/* (C) 2017 by sysmocom s.f.m.c. GmbH * All Rights Reserved * * Author: Philipp Maier * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU Affero General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Affero General Public License for more details. * * You should have received a copy of the GNU Affero General Public License * along with this program. If not, see . * */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #define SSN_BSSAP 254 /* SCCP_SSN_BSSAP */ #define SENDER_PC 1 /* Our local point code */ /* A pointer to the GSM network we work with. By the current paradigm, * there can only be one gsm_network per MSC. The pointer is set once * when calling a_init() */ static struct gsm_network *gsm_network = NULL; /* Send DTAP message via A-interface */ int a_tx(struct msgb *msg) { struct gsm_subscriber_connection *conn; struct msgb *msg_resp; /* FIXME: Set this to some meaninful value! */ uint8_t link_id = 0x00; OSMO_ASSERT(msg); conn = (struct gsm_subscriber_connection *)msg->dst; OSMO_ASSERT(conn); OSMO_ASSERT(conn->a.scu); LOGP(DMSC, LOGL_DEBUG, "Passing DTAP message from MSC to BSC (conn_id=%i)\n", conn->a.conn_id); msg->l3h = msg->data; msg_resp = gsm0808_create_dtap(msg, link_id); if (!msg_resp) { LOGP(DMSC, LOGL_ERROR, "Unable to generate BSSMAP DTAP message!\n"); return -EINVAL; } else LOGP(DMSC, LOGL_DEBUG, "Massage will be sent as BSSMAP DTAP message!\n"); LOGP(DMSC, LOGL_DEBUG, "N-DATA.req(%u, %s)\n", conn->a.conn_id, osmo_hexdump(msg_resp->data, msg_resp->len)); return osmo_sccp_tx_data_msg(conn->a.scu, conn->a.conn_id, msg_resp); } /* Send Cipher mode command via A-interface */ int msc_gsm0808_tx_cipher_mode(struct gsm_subscriber_connection *conn, int cipher, const uint8_t *key, int len, int include_imeisv) { /* TODO generalize for A- and Iu interfaces, don't name after 08.08 */ struct msgb *msg_resp; struct gsm0808_encrypt_info ei; LOGP(DMSC, LOGL_DEBUG, "Passing Cipher mode command message from MSC to BSC (conn_id=%i)\n", conn->a.conn_id); uint8_t crm = 0x01; uint8_t *crm_ptr = NULL; /* Setup encryption information */ if (len > ENCRY_INFO_KEY_MAXLEN || !key) { LOGP(DMSC, LOGL_ERROR, "Cipher mode command message could not be generated due to invalid key! (conn_id=%i)\n", conn->a.conn_id); return -EINVAL; } else { memcpy(&ei.key, key, len); ei.key_len = len; } if (include_imeisv) crm_ptr = &crm; ei.perm_algo[0] = (uint8_t) (1 << cipher); ei.perm_algo_len = 1; msg_resp = gsm0808_create_cipher(&ei, crm_ptr); LOGP(DMSC, LOGL_DEBUG, "N-DATA.req(%u, %s)\n", conn->a.conn_id, osmo_hexdump(msg_resp->data, msg_resp->len)); return osmo_sccp_tx_data_msg(conn->a.scu, conn->a.conn_id, msg_resp); } /* Page a subscriber via A-interface */ int a_page(const char *imsi, uint32_t tmsi, uint16_t lac) { struct a_bsc_addr *addr; struct llist_head *bsc_addr_list = get_bsc_addr_list(); struct gsm0808_cell_id_list cil; int page_count = 0; cil.id_discr = CELL_IDENT_LAC; cil.id_list_lac[0] = lac; cil.id_list_len = 1; /* Deliver paging request to all known BSCs */ llist_for_each_entry(addr, bsc_addr_list, list) { LOGP(DMSC, LOGL_DEBUG, "Passing paging message from MSC to BSC %s (imsi=%s, tmsi=0x%08x, lac=%u)\n", osmo_sccp_addr_dump(&addr->calling_addr), imsi, tmsi, lac); osmo_sccp_tx_unitdata_msg(addr->scu, &addr->called_addr, &addr->calling_addr, gsm0808_create_paging(imsi, &tmsi, &cil, NULL)); page_count++; } if (page_count <= 0) LOGP(DMSC, LOGL_ERROR, "Could not deliver paging because no BSC is available!\n"); return page_count; } /* Convert speech version field */ static uint8_t convert_Abis_sv_to_A_sv(int speech_ver) { /* The speech versions that are transmitted in the Bearer capability * information element, that is transmitted on the Abis interfece * use a different encoding than the permitted speech version * identifier, that is signalled in the channel type element on the A * interface. (See also 3GPP TS 48.008, 3.2.2.1 and 3GPP TS 24.008, * 10.5.103 */ switch (speech_ver) { case GSM48_BCAP_SV_FR: return GSM0808_PERM_FR1; break; case GSM48_BCAP_SV_HR: return GSM0808_PERM_HR1; break; case GSM48_BCAP_SV_EFR: return GSM0808_PERM_FR2; break; case GSM48_BCAP_SV_AMR_F: return GSM0808_PERM_FR3; break; case GSM48_BCAP_SV_AMR_H: return GSM0808_PERM_HR3; break; case GSM48_BCAP_SV_AMR_OFW: return GSM0808_PERM_FR4; break; case GSM48_BCAP_SV_AMR_OHW: return GSM0808_PERM_HR4; break; case GSM48_BCAP_SV_AMR_FW: return GSM0808_PERM_FR5; break; case GSM48_BCAP_SV_AMR_OH: return GSM0808_PERM_HR6; break; } /* If nothing matches, tag the result as invalid */ LOGP(DMSC, LOGL_ERROR, "Invalid permitted speech version / rate detected, discarding.\n"); return 0xFF; } /* Convert speech preference field */ static uint8_t convert_Abis_prev_to_A_pref(int radio) { /* The Radio channel requirement field that is transmitted in the * Bearer capability information element, that is transmitted on the * Abis interfece uses a different encoding than the Channel rate and * type field that is signalled in the channel type element on the A * interface. (See also 3GPP TS 48.008, 3.2.2.1 and 3GPP TS 24.008, * 10.5.102 */ switch (radio) { case GSM48_BCAP_RRQ_FR_ONLY: return GSM0808_SPEECH_FULL_BM; case GSM48_BCAP_RRQ_DUAL_FR: return GSM0808_SPEECH_FULL_PREF; case GSM48_BCAP_RRQ_DUAL_HR: return GSM0808_SPEECH_HALF_PREF; } LOGP(DMSC, LOGL_ERROR, "Invalid speech version / rate combination preference, defaulting to full rate.\n"); return GSM0808_SPEECH_FULL_BM; } /* Assemble the channel type field */ static void enc_channel_type(struct gsm0808_channel_type *ct, const struct gsm_mncc_bearer_cap *bc) { unsigned int i; uint8_t sv; unsigned int count = 0; bool only_gsm_hr = true; ct->ch_indctr = GSM0808_CHAN_SPEECH; for (i = 0; i < ARRAY_SIZE(bc->speech_ver); i++) { if (bc->speech_ver[i] == -1) break; sv = convert_Abis_sv_to_A_sv(bc->speech_ver[i]); if (sv != 0xFF) { /* Detect if something else than * GSM HR V1 is supported */ if (sv == GSM0808_PERM_HR2 || sv == GSM0808_PERM_HR3 || sv == GSM0808_PERM_HR4 || sv == GSM0808_PERM_HR6) only_gsm_hr = false; ct->perm_spch[count] = sv; count++; } } ct->perm_spch_len = count; if (only_gsm_hr) /* Note: We must avoid the usage of GSM HR1 as this * codec only offers very poor audio quality. If the * MS only supports GSM HR1 (and full rate), and has * a preference for half rate. Then we will ignore the * preference and assume a preference for full rate. */ ct->ch_rate_type = GSM0808_SPEECH_FULL_BM; else ct->ch_rate_type = convert_Abis_prev_to_A_pref(bc->radio); } /* Assemble the speech codec field */ static int enc_speeach_codec_list(struct gsm0808_speech_codec_list *scl, const struct gsm0808_channel_type *ct) { unsigned int i; int rc; memset(scl, 0, sizeof(*scl)); for (i = 0; i < ct->perm_spch_len; i++) { rc = gsm0808_extrapolate_speech_codec(&scl->codec[i], ct->perm_spch[i]); if (rc != 0) return -EINVAL; } scl->len = i; return 0; } /* Send assignment request via A-interface */ int a_assign(struct gsm_trans *trans) { struct gsm_subscriber_connection *conn; struct gsm0808_channel_type ct; struct gsm0808_speech_codec_list scl; uint32_t *ci_ptr = NULL; struct msgb *msg; struct sockaddr_storage rtp_addr; struct sockaddr_in rtp_addr_in; conn = trans->conn; OSMO_ASSERT(conn); /* Channel type */ enc_channel_type(&ct, &trans->bearer_cap); /* Speech codec list */ enc_speeach_codec_list(&scl, &ct); /* Package RTP-Address data */ memset(&rtp_addr_in, 0, sizeof(rtp_addr_in)); rtp_addr_in.sin_family = AF_INET; rtp_addr_in.sin_port = osmo_htons(conn->iu.mgcp_rtp_port_ue); rtp_addr_in.sin_addr.s_addr = osmo_htonl(mgcpgw_client_remote_addr_n(gsm_network->mgcpgw.client)); memset(&rtp_addr, 0, sizeof(rtp_addr)); memcpy(&rtp_addr, &rtp_addr_in, sizeof(rtp_addr_in)); msg = gsm0808_create_ass(&ct, NULL, &rtp_addr, &scl, ci_ptr); LOGP(DMSC, LOGL_DEBUG, "N-DATA.req(%u, %s)\n", conn->a.conn_id, osmo_hexdump(msg->data, msg->len)); return osmo_sccp_tx_data_msg(conn->a.scu, conn->a.conn_id, msg); } /* Callback function, called by the SSCP stack when data arrives */ static int sccp_sap_up(struct osmo_prim_hdr *oph, void *_scu) { struct osmo_sccp_user *scu = _scu; struct osmo_scu_prim *scu_prim = (struct osmo_scu_prim *)oph; int rc = 0; struct a_conn_info a_conn_info; memset(&a_conn_info, 0, sizeof(a_conn_info)); a_conn_info.network = gsm_network; switch (OSMO_PRIM_HDR(&scu_prim->oph)) { case OSMO_PRIM(OSMO_SCU_PRIM_N_CONNECT, PRIM_OP_INDICATION): /* Handle inbound connection indication */ a_conn_info.conn_id = scu_prim->u.connect.conn_id; a_conn_info.called_addr = &scu_prim->u.connect.called_addr; a_conn_info.calling_addr = &scu_prim->u.connect.calling_addr; osmo_sccp_tx_conn_resp(scu, scu_prim->u.connect.conn_id, &scu_prim->u.connect.called_addr, NULL, 0); if (msgb_l2len(oph->msg) > 0) { LOGP(DMSC, LOGL_DEBUG, "N-CONNECT.ind(%u, %s)\n", scu_prim->u.connect.conn_id, osmo_hexdump(msgb_l2(oph->msg), msgb_l2len(oph->msg))); rc = msc_handle_dt1(scu, &a_conn_info, oph->msg); } else LOGP(DMSC, LOGL_DEBUG, "N-CONNECT.ind(%u)\n", scu_prim->u.connect.conn_id); break; case OSMO_PRIM(OSMO_SCU_PRIM_N_DATA, PRIM_OP_INDICATION): /* Handle incoming connection oriented data */ a_conn_info.conn_id = scu_prim->u.data.conn_id; LOGP(DMSC, LOGL_DEBUG, "N-DATA.ind(%u, %s)\n", scu_prim->u.data.conn_id, osmo_hexdump(msgb_l2(oph->msg), msgb_l2len(oph->msg))); msc_handle_dt1(scu, &a_conn_info, oph->msg); break; case OSMO_PRIM(OSMO_SCU_PRIM_N_UNITDATA, PRIM_OP_INDICATION): /* Handle inbound UNITDATA */ a_conn_info.called_addr = &scu_prim->u.unitdata.called_addr; a_conn_info.calling_addr = &scu_prim->u.unitdata.calling_addr; DEBUGP(DMSC, "N-UNITDATA.ind(%s)\n", osmo_hexdump(msgb_l2(oph->msg), msgb_l2len(oph->msg))); msc_handle_udt(scu, &a_conn_info, oph->msg); break; default: LOGP(DMSC, LOGL_ERROR, "Unhandled SIGTRAN primitive: %u:%u\n", oph->primitive, oph->operation); break; } return rc; } /* Initalize A interface connection between to MSC and BSC */ int a_init(void *ctx, const char *name, uint32_t local_pc, const char *listen_addr, const char *remote_addr, uint16_t local_port, struct gsm_network *network) { /* FIXME: Remove hardcoded parameters, use parameters in parameter list */ struct osmo_sccp_instance *sccp; LOGP(DMSC, LOGL_NOTICE, "Initalizing SCCP connection to stp...\n"); gsm_network = network; osmo_ss7_init(); /* SCCP Protocol stack */ sccp = osmo_sccp_simple_client(NULL, "osmo-msc", SENDER_PC, OSMO_SS7_ASP_PROT_M3UA, 0, NULL, M3UA_PORT, "127.0.0.1"); osmo_sccp_user_bind(sccp, "osmo-msc", sccp_sap_up, SSN_BSSAP); return 0; }