 eed4296890
			
		
	
	
		eed4296890
		
			
		
	
	
	
	
		
			
			* Furi HAL: memory protection unit * Core: prohibit NULL dereferencing, even for reads. * Applications: fix NULL dereference * Core: stack protection by MPU * MPU: stack region alignment * Apps: fix null pointer dereferences * Threads: fix non-null arg check * Desktop settings: fix null pointer dereference * Core: documented null-check hack * Fix null dereference issues * Apps: args check * Core: naming fixes * format code * Core: remove NONNULL specifier * FurHal: move MPU initialization to begining, fix enum naming Co-authored-by: あく <alleteam@gmail.com>
		
			
				
	
	
		
			418 lines
		
	
	
		
			16 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			418 lines
		
	
	
		
			16 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| #include "bt_i.h"
 | |
| #include "battery_service.h"
 | |
| #include "bt_keys_storage.h"
 | |
| 
 | |
| #include <notification/notification_messages.h>
 | |
| #include <gui/elements.h>
 | |
| 
 | |
| #define TAG "BtSrv"
 | |
| 
 | |
| #define BT_RPC_EVENT_BUFF_SENT (1UL << 0)
 | |
| #define BT_RPC_EVENT_DISCONNECTED (1UL << 1)
 | |
| #define BT_RPC_EVENT_ALL (BT_RPC_EVENT_BUFF_SENT | BT_RPC_EVENT_DISCONNECTED)
 | |
| 
 | |
| static void bt_draw_statusbar_callback(Canvas* canvas, void* context) {
 | |
|     furi_assert(context);
 | |
| 
 | |
|     Bt* bt = context;
 | |
|     if(bt->status == BtStatusAdvertising) {
 | |
|         canvas_draw_icon(canvas, 0, 0, &I_Bluetooth_Idle_5x8);
 | |
|     } else if(bt->status == BtStatusConnected) {
 | |
|         canvas_draw_icon(canvas, 0, 0, &I_Bluetooth_Connected_16x8);
 | |
|     }
 | |
| }
 | |
| 
 | |
| static ViewPort* bt_statusbar_view_port_alloc(Bt* bt) {
 | |
|     ViewPort* statusbar_view_port = view_port_alloc();
 | |
|     view_port_set_width(statusbar_view_port, 5);
 | |
|     view_port_draw_callback_set(statusbar_view_port, bt_draw_statusbar_callback, bt);
 | |
|     view_port_enabled_set(statusbar_view_port, false);
 | |
|     return statusbar_view_port;
 | |
| }
 | |
| 
 | |
| static void bt_pin_code_view_port_draw_callback(Canvas* canvas, void* context) {
 | |
|     furi_assert(context);
 | |
|     Bt* bt = context;
 | |
|     char pin_code_info[24];
 | |
|     canvas_draw_icon(canvas, 0, 0, &I_BLE_Pairing_128x64);
 | |
|     snprintf(pin_code_info, sizeof(pin_code_info), "Pairing code\n%06ld", bt->pin_code);
 | |
|     elements_multiline_text_aligned(canvas, 64, 4, AlignCenter, AlignTop, pin_code_info);
 | |
|     elements_button_left(canvas, "Quit");
 | |
| }
 | |
| 
 | |
| static void bt_pin_code_view_port_input_callback(InputEvent* event, void* context) {
 | |
|     furi_assert(context);
 | |
|     Bt* bt = context;
 | |
|     if(event->type == InputTypeShort) {
 | |
|         if(event->key == InputKeyLeft || event->key == InputKeyBack) {
 | |
|             view_port_enabled_set(bt->pin_code_view_port, false);
 | |
|         }
 | |
|     }
 | |
| }
 | |
| 
 | |
| static ViewPort* bt_pin_code_view_port_alloc(Bt* bt) {
 | |
|     ViewPort* view_port = view_port_alloc();
 | |
|     view_port_draw_callback_set(view_port, bt_pin_code_view_port_draw_callback, bt);
 | |
|     view_port_input_callback_set(view_port, bt_pin_code_view_port_input_callback, bt);
 | |
|     view_port_enabled_set(view_port, false);
 | |
|     return view_port;
 | |
| }
 | |
| 
 | |
| static void bt_pin_code_show(Bt* bt, uint32_t pin_code) {
 | |
|     bt->pin_code = pin_code;
 | |
|     notification_message(bt->notification, &sequence_display_backlight_on);
 | |
|     gui_view_port_send_to_front(bt->gui, bt->pin_code_view_port);
 | |
|     view_port_enabled_set(bt->pin_code_view_port, true);
 | |
| }
 | |
| 
 | |
| static void bt_pin_code_hide(Bt* bt) {
 | |
|     bt->pin_code = 0;
 | |
|     if(view_port_is_enabled(bt->pin_code_view_port)) {
 | |
|         view_port_enabled_set(bt->pin_code_view_port, false);
 | |
|     }
 | |
| }
 | |
| 
 | |
| static bool bt_pin_code_verify_event_handler(Bt* bt, uint32_t pin) {
 | |
|     furi_assert(bt);
 | |
|     notification_message(bt->notification, &sequence_display_backlight_on);
 | |
|     string_t pin_str;
 | |
|     dialog_message_set_icon(bt->dialog_message, &I_BLE_Pairing_128x64, 0, 0);
 | |
|     string_init_printf(pin_str, "Verify code\n%06d", pin);
 | |
|     dialog_message_set_text(
 | |
|         bt->dialog_message, string_get_cstr(pin_str), 64, 4, AlignCenter, AlignTop);
 | |
|     dialog_message_set_buttons(bt->dialog_message, "Cancel", "OK", NULL);
 | |
|     DialogMessageButton button = dialog_message_show(bt->dialogs, bt->dialog_message);
 | |
|     string_clear(pin_str);
 | |
|     return button == DialogMessageButtonCenter;
 | |
| }
 | |
| 
 | |
| static void bt_battery_level_changed_callback(const void* _event, void* context) {
 | |
|     furi_assert(_event);
 | |
|     furi_assert(context);
 | |
| 
 | |
|     Bt* bt = context;
 | |
|     BtMessage message = {};
 | |
|     const PowerEvent* event = _event;
 | |
|     if(event->type == PowerEventTypeBatteryLevelChanged) {
 | |
|         message.type = BtMessageTypeUpdateBatteryLevel;
 | |
|         message.data.battery_level = event->data.battery_level;
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|     } else if(
 | |
|         event->type == PowerEventTypeStartCharging || event->type == PowerEventTypeFullyCharged ||
 | |
|         event->type == PowerEventTypeStopCharging) {
 | |
|         message.type = BtMessageTypeUpdatePowerState;
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|     }
 | |
| }
 | |
| 
 | |
| Bt* bt_alloc() {
 | |
|     Bt* bt = malloc(sizeof(Bt));
 | |
|     // Init default maximum packet size
 | |
|     bt->max_packet_size = FURI_HAL_BT_SERIAL_PACKET_SIZE_MAX;
 | |
|     bt->profile = BtProfileSerial;
 | |
|     // Load settings
 | |
|     if(!bt_settings_load(&bt->bt_settings)) {
 | |
|         bt_settings_save(&bt->bt_settings);
 | |
|     }
 | |
|     // Alloc queue
 | |
|     bt->message_queue = furi_message_queue_alloc(8, sizeof(BtMessage));
 | |
| 
 | |
|     // Setup statusbar view port
 | |
|     bt->statusbar_view_port = bt_statusbar_view_port_alloc(bt);
 | |
|     // Pin code view port
 | |
|     bt->pin_code_view_port = bt_pin_code_view_port_alloc(bt);
 | |
|     // Notification
 | |
|     bt->notification = furi_record_open(RECORD_NOTIFICATION);
 | |
|     // Gui
 | |
|     bt->gui = furi_record_open(RECORD_GUI);
 | |
|     gui_add_view_port(bt->gui, bt->statusbar_view_port, GuiLayerStatusBarLeft);
 | |
|     gui_add_view_port(bt->gui, bt->pin_code_view_port, GuiLayerFullscreen);
 | |
| 
 | |
|     // Dialogs
 | |
|     bt->dialogs = furi_record_open(RECORD_DIALOGS);
 | |
|     bt->dialog_message = dialog_message_alloc();
 | |
| 
 | |
|     // Power
 | |
|     bt->power = furi_record_open(RECORD_POWER);
 | |
|     FuriPubSub* power_pubsub = power_get_pubsub(bt->power);
 | |
|     furi_pubsub_subscribe(power_pubsub, bt_battery_level_changed_callback, bt);
 | |
| 
 | |
|     // RPC
 | |
|     bt->rpc = furi_record_open(RECORD_RPC);
 | |
|     bt->rpc_event = furi_event_flag_alloc();
 | |
| 
 | |
|     // API evnent
 | |
|     bt->api_event = furi_event_flag_alloc();
 | |
| 
 | |
|     return bt;
 | |
| }
 | |
| 
 | |
| // Called from GAP thread from Serial service
 | |
| static uint16_t bt_serial_event_callback(SerialServiceEvent event, void* context) {
 | |
|     furi_assert(context);
 | |
|     Bt* bt = context;
 | |
|     uint16_t ret = 0;
 | |
| 
 | |
|     if(event.event == SerialServiceEventTypeDataReceived) {
 | |
|         size_t bytes_processed =
 | |
|             rpc_session_feed(bt->rpc_session, event.data.buffer, event.data.size, 1000);
 | |
|         if(bytes_processed != event.data.size) {
 | |
|             FURI_LOG_E(
 | |
|                 TAG, "Only %d of %d bytes processed by RPC", bytes_processed, event.data.size);
 | |
|         }
 | |
|         ret = rpc_session_get_available_size(bt->rpc_session);
 | |
|     } else if(event.event == SerialServiceEventTypeDataSent) {
 | |
|         furi_event_flag_set(bt->rpc_event, BT_RPC_EVENT_BUFF_SENT);
 | |
|     }
 | |
|     return ret;
 | |
| }
 | |
| 
 | |
| // Called from RPC thread
 | |
| static void bt_rpc_send_bytes_callback(void* context, uint8_t* bytes, size_t bytes_len) {
 | |
|     furi_assert(context);
 | |
|     Bt* bt = context;
 | |
| 
 | |
|     if(furi_event_flag_get(bt->rpc_event) & BT_RPC_EVENT_DISCONNECTED) {
 | |
|         // Early stop from sending if we're already disconnected
 | |
|         return;
 | |
|     }
 | |
|     furi_event_flag_clear(bt->rpc_event, BT_RPC_EVENT_ALL & (~BT_RPC_EVENT_DISCONNECTED));
 | |
|     size_t bytes_sent = 0;
 | |
|     while(bytes_sent < bytes_len) {
 | |
|         size_t bytes_remain = bytes_len - bytes_sent;
 | |
|         if(bytes_remain > bt->max_packet_size) {
 | |
|             furi_hal_bt_serial_tx(&bytes[bytes_sent], bt->max_packet_size);
 | |
|             bytes_sent += bt->max_packet_size;
 | |
|         } else {
 | |
|             furi_hal_bt_serial_tx(&bytes[bytes_sent], bytes_remain);
 | |
|             bytes_sent += bytes_remain;
 | |
|         }
 | |
|         // We want BT_RPC_EVENT_DISCONNECTED to stick, so don't clear
 | |
|         uint32_t event_flag = furi_event_flag_wait(
 | |
|             bt->rpc_event, BT_RPC_EVENT_ALL, FuriFlagWaitAny | FuriFlagNoClear, FuriWaitForever);
 | |
|         if(event_flag & BT_RPC_EVENT_DISCONNECTED) {
 | |
|             break;
 | |
|         } else {
 | |
|             // If we didn't get BT_RPC_EVENT_DISCONNECTED, then clear everything else
 | |
|             furi_event_flag_clear(bt->rpc_event, BT_RPC_EVENT_ALL & (~BT_RPC_EVENT_DISCONNECTED));
 | |
|         }
 | |
|     }
 | |
| }
 | |
| 
 | |
| // Called from GAP thread
 | |
| static bool bt_on_gap_event_callback(GapEvent event, void* context) {
 | |
|     furi_assert(context);
 | |
|     Bt* bt = context;
 | |
|     bool ret = false;
 | |
| 
 | |
|     if(event.type == GapEventTypeConnected) {
 | |
|         // Update status bar
 | |
|         bt->status = BtStatusConnected;
 | |
|         BtMessage message = {.type = BtMessageTypeUpdateStatus};
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|         // Clear BT_RPC_EVENT_DISCONNECTED because it might be set from previous session
 | |
|         furi_event_flag_clear(bt->rpc_event, BT_RPC_EVENT_DISCONNECTED);
 | |
|         if(bt->profile == BtProfileSerial) {
 | |
|             // Open RPC session
 | |
|             bt->rpc_session = rpc_session_open(bt->rpc);
 | |
|             if(bt->rpc_session) {
 | |
|                 FURI_LOG_I(TAG, "Open RPC connection");
 | |
|                 rpc_session_set_send_bytes_callback(bt->rpc_session, bt_rpc_send_bytes_callback);
 | |
|                 rpc_session_set_buffer_is_empty_callback(
 | |
|                     bt->rpc_session, furi_hal_bt_serial_notify_buffer_is_empty);
 | |
|                 rpc_session_set_context(bt->rpc_session, bt);
 | |
|                 furi_hal_bt_serial_set_event_callback(
 | |
|                     RPC_BUFFER_SIZE, bt_serial_event_callback, bt);
 | |
|             } else {
 | |
|                 FURI_LOG_W(TAG, "RPC is busy, failed to open new session");
 | |
|             }
 | |
|         }
 | |
|         // Update battery level
 | |
|         PowerInfo info;
 | |
|         power_get_info(bt->power, &info);
 | |
|         message.type = BtMessageTypeUpdateBatteryLevel;
 | |
|         message.data.battery_level = info.charge;
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|         ret = true;
 | |
|     } else if(event.type == GapEventTypeDisconnected) {
 | |
|         if(bt->profile == BtProfileSerial && bt->rpc_session) {
 | |
|             FURI_LOG_I(TAG, "Close RPC connection");
 | |
|             furi_event_flag_set(bt->rpc_event, BT_RPC_EVENT_DISCONNECTED);
 | |
|             rpc_session_close(bt->rpc_session);
 | |
|             furi_hal_bt_serial_set_event_callback(0, NULL, NULL);
 | |
|             bt->rpc_session = NULL;
 | |
|         }
 | |
|         ret = true;
 | |
|     } else if(event.type == GapEventTypeStartAdvertising) {
 | |
|         bt->status = BtStatusAdvertising;
 | |
|         BtMessage message = {.type = BtMessageTypeUpdateStatus};
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|         ret = true;
 | |
|     } else if(event.type == GapEventTypeStopAdvertising) {
 | |
|         bt->status = BtStatusOff;
 | |
|         BtMessage message = {.type = BtMessageTypeUpdateStatus};
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|         ret = true;
 | |
|     } else if(event.type == GapEventTypePinCodeShow) {
 | |
|         BtMessage message = {
 | |
|             .type = BtMessageTypePinCodeShow, .data.pin_code = event.data.pin_code};
 | |
|         furi_check(
 | |
|             furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|         ret = true;
 | |
|     } else if(event.type == GapEventTypePinCodeVerify) {
 | |
|         ret = bt_pin_code_verify_event_handler(bt, event.data.pin_code);
 | |
|     } else if(event.type == GapEventTypeUpdateMTU) {
 | |
|         bt->max_packet_size = event.data.max_packet_size;
 | |
|         ret = true;
 | |
|     }
 | |
|     return ret;
 | |
| }
 | |
| 
 | |
| static void bt_on_key_storage_change_callback(uint8_t* addr, uint16_t size, void* context) {
 | |
|     furi_assert(context);
 | |
|     Bt* bt = context;
 | |
|     FURI_LOG_I(TAG, "Changed addr start: %08lX, size changed: %d", addr, size);
 | |
|     BtMessage message = {.type = BtMessageTypeKeysStorageUpdated};
 | |
|     furi_check(
 | |
|         furi_message_queue_put(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
| }
 | |
| 
 | |
| static void bt_statusbar_update(Bt* bt) {
 | |
|     if(bt->status == BtStatusAdvertising) {
 | |
|         view_port_set_width(bt->statusbar_view_port, icon_get_width(&I_Bluetooth_Idle_5x8));
 | |
|         view_port_enabled_set(bt->statusbar_view_port, true);
 | |
|     } else if(bt->status == BtStatusConnected) {
 | |
|         view_port_set_width(bt->statusbar_view_port, icon_get_width(&I_Bluetooth_Connected_16x8));
 | |
|         view_port_enabled_set(bt->statusbar_view_port, true);
 | |
|     } else {
 | |
|         view_port_enabled_set(bt->statusbar_view_port, false);
 | |
|     }
 | |
| }
 | |
| 
 | |
| static void bt_show_warning(Bt* bt, const char* text) {
 | |
|     dialog_message_set_text(bt->dialog_message, text, 64, 28, AlignCenter, AlignCenter);
 | |
|     dialog_message_set_buttons(bt->dialog_message, "Quit", NULL, NULL);
 | |
|     dialog_message_show(bt->dialogs, bt->dialog_message);
 | |
| }
 | |
| 
 | |
| static void bt_close_rpc_connection(Bt* bt) {
 | |
|     if(bt->profile == BtProfileSerial && bt->rpc_session) {
 | |
|         FURI_LOG_I(TAG, "Close RPC connection");
 | |
|         furi_event_flag_set(bt->rpc_event, BT_RPC_EVENT_DISCONNECTED);
 | |
|         rpc_session_close(bt->rpc_session);
 | |
|         furi_hal_bt_serial_set_event_callback(0, NULL, NULL);
 | |
|         bt->rpc_session = NULL;
 | |
|     }
 | |
| }
 | |
| 
 | |
| static void bt_change_profile(Bt* bt, BtMessage* message) {
 | |
|     if(furi_hal_bt_is_ble_gatt_gap_supported()) {
 | |
|         bt_settings_load(&bt->bt_settings);
 | |
|         bt_close_rpc_connection(bt);
 | |
| 
 | |
|         FuriHalBtProfile furi_profile;
 | |
|         if(message->data.profile == BtProfileHidKeyboard) {
 | |
|             furi_profile = FuriHalBtProfileHidKeyboard;
 | |
|         } else {
 | |
|             furi_profile = FuriHalBtProfileSerial;
 | |
|         }
 | |
| 
 | |
|         if(furi_hal_bt_change_app(furi_profile, bt_on_gap_event_callback, bt)) {
 | |
|             FURI_LOG_I(TAG, "Bt App started");
 | |
|             if(bt->bt_settings.enabled) {
 | |
|                 furi_hal_bt_start_advertising();
 | |
|             }
 | |
|             furi_hal_bt_set_key_storage_change_callback(bt_on_key_storage_change_callback, bt);
 | |
|             bt->profile = message->data.profile;
 | |
|             *message->result = true;
 | |
|         } else {
 | |
|             FURI_LOG_E(TAG, "Failed to start Bt App");
 | |
|             *message->result = false;
 | |
|         }
 | |
|     } else {
 | |
|         bt_show_warning(bt, "Radio stack doesn't support this app");
 | |
|         *message->result = false;
 | |
|     }
 | |
|     furi_event_flag_set(bt->api_event, BT_API_UNLOCK_EVENT);
 | |
| }
 | |
| 
 | |
| static void bt_close_connection(Bt* bt) {
 | |
|     bt_close_rpc_connection(bt);
 | |
|     furi_event_flag_set(bt->api_event, BT_API_UNLOCK_EVENT);
 | |
| }
 | |
| 
 | |
| int32_t bt_srv(void* p) {
 | |
|     UNUSED(p);
 | |
|     Bt* bt = bt_alloc();
 | |
| 
 | |
|     if(furi_hal_rtc_get_boot_mode() != FuriHalRtcBootModeNormal) {
 | |
|         FURI_LOG_W(TAG, "Skipped BT init: device in special startup mode");
 | |
|         ble_glue_wait_for_c2_start(FURI_HAL_BT_C2_START_TIMEOUT);
 | |
|         furi_record_create(RECORD_BT, bt);
 | |
|         return 0;
 | |
|     }
 | |
| 
 | |
|     // Read keys
 | |
|     if(!bt_keys_storage_load(bt)) {
 | |
|         FURI_LOG_W(TAG, "Failed to load bonding keys");
 | |
|     }
 | |
| 
 | |
|     // Start radio stack
 | |
|     if(!furi_hal_bt_start_radio_stack()) {
 | |
|         FURI_LOG_E(TAG, "Radio stack start failed");
 | |
|     }
 | |
| 
 | |
|     if(furi_hal_bt_is_ble_gatt_gap_supported()) {
 | |
|         if(!furi_hal_bt_start_app(FuriHalBtProfileSerial, bt_on_gap_event_callback, bt)) {
 | |
|             FURI_LOG_E(TAG, "BLE App start failed");
 | |
|         } else {
 | |
|             if(bt->bt_settings.enabled) {
 | |
|                 furi_hal_bt_start_advertising();
 | |
|             }
 | |
|             furi_hal_bt_set_key_storage_change_callback(bt_on_key_storage_change_callback, bt);
 | |
|         }
 | |
|     } else {
 | |
|         bt_show_warning(bt, "Unsupported radio stack");
 | |
|         bt->status = BtStatusUnavailable;
 | |
|     }
 | |
| 
 | |
|     furi_record_create(RECORD_BT, bt);
 | |
| 
 | |
|     BtMessage message;
 | |
|     while(1) {
 | |
|         furi_check(
 | |
|             furi_message_queue_get(bt->message_queue, &message, FuriWaitForever) == FuriStatusOk);
 | |
|         if(message.type == BtMessageTypeUpdateStatus) {
 | |
|             // Update view ports
 | |
|             bt_statusbar_update(bt);
 | |
|             bt_pin_code_hide(bt);
 | |
|             if(bt->status_changed_cb) {
 | |
|                 bt->status_changed_cb(bt->status, bt->status_changed_ctx);
 | |
|             }
 | |
|         } else if(message.type == BtMessageTypeUpdateBatteryLevel) {
 | |
|             // Update battery level
 | |
|             furi_hal_bt_update_battery_level(message.data.battery_level);
 | |
|         } else if(message.type == BtMessageTypeUpdatePowerState) {
 | |
|             furi_hal_bt_update_power_state();
 | |
|         } else if(message.type == BtMessageTypePinCodeShow) {
 | |
|             // Display PIN code
 | |
|             bt_pin_code_show(bt, message.data.pin_code);
 | |
|         } else if(message.type == BtMessageTypeKeysStorageUpdated) {
 | |
|             bt_keys_storage_save(bt);
 | |
|         } else if(message.type == BtMessageTypeSetProfile) {
 | |
|             bt_change_profile(bt, &message);
 | |
|         } else if(message.type == BtMessageTypeDisconnect) {
 | |
|             bt_close_connection(bt);
 | |
|         } else if(message.type == BtMessageTypeForgetBondedDevices) {
 | |
|             bt_keys_storage_delete(bt);
 | |
|         }
 | |
|     }
 | |
|     return 0;
 | |
| }
 |