm_security_cfm()
2163 				   d->sec_level == BT_SECURITY_FIPS) {  in rfcomm_security_cfm()
2164 				set_bit(RFCOMM_ENC_DROP, &d->flags);  in rfcomm_security_cfm()
2169 		if (!test_and_clear_bit(RFCOMM_AUTH_PENDING, &d->flags))  in rfcomm_security_cfm()
2172 		if (!status && hci_conn_check_secure(conn, d->sec_level))  in rfcomm_security_cfm()
2173 			set_bit(RFCOMM_AUTH_ACCEPT, &d->flags);  in rfcomm_security_cfm()
2175 			set_bit(RFCOMM_AUTH_REJECT, &d->flags);  in rfcomm_security_cfm()
2194 		struct rfcomm_dlc *d;  in rfcomm_dlc_debugfs_show()  local
2195 		list_for_each_entry(d, &s->dlcs, list) {  in rfcomm_dlc_debugfs_show()
2198 				   d->state, d->dlci, d->mtu,  in rfcomm_dlc_debugfs_show()
2199 				   d->rx_credits, d->tx_credits);  in rfcomm_dlc_debugfs_show()