/*
 * (C) 2016-2017 by Holger Hans Peter Freyther
 *
 * All Rights Reserved
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 */

#include "mncc.h"
#include "mncc_protocol.h"
#include "app.h"
#include "logging.h"
#include "call.h"

#include <osmocom/gsm/protocol/gsm_03_40.h>

#include <osmocom/core/socket.h>
#include <osmocom/core/utils.h>

#include <sys/socket.h>
#include <sys/un.h>

#include <errno.h>
#include <unistd.h>

extern void *tall_mncc_ctx;

static void close_connection(struct mncc_connection *conn);

static void mncc_leg_release(struct mncc_call_leg *leg)
{
	osmo_timer_del(&leg->cmd_timeout);
	call_leg_release(&leg->base);
}

static void cmd_timeout(void *data)
{
	struct mncc_call_leg *leg = data;
	struct call_leg *other_leg;

	LOGP(DMNCC, LOGL_ERROR, "command(0x%x) never arrived for leg(%u)\n",
		leg->rsp_wanted, leg->callref);

	other_leg = call_leg_other(&leg->base);
	if (other_leg)
		other_leg->release_call(other_leg);
	mncc_leg_release(leg);
}

static void start_cmd_timer(struct mncc_call_leg *leg, uint32_t expected_next)
{
	leg->rsp_wanted = expected_next;

	leg->cmd_timeout.cb = cmd_timeout;
	leg->cmd_timeout.data = leg;
	LOGP(DMNCC, LOGL_DEBUG, "Starting Timer for %s\n", osmo_mncc_name(expected_next));
	osmo_timer_schedule(&leg->cmd_timeout, 5, 0);
}

static void stop_cmd_timer(struct mncc_call_leg *leg, uint32_t got_res)
{
	if (leg->rsp_wanted != got_res) {
		LOGP(DMNCC, LOGL_ERROR, "Wanted response(%s) but got(%s) for leg(%u)\n",
			osmo_mncc_name(leg->rsp_wanted), osmo_mncc_name(got_res), leg->callref);
		return;
	}

	LOGP(DMNCC, LOGL_DEBUG,
		"Got response(%s), stopping timer on leg(%u)\n",
		osmo_mncc_name(got_res), leg->callref);
	osmo_timer_del(&leg->cmd_timeout);
}

/* Find a MNCC Call leg (whether MO or MT) by given callref */
static struct mncc_call_leg *mncc_find_leg(uint32_t callref)
{
	struct call *call;

	llist_for_each_entry(call, &g_call_list, entry) {
		if (call->initial && call->initial->type == CALL_TYPE_MNCC) {
			struct mncc_call_leg *leg = (struct mncc_call_leg *) call->initial;
			if (leg->callref == callref)
				return leg;
		}
		if (call->remote && call->remote->type == CALL_TYPE_MNCC) {
			struct mncc_call_leg *leg = (struct mncc_call_leg *) call->remote;
			if (leg->callref == callref)
				return leg;
		}
	}

	return NULL;
}

/* Find a MNCC Call leg (by callref) which is not yet in release */
static struct mncc_call_leg *mncc_find_leg_not_released(uint32_t callref)
{
	struct mncc_call_leg *leg = mncc_find_leg(callref);
	if (!leg)
		return NULL;
	if (leg->base.in_release)
		return NULL;
	return leg;
}

static void mncc_fill_header(struct gsm_mncc *mncc, uint32_t msg_type, uint32_t callref)
{
	struct mncc_call_leg *mncc_leg;

	mncc->msg_type = msg_type;
	mncc->callref = callref;
	if (MNCC_DISC_REQ == msg_type || MNCC_REL_REQ == msg_type) {
		mncc_leg = mncc_find_leg(callref);
		mncc->fields |= MNCC_F_CAUSE;
		mncc->cause.coding = GSM48_CAUSE_CODING_GSM;
		mncc->cause.location = GSM48_CAUSE_LOC_PUN_S_LU;
		mncc->cause.value = mncc_leg->base.cause;
	}
}

static int mncc_write(struct mncc_connection *conn, struct gsm_mncc *mncc)
{
	int rc;

	LOGP(DMNCC, LOGL_DEBUG, "tx MNCC %s with SDP=%s\n", osmo_mncc_name(mncc->msg_type),
	     osmo_quote_str(mncc->sdp, -1));

	/*
	 * TODO: we need to put cause in here for release or such? shall we return a
	 * static struct?
	 */
	rc = write(conn->fd.fd, mncc, sizeof(*mncc));
	if (rc != sizeof(*mncc)) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to send message for call(%u)\n", mncc->callref);
		close_connection(conn);
	}

	return rc;
}

static int mncc_send(struct mncc_connection *conn, uint32_t msg_type, uint32_t callref)
{
	struct gsm_mncc mncc = { 0, };

	mncc_fill_header(&mncc, msg_type, callref);
	return mncc_write(conn, &mncc);
}

static int mncc_rtp_write(struct mncc_connection *conn, struct gsm_mncc_rtp *rtp)
{
	int rc;

	LOGP(DMNCC, LOGL_DEBUG, "tx MNCC %s with SDP=%s\n", osmo_mncc_name(rtp->msg_type),
	     osmo_quote_str(rtp->sdp, -1));

	rc = write(conn->fd.fd, rtp, sizeof(*rtp));
	if (rc != sizeof(*rtp)) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to send message for call(%u): %d\n", rtp->callref, rc);
		close_connection(conn);
	}

	return rc;
}

static int mncc_rtp_send(struct mncc_connection *conn, uint32_t msg_type, uint32_t callref, const char *sdp)
{
	struct gsm_mncc_rtp mncc = { 0, };

	mncc.msg_type = msg_type;
	mncc.callref = callref;
	if (sdp)
		OSMO_STRLCPY_ARRAY(mncc.sdp, sdp);

	return mncc_rtp_write(conn, &mncc);
}

/* Send a MNCC_RTP_CONNECT to the MSC for the given call legs */
static bool send_rtp_connect(struct mncc_call_leg *leg, struct call_leg *other)
{
	struct gsm_mncc_rtp mncc = { 0, };
	int rc;
	char ip_addr[INET6_ADDRSTRLEN];

	/*
	 * Send RTP CONNECT and we handle the general failure of it by
	 * tearing down the call.
	 */
	mncc.msg_type = MNCC_RTP_CONNECT;
	mncc.callref = leg->callref;
	mncc.addr = other->addr;
	mncc.payload_type = other->payload_type;

	/* Forward whichever SDP was last received on the other call leg */
	OSMO_STRLCPY_ARRAY(mncc.sdp, other->rx_sdp);

	/*
	 * FIXME: mncc.payload_msg_type should already be compatible.. but
	 * payload_type should be different..
	 */
	LOGP(DMNCC, LOGL_DEBUG, "SEND rtp_connect: IP=(%s) PORT=(%u)\n",
	     osmo_sockaddr_ntop((const struct sockaddr*)&other->addr, ip_addr),
	     osmo_sockaddr_port((const struct sockaddr*)&other->addr));
	rc = mncc_rtp_write(leg->conn, &mncc);
	if (rc != sizeof(mncc)) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to send message for call(%u)\n",
			leg->callref);
		close_connection(leg->conn);
		return false;
	}
	return true;
}

static void update_rtp(struct call_leg *_leg) {

	struct mncc_call_leg *leg;

	LOGP(DMNCC, LOGL_DEBUG, "UPDATE RTP for LEG Type (%u)\n", _leg->type);

	if (_leg->type == CALL_TYPE_MNCC) {
		leg = (struct mncc_call_leg *) _leg;
		struct call_leg *other = call_leg_other(&leg->base);
		if (!other)
			goto ret_release;
		send_rtp_connect(leg, other);
	} else if (_leg->type == CALL_TYPE_SIP) {
		leg = (struct mncc_call_leg *) call_leg_other(_leg);
		if (!leg)
			goto ret_release;
		send_rtp_connect(leg, _leg);
	} else {
		OSMO_ASSERT(false);
	}
	return;
ret_release:
	LOGP(DMNCC, LOGL_ERROR, "Failed to find other leg.\n");
	_leg->release_call(_leg);
}


/* CONNECT call-back for MNCC call leg */
static void mncc_call_leg_connect(struct call_leg *_leg)
{
	struct mncc_call_leg *leg;
	struct call_leg *other;

	OSMO_ASSERT(_leg->type == CALL_TYPE_MNCC);
	leg = (struct mncc_call_leg *) _leg;

	other = call_leg_other(_leg);
	OSMO_ASSERT(other);

	if (!send_rtp_connect(leg, other))
		return;

	start_cmd_timer(leg, MNCC_SETUP_COMPL_IND);
	mncc_send(leg->conn, MNCC_SETUP_RSP, leg->callref);
}

/* RING call-back for MNCC call leg */
static void mncc_call_leg_ring(struct call_leg *_leg)
{
	struct gsm_mncc out_mncc = { 0, };
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	OSMO_ASSERT(_leg->type == CALL_TYPE_MNCC);
	leg = (struct mncc_call_leg *) _leg;

	mncc_fill_header(&out_mncc, MNCC_ALERT_REQ, leg->callref);
	/* GSM 04.08 10.5.4.21 */
	out_mncc.fields |= MNCC_F_PROGRESS;
	out_mncc.progress.coding = GSM48_CAUSE_CODING_GSM; /* Standard defined for the GSM PLMNS */
	out_mncc.progress.location = GSM48_CAUSE_LOC_PRN_S_LU; /* Private network serving the local user */
	out_mncc.progress.descr = GSM48_PROGR_IN_BAND_AVAIL; /* In-band information or appropriate pattern now available */

	mncc_write(leg->conn, &out_mncc);

	/*
	 * If we have remote IP/port let's connect it already.
	 * FIXME: We would like to keep this as recvonly...
	 */
	other_leg = call_leg_other(&leg->base);
	if (other_leg && other_leg->addr.ss_family != AF_UNSPEC &&
	    osmo_sockaddr_port((const struct sockaddr *)&other_leg->addr) != 0)
		send_rtp_connect(leg, other_leg);
}

/* RELEASE call-back for MNCC call leg */
static void mncc_call_leg_release(struct call_leg *_leg)
{
	struct mncc_call_leg *leg;

	OSMO_ASSERT(_leg->type == CALL_TYPE_MNCC);
	leg = (struct mncc_call_leg *) _leg;

	/* drop it directly, if not connected */
	if (leg->conn->state != MNCC_READY) {
		LOGP(DMNCC, LOGL_DEBUG,
			"MNCC not connected releasing leg(%u)\n", leg->callref);
		return mncc_leg_release(leg);
	}

	switch (leg->state) {
	case MNCC_CC_INITIAL:
		LOGP(DMNCC, LOGL_DEBUG,
			"Releasing call in initial-state leg(%u)\n", leg->callref);
		if (leg->dir == MNCC_DIR_MO) {
			mncc_send(leg->conn, MNCC_REJ_REQ, leg->callref);
			osmo_timer_del(&leg->cmd_timeout);
			mncc_leg_release(leg);
		} else {
			leg->base.in_release = true;
			start_cmd_timer(leg, MNCC_REL_CNF);
			mncc_send(leg->conn, MNCC_REL_REQ, leg->callref);
		}
		break;
	case MNCC_CC_PROCEEDING:
	case MNCC_CC_CONNECTED:
	case MNCC_CC_HOLD:
		LOGP(DMNCC, LOGL_DEBUG,
			"Releasing call in non-initial leg(%u) cause(%s)\n", leg->callref, gsm48_cc_cause_name(leg->base.cause));
		leg->base.in_release = true;
		start_cmd_timer(leg, MNCC_REL_IND);
		mncc_send(leg->conn, MNCC_DISC_REQ, leg->callref);
		break;
	default:
		LOGP(DMNCC, LOGL_ERROR, "Unknown state leg(%u) state(%d)\n",
			leg->callref, leg->state);
		break;
	}
}

/* Close the MNCC connection/socket */
static void close_connection(struct mncc_connection *conn)
{
	if (conn->fd.fd < 0)
		return;

	osmo_fd_unregister(&conn->fd);
	close(conn->fd.fd);
	conn->fd.fd = -1;
	osmo_timer_schedule(&conn->reconnect, 5, 0);
	conn->state = MNCC_DISCONNECTED;
	if (conn->on_disconnect)
		conn->on_disconnect(conn);
}

static void continue_mo_call(struct mncc_call_leg *leg)
{
	char *dest, *source;

	/* TODO.. continue call obviously only for MO call right now */
	mncc_send(leg->conn, MNCC_CALL_PROC_REQ, leg->callref);
	leg->state = MNCC_CC_PROCEEDING;

	if (leg->called.type == GSM340_TYPE_INTERNATIONAL)
		dest = talloc_asprintf(leg, "+%.32s", leg->called.number);
	else
		dest = talloc_asprintf(leg, "%.32s", leg->called.number);

	if (leg->conn->app->use_imsi_as_id)
		source = talloc_asprintf(leg, "%.16s", leg->imsi);
	else
		source = talloc_asprintf(leg, "%.32s", leg->calling.number);

	app_route_call(leg->base.call, source, dest);
}

static void continue_mt_call(struct mncc_call_leg *leg)
{
	struct call_leg *other_leg;

	/* TODO.. check codec selection */
	other_leg = call_leg_other(&leg->base);
	if (!other_leg)
		return;

	/* assume the type is compatible */
	other_leg->payload_type = leg->base.payload_type;
}

static void continue_call(struct mncc_call_leg *leg)
{
	if (leg->dir == MNCC_DIR_MO)
		return continue_mo_call(leg);
	return continue_mt_call(leg);
}

static void check_rtp_connect(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc_rtp *rtp;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	if (rc < sizeof(*rtp)) {
		LOGP(DMNCC, LOGL_ERROR, "gsm_mncc_rtp of wrong size %d < %zu\n",
			rc, sizeof(*rtp));
		return close_connection(conn);
	}

	rtp = (const struct gsm_mncc_rtp *) buf;
	leg = mncc_find_leg_not_released(rtp->callref);
	if (!leg) {
		LOGP(DMNCC, LOGL_ERROR, "leg(%u) can not be found\n", rtp->callref);
		mncc_send(conn, MNCC_REJ_REQ, rtp->callref);
		return;
	}

	call_leg_rx_sdp(&leg->base, rtp->sdp);

	/* extract information about where the RTP is */
	if (rtp->addr.ss_family != AF_UNSPEC ||
	    osmo_sockaddr_port((const struct sockaddr *)&rtp->addr) != 0 ||
	    rtp->payload_type != 0)
		return;

	LOGP(DMNCC, LOGL_ERROR, "leg(%u) rtp connect failed\n", rtp->callref);

	other_leg = call_leg_other(&leg->base);
	if (other_leg)
		other_leg->release_call(other_leg);
	leg->base.release_call(&leg->base);
}

static void check_rtp_create(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc_rtp *rtp;
	struct mncc_call_leg *leg;
	char ip_addr[INET6_ADDRSTRLEN];

	if (rc < sizeof(*rtp)) {
		LOGP(DMNCC, LOGL_ERROR, "gsm_mncc_rtp of wrong size %d < %zu\n",
			rc, sizeof(*rtp));
		return close_connection(conn);
	}

	rtp = (const struct gsm_mncc_rtp *) buf;
	leg = mncc_find_leg_not_released(rtp->callref);
	if (!leg) {
		LOGP(DMNCC, LOGL_ERROR, "call(%u) can not be found\n", rtp->callref);
		mncc_send(conn, MNCC_REJ_REQ, rtp->callref);
		return;
	}

	/* extract information about where the RTP is */
	leg->base.addr = rtp->addr;
	leg->base.payload_type = rtp->payload_type;
	leg->base.payload_msg_type = rtp->payload_msg_type;
	call_leg_rx_sdp(&leg->base, rtp->sdp);

	/* TODO.. now we can continue with the call */
	LOGP(DMNCC, LOGL_INFO,
		"RTP continue leg(%u) ip(%s), port(%u) pt(%u) ptm(%u)\n",
		leg->callref,
		osmo_sockaddr_ntop((const struct sockaddr*)&leg->base.addr, ip_addr),
		osmo_sockaddr_port((const struct sockaddr*)&leg->base.addr),
		leg->base.payload_type, leg->base.payload_msg_type);
	stop_cmd_timer(leg, MNCC_RTP_CREATE);
	continue_call(leg);
}

static int continue_setup(struct mncc_connection *conn, const struct gsm_mncc *mncc)
{
	switch (mncc->called.plan) {
	case GSM340_PLAN_UNKNOWN:
	case GSM340_PLAN_ISDN:
		return 1;
	default:
		LOGP(DMNCC, LOGL_ERROR,
			"leg(%u) has unsupported(%d) dial plan.\n",
			mncc->callref, mncc->called.plan);
		return 0;
	}
}

static const struct gsm_mncc_number emergency_number = {
	.type = CALL_TYPE_MNCC,
	.plan = GSM48_NPI_UNKNOWN,
	.number = "emergency",
};

/* Check + Process MNCC_SETUP_IND (MO call) */
static void check_setup(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	const struct gsm_mncc_number *called;
	struct call *call;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;
	const char *sdp = NULL;
	struct osmo_gcr_parsed gcr;

	if (rc < sizeof(*data)) {
		LOGP(DMNCC, LOGL_ERROR, "gsm_mncc of wrong size %d vs. %zu\n",
			rc, sizeof(*data));
		return close_connection(conn);
	}

	data = (const struct gsm_mncc *) buf;
	called = &data->called;

	/* screen arguments */
	if ((data->fields & MNCC_F_CALLED) == 0) {
		if (!data->emergency) {
			LOGP(DMNCC, LOGL_ERROR,
				"MNCC leg(%u) without called addr fields(%u)\n",
				data->callref, data->fields);
			mncc_send(conn, MNCC_REJ_REQ, data->callref);
			return;
		}

		/* Emergency without a called number present. Use the standard "emergency" number. */
		called = &emergency_number;
	}

	if ((data->fields & MNCC_F_CALLING) == 0) {
		LOGP(DMNCC, LOGL_ERROR,
			"MNCC leg(%u) without calling addr fields(%u)\n",
			data->callref, data->fields);
		mncc_send(conn, MNCC_REJ_REQ, data->callref);
		return;
	}

	/* TODO.. bearer caps and better audio handling */
	if (!continue_setup(conn, data)) {
		LOGP(DMNCC, LOGL_ERROR,
			"MNCC screening parameters failed leg(%u)\n", data->callref);
		mncc_send(conn, MNCC_REJ_REQ, data->callref);
		return;
	}

	/* Decode the Global Call Reference (if present) */
	if (data->fields & MNCC_F_GCR) {
		if (osmo_dec_gcr(&gcr, data->gcr, sizeof(data->gcr)) < 0) {
			LOGP(DMNCC, LOGL_ERROR,
				"MNCC leg(%u) failed to parse GCR\n", data->callref);
			mncc_send(conn, MNCC_REJ_REQ, data->callref);
			return;
		}
	}

	/* Create an RTP port and then allocate a call */
	call = call_mncc_create();
	if (!call) {
		LOGP(DMNCC, LOGL_ERROR,
			"MNCC leg(%u) failed to allocate call\n", data->callref);
		mncc_send(conn, MNCC_REJ_REQ, data->callref);
		return;
	}

	leg = (struct mncc_call_leg *) call->initial;
	leg->base.connect_call = mncc_call_leg_connect;
	leg->base.ring_call = mncc_call_leg_ring;
	leg->base.release_call = mncc_call_leg_release;
	leg->base.update_rtp = update_rtp;
	leg->callref = data->callref;
	leg->conn = conn;
	leg->state = MNCC_CC_INITIAL;
	leg->dir = MNCC_DIR_MO;
	memcpy(&leg->called, called, sizeof(leg->called));
	memcpy(&leg->calling, &data->calling, sizeof(leg->calling));
	memcpy(&leg->imsi, data->imsi, sizeof(leg->imsi));
	call_leg_rx_sdp(&leg->base, data->sdp);

	if (data->fields & MNCC_F_GCR) {
		leg->base.call->gcr_present = true;
		leg->base.call->gcr = gcr;
	}

	LOGP(DMNCC, LOGL_INFO,
		"Created call(%u) with MNCC leg(%u) IMSI(%.16s)\n",
		call->id, leg->callref, data->imsi);

	other_leg = call_leg_other(&leg->base);
	if (other_leg && *other_leg->rx_sdp && other_leg->rx_sdp_changed) {
		sdp = other_leg->rx_sdp;
		other_leg->rx_sdp_changed = false;
	}

	start_cmd_timer(leg, MNCC_RTP_CREATE);
	mncc_rtp_send(conn, MNCC_RTP_CREATE, data->callref, sdp);
}

/*! Find MNCC Call leg by given MNCC message
 *  \param conn MNCC socket/connection
 *  \param[in] buf buffer containing MNCC message
 *  \param[in] rc length of message in \a buf
 *  \param[out] mncc return pointer to MNCC message
 *  \returns call leg (if found) or NULL */
static struct mncc_call_leg *find_leg(struct mncc_connection *conn,
					const char *buf, int rc, const struct gsm_mncc **mncc)
{
	struct mncc_call_leg *leg;

	if (rc < sizeof(**mncc)) {
		LOGP(DMNCC, LOGL_ERROR, "gsm_mncc of wrong size %d vs. %zu\n",
			rc, sizeof(**mncc));
		close_connection(conn);
		return NULL;
	}

	*mncc = (const struct gsm_mncc *) buf;
	leg = mncc_find_leg((*mncc)->callref);
	if (!leg) {
		LOGP(DMNCC, LOGL_ERROR, "call(%u) can not be found\n", (*mncc)->callref);
		return NULL;
	}

	return leg;
}

static void check_disc_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	LOGP(DMNCC,
		LOGL_DEBUG, "Rcvd MNCC_DISC_IND, Cause: %s\n", gsm48_cc_cause_name(data->cause.value));
	LOGP(DMNCC,
		LOGL_DEBUG, "leg(%u) was disconnected. Releasing\n", data->callref);
	leg->base.in_release = true;
	start_cmd_timer(leg, MNCC_REL_CNF);
	mncc_send(leg->conn, MNCC_REL_REQ, leg->callref);

	other_leg = call_leg_other(&leg->base);
	if (other_leg) {
		other_leg->cause = data->cause.value;
		other_leg->release_call(other_leg);
	}
}

static void check_rel_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	LOGP(DMNCC, LOGL_DEBUG, "Rcvd MNCC_REL_IND, Cause: %s\n", gsm48_cc_cause_name(data->cause.value));

	if (leg->base.in_release)
		stop_cmd_timer(leg, MNCC_REL_IND);
	else {
		struct call_leg *other_leg;
		other_leg = call_leg_other(&leg->base);
		if (other_leg) {
			other_leg->cause = data->cause.value;
			other_leg->release_call(other_leg);
		}
	}
	LOGP(DMNCC, LOGL_DEBUG, "leg(%u) was released.\n", data->callref);
	mncc_leg_release(leg);
}

static void check_rel_cnf(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	stop_cmd_timer(leg, MNCC_REL_CNF);
	LOGP(DMNCC, LOGL_DEBUG, "leg(%u) was cnf released.\n", data->callref);
	mncc_leg_release(leg);
}

static void check_stp_cmpl_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	call_leg_rx_sdp(&leg->base, data->sdp);

	LOGP(DMNCC, LOGL_INFO, "leg(%u) is now connected.\n", leg->callref);
	stop_cmd_timer(leg, MNCC_SETUP_COMPL_IND);
	leg->state = MNCC_CC_CONNECTED;
}

static void check_rej_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	leg->cause = data->cause.value;
	other_leg = call_leg_other(&leg->base);
	if (other_leg) {
		other_leg->cause = data->cause.value;
		other_leg->release_call(other_leg);
	}
	LOGP(DMNCC, LOGL_DEBUG, "leg(%u) was rejected with cause(%s).\n", data->callref, gsm48_cc_cause_name(leg->cause));
	mncc_leg_release(leg);
}

static void check_cnf_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;
	const char *sdp = NULL;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	call_leg_rx_sdp(&leg->base, data->sdp);

	/* Forward SDP received from the other side */
	other_leg = call_leg_other(&leg->base);
	if (other_leg && *other_leg->rx_sdp && other_leg->rx_sdp_changed) {
		sdp = other_leg->rx_sdp;
		other_leg->rx_sdp_changed = false;
	}

	LOGP(DMNCC, LOGL_DEBUG,
		"leg(%u) confirmed. creating RTP socket.\n",
		leg->callref);

	start_cmd_timer(leg, MNCC_RTP_CREATE);
	mncc_rtp_send(conn, MNCC_RTP_CREATE, data->callref, sdp);
}

static void check_alrt_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	call_leg_rx_sdp(&leg->base, data->sdp);

	LOGP(DMNCC, LOGL_DEBUG,
		"leg(%u) is alerting.\n", leg->callref);

	other_leg = call_leg_other(&leg->base);
	if (!other_leg) {
		LOGP(DMNCC, LOGL_ERROR, "leg(%u) other leg gone!\n",
			leg->callref);
		mncc_call_leg_release(&leg->base);
		return;
	}

	other_leg->ring_call(other_leg);
}

static void check_hold_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	LOGP(DMNCC, LOGL_DEBUG,
		"leg(%u) is requesting hold.\n", leg->callref);
	other_leg = call_leg_other(&leg->base);
	if (!other_leg) {
		LOGP(DMNCC, LOGL_ERROR, "leg(%u) other leg gone!\n",
			leg->callref);
		mncc_send(leg->conn, MNCC_HOLD_REJ, leg->callref);
		return;
	}
	other_leg->hold_call(other_leg);
	mncc_send(leg->conn, MNCC_HOLD_CNF, leg->callref);
	leg->state = MNCC_CC_HOLD;
}

static void check_retrieve_ind(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	LOGP(DMNCC, LOGL_DEBUG,
		"leg(%u) is requesting unhold.\n", leg->callref);
	other_leg = call_leg_other(&leg->base);
	if (!other_leg) {
		/* The SIP leg went away while we were holding! */
		LOGP(DMNCC, LOGL_ERROR, "leg(%u) other leg gone!\n",
			leg->callref);
		mncc_send(leg->conn, MNCC_RETRIEVE_CNF, leg->callref);
		mncc_call_leg_release(&leg->base);
		return;
	}
	other_leg->retrieve_call(other_leg);
	mncc_send(leg->conn, MNCC_RETRIEVE_CNF, leg->callref);
	/* In case of call waiting/swap, At this point we need to tell the MSC to send
	 * audio to the port of the original call
	 */
	leg->state = MNCC_CC_CONNECTED;
	send_rtp_connect(leg, other_leg);
}

static void check_stp_cnf(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	call_leg_rx_sdp(&leg->base, data->sdp);

	LOGP(DMNCC, LOGL_DEBUG, "leg(%u) setup completed\n", leg->callref);

	other_leg = call_leg_other(&leg->base);
	if (!other_leg) {
		LOGP(DMNCC, LOGL_ERROR, "leg(%u) other leg gone!\n",
			leg->callref);
		mncc_call_leg_release(&leg->base);
		return;
	}

	if (!send_rtp_connect(leg, other_leg))
		return;
	leg->state = MNCC_CC_CONNECTED;
	mncc_send(leg->conn, MNCC_SETUP_COMPL_REQ, leg->callref);

	other_leg->connect_call(other_leg);
}

static void check_dtmf_start(struct mncc_connection *conn, const char *buf, int rc)
{
	struct gsm_mncc out_mncc = { 0, };
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;
	struct call_leg *other_leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	call_leg_rx_sdp(&leg->base, data->sdp);

	LOGP(DMNCC, LOGL_DEBUG, "leg(%u) DTMF key=%c\n", leg->callref, data->keypad);

	other_leg = call_leg_other(&leg->base);
	if (other_leg && other_leg->dtmf)
		other_leg->dtmf(other_leg, data->keypad);

	mncc_fill_header(&out_mncc, MNCC_START_DTMF_RSP, leg->callref);
	out_mncc.fields |= MNCC_F_KEYPAD;
	out_mncc.keypad = data->keypad;
	mncc_write(conn, &out_mncc);
}

static void check_dtmf_stop(struct mncc_connection *conn, const char *buf, int rc)
{
	struct gsm_mncc out_mncc = { 0, };
	const struct gsm_mncc *data;
	struct mncc_call_leg *leg;

	leg = find_leg(conn, buf, rc, &data);
	if (!leg)
		return;

	call_leg_rx_sdp(&leg->base, data->sdp);

	LOGP(DMNCC, LOGL_DEBUG, "leg(%u) DTMF key=%c\n", leg->callref, data->keypad);

	mncc_fill_header(&out_mncc, MNCC_STOP_DTMF_RSP, leg->callref);
	out_mncc.fields |= MNCC_F_KEYPAD;
	out_mncc.keypad = data->keypad;
	mncc_write(conn, &out_mncc);
}

static void check_hello(struct mncc_connection *conn, const char *buf, int rc)
{
	const struct gsm_mncc_hello *hello;

	if (rc != sizeof(*hello)) {
		LOGP(DMNCC, LOGL_ERROR, "Hello shorter than expected %d vs. %zu\n",
			rc, sizeof(*hello));
		return close_connection(conn);
	}

	hello = (const struct gsm_mncc_hello *) buf;
	LOGP(DMNCC, LOGL_NOTICE, "Got hello message version %d\n", hello->version);

	if (hello->version != MNCC_SOCK_VERSION) {
		LOGP(DMNCC, LOGL_NOTICE, "Incompatible version(%d) expected %d\n",
			hello->version, MNCC_SOCK_VERSION);
		return close_connection(conn);
	}

	conn->state = MNCC_READY;
}

int mncc_create_remote_leg(struct mncc_connection *conn, struct call *call)
{
	struct mncc_call_leg *leg;
	struct gsm_mncc mncc = { 0, };
	struct msgb *msg;
	int rc;

	leg = talloc_zero(call, struct mncc_call_leg);
	if (!leg) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to allocate leg call(%u)\n",
			call->id);
		return -1;
	}

	leg->base.type = CALL_TYPE_MNCC;
	leg->base.connect_call = mncc_call_leg_connect;
	leg->base.ring_call = mncc_call_leg_ring;
	leg->base.release_call = mncc_call_leg_release;
	leg->base.call = call;
	leg->base.update_rtp = update_rtp;

	leg->callref = call->id;

	leg->conn = conn;
	leg->state = MNCC_CC_INITIAL;
	leg->dir = MNCC_DIR_MT;

	mncc.msg_type = MNCC_SETUP_REQ;
	mncc.callref = leg->callref;

	mncc.fields |= MNCC_F_CALLING;
	mncc.calling.plan = GSM48_NPI_ISDN_E164;

	if (call->source && call->source[0] == '+') {
		mncc.calling.type = GSM48_TON_INTERNATIONAL;
		OSMO_STRLCPY_ARRAY(mncc.calling.number, call->source + 1);
	} else {
		mncc.calling.type = GSM48_TON_UNKNOWN;
		OSMO_STRLCPY_ARRAY(mncc.calling.number, call->source);
	}

	if (conn->app->use_imsi_as_id) {
		snprintf(mncc.imsi, 15, "%s", call->dest);
	} else {
		mncc.fields |= MNCC_F_CALLED;
		mncc.called.plan = GSM48_NPI_ISDN_E164;
		mncc.called.type = GSM48_TON_UNKNOWN;
		OSMO_STRLCPY_ARRAY(mncc.called.number, call->dest);
	}

	/* Encode the Global Call Reference (if present) */
	if (call->gcr_present) {
		msg = msgb_alloc(sizeof(mncc.gcr), "MNCC GCR");
		if (msg == NULL || (rc = osmo_enc_gcr(msg, &call->gcr)) == 0) {
			LOGP(DMNCC, LOGL_ERROR, "MNCC leg(%u) failed to encode GCR\n", call->id);
		} else {
			memcpy(&mncc.gcr[0], msg->data, rc);
			mncc.fields |= MNCC_F_GCR;
		}
		msgb_free(msg);
	}

	/* The call->initial leg is a SIP call leg that starts an MT call. There was SDP received in the SIP INVITE that
	 * started this call. This here will be the call->remote, always forwarding the SDP that came in on
	 * call->initial. */
	if (call->initial && call->initial->rx_sdp_changed) {
		OSMO_STRLCPY_ARRAY(mncc.sdp, call->initial->rx_sdp);
		call->initial->rx_sdp_changed = false;
	}

	/*
	 * TODO/FIXME:
	 *  - Screening, redirect?
	 */
	rc = mncc_write(conn, &mncc);
	if (rc != sizeof(mncc)) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to send message leg(%u)\n",
			leg->callref);
		talloc_free(leg);
		return -1;
	}

	call->remote = &leg->base;
	return 0;
}

static void mncc_reconnect(void *data)
{
	int rc;
	struct mncc_connection *conn = data;

	rc = osmo_sock_unix_init_ofd(&conn->fd, SOCK_SEQPACKET, 0,
					conn->app->mncc.path, OSMO_SOCK_F_CONNECT);
	if (rc < 0) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to connect(%s). Retrying\n",
			conn->app->mncc.path);
		conn->state = MNCC_DISCONNECTED;
		conn->fd.fd = -1;
		osmo_timer_schedule(&conn->reconnect, 5, 0);
		return;
	}

	LOGP(DMNCC, LOGL_NOTICE, "Reconnected to %s\n", conn->app->mncc.path);
	conn->state = MNCC_WAIT_VERSION;
}

static inline void log_mncc(const char *label, const uint8_t *buf, size_t buflen)
{
	uint32_t msg_type;
	const struct gsm_mncc *gsm_mncc;
	const struct gsm_mncc_rtp *gsm_mncc_rtp;
	const char *sdp = NULL;

	/* Any size errors will be logged elsewhere already, so just exit here if the buffer is too small. */
	if (buflen < 4)
		return;
	memcpy(&msg_type, buf, 4);

	switch (msg_type) {
	case MNCC_SETUP_IND:
	case MNCC_DISC_IND:
	case MNCC_REL_IND:
	case MNCC_REJ_IND:
	case MNCC_REL_CNF:
	case MNCC_SETUP_COMPL_IND:
	case MNCC_SETUP_CNF:
	case MNCC_CALL_CONF_IND:
	case MNCC_ALERT_IND:
	case MNCC_HOLD_IND:
	case MNCC_RETRIEVE_IND:
		if (buflen < sizeof(gsm_mncc))
			return;
		gsm_mncc = (void *)buf;
		sdp = gsm_mncc->sdp;
		break;
	case MNCC_RTP_CREATE:
	case MNCC_RTP_CONNECT:
		if (buflen < sizeof(gsm_mncc_rtp))
			return;
		gsm_mncc_rtp = (void *)buf;
		sdp = gsm_mncc_rtp->sdp;
		break;

	default:
		break;
	}
	if (sdp)
		LOGP(DMNCC, LOGL_DEBUG, "%sMNCC %s with SDP=%s\n", label, osmo_mncc_name(msg_type),
		     osmo_quote_str(sdp, -1));
	else
		LOGP(DMNCC, LOGL_DEBUG, "%sMNCC %s\n", label, osmo_mncc_name(msg_type));
}

/* osmo-fd read call-back for MNCC socket: read MNCC message + dispatch it */
static int mncc_data(struct osmo_fd *fd, unsigned int what)
{
	char buf[4096];
	uint32_t msg_type;
	int rc;
	struct mncc_connection *conn = fd->data;

	rc = read(fd->fd, buf, sizeof(buf));
	if (rc <= 0) {
		LOGP(DMNCC, LOGL_ERROR, "Failed to read %d/%s. Re-connecting.\n",
			rc, strerror(errno));
		goto bad_data;
	}
	if (rc <= 4) {
		LOGP(DMNCC, LOGL_ERROR, "Data too short with: %d\n", rc);
		goto bad_data;
	}

	log_mncc("rx ", (void *)buf, rc);

	/* Handle the received MNCC message */
	memcpy(&msg_type, buf, 4);
	switch (msg_type) {
	case MNCC_SOCKET_HELLO:
		check_hello(conn, buf, rc);
		break;
	case MNCC_SETUP_IND:
		check_setup(conn, buf, rc);
		break;
	case MNCC_RTP_CREATE:
		check_rtp_create(conn, buf, rc);
		break;
	case MNCC_RTP_CONNECT:
		check_rtp_connect(conn, buf, rc);
		break;
	case MNCC_DISC_IND:
		check_disc_ind(conn, buf, rc);
		break;
	case MNCC_REL_IND:
		check_rel_ind(conn, buf, rc);
		break;
	case MNCC_REJ_IND:
		check_rej_ind(conn, buf, rc);
		break;
	case MNCC_REL_CNF:
		check_rel_cnf(conn, buf, rc);
		break;
	case MNCC_SETUP_COMPL_IND:
		check_stp_cmpl_ind(conn, buf, rc);
		break;
	case MNCC_SETUP_CNF:
		check_stp_cnf(conn, buf, rc);
		break;
	case MNCC_CALL_CONF_IND:
		check_cnf_ind(conn, buf, rc);
		break;
	case MNCC_ALERT_IND:
		check_alrt_ind(conn, buf, rc);
		break;
	case MNCC_HOLD_IND:
		check_hold_ind(conn, buf, rc);
		break;
	case MNCC_RETRIEVE_IND:
		check_retrieve_ind(conn, buf, rc);
		break;
	case MNCC_START_DTMF_IND:
		check_dtmf_start(conn, buf, rc);
		break;
	case MNCC_STOP_DTMF_IND:
		check_dtmf_stop(conn, buf, rc);
		break;
	default:
		LOGP(DMNCC, LOGL_ERROR, "Unhandled message type %d/0x%x\n",
			msg_type, msg_type);
		break;
	}
	return 0;

bad_data:
	close_connection(conn);
	return 0;
}

void mncc_connection_init(struct mncc_connection *conn, struct app_config *cfg)
{
	conn->reconnect.cb = mncc_reconnect;
	conn->reconnect.data = conn;
	conn->fd.cb = mncc_data;
	conn->fd.data = conn;
	conn->fd.fd = -1;
	conn->app = cfg;
	conn->state = MNCC_DISCONNECTED;
}

void mncc_connection_start(struct mncc_connection *conn)
{
	LOGP(DMNCC, LOGL_NOTICE, "Scheduling MNCC connect\n");
	osmo_timer_schedule(&conn->reconnect, 0, 0);
}

const struct value_string mncc_conn_state_vals[] = {
	{ MNCC_DISCONNECTED,	"DISCONNECTED"	},
	{ MNCC_WAIT_VERSION,	"WAITING"	},
	{ MNCC_READY,		"READY"		},
	{ 0, NULL },
};