shared/gatt-client: Fix not removing services that had disappeared 24/163224/1
authorLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Wed, 24 May 2017 10:22:01 +0000 (13:22 +0300)
committerDoHyun Pyun <dh79.pyun@samsung.com>
Fri, 8 Dec 2017 05:21:40 +0000 (14:21 +0900)
[Problem] There are duplicated services in gatt client database.
[Cause & Measure] When GATT service discovery happens and there are no
 services in the middle of discovery range, the services in that range
 are not removed. This causes a local application recognize that the
 services exist. But those are actually removed in remote side so
 the local application malfunction happens.
[Checking Method] Connect device to iOS. It happens rarely but it makes
 the issue happen with below procedures.
 1. Connect two bluez devices via BLE
 2. Make pair
 3. Register any service in one side (A)
 4. Disconnect BLE
 5. Unregister the service and register it again on side A
 6. Make a connection again
 7. Check the side A's services on side B

This patch comes from below commit of upstream.

commit 6b34bdd967a639c2d219b5d83f0a20637c56e68e
Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Date:   Wed May 24 13:22:01 2017 +0300

If a service cannot be found in the middle of the database the current
logic don't clear its range leaving it still active which cause upper
layer to believe its attributes are still available.

In order to fix the code now loads existing services into the pending
list and remove the services left at the end of the discovery:

src/device.c:gatt_debug() Primary services found: 2
src/device.c:gatt_debug() start: 0x0001, end: 0x0005, uuid: 00001800-0000-1000-8000-00805f9b34fb
src/device.c:gatt_debug() start: 0x0100, end: 0x0104, uuid: 0000180a-0000-1000-8000-00805f9b34fb
src/device.c:gatt_debug() Secondary service discovery failed. ATT ECODE: 0x0a
src/device.c:gatt_debug() Characteristics found: 2
src/device.c:gatt_debug() start: 0x0101, end: 0x0102, value: 0x0102, props: 0x02, uuid: 00002a24-0000-1
src/device.c:gatt_debug() start: 0x0103, end: 0x0104, value: 0x0104, props: 0x02, uuid: 00002a29-0000-1
src/device.c:gatt_debug() service disappeared: start 0x0006 end 0x000a
src/device.c:gatt_service_removed() start: 0x0006, end: 0x000a

Change-Id: I8ef0b3c3feaadaa61d280f494532ab26ceecec2e
Signed-off-by: Seungyoun Ju <sy39.ju@samsung.com>
Signed-off-by: DoHyun Pyun <dh79.pyun@samsung.com>
src/shared/gatt-client.c

index 424dd74..e5fe420 100644 (file)
@@ -352,6 +352,7 @@ struct discovery_op {
        uint16_t last;
        uint16_t svc_first;
        uint16_t svc_last;
+       unsigned int db_id;
        int ref_count;
        discovery_op_complete_func_t complete_func;
        discovery_op_fail_func_t failure_func;
@@ -359,6 +360,9 @@ struct discovery_op {
 
 static void discovery_op_free(struct discovery_op *op)
 {
+       if (op->db_id > 0)
+               gatt_db_unregister(op->client->db, op->db_id);
+
        queue_destroy(op->pending_svcs, NULL);
        queue_destroy(op->pending_chrcs, free);
        queue_destroy(op->ext_prop_desc, NULL);
@@ -368,6 +372,30 @@ static void discovery_op_free(struct discovery_op *op)
 static void discovery_op_complete(struct discovery_op *op, bool success,
                                                                uint8_t err)
 {
+       const struct queue_entry *svc;
+
+       /*
+        * Unregister remove callback so it is not called when clearing unused
+        * range.
+        */
+       gatt_db_unregister(op->client->db, op->db_id);
+       op->db_id = 0;
+
+       /* Remove services pending */
+       for (svc = queue_get_entries(op->pending_svcs); svc; svc = svc->next) {
+               struct gatt_db_attribute *attr = svc->data;
+               uint16_t start, end;
+
+               gatt_db_attribute_get_service_data(attr, &start, &end,
+                                                       NULL, NULL);
+
+               util_debug(op->client->debug_callback, op->client->debug_data,
+                               "service disappeared: start 0x%04x end 0x%04x",
+                               start, end);
+
+               gatt_db_remove_service(op->client->db, attr);
+       }
+
        /* Reset remaining range */
        if (success) {
 #ifdef TIZEN_FEATURE_BLUEZ_MODIFY
@@ -400,6 +428,22 @@ static void discovery_op_complete(struct discovery_op *op, bool success,
        op->complete_func(op, success, err);
 }
 
+static void discovery_load_services(struct gatt_db_attribute *attr,
+                                                       void *user_data)
+{
+       struct discovery_op *op = user_data;
+
+       queue_push_tail(op->pending_svcs, attr);
+}
+
+static void discovery_service_changed(struct gatt_db_attribute *attr,
+                                                       void *user_data)
+{
+       struct discovery_op *op = user_data;
+
+       queue_remove(op->pending_svcs, attr);
+}
+
 static struct discovery_op *discovery_op_create(struct bt_gatt_client *client,
                                uint16_t start, uint16_t end,
                                discovery_op_complete_func_t complete_func,
@@ -420,6 +464,19 @@ static struct discovery_op *discovery_op_create(struct bt_gatt_client *client,
        op->last = start;
 #endif
 
+       /* Load existing services as pending */
+       gatt_db_foreach_service_in_range(client->db, NULL,
+                                        discovery_load_services, op,
+                                        start, end);
+
+       /*
+        * Services are only added when set active in which case they are no
+        * longer pending so it is safe to remove either way.
+        */
+       op->db_id = gatt_db_register(client->db, discovery_service_changed,
+                                               discovery_service_changed,
+                                               op, NULL);
+
        return op;
 }
 
@@ -954,7 +1011,9 @@ static void discovery_found_service(struct discovery_op *op,
                        op->svc_first = start;
                if (op->svc_last < end)
                        op->svc_last = end;
-       }
+       } else
+               /* Remove from pending if active */
+               queue_remove(op->pending_svcs, attr);
 
        /* Update last handle */
        if (end > op->last)
@@ -1035,6 +1094,9 @@ static void discover_secondary_cb(bool success, uint8_t att_ecode,
        }
 
 next:
+       if (queue_isempty(op->pending_svcs))
+               goto done;
+
        client->discovery_req = bt_gatt_discover_included_services(client->att,
                                                        op->svc_first,
                                                        op->svc_last,