drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()
[drm/drm-misc.git] / net / caif / cfrfml.c
blob3c335057f2555f7d8172b701179a688ff7dcc7d8
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * Copyright (C) ST-Ericsson AB 2010
4 * Author: Sjur Brendeland
5 */
7 #define pr_fmt(fmt) KBUILD_MODNAME ":%s(): " fmt, __func__
9 #include <linux/stddef.h>
10 #include <linux/spinlock.h>
11 #include <linux/slab.h>
12 #include <linux/unaligned.h>
13 #include <net/caif/caif_layer.h>
14 #include <net/caif/cfsrvl.h>
15 #include <net/caif/cfpkt.h>
17 #define container_obj(layr) container_of(layr, struct cfrfml, serv.layer)
18 #define RFM_SEGMENTATION_BIT 0x01
19 #define RFM_HEAD_SIZE 7
21 static int cfrfml_receive(struct cflayer *layr, struct cfpkt *pkt);
22 static int cfrfml_transmit(struct cflayer *layr, struct cfpkt *pkt);
24 struct cfrfml {
25 struct cfsrvl serv;
26 struct cfpkt *incomplete_frm;
27 int fragment_size;
28 u8 seghead[6];
29 u16 pdu_size;
30 /* Protects serialized processing of packets */
31 spinlock_t sync;
34 static void cfrfml_release(struct cflayer *layer)
36 struct cfsrvl *srvl = container_of(layer, struct cfsrvl, layer);
37 struct cfrfml *rfml = container_obj(&srvl->layer);
39 if (rfml->incomplete_frm)
40 cfpkt_destroy(rfml->incomplete_frm);
42 kfree(srvl);
45 struct cflayer *cfrfml_create(u8 channel_id, struct dev_info *dev_info,
46 int mtu_size)
48 int tmp;
49 struct cfrfml *this = kzalloc(sizeof(struct cfrfml), GFP_ATOMIC);
51 if (!this)
52 return NULL;
54 cfsrvl_init(&this->serv, channel_id, dev_info, false);
55 this->serv.release = cfrfml_release;
56 this->serv.layer.receive = cfrfml_receive;
57 this->serv.layer.transmit = cfrfml_transmit;
59 /* Round down to closest multiple of 16 */
60 tmp = (mtu_size - RFM_HEAD_SIZE - 6) / 16;
61 tmp *= 16;
63 this->fragment_size = tmp;
64 spin_lock_init(&this->sync);
65 snprintf(this->serv.layer.name, CAIF_LAYER_NAME_SZ,
66 "rfm%d", channel_id);
68 return &this->serv.layer;
71 static struct cfpkt *rfm_append(struct cfrfml *rfml, char *seghead,
72 struct cfpkt *pkt, int *err)
74 struct cfpkt *tmppkt;
75 *err = -EPROTO;
76 /* n-th but not last segment */
78 if (cfpkt_extr_head(pkt, seghead, 6) < 0)
79 return NULL;
81 /* Verify correct header */
82 if (memcmp(seghead, rfml->seghead, 6) != 0)
83 return NULL;
85 tmppkt = cfpkt_append(rfml->incomplete_frm, pkt,
86 rfml->pdu_size + RFM_HEAD_SIZE);
88 /* If cfpkt_append failes input pkts are not freed */
89 *err = -ENOMEM;
90 if (tmppkt == NULL)
91 return NULL;
93 *err = 0;
94 return tmppkt;
97 static int cfrfml_receive(struct cflayer *layr, struct cfpkt *pkt)
99 u8 tmp;
100 bool segmented;
101 int err;
102 u8 seghead[6];
103 struct cfrfml *rfml;
104 struct cfpkt *tmppkt = NULL;
106 caif_assert(layr->up != NULL);
107 caif_assert(layr->receive != NULL);
108 rfml = container_obj(layr);
109 spin_lock(&rfml->sync);
111 err = -EPROTO;
112 if (cfpkt_extr_head(pkt, &tmp, 1) < 0)
113 goto out;
114 segmented = tmp & RFM_SEGMENTATION_BIT;
116 if (segmented) {
117 if (rfml->incomplete_frm == NULL) {
118 /* Initial Segment */
119 if (cfpkt_peek_head(pkt, rfml->seghead, 6) != 0)
120 goto out;
122 rfml->pdu_size = get_unaligned_le16(rfml->seghead+4);
124 if (cfpkt_erroneous(pkt))
125 goto out;
126 rfml->incomplete_frm = pkt;
127 pkt = NULL;
128 } else {
130 tmppkt = rfm_append(rfml, seghead, pkt, &err);
131 if (tmppkt == NULL)
132 goto out;
134 if (cfpkt_erroneous(tmppkt))
135 goto out;
137 rfml->incomplete_frm = tmppkt;
140 if (cfpkt_erroneous(tmppkt))
141 goto out;
143 err = 0;
144 goto out;
147 if (rfml->incomplete_frm) {
149 /* Last Segment */
150 tmppkt = rfm_append(rfml, seghead, pkt, &err);
151 if (tmppkt == NULL)
152 goto out;
154 if (cfpkt_erroneous(tmppkt))
155 goto out;
157 rfml->incomplete_frm = NULL;
158 pkt = tmppkt;
159 tmppkt = NULL;
161 /* Verify that length is correct */
162 err = -EPROTO;
163 if (rfml->pdu_size != cfpkt_getlen(pkt) - RFM_HEAD_SIZE + 1)
164 goto out;
167 err = rfml->serv.layer.up->receive(rfml->serv.layer.up, pkt);
169 out:
171 if (err != 0) {
172 if (tmppkt)
173 cfpkt_destroy(tmppkt);
174 if (pkt)
175 cfpkt_destroy(pkt);
176 if (rfml->incomplete_frm)
177 cfpkt_destroy(rfml->incomplete_frm);
178 rfml->incomplete_frm = NULL;
180 pr_info("Connection error %d triggered on RFM link\n", err);
182 /* Trigger connection error upon failure.*/
183 layr->up->ctrlcmd(layr->up, CAIF_CTRLCMD_REMOTE_SHUTDOWN_IND,
184 rfml->serv.dev_info.id);
186 spin_unlock(&rfml->sync);
188 if (unlikely(err == -EAGAIN))
189 /* It is not possible to recover after drop of a fragment */
190 err = -EIO;
192 return err;
196 static int cfrfml_transmit_segment(struct cfrfml *rfml, struct cfpkt *pkt)
198 caif_assert(cfpkt_getlen(pkt) < rfml->fragment_size + RFM_HEAD_SIZE);
200 /* Add info for MUX-layer to route the packet out. */
201 cfpkt_info(pkt)->channel_id = rfml->serv.layer.id;
204 * To optimize alignment, we add up the size of CAIF header before
205 * payload.
207 cfpkt_info(pkt)->hdr_len = RFM_HEAD_SIZE;
208 cfpkt_info(pkt)->dev_info = &rfml->serv.dev_info;
210 return rfml->serv.layer.dn->transmit(rfml->serv.layer.dn, pkt);
213 static int cfrfml_transmit(struct cflayer *layr, struct cfpkt *pkt)
215 int err;
216 u8 seg;
217 u8 head[6];
218 struct cfpkt *rearpkt = NULL;
219 struct cfpkt *frontpkt = pkt;
220 struct cfrfml *rfml = container_obj(layr);
222 caif_assert(layr->dn != NULL);
223 caif_assert(layr->dn->transmit != NULL);
225 if (!cfsrvl_ready(&rfml->serv, &err))
226 goto out;
228 err = -EPROTO;
229 if (cfpkt_getlen(pkt) <= RFM_HEAD_SIZE-1)
230 goto out;
232 err = 0;
233 if (cfpkt_getlen(pkt) > rfml->fragment_size + RFM_HEAD_SIZE)
234 err = cfpkt_peek_head(pkt, head, 6);
236 if (err != 0)
237 goto out;
239 while (cfpkt_getlen(frontpkt) > rfml->fragment_size + RFM_HEAD_SIZE) {
241 seg = 1;
242 err = -EPROTO;
244 if (cfpkt_add_head(frontpkt, &seg, 1) < 0)
245 goto out;
247 * On OOM error cfpkt_split returns NULL.
249 * NOTE: Segmented pdu is not correctly aligned.
250 * This has negative performance impact.
253 rearpkt = cfpkt_split(frontpkt, rfml->fragment_size);
254 if (rearpkt == NULL)
255 goto out;
257 err = cfrfml_transmit_segment(rfml, frontpkt);
259 if (err != 0) {
260 frontpkt = NULL;
261 goto out;
264 frontpkt = rearpkt;
265 rearpkt = NULL;
267 err = -EPROTO;
268 if (cfpkt_add_head(frontpkt, head, 6) < 0)
269 goto out;
273 seg = 0;
274 err = -EPROTO;
276 if (cfpkt_add_head(frontpkt, &seg, 1) < 0)
277 goto out;
279 err = cfrfml_transmit_segment(rfml, frontpkt);
281 frontpkt = NULL;
282 out:
284 if (err != 0) {
285 pr_info("Connection error %d triggered on RFM link\n", err);
286 /* Trigger connection error upon failure.*/
288 layr->up->ctrlcmd(layr->up, CAIF_CTRLCMD_REMOTE_SHUTDOWN_IND,
289 rfml->serv.dev_info.id);
291 if (rearpkt)
292 cfpkt_destroy(rearpkt);
294 if (frontpkt)
295 cfpkt_destroy(frontpkt);
298 return err;