?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
platform/x86: intel_pmc_core: fix out-of-bounds accesses on stack
[linux/fpc-iii.git] / net / atm / mpc.c
blob3b3b1a292ec8e2e862d7fde7b5b258a2f72c5a6a
1 #define pr_fmt(fmt) KBUILD_MODNAME ":%s: " fmt, __func__
2
3 #include <linux/kernel.h>
4 #include <linux/string.h>
5 #include <linux/slab.h>
6 #include <linux/timer.h>
7 #include <linux/init.h>
8 #include <linux/bitops.h>
9 #include <linux/capability.h>
10 #include <linux/seq_file.h>
11
12 /* We are an ethernet device */
13 #include <linux/if_ether.h>
14 #include <linux/netdevice.h>
15 #include <linux/etherdevice.h>
16 #include <net/sock.h>
17 #include <linux/skbuff.h>
18 #include <linux/ip.h>
19 #include <linux/uaccess.h>
20 #include <asm/byteorder.h>
21 #include <net/checksum.h> /* for ip_fast_csum() */
22 #include <net/arp.h>
23 #include <net/dst.h>
24 #include <linux/proc_fs.h>
25
26 /* And atm device */
27 #include <linux/atmdev.h>
28 #include <linux/atmlec.h>
29 #include <linux/atmmpc.h>
30 /* Modular too */
31 #include <linux/module.h>
32
33 #include "lec.h"
34 #include "mpc.h"
35 #include "resources.h"
36
37 /*
38 * mpc.c: Implementation of MPOA client kernel part
39 */
40
41 #if 0
42 #define dprintk(format, args...) \
43 printk(KERN_DEBUG "mpoa:%s: " format, __func__, ##args)
44 #define dprintk_cont(format, args...) printk(KERN_CONT format, ##args)
45 #else
46 #define dprintk(format, args...) \
47 do { if (0) \
48 printk(KERN_DEBUG "mpoa:%s: " format, __func__, ##args);\
49 } while (0)
50 #define dprintk_cont(format, args...) \
51 do { if (0) printk(KERN_CONT format, ##args); } while (0)
52 #endif
53
54 #if 0
55 #define ddprintk(format, args...) \
56 printk(KERN_DEBUG "mpoa:%s: " format, __func__, ##args)
57 #define ddprintk_cont(format, args...) printk(KERN_CONT format, ##args)
58 #else
59 #define ddprintk(format, args...) \
60 do { if (0) \
61 printk(KERN_DEBUG "mpoa:%s: " format, __func__, ##args);\
62 } while (0)
63 #define ddprintk_cont(format, args...) \
64 do { if (0) printk(KERN_CONT format, ##args); } while (0)
65 #endif
66
67 /* mpc_daemon -> kernel */
68 static void MPOA_trigger_rcvd(struct k_message *msg, struct mpoa_client *mpc);
69 static void MPOA_res_reply_rcvd(struct k_message *msg, struct mpoa_client *mpc);
70 static void ingress_purge_rcvd(struct k_message *msg, struct mpoa_client *mpc);
71 static void egress_purge_rcvd(struct k_message *msg, struct mpoa_client *mpc);
72 static void mps_death(struct k_message *msg, struct mpoa_client *mpc);
73 static void clean_up(struct k_message *msg, struct mpoa_client *mpc,
74 int action);
75 static void MPOA_cache_impos_rcvd(struct k_message *msg,
76 struct mpoa_client *mpc);
77 static void set_mpc_ctrl_addr_rcvd(struct k_message *mesg,
78 struct mpoa_client *mpc);
79 static void set_mps_mac_addr_rcvd(struct k_message *mesg,
80 struct mpoa_client *mpc);
81
82 static const uint8_t *copy_macs(struct mpoa_client *mpc,
83 const uint8_t *router_mac,
84 const uint8_t *tlvs, uint8_t mps_macs,
85 uint8_t device_type);
86 static void purge_egress_shortcut(struct atm_vcc *vcc, eg_cache_entry *entry);
87
88 static void send_set_mps_ctrl_addr(const char *addr, struct mpoa_client *mpc);
89 static void mpoad_close(struct atm_vcc *vcc);
90 static int msg_from_mpoad(struct atm_vcc *vcc, struct sk_buff *skb);
91
92 static void mpc_push(struct atm_vcc *vcc, struct sk_buff *skb);
93 static netdev_tx_t mpc_send_packet(struct sk_buff *skb,
94 struct net_device *dev);
95 static int mpoa_event_listener(struct notifier_block *mpoa_notifier,
96 unsigned long event, void *dev);
97 static void mpc_timer_refresh(void);
98 static void mpc_cache_check(unsigned long checking_time);
99
100 static struct llc_snap_hdr llc_snap_mpoa_ctrl = {
101 0xaa, 0xaa, 0x03,
102 {0x00, 0x00, 0x5e},
103 {0x00, 0x03} /* For MPOA control PDUs */
104 };
105 static struct llc_snap_hdr llc_snap_mpoa_data = {
106 0xaa, 0xaa, 0x03,
107 {0x00, 0x00, 0x00},
108 {0x08, 0x00} /* This is for IP PDUs only */
109 };
110 static struct llc_snap_hdr llc_snap_mpoa_data_tagged = {
111 0xaa, 0xaa, 0x03,
112 {0x00, 0x00, 0x00},
113 {0x88, 0x4c} /* This is for tagged data PDUs */
114 };
115
116 static struct notifier_block mpoa_notifier = {
117 mpoa_event_listener,
118 NULL,
119 0
120 };
121
122 struct mpoa_client *mpcs = NULL; /* FIXME */
123 static struct atm_mpoa_qos *qos_head = NULL;
124 static DEFINE_TIMER(mpc_timer, NULL, 0, 0);
125
126
127 static struct mpoa_client *find_mpc_by_itfnum(int itf)
128 {
129 struct mpoa_client *mpc;
130
131 mpc = mpcs; /* our global linked list */
132 while (mpc != NULL) {
133 if (mpc->dev_num == itf)
134 return mpc;
135 mpc = mpc->next;
136 }
137
138 return NULL; /* not found */
139 }
140
141 static struct mpoa_client *find_mpc_by_vcc(struct atm_vcc *vcc)
142 {
143 struct mpoa_client *mpc;
144
145 mpc = mpcs; /* our global linked list */
146 while (mpc != NULL) {
147 if (mpc->mpoad_vcc == vcc)
148 return mpc;
149 mpc = mpc->next;
150 }
151
152 return NULL; /* not found */
153 }
154
155 static struct mpoa_client *find_mpc_by_lec(struct net_device *dev)
156 {
157 struct mpoa_client *mpc;
158
159 mpc = mpcs; /* our global linked list */
160 while (mpc != NULL) {
161 if (mpc->dev == dev)
162 return mpc;
163 mpc = mpc->next;
164 }
165
166 return NULL; /* not found */
167 }
168
169 /*
170 * Functions for managing QoS list
171 */
172
173 /*
174 * Overwrites the old entry or makes a new one.
175 */
176 struct atm_mpoa_qos *atm_mpoa_add_qos(__be32 dst_ip, struct atm_qos *qos)
177 {
178 struct atm_mpoa_qos *entry;
179
180 entry = atm_mpoa_search_qos(dst_ip);
181 if (entry != NULL) {
182 entry->qos = *qos;
183 return entry;
184 }
185
186 entry = kmalloc(sizeof(struct atm_mpoa_qos), GFP_KERNEL);
187 if (entry == NULL) {
188 pr_info("mpoa: out of memory\n");
189 return entry;
190 }
191
192 entry->ipaddr = dst_ip;
193 entry->qos = *qos;
194
195 entry->next = qos_head;
196 qos_head = entry;
197
198 return entry;
199 }
200
201 struct atm_mpoa_qos *atm_mpoa_search_qos(__be32 dst_ip)
202 {
203 struct atm_mpoa_qos *qos;
204
205 qos = qos_head;
206 while (qos) {
207 if (qos->ipaddr == dst_ip)
208 break;
209 qos = qos->next;
210 }
211
212 return qos;
213 }
214
215 /*
216 * Returns 0 for failure
217 */
218 int atm_mpoa_delete_qos(struct atm_mpoa_qos *entry)
219 {
220 struct atm_mpoa_qos *curr;
221
222 if (entry == NULL)
223 return 0;
224 if (entry == qos_head) {
225 qos_head = qos_head->next;
226 kfree(entry);
227 return 1;
228 }
229
230 curr = qos_head;
231 while (curr != NULL) {
232 if (curr->next == entry) {
233 curr->next = entry->next;
234 kfree(entry);
235 return 1;
236 }
237 curr = curr->next;
238 }
239
240 return 0;
241 }
242
243 /* this is buggered - we need locking for qos_head */
244 void atm_mpoa_disp_qos(struct seq_file *m)
245 {
246 struct atm_mpoa_qos *qos;
247
248 qos = qos_head;
249 seq_printf(m, "QoS entries for shortcuts:\n");
250 seq_printf(m, "IP address\n TX:max_pcr pcr min_pcr max_cdv max_sdu\n RX:max_pcr pcr min_pcr max_cdv max_sdu\n");
251
252 while (qos != NULL) {
253 seq_printf(m, "%pI4\n %-7d %-7d %-7d %-7d %-7d\n %-7d %-7d %-7d %-7d %-7d\n",
254 &qos->ipaddr,
255 qos->qos.txtp.max_pcr,
256 qos->qos.txtp.pcr,
257 qos->qos.txtp.min_pcr,
258 qos->qos.txtp.max_cdv,
259 qos->qos.txtp.max_sdu,
260 qos->qos.rxtp.max_pcr,
261 qos->qos.rxtp.pcr,
262 qos->qos.rxtp.min_pcr,
263 qos->qos.rxtp.max_cdv,
264 qos->qos.rxtp.max_sdu);
265 qos = qos->next;
266 }
267 }
268
269 static struct net_device *find_lec_by_itfnum(int itf)
270 {
271 struct net_device *dev;
272 char name[IFNAMSIZ];
273
274 sprintf(name, "lec%d", itf);
275 dev = dev_get_by_name(&init_net, name);
276
277 return dev;
278 }
279
280 static struct mpoa_client *alloc_mpc(void)
281 {
282 struct mpoa_client *mpc;
283
284 mpc = kzalloc(sizeof(struct mpoa_client), GFP_KERNEL);
285 if (mpc == NULL)
286 return NULL;
287 rwlock_init(&mpc->ingress_lock);
288 rwlock_init(&mpc->egress_lock);
289 mpc->next = mpcs;
290 atm_mpoa_init_cache(mpc);
291
292 mpc->parameters.mpc_p1 = MPC_P1;
293 mpc->parameters.mpc_p2 = MPC_P2;
294 memset(mpc->parameters.mpc_p3, 0, sizeof(mpc->parameters.mpc_p3));
295 mpc->parameters.mpc_p4 = MPC_P4;
296 mpc->parameters.mpc_p5 = MPC_P5;
297 mpc->parameters.mpc_p6 = MPC_P6;
298
299 mpcs = mpc;
300
301 return mpc;
302 }
303
304 /*
305 *
306 * start_mpc() puts the MPC on line. All the packets destined
307 * to the lec underneath us are now being monitored and
308 * shortcuts will be established.
309 *
310 */
311 static void start_mpc(struct mpoa_client *mpc, struct net_device *dev)
312 {
313
314 dprintk("(%s)\n", mpc->dev->name);
315 if (!dev->netdev_ops)
316 pr_info("(%s) not starting\n", dev->name);
317 else {
318 mpc->old_ops = dev->netdev_ops;
319 mpc->new_ops = *mpc->old_ops;
320 mpc->new_ops.ndo_start_xmit = mpc_send_packet;
321 dev->netdev_ops = &mpc->new_ops;
322 }
323 }
324
325 static void stop_mpc(struct mpoa_client *mpc)
326 {
327 struct net_device *dev = mpc->dev;
328 dprintk("(%s)", mpc->dev->name);
329
330 /* Lets not nullify lec device's dev->hard_start_xmit */
331 if (dev->netdev_ops != &mpc->new_ops) {
332 dprintk_cont(" mpc already stopped, not fatal\n");
333 return;
334 }
335 dprintk_cont("\n");
336
337 dev->netdev_ops = mpc->old_ops;
338 mpc->old_ops = NULL;
339
340 /* close_shortcuts(mpc); ??? FIXME */
341 }
342
343 static const char *mpoa_device_type_string(char type) __attribute__ ((unused));
344
345 static const char *mpoa_device_type_string(char type)
346 {
347 switch (type) {
348 case NON_MPOA:
349 return "non-MPOA device";
350 case MPS:
351 return "MPS";
352 case MPC:
353 return "MPC";
354 case MPS_AND_MPC:
355 return "both MPS and MPC";
356 }
357
358 return "unspecified (non-MPOA) device";
359 }
360
361 /*
362 * lec device calls this via its netdev_priv(dev)->lane2_ops
363 * ->associate_indicator() when it sees a TLV in LE_ARP packet.
364 * We fill in the pointer above when we see a LANE2 lec initializing
365 * See LANE2 spec 3.1.5
366 *
367 * Quite a big and ugly function but when you look at it
368 * all it does is to try to locate and parse MPOA Device
369 * Type TLV.
370 * We give our lec a pointer to this function and when the
371 * lec sees a TLV it uses the pointer to call this function.
372 *
373 */
374 static void lane2_assoc_ind(struct net_device *dev, const u8 *mac_addr,
375 const u8 *tlvs, u32 sizeoftlvs)
376 {
377 uint32_t type;
378 uint8_t length, mpoa_device_type, number_of_mps_macs;
379 const uint8_t *end_of_tlvs;
380 struct mpoa_client *mpc;
381
382 mpoa_device_type = number_of_mps_macs = 0; /* silence gcc */
383 dprintk("(%s) received TLV(s), ", dev->name);
384 dprintk("total length of all TLVs %d\n", sizeoftlvs);
385 mpc = find_mpc_by_lec(dev); /* Sampo-Fix: moved here from below */
386 if (mpc == NULL) {
387 pr_info("(%s) no mpc\n", dev->name);
388 return;
389 }
390 end_of_tlvs = tlvs + sizeoftlvs;
391 while (end_of_tlvs - tlvs >= 5) {
392 type = ((tlvs[0] << 24) | (tlvs[1] << 16) |
393 (tlvs[2] << 8) | tlvs[3]);
394 length = tlvs[4];
395 tlvs += 5;
396 dprintk(" type 0x%x length %02x\n", type, length);
397 if (tlvs + length > end_of_tlvs) {
398 pr_info("TLV value extends past its buffer, aborting parse\n");
399 return;
400 }
401
402 if (type == 0) {
403 pr_info("mpoa: (%s) TLV type was 0, returning\n",
404 dev->name);
405 return;
406 }
407
408 if (type != TLV_MPOA_DEVICE_TYPE) {
409 tlvs += length;
410 continue; /* skip other TLVs */
411 }
412 mpoa_device_type = *tlvs++;
413 number_of_mps_macs = *tlvs++;
414 dprintk("(%s) MPOA device type '%s', ",
415 dev->name, mpoa_device_type_string(mpoa_device_type));
416 if (mpoa_device_type == MPS_AND_MPC &&
417 length < (42 + number_of_mps_macs*ETH_ALEN)) { /* :) */
418 pr_info("(%s) short MPOA Device Type TLV\n",
419 dev->name);
420 continue;
421 }
422 if ((mpoa_device_type == MPS || mpoa_device_type == MPC) &&
423 length < 22 + number_of_mps_macs*ETH_ALEN) {
424 pr_info("(%s) short MPOA Device Type TLV\n", dev->name);
425 continue;
426 }
427 if (mpoa_device_type != MPS &&
428 mpoa_device_type != MPS_AND_MPC) {
429 dprintk("ignoring non-MPS device ");
430 if (mpoa_device_type == MPC)
431 tlvs += 20;
432 continue; /* we are only interested in MPSs */
433 }
434 if (number_of_mps_macs == 0 &&
435 mpoa_device_type == MPS_AND_MPC) {
436 pr_info("(%s) MPS_AND_MPC has zero MACs\n", dev->name);
437 continue; /* someone should read the spec */
438 }
439 dprintk_cont("this MPS has %d MAC addresses\n",
440 number_of_mps_macs);
441
442 /*
443 * ok, now we can go and tell our daemon
444 * the control address of MPS
445 */
446 send_set_mps_ctrl_addr(tlvs, mpc);
447
448 tlvs = copy_macs(mpc, mac_addr, tlvs,
449 number_of_mps_macs, mpoa_device_type);
450 if (tlvs == NULL)
451 return;
452 }
453 if (end_of_tlvs - tlvs != 0)
454 pr_info("(%s) ignoring %Zd bytes of trailing TLV garbage\n",
455 dev->name, end_of_tlvs - tlvs);
456 }
457
458 /*
459 * Store at least advertizing router's MAC address
460 * plus the possible MAC address(es) to mpc->mps_macs.
461 * For a freshly allocated MPOA client mpc->mps_macs == 0.
462 */
463 static const uint8_t *copy_macs(struct mpoa_client *mpc,
464 const uint8_t *router_mac,
465 const uint8_t *tlvs, uint8_t mps_macs,
466 uint8_t device_type)
467 {
468 int num_macs;
469 num_macs = (mps_macs > 1) ? mps_macs : 1;
470
471 if (mpc->number_of_mps_macs != num_macs) { /* need to reallocate? */
472 if (mpc->number_of_mps_macs != 0)
473 kfree(mpc->mps_macs);
474 mpc->number_of_mps_macs = 0;
475 mpc->mps_macs = kmalloc(num_macs * ETH_ALEN, GFP_KERNEL);
476 if (mpc->mps_macs == NULL) {
477 pr_info("(%s) out of mem\n", mpc->dev->name);
478 return NULL;
479 }
480 }
481 ether_addr_copy(mpc->mps_macs, router_mac);
482 tlvs += 20; if (device_type == MPS_AND_MPC) tlvs += 20;
483 if (mps_macs > 0)
484 memcpy(mpc->mps_macs, tlvs, mps_macs*ETH_ALEN);
485 tlvs += mps_macs*ETH_ALEN;
486 mpc->number_of_mps_macs = num_macs;
487
488 return tlvs;
489 }
490
491 static int send_via_shortcut(struct sk_buff *skb, struct mpoa_client *mpc)
492 {
493 in_cache_entry *entry;
494 struct iphdr *iph;
495 char *buff;
496 __be32 ipaddr = 0;
497
498 static struct {
499 struct llc_snap_hdr hdr;
500 __be32 tag;
501 } tagged_llc_snap_hdr = {
502 {0xaa, 0xaa, 0x03, {0x00, 0x00, 0x00}, {0x88, 0x4c}},
503 0
504 };
505
506 buff = skb->data + mpc->dev->hard_header_len;
507 iph = (struct iphdr *)buff;
508 ipaddr = iph->daddr;
509
510 ddprintk("(%s) ipaddr 0x%x\n",
511 mpc->dev->name, ipaddr);
512
513 entry = mpc->in_ops->get(ipaddr, mpc);
514 if (entry == NULL) {
515 entry = mpc->in_ops->add_entry(ipaddr, mpc);
516 if (entry != NULL)
517 mpc->in_ops->put(entry);
518 return 1;
519 }
520 /* threshold not exceeded or VCC not ready */
521 if (mpc->in_ops->cache_hit(entry, mpc) != OPEN) {
522 ddprintk("(%s) cache_hit: returns != OPEN\n",
523 mpc->dev->name);
524 mpc->in_ops->put(entry);
525 return 1;
526 }
527
528 ddprintk("(%s) using shortcut\n",
529 mpc->dev->name);
530 /* MPOA spec A.1.4, MPOA client must decrement IP ttl at least by one */
531 if (iph->ttl <= 1) {
532 ddprintk("(%s) IP ttl = %u, using LANE\n",
533 mpc->dev->name, iph->ttl);
534 mpc->in_ops->put(entry);
535 return 1;
536 }
537 iph->ttl--;
538 iph->check = 0;
539 iph->check = ip_fast_csum((unsigned char *)iph, iph->ihl);
540
541 if (entry->ctrl_info.tag != 0) {
542 ddprintk("(%s) adding tag 0x%x\n",
543 mpc->dev->name, entry->ctrl_info.tag);
544 tagged_llc_snap_hdr.tag = entry->ctrl_info.tag;
545 skb_pull(skb, ETH_HLEN); /* get rid of Eth header */
546 skb_push(skb, sizeof(tagged_llc_snap_hdr));
547 /* add LLC/SNAP header */
548 skb_copy_to_linear_data(skb, &tagged_llc_snap_hdr,
549 sizeof(tagged_llc_snap_hdr));
550 } else {
551 skb_pull(skb, ETH_HLEN); /* get rid of Eth header */
552 skb_push(skb, sizeof(struct llc_snap_hdr));
553 /* add LLC/SNAP header + tag */
554 skb_copy_to_linear_data(skb, &llc_snap_mpoa_data,
555 sizeof(struct llc_snap_hdr));
556 }
557
558 atomic_add(skb->truesize, &sk_atm(entry->shortcut)->sk_wmem_alloc);
559 ATM_SKB(skb)->atm_options = entry->shortcut->atm_options;
560 entry->shortcut->send(entry->shortcut, skb);
561 entry->packets_fwded++;
562 mpc->in_ops->put(entry);
563
564 return 0;
565 }
566
567 /*
568 * Probably needs some error checks and locking, not sure...
569 */
570 static netdev_tx_t mpc_send_packet(struct sk_buff *skb,
571 struct net_device *dev)
572 {
573 struct mpoa_client *mpc;
574 struct ethhdr *eth;
575 int i = 0;
576
577 mpc = find_mpc_by_lec(dev); /* this should NEVER fail */
578 if (mpc == NULL) {
579 pr_info("(%s) no MPC found\n", dev->name);
580 goto non_ip;
581 }
582
583 eth = (struct ethhdr *)skb->data;
584 if (eth->h_proto != htons(ETH_P_IP))
585 goto non_ip; /* Multi-Protocol Over ATM :-) */
586
587 /* Weed out funny packets (e.g., AF_PACKET or raw). */
588 if (skb->len < ETH_HLEN + sizeof(struct iphdr))
589 goto non_ip;
590 skb_set_network_header(skb, ETH_HLEN);
591 if (skb->len < ETH_HLEN + ip_hdr(skb)->ihl * 4 || ip_hdr(skb)->ihl < 5)
592 goto non_ip;
593
594 while (i < mpc->number_of_mps_macs) {
595 if (ether_addr_equal(eth->h_dest, mpc->mps_macs + i * ETH_ALEN))
596 if (send_via_shortcut(skb, mpc) == 0) /* try shortcut */
597 return NETDEV_TX_OK;
598 i++;
599 }
600
601 non_ip:
602 return __netdev_start_xmit(mpc->old_ops, skb, dev, false);
603 }
604
605 static int atm_mpoa_vcc_attach(struct atm_vcc *vcc, void __user *arg)
606 {
607 int bytes_left;
608 struct mpoa_client *mpc;
609 struct atmmpc_ioc ioc_data;
610 in_cache_entry *in_entry;
611 __be32 ipaddr;
612
613 bytes_left = copy_from_user(&ioc_data, arg, sizeof(struct atmmpc_ioc));
614 if (bytes_left != 0) {
615 pr_info("mpoa:Short read (missed %d bytes) from userland\n",
616 bytes_left);
617 return -EFAULT;
618 }
619 ipaddr = ioc_data.ipaddr;
620 if (ioc_data.dev_num < 0 || ioc_data.dev_num >= MAX_LEC_ITF)
621 return -EINVAL;
622
623 mpc = find_mpc_by_itfnum(ioc_data.dev_num);
624 if (mpc == NULL)
625 return -EINVAL;
626
627 if (ioc_data.type == MPC_SOCKET_INGRESS) {
628 in_entry = mpc->in_ops->get(ipaddr, mpc);
629 if (in_entry == NULL ||
630 in_entry->entry_state < INGRESS_RESOLVED) {
631 pr_info("(%s) did not find RESOLVED entry from ingress cache\n",
632 mpc->dev->name);
633 if (in_entry != NULL)
634 mpc->in_ops->put(in_entry);
635 return -EINVAL;
636 }
637 pr_info("(%s) attaching ingress SVC, entry = %pI4\n",
638 mpc->dev->name, &in_entry->ctrl_info.in_dst_ip);
639 in_entry->shortcut = vcc;
640 mpc->in_ops->put(in_entry);
641 } else {
642 pr_info("(%s) attaching egress SVC\n", mpc->dev->name);
643 }
644
645 vcc->proto_data = mpc->dev;
646 vcc->push = mpc_push;
647
648 return 0;
649 }
650
651 /*
652 *
653 */
654 static void mpc_vcc_close(struct atm_vcc *vcc, struct net_device *dev)
655 {
656 struct mpoa_client *mpc;
657 in_cache_entry *in_entry;
658 eg_cache_entry *eg_entry;
659
660 mpc = find_mpc_by_lec(dev);
661 if (mpc == NULL) {
662 pr_info("(%s) close for unknown MPC\n", dev->name);
663 return;
664 }
665
666 dprintk("(%s)\n", dev->name);
667 in_entry = mpc->in_ops->get_by_vcc(vcc, mpc);
668 if (in_entry) {
669 dprintk("(%s) ingress SVC closed ip = %pI4\n",
670 mpc->dev->name, &in_entry->ctrl_info.in_dst_ip);
671 in_entry->shortcut = NULL;
672 mpc->in_ops->put(in_entry);
673 }
674 eg_entry = mpc->eg_ops->get_by_vcc(vcc, mpc);
675 if (eg_entry) {
676 dprintk("(%s) egress SVC closed\n", mpc->dev->name);
677 eg_entry->shortcut = NULL;
678 mpc->eg_ops->put(eg_entry);
679 }
680
681 if (in_entry == NULL && eg_entry == NULL)
682 dprintk("(%s) unused vcc closed\n", dev->name);
683 }
684
685 static void mpc_push(struct atm_vcc *vcc, struct sk_buff *skb)
686 {
687 struct net_device *dev = (struct net_device *)vcc->proto_data;
688 struct sk_buff *new_skb;
689 eg_cache_entry *eg;
690 struct mpoa_client *mpc;
691 __be32 tag;
692 char *tmp;
693
694 ddprintk("(%s)\n", dev->name);
695 if (skb == NULL) {
696 dprintk("(%s) null skb, closing VCC\n", dev->name);
697 mpc_vcc_close(vcc, dev);
698 return;
699 }
700
701 skb->dev = dev;
702 if (memcmp(skb->data, &llc_snap_mpoa_ctrl,
703 sizeof(struct llc_snap_hdr)) == 0) {
704 struct sock *sk = sk_atm(vcc);
705
706 dprintk("(%s) control packet arrived\n", dev->name);
707 /* Pass control packets to daemon */
708 skb_queue_tail(&sk->sk_receive_queue, skb);
709 sk->sk_data_ready(sk);
710 return;
711 }
712
713 /* data coming over the shortcut */
714 atm_return(vcc, skb->truesize);
715
716 mpc = find_mpc_by_lec(dev);
717 if (mpc == NULL) {
718 pr_info("(%s) unknown MPC\n", dev->name);
719 return;
720 }
721
722 if (memcmp(skb->data, &llc_snap_mpoa_data_tagged,
723 sizeof(struct llc_snap_hdr)) == 0) { /* MPOA tagged data */
724 ddprintk("(%s) tagged data packet arrived\n", dev->name);
725
726 } else if (memcmp(skb->data, &llc_snap_mpoa_data,
727 sizeof(struct llc_snap_hdr)) == 0) { /* MPOA data */
728 pr_info("(%s) Unsupported non-tagged data packet arrived. Purging\n",
729 dev->name);
730 dev_kfree_skb_any(skb);
731 return;
732 } else {
733 pr_info("(%s) garbage arrived, purging\n", dev->name);
734 dev_kfree_skb_any(skb);
735 return;
736 }
737
738 tmp = skb->data + sizeof(struct llc_snap_hdr);
739 tag = *(__be32 *)tmp;
740
741 eg = mpc->eg_ops->get_by_tag(tag, mpc);
742 if (eg == NULL) {
743 pr_info("mpoa: (%s) Didn't find egress cache entry, tag = %u\n",
744 dev->name, tag);
745 purge_egress_shortcut(vcc, NULL);
746 dev_kfree_skb_any(skb);
747 return;
748 }
749
750 /*
751 * See if ingress MPC is using shortcut we opened as a return channel.
752 * This means we have a bi-directional vcc opened by us.
753 */
754 if (eg->shortcut == NULL) {
755 eg->shortcut = vcc;
756 pr_info("(%s) egress SVC in use\n", dev->name);
757 }
758
759 skb_pull(skb, sizeof(struct llc_snap_hdr) + sizeof(tag));
760 /* get rid of LLC/SNAP header */
761 new_skb = skb_realloc_headroom(skb, eg->ctrl_info.DH_length);
762 /* LLC/SNAP is shorter than MAC header :( */
763 dev_kfree_skb_any(skb);
764 if (new_skb == NULL) {
765 mpc->eg_ops->put(eg);
766 return;
767 }
768 skb_push(new_skb, eg->ctrl_info.DH_length); /* add MAC header */
769 skb_copy_to_linear_data(new_skb, eg->ctrl_info.DLL_header,
770 eg->ctrl_info.DH_length);
771 new_skb->protocol = eth_type_trans(new_skb, dev);
772 skb_reset_network_header(new_skb);
773
774 eg->latest_ip_addr = ip_hdr(new_skb)->saddr;
775 eg->packets_rcvd++;
776 mpc->eg_ops->put(eg);
777
778 memset(ATM_SKB(new_skb), 0, sizeof(struct atm_skb_data));
779 netif_rx(new_skb);
780 }
781
782 static struct atmdev_ops mpc_ops = { /* only send is required */
783 .close = mpoad_close,
784 .send = msg_from_mpoad
785 };
786
787 static struct atm_dev mpc_dev = {
788 .ops = &mpc_ops,
789 .type = "mpc",
790 .number = 42,
791 .lock = __SPIN_LOCK_UNLOCKED(mpc_dev.lock)
792 /* members not explicitly initialised will be 0 */
793 };
794
795 static int atm_mpoa_mpoad_attach(struct atm_vcc *vcc, int arg)
796 {
797 struct mpoa_client *mpc;
798 struct lec_priv *priv;
799 int err;
800
801 if (mpcs == NULL) {
802 init_timer(&mpc_timer);
803 mpc_timer_refresh();
804
805 /* This lets us now how our LECs are doing */
806 err = register_netdevice_notifier(&mpoa_notifier);
807 if (err < 0) {
808 del_timer(&mpc_timer);
809 return err;
810 }
811 }
812
813 mpc = find_mpc_by_itfnum(arg);
814 if (mpc == NULL) {
815 dprintk("allocating new mpc for itf %d\n", arg);
816 mpc = alloc_mpc();
817 if (mpc == NULL)
818 return -ENOMEM;
819 mpc->dev_num = arg;
820 mpc->dev = find_lec_by_itfnum(arg);
821 /* NULL if there was no lec */
822 }
823 if (mpc->mpoad_vcc) {
824 pr_info("mpoad is already present for itf %d\n", arg);
825 return -EADDRINUSE;
826 }
827
828 if (mpc->dev) { /* check if the lec is LANE2 capable */
829 priv = netdev_priv(mpc->dev);
830 if (priv->lane_version < 2) {
831 dev_put(mpc->dev);
832 mpc->dev = NULL;
833 } else
834 priv->lane2_ops->associate_indicator = lane2_assoc_ind;
835 }
836
837 mpc->mpoad_vcc = vcc;
838 vcc->dev = &mpc_dev;
839 vcc_insert_socket(sk_atm(vcc));
840 set_bit(ATM_VF_META, &vcc->flags);
841 set_bit(ATM_VF_READY, &vcc->flags);
842
843 if (mpc->dev) {
844 char empty[ATM_ESA_LEN];
845 memset(empty, 0, ATM_ESA_LEN);
846
847 start_mpc(mpc, mpc->dev);
848 /* set address if mpcd e.g. gets killed and restarted.
849 * If we do not do it now we have to wait for the next LE_ARP
850 */
851 if (memcmp(mpc->mps_ctrl_addr, empty, ATM_ESA_LEN) != 0)
852 send_set_mps_ctrl_addr(mpc->mps_ctrl_addr, mpc);
853 }
854
855 __module_get(THIS_MODULE);
856 return arg;
857 }
858
859 static void send_set_mps_ctrl_addr(const char *addr, struct mpoa_client *mpc)
860 {
861 struct k_message mesg;
862
863 memcpy(mpc->mps_ctrl_addr, addr, ATM_ESA_LEN);
864
865 mesg.type = SET_MPS_CTRL_ADDR;
866 memcpy(mesg.MPS_ctrl, addr, ATM_ESA_LEN);
867 msg_to_mpoad(&mesg, mpc);
868 }
869
870 static void mpoad_close(struct atm_vcc *vcc)
871 {
872 struct mpoa_client *mpc;
873 struct sk_buff *skb;
874
875 mpc = find_mpc_by_vcc(vcc);
876 if (mpc == NULL) {
877 pr_info("did not find MPC\n");
878 return;
879 }
880 if (!mpc->mpoad_vcc) {
881 pr_info("close for non-present mpoad\n");
882 return;
883 }
884
885 mpc->mpoad_vcc = NULL;
886 if (mpc->dev) {
887 struct lec_priv *priv = netdev_priv(mpc->dev);
888 priv->lane2_ops->associate_indicator = NULL;
889 stop_mpc(mpc);
890 dev_put(mpc->dev);
891 }
892
893 mpc->in_ops->destroy_cache(mpc);
894 mpc->eg_ops->destroy_cache(mpc);
895
896 while ((skb = skb_dequeue(&sk_atm(vcc)->sk_receive_queue))) {
897 atm_return(vcc, skb->truesize);
898 kfree_skb(skb);
899 }
900
901 pr_info("(%s) going down\n",
902 (mpc->dev) ? mpc->dev->name : "<unknown>");
903 module_put(THIS_MODULE);
904 }
905
906 /*
907 *
908 */
909 static int msg_from_mpoad(struct atm_vcc *vcc, struct sk_buff *skb)
910 {
911
912 struct mpoa_client *mpc = find_mpc_by_vcc(vcc);
913 struct k_message *mesg = (struct k_message *)skb->data;
914 atomic_sub(skb->truesize, &sk_atm(vcc)->sk_wmem_alloc);
915
916 if (mpc == NULL) {
917 pr_info("no mpc found\n");
918 return 0;
919 }
920 dprintk("(%s)", mpc->dev ? mpc->dev->name : "<unknown>");
921 switch (mesg->type) {
922 case MPOA_RES_REPLY_RCVD:
923 dprintk_cont("mpoa_res_reply_rcvd\n");
924 MPOA_res_reply_rcvd(mesg, mpc);
925 break;
926 case MPOA_TRIGGER_RCVD:
927 dprintk_cont("mpoa_trigger_rcvd\n");
928 MPOA_trigger_rcvd(mesg, mpc);
929 break;
930 case INGRESS_PURGE_RCVD:
931 dprintk_cont("nhrp_purge_rcvd\n");
932 ingress_purge_rcvd(mesg, mpc);
933 break;
934 case EGRESS_PURGE_RCVD:
935 dprintk_cont("egress_purge_reply_rcvd\n");
936 egress_purge_rcvd(mesg, mpc);
937 break;
938 case MPS_DEATH:
939 dprintk_cont("mps_death\n");
940 mps_death(mesg, mpc);
941 break;
942 case CACHE_IMPOS_RCVD:
943 dprintk_cont("cache_impos_rcvd\n");
944 MPOA_cache_impos_rcvd(mesg, mpc);
945 break;
946 case SET_MPC_CTRL_ADDR:
947 dprintk_cont("set_mpc_ctrl_addr\n");
948 set_mpc_ctrl_addr_rcvd(mesg, mpc);
949 break;
950 case SET_MPS_MAC_ADDR:
951 dprintk_cont("set_mps_mac_addr\n");
952 set_mps_mac_addr_rcvd(mesg, mpc);
953 break;
954 case CLEAN_UP_AND_EXIT:
955 dprintk_cont("clean_up_and_exit\n");
956 clean_up(mesg, mpc, DIE);
957 break;
958 case RELOAD:
959 dprintk_cont("reload\n");
960 clean_up(mesg, mpc, RELOAD);
961 break;
962 case SET_MPC_PARAMS:
963 dprintk_cont("set_mpc_params\n");
964 mpc->parameters = mesg->content.params;
965 break;
966 default:
967 dprintk_cont("unknown message %d\n", mesg->type);
968 break;
969 }
970 kfree_skb(skb);
971
972 return 0;
973 }
974
975 /* Remember that this function may not do things that sleep */
976 int msg_to_mpoad(struct k_message *mesg, struct mpoa_client *mpc)
977 {
978 struct sk_buff *skb;
979 struct sock *sk;
980
981 if (mpc == NULL || !mpc->mpoad_vcc) {
982 pr_info("mesg %d to a non-existent mpoad\n", mesg->type);
983 return -ENXIO;
984 }
985
986 skb = alloc_skb(sizeof(struct k_message), GFP_ATOMIC);
987 if (skb == NULL)
988 return -ENOMEM;
989 skb_put(skb, sizeof(struct k_message));
990 skb_copy_to_linear_data(skb, mesg, sizeof(*mesg));
991 atm_force_charge(mpc->mpoad_vcc, skb->truesize);
992
993 sk = sk_atm(mpc->mpoad_vcc);
994 skb_queue_tail(&sk->sk_receive_queue, skb);
995 sk->sk_data_ready(sk);
996
997 return 0;
998 }
999
1000 static int mpoa_event_listener(struct notifier_block *mpoa_notifier,
1001 unsigned long event, void *ptr)
1002 {
1003 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
1004 struct mpoa_client *mpc;
1005 struct lec_priv *priv;
1006
1007 if (!net_eq(dev_net(dev), &init_net))
1008 return NOTIFY_DONE;
1009
1010 if (strncmp(dev->name, "lec", 3))
1011 return NOTIFY_DONE; /* we are only interested in lec:s */
1012
1013 switch (event) {
1014 case NETDEV_REGISTER: /* a new lec device was allocated */
1015 priv = netdev_priv(dev);
1016 if (priv->lane_version < 2)
1017 break;
1018 priv->lane2_ops->associate_indicator = lane2_assoc_ind;
1019 mpc = find_mpc_by_itfnum(priv->itfnum);
1020 if (mpc == NULL) {
1021 dprintk("allocating new mpc for %s\n", dev->name);
1022 mpc = alloc_mpc();
1023 if (mpc == NULL) {
1024 pr_info("no new mpc");
1025 break;
1026 }
1027 }
1028 mpc->dev_num = priv->itfnum;
1029 mpc->dev = dev;
1030 dev_hold(dev);
1031 dprintk("(%s) was initialized\n", dev->name);
1032 break;
1033 case NETDEV_UNREGISTER:
1034 /* the lec device was deallocated */
1035 mpc = find_mpc_by_lec(dev);
1036 if (mpc == NULL)
1037 break;
1038 dprintk("device (%s) was deallocated\n", dev->name);
1039 stop_mpc(mpc);
1040 dev_put(mpc->dev);
1041 mpc->dev = NULL;
1042 break;
1043 case NETDEV_UP:
1044 /* the dev was ifconfig'ed up */
1045 mpc = find_mpc_by_lec(dev);
1046 if (mpc == NULL)
1047 break;
1048 if (mpc->mpoad_vcc != NULL)
1049 start_mpc(mpc, dev);
1050 break;
1051 case NETDEV_DOWN:
1052 /* the dev was ifconfig'ed down */
1053 /* this means that the flow of packets from the
1054 * upper layer stops
1055 */
1056 mpc = find_mpc_by_lec(dev);
1057 if (mpc == NULL)
1058 break;
1059 if (mpc->mpoad_vcc != NULL)
1060 stop_mpc(mpc);
1061 break;
1062 case NETDEV_REBOOT:
1063 case NETDEV_CHANGE:
1064 case NETDEV_CHANGEMTU:
1065 case NETDEV_CHANGEADDR:
1066 case NETDEV_GOING_DOWN:
1067 break;
1068 default:
1069 break;
1070 }
1071
1072 return NOTIFY_DONE;
1073 }
1074
1075 /*
1076 * Functions which are called after a message is received from mpcd.
1077 * Msg is reused on purpose.
1078 */
1079
1080
1081 static void MPOA_trigger_rcvd(struct k_message *msg, struct mpoa_client *mpc)
1082 {
1083 __be32 dst_ip = msg->content.in_info.in_dst_ip;
1084 in_cache_entry *entry;
1085
1086 entry = mpc->in_ops->get(dst_ip, mpc);
1087 if (entry == NULL) {
1088 entry = mpc->in_ops->add_entry(dst_ip, mpc);
1089 entry->entry_state = INGRESS_RESOLVING;
1090 msg->type = SND_MPOA_RES_RQST;
1091 msg->content.in_info = entry->ctrl_info;
1092 msg_to_mpoad(msg, mpc);
1093 do_gettimeofday(&(entry->reply_wait));
1094 mpc->in_ops->put(entry);
1095 return;
1096 }
1097
1098 if (entry->entry_state == INGRESS_INVALID) {
1099 entry->entry_state = INGRESS_RESOLVING;
1100 msg->type = SND_MPOA_RES_RQST;
1101 msg->content.in_info = entry->ctrl_info;
1102 msg_to_mpoad(msg, mpc);
1103 do_gettimeofday(&(entry->reply_wait));
1104 mpc->in_ops->put(entry);
1105 return;
1106 }
1107
1108 pr_info("(%s) entry already in resolving state\n",
1109 (mpc->dev) ? mpc->dev->name : "<unknown>");
1110 mpc->in_ops->put(entry);
1111 }
1112
1113 /*
1114 * Things get complicated because we have to check if there's an egress
1115 * shortcut with suitable traffic parameters we could use.
1116 */
1117 static void check_qos_and_open_shortcut(struct k_message *msg,
1118 struct mpoa_client *client,
1119 in_cache_entry *entry)
1120 {
1121 __be32 dst_ip = msg->content.in_info.in_dst_ip;
1122 struct atm_mpoa_qos *qos = atm_mpoa_search_qos(dst_ip);
1123 eg_cache_entry *eg_entry = client->eg_ops->get_by_src_ip(dst_ip, client);
1124
1125 if (eg_entry && eg_entry->shortcut) {
1126 if (eg_entry->shortcut->qos.txtp.traffic_class &
1127 msg->qos.txtp.traffic_class &
1128 (qos ? qos->qos.txtp.traffic_class : ATM_UBR | ATM_CBR)) {
1129 if (eg_entry->shortcut->qos.txtp.traffic_class == ATM_UBR)
1130 entry->shortcut = eg_entry->shortcut;
1131 else if (eg_entry->shortcut->qos.txtp.max_pcr > 0)
1132 entry->shortcut = eg_entry->shortcut;
1133 }
1134 if (entry->shortcut) {
1135 dprintk("(%s) using egress SVC to reach %pI4\n",
1136 client->dev->name, &dst_ip);
1137 client->eg_ops->put(eg_entry);
1138 return;
1139 }
1140 }
1141 if (eg_entry != NULL)
1142 client->eg_ops->put(eg_entry);
1143
1144 /* No luck in the egress cache we must open an ingress SVC */
1145 msg->type = OPEN_INGRESS_SVC;
1146 if (qos &&
1147 (qos->qos.txtp.traffic_class == msg->qos.txtp.traffic_class)) {
1148 msg->qos = qos->qos;
1149 pr_info("(%s) trying to get a CBR shortcut\n",
1150 client->dev->name);
1151 } else
1152 memset(&msg->qos, 0, sizeof(struct atm_qos));
1153 msg_to_mpoad(msg, client);
1154 }
1155
1156 static void MPOA_res_reply_rcvd(struct k_message *msg, struct mpoa_client *mpc)
1157 {
1158 __be32 dst_ip = msg->content.in_info.in_dst_ip;
1159 in_cache_entry *entry = mpc->in_ops->get(dst_ip, mpc);
1160
1161 dprintk("(%s) ip %pI4\n",
1162 mpc->dev->name, &dst_ip);
1163 ddprintk("(%s) entry = %p",
1164 mpc->dev->name, entry);
1165 if (entry == NULL) {
1166 pr_info("(%s) ARGH, received res. reply for an entry that doesn't exist.\n",
1167 mpc->dev->name);
1168 return;
1169 }
1170 ddprintk_cont(" entry_state = %d ", entry->entry_state);
1171
1172 if (entry->entry_state == INGRESS_RESOLVED) {
1173 pr_info("(%s) RESOLVED entry!\n", mpc->dev->name);
1174 mpc->in_ops->put(entry);
1175 return;
1176 }
1177
1178 entry->ctrl_info = msg->content.in_info;
1179 do_gettimeofday(&(entry->tv));
1180 do_gettimeofday(&(entry->reply_wait)); /* Used in refreshing func from now on */
1181 entry->refresh_time = 0;
1182 ddprintk_cont("entry->shortcut = %p\n", entry->shortcut);
1183
1184 if (entry->entry_state == INGRESS_RESOLVING &&
1185 entry->shortcut != NULL) {
1186 entry->entry_state = INGRESS_RESOLVED;
1187 mpc->in_ops->put(entry);
1188 return; /* Shortcut already open... */
1189 }
1190
1191 if (entry->shortcut != NULL) {
1192 pr_info("(%s) entry->shortcut != NULL, impossible!\n",
1193 mpc->dev->name);
1194 mpc->in_ops->put(entry);
1195 return;
1196 }
1197
1198 check_qos_and_open_shortcut(msg, mpc, entry);
1199 entry->entry_state = INGRESS_RESOLVED;
1200 mpc->in_ops->put(entry);
1201
1202 return;
1203
1204 }
1205
1206 static void ingress_purge_rcvd(struct k_message *msg, struct mpoa_client *mpc)
1207 {
1208 __be32 dst_ip = msg->content.in_info.in_dst_ip;
1209 __be32 mask = msg->ip_mask;
1210 in_cache_entry *entry = mpc->in_ops->get_with_mask(dst_ip, mpc, mask);
1211
1212 if (entry == NULL) {
1213 pr_info("(%s) purge for a non-existing entry, ip = %pI4\n",
1214 mpc->dev->name, &dst_ip);
1215 return;
1216 }
1217
1218 do {
1219 dprintk("(%s) removing an ingress entry, ip = %pI4\n",
1220 mpc->dev->name, &dst_ip);
1221 write_lock_bh(&mpc->ingress_lock);
1222 mpc->in_ops->remove_entry(entry, mpc);
1223 write_unlock_bh(&mpc->ingress_lock);
1224 mpc->in_ops->put(entry);
1225 entry = mpc->in_ops->get_with_mask(dst_ip, mpc, mask);
1226 } while (entry != NULL);
1227 }
1228
1229 static void egress_purge_rcvd(struct k_message *msg, struct mpoa_client *mpc)
1230 {
1231 __be32 cache_id = msg->content.eg_info.cache_id;
1232 eg_cache_entry *entry = mpc->eg_ops->get_by_cache_id(cache_id, mpc);
1233
1234 if (entry == NULL) {
1235 dprintk("(%s) purge for a non-existing entry\n",
1236 mpc->dev->name);
1237 return;
1238 }
1239
1240 write_lock_irq(&mpc->egress_lock);
1241 mpc->eg_ops->remove_entry(entry, mpc);
1242 write_unlock_irq(&mpc->egress_lock);
1243
1244 mpc->eg_ops->put(entry);
1245 }
1246
1247 static void purge_egress_shortcut(struct atm_vcc *vcc, eg_cache_entry *entry)
1248 {
1249 struct sock *sk;
1250 struct k_message *purge_msg;
1251 struct sk_buff *skb;
1252
1253 dprintk("entering\n");
1254 if (vcc == NULL) {
1255 pr_info("vcc == NULL\n");
1256 return;
1257 }
1258
1259 skb = alloc_skb(sizeof(struct k_message), GFP_ATOMIC);
1260 if (skb == NULL) {
1261 pr_info("out of memory\n");
1262 return;
1263 }
1264
1265 skb_put(skb, sizeof(struct k_message));
1266 memset(skb->data, 0, sizeof(struct k_message));
1267 purge_msg = (struct k_message *)skb->data;
1268 purge_msg->type = DATA_PLANE_PURGE;
1269 if (entry != NULL)
1270 purge_msg->content.eg_info = entry->ctrl_info;
1271
1272 atm_force_charge(vcc, skb->truesize);
1273
1274 sk = sk_atm(vcc);
1275 skb_queue_tail(&sk->sk_receive_queue, skb);
1276 sk->sk_data_ready(sk);
1277 dprintk("exiting\n");
1278 }
1279
1280 /*
1281 * Our MPS died. Tell our daemon to send NHRP data plane purge to each
1282 * of the egress shortcuts we have.
1283 */
1284 static void mps_death(struct k_message *msg, struct mpoa_client *mpc)
1285 {
1286 eg_cache_entry *entry;
1287
1288 dprintk("(%s)\n", mpc->dev->name);
1289
1290 if (memcmp(msg->MPS_ctrl, mpc->mps_ctrl_addr, ATM_ESA_LEN)) {
1291 pr_info("(%s) wrong MPS\n", mpc->dev->name);
1292 return;
1293 }
1294
1295 /* FIXME: This knows too much of the cache structure */
1296 read_lock_irq(&mpc->egress_lock);
1297 entry = mpc->eg_cache;
1298 while (entry != NULL) {
1299 purge_egress_shortcut(entry->shortcut, entry);
1300 entry = entry->next;
1301 }
1302 read_unlock_irq(&mpc->egress_lock);
1303
1304 mpc->in_ops->destroy_cache(mpc);
1305 mpc->eg_ops->destroy_cache(mpc);
1306 }
1307
1308 static void MPOA_cache_impos_rcvd(struct k_message *msg,
1309 struct mpoa_client *mpc)
1310 {
1311 uint16_t holding_time;
1312 eg_cache_entry *entry = mpc->eg_ops->get_by_cache_id(msg->content.eg_info.cache_id, mpc);
1313
1314 holding_time = msg->content.eg_info.holding_time;
1315 dprintk("(%s) entry = %p, holding_time = %u\n",
1316 mpc->dev->name, entry, holding_time);
1317 if (entry == NULL && holding_time) {
1318 entry = mpc->eg_ops->add_entry(msg, mpc);
1319 mpc->eg_ops->put(entry);
1320 return;
1321 }
1322 if (holding_time) {
1323 mpc->eg_ops->update(entry, holding_time);
1324 return;
1325 }
1326
1327 write_lock_irq(&mpc->egress_lock);
1328 mpc->eg_ops->remove_entry(entry, mpc);
1329 write_unlock_irq(&mpc->egress_lock);
1330
1331 mpc->eg_ops->put(entry);
1332 }
1333
1334 static void set_mpc_ctrl_addr_rcvd(struct k_message *mesg,
1335 struct mpoa_client *mpc)
1336 {
1337 struct lec_priv *priv;
1338 int i, retval ;
1339
1340 uint8_t tlv[4 + 1 + 1 + 1 + ATM_ESA_LEN];
1341
1342 tlv[0] = 00; tlv[1] = 0xa0; tlv[2] = 0x3e; tlv[3] = 0x2a; /* type */
1343 tlv[4] = 1 + 1 + ATM_ESA_LEN; /* length */
1344 tlv[5] = 0x02; /* MPOA client */
1345 tlv[6] = 0x00; /* number of MPS MAC addresses */
1346
1347 memcpy(&tlv[7], mesg->MPS_ctrl, ATM_ESA_LEN); /* MPC ctrl ATM addr */
1348 memcpy(mpc->our_ctrl_addr, mesg->MPS_ctrl, ATM_ESA_LEN);
1349
1350 dprintk("(%s) setting MPC ctrl ATM address to",
1351 mpc->dev ? mpc->dev->name : "<unknown>");
1352 for (i = 7; i < sizeof(tlv); i++)
1353 dprintk_cont(" %02x", tlv[i]);
1354 dprintk_cont("\n");
1355
1356 if (mpc->dev) {
1357 priv = netdev_priv(mpc->dev);
1358 retval = priv->lane2_ops->associate_req(mpc->dev,
1359 mpc->dev->dev_addr,
1360 tlv, sizeof(tlv));
1361 if (retval == 0)
1362 pr_info("(%s) MPOA device type TLV association failed\n",
1363 mpc->dev->name);
1364 retval = priv->lane2_ops->resolve(mpc->dev, NULL, 1, NULL, NULL);
1365 if (retval < 0)
1366 pr_info("(%s) targetless LE_ARP request failed\n",
1367 mpc->dev->name);
1368 }
1369 }
1370
1371 static void set_mps_mac_addr_rcvd(struct k_message *msg,
1372 struct mpoa_client *client)
1373 {
1374
1375 if (client->number_of_mps_macs)
1376 kfree(client->mps_macs);
1377 client->number_of_mps_macs = 0;
1378 client->mps_macs = kmemdup(msg->MPS_ctrl, ETH_ALEN, GFP_KERNEL);
1379 if (client->mps_macs == NULL) {
1380 pr_info("out of memory\n");
1381 return;
1382 }
1383 client->number_of_mps_macs = 1;
1384 }
1385
1386 /*
1387 * purge egress cache and tell daemon to 'action' (DIE, RELOAD)
1388 */
1389 static void clean_up(struct k_message *msg, struct mpoa_client *mpc, int action)
1390 {
1391
1392 eg_cache_entry *entry;
1393 msg->type = SND_EGRESS_PURGE;
1394
1395
1396 /* FIXME: This knows too much of the cache structure */
1397 read_lock_irq(&mpc->egress_lock);
1398 entry = mpc->eg_cache;
1399 while (entry != NULL) {
1400 msg->content.eg_info = entry->ctrl_info;
1401 dprintk("cache_id %u\n", entry->ctrl_info.cache_id);
1402 msg_to_mpoad(msg, mpc);
1403 entry = entry->next;
1404 }
1405 read_unlock_irq(&mpc->egress_lock);
1406
1407 msg->type = action;
1408 msg_to_mpoad(msg, mpc);
1409 }
1410
1411 static void mpc_timer_refresh(void)
1412 {
1413 mpc_timer.expires = jiffies + (MPC_P2 * HZ);
1414 mpc_timer.data = mpc_timer.expires;
1415 mpc_timer.function = mpc_cache_check;
1416 add_timer(&mpc_timer);
1417 }
1418
1419 static void mpc_cache_check(unsigned long checking_time)
1420 {
1421 struct mpoa_client *mpc = mpcs;
1422 static unsigned long previous_resolving_check_time;
1423 static unsigned long previous_refresh_time;
1424
1425 while (mpc != NULL) {
1426 mpc->in_ops->clear_count(mpc);
1427 mpc->eg_ops->clear_expired(mpc);
1428 if (checking_time - previous_resolving_check_time >
1429 mpc->parameters.mpc_p4 * HZ) {
1430 mpc->in_ops->check_resolving(mpc);
1431 previous_resolving_check_time = checking_time;
1432 }
1433 if (checking_time - previous_refresh_time >
1434 mpc->parameters.mpc_p5 * HZ) {
1435 mpc->in_ops->refresh(mpc);
1436 previous_refresh_time = checking_time;
1437 }
1438 mpc = mpc->next;
1439 }
1440 mpc_timer_refresh();
1441 }
1442
1443 static int atm_mpoa_ioctl(struct socket *sock, unsigned int cmd,
1444 unsigned long arg)
1445 {
1446 int err = 0;
1447 struct atm_vcc *vcc = ATM_SD(sock);
1448
1449 if (cmd != ATMMPC_CTRL && cmd != ATMMPC_DATA)
1450 return -ENOIOCTLCMD;
1451
1452 if (!capable(CAP_NET_ADMIN))
1453 return -EPERM;
1454
1455 switch (cmd) {
1456 case ATMMPC_CTRL:
1457 err = atm_mpoa_mpoad_attach(vcc, (int)arg);
1458 if (err >= 0)
1459 sock->state = SS_CONNECTED;
1460 break;
1461 case ATMMPC_DATA:
1462 err = atm_mpoa_vcc_attach(vcc, (void __user *)arg);
1463 break;
1464 default:
1465 break;
1466 }
1467 return err;
1468 }
1469
1470 static struct atm_ioctl atm_ioctl_ops = {
1471 .owner = THIS_MODULE,
1472 .ioctl = atm_mpoa_ioctl,
1473 };
1474
1475 static __init int atm_mpoa_init(void)
1476 {
1477 register_atm_ioctl(&atm_ioctl_ops);
1478
1479 if (mpc_proc_init() != 0)
1480 pr_info("failed to initialize /proc/mpoa\n");
1481
1482 pr_info("mpc.c: initialized\n");
1483
1484 return 0;
1485 }
1486
1487 static void __exit atm_mpoa_cleanup(void)
1488 {
1489 struct mpoa_client *mpc, *tmp;
1490 struct atm_mpoa_qos *qos, *nextqos;
1491 struct lec_priv *priv;
1492
1493 mpc_proc_clean();
1494
1495 del_timer_sync(&mpc_timer);
1496 unregister_netdevice_notifier(&mpoa_notifier);
1497 deregister_atm_ioctl(&atm_ioctl_ops);
1498
1499 mpc = mpcs;
1500 mpcs = NULL;
1501 while (mpc != NULL) {
1502 tmp = mpc->next;
1503 if (mpc->dev != NULL) {
1504 stop_mpc(mpc);
1505 priv = netdev_priv(mpc->dev);
1506 if (priv->lane2_ops != NULL)
1507 priv->lane2_ops->associate_indicator = NULL;
1508 }
1509 ddprintk("about to clear caches\n");
1510 mpc->in_ops->destroy_cache(mpc);
1511 mpc->eg_ops->destroy_cache(mpc);
1512 ddprintk("caches cleared\n");
1513 kfree(mpc->mps_macs);
1514 memset(mpc, 0, sizeof(struct mpoa_client));
1515 ddprintk("about to kfree %p\n", mpc);
1516 kfree(mpc);
1517 ddprintk("next mpc is at %p\n", tmp);
1518 mpc = tmp;
1519 }
1520
1521 qos = qos_head;
1522 qos_head = NULL;
1523 while (qos != NULL) {
1524 nextqos = qos->next;
1525 dprintk("freeing qos entry %p\n", qos);
1526 kfree(qos);
1527 qos = nextqos;
1528 }
1529 }
1530
1531 module_init(atm_mpoa_init);
1532 module_exit(atm_mpoa_cleanup);
1533
1534 MODULE_LICENSE("GPL");
Linux with added FPC-III support