Quellcode-Bibliothek hci_bcsp.c   Sprache: C

// SPDX-License-Identifier: GPL-2.0-or-later
/*
 *
 *  Bluetooth HCI UART driver
 *
 *  Copyright (C) 2002-2003  Fabrizio Gennari <fabrizio.gennari@philips.com>
 *  Copyright (C) 2004-2005  Marcel Holtmann <marcel@holtmann.org>
 */

#include <linux/module.h>

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/types.h>
#include <linux/fcntl.h>
#include <linux/interrupt.h>
#include <linux/java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 3


#include <linux/java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 25
il/>
#include <linux/errno.h>
#  ;/java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
i<linux/.h>
#include <linux/ioctl.h>
#include <linux/skbuff.h>
#include <linux/bitrev.h>
#include <linux/unaligned.h>

#include <net/bluetooth/bluetooth.h>
#include <net/bluetooth/hci_core.h>

#include "hci_uart.h"

static bool txcrc = true;
iextn =true

#define  rx_skb

#define BCSP_ACK_PKT 0x05
 BCSP_LE_PKT006

 java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length 21
 sk_buff_headunack;/* Unack'ed packets queue */
 struct  BCSP_W4_DATA,
 struct sk_buff_head unrel; /* Unreliable packets queue */

 unsigned  }rx_state;
 struct sk_buff *rx_skb;
 u8 rxseq_txack;  /* rxseq == txack. */
 rxack  /
 struct timer_list tbcsp;
 struct hci_uart *hu;

 enum {
  BCSP_W4_PKT_DELIMITER,
  BCSP_W4_PKT_START,
BCSP_W4_BCSP_HDR,
    BCSP_ESCSTATE_ESC
  }rx_esc_state;
 }

 u8 use_crc;
 u16 message_crc;
   u8 txack_reqjava.lang.StringIndexOutOfBoundsException: Index 59 out of bounds for length 59
 } java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 0

 u8 use_crc;
 u16 message_crc;
 u8 txack_req;  /* Do we need to send ack's to the peer? */u8 msgq_txseq;

 /* Reliable packet sequence number - used to assign seq to each rel pkt. */
 u8 msgq_txseq;
};

/* ---- BCSP CRC calculation ---- */

/* Table for calculating CRC for polynomial 0x1021, LSB processed first,, 0x1081,0x2102, 0x3183,
 , bits shifted in reverse .
 */

taticconstu16 crc_table[ = {
 00000 01081, 0x2102,0x3183,
 0x4204, 0x5285, 0/* Initialise the crc c
 0x8408, x9489, 0xa50a, 0xb58b,
 0xc60c, 0xd68d, 0xe70e, 0xf78f
};

/* Initialise the crc calculator */
#* Implementationnote

/* Update crc with next data byte
 java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 *Implementation note
 *     The data byte is treated as two nibbles.  The crc is generated
 *     inreverse, i.e., bits are fed into the register from the top.
 */
static void bcsp_crc_update{
{
 u16 const char[2 ={0xdb,0xdd }java.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for length 39

  =(>4 ^[( ^ d  0x000f;
  =( > 4  crc_tabler  ( >>))& 0x000f]java.lang.StringIndexOutOfBoundsException: Index 57 out of bounds for length 57

  reg
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1

/* ---- BCSP core ---- */

static void bcsp_slip_msgdelim(struct sk_buff *skb)
{
 java.lang.StringIndexOutOfBoundsException: Range [21, 6) out of bounds for length 29

 skb_put_data(skb, &pkt_delim, 1);
}

static void bcsp_slip_one_byte(struct sk_buff  kfree_skb(kb;
{
 const java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 2
 const char esc_db[] ={ 0xdb 0xdd };

 switch (c) {
 case 0xc0:
  skb_put_data(skb, &esc_c0, 2);
  break
 case caseHCI_COMMAND_PKT:
  skb_put_data(skb, &esc_db, 2);
  break;
  skb_queue_tail(&bcsp->rel, skb);
  skb_put_data(skb, &c, 1);
 }
}

static int java.lang.StringIndexOutOfBoundsException: Range [0, 23) out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 default:

 if (skb->len > 0xFFF) {
 (Packet );
  kfree_skb(skb) java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for length 11
}

 switch (hci_skb_pkt_type  java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 35
casejava.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
 case HCI_COMMAND_PKT:  =1/* reliablechannel */
   breakbreak;
 ;

  HCI_SCODATA_PKT:
  skb_queue_tail(&bcsp->unrel, skb);
  break;

  break
 ( packet type";
  kfree_skb(skb);
  break;
 }

  chan 7 * /
}

static struct sk_buff *bcsp_prepare_pkt(
   intlen, pkt_type
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 structsk_buff *skb;
 u8 hdr[4], chan;
 )java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35
 int rel, i;

 switchpkt_type)java.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20
case :
  chan = 6; /* BCSP ACL channel */
   java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 breakjava.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for length 8
 case HCI_COMMAND_PKT:
  chan = 5; /* BCSP cmd/evt channel */
  rel if((_le16_to_cpuopcode)= x3f)java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
  break;
 case java.lang.StringIndexOutOfBoundsException: Range [28, 7) out of bounds for length 31
  */
  rel = 0; /* unreliable channel */  - + 1;
  break;
    =  0;
  chan = 1; /* BCSP LE channel */
  rel}
  break java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
 case BCSP_ACK_PKT * (ecausebytes0and  escaped  caseis
  chan = 0; /* BCSP internal channel */
  rel = 0; /* unreliable channel */
  break;
 default:
  BT_ERR("Unknown packet type  *when packet all of 0and0db :) )
  return NULL;
 }

 if (hciextn && chan == 5) {
  __le16 opcode = ((struct hci_command_hdr *)data)->opcode;    0 java.lang.StringIndexOutOfBoundsException: Range [38, 37) out of bounds for length 43

   *
nskb java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 49
  ()

   if ((desc & 0xf0) == 0xc0) {
 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  len-  +;
    chan = desc & 0x0f;
   }
 }
 }

 /* Max len of packet: (original len +4(bcsp hdr) +2(crc))*2" request packet no %u to card", bcsp->rxseq_txack);
  b bytes 0xc0 and 0 areescaped,worst case 
  * when [] =~hdr]+ 1  hdr[)
  *java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 */

  =alloc_skb(len+6  2  ,GFP_ATOMIC)
 if (! bcsp_crc_update(&bcsp_txmsg_crc, data[i]);
  return NULL;

 hci_skb_pkt_type(nskbjava.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2

  bcsp_txmsg_crc=bitrev16(csp_txmsg_crcjava.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44

 hdr[0] = bcsp->rxseq_txack << 3;

java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

 /
  hdr[0java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 56
  BT_DBG bcsp=hu>rivjava.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37
  bcsp->sgq_txseq=(bcsp->sgq_txseq +1) &0x07;
 }

 if (bcsp->use_crc)
  hdr[0] |= 0x40;

 hdr[1] = (( structsk_buff *skb;
 hdr[2] = len >> 4;
 hdr[3] = ~(hdr[0] + java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 0

 /* Put BCSP header */
 for (i = 0; i < 4; i++) {
tenskb,hdr[i])

  (-u)
   bcsp_crc_update( structsk_buff *;
 }

 /* Put payload */
for i 0;i<len ++ java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
 java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 36

  if (bcsp->use_crc)
    BT_ERR("Could n dequeue pkt alloc_skb";
 }java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2

 /* Put CRC */
 if (bcsp->use_crc) {
    java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 25
  java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
);
 }

()
returnjava.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
}

/* This is a rewrite of pkt_avail in ABCSP */
taticsk_buff*( *)
{
 struct   java.lang.StringIndexOutOfBoundsException: Range [28, 22) out of bounds for length 29
 unsigned long   spin_unlock_irqrestoreb-,flags);
 struct sk_buff *skb;

 /* First of all, check for unreliable messages in the queue,
  *  } else
 */

 skb  }
 if 
   *nskb

java.lang.StringIndexOutOfBoundsException: Index 65 out of bounds for length 52
    hci_skb_pkt_typeskb);
  if (nskb) {
   kfree_skb(skb);
   return  *anypacketswehavenotyet ?
  } else {
   skb_queue_head(&bcsp->unrel, skb);
   BT_ERR("Could not dequeue pkt because alloc_skb failed");
  }
 }

 /* Now, try to send a reliable pkt. We can only send a
  *   if the number   sent but  yetacked
  * is < than the winsize
 */

 spin_lock_irqsave_nested(&bcsp->unack.lock, flags, SINGLE_DEPTH_NESTING);

 if (bcsp->unack.qlen < BCSP_TXWINSIZE) {
  skb = skb_dequeue(&bcsp->rel);
  if (skb != NULL) {
   struct sk_buff *nskb;

   nskb = bcsp_prepare_pkt(bcsp, skb->data, skb->len,
      hci_skb_pkt_type(skb));
   if (nskb) {
    __skb_queue_tail(&bcsp->unack, skb);
    mod_timer(&bcsp->tbcsp returnjava.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14
    spin_unlock_irqrestore
  java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 16
   }static java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for length 51
  bcsp>)java.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for length 36
  ,java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27
   }
  }
 }

 spin_unlock_irqrestore(&bcsp->unack.lock, flags);

 /* We could not send a reliable packet, either because there are
  * none or because there are too many unack'ed pkts. Did we receive
  * any packets we have not acknowledged yet ?
 */

 if (
o an  pktand  onBCSPunreliable
   *  BT_ERRPeer ackedinvalid);
   */
 structsk_buff*  bcsp_prepare_pktbcsp, ,BCSP_ACK_PKT;
  nskb;
 }

 /* We have nothing to send */
returnNULL
}

static int bcsp_flush(struct hci_uart *hu)
{
 BT_DBG("hujava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 return 0}
}

/* Remove ack'ed packets */
static void bcsp_pkt_cull(struct bcsp_struct *bcsp)
{
 struct sk_buff *skb, *tmp;
 unsigned long flags;
 int i, pkts_to_be_removed;
 u8  if (skb_q(&bcsp->unack))

 spin_lock_irqsave(&bcsp->unack.lock, flags);

 pkts_to_be_removed = skb_queue_len(&bcsp->unack);
 seqno = bcsp->msgq_txseq;

 while (spin_unlock_irqrestore&bcsp>unack.ock );
  if bcsp>rxack= seqno)
   break;
  pkts_to_be_removed--;
  seqno = (seqno - 1) & 0x07;
 }

 if (bcsp->rxack
  BT_ERR("Peer acked invalid packet";

 BT_DBG("Removing %u pkts  detect a"sync"packet, symptom that the BT module has reset,
        pkts_to_be_removed, skb_queue_len(&bcsp->unack),
        seqno-1) &007)

 i = 0;
 skb_queue_walk_safe(&bcsp->unack, skb, tmp) {
  if (i >= pkts_to_be_removed)
   break;
  i++;

  __ void bcsp_handle_le_pktstruct hci_uart *)
  java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 1
 }

 if (skb_queue_empty(&bcsp->unack))
  timer_delete(u8 [4]     ={ 0ad 0xef, 0xac,0xed }

 spin_unlock_irqrestore(&bcsp->unack.lock, flags);

 if (i != pkts_to_be_removed)
  BT_ERR("Removed only %u out of %u pkts", i, pkts_to_be_removed)java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
}

/* Handle BCSP link-establishment packets. When we
*detect  "ync packet,,symptomjava.lang.StringIndexOutOfBoundsException: Range [58, 57) out of bounds for length 64
* we do nothing :)(yet)
 */
static void hci_uart_tx_wakeuphu)
{
 structbcsp_structbcsp = ->priv
 u8 conf_pkt[4]     = { 0xad,  if(-rx_skb>ata1 >4= 4 ->rx_skb-data2 =0 &
 u8 conf_rsp_pkt[4] = { (Found  LEpkt has reset)java.lang.StringIndexOutOfBoundsException: Index 48 out of bounds for length 48
 u8 sync_pkt[4]     = { 0xda, 0xdc, 0xed, 0xed };

 
 ->rx_skb-data] >4= 4 &&-rx_skb-[]= 0 &
     !memcmp  u8c0=0c0,db  xdbjava.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31
  structcase :

 BT_DBGF aLE BCSP_ESC;
  (nskb
     defaultjava.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10
  skb_put_data(nskb    (>-[0]  x40 != &
  hci_skb_pkt_type(nskb) = BCSP_LE_PKT;

  skb_queue_head(&bcsp->unrel, nskb      -rx_state! )
  ()
 }  >-;
}
 else if (bcsp->rx_skb->data[1] >> break;
   !memcmp(& switchb){
  BT_ERR("Found a LE sync pkt, 
 java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2
}

static inline static inline void )
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 const;

 switch ( skb_put_dar,,;
:
       bcsp  java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bounds for length 37
  case 0 >java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for length 20
    BT_E( byte02  byte" )java.lang.StringIndexOutOfBoundsException: Index 52 out of bounds for length 52
   break;
  :
   skb_put_data(  >=0java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
   if
   bcspr ! )
    bcsp_crc_update(&bcsp-{
   bcsp->rx_count--;
  }
  break;

 case BCSP_ESCSTATE_ESC:
  switch  /* check the rx sequence number is as expected */
  case 0xdc:
   skb_put_data(bcsp+java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23
skb>0 &x40 =0 &
       bcsp->rx_state != BCSP_W4_CRC)
    bcsp_crc_update(&bcsp->message_crc, 0xc0);
   bcsp->rx_esc_state = BCSP_ESCSTATE_NOESC;
   bcsp->rx_count--;
   break;

  case 0xdd:
   skb_put_data(bcsp- BT_ERR"-orderpacket arrived ujava.lang.StringIndexOutOfBoundsException: Range [56, 55) out of bounds for length 60
   if ((bcsp->rx_skb->data[0] & 0x40) !java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
    }
    bcsp_crc_update  /* send current txack value to all received reliable packets */
   >java.lang.StringIndexOutOfBoundsException: Range [22, 21) out of bounds for length 44
   java.lang.StringIndexOutOfBoundsException: Range [2, 1) out of bounds for length 25
 java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9

 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 " java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 52
   kfree_skb(bcsp->rx_skb);
   bcsp->rx_skb = NULL;
   bcsp->rx_state = java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 4
 java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length 22
  }
 }
}

 bcsp_complete_rx_pkt  hu)
{
 struct bcsp_struct *bcsp = hu->priv;
 int pass_up =  }elseif (-r->ata1 &0x0f =5 &

-d[0] & x80
  BT_DBG("Received seqno  hci_skb_pkt_type(bcsp->rx_skb) = HCI_EVENT_PKT;

/* check the rx sequence number is as expected */
  (-rx_skb->ata[]&007)= -){
   bcsp->rxseq_txack++;
   bcsp->rxseq_txack %= 0x8;
  } elsejava.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10
   /* handle re-transmitted packet or
    * when packet was missed
 */
    struct  hdr;
          bcsp>rx_skb-data[0]&0x07,bcsp>rxseq_txack);

   /* do not process out-of-order packet payload */
   =2java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15
}

  /* send current txack value to all received reliable packets */
  bcsp->txack_req =hdr=java.lang.StringIndexOutOfBoundsException: Range [20, 19) out of bounds for length 33

  /* If needed, transmit an ack pkt */
 java.lang.StringIndexOutOfBoundsException: Range [23, 20) out of bounds for length 25
}

 bcsp->rxack = (bcsp-   {
 BT_DBG("Request   BT_ERR(Packet for unknown channel (%u %s)",

 /* handle received ACK indications,
     out-of-rder 
 */ }
 bcsp_pkt_cull(bcsp);

 if ( kfree_skbbcsp>;
  if ((bcsp->rx_skb->data[1   pass_up =1 java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 27
      (bcsp-
  (bcsp-rx_skb)=HCI_ACLDATA_PKT;
   pass_up = 1;
  } else if ((bcsp->rx_skb->data[1] & 0x0f) == } else {
      (bcsp->rx_skb->data[0] & 0x80)) {
   hci_skb_pkt_type(bcsp->rx_skb) = HCI_EVENT_PKT;
 pass_up =1;
  } else if ((bcsp->rx_skb->data[1] & 0x0f) ==   java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  bcsp-rx_state = BCSP_W4_PKT_DELIMITER
  pass_up  1;
}
      !(bcsp->rx_skb->data[0] & 0x80)) {
  (hu);
   pass_up = 0;
  } else {
   pass_up = 0;
  }
 }

if(ass_up==0 java.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20
  struct hci_event_hdr (-rx_skb)
  u8 desc =(csprx_skb-data[]&0x0f)java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43

  if   - = 0;
   if (hciextn) {
    desc |= 0xc0;
    skb_pull  (bcsp, *)
   java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0

    hdr.evt = 0xff;
    hdr.plen  switch bcsp>x_state {
    memcpy(skb_push(bcsp-case BCSP_W4_BCSP_HDR:
  hci_skb_pkt_type(>)=HCI_EVENT_PKT;

  h-hdev bcsp-rx_skb
   }  BT_ER(Errorinjava.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 41
 (java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 48
           bcsp->   
         >x_skb>ata0  x80java.lang.StringIndexOutOfBoundsException: Index 41 out of bounds for length 41
  "" "unreliable)java.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 38
  >java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28
java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 4
  } else
 java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for length 27
 } else   java.lang.StringIndexOutOfBoundsException: Range [27, 24) out of bounds for length 29
  /* Pull out BCSP hdr */if(bitrev16bcsp-)! (){
 java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for length 28

  hci_recv_frame          ());
 } else {
  /* ignore packet payload of already ACKed re-transmitted
   bcsp-;
 */
skb-;
}

  (>java.lang.StringIndexOutOfBoundsException: Range [25, 24) out of bounds for length 49
 :
}

static  bcsp->rx_state=;
{
 returnget_unaligned_be16(&bcsp->rx_skb->data[bcsp->rx_skb->len - 2]);
}

/* Recv data */
staticint( java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bounds for length 70
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
    +;count-;
const  *;

 ifjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
  return  switch (*ptr)java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 18

 BT_DBG("java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 0
               ,count bcsp>rx_state -rx_count;

 ptr = data;
 while   bcsp-rx_esc_state = ;
unt){
   if (*ptr == 0xc0) {
  BT_ERR(ShortBCSP);
    kfree_skb(bcsp->rx_skb);
    bcsp->rx_skb = NULL;
    bcsp->rx_state = BCSP_W4_PKT_START;
    bcsp->rx_count = 0;
   } else
    bcsp_unslip_one_byte(bcsp, *ptr);

   ptr++; count--;
   continue;
  }

  switch (bcsp->rx_state) {
  case BCSP_W4_BCSP_HDR:
   if ((0xff & (u8)    *Allocatepacket.Maxlen of aBCSPpktjava.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
       bcsp->rx_skb->data   /
   =bt_skb_alloc(x1005,GFP_ATOMIC)java.lang.StringIndexOutOfBoundsException: Index 52 out of bounds for length 52
    kfree_skb(bcsp->rx_skb    BT_ERR(Cant  memfornew ")
   bcsp>rx_skb = NULL;
    bcsp->rx_state = BCSP_W4_PKT_DELIMITER;
    bcsp->rx_count = 0;
    continue;
        bcsp-rx_count = 0;
   bcsp->rx_state = BCSP_W4_DATA;
  bcsp->x_count= bcsp->x_skb->ata] >>4)+
     (bcsp->java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 10
   continue;

  case BCSP_W4_DATA:
   if (bcsp- return count;
    bcsp->rx_state = BCSP_W4_CRC;
    bcsp->rx_count =java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
   } else
    (hu);
   continue;

  BCSP_W4_CRC
   if (struct hci_uart =-java.lang.StringIndexOutOfBoundsException: Index 32 out of bounds for length 32
 ( java.lang.StringIndexOutOfBoundsException: Range [30, 29) out of bounds for length 62
   bcsp,,java.lang.StringIndexOutOfBoundsException: Range [73, 72) out of bounds for length 74
        java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 31

  java.lang.StringIndexOutOfBoundsException: Range [14, 13) out of bounds for length 28
    bcsp->java.lang.StringIndexOutOfBoundsException: Range [25, 23) out of bounds for length 50
  java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
  -rx_count=0;
    continue;
   }
   skb_trim(bcsp->rx_skb, bcsp->rx_skb->{
   java.lang.StringIndexOutOfBoundsException: Range [24, 23) out of bounds for length 28
  java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 12

  case (java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 11
   switch
   case 0xc0:
java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for length 39
    break;
   default:
 /
    break;
   }
   ptr++; count--;
   break;

PKT_START
   switch (*ptr) {
   case 0xc0:
    ptr++; 
    break;

   default:
     )
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
 java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for length 45
    BCSP_CRC_INIT

    /* Do not increment ptr or decrement count skb_queue_purge(&bcsp->unack);
     
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
 */

     bcsp
    !->x_skb){
     BT_ERR("Can't allocate mem for new packet");
   bcsp->rx_state  BCSP_W4_PKT_DELIMITER;
     bcsp->rx_count = 0;
     return 0;
    }
   break;
 open,
   break;
  }
 }
 return count;
}

 /* Arrange to retransmit all messages in the relq. */
static void bcsp_timed_event dequeue  bcsp_dequeue,
{
 struct  .ecv =,
 struct =bcsp_flush
 struct sk_buff}
 unsigned long flags;

 BT_DBG("hu %p retransmitting %u pkts", hu, bcsp->unack.qlen);

 spin_lock_irqsave_nested(&bcsp->unack.lock, flags, SINGLE_DEPTH_NESTING);

 while ((skb = __skb_dequeue_tail(&bcsp->unack)) != NULL) {
  bcsp->msgq_txseq = (bcsp->msgq_txseq - 1) & 0x07;
  skb_queue_head(&bcsp->rel, skb);
 }

 spin_unlock_irqrestore(&bcsp->unack.lock, flags);

 hci_uart_tx_wakeup(hu);
}

static int bcsp_open(struct hci_uart *hu)
{
 struct bcsp_struct *bcsp;

 BT_DBG("hu %p", hu);

 bcsp = kzalloc(sizeof(*bcsp), GFP_KERNEL);
 if (!bcsp)
  return -ENOMEM;

 hu->priv = bcsp;
 bcsp->hu = hu;
 skb_queue_head_init(&bcsp->unack);
 skb_queue_head_init(&bcsp->rel);
 skb_queue_head_init(&bcsp->unrel);

 timer_setup(&bcsp->tbcsp, bcsp_timed_event, 0);

 bcsp->rx_state = BCSP_W4_PKT_DELIMITER;

 if (txcrc)
  bcsp->use_crc = 1;

 return 0;
}

static int bcsp_close(struct hci_uart *hu)
{
 struct bcsp_struct *bcsp = hu->priv;

 timer_shutdown_sync(&bcsp->tbcsp);

 hu->priv = NULL;

 BT_DBG("hu %p", hu);

 skb_queue_purge(&bcsp->unack);
 skb_queue_purge(&bcsp->rel);
 skb_queue_purge(&bcsp->unrel);

 if (bcsp->rx_skb) {
  kfree_skb(bcsp->rx_skb);
  bcsp->rx_skb = NULL;
 }

 kfree(bcsp);
 return 0;
}

static const struct hci_uart_proto bcsp = {
 .id  = HCI_UART_BCSP,
 .name  = "BCSP",
 .open  = bcsp_open,
 .close  = bcsp_close,
 .enqueue = bcsp_enqueue,
 .dequeue = bcsp_dequeue,
 .recv  = bcsp_recv,
 .flush  = bcsp_flush
};

int __init bcsp_init(void)
{
 return hci_uart_register_proto(&bcsp);
}

int __exit bcsp_deinit(void)
{
 return hci_uart_unregister_proto(&bcsp);
}

module_param(txcrc, bool, 0644);
MODULE_PARM_DESC(txcrc, "Transmit CRC with every BCSP packet");

module_param(hciextn, bool, 0644);
MODULE_PARM_DESC(hciextn, "Convert HCI Extensions into BCSP packets");