57 static int rfcomm_queue_disc(struct rfcomm_dlc *d);
59 static int rfcomm_send_pn(struct rfcomm_session *s, int cr, struct rfcomm_dlc *d);
212 static int rfcomm_check_security(struct rfcomm_dlc *d)  in rfcomm_check_security()  argument
214 	struct sock *sk = d->session->sock->sk;  in rfcomm_check_security()
219 	switch (d->sec_level) {  in rfcomm_check_security()
232 	return hci_conn_security(conn->hcon, d->sec_level, auth_type,  in rfcomm_check_security()
233 				 d->out);  in rfcomm_check_security()
263 	struct rfcomm_dlc *d = from_timer(d, t, timer);  in rfcomm_dlc_timeout()  local
265 	BT_DBG("dlc %p state %ld", d, d->state);  in rfcomm_dlc_timeout()
267 	set_bit(RFCOMM_TIMED_OUT, &d->flags);  in rfcomm_dlc_timeout()
268 	rfcomm_dlc_put(d);  in rfcomm_dlc_timeout()
272 static void rfcomm_dlc_set_timer(struct rfcomm_dlc *d, long timeout)  in rfcomm_dlc_set_timer()  argument
274 	BT_DBG("dlc %p state %ld timeout %ld", d, d->state, timeout);  in rfcomm_dlc_set_timer()
276 	if (!mod_timer(&d->timer, jiffies + timeout))  in rfcomm_dlc_set_timer()
277 		rfcomm_dlc_hold(d);  in rfcomm_dlc_set_timer()
280 static void rfcomm_dlc_clear_timer(struct rfcomm_dlc *d)  in rfcomm_dlc_clear_timer()  argument
282 	BT_DBG("dlc %p state %ld", d, d->state);  in rfcomm_dlc_clear_timer()
284 	if (del_timer(&d->timer))  in rfcomm_dlc_clear_timer()
285 		rfcomm_dlc_put(d);  in rfcomm_dlc_clear_timer()
288 static void rfcomm_dlc_clear_state(struct rfcomm_dlc *d)  in rfcomm_dlc_clear_state()  argument
290 	BT_DBG("%p", d);  in rfcomm_dlc_clear_state()
292 	d->state      = BT_OPEN;  in rfcomm_dlc_clear_state()
293 	d->flags      = 0;  in rfcomm_dlc_clear_state()
294 	d->mscex      = 0;  in rfcomm_dlc_clear_state()
295 	d->sec_level  = BT_SECURITY_LOW;  in rfcomm_dlc_clear_state()
296 	d->mtu        = RFCOMM_DEFAULT_MTU;  in rfcomm_dlc_clear_state()
297 	d->v24_sig    = RFCOMM_V24_RTC | RFCOMM_V24_RTR | RFCOMM_V24_DV;  in rfcomm_dlc_clear_state()
299 	d->cfc        = RFCOMM_CFC_DISABLED;  in rfcomm_dlc_clear_state()
300 	d->rx_credits = RFCOMM_DEFAULT_CREDITS;  in rfcomm_dlc_clear_state()
305 	struct rfcomm_dlc *d = kzalloc(sizeof(*d), prio);  in rfcomm_dlc_alloc()  local
307 	if (!d)  in rfcomm_dlc_alloc()
310 	timer_setup(&d->timer, rfcomm_dlc_timeout, 0);  in rfcomm_dlc_alloc()
312 	skb_queue_head_init(&d->tx_queue);  in rfcomm_dlc_alloc()
313 	mutex_init(&d->lock);  in rfcomm_dlc_alloc()
314 	refcount_set(&d->refcnt, 1);  in rfcomm_dlc_alloc()
316 	rfcomm_dlc_clear_state(d);  in rfcomm_dlc_alloc()
318 	BT_DBG("%p", d);  in rfcomm_dlc_alloc()
320 	return d;  in rfcomm_dlc_alloc()
323 void rfcomm_dlc_free(struct rfcomm_dlc *d)  in rfcomm_dlc_free()  argument
325 	BT_DBG("%p", d);  in rfcomm_dlc_free()
327 	skb_queue_purge(&d->tx_queue);  in rfcomm_dlc_free()
328 	kfree(d);  in rfcomm_dlc_free()
331 static void rfcomm_dlc_link(struct rfcomm_session *s, struct rfcomm_dlc *d)  in rfcomm_dlc_link()  argument
333 	BT_DBG("dlc %p session %p", d, s);  in rfcomm_dlc_link()
336 	rfcomm_dlc_hold(d);  in rfcomm_dlc_link()
337 	list_add(&d->list, &s->dlcs);  in rfcomm_dlc_link()
338 	d->session = s;  in rfcomm_dlc_link()
341 static void rfcomm_dlc_unlink(struct rfcomm_dlc *d)  in rfcomm_dlc_unlink()  argument
343 	struct rfcomm_session *s = d->session;  in rfcomm_dlc_unlink()
345 	BT_DBG("dlc %p refcnt %d session %p", d, refcount_read(&d->refcnt), s);  in rfcomm_dlc_unlink()
347 	list_del(&d->list);  in rfcomm_dlc_unlink()
348 	d->session = NULL;  in rfcomm_dlc_unlink()
349 	rfcomm_dlc_put(d);  in rfcomm_dlc_unlink()
357 	struct rfcomm_dlc *d;  in rfcomm_dlc_get()  local
359 	list_for_each_entry(d, &s->dlcs, list)  in rfcomm_dlc_get()
360 		if (d->dlci == dlci)  in rfcomm_dlc_get()
361 			return d;  in rfcomm_dlc_get()
371 static int __rfcomm_dlc_open(struct rfcomm_dlc *d, bdaddr_t *src, bdaddr_t *dst, u8 channel)  in __rfcomm_dlc_open()  argument
378 	       d, d->state, src, dst, channel);  in __rfcomm_dlc_open()
383 	if (d->state != BT_OPEN && d->state != BT_CLOSED)  in __rfcomm_dlc_open()
388 		s = rfcomm_session_create(src, dst, d->sec_level, &err);  in __rfcomm_dlc_open()
399 	rfcomm_dlc_clear_state(d);  in __rfcomm_dlc_open()
401 	d->dlci     = dlci;  in __rfcomm_dlc_open()
402 	d->addr     = __addr(s->initiator, dlci);  in __rfcomm_dlc_open()
403 	d->priority = 7;  in __rfcomm_dlc_open()
405 	d->state = BT_CONFIG;  in __rfcomm_dlc_open()
406 	rfcomm_dlc_link(s, d);  in __rfcomm_dlc_open()
408 	d->out = 1;  in __rfcomm_dlc_open()
410 	d->mtu = s->mtu;  in __rfcomm_dlc_open()
411 	d->cfc = (s->cfc == RFCOMM_CFC_UNKNOWN) ? 0 : s->cfc;  in __rfcomm_dlc_open()
414 		if (rfcomm_check_security(d))  in __rfcomm_dlc_open()
415 			rfcomm_send_pn(s, 1, d);  in __rfcomm_dlc_open()
417 			set_bit(RFCOMM_AUTH_PENDING, &d->flags);  in __rfcomm_dlc_open()
420 	rfcomm_dlc_set_timer(d, RFCOMM_CONN_TIMEOUT);  in __rfcomm_dlc_open()
425 int rfcomm_dlc_open(struct rfcomm_dlc *d, bdaddr_t *src, bdaddr_t *dst, u8 channel)  in rfcomm_dlc_open()  argument
431 	r = __rfcomm_dlc_open(d, src, dst, channel);  in rfcomm_dlc_open()
437 static void __rfcomm_dlc_disconn(struct rfcomm_dlc *d)  in __rfcomm_dlc_disconn()  argument
439 	struct rfcomm_session *s = d->session;  in __rfcomm_dlc_disconn()
441 	d->state = BT_DISCONN;  in __rfcomm_dlc_disconn()
442 	if (skb_queue_empty(&d->tx_queue)) {  in __rfcomm_dlc_disconn()
443 		rfcomm_send_disc(s, d->dlci);  in __rfcomm_dlc_disconn()
444 		rfcomm_dlc_set_timer(d, RFCOMM_DISC_TIMEOUT);  in __rfcomm_dlc_disconn()
446 		rfcomm_queue_disc(d);  in __rfcomm_dlc_disconn()
447 		rfcomm_dlc_set_timer(d, RFCOMM_DISC_TIMEOUT * 2);  in __rfcomm_dlc_disconn()
451 static int __rfcomm_dlc_close(struct rfcomm_dlc *d, int err)  in __rfcomm_dlc_close()  argument
453 	struct rfcomm_session *s = d->session;  in __rfcomm_dlc_close()
458 			d, d->state, d->dlci, err, s);  in __rfcomm_dlc_close()
460 	switch (d->state) {  in __rfcomm_dlc_close()
465 		if (test_and_clear_bit(RFCOMM_DEFER_SETUP, &d->flags)) {  in __rfcomm_dlc_close()
466 			set_bit(RFCOMM_AUTH_REJECT, &d->flags);  in __rfcomm_dlc_close()
472 	switch (d->state) {  in __rfcomm_dlc_close()
475 		__rfcomm_dlc_disconn(d);  in __rfcomm_dlc_close()
480 			__rfcomm_dlc_disconn(d);  in __rfcomm_dlc_close()
489 		rfcomm_dlc_clear_timer(d);  in __rfcomm_dlc_close()
491 		rfcomm_dlc_lock(d);  in __rfcomm_dlc_close()
492 		d->state = BT_CLOSED;  in __rfcomm_dlc_close()
493 		d->state_change(d, err);  in __rfcomm_dlc_close()
494 		rfcomm_dlc_unlock(d);  in __rfcomm_dlc_close()
496 		skb_queue_purge(&d->tx_queue);  in __rfcomm_dlc_close()
497 		rfcomm_dlc_unlink(d);  in __rfcomm_dlc_close()
503 int rfcomm_dlc_close(struct rfcomm_dlc *d, int err)  in rfcomm_dlc_close()  argument
509 	BT_DBG("dlc %p state %ld dlci %d err %d", d, d->state, d->dlci, err);  in rfcomm_dlc_close()
513 	s = d->session;  in rfcomm_dlc_close()
523 				if (d_list == d) {  in rfcomm_dlc_close()
524 					r = __rfcomm_dlc_close(d, err);  in rfcomm_dlc_close()
556 int rfcomm_dlc_send(struct rfcomm_dlc *d, struct sk_buff *skb)  in rfcomm_dlc_send()  argument
560 	if (d->state != BT_CONNECTED)  in rfcomm_dlc_send()
563 	BT_DBG("dlc %p mtu %d len %d", d, d->mtu, len);  in rfcomm_dlc_send()
565 	if (len > d->mtu)  in rfcomm_dlc_send()
568 	rfcomm_make_uih(skb, d->addr);  in rfcomm_dlc_send()
569 	skb_queue_tail(&d->tx_queue, skb);  in rfcomm_dlc_send()
571 	if (!test_bit(RFCOMM_TX_THROTTLED, &d->flags))  in rfcomm_dlc_send()
576 void rfcomm_dlc_send_noerror(struct rfcomm_dlc *d, struct sk_buff *skb)  in rfcomm_dlc_send_noerror()  argument
580 	BT_DBG("dlc %p mtu %d len %d", d, d->mtu, len);  in rfcomm_dlc_send_noerror()
582 	rfcomm_make_uih(skb, d->addr);  in rfcomm_dlc_send_noerror()
583 	skb_queue_tail(&d->tx_queue, skb);  in rfcomm_dlc_send_noerror()
585 	if (d->state == BT_CONNECTED &&  in rfcomm_dlc_send_noerror()
586 	    !test_bit(RFCOMM_TX_THROTTLED, &d->flags))  in rfcomm_dlc_send_noerror()
590 void __rfcomm_dlc_throttle(struct rfcomm_dlc *d)  in __rfcomm_dlc_throttle()  argument
592 	BT_DBG("dlc %p state %ld", d, d->state);  in __rfcomm_dlc_throttle()
594 	if (!d->cfc) {  in __rfcomm_dlc_throttle()
595 		d->v24_sig |= RFCOMM_V24_FC;  in __rfcomm_dlc_throttle()
596 		set_bit(RFCOMM_MSC_PENDING, &d->flags);  in __rfcomm_dlc_throttle()
601 void __rfcomm_dlc_unthrottle(struct rfcomm_dlc *d)  in __rfcomm_dlc_unthrottle()  argument
603 	BT_DBG("dlc %p state %ld", d, d->state);  in __rfcomm_dlc_unthrottle()
605 	if (!d->cfc) {  in __rfcomm_dlc_unthrottle()
606 		d->v24_sig &= ~RFCOMM_V24_FC;  in __rfcomm_dlc_unthrottle()
607 		set_bit(RFCOMM_MSC_PENDING, &d->flags);  in __rfcomm_dlc_unthrottle()
617 int rfcomm_dlc_set_modem_status(struct rfcomm_dlc *d, u8 v24_sig)  in rfcomm_dlc_set_modem_status()  argument
620 			d, d->state, v24_sig);  in rfcomm_dlc_set_modem_status()
622 	if (test_bit(RFCOMM_RX_THROTTLED, &d->flags))  in rfcomm_dlc_set_modem_status()
627 	d->v24_sig = v24_sig;  in rfcomm_dlc_set_modem_status()
629 	if (!test_and_set_bit(RFCOMM_MSC_PENDING, &d->flags))  in rfcomm_dlc_set_modem_status()
635 int rfcomm_dlc_get_modem_status(struct rfcomm_dlc *d, u8 *v24_sig)  in rfcomm_dlc_get_modem_status()  argument
638 			d, d->state, d->v24_sig);  in rfcomm_dlc_get_modem_status()
640 	*v24_sig = d->v24_sig;  in rfcomm_dlc_get_modem_status()
711 	struct rfcomm_dlc *d, *n;  in rfcomm_session_close()  local
718 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_session_close()
719 		d->state = BT_CLOSED;  in rfcomm_session_close()
720 		__rfcomm_dlc_close(d, err);  in rfcomm_session_close()
856 static int rfcomm_queue_disc(struct rfcomm_dlc *d)  in rfcomm_queue_disc()  argument
861 	BT_DBG("dlc %p dlci %d", d, d->dlci);  in rfcomm_queue_disc()
868 	cmd->addr = d->addr;  in rfcomm_queue_disc()
873 	skb_queue_tail(&d->tx_queue, skb);  in rfcomm_queue_disc()
917 static int rfcomm_send_pn(struct rfcomm_session *s, int cr, struct rfcomm_dlc *d)  in rfcomm_send_pn()  argument
924 	BT_DBG("%p cr %d dlci %d mtu %d", s, cr, d->dlci, d->mtu);  in rfcomm_send_pn()
936 	pn->dlci        = d->dlci;  in rfcomm_send_pn()
937 	pn->priority    = d->priority;  in rfcomm_send_pn()
952 		pn->mtu = cpu_to_le16(d->mtu);  in rfcomm_send_pn()
1173 		struct rfcomm_dlc *d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_ua()  local
1174 		if (!d) {  in rfcomm_recv_ua()
1179 		switch (d->state) {  in rfcomm_recv_ua()
1181 			rfcomm_dlc_clear_timer(d);  in rfcomm_recv_ua()
1183 			rfcomm_dlc_lock(d);  in rfcomm_recv_ua()
1184 			d->state = BT_CONNECTED;  in rfcomm_recv_ua()
1185 			d->state_change(d, 0);  in rfcomm_recv_ua()
1186 			rfcomm_dlc_unlock(d);  in rfcomm_recv_ua()
1188 			rfcomm_send_msc(s, 1, dlci, d->v24_sig);  in rfcomm_recv_ua()
1192 			d->state = BT_CLOSED;  in rfcomm_recv_ua()
1193 			__rfcomm_dlc_close(d, 0);  in rfcomm_recv_ua()
1227 		struct rfcomm_dlc *d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_dm()  local
1228 		if (d) {  in rfcomm_recv_dm()
1229 			if (d->state == BT_CONNECT || d->state == BT_CONFIG)  in rfcomm_recv_dm()
1234 			d->state = BT_CLOSED;  in rfcomm_recv_dm()
1235 			__rfcomm_dlc_close(d, err);  in rfcomm_recv_dm()
1256 		struct rfcomm_dlc *d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_disc()  local
1257 		if (d) {  in rfcomm_recv_disc()
1260 			if (d->state == BT_CONNECT || d->state == BT_CONFIG)  in rfcomm_recv_disc()
1265 			d->state = BT_CLOSED;  in rfcomm_recv_disc()
1266 			__rfcomm_dlc_close(d, err);  in rfcomm_recv_disc()
1283 void rfcomm_dlc_accept(struct rfcomm_dlc *d)  in rfcomm_dlc_accept()  argument
1285 	struct sock *sk = d->session->sock->sk;  in rfcomm_dlc_accept()
1288 	BT_DBG("dlc %p", d);  in rfcomm_dlc_accept()
1290 	rfcomm_send_ua(d->session, d->dlci);  in rfcomm_dlc_accept()
1292 	rfcomm_dlc_clear_timer(d);  in rfcomm_dlc_accept()
1294 	rfcomm_dlc_lock(d);  in rfcomm_dlc_accept()
1295 	d->state = BT_CONNECTED;  in rfcomm_dlc_accept()
1296 	d->state_change(d, 0);  in rfcomm_dlc_accept()
1297 	rfcomm_dlc_unlock(d);  in rfcomm_dlc_accept()
1299 	if (d->role_switch)  in rfcomm_dlc_accept()
1302 	rfcomm_send_msc(d->session, 1, d->dlci, d->v24_sig);  in rfcomm_dlc_accept()
1305 static void rfcomm_check_accept(struct rfcomm_dlc *d)  in rfcomm_check_accept()  argument
1307 	if (rfcomm_check_security(d)) {  in rfcomm_check_accept()
1308 		if (d->defer_setup) {  in rfcomm_check_accept()
1309 			set_bit(RFCOMM_DEFER_SETUP, &d->flags);  in rfcomm_check_accept()
1310 			rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_check_accept()
1312 			rfcomm_dlc_lock(d);  in rfcomm_check_accept()
1313 			d->state = BT_CONNECT2;  in rfcomm_check_accept()
1314 			d->state_change(d, 0);  in rfcomm_check_accept()
1315 			rfcomm_dlc_unlock(d);  in rfcomm_check_accept()
1317 			rfcomm_dlc_accept(d);  in rfcomm_check_accept()
1319 		set_bit(RFCOMM_AUTH_PENDING, &d->flags);  in rfcomm_check_accept()
1320 		rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_check_accept()
1326 	struct rfcomm_dlc *d;  in rfcomm_recv_sabm()  local
1342 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_sabm()
1343 	if (d) {  in rfcomm_recv_sabm()
1344 		if (d->state == BT_OPEN) {  in rfcomm_recv_sabm()
1346 			rfcomm_check_accept(d);  in rfcomm_recv_sabm()
1353 	if (rfcomm_connect_ind(s, channel, &d)) {  in rfcomm_recv_sabm()
1354 		d->dlci = dlci;  in rfcomm_recv_sabm()
1355 		d->addr = __addr(s->initiator, dlci);  in rfcomm_recv_sabm()
1356 		rfcomm_dlc_link(s, d);  in rfcomm_recv_sabm()
1358 		rfcomm_check_accept(d);  in rfcomm_recv_sabm()
1366 static int rfcomm_apply_pn(struct rfcomm_dlc *d, int cr, struct rfcomm_pn *pn)  in rfcomm_apply_pn()  argument
1368 	struct rfcomm_session *s = d->session;  in rfcomm_apply_pn()
1371 			d, d->state, d->dlci, pn->mtu, pn->flow_ctrl, pn->credits);  in rfcomm_apply_pn()
1375 		d->cfc = RFCOMM_CFC_ENABLED;  in rfcomm_apply_pn()
1376 		d->tx_credits = pn->credits;  in rfcomm_apply_pn()
1378 		d->cfc = RFCOMM_CFC_DISABLED;  in rfcomm_apply_pn()
1379 		set_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_apply_pn()
1383 		s->cfc = d->cfc;  in rfcomm_apply_pn()
1385 	d->priority = pn->priority;  in rfcomm_apply_pn()
1387 	d->mtu = __le16_to_cpu(pn->mtu);  in rfcomm_apply_pn()
1389 	if (cr && d->mtu > s->mtu)  in rfcomm_apply_pn()
1390 		d->mtu = s->mtu;  in rfcomm_apply_pn()
1398 	struct rfcomm_dlc *d;  in rfcomm_recv_pn()  local
1406 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_pn()
1407 	if (d) {  in rfcomm_recv_pn()
1410 			rfcomm_apply_pn(d, cr, pn);  in rfcomm_recv_pn()
1411 			rfcomm_send_pn(s, 0, d);  in rfcomm_recv_pn()
1414 			switch (d->state) {  in rfcomm_recv_pn()
1416 				rfcomm_apply_pn(d, cr, pn);  in rfcomm_recv_pn()
1418 				d->state = BT_CONNECT;  in rfcomm_recv_pn()
1419 				rfcomm_send_sabm(s, d->dlci);  in rfcomm_recv_pn()
1431 		if (rfcomm_connect_ind(s, channel, &d)) {  in rfcomm_recv_pn()
1432 			d->dlci = dlci;  in rfcomm_recv_pn()
1433 			d->addr = __addr(s->initiator, dlci);  in rfcomm_recv_pn()
1434 			rfcomm_dlc_link(s, d);  in rfcomm_recv_pn()
1436 			rfcomm_apply_pn(d, cr, pn);  in rfcomm_recv_pn()
1438 			d->state = BT_OPEN;  in rfcomm_recv_pn()
1439 			rfcomm_send_pn(s, 0, d);  in rfcomm_recv_pn()
1575 	struct rfcomm_dlc *d;  in rfcomm_recv_msc()  local
1580 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_msc()
1581 	if (!d)  in rfcomm_recv_msc()
1585 		if (msc->v24_sig & RFCOMM_V24_FC && !d->cfc)  in rfcomm_recv_msc()
1586 			set_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_recv_msc()
1588 			clear_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_recv_msc()
1590 		rfcomm_dlc_lock(d);  in rfcomm_recv_msc()
1592 		d->remote_v24_sig = msc->v24_sig;  in rfcomm_recv_msc()
1594 		if (d->modem_status)  in rfcomm_recv_msc()
1595 			d->modem_status(d, msc->v24_sig);  in rfcomm_recv_msc()
1597 		rfcomm_dlc_unlock(d);  in rfcomm_recv_msc()
1601 		d->mscex |= RFCOMM_MSCEX_RX;  in rfcomm_recv_msc()
1603 		d->mscex |= RFCOMM_MSCEX_TX;  in rfcomm_recv_msc()
1670 	struct rfcomm_dlc *d;  in rfcomm_recv_data()  local
1674 	d = rfcomm_dlc_get(s, dlci);  in rfcomm_recv_data()
1675 	if (!d) {  in rfcomm_recv_data()
1680 	if (pf && d->cfc) {  in rfcomm_recv_data()
1683 		d->tx_credits += credits;  in rfcomm_recv_data()
1684 		if (d->tx_credits)  in rfcomm_recv_data()
1685 			clear_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_recv_data()
1688 	if (skb->len && d->state == BT_CONNECTED) {  in rfcomm_recv_data()
1689 		rfcomm_dlc_lock(d);  in rfcomm_recv_data()
1690 		d->rx_credits--;  in rfcomm_recv_data()
1691 		d->data_ready(d, skb);  in rfcomm_recv_data()
1692 		rfcomm_dlc_unlock(d);  in rfcomm_recv_data()
1771 	struct rfcomm_dlc *d, *n;  in rfcomm_process_connect()  local
1775 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_process_connect()
1776 		if (d->state == BT_CONFIG) {  in rfcomm_process_connect()
1777 			d->mtu = s->mtu;  in rfcomm_process_connect()
1778 			if (rfcomm_check_security(d)) {  in rfcomm_process_connect()
1779 				rfcomm_send_pn(s, 1, d);  in rfcomm_process_connect()
1781 				set_bit(RFCOMM_AUTH_PENDING, &d->flags);  in rfcomm_process_connect()
1782 				rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_process_connect()
1791 static int rfcomm_process_tx(struct rfcomm_dlc *d)  in rfcomm_process_tx()  argument
1797 			d, d->state, d->cfc, d->rx_credits, d->tx_credits);  in rfcomm_process_tx()
1800 	if (test_and_clear_bit(RFCOMM_MSC_PENDING, &d->flags))  in rfcomm_process_tx()
1801 		rfcomm_send_msc(d->session, 1, d->dlci, d->v24_sig);  in rfcomm_process_tx()
1803 	if (d->cfc) {  in rfcomm_process_tx()
1806 		if (!test_bit(RFCOMM_RX_THROTTLED, &d->flags) &&  in rfcomm_process_tx()
1807 				d->rx_credits <= (d->cfc >> 2)) {  in rfcomm_process_tx()
1808 			rfcomm_send_credits(d->session, d->addr, d->cfc - d->rx_credits);  in rfcomm_process_tx()
1809 			d->rx_credits = d->cfc;  in rfcomm_process_tx()
1814 		d->tx_credits = 5;  in rfcomm_process_tx()
1817 	if (test_bit(RFCOMM_TX_THROTTLED, &d->flags))  in rfcomm_process_tx()
1818 		return skb_queue_len(&d->tx_queue);  in rfcomm_process_tx()
1820 	while (d->tx_credits && (skb = skb_dequeue(&d->tx_queue))) {  in rfcomm_process_tx()
1821 		err = rfcomm_send_frame(d->session, skb->data, skb->len);  in rfcomm_process_tx()
1823 			skb_queue_head(&d->tx_queue, skb);  in rfcomm_process_tx()
1827 		d->tx_credits--;  in rfcomm_process_tx()
1830 	if (d->cfc && !d->tx_credits) {  in rfcomm_process_tx()
1833 		set_bit(RFCOMM_TX_THROTTLED, &d->flags);  in rfcomm_process_tx()
1836 	return skb_queue_len(&d->tx_queue);  in rfcomm_process_tx()
1841 	struct rfcomm_dlc *d, *n;  in rfcomm_process_dlcs()  local
1845 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_process_dlcs()
1846 		if (test_bit(RFCOMM_TIMED_OUT, &d->flags)) {  in rfcomm_process_dlcs()
1847 			__rfcomm_dlc_close(d, ETIMEDOUT);  in rfcomm_process_dlcs()
1851 		if (test_bit(RFCOMM_ENC_DROP, &d->flags)) {  in rfcomm_process_dlcs()
1852 			__rfcomm_dlc_close(d, ECONNREFUSED);  in rfcomm_process_dlcs()
1856 		if (test_and_clear_bit(RFCOMM_AUTH_ACCEPT, &d->flags)) {  in rfcomm_process_dlcs()
1857 			rfcomm_dlc_clear_timer(d);  in rfcomm_process_dlcs()
1858 			if (d->out) {  in rfcomm_process_dlcs()
1859 				rfcomm_send_pn(s, 1, d);  in rfcomm_process_dlcs()
1860 				rfcomm_dlc_set_timer(d, RFCOMM_CONN_TIMEOUT);  in rfcomm_process_dlcs()
1862 				if (d->defer_setup) {  in rfcomm_process_dlcs()
1863 					set_bit(RFCOMM_DEFER_SETUP, &d->flags);  in rfcomm_process_dlcs()
1864 					rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_process_dlcs()
1866 					rfcomm_dlc_lock(d);  in rfcomm_process_dlcs()
1867 					d->state = BT_CONNECT2;  in rfcomm_process_dlcs()
1868 					d->state_change(d, 0);  in rfcomm_process_dlcs()
1869 					rfcomm_dlc_unlock(d);  in rfcomm_process_dlcs()
1871 					rfcomm_dlc_accept(d);  in rfcomm_process_dlcs()
1874 		} else if (test_and_clear_bit(RFCOMM_AUTH_REJECT, &d->flags)) {  in rfcomm_process_dlcs()
1875 			rfcomm_dlc_clear_timer(d);  in rfcomm_process_dlcs()
1876 			if (!d->out)  in rfcomm_process_dlcs()
1877 				rfcomm_send_dm(s, d->dlci);  in rfcomm_process_dlcs()
1879 				d->state = BT_CLOSED;  in rfcomm_process_dlcs()
1880 			__rfcomm_dlc_close(d, ECONNREFUSED);  in rfcomm_process_dlcs()
1884 		if (test_bit(RFCOMM_SEC_PENDING, &d->flags))  in rfcomm_process_dlcs()
1890 		if ((d->state == BT_CONNECTED || d->state == BT_DISCONN) &&  in rfcomm_process_dlcs()
1891 						d->mscex == RFCOMM_MSCEX_OK)  in rfcomm_process_dlcs()
1892 			rfcomm_process_tx(d);  in rfcomm_process_dlcs()
2102 	struct rfcomm_dlc *d, *n;  in rfcomm_security_cfm()  local
2110 	list_for_each_entry_safe(d, n, &s->dlcs, list) {  in rfcomm_security_cfm()
2111 		if (test_and_clear_bit(RFCOMM_SEC_PENDING, &d->flags)) {  in rfcomm_security_cfm()
2112 			rfcomm_dlc_clear_timer(d);  in rfcomm_security_cfm()
2114 				set_bit(RFCOMM_ENC_DROP, &d->flags);  in rfcomm_security_cfm()
2119 		if (d->state == BT_CONNECTED && !status && encrypt == 0x00) {  in rfcomm_security_cfm()
2120 			if (d->sec_level == BT_SECURITY_MEDIUM) {  in rfcomm_security_cfm()
2121 				set_bit(RFCOMM_SEC_PENDING, &d->flags);  in rfcomm_security_cfm()
2122 				rfcomm_dlc_set_timer(d, RFCOMM_AUTH_TIMEOUT);  in rfcomm_security_cfm()
2124 			} else if (d->sec_level == BT_SECURITY_HIGH ||  in rfcomm_security_cfm()
2125 				   d->sec_level == BT_SECURITY_FIPS) {  in rfcomm_security_cfm()
2126 				set_bit(RFCOMM_ENC_DROP, &d->flags);  in rfcomm_security_cfm()
2131 		if (!test_and_clear_bit(RFCOMM_AUTH_PENDING, &d->flags))  in rfcomm_security_cfm()
2134 		if (!status && hci_conn_check_secure(conn, d->sec_level))  in rfcomm_security_cfm()
2135 			set_bit(RFCOMM_AUTH_ACCEPT, &d->flags);  in rfcomm_security_cfm()
2137 			set_bit(RFCOMM_AUTH_REJECT, &d->flags);  in rfcomm_security_cfm()
2156 		struct rfcomm_dlc *d;  in rfcomm_dlc_debugfs_show()  local
2157 		list_for_each_entry(d, &s->dlcs, list) {  in rfcomm_dlc_debugfs_show()
2160 				   d->state, d->dlci, d->mtu,  in rfcomm_dlc_debugfs_show()
2161 				   d->rx_credits, d->tx_credits);  in rfcomm_dlc_debugfs_show()