1 // SPDX-License-Identifier: LGPL-2.1-or-later
4 * BlueZ - Bluetooth protocol stack for Linux
6 * Copyright (C) 2011-2014 Intel Corporation
7 * Copyright (C) 2002-2010 Marcel Holtmann <marcel@holtmann.org>
19 #include "lib/bluetooth.h"
22 #include "src/shared/util.h"
30 #define COLOR_UNKNOWN_EVENT_MASK COLOR_WHITE_BG
31 #define COLOR_UNKNOWN_SCAN_STATUS COLOR_WHITE_BG
32 #define COLOR_UNKNOWN_EXT_EVENT COLOR_WHITE_BG
34 static void print_status(uint8_t status)
36 packet_print_error("Status", status);
39 static void print_module(uint8_t module)
85 print_field("Module: %s (0x%2.2x)", str, module);
88 static void null_cmd(uint16_t index, const void *data, uint8_t size)
92 static void status_rsp(uint16_t index, const void *data, uint8_t size)
94 uint8_t status = get_u8(data);
99 static void reset_cmd(uint16_t index, const void *data, uint8_t size)
101 uint8_t reset_type = get_u8(data);
102 uint8_t patch_enable = get_u8(data + 1);
103 uint8_t ddc_reload = get_u8(data + 2);
104 uint8_t boot_option = get_u8(data + 3);
105 uint32_t boot_addr = get_le32(data + 4);
108 switch (reset_type) {
110 str = "Soft software reset";
113 str = "Hard software reset";
120 print_field("Reset type: %s (0x%2.2x)", str, reset_type);
122 switch (patch_enable) {
124 str = "Do not enable";
134 print_field("Patch vectors: %s (0x%2.2x)", str, patch_enable);
136 switch (ddc_reload) {
138 str = "Do not reload";
141 str = "Reload from OTP";
148 print_field("DDC parameters: %s (0x%2.2x)", str, ddc_reload);
150 switch (boot_option) {
152 str = "Current image";
155 str = "Specified address";
162 print_field("Boot option: %s (0x%2.2x)", str, boot_option);
163 print_field("Boot address: 0x%8.8x", boot_addr);
166 struct intel_version_tlv {
172 static void print_version_tlv_u32(const struct intel_version_tlv *tlv,
175 print_field("%s(%u): 0x%8.8x", type_str, tlv->type, get_le32(tlv->val));
178 static void print_version_tlv_u16(const struct intel_version_tlv *tlv,
181 print_field("%s(%u): 0x%4.4x", type_str, tlv->type, get_le16(tlv->val));
184 static void print_version_tlv_u8(const struct intel_version_tlv *tlv,
187 print_field("%s(%u): 0x%2.2x", type_str, tlv->type, get_u8(tlv->val));
190 static void print_version_tlv_enabled(const struct intel_version_tlv *tlv,
193 print_field("%s(%u): %s(%u)", type_str, tlv->type,
194 tlv->val[0] ? "Enabled" : "Disabled",
198 static void print_version_tlv_img_type(const struct intel_version_tlv *tlv,
203 switch (get_u8(tlv->val)) {
214 print_field("%s(%u): %s(0x%2.2x)", type_str, tlv->type, str,
218 static void print_version_tlv_timestamp(const struct intel_version_tlv *tlv,
221 print_field("%s(%u): %u-%u", type_str, tlv->type,
222 tlv->val[1], tlv->val[0]);
225 static void print_version_tlv_min_fw(const struct intel_version_tlv *tlv,
228 print_field("%s(%u): %u-%u.%u", type_str, tlv->type,
229 tlv->val[0], tlv->val[1], 2000 + tlv->val[2]);
232 static void print_version_tlv_otp_bdaddr(const struct intel_version_tlv *tlv,
235 packet_print_addr(type_str, tlv->val, 0x00);
238 static void print_version_tlv_unknown(const struct intel_version_tlv *tlv,
241 print_field("%s(%u): ", type_str, tlv->type);
242 packet_hexdump(tlv->val, tlv->len);
245 static void print_version_tlv_mfg(const struct intel_version_tlv *tlv,
248 uint16_t mfg_id = get_le16(tlv->val);
250 print_field("%s(%u): %s (%u)", type_str, tlv->type,
251 bt_compidtostr(mfg_id), mfg_id);
254 static const struct intel_version_tlv_desc {
257 void (*func)(const struct intel_version_tlv *tlv, char *type_str);
258 } intel_version_tlv_table[] = {
259 { 16, "CNVi TOP", print_version_tlv_u32 },
260 { 17, "CNVr TOP", print_version_tlv_u32 },
261 { 18, "CNVi BT", print_version_tlv_u32 },
262 { 19, "CNVr BT", print_version_tlv_u32 },
263 { 20, "CNVi OTP", print_version_tlv_u16 },
264 { 21, "CNVr OTP", print_version_tlv_u16 },
265 { 22, "Device Rev ID", print_version_tlv_u16 },
266 { 23, "USB VID", print_version_tlv_u16 },
267 { 24, "USB PID", print_version_tlv_u16 },
268 { 25, "PCIE VID", print_version_tlv_u16 },
269 { 26, "PCIe DID", print_version_tlv_u16 },
270 { 27, "PCIe Subsystem ID", print_version_tlv_u16 },
271 { 28, "Image Type", print_version_tlv_img_type },
272 { 29, "Time Stamp", print_version_tlv_timestamp },
273 { 30, "Build Type", print_version_tlv_u8 },
274 { 31, "Build Num", print_version_tlv_u32 },
275 { 32, "FW Build Product", print_version_tlv_u8 },
276 { 33, "FW Build HW", print_version_tlv_u8 },
277 { 34, "FW Build Step", print_version_tlv_u8 },
278 { 35, "BT Spec", print_version_tlv_u8 },
279 { 36, "Manufacturer", print_version_tlv_mfg },
280 { 37, "HCI Revision", print_version_tlv_u16 },
281 { 38, "LMP SubVersion", print_version_tlv_u16 },
282 { 39, "OTP Patch Version", print_version_tlv_u8 },
283 { 40, "Secure Boot", print_version_tlv_enabled },
284 { 41, "Key From Header", print_version_tlv_enabled },
285 { 42, "OTP Lock", print_version_tlv_enabled },
286 { 43, "API Lock", print_version_tlv_enabled },
287 { 44, "Debug Lock", print_version_tlv_enabled },
288 { 45, "Minimum FW", print_version_tlv_min_fw },
289 { 46, "Limited CCE", print_version_tlv_enabled },
290 { 47, "SBE Type", print_version_tlv_u8 },
291 { 48, "OTP BDADDR", print_version_tlv_otp_bdaddr },
292 { 49, "Unlocked State", print_version_tlv_enabled },
296 static void read_version_tlv_rsp(const void *data, uint8_t size)
298 uint8_t status = get_u8(data);
300 print_status(status);
302 /* Consume the status */
307 const struct intel_version_tlv *tlv = data;
308 const struct intel_version_tlv_desc *desc = NULL;
311 for (i = 0; intel_version_tlv_table[i].type > 0; i++) {
312 if (intel_version_tlv_table[i].type == tlv->type) {
313 desc = &intel_version_tlv_table[i];
319 desc->func(tlv, desc->type_str);
321 print_version_tlv_unknown(tlv, "Unknown Type");
323 data += sizeof(*tlv) + tlv->len;
324 size -= sizeof(*tlv) + tlv->len;
328 static void read_version_rsp(uint16_t index, const void *data, uint8_t size)
330 uint8_t status = get_u8(data);
331 uint8_t hw_platform = get_u8(data + 1);
332 uint8_t hw_variant = get_u8(data + 2);
333 uint8_t hw_revision = get_u8(data + 3);
334 uint8_t fw_variant = get_u8(data + 4);
335 uint8_t fw_revision = get_u8(data + 5);
336 uint8_t fw_build_nn = get_u8(data + 6);
337 uint8_t fw_build_cw = get_u8(data + 7);
338 uint8_t fw_build_yy = get_u8(data + 8);
339 uint8_t fw_patch = get_u8(data + 9);
341 /* There are two different formats of the response for the
342 * HCI_Intel_Read_version command depends on the command parameters
343 * If the size is fixed to 10 and hw_platform is 0x37, then it is the
344 * legacy format, otherwise use the tlv based format.
346 if (size != 10 && hw_platform != 0x37) {
347 read_version_tlv_rsp(data, size);
351 print_status(status);
352 print_field("Hardware platform: 0x%2.2x", hw_platform);
353 print_field("Hardware variant: 0x%2.2x", hw_variant);
354 print_field("Hardware revision: %u.%u", hw_revision >> 4,
356 print_field("Firmware variant: 0x%2.2x", fw_variant);
357 print_field("Firmware revision: %u.%u", fw_revision >> 4,
360 print_field("Firmware build: %u-%u.%u", fw_build_nn,
361 fw_build_cw, 2000 + fw_build_yy);
362 print_field("Firmware patch: %u", fw_patch);
365 static void read_version_cmd(uint16_t index, const void *data, uint8_t size)
370 /* This is the legacy read version command format and no further action
376 print_field("Requested Type:");
379 const struct intel_version_tlv_desc *desc = NULL;
384 /* Get all supported types */
386 str = "All Supported Types";
388 for (i = 0; intel_version_tlv_table[i].type > 0; i++) {
389 if (intel_version_tlv_table[i].type == type) {
390 desc = &intel_version_tlv_table[i];
396 str = desc->type_str;
398 str = "Unknown Type";
401 print_field(" %s(0x%2.2x)", str, type);
403 data += sizeof(type);
404 size -= sizeof(type);
408 static void set_uart_baudrate_cmd(uint16_t index, const void *data,
411 uint8_t baudrate = get_u8(data);
440 str = "1843200 Baud";
443 str = "3250000 baud";
446 str = "2000000 baud";
449 str = "3000000 baud";
452 str = "3714286 baud";
455 str = "4333333 baud";
458 str = "6500000 baud";
465 print_field("Baudrate: %s (0x%2.2x)", str, baudrate);
468 static void secure_send_cmd(uint16_t index, const void *data, uint8_t size)
470 uint8_t type = get_u8(data);
491 print_field("Type: %s fragment (0x%2.2x)", str, type);
493 packet_hexdump(data + 1, size - 1);
496 static void manufacturer_mode_cmd(uint16_t index, const void *data,
499 uint8_t mode = get_u8(data);
500 uint8_t reset = get_u8(data + 1);
515 print_field("Mode switch: %s (0x%2.2x)", str, mode);
522 str = "Reset and deactivate patches";
525 str = "Reset and activate patches";
532 print_field("Reset behavior: %s (0x%2.2x)", str, reset);
535 static void write_bd_data_cmd(uint16_t index, const void *data, uint8_t size)
539 packet_print_addr("Address", data, 0x00);
540 packet_hexdump(data + 6, 6);
542 memcpy(features, data + 12, 8);
543 packet_print_features_lmp(features, 0);
545 memcpy(features, data + 20, 1);
546 memset(features + 1, 0, 7);
547 packet_print_features_ll(features);
549 packet_hexdump(data + 21, size - 21);
552 static void read_bd_data_rsp(uint16_t index, const void *data, uint8_t size)
554 uint8_t status = get_u8(data);
556 print_status(status);
557 packet_print_addr("Address", data + 1, 0x00);
558 packet_hexdump(data + 7, size - 7);
561 static void write_bd_address_cmd(uint16_t index, const void *data, uint8_t size)
563 packet_print_addr("Address", data, 0x00);
566 static void act_deact_traces_cmd(uint16_t index, const void *data, uint8_t size)
568 uint8_t tx = get_u8(data);
569 uint8_t tx_arq = get_u8(data + 1);
570 uint8_t rx = get_u8(data + 2);
572 print_field("Transmit traces: 0x%2.2x", tx);
573 print_field("Transmit ARQ: 0x%2.2x", tx_arq);
574 print_field("Receive traces: 0x%2.2x", rx);
577 static void stimulate_exception_cmd(uint16_t index, const void *data,
580 uint8_t type = get_u8(data);
585 str = "Fatal Exception";
588 str = "Debug Exception";
595 print_field("Type: %s (0x%2.2x)", str, type);
598 static const struct {
603 { 1, "SCO Rejected via LMP" },
604 { 2, "PTT Switch Notification" },
605 { 7, "Scan Status" },
606 { 9, "Debug Exception" },
607 { 10, "Fatal Exception" },
608 { 11, "System Exception" },
609 { 13, "LE Link Established" },
610 { 14, "FW Trace String" },
614 static void set_event_mask_cmd(uint16_t index, const void *data, uint8_t size)
616 const uint8_t *events_array = data;
617 uint64_t mask, events = 0;
620 for (i = 0; i < 8; i++)
621 events |= ((uint64_t) events_array[i]) << (i * 8);
623 print_field("Mask: 0x%16.16" PRIx64, events);
627 for (i = 0; events_table[i].str; i++) {
628 if (events & (((uint64_t) 1) << events_table[i].bit)) {
629 print_field(" %s", events_table[i].str);
630 mask &= ~(((uint64_t) 1) << events_table[i].bit);
635 print_text(COLOR_UNKNOWN_EVENT_MASK, " Unknown mask "
636 "(0x%16.16" PRIx64 ")", mask);
639 static void ddc_config_write_cmd(uint16_t index, const void *data, uint8_t size)
642 uint8_t param_len = get_u8(data);
643 uint16_t param_id = get_le16(data + 1);
645 print_field("Identifier: 0x%4.4x", param_id);
646 packet_hexdump(data + 3, param_len - 2);
648 data += param_len + 1;
649 size -= param_len + 1;
653 static void ddc_config_write_rsp(uint16_t index, const void *data, uint8_t size)
655 uint8_t status = get_u8(data);
656 uint16_t param_id = get_le16(data + 1);
658 print_status(status);
659 print_field("Identifier: 0x%4.4x", param_id);
662 static void memory_write_cmd(uint16_t index, const void *data, uint8_t size)
664 uint32_t addr = get_le32(data);
665 uint8_t mode = get_u8(data + 4);
666 uint8_t length = get_u8(data + 5);
669 print_field("Address: 0x%8.8x", addr);
676 str = "Half word access";
686 print_field("Mode: %s (0x%2.2x)", str, mode);
687 print_field("Length: %u", length);
689 packet_hexdump(data + 6, size - 6);
692 static void read_supported_features_cmd(uint16_t index, const void *data,
695 uint8_t page = get_u8(data);
697 print_field("Page: 0x%2.2x", page);
700 static void read_supported_features_rsp(uint16_t index, const void *data,
703 uint8_t status = get_u8(data);
704 uint8_t page = get_u8(data + 1);
705 uint8_t max_pages = get_u8(data + 2);
707 print_status(status);
708 print_field("Page: 0x%2.2x", page);
709 print_field("Max Pages: 0x%2.2x", max_pages);
710 print_field("Supported Features:");
711 packet_hexdump(data + 3, size - 3);
714 static void ppag_enable(uint16_t index, const void *data, uint8_t size)
716 uint32_t enable = get_le32(data);
717 char *ppag_enable_flags;
721 ppag_enable_flags = "EU";
724 ppag_enable_flags = "China";
727 ppag_enable_flags = "EU and China";
730 ppag_enable_flags = "Unknown";
734 print_field("Enable: %s (0x%8.8x)", ppag_enable_flags, enable);
737 static const struct vendor_ocf vendor_ocf_table[] = {
740 status_rsp, 1, true },
741 { 0x002, "No Operation" },
742 { 0x005, "Read Version",
743 read_version_cmd, 0, false,
744 read_version_rsp, 1, false },
745 { 0x006, "Set UART Baudrate",
746 set_uart_baudrate_cmd, 1, true,
747 status_rsp, 1, true },
748 { 0x007, "Enable LPM" },
749 { 0x008, "PCM Write Configuration" },
750 { 0x009, "Secure Send",
751 secure_send_cmd, 1, false,
752 status_rsp, 1, true },
753 { 0x00d, "Read Secure Boot Params",
755 { 0x00e, "Write Secure Boot Params" },
757 { 0x010, "Change UART Baudrate" },
758 { 0x011, "Manufacturer Mode",
759 manufacturer_mode_cmd, 2, true,
760 status_rsp, 1, true },
761 { 0x012, "Read Link RSSI" },
762 { 0x022, "Get Exception Info" },
763 { 0x024, "Clear Exception Info" },
764 { 0x02f, "Write BD Data",
765 write_bd_data_cmd, 6, false },
766 { 0x030, "Read BD Data",
768 read_bd_data_rsp, 7, false },
769 { 0x031, "Write BD Address",
770 write_bd_address_cmd, 6, true,
771 status_rsp, 1, true },
772 { 0x032, "Flow Specification" },
773 { 0x034, "Read Secure ID" },
774 { 0x038, "Set Synchronous USB Interface Type" },
775 { 0x039, "Config Synchronous Interface" },
776 { 0x03f, "SW RF Kill",
778 status_rsp, 1, true },
779 { 0x043, "Activate Deactivate Traces",
780 act_deact_traces_cmd, 3, true },
781 { 0x04d, "Stimulate Exception",
782 stimulate_exception_cmd, 1, true,
783 status_rsp, 1, true },
784 { 0x050, "Read HW Version" },
785 { 0x052, "Set Event Mask",
786 set_event_mask_cmd, 8, true,
787 status_rsp, 1, true },
788 { 0x053, "Config_Link_Controller" },
789 { 0x089, "DDC Write" },
790 { 0x08a, "DDC Read" },
791 { 0x08b, "DDC Config Write",
792 ddc_config_write_cmd, 3, false,
793 ddc_config_write_rsp, 3, true },
794 { 0x08c, "DDC Config Read" },
795 { 0x08d, "Memory Read" },
796 { 0x08e, "Memory Write",
797 memory_write_cmd, 6, false,
798 status_rsp, 1, true },
799 { 0x0a6, "Read Supported Features",
800 read_supported_features_cmd, 1, true,
801 read_supported_features_rsp, 19, true },
802 { 0x20b, "PPAG Enable",
803 ppag_enable, 4, true,
804 status_rsp, 1, true },
808 const struct vendor_ocf *intel_vendor_ocf(uint16_t ocf)
812 for (i = 0; vendor_ocf_table[i].str; i++) {
813 if (vendor_ocf_table[i].ocf == ocf)
814 return &vendor_ocf_table[i];
820 static void startup_evt(struct timeval *tv, uint16_t index,
821 const void *data, uint8_t size)
825 static void fatal_exception_evt(struct timeval *tv, uint16_t index,
826 const void *data, uint8_t size)
828 uint16_t line = get_le16(data);
829 uint8_t module = get_u8(data + 2);
830 uint8_t reason = get_u8(data + 3);
832 print_field("Line: %u", line);
833 print_module(module);
834 print_field("Reason: 0x%2.2x", reason);
837 static void bootup_evt(struct timeval *tv, uint16_t index,
838 const void *data, uint8_t size)
840 uint8_t zero = get_u8(data);
841 uint8_t num_packets = get_u8(data + 1);
842 uint8_t source = get_u8(data + 2);
843 uint8_t reset_type = get_u8(data + 3);
844 uint8_t reset_reason = get_u8(data + 4);
845 uint8_t ddc_status = get_u8(data + 5);
848 print_field("Zero: 0x%2.2x", zero);
849 print_field("Number of packets: %d", num_packets);
856 str = "Operational firmware";
859 str = "Self test firmware";
866 print_field("Source: %s (0x%2.2x)", str, source);
868 switch (reset_type) {
870 str = "Hardware reset";
873 str = "Soft watchdog reset";
876 str = "Soft software reset";
879 str = "Hard watchdog reset";
882 str = "Hard software reset";
889 print_field("Reset type: %s (0x%2.2x)", str, reset_type);
891 switch (reset_reason) {
896 str = "Reset command";
899 str = "Intel reset command";
905 str = "Fatal exception";
908 str = "System exception";
918 print_field("Reset reason: %s (0x%2.2x)", str, reset_reason);
920 switch (ddc_status) {
922 str = "Firmware default";
925 str = "Firmware default plus OTP";
928 str = "Persistent RAM";
938 print_field("DDC status: %s (0x%2.2x)", str, ddc_status);
941 static void default_bd_data_evt(struct timeval *tv, uint16_t index,
942 const void *data, uint8_t size)
944 uint8_t mem_status = get_u8(data);
947 switch (mem_status) {
949 str = "Invalid manufacturing data";
956 print_field("Memory status: %s (0x%2.2x)", str, mem_status);
959 static void secure_send_commands_result_evt(struct timeval *tv, uint16_t index,
960 const void *data, uint8_t size)
962 uint8_t result = get_u8(data);
963 uint16_t opcode = get_le16(data + 1);
964 uint16_t ogf = cmd_opcode_ogf(opcode);
965 uint16_t ocf = cmd_opcode_ocf(opcode);
966 uint8_t status = get_u8(data + 3);
974 str = "General failure";
977 str = "Hardware failure";
980 str = "Signature verification failed";
983 str = "Parsing error of command buffer";
986 str = "Command execution failure";
989 str = "Command parameters error";
992 str = "Command missing";
999 print_field("Result: %s (0x%2.2x)", str, result);
1000 print_field("Opcode: 0x%4.4x (0x%2.2x|0x%4.4x)", opcode, ogf, ocf);
1001 print_status(status);
1004 static void debug_exception_evt(struct timeval *tv, uint16_t index,
1005 const void *data, uint8_t size)
1007 uint16_t line = get_le16(data);
1008 uint8_t module = get_u8(data + 2);
1009 uint8_t reason = get_u8(data + 3);
1011 print_field("Line: %u", line);
1012 print_module(module);
1013 print_field("Reason: 0x%2.2x", reason);
1016 static void le_link_established_evt(struct timeval *tv, uint16_t index,
1017 const void *data, uint8_t size)
1019 uint16_t handle = get_le16(data);
1020 uint32_t access_addr = get_le32(data + 10);
1022 print_field("Handle: %u", handle);
1024 packet_hexdump(data + 2, 8);
1026 print_field("Access address: 0x%8.8x", access_addr);
1028 packet_hexdump(data + 14, size - 14);
1031 static void scan_status_evt(struct timeval *tv, uint16_t index,
1032 const void *data, uint8_t size)
1034 uint8_t enable = get_u8(data);
1036 print_field("Inquiry scan: %s",
1037 (enable & 0x01) ? "Enabled" : "Disabled");
1038 print_field("Page scan: %s",
1039 (enable & 0x02) ? "Enabled" : "Disabled");
1042 print_text(COLOR_UNKNOWN_SCAN_STATUS,
1043 " Unknown status (0x%2.2x)", enable & 0xfc);
1047 static void act_deact_traces_complete_evt(struct timeval *tv, uint16_t index,
1048 const void *data, uint8_t size)
1050 uint8_t status = get_u8(data);
1052 print_status(status);
1055 static void lmp_pdu_trace_evt(struct timeval *tv, uint16_t index,
1056 const void *data, uint8_t size)
1058 uint8_t type, len, id;
1059 uint16_t handle, count;
1063 type = get_u8(data);
1064 handle = get_le16(data + 1);
1090 print_field("Type: %s (0x%2.2x)", str, type);
1091 print_field("Handle: %u", handle);
1096 clock = get_le32(data + 4 + len);
1098 packet_hexdump(data + 3, 1);
1099 lmp_packet(data + 4, len, false);
1100 print_field("Clock: 0x%8.8x", clock);
1104 clock = get_le32(data + 4 + len);
1105 id = get_u8(data + 4 + len + 4);
1107 packet_hexdump(data + 3, 1);
1108 lmp_packet(data + 4, len, false);
1109 print_field("Clock: 0x%8.8x", clock);
1110 print_field("ID: 0x%2.2x", id);
1113 clock = get_le32(data + 3);
1114 id = get_u8(data + 3 + 4);
1116 print_field("Clock: 0x%8.8x", clock);
1117 print_field("ID: 0x%2.2x", id);
1121 count = get_le16(data + 3);
1123 print_field("Count: 0x%4.4x", count);
1124 packet_hexdump(data + 3 + 2 + 1, 2);
1125 llcp_packet(data + 8, len, false);
1129 count = get_le16(data + 3);
1130 id = get_u8(data + 3 + 2);
1132 print_field("Count: 0x%4.4x", count);
1133 print_field("ID: 0x%2.2x", id);
1134 packet_hexdump(data + 3 + 2 + 1, 2);
1135 llcp_packet(data + 8, len, false);
1138 count = get_le16(data + 3);
1139 id = get_u8(data + 3 + 2);
1141 print_field("Count: 0x%4.4x", count);
1142 print_field("ID: 0x%2.2x", id);
1145 packet_hexdump(data + 3, size - 3);
1150 static void write_bd_data_complete_evt(struct timeval *tv, uint16_t index,
1151 const void *data, uint8_t size)
1153 uint8_t status = get_u8(data);
1155 print_status(status);
1158 static void sco_rejected_via_lmp_evt(struct timeval *tv, uint16_t index,
1159 const void *data, uint8_t size)
1161 uint8_t reason = get_u8(data + 6);
1163 packet_print_addr("Address", data, 0x00);
1164 packet_print_error("Reason", reason);
1167 static void ptt_switch_notification_evt(struct timeval *tv, uint16_t index,
1168 const void *data, uint8_t size)
1170 uint16_t handle = get_le16(data);
1171 uint8_t table = get_u8(data + 2);
1174 print_field("Handle: %u", handle);
1181 str = "Enhanced data rate";
1188 print_field("Packet type table: %s (0x%2.2x)", str, table);
1191 static void system_exception_evt(struct timeval *tv, uint16_t index,
1192 const void *data, uint8_t size)
1194 uint8_t type = get_u8(data);
1199 str = "No Exception";
1202 str = "Undefined Instruction";
1205 str = "Prefetch abort";
1215 print_field("Type: %s (0x%2.2x)", str, type);
1217 packet_hexdump(data + 1, size - 1);
1220 static const struct vendor_evt vendor_evt_table[] = {
1222 startup_evt, 0, true },
1223 { 0x01, "Fatal Exception",
1224 fatal_exception_evt, 4, true },
1226 bootup_evt, 6, true },
1227 { 0x05, "Default BD Data",
1228 default_bd_data_evt, 1, true },
1229 { 0x06, "Secure Send Commands Result",
1230 secure_send_commands_result_evt, 4, true },
1231 { 0x08, "Debug Exception",
1232 debug_exception_evt, 4, true },
1233 { 0x0f, "LE Link Established",
1234 le_link_established_evt, 26, true },
1235 { 0x11, "Scan Status",
1236 scan_status_evt, 1, true },
1237 { 0x16, "Activate Deactivate Traces Complete",
1238 act_deact_traces_complete_evt, 1, true },
1239 { 0x17, "LMP PDU Trace",
1240 lmp_pdu_trace_evt, 3, false },
1241 { 0x19, "Write BD Data Complete",
1242 write_bd_data_complete_evt, 1, true },
1243 { 0x25, "SCO Rejected via LMP",
1244 sco_rejected_via_lmp_evt, 7, true },
1245 { 0x26, "PTT Switch Notification",
1246 ptt_switch_notification_evt, 3, true },
1247 { 0x29, "System Exception",
1248 system_exception_evt, 133, true },
1249 { 0x2c, "FW Trace String" },
1250 { 0x2e, "FW Trace Binary" },
1255 * An Intel telemetry subevent is of the TLV format.
1256 * - Type: takes 1 byte. This is the subevent_id.
1257 * - Length: takes 1 byte.
1258 * - Value: takes |Length| bytes.
1261 uint8_t subevent_id;
1266 #define TLV_SIZE(tlv) (*((const uint8_t *) tlv + 1) + 2 * sizeof(uint8_t))
1267 #define NEXT_TLV(tlv) (const struct intel_tlv *) \
1268 ((const uint8_t *) tlv + TLV_SIZE(tlv))
1270 static void ext_evt_type(const struct intel_tlv *tlv)
1272 uint8_t evt_type = get_u8(tlv->value);
1277 str = "System Exception";
1280 str = "Fatal Exception";
1283 str = "Debug Exception";
1286 str = "Connection Event for BR/EDR Link Type";
1289 str = "Disconnection Event";
1292 str = "Performance Stats";
1296 print_text(COLOR_UNKNOWN_EXT_EVENT,
1297 "Unknown extended telemetry event type (0x%2.2x)",
1299 packet_hexdump((const void *) tlv,
1300 tlv->length + 2 * sizeof(uint8_t));
1304 print_field("Extended event type (0x%2.2x): %s (0x%2.2x)",
1305 tlv->subevent_id, str, evt_type);
1308 static void ext_acl_evt_conn_handle(const struct intel_tlv *tlv)
1310 uint16_t conn_handle = get_le16(tlv->value);
1312 print_field("ACL connection handle (0x%2.2x): 0x%4.4x",
1313 tlv->subevent_id, conn_handle);
1316 static void ext_acl_evt_hec_errors(const struct intel_tlv *tlv)
1318 uint32_t num = get_le32(tlv->value);
1324 print_field("Rx HEC errors (0x%2.2x): %d", tlv->subevent_id, num);
1327 static void ext_acl_evt_crc_errors(const struct intel_tlv *tlv)
1329 uint32_t num = get_le32(tlv->value);
1335 print_field("Rx CRC errors (0x%2.2x): %d", tlv->subevent_id, num);
1338 static void ext_acl_evt_num_pkt_from_host(const struct intel_tlv *tlv)
1340 uint32_t num = get_le32(tlv->value);
1346 print_field("Packets from host (0x%2.2x): %d",
1347 tlv->subevent_id, num);
1350 static void ext_acl_evt_num_tx_pkt_to_air(const struct intel_tlv *tlv)
1352 uint32_t num = get_le32(tlv->value);
1358 print_field("Tx packets (0x%2.2x): %d", tlv->subevent_id, num);
1361 static void ext_acl_evt_num_tx_pkt_retry(const struct intel_tlv *tlv)
1364 uint32_t num = get_le32(tlv->value);
1370 switch (tlv->subevent_id) {
1372 subevent_str = "Tx packets 0 retries";
1375 subevent_str = "Tx packets 1 retries";
1378 subevent_str = "Tx packets 2 retries";
1381 subevent_str = "Tx packets 3 retries";
1384 subevent_str = "Tx packets 4 retries and more";
1387 subevent_str = "Unknown";
1391 print_field("%s (0x%2.2x): %d", subevent_str, tlv->subevent_id, num);
1394 static void ext_acl_evt_num_tx_pkt_type(const struct intel_tlv *tlv)
1396 char *packet_type_str;
1397 uint32_t num = get_le32(tlv->value);
1403 switch (tlv->subevent_id) {
1405 packet_type_str = "DH1";
1408 packet_type_str = "DH3";
1411 packet_type_str = "DH5";
1414 packet_type_str = "2DH1";
1417 packet_type_str = "2DH3";
1420 packet_type_str = "2DH5";
1423 packet_type_str = "3DH1";
1426 packet_type_str = "3DH3";
1429 packet_type_str = "3DH5";
1432 packet_type_str = "Unknown";
1436 print_field("Tx %s packets (0x%2.2x): %d",
1437 packet_type_str, tlv->subevent_id, num);
1440 static void ext_acl_evt_num_rx_pkt_from_air(const struct intel_tlv *tlv)
1442 uint32_t num = get_le32(tlv->value);
1448 print_field("Rx packets (0x%2.2x): %d",
1449 tlv->subevent_id, num);
1452 static void ext_acl_evt_link_throughput(const struct intel_tlv *tlv)
1454 uint32_t num = get_le32(tlv->value);
1460 print_field("ACL link throughput (bps) (0x%2.2x): %d",
1461 tlv->subevent_id, num);
1464 static void ext_acl_evt_max_packet_latency(const struct intel_tlv *tlv)
1466 uint32_t num = get_le32(tlv->value);
1472 print_field("ACL max packet latency (us) (0x%2.2x): %d",
1473 tlv->subevent_id, num);
1476 static void ext_acl_evt_avg_packet_latency(const struct intel_tlv *tlv)
1478 uint32_t num = get_le32(tlv->value);
1484 print_field("ACL avg packet latency (us) (0x%2.2x): %d",
1485 tlv->subevent_id, num);
1488 static void ext_acl_evt_rssi_moving_avg(const struct intel_tlv *tlv)
1490 uint32_t num = get_le16(tlv->value);
1496 print_field("ACL RX RSSI moving avg (0x%2.2x): %d",
1497 tlv->subevent_id, num);
1500 static void ext_acl_evt_bad_cnt(const char *prefix, const struct intel_tlv *tlv)
1502 uint32_t c_1m = get_le32(tlv->value);
1503 uint32_t c_2m = get_le32(tlv->value + 4);
1504 uint32_t c_3m = get_le32(tlv->value + 8);
1507 if (!c_1m && !c_2m && !c_3m)
1510 print_field("%s (0x%2.2x): 1M %d 2M %d 3M %d",
1511 prefix, tlv->subevent_id, c_1m, c_2m, c_3m);
1514 static void ext_acl_evt_snr_bad_cnt(const struct intel_tlv *tlv)
1516 ext_acl_evt_bad_cnt("ACL RX SNR Bad Margin Counter", tlv);
1519 static void ext_acl_evt_rx_rssi_bad_cnt(const struct intel_tlv *tlv)
1521 ext_acl_evt_bad_cnt("ACL RX RSSI Bad Counter", tlv);
1524 static void ext_acl_evt_tx_rssi_bad_cnt(const struct intel_tlv *tlv)
1526 ext_acl_evt_bad_cnt("ACL TX RSSI Bad Counter", tlv);
1529 static void ext_sco_evt_conn_handle(const struct intel_tlv *tlv)
1531 uint16_t conn_handle = get_le16(tlv->value);
1533 print_field("SCO/eSCO connection handle (0x%2.2x): 0x%4.4x",
1534 tlv->subevent_id, conn_handle);
1537 static void ext_sco_evt_num_rx_pkt_from_air(const struct intel_tlv *tlv)
1539 uint32_t num = get_le32(tlv->value);
1545 print_field("Packets from host (0x%2.2x): %d", tlv->subevent_id, num);
1548 static void ext_sco_evt_num_tx_pkt_to_air(const struct intel_tlv *tlv)
1550 uint32_t num = get_le32(tlv->value);
1556 print_field("Tx packets (0x%2.2x): %d", tlv->subevent_id, num);
1559 static void ext_sco_evt_num_rx_payloads_lost(const struct intel_tlv *tlv)
1561 uint32_t num = get_le32(tlv->value);
1567 print_field("Rx payload lost (0x%2.2x): %d", tlv->subevent_id, num);
1570 static void ext_sco_evt_num_tx_payloads_lost(const struct intel_tlv *tlv)
1573 uint32_t num = get_le32(tlv->value);
1579 print_field("Tx payload lost (0x%2.2x): %d", tlv->subevent_id, num);
1582 static void slots_errors(const struct intel_tlv *tlv, const char *type_str)
1584 /* The subevent has 5 slots where each slot is of the uint32_t type. */
1586 const uint8_t *data = tlv->value;
1589 if (tlv->length != 5 * sizeof(uint32_t)) {
1590 print_text(COLOR_UNKNOWN_EXT_EVENT,
1591 " Invalid subevent length (%d)", tlv->length);
1595 for (i = 0; i < 5; i++) {
1596 num[i] = get_le32(data);
1597 data += sizeof(uint32_t);
1600 print_field("%s (0x%2.2x): %d %d %d %d %d", type_str, tlv->subevent_id,
1601 num[0], num[1], num[2], num[3], num[4]);
1604 static void ext_sco_evt_num_no_sync_errors(const struct intel_tlv *tlv)
1606 slots_errors(tlv, "Rx No SYNC errors");
1609 static void ext_sco_evt_num_hec_errors(const struct intel_tlv *tlv)
1611 slots_errors(tlv, "Rx HEC errors");
1614 static void ext_sco_evt_num_crc_errors(const struct intel_tlv *tlv)
1616 slots_errors(tlv, "Rx CRC errors");
1619 static void ext_sco_evt_num_naks(const struct intel_tlv *tlv)
1621 slots_errors(tlv, "Rx NAK errors");
1624 static void ext_sco_evt_num_failed_tx_by_wifi(const struct intel_tlv *tlv)
1626 slots_errors(tlv, "Failed Tx due to Wifi coex");
1629 static void ext_sco_evt_num_failed_rx_by_wifi(const struct intel_tlv *tlv)
1631 slots_errors(tlv, "Failed Rx due to Wifi coex");
1634 static void ext_sco_evt_samples_inserted(const struct intel_tlv *tlv)
1636 uint32_t num = get_le32(tlv->value);
1642 print_field("Late samples inserted based on CDC (0x%2.2x): %d",
1643 tlv->subevent_id, num);
1646 static void ext_sco_evt_samples_dropped(const struct intel_tlv *tlv)
1648 uint32_t num = get_le32(tlv->value);
1654 print_field("Samples dropped (0x%2.2x): %d", tlv->subevent_id, num);
1657 static void ext_sco_evt_mute_samples(const struct intel_tlv *tlv)
1659 uint32_t num = get_le32(tlv->value);
1665 print_field("Mute samples sent at initial connection (0x%2.2x): %d",
1666 tlv->subevent_id, num);
1669 static void ext_sco_evt_plc_injection_data(const struct intel_tlv *tlv)
1671 uint32_t num = get_le32(tlv->value);
1677 print_field("PLC injection data (0x%2.2x): %d", tlv->subevent_id, num);
1680 static const struct intel_ext_subevent {
1681 uint8_t subevent_id;
1683 void (*func)(const struct intel_tlv *tlv);
1684 } intel_ext_subevent_table[] = {
1685 { 0x01, 1, ext_evt_type },
1687 /* ACL audio link quality subevents */
1688 { 0x4a, 2, ext_acl_evt_conn_handle },
1689 { 0x4b, 4, ext_acl_evt_hec_errors },
1690 { 0x4c, 4, ext_acl_evt_crc_errors },
1691 { 0x4d, 4, ext_acl_evt_num_pkt_from_host },
1692 { 0x4e, 4, ext_acl_evt_num_tx_pkt_to_air },
1693 { 0x4f, 4, ext_acl_evt_num_tx_pkt_retry },
1694 { 0x50, 4, ext_acl_evt_num_tx_pkt_retry },
1695 { 0x51, 4, ext_acl_evt_num_tx_pkt_retry },
1696 { 0x52, 4, ext_acl_evt_num_tx_pkt_retry },
1697 { 0x53, 4, ext_acl_evt_num_tx_pkt_retry },
1698 { 0x54, 4, ext_acl_evt_num_tx_pkt_type },
1699 { 0x55, 4, ext_acl_evt_num_tx_pkt_type },
1700 { 0x56, 4, ext_acl_evt_num_tx_pkt_type },
1701 { 0x57, 4, ext_acl_evt_num_tx_pkt_type },
1702 { 0x58, 4, ext_acl_evt_num_tx_pkt_type },
1703 { 0x59, 4, ext_acl_evt_num_tx_pkt_type },
1704 { 0x5a, 4, ext_acl_evt_num_tx_pkt_type },
1705 { 0x5b, 4, ext_acl_evt_num_tx_pkt_type },
1706 { 0x5c, 4, ext_acl_evt_num_tx_pkt_type },
1707 { 0x5d, 4, ext_acl_evt_num_rx_pkt_from_air },
1708 { 0x5e, 4, ext_acl_evt_link_throughput },
1709 { 0x5f, 4, ext_acl_evt_max_packet_latency },
1710 { 0x60, 4, ext_acl_evt_avg_packet_latency },
1711 { 0x61, 2, ext_acl_evt_rssi_moving_avg },
1712 { 0x62, 12, ext_acl_evt_snr_bad_cnt },
1713 { 0x63, 12, ext_acl_evt_rx_rssi_bad_cnt },
1714 { 0x64, 12, ext_acl_evt_tx_rssi_bad_cnt },
1716 /* SCO/eSCO audio link quality subevents */
1717 { 0x6a, 2, ext_sco_evt_conn_handle },
1718 { 0x6b, 4, ext_sco_evt_num_rx_pkt_from_air },
1719 { 0x6c, 4, ext_sco_evt_num_tx_pkt_to_air },
1720 { 0x6d, 4, ext_sco_evt_num_rx_payloads_lost },
1721 { 0x6e, 4, ext_sco_evt_num_tx_payloads_lost },
1722 { 0x6f, 20, ext_sco_evt_num_no_sync_errors },
1723 { 0x70, 20, ext_sco_evt_num_hec_errors },
1724 { 0x71, 20, ext_sco_evt_num_crc_errors },
1725 { 0x72, 20, ext_sco_evt_num_naks },
1726 { 0x73, 20, ext_sco_evt_num_failed_tx_by_wifi },
1727 { 0x74, 20, ext_sco_evt_num_failed_rx_by_wifi },
1728 { 0x75, 4, ext_sco_evt_samples_inserted },
1729 { 0x76, 4, ext_sco_evt_samples_dropped },
1730 { 0x77, 4, ext_sco_evt_mute_samples },
1731 { 0x78, 4, ext_sco_evt_plc_injection_data },
1737 static const struct intel_tlv *process_ext_subevent(const struct intel_tlv *tlv,
1738 const struct intel_tlv *last_tlv)
1740 const struct intel_tlv *next_tlv = NEXT_TLV(tlv);
1741 const struct intel_ext_subevent *subevent = NULL;
1744 for (i = 0; intel_ext_subevent_table[i].length > 0; i++) {
1745 if (intel_ext_subevent_table[i].subevent_id ==
1747 subevent = &intel_ext_subevent_table[i];
1753 print_text(COLOR_UNKNOWN_EXT_EVENT,
1754 "Unknown extended subevent 0x%2.2x",
1756 packet_hexdump(tlv->value, tlv->length);
1760 if (tlv->length != subevent->length) {
1761 print_text(COLOR_ERROR, "Invalid length %d of subevent 0x%2.2x",
1762 tlv->length, tlv->subevent_id);
1766 if (next_tlv > last_tlv) {
1767 print_text(COLOR_ERROR, "Subevent exceeds the buffer size.");
1771 subevent->func(tlv);
1776 static void intel_vendor_ext_evt(struct timeval *tv, uint16_t index,
1777 const void *data, uint8_t size)
1779 /* The data pointer points to a number of tlv.*/
1780 const struct intel_tlv *tlv = data;
1781 const struct intel_tlv *last_tlv = data + size;
1783 /* Process every tlv subevent until reaching last_tlv.
1784 * The decoding process terminates normally when tlv == last_tlv.
1786 while (tlv && tlv < last_tlv)
1787 tlv = process_ext_subevent(tlv, last_tlv);
1789 /* If an error occurs in decoding the subevents, hexdump the packet. */
1791 packet_hexdump(data, size);
1794 /* Vendor extended events with a vendor prefix. */
1795 static const struct vendor_evt vendor_prefix_evt_table[] = {
1796 { 0x03, "Extended Telemetry", intel_vendor_ext_evt },
1800 const uint8_t intel_vendor_prefix[] = {0x87, 0x80};
1801 #define INTEL_VENDOR_PREFIX_SIZE sizeof(intel_vendor_prefix)
1804 * The vendor event with Intel vendor prefix.
1805 * Its format looks like
1806 * 0xff <length> <vendor_prefix> <subopcode> <data>
1807 * where Intel's <vendor_prefix> is 0x8780.
1809 * When <subopcode> == 0x03, it is a telemetry event; and
1810 * <data> is a number of tlv data.
1812 struct vendor_prefix_evt {
1813 uint8_t prefix_data[INTEL_VENDOR_PREFIX_SIZE];
1817 static const struct vendor_evt *intel_vendor_prefix_evt(const void *data,
1821 const struct vendor_prefix_evt *vnd = data;
1822 char prefix_string[INTEL_VENDOR_PREFIX_SIZE * 2 + 1] = { 0 };
1824 /* Check if the vendor prefix matches. */
1825 for (i = 0; i < INTEL_VENDOR_PREFIX_SIZE; i++) {
1826 if (vnd->prefix_data[i] != intel_vendor_prefix[i])
1828 sprintf(prefix_string + i * 2, "%02x", vnd->prefix_data[i]);
1830 print_field("Vendor Prefix (0x%s)", prefix_string);
1833 * Handle the vendor event with a vendor prefix.
1834 * 0xff <length> <vendor_prefix> <subopcode> <data>
1835 * This loop checks whether the <subopcode> exists in the
1836 * vendor_prefix_evt_table.
1838 for (i = 0; vendor_prefix_evt_table[i].str; i++) {
1839 if (vendor_prefix_evt_table[i].evt == vnd->subopcode) {
1840 *consumed_size = sizeof(struct vendor_prefix_evt);
1841 return &vendor_prefix_evt_table[i];
1848 const struct vendor_evt *intel_vendor_evt(const void *data, int *consumed_size)
1850 uint8_t evt = *((const uint8_t *) data);
1854 * Handle the vendor event without a vendor prefix.
1855 * 0xff <length> <evt> <data>
1856 * This loop checks whether the <evt> exists in the vendor_evt_table.
1858 for (i = 0; vendor_evt_table[i].str; i++) {
1859 if (vendor_evt_table[i].evt == evt)
1860 return &vendor_evt_table[i];
1864 * It is not a regular event. Check whether it is a vendor extended
1865 * event that comes with a vendor prefix followed by a subopcode.
1867 return intel_vendor_prefix_evt(data, consumed_size);