From patchwork Mon Mar 2 04:07:31 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Archie Pusaka X-Patchwork-Id: 197324 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-14.4 required=3.0 tests=DKIMWL_WL_MED, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH, MAILING_LIST_MULTI, SPF_HELO_NONE, SPF_PASS, USER_AGENT_GIT, USER_IN_DEF_DKIM_WL autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 74C45C3F2D1 for ; Mon, 2 Mar 2020 04:07:44 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 365F224697 for ; Mon, 2 Mar 2020 04:07:44 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="Be7gAvBO" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726805AbgCBEHn (ORCPT ); Sun, 1 Mar 2020 23:07:43 -0500 Received: from mail-qt1-f201.google.com ([209.85.160.201]:51770 "EHLO mail-qt1-f201.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726758AbgCBEHn (ORCPT ); Sun, 1 Mar 2020 23:07:43 -0500 Received: by mail-qt1-f201.google.com with SMTP id r13so8079330qtn.18 for ; Sun, 01 Mar 2020 20:07:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:message-id:mime-version:subject:from:to:cc; bh=qcUMHKerzd/T0TYatrRS/5D74xgSdIRuJePQMA8NwE4=; b=Be7gAvBOIY8kL1pOwQ587G0gqZtsQSpYnk0HrKye3FIDdmNUGUzO0ACogNMLX56qS8 BUhf+QOTPN/QQBCmxqoHwaJUcsW4tv214gWP6NwaRq+5Jo2IM7drt2VnWgBrpSHnxzj/ fh/rQmOMHj4a5T03rCFoTgMdQa7p8kYvVCGTCZxBuMUr7PsxUguUwZchtsCvoovzWZ8e Q8STDHqPH8kf40eODG3BNXAtsid+eBKdtoxpD6jt5rFjXz7tIi6CJBNPdk1Ap+CM7rKl BAsCWfxZUqLMmj2BYbbiijirzkK0f/G5vVbmR874EeBXLgGNctJ+gq5QShcjwczFdXPm TM4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:message-id:mime-version:subject:from:to:cc; bh=qcUMHKerzd/T0TYatrRS/5D74xgSdIRuJePQMA8NwE4=; b=SacJdixA5sjXdkozRu0eQgarkUDBHQjzV2gnSlV3jO4wNll3buosFEAhCdPTmYa8Yj +n4fEVI5sUknJumPPdHr9vG3Vcc36KeMPeQUF5gV2Q8R96BSA5Rb4lIHEVqIjzFiYmnO X+XuPupoBBfskTm4KPoNsY6gT7MvhJXjdsXoNH6Ki4L/Yqrp6k5Tbx8TZUaAMU7oX8hF XvtaiYwiS08MtsBab2VnPrfIRv+JLlnwEwXJU6Kh/GydNg6fUgOdANeg1arNgw2Vspnl A1iROGn+IYxuKn9lpTnNw/pFPdDLkY7m5lJJWm7x5RoA5Ny2OcgpEGvjj6hx/1jLNZHv jL0A== X-Gm-Message-State: ANhLgQ20fjvWC3ECz8Y/E0taw33uKfzLDTvmY8YRpwOLc1M5zEFN7MOx 9ygTIDyexLZFwHy6F141gHa61JjaQjbIEMuWJm2NR3SLabBrwkIJRG5FtVdWnNurQFNGw9Ro7CJ 2dI0f3mT+XZGWvGt8Kvi9nnv5ibJ4NhFfXLneonCt0/Nu236Q5CCdqEfyU7sSx56l4/pQd0vLjH O3 X-Google-Smtp-Source: ADFU+vuU12oLdERIo2nu0hNrhzkjOASxY6WIsaN5sjPFtY/GGnU/eR8lbRDQt/19DTsd9mdE00P5E/KpLBSN X-Received: by 2002:a0c:f602:: with SMTP id r2mr6143620qvm.193.1583122061974; Sun, 01 Mar 2020 20:07:41 -0800 (PST) Date: Mon, 2 Mar 2020 12:07:31 +0800 Message-Id: <20200302120658.Bluez.v3.1.I3c505b4307094eb7a6f2c5949125a17c89b2e099@changeid> Mime-Version: 1.0 X-Mailer: git-send-email 2.25.0.265.gbab2e86ba0-goog Subject: [Bluez PATCH v3] src/profile: Ensure class UUID matches before connecting profile From: Archie Pusaka To: linux-bluetooth , Luiz Augusto von Dentz Cc: Archie Pusaka Sender: linux-bluetooth-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-bluetooth@vger.kernel.org From: Archie Pusaka According to bluetooth spec Ver 5.1, Vol 3, Part B, 4.7.2, there might be multiple service records returned in a SDP Service Search Attribute Response. Also, according to 2.5.2, the service pattern can match any UUID contained within the service record, it doesn't have to match only some specific attributes of the record. Therefore, before using the service record to connect to any profile, first we must check that the service class ID of the service record matches with whatever UUID specified in the service pattern we are looking for. This patch checks the service class ID of the records against the requested UUID whenever bt_search_service() is called and filter out the ones that don't match. For the alternative where filtering is not applied, use the method bt_search(). --- Changes in v3: - Simplify sdp_client.c - Add comment for the behavior when SDP record is missing the service class ID Changes in v2: - Move service class matching from profile.c to sdp_client.c - Create function bt_search for searching without matching uuid - Update device.c to use bt_search for L2CAP src/device.c | 26 +++++++-------------- src/sdp-client.c | 61 ++++++++++++++++++++++++++++++++++++++++++++---- src/sdp-client.h | 3 +++ 3 files changed, 67 insertions(+), 23 deletions(-) diff --git a/src/device.c b/src/device.c index a8f4c22f3..c351a1562 100644 --- a/src/device.c +++ b/src/device.c @@ -4584,27 +4584,18 @@ static void update_bredr_services(struct browse_req *req, sdp_list_t *recs) for (seq = recs; seq; seq = seq->next) { sdp_record_t *rec = (sdp_record_t *) seq->data; - sdp_list_t *svcclass = NULL; char *profile_uuid; if (!rec) break; - if (sdp_get_service_classes(rec, &svcclass) < 0) - continue; - - /* Check for empty service classes list */ - if (svcclass == NULL) { - DBG("Skipping record with no service classes"); - continue; - } + /* If service class attribute is missing, svclass will be all + * zero and the resulting uuid string will be NULL. + */ + profile_uuid = bt_uuid2string(&rec->svclass); - /* Extract the first element and skip the remainning */ - profile_uuid = bt_uuid2string(svcclass->data); - if (!profile_uuid) { - sdp_list_free(svcclass, free); + if (!profile_uuid) continue; - } if (bt_uuid_strcmp(profile_uuid, PNP_UUID) == 0) { uint16_t source, vendor, product, version; @@ -4638,7 +4629,6 @@ static void update_bredr_services(struct browse_req *req, sdp_list_t *recs) next: free(profile_uuid); - sdp_list_free(svcclass, free); } if (sdp_key_file) { @@ -5352,9 +5342,9 @@ static int device_browse_sdp(struct btd_device *device, DBusMessage *msg) req->sdp_flags = get_sdp_flags(device); - err = bt_search_service(btd_adapter_get_address(adapter), - &device->bdaddr, &uuid, browse_cb, req, NULL, - req->sdp_flags); + err = bt_search(btd_adapter_get_address(adapter), + &device->bdaddr, &uuid, browse_cb, req, NULL, + req->sdp_flags); if (err < 0) { browse_request_free(req); return err; diff --git a/src/sdp-client.c b/src/sdp-client.c index 413cf30ec..b92a083af 100644 --- a/src/sdp-client.c +++ b/src/sdp-client.c @@ -143,6 +143,7 @@ struct search_context { gpointer user_data; uuid_t uuid; guint io_id; + gboolean filter_svc_class; }; static GSList *context_list = NULL; @@ -195,6 +196,16 @@ static void search_completed_cb(uint8_t type, uint16_t status, rsp += recsize; bytesleft -= recsize; + /* Check whether service class ID matches some specified uuid. + * If the record is missing service class ID, svclass will be + * all zero, and thus will be unequal to the requested uuid. + */ + if (ctxt->filter_svc_class && + sdp_uuid_cmp(&ctxt->uuid, &rec->svclass) != 0) { + sdp_record_free(rec); + continue; + } + recs = sdp_list_append(recs, rec); } while (scanned < (ssize_t) size && bytesleft > 0); @@ -338,7 +349,28 @@ static int create_search_context(struct search_context **ctxt, return 0; } -int bt_search_service(const bdaddr_t *src, const bdaddr_t *dst, +static int create_search_context_full(struct search_context **ctxt, + const bdaddr_t *src, + const bdaddr_t *dst, + uuid_t *uuid, uint16_t flags, + void *user_data, bt_callback_t cb, + bt_destroy_t destroy, + gboolean filter_svc_class) +{ + int err = create_search_context(ctxt, src, dst, uuid, flags); + + if (err < 0) + return err; + + (*ctxt)->cb = cb; + (*ctxt)->destroy = destroy; + (*ctxt)->user_data = user_data; + (*ctxt)->filter_svc_class = filter_svc_class; + + return 0; +} + +int bt_search(const bdaddr_t *src, const bdaddr_t *dst, uuid_t *uuid, bt_callback_t cb, void *user_data, bt_destroy_t destroy, uint16_t flags) { @@ -348,13 +380,32 @@ int bt_search_service(const bdaddr_t *src, const bdaddr_t *dst, if (!cb) return -EINVAL; - err = create_search_context(&ctxt, src, dst, uuid, flags); + /* The resulting service class ID doesn't have to match uuid */ + err = create_search_context_full(&ctxt, src, dst, uuid, flags, + user_data, cb, destroy, FALSE); if (err < 0) return err; - ctxt->cb = cb; - ctxt->destroy = destroy; - ctxt->user_data = user_data; + context_list = g_slist_append(context_list, ctxt); + + return 0; +} + +int bt_search_service(const bdaddr_t *src, const bdaddr_t *dst, + uuid_t *uuid, bt_callback_t cb, void *user_data, + bt_destroy_t destroy, uint16_t flags) +{ + struct search_context *ctxt = NULL; + int err; + + if (!cb) + return -EINVAL; + + /* The resulting service class ID need to match uuid */ + err = create_search_context_full(&ctxt, src, dst, uuid, flags, + user_data, cb, destroy, TRUE); + if (err < 0) + return err; context_list = g_slist_append(context_list, ctxt); diff --git a/src/sdp-client.h b/src/sdp-client.h index 9aa5a4d98..3a7212fd2 100644 --- a/src/sdp-client.h +++ b/src/sdp-client.h @@ -24,6 +24,9 @@ typedef void (*bt_callback_t) (sdp_list_t *recs, int err, gpointer user_data); typedef void (*bt_destroy_t) (gpointer user_data); +int bt_search(const bdaddr_t *src, const bdaddr_t *dst, + uuid_t *uuid, bt_callback_t cb, void *user_data, + bt_destroy_t destroy, uint16_t flags); int bt_search_service(const bdaddr_t *src, const bdaddr_t *dst, uuid_t *uuid, bt_callback_t cb, void *user_data, bt_destroy_t destroy, uint16_t flags);