BTServer

Daemon that implements iPhone bluetooth stack. Based on BLUEmagic 2.1.

Implemented services: Handsfree, Phonebook, Remote, A2dp, Hid, Sensor, NetSharing, Gaming, WiAP, Braille.

IPC Client library: MobileBluetooth (a private framework). Obj-C level library: BluetoothManager.

Written in C++ with STL classes.

OS 4.0 Beta 4 - logging: creating /var/mobile/Library/Preferences/com.apple.MobileBluetooth.debug.plist with DiagnosticMode bool set to true and DefaultLevel string set to Debug will create a verbose log in /var/mobile/Library/Logs/BTServer_stdout.log.

Each service is accessed by the stack using a virtual function table of functions inherited from a base service class, so it's possible to easily intercept all functions for a given service and/or modify its behavior. It should also be possible (although not too easy) to create new services overriding about 5-10 functions in the VTable of the base Service class.

Debugging: during debugging Bluetooth may interfere with WiFi, use USB tunneling in that case.

Some client library functions:

typedef void *BTSESSION, **PBTSESSION;

typedef void *BTDISCOVERYAGENT, **PBTDISCOVERYAGENT;

typedef void *BTDEVICE, **PBTDEVICE;

typedef void *PAIRING_AGENT, **PPAIRING_AGENT;

typedef int (*SESSION_EVENT_CALLBACK)(BTSESSION session, void* arg2, void* arg3, void* arg4);

typedef struct { SESSION_EVENT_CALLBACK eventCallback; } SESSION_CALLBACKS, *PSESSION_CALLBACKS;

enum BT_DISCOVERY_EVENT { BT_DISCOVERY_DEVICE_FOUND = 0, BT_DISCOVERY_DEVICE_LOST = 1, BT_DISCOVERY_DEVICE_CHANGED = 2, };

typedef void (*DISCOVERY_STATUS_CALLBACK)(void* arg1, void* arg2);

typedef void (*DISCOVERY_EVENT_CALLBACK)(BTDISCOVERYAGENT agent, BT_DISCOVERY_EVENT event, BTDEVICE device);

typedef struct _DiscoveryAgentCallbacks { DISCOVERY_STATUS_CALLBACK discoveryAgentStatusEventCallback; DISCOVERY_EVENT_CALLBACK discoveryAgentDiscoveryEventCallback; } DISCOVERY_CALLBACKS, *PDISCOVERY_CALLBACKS;

typedef void (*PAIRING_STATUS_CALLBACK)(PAIRING_AGENT agent, int status, BTDEVICE device, void* ctx); typedef void (*PAIRING_PINCODE_CALLBACK)(PAIRING_AGENT agent, BTDEVICE device, int unk1, void* ctx); typedef void (*PAIRING_AUTHORIZATION_CALLBACK)(); typedef void (*PAIRING_USER_CONFIRMATION_CALLBACK)(); typedef void (*PAIRING_PASSKEY_DISPLAY_CALLBACK)();


typedef struct _PairingAgentCallbacks { PAIRING_STATUS_CALLBACK pairingStatusCallback; PAIRING_PINCODE_CALLBACK pairingPincodeCallback; PAIRING_AUTHORIZATION_CALLBACK pairingAuthorizationCallback; PAIRING_USER_CONFIRMATION_CALLBACK pairingUserConfirmationCallback; PAIRING_PASSKEY_DISPLAY_CALLBACK pairingPasskeyDisplayCallback; } PAIRING_AGENT_CALLBACKS, *PPAIRING_AGENT_CALLBACKS;


extern "C" int BTSessionAttachWithRunLoopAsync(CFRunLoopRef runLoop, const char* sessionName, PSESSION_CALLBACKS pCallbacks, void* context, PBTSESSION pSession);

extern "C" int BTDiscoveryAgentCreate(BTSESSION session, PDISCOVERY_CALLBACKS pCallbacks, void* ctx, PBTDISCOVERYAGENT pAgent);

extern "C" int BTDiscoveryAgentStartScan(BTDISCOVERYAGENT agent, int magic1, int magic2);

extern "C" int BTDeviceGetSupportedServices(BTDEVICE device, int* svc);

extern "C" int BTDeviceGetName(BTDEVICE device, char name[0x200]);

extern "C" int BTDeviceAddressFromString(const char* addrString, char macAddr[0x6]);

extern "C" int BTDeviceFromAddress(BTSESSION session, char macAddr[6], PBTDEVICE pDeviceOut);

extern "C" int BTDeviceSetVirtualType(BTDEVICE device, int type);

extern "C" int BTDeviceConnect(BTDEVICE device);

extern "C" int BTDeviceDetect(BTDEVICE device, int unk1, int* outUnk2);

extern "C" int BTDeviceSetAuthorizedServices(BTDEVICE device, int services);

extern "C" int BTDeviceGetComPortForService(BTDEVICE device, int svcIdOrSmth, char*buf, int cbBuf/*0x40*/);

extern "C" int BTPairingAgentCreate(BTSESSION session, PPAIRING_AGENT_CALLBACKS PairingAgentCallbacks, void* ctx, PPAIRING_AGENT pPairingAgent);

extern "C" int BTPairingAgentStart(PAIRING_AGENT pairingAgent);

extern "C" int BTPairingAgentStop(PAIRING_AGENT pairingAgent);

extern "C" int BTPairingAgentDestroy(PAIRING_AGENT pairingAgent);

extern "C" int BTPairingAgentSetPincode(PAIRING_AGENT pairingAgent, BTDEVICE device, const char* pinUtf8);


typedef void* BTLOCALDEVICE;

extern "C" int BTLocalDeviceGetDefault(BTLOCALDEVICE* pLocalDevice);

extern "C" int BTLocalDeviceSetModulePower(BTLOCALDEVICE localDevice, BOOL powerOn);

extern "C" int BTLocalDeviceGetModulePower(BTLOCALDEVICE localDevice);