routing.c 43.2 KB
Newer Older
1
/*
2
 * Copyright (C) 2007-2011 B.A.T.M.A.N. contributors:
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54
 *
 * Marek Lindner, Simon Wunderlich
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of version 2 of the GNU General Public
 * License as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
 * 02110-1301, USA
 *
 */

#include "main.h"
#include "routing.h"
#include "send.h"
#include "hash.h"
#include "soft-interface.h"
#include "hard-interface.h"
#include "icmp_socket.h"
#include "translation-table.h"
#include "originator.h"
#include "ring_buffer.h"
#include "vis.h"
#include "aggregation.h"
#include "gateway_common.h"
#include "gateway_client.h"
#include "unicast.h"

void slide_own_bcast_window(struct batman_if *batman_if)
{
	struct bat_priv *bat_priv = netdev_priv(batman_if->soft_iface);
	struct hashtable_t *hash = bat_priv->orig_hash;
	struct hlist_node *walk;
	struct hlist_head *head;
	struct element_t *bucket;
	struct orig_node *orig_node;
	unsigned long *word;
	int i;
	size_t word_index;

	spin_lock_bh(&bat_priv->orig_hash_lock);

	for (i = 0; i < hash->size; i++) {
		head = &hash->table[i];

55 56
		rcu_read_lock();
		hlist_for_each_entry_rcu(bucket, walk, head, hlist) {
57
			orig_node = bucket->data;
58
			spin_lock_bh(&orig_node->ogm_cnt_lock);
59 60 61 62 63 64
			word_index = batman_if->if_num * NUM_WORDS;
			word = &(orig_node->bcast_own[word_index]);

			bit_get_packet(bat_priv, word, 1, 0);
			orig_node->bcast_own_sum[batman_if->if_num] =
				bit_packet_count(word);
65
			spin_unlock_bh(&orig_node->ogm_cnt_lock);
66
		}
67
		rcu_read_unlock();
68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95
	}

	spin_unlock_bh(&bat_priv->orig_hash_lock);
}

static void update_HNA(struct bat_priv *bat_priv, struct orig_node *orig_node,
		       unsigned char *hna_buff, int hna_buff_len)
{
	if ((hna_buff_len != orig_node->hna_buff_len) ||
	    ((hna_buff_len > 0) &&
	     (orig_node->hna_buff_len > 0) &&
	     (memcmp(orig_node->hna_buff, hna_buff, hna_buff_len) != 0))) {

		if (orig_node->hna_buff_len > 0)
			hna_global_del_orig(bat_priv, orig_node,
					    "originator changed hna");

		if ((hna_buff_len > 0) && (hna_buff))
			hna_global_add_orig(bat_priv, orig_node,
					    hna_buff, hna_buff_len);
	}
}

static void update_route(struct bat_priv *bat_priv,
			 struct orig_node *orig_node,
			 struct neigh_node *neigh_node,
			 unsigned char *hna_buff, int hna_buff_len)
{
96 97
	struct neigh_node *neigh_node_tmp;

98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123
	/* route deleted */
	if ((orig_node->router) && (!neigh_node)) {

		bat_dbg(DBG_ROUTES, bat_priv, "Deleting route towards: %pM\n",
			orig_node->orig);
		hna_global_del_orig(bat_priv, orig_node,
				    "originator timed out");

		/* route added */
	} else if ((!orig_node->router) && (neigh_node)) {

		bat_dbg(DBG_ROUTES, bat_priv,
			"Adding route towards: %pM (via %pM)\n",
			orig_node->orig, neigh_node->addr);
		hna_global_add_orig(bat_priv, orig_node,
				    hna_buff, hna_buff_len);

		/* route changed */
	} else {
		bat_dbg(DBG_ROUTES, bat_priv,
			"Changing route towards: %pM "
			"(now via %pM - was via %pM)\n",
			orig_node->orig, neigh_node->addr,
			orig_node->router->addr);
	}

124 125
	if (neigh_node && !atomic_inc_not_zero(&neigh_node->refcount))
		neigh_node = NULL;
126
	neigh_node_tmp = orig_node->router;
127
	orig_node->router = neigh_node;
128
	if (neigh_node_tmp)
129
		neigh_node_free_ref(neigh_node_tmp);
130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155
}


void update_routes(struct bat_priv *bat_priv, struct orig_node *orig_node,
		   struct neigh_node *neigh_node, unsigned char *hna_buff,
		   int hna_buff_len)
{

	if (!orig_node)
		return;

	if (orig_node->router != neigh_node)
		update_route(bat_priv, orig_node, neigh_node,
			     hna_buff, hna_buff_len);
	/* may be just HNA changed */
	else
		update_HNA(bat_priv, orig_node, hna_buff, hna_buff_len);
}

static int is_bidirectional_neigh(struct orig_node *orig_node,
				struct orig_node *orig_neigh_node,
				struct batman_packet *batman_packet,
				struct batman_if *if_incoming)
{
	struct bat_priv *bat_priv = netdev_priv(if_incoming->soft_iface);
	struct neigh_node *neigh_node = NULL, *tmp_neigh_node = NULL;
156
	struct hlist_node *node;
157
	unsigned char total_count;
158 159
	uint8_t orig_eq_count, neigh_rq_count, tq_own;
	int tq_asym_penalty, ret = 0;
160 161

	if (orig_node == orig_neigh_node) {
162 163 164
		rcu_read_lock();
		hlist_for_each_entry_rcu(tmp_neigh_node, node,
					 &orig_node->neigh_list, list) {
165 166 167 168 169 170 171 172 173 174 175 176 177 178

			if (compare_orig(tmp_neigh_node->addr,
					 orig_neigh_node->orig) &&
			    (tmp_neigh_node->if_incoming == if_incoming))
				neigh_node = tmp_neigh_node;
		}

		if (!neigh_node)
			neigh_node = create_neighbor(orig_node,
						     orig_neigh_node,
						     orig_neigh_node->orig,
						     if_incoming);
		/* create_neighbor failed, return 0 */
		if (!neigh_node)
179 180
			goto unlock;

181 182 183 184 185
		if (!atomic_inc_not_zero(&neigh_node->refcount)) {
			neigh_node = NULL;
			goto unlock;
		}

186
		rcu_read_unlock();
187 188 189 190

		neigh_node->last_valid = jiffies;
	} else {
		/* find packet count of corresponding one hop neighbor */
191 192 193
		rcu_read_lock();
		hlist_for_each_entry_rcu(tmp_neigh_node, node,
					 &orig_neigh_node->neigh_list, list) {
194 195 196 197 198 199 200 201 202 203 204 205 206 207

			if (compare_orig(tmp_neigh_node->addr,
					 orig_neigh_node->orig) &&
			    (tmp_neigh_node->if_incoming == if_incoming))
				neigh_node = tmp_neigh_node;
		}

		if (!neigh_node)
			neigh_node = create_neighbor(orig_neigh_node,
						     orig_neigh_node,
						     orig_neigh_node->orig,
						     if_incoming);
		/* create_neighbor failed, return 0 */
		if (!neigh_node)
208 209
			goto unlock;

210 211 212 213 214
		if (!atomic_inc_not_zero(&neigh_node->refcount)) {
			neigh_node = NULL;
			goto unlock;
		}

215
		rcu_read_unlock();
216 217 218 219
	}

	orig_node->last_valid = jiffies;

220 221 222 223 224
	spin_lock_bh(&orig_node->ogm_cnt_lock);
	orig_eq_count = orig_neigh_node->bcast_own_sum[if_incoming->if_num];
	neigh_rq_count = neigh_node->real_packet_count;
	spin_unlock_bh(&orig_node->ogm_cnt_lock);

225
	/* pay attention to not get a value bigger than 100 % */
226 227
	total_count = (orig_eq_count > neigh_rq_count ?
		       neigh_rq_count : orig_eq_count);
228 229 230 231

	/* if we have too few packets (too less data) we set tq_own to zero */
	/* if we receive too few packets it is not considered bidirectional */
	if ((total_count < TQ_LOCAL_BIDRECT_SEND_MINIMUM) ||
232 233
	    (neigh_rq_count < TQ_LOCAL_BIDRECT_RECV_MINIMUM))
		tq_own = 0;
234 235 236 237
	else
		/* neigh_node->real_packet_count is never zero as we
		 * only purge old information when getting new
		 * information */
238
		tq_own = (TQ_MAX_VALUE * total_count) /	neigh_rq_count;
239 240 241 242 243 244 245

	/*
	 * 1 - ((1-x) ** 3), normalized to TQ_MAX_VALUE this does
	 * affect the nearly-symmetric links only a little, but
	 * punishes asymmetric links more.  This will give a value
	 * between 0 and TQ_MAX_VALUE
	 */
246 247 248 249 250 251 252 253 254 255
	tq_asym_penalty = TQ_MAX_VALUE - (TQ_MAX_VALUE *
				(TQ_LOCAL_WINDOW_SIZE - neigh_rq_count) *
				(TQ_LOCAL_WINDOW_SIZE - neigh_rq_count) *
				(TQ_LOCAL_WINDOW_SIZE - neigh_rq_count)) /
					(TQ_LOCAL_WINDOW_SIZE *
					 TQ_LOCAL_WINDOW_SIZE *
					 TQ_LOCAL_WINDOW_SIZE);

	batman_packet->tq = ((batman_packet->tq * tq_own * tq_asym_penalty) /
						(TQ_MAX_VALUE * TQ_MAX_VALUE));
256 257 258 259 260 261 262

	bat_dbg(DBG_BATMAN, bat_priv,
		"bidirectional: "
		"orig = %-15pM neigh = %-15pM => own_bcast = %2i, "
		"real recv = %2i, local tq: %3i, asym_penalty: %3i, "
		"total tq: %3i\n",
		orig_node->orig, orig_neigh_node->orig, total_count,
263
		neigh_rq_count, tq_own,	tq_asym_penalty, batman_packet->tq);
264 265 266 267

	/* if link has the minimum required transmission quality
	 * consider it bidirectional */
	if (batman_packet->tq >= TQ_TOTAL_BIDRECT_LIMIT)
268 269 270
		ret = 1;

	goto out;
271

272 273 274 275
unlock:
	rcu_read_unlock();
out:
	if (neigh_node)
276
		neigh_node_free_ref(neigh_node);
277
	return ret;
278 279
}

280 281 282 283 284 285 286 287 288 289
/* caller must hold the neigh_list_lock */
void bonding_candidate_del(struct orig_node *orig_node,
			   struct neigh_node *neigh_node)
{
	/* this neighbor is not part of our candidate list */
	if (list_empty(&neigh_node->bonding_list))
		goto out;

	list_del_rcu(&neigh_node->bonding_list);
	INIT_LIST_HEAD(&neigh_node->bonding_list);
290
	neigh_node_free_ref(neigh_node);
291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350
	atomic_dec(&orig_node->bond_candidates);

out:
	return;
}

static void bonding_candidate_add(struct orig_node *orig_node,
				  struct neigh_node *neigh_node)
{
	struct hlist_node *node;
	struct neigh_node *tmp_neigh_node;
	uint8_t best_tq, interference_candidate = 0;

	spin_lock_bh(&orig_node->neigh_list_lock);

	/* only consider if it has the same primary address ...  */
	if (!compare_orig(orig_node->orig,
			  neigh_node->orig_node->primary_addr))
		goto candidate_del;

	if (!orig_node->router)
		goto candidate_del;

	best_tq = orig_node->router->tq_avg;

	/* ... and is good enough to be considered */
	if (neigh_node->tq_avg < best_tq - BONDING_TQ_THRESHOLD)
		goto candidate_del;

	/**
	 * check if we have another candidate with the same mac address or
	 * interface. If we do, we won't select this candidate because of
	 * possible interference.
	 */
	hlist_for_each_entry_rcu(tmp_neigh_node, node,
				 &orig_node->neigh_list, list) {

		if (tmp_neigh_node == neigh_node)
			continue;

		/* we only care if the other candidate is even
		* considered as candidate. */
		if (list_empty(&tmp_neigh_node->bonding_list))
			continue;

		if ((neigh_node->if_incoming == tmp_neigh_node->if_incoming) ||
		    (compare_orig(neigh_node->addr, tmp_neigh_node->addr))) {
			interference_candidate = 1;
			break;
		}
	}

	/* don't care further if it is an interference candidate */
	if (interference_candidate)
		goto candidate_del;

	/* this neighbor already is part of our candidate list */
	if (!list_empty(&neigh_node->bonding_list))
		goto out;

351 352 353
	if (!atomic_inc_not_zero(&neigh_node->refcount))
		goto out;

354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376
	list_add_rcu(&neigh_node->bonding_list, &orig_node->bond_list);
	atomic_inc(&orig_node->bond_candidates);
	goto out;

candidate_del:
	bonding_candidate_del(orig_node, neigh_node);

out:
	spin_unlock_bh(&orig_node->neigh_list_lock);
	return;
}

/* copy primary address for bonding */
static void bonding_save_primary(struct orig_node *orig_node,
				 struct orig_node *orig_neigh_node,
				 struct batman_packet *batman_packet)
{
	if (!(batman_packet->flags & PRIMARIES_FIRST_HOP))
		return;

	memcpy(orig_neigh_node->primary_addr, orig_node->orig, ETH_ALEN);
}

377 378 379 380 381 382 383 384 385
static void update_orig(struct bat_priv *bat_priv,
			struct orig_node *orig_node,
			struct ethhdr *ethhdr,
			struct batman_packet *batman_packet,
			struct batman_if *if_incoming,
			unsigned char *hna_buff, int hna_buff_len,
			char is_duplicate)
{
	struct neigh_node *neigh_node = NULL, *tmp_neigh_node = NULL;
386
	struct orig_node *orig_node_tmp;
387
	struct hlist_node *node;
388
	int tmp_hna_buff_len;
389
	uint8_t bcast_own_sum_orig, bcast_own_sum_neigh;
390 391 392 393

	bat_dbg(DBG_BATMAN, bat_priv, "update_originator(): "
		"Searching and updating originator entry of received packet\n");

394 395 396
	rcu_read_lock();
	hlist_for_each_entry_rcu(tmp_neigh_node, node,
				 &orig_node->neigh_list, list) {
397
		if (compare_orig(tmp_neigh_node->addr, ethhdr->h_source) &&
398 399 400 401
		    (tmp_neigh_node->if_incoming == if_incoming) &&
		     atomic_inc_not_zero(&tmp_neigh_node->refcount)) {
			if (neigh_node)
				neigh_node_free_ref(neigh_node);
402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419
			neigh_node = tmp_neigh_node;
			continue;
		}

		if (is_duplicate)
			continue;

		ring_buffer_set(tmp_neigh_node->tq_recv,
				&tmp_neigh_node->tq_index, 0);
		tmp_neigh_node->tq_avg =
			ring_buffer_avg(tmp_neigh_node->tq_recv);
	}

	if (!neigh_node) {
		struct orig_node *orig_tmp;

		orig_tmp = get_orig_node(bat_priv, ethhdr->h_source);
		if (!orig_tmp)
420
			goto unlock;
421 422 423

		neigh_node = create_neighbor(orig_node, orig_tmp,
					     ethhdr->h_source, if_incoming);
424 425

		kref_put(&orig_tmp->refcount, orig_node_free_ref);
426
		if (!neigh_node)
427
			goto unlock;
428 429 430 431 432

		if (!atomic_inc_not_zero(&neigh_node->refcount)) {
			neigh_node = NULL;
			goto unlock;
		}
433 434 435 436
	} else
		bat_dbg(DBG_BATMAN, bat_priv,
			"Updating existing last-hop neighbor of originator\n");

437 438
	rcu_read_unlock();

439 440 441 442 443 444 445 446 447 448 449 450 451
	orig_node->flags = batman_packet->flags;
	neigh_node->last_valid = jiffies;

	ring_buffer_set(neigh_node->tq_recv,
			&neigh_node->tq_index,
			batman_packet->tq);
	neigh_node->tq_avg = ring_buffer_avg(neigh_node->tq_recv);

	if (!is_duplicate) {
		orig_node->last_ttl = batman_packet->ttl;
		neigh_node->last_ttl = batman_packet->ttl;
	}

452 453
	bonding_candidate_add(orig_node, neigh_node);

454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469
	tmp_hna_buff_len = (hna_buff_len > batman_packet->num_hna * ETH_ALEN ?
			    batman_packet->num_hna * ETH_ALEN : hna_buff_len);

	/* if this neighbor already is our next hop there is nothing
	 * to change */
	if (orig_node->router == neigh_node)
		goto update_hna;

	/* if this neighbor does not offer a better TQ we won't consider it */
	if ((orig_node->router) &&
	    (orig_node->router->tq_avg > neigh_node->tq_avg))
		goto update_hna;

	/* if the TQ is the same and the link not more symetric we
	 * won't consider it either */
	if ((orig_node->router) &&
470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485
	     (neigh_node->tq_avg == orig_node->router->tq_avg)) {
		orig_node_tmp = orig_node->router->orig_node;
		spin_lock_bh(&orig_node_tmp->ogm_cnt_lock);
		bcast_own_sum_orig =
			orig_node_tmp->bcast_own_sum[if_incoming->if_num];
		spin_unlock_bh(&orig_node_tmp->ogm_cnt_lock);

		orig_node_tmp = neigh_node->orig_node;
		spin_lock_bh(&orig_node_tmp->ogm_cnt_lock);
		bcast_own_sum_neigh =
			orig_node_tmp->bcast_own_sum[if_incoming->if_num];
		spin_unlock_bh(&orig_node_tmp->ogm_cnt_lock);

		if (bcast_own_sum_orig >= bcast_own_sum_neigh)
			goto update_hna;
	}
486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505

	update_routes(bat_priv, orig_node, neigh_node,
		      hna_buff, tmp_hna_buff_len);
	goto update_gw;

update_hna:
	update_routes(bat_priv, orig_node, orig_node->router,
		      hna_buff, tmp_hna_buff_len);

update_gw:
	if (orig_node->gw_flags != batman_packet->gw_flags)
		gw_node_update(bat_priv, orig_node, batman_packet->gw_flags);

	orig_node->gw_flags = batman_packet->gw_flags;

	/* restart gateway selection if fast or late switching was enabled */
	if ((orig_node->gw_flags) &&
	    (atomic_read(&bat_priv->gw_mode) == GW_MODE_CLIENT) &&
	    (atomic_read(&bat_priv->gw_sel_class) > 2))
		gw_check_election(bat_priv, orig_node);
506 507 508 509 510 511 512

	goto out;

unlock:
	rcu_read_unlock();
out:
	if (neigh_node)
513
		neigh_node_free_ref(neigh_node);
514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555
}

/* checks whether the host restarted and is in the protection time.
 * returns:
 *  0 if the packet is to be accepted
 *  1 if the packet is to be ignored.
 */
static int window_protected(struct bat_priv *bat_priv,
			    int32_t seq_num_diff,
			    unsigned long *last_reset)
{
	if ((seq_num_diff <= -TQ_LOCAL_WINDOW_SIZE)
		|| (seq_num_diff >= EXPECTED_SEQNO_RANGE)) {
		if (time_after(jiffies, *last_reset +
			msecs_to_jiffies(RESET_PROTECTION_MS))) {

			*last_reset = jiffies;
			bat_dbg(DBG_BATMAN, bat_priv,
				"old packet received, start protection\n");

			return 0;
		} else
			return 1;
	}
	return 0;
}

/* processes a batman packet for all interfaces, adjusts the sequence number and
 * finds out whether it is a duplicate.
 * returns:
 *   1 the packet is a duplicate
 *   0 the packet has not yet been received
 *  -1 the packet is old and has been received while the seqno window
 *     was protected. Caller should drop it.
 */
static char count_real_packets(struct ethhdr *ethhdr,
			       struct batman_packet *batman_packet,
			       struct batman_if *if_incoming)
{
	struct bat_priv *bat_priv = netdev_priv(if_incoming->soft_iface);
	struct orig_node *orig_node;
	struct neigh_node *tmp_neigh_node;
556
	struct hlist_node *node;
557 558 559
	char is_duplicate = 0;
	int32_t seq_diff;
	int need_update = 0;
560
	int set_mark, ret = -1;
561 562 563 564 565

	orig_node = get_orig_node(bat_priv, batman_packet->orig);
	if (!orig_node)
		return 0;

566
	spin_lock_bh(&orig_node->ogm_cnt_lock);
567 568 569 570 571
	seq_diff = batman_packet->seqno - orig_node->last_real_seqno;

	/* signalize caller that the packet is to be dropped. */
	if (window_protected(bat_priv, seq_diff,
			     &orig_node->batman_seqno_reset))
572
		goto out;
573

574 575 576
	rcu_read_lock();
	hlist_for_each_entry_rcu(tmp_neigh_node, node,
				 &orig_node->neigh_list, list) {
577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595

		is_duplicate |= get_bit_status(tmp_neigh_node->real_bits,
					       orig_node->last_real_seqno,
					       batman_packet->seqno);

		if (compare_orig(tmp_neigh_node->addr, ethhdr->h_source) &&
		    (tmp_neigh_node->if_incoming == if_incoming))
			set_mark = 1;
		else
			set_mark = 0;

		/* if the window moved, set the update flag. */
		need_update |= bit_get_packet(bat_priv,
					      tmp_neigh_node->real_bits,
					      seq_diff, set_mark);

		tmp_neigh_node->real_packet_count =
			bit_packet_count(tmp_neigh_node->real_bits);
	}
596
	rcu_read_unlock();
597 598 599 600 601 602 603 604

	if (need_update) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"updating last_seqno: old %d, new %d\n",
			orig_node->last_real_seqno, batman_packet->seqno);
		orig_node->last_real_seqno = batman_packet->seqno;
	}

605
	ret = is_duplicate;
606

607 608
out:
	spin_unlock_bh(&orig_node->ogm_cnt_lock);
609
	kref_put(&orig_node->refcount, orig_node_free_ref);
610
	return ret;
611 612 613
}

void receive_bat_packet(struct ethhdr *ethhdr,
614 615 616
			struct batman_packet *batman_packet,
			unsigned char *hna_buff, int hna_buff_len,
			struct batman_if *if_incoming)
617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723
{
	struct bat_priv *bat_priv = netdev_priv(if_incoming->soft_iface);
	struct batman_if *batman_if;
	struct orig_node *orig_neigh_node, *orig_node;
	char has_directlink_flag;
	char is_my_addr = 0, is_my_orig = 0, is_my_oldorig = 0;
	char is_broadcast = 0, is_bidirectional, is_single_hop_neigh;
	char is_duplicate;
	uint32_t if_incoming_seqno;

	/* Silently drop when the batman packet is actually not a
	 * correct packet.
	 *
	 * This might happen if a packet is padded (e.g. Ethernet has a
	 * minimum frame length of 64 byte) and the aggregation interprets
	 * it as an additional length.
	 *
	 * TODO: A more sane solution would be to have a bit in the
	 * batman_packet to detect whether the packet is the last
	 * packet in an aggregation.  Here we expect that the padding
	 * is always zero (or not 0x01)
	 */
	if (batman_packet->packet_type != BAT_PACKET)
		return;

	/* could be changed by schedule_own_packet() */
	if_incoming_seqno = atomic_read(&if_incoming->seqno);

	has_directlink_flag = (batman_packet->flags & DIRECTLINK ? 1 : 0);

	is_single_hop_neigh = (compare_orig(ethhdr->h_source,
					    batman_packet->orig) ? 1 : 0);

	bat_dbg(DBG_BATMAN, bat_priv,
		"Received BATMAN packet via NB: %pM, IF: %s [%pM] "
		"(from OG: %pM, via prev OG: %pM, seqno %d, tq %d, "
		"TTL %d, V %d, IDF %d)\n",
		ethhdr->h_source, if_incoming->net_dev->name,
		if_incoming->net_dev->dev_addr, batman_packet->orig,
		batman_packet->prev_sender, batman_packet->seqno,
		batman_packet->tq, batman_packet->ttl, batman_packet->version,
		has_directlink_flag);

	rcu_read_lock();
	list_for_each_entry_rcu(batman_if, &if_list, list) {
		if (batman_if->if_status != IF_ACTIVE)
			continue;

		if (batman_if->soft_iface != if_incoming->soft_iface)
			continue;

		if (compare_orig(ethhdr->h_source,
				 batman_if->net_dev->dev_addr))
			is_my_addr = 1;

		if (compare_orig(batman_packet->orig,
				 batman_if->net_dev->dev_addr))
			is_my_orig = 1;

		if (compare_orig(batman_packet->prev_sender,
				 batman_if->net_dev->dev_addr))
			is_my_oldorig = 1;

		if (compare_orig(ethhdr->h_source, broadcast_addr))
			is_broadcast = 1;
	}
	rcu_read_unlock();

	if (batman_packet->version != COMPAT_VERSION) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: incompatible batman version (%i)\n",
			batman_packet->version);
		return;
	}

	if (is_my_addr) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: received my own broadcast (sender: %pM"
			")\n",
			ethhdr->h_source);
		return;
	}

	if (is_broadcast) {
		bat_dbg(DBG_BATMAN, bat_priv, "Drop packet: "
		"ignoring all packets with broadcast source addr (sender: %pM"
		")\n", ethhdr->h_source);
		return;
	}

	if (is_my_orig) {
		unsigned long *word;
		int offset;

		orig_neigh_node = get_orig_node(bat_priv, ethhdr->h_source);
		if (!orig_neigh_node)
			return;

		/* neighbor has to indicate direct link and it has to
		 * come via the corresponding interface */
		/* if received seqno equals last send seqno save new
		 * seqno for bidirectional check */
		if (has_directlink_flag &&
		    compare_orig(if_incoming->net_dev->dev_addr,
				 batman_packet->orig) &&
		    (batman_packet->seqno - if_incoming_seqno + 2 == 0)) {
			offset = if_incoming->if_num * NUM_WORDS;
724 725

			spin_lock_bh(&orig_neigh_node->ogm_cnt_lock);
726 727 728 729
			word = &(orig_neigh_node->bcast_own[offset]);
			bit_mark(word, 0);
			orig_neigh_node->bcast_own_sum[if_incoming->if_num] =
				bit_packet_count(word);
730
			spin_unlock_bh(&orig_neigh_node->ogm_cnt_lock);
731 732 733 734
		}

		bat_dbg(DBG_BATMAN, bat_priv, "Drop packet: "
			"originator packet from myself (via neighbor)\n");
735
		kref_put(&orig_neigh_node->refcount, orig_node_free_ref);
736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755
		return;
	}

	if (is_my_oldorig) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: ignoring all rebroadcast echos (sender: "
			"%pM)\n", ethhdr->h_source);
		return;
	}

	orig_node = get_orig_node(bat_priv, batman_packet->orig);
	if (!orig_node)
		return;

	is_duplicate = count_real_packets(ethhdr, batman_packet, if_incoming);

	if (is_duplicate == -1) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: packet within seqno protection time "
			"(sender: %pM)\n", ethhdr->h_source);
756
		goto out;
757 758 759 760 761
	}

	if (batman_packet->tq == 0) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: originator packet with tq equal 0\n");
762
		goto out;
763 764 765 766 767 768 769 770 771 772 773 774 775
	}

	/* avoid temporary routing loops */
	if ((orig_node->router) &&
	    (orig_node->router->orig_node->router) &&
	    (compare_orig(orig_node->router->addr,
			  batman_packet->prev_sender)) &&
	    !(compare_orig(batman_packet->orig, batman_packet->prev_sender)) &&
	    (compare_orig(orig_node->router->addr,
			  orig_node->router->orig_node->router->addr))) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: ignoring all rebroadcast packets that "
			"may make me loop (sender: %pM)\n", ethhdr->h_source);
776
		goto out;
777 778 779 780 781 782 783 784
	}

	/* if sender is a direct neighbor the sender mac equals
	 * originator mac */
	orig_neigh_node = (is_single_hop_neigh ?
			   orig_node :
			   get_orig_node(bat_priv, ethhdr->h_source));
	if (!orig_neigh_node)
785
		goto out_neigh;
786 787 788 789 790 791

	/* drop packet if sender is not a direct neighbor and if we
	 * don't route towards it */
	if (!is_single_hop_neigh && (!orig_neigh_node->router)) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: OGM via unknown neighbor!\n");
792
		goto out_neigh;
793 794 795 796 797
	}

	is_bidirectional = is_bidirectional_neigh(orig_node, orig_neigh_node,
						batman_packet, if_incoming);

798 799
	bonding_save_primary(orig_node, orig_neigh_node, batman_packet);

800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817
	/* update ranking if it is not a duplicate or has the same
	 * seqno and similar ttl as the non-duplicate */
	if (is_bidirectional &&
	    (!is_duplicate ||
	     ((orig_node->last_real_seqno == batman_packet->seqno) &&
	      (orig_node->last_ttl - 3 <= batman_packet->ttl))))
		update_orig(bat_priv, orig_node, ethhdr, batman_packet,
			    if_incoming, hna_buff, hna_buff_len, is_duplicate);

	/* is single hop (direct) neighbor */
	if (is_single_hop_neigh) {

		/* mark direct link on incoming interface */
		schedule_forward_packet(orig_node, ethhdr, batman_packet,
					1, hna_buff_len, if_incoming);

		bat_dbg(DBG_BATMAN, bat_priv, "Forwarding packet: "
			"rebroadcast neighbor packet with direct link flag\n");
818
		goto out_neigh;
819 820 821 822 823 824
	}

	/* multihop originator */
	if (!is_bidirectional) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: not received via bidirectional link\n");
825
		goto out_neigh;
826 827 828 829 830
	}

	if (is_duplicate) {
		bat_dbg(DBG_BATMAN, bat_priv,
			"Drop packet: duplicate packet received\n");
831
		goto out_neigh;
832 833 834 835 836 837
	}

	bat_dbg(DBG_BATMAN, bat_priv,
		"Forwarding packet: rebroadcast originator packet\n");
	schedule_forward_packet(orig_node, ethhdr, batman_packet,
				0, hna_buff_len, if_incoming);
838 839 840 841 842 843

out_neigh:
	if (!is_single_hop_neigh)
		kref_put(&orig_neigh_node->refcount, orig_node_free_ref);
out:
	kref_put(&orig_node->refcount, orig_node_free_ref);
844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888
}

int recv_bat_packet(struct sk_buff *skb, struct batman_if *batman_if)
{
	struct bat_priv *bat_priv = netdev_priv(batman_if->soft_iface);
	struct ethhdr *ethhdr;

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, sizeof(struct batman_packet))))
		return NET_RX_DROP;

	ethhdr = (struct ethhdr *)skb_mac_header(skb);

	/* packet with broadcast indication but unicast recipient */
	if (!is_broadcast_ether_addr(ethhdr->h_dest))
		return NET_RX_DROP;

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
		return NET_RX_DROP;

	/* create a copy of the skb, if needed, to modify it. */
	if (skb_cow(skb, 0) < 0)
		return NET_RX_DROP;

	/* keep skb linear */
	if (skb_linearize(skb) < 0)
		return NET_RX_DROP;

	ethhdr = (struct ethhdr *)skb_mac_header(skb);

	spin_lock_bh(&bat_priv->orig_hash_lock);
	receive_aggr_bat_packet(ethhdr,
				skb->data,
				skb_headlen(skb),
				batman_if);
	spin_unlock_bh(&bat_priv->orig_hash_lock);

	kfree_skb(skb);
	return NET_RX_SUCCESS;
}

static int recv_my_icmp_packet(struct bat_priv *bat_priv,
			       struct sk_buff *skb, size_t icmp_len)
{
889 890
	struct orig_node *orig_node = NULL;
	struct neigh_node *neigh_node = NULL;
891 892 893
	struct icmp_packet_rr *icmp_packet;
	struct batman_if *batman_if;
	uint8_t dstaddr[ETH_ALEN];
894
	int ret = NET_RX_DROP;
895 896 897 898 899 900

	icmp_packet = (struct icmp_packet_rr *)skb->data;

	/* add data to device queue */
	if (icmp_packet->msg_type != ECHO_REQUEST) {
		bat_socket_receive_packet(icmp_packet, icmp_len);
901
		goto out;
902 903 904
	}

	if (!bat_priv->primary_if)
905
		goto out;
906 907 908 909

	/* answer echo request (ping) */
	/* get routing information */
	spin_lock_bh(&bat_priv->orig_hash_lock);
910
	rcu_read_lock();
911 912 913 914
	orig_node = ((struct orig_node *)hash_find(bat_priv->orig_hash,
						   compare_orig, choose_orig,
						   icmp_packet->orig));

915 916
	if (!orig_node)
		goto unlock;
917

918 919
	kref_get(&orig_node->refcount);
	neigh_node = orig_node->router;
920

921 922
	if (!neigh_node)
		goto unlock;
923

924 925 926 927
	if (!atomic_inc_not_zero(&neigh_node->refcount)) {
		neigh_node = NULL;
		goto unlock;
	}
928

929
	rcu_read_unlock();
930

931 932 933 934 935
	/* don't lock while sending the packets ... we therefore
	 * copy the required data before sending */
	batman_if = orig_node->router->if_incoming;
	memcpy(dstaddr, orig_node->router->addr, ETH_ALEN);
	spin_unlock_bh(&bat_priv->orig_hash_lock);
936

937 938 939 940 941 942 943 944 945 946 947 948 949 950 951
	/* create a copy of the skb, if needed, to modify it. */
	if (skb_cow(skb, sizeof(struct ethhdr)) < 0)
		goto out;

	icmp_packet = (struct icmp_packet_rr *)skb->data;

	memcpy(icmp_packet->dst, icmp_packet->orig, ETH_ALEN);
	memcpy(icmp_packet->orig,
		bat_priv->primary_if->net_dev->dev_addr, ETH_ALEN);
	icmp_packet->msg_type = ECHO_REPLY;
	icmp_packet->ttl = TTL;

	send_skb_packet(skb, batman_if, dstaddr);
	ret = NET_RX_SUCCESS;
	goto out;
952

953 954 955 956 957 958 959 960
unlock:
	rcu_read_unlock();
	spin_unlock_bh(&bat_priv->orig_hash_lock);
out:
	if (neigh_node)
		neigh_node_free_ref(neigh_node);
	if (orig_node)
		kref_put(&orig_node->refcount, orig_node_free_ref);
961 962 963 964
	return ret;
}

static int recv_icmp_ttl_exceeded(struct bat_priv *bat_priv,
965
				  struct sk_buff *skb)
966
{
967 968
	struct orig_node *orig_node = NULL;
	struct neigh_node *neigh_node = NULL;
969 970 971
	struct icmp_packet *icmp_packet;
	struct batman_if *batman_if;
	uint8_t dstaddr[ETH_ALEN];
972
	int ret = NET_RX_DROP;
973 974 975 976 977 978 979 980

	icmp_packet = (struct icmp_packet *)skb->data;

	/* send TTL exceeded if packet is an echo request (traceroute) */
	if (icmp_packet->msg_type != ECHO_REQUEST) {
		pr_debug("Warning - can't forward icmp packet from %pM to "
			 "%pM: ttl exceeded\n", icmp_packet->orig,
			 icmp_packet->dst);
981
		goto out;
982 983 984
	}

	if (!bat_priv->primary_if)
985
		goto out;
986 987 988

	/* get routing information */
	spin_lock_bh(&bat_priv->orig_hash_lock);
989
	rcu_read_lock();
990 991 992 993
	orig_node = ((struct orig_node *)
		     hash_find(bat_priv->orig_hash, compare_orig, choose_orig,
			       icmp_packet->orig));

994 995
	if (!orig_node)
		goto unlock;
996

997 998 999 1000 1001 1002 1003 1004 1005 1006
	kref_get(&orig_node->refcount);
	neigh_node = orig_node->router;

	if (!neigh_node)
		goto unlock;

	if (!atomic_inc_not_zero(&neigh_node->refcount)) {
		neigh_node = NULL;
		goto unlock;
	}
1007

1008
	rcu_read_unlock();
1009

1010 1011 1012 1013 1014
	/* don't lock while sending the packets ... we therefore
	 * copy the required data before sending */
	batman_if = orig_node->router->if_incoming;
	memcpy(dstaddr, orig_node->router->addr, ETH_ALEN);
	spin_unlock_bh(&bat_priv->orig_hash_lock);
1015

1016 1017 1018
	/* create a copy of the skb, if needed, to modify it. */
	if (skb_cow(skb, sizeof(struct ethhdr)) < 0)
		goto out;
1019

1020
	icmp_packet = (struct icmp_packet *)skb->data;
1021

1022 1023 1024 1025 1026 1027 1028 1029 1030
	memcpy(icmp_packet->dst, icmp_packet->orig, ETH_ALEN);
	memcpy(icmp_packet->orig,
		bat_priv->primary_if->net_dev->dev_addr, ETH_ALEN);
	icmp_packet->msg_type = TTL_EXCEEDED;
	icmp_packet->ttl = TTL;

	send_skb_packet(skb, batman_if, dstaddr);
	ret = NET_RX_SUCCESS;
	goto out;
1031

1032 1033 1034 1035 1036 1037 1038 1039
unlock:
	rcu_read_unlock();
	spin_unlock_bh(&bat_priv->orig_hash_lock);
out:
	if (neigh_node)
		neigh_node_free_ref(neigh_node);
	if (orig_node)
		kref_put(&orig_node->refcount, orig_node_free_ref);
1040 1041 1042 1043 1044 1045 1046 1047 1048
	return ret;
}


int recv_icmp_packet(struct sk_buff *skb, struct batman_if *recv_if)
{
	struct bat_priv *bat_priv = netdev_priv(recv_if->soft_iface);
	struct icmp_packet_rr *icmp_packet;
	struct ethhdr *ethhdr;
1049 1050
	struct orig_node *orig_node = NULL;
	struct neigh_node *neigh_node = NULL;
1051 1052 1053
	struct batman_if *batman_if;
	int hdr_size = sizeof(struct icmp_packet);
	uint8_t dstaddr[ETH_ALEN];
1054
	int ret = NET_RX_DROP;
1055 1056 1057 1058 1059 1060 1061 1062 1063

	/**
	 * we truncate all incoming icmp packets if they don't match our size
	 */
	if (skb->len >= sizeof(struct icmp_packet_rr))
		hdr_size = sizeof(struct icmp_packet_rr);

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, hdr_size)))
1064
		goto out;
1065 1066 1067 1068 1069

	ethhdr = (struct ethhdr *)skb_mac_header(skb);

	/* packet with unicast indication but broadcast recipient */
	if (is_broadcast_ether_addr(ethhdr->h_dest))
1070
		goto out;
1071 1072 1073

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
1074
		goto out;
1075 1076 1077

	/* not for me */
	if (!is_my_mac(ethhdr->h_dest))
1078
		goto out;
1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095

	icmp_packet = (struct icmp_packet_rr *)skb->data;

	/* add record route information if not full */
	if ((hdr_size == sizeof(struct icmp_packet_rr)) &&
	    (icmp_packet->rr_cur < BAT_RR_LEN)) {
		memcpy(&(icmp_packet->rr[icmp_packet->rr_cur]),
			ethhdr->h_dest, ETH_ALEN);
		icmp_packet->rr_cur++;
	}

	/* packet for me */
	if (is_my_mac(icmp_packet->dst))
		return recv_my_icmp_packet(bat_priv, skb, hdr_size);

	/* TTL exceeded */
	if (icmp_packet->ttl < 2)
1096
		return recv_icmp_ttl_exceeded(bat_priv, skb);
1097 1098 1099

	/* get routing information */
	spin_lock_bh(&bat_priv->orig_hash_lock);
1100
	rcu_read_lock();
1101 1102 1103
	orig_node = ((struct orig_node *)
		     hash_find(bat_priv->orig_hash, compare_orig, choose_orig,
			       icmp_packet->dst));
1104 1105
	if (!orig_node)
		goto unlock;
1106

1107 1108
	kref_get(&orig_node->refcount);
	neigh_node = orig_node->router;
1109

1110 1111 1112 1113 1114 1115 1116
	if (!neigh_node)
		goto unlock;

	if (!atomic_inc_not_zero(&neigh_node->refcount)) {
		neigh_node = NULL;
		goto unlock;
	}
1117

1118
	rcu_read_unlock();
1119

1120 1121 1122 1123 1124
	/* don't lock while sending the packets ... we therefore
	 * copy the required data before sending */
	batman_if = orig_node->router->if_incoming;
	memcpy(dstaddr, orig_node->router->addr, ETH_ALEN);
	spin_unlock_bh(&bat_priv->orig_hash_lock);
1125

1126 1127 1128
	/* create a copy of the skb, if needed, to modify it. */
	if (skb_cow(skb, sizeof(struct ethhdr)) < 0)
		goto out;
1129

1130
	icmp_packet = (struct icmp_packet_rr *)skb->data;
1131

1132 1133 1134 1135 1136 1137 1138
	/* decrement ttl */
	icmp_packet->ttl--;

	/* route it */
	send_skb_packet(skb, batman_if, dstaddr);
	ret = NET_RX_SUCCESS;
	goto out;
1139

1140 1141 1142 1143 1144 1145 1146 1147
unlock:
	rcu_read_unlock();
	spin_unlock_bh(&bat_priv->orig_hash_lock);
out:
	if (neigh_node)
		neigh_node_free_ref(neigh_node);
	if (orig_node)
		kref_put(&orig_node->refcount, orig_node_free_ref);
1148 1149 1150 1151
	return ret;
}

/* find a suitable router for this originator, and use
1152 1153
 * bonding if possible. increases the found neighbors
 * refcount.*/
1154 1155 1156 1157 1158 1159
struct neigh_node *find_router(struct bat_priv *bat_priv,
			       struct orig_node *orig_node,
			       struct batman_if *recv_if)
{
	struct orig_node *primary_orig_node;
	struct orig_node *router_orig;
1160
	struct neigh_node *router, *first_candidate, *tmp_neigh_node;
1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173
	static uint8_t zero_mac[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
	int bonding_enabled;

	if (!orig_node)
		return NULL;

	if (!orig_node->router)
		return NULL;

	/* without bonding, the first node should
	 * always choose the default router. */
	bonding_enabled = atomic_read(&bat_priv->bonding);

1174 1175 1176
	rcu_read_lock();
	/* select default router to output */
	router = orig_node->router;
1177
	router_orig = orig_node->router->orig_node;
1178
	if (!router_orig || !atomic_inc_not_zero(&router->refcount)) {
1179 1180 1181 1182 1183 1184
		rcu_read_unlock();
		return NULL;
	}

	if ((!recv_if) && (!bonding_enabled))
		goto return_router;
1185 1186 1187 1188

	/* if we have something in the primary_addr, we can search
	 * for a potential bonding candidate. */
	if (memcmp(router_orig->primary_addr, zero_mac, ETH_ALEN) == 0)
1189
		goto return_router;
1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201

	/* find the orig_node which has the primary interface. might
	 * even be the same as our router_orig in many cases */

	if (memcmp(router_orig->primary_addr,
				router_orig->orig, ETH_ALEN) == 0) {
		primary_orig_node = router_orig;
	} else {
		primary_orig_node = hash_find(bat_priv->orig_hash, compare_orig,
					       choose_orig,
					       router_orig->primary_addr);
		if (!primary_orig_node)
1202
			goto return_router;
1203 1204 1205 1206
	}

	/* with less than 2 candidates, we can't do any
	 * bonding and prefer the original router. */
1207 1208
	if (atomic_read(&primary_orig_node->bond_candidates) < 2)
		goto return_router;
1209 1210 1211 1212 1213


	/* all nodes between should choose a candidate which
	 * is is not on the interface where the packet came
	 * in. */
1214

1215
	neigh_node_free_ref(router);
1216 1217
	first_candidate = NULL;
	router = NULL;
1218 1219 1220 1221

	if (bonding_enabled) {
		/* in the bonding case, send the packets in a round
		 * robin fashion over the remaining interfaces. */
1222 1223 1224 1225 1226

		list_for_each_entry_rcu(tmp_neigh_node,
				&primary_orig_node->bond_list, bonding_list) {
			if (!first_candidate)
				first_candidate = tmp_neigh_node;
1227
			/* recv_if == NULL on the first node. */
1228 1229
			if (tmp_neigh_node->if_incoming != recv_if &&
			    atomic_inc_not_zero(&tmp_neigh_node->refcount)) {
1230
				router = tmp_neigh_node;
1231
				break;
1232 1233
			}
		}
1234

1235
		/* use the first candidate if nothing was found. */
1236 1237
		if (!router && first_candidate &&
		    atomic_inc_not_zero(&first_candidate->refcount))
1238
			router = first_candidate;
1239

1240 1241 1242 1243 1244
		if (!router) {
			rcu_read_unlock();
			return NULL;
		}

1245 1246 1247 1248 1249 1250 1251 1252 1253
		/* selected should point to the next element
		 * after the current router */
		spin_lock_bh(&primary_orig_node->neigh_list_lock);
		/* this is a list_move(), which unfortunately
		 * does not exist as rcu version */
		list_del_rcu(&primary_orig_node->bond_list);
		list_add_rcu(&primary_orig_node->bond_list,
				&router->bonding_list);
		spin_unlock_bh(&primary_orig_node->neigh_list_lock);
1254 1255 1256 1257 1258

	} else {
		/* if bonding is disabled, use the best of the
		 * remaining candidates which are not using
		 * this interface. */
1259 1260 1261 1262
		list_for_each_entry_rcu(tmp_neigh_node,
			&primary_orig_node->bond_list, bonding_list) {
			if (!first_candidate)
				first_candidate = tmp_neigh_node;
1263 1264

			/* recv_if == NULL on the first node. */
1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284
			if (tmp_neigh_node->if_incoming == recv_if)
				continue;

			if (!atomic_inc_not_zero(&tmp_neigh_node->refcount))
				continue;

			/* if we don't have a router yet
			 * or this one is better, choose it. */
			if ((!router) ||
			    (tmp_neigh_node->tq_avg > router->tq_avg)) {
				/* decrement refcount of
				 * previously selected router */
				if (router)
					neigh_node_free_ref(router);

				router = tmp_neigh_node;
				atomic_inc_not_zero(&router->refcount);
			}

			neigh_node_free_ref(tmp_neigh_node);
1285
		}
1286

1287
		/* use the first candidate if nothing was found. */
1288 1289
		if (!router && first_candidate &&
		    atomic_inc_not_zero(&first_candidate->refcount))
1290
			router = first_candidate;
1291
	}
1292 1293
return_router:
	rcu_read_unlock();
1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325
	return router;
}

static int check_unicast_packet(struct sk_buff *skb, int hdr_size)
{
	struct ethhdr *ethhdr;

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, hdr_size)))
		return -1;

	ethhdr = (struct ethhdr *)skb_mac_header(skb);

	/* packet with unicast indication but broadcast recipient */
	if (is_broadcast_ether_addr(ethhdr->h_dest))
		return -1;

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
		return -1;

	/* not for me */
	if (!is_my_mac(ethhdr->h_dest))
		return -1;

	return 0;
}

int route_unicast_packet(struct sk_buff *skb, struct batman_if *recv_if,
			 int hdr_size)
{
	struct bat_priv *bat_priv = netdev_priv(recv_if->soft_iface);
1326 1327
	struct orig_node *orig_node = NULL;
	struct neigh_node *neigh_node = NULL;
1328 1329 1330 1331
	struct batman_if *batman_if;
	uint8_t dstaddr[ETH_ALEN];
	struct unicast_packet *unicast_packet;
	struct ethhdr *ethhdr = (struct ethhdr *)skb_mac_header(skb);
1332
	int ret = NET_RX_DROP;
1333 1334 1335 1336 1337 1338 1339 1340 1341
	struct sk_buff *new_skb;

	unicast_packet = (struct unicast_packet *)skb->data;

	/* TTL exceeded */
	if (unicast_packet->ttl < 2) {
		pr_debug("Warning - can't forward unicast packet from %pM to "
			 "%pM: ttl exceeded\n", ethhdr->h_source,
			 unicast_packet->dest);
1342
		goto out;
1343 1344 1345 1346
	}

	/* get routing information */
	spin_lock_bh(&bat_priv->orig_hash_lock);
1347
	rcu_read_lock();
1348 1349 1350
	orig_node = ((struct orig_node *)
		     hash_find(bat_priv->orig_hash, compare_orig, choose_orig,
			       unicast_packet->dest));
1351 1352 1353 1354
	if (!orig_node)
		goto unlock;

	kref_get(&orig_node->refcount);
1355
	rcu_read_unlock();
1356

1357
	/* find_router() increases neigh_nodes refcount if found. */
1358
	neigh_node = find_router(bat_priv, orig_node, recv_if);
1359

1360
	if (!neigh_node) {
1361
		spin_unlock_bh(&bat_priv->orig_hash_lock);
1362
		goto out;
1363 1364 1365 1366
	}

	/* don't lock while sending the packets ... we therefore
	 * copy the required data before sending */
1367 1368
	batman_if = neigh_node->if_incoming;
	memcpy(dstaddr, neigh_node->addr, ETH_ALEN);
1369 1370 1371 1372
	spin_unlock_bh(&bat_priv->orig_hash_lock);

	/* create a copy of the skb, if needed, to modify it. */
	if (skb_cow(skb, sizeof(struct ethhdr)) < 0)
1373
		goto out;
1374 1375 1376 1377 1378 1379 1380 1381 1382 1383

	unicast_packet = (struct unicast_packet *)skb->data;

	if (unicast_packet->packet_type == BAT_UNICAST &&
	    atomic_read(&bat_priv->fragmentation) &&
	    skb->len > batman_if->net_dev->mtu)
		return frag_send_skb(skb, bat_priv, batman_if,
				     dstaddr);

	if (unicast_packet->packet_type == BAT_UNICAST_FRAG &&
1384
	    frag_can_reassemble(skb, batman_if->net_dev->mtu)) {
1385 1386 1387 1388

		ret = frag_reassemble_skb(skb, bat_priv, &new_skb);

		if (ret == NET_RX_DROP)
1389
			goto out;
1390 1391

		/* packet was buffered for late merge */
1392 1393 1394 1395
		if (!new_skb) {
			ret = NET_RX_SUCCESS;
			goto out;
		}
1396 1397 1398 1399 1400 1401 1402 1403 1404 1405

		skb = new_skb;
		unicast_packet = (struct unicast_packet *)skb->data;
	}

	/* decrement ttl */
	unicast_packet->ttl--;

	/* route it */
	send_skb_packet(skb, batman_if, dstaddr);
1406 1407
	ret = NET_RX_SUCCESS;
	goto out;
1408

1409 1410 1411 1412 1413 1414 1415 1416 1417
unlock:
	rcu_read_unlock();
	spin_unlock_bh(&bat_priv->orig_hash_lock);
out:
	if (neigh_node)
		neigh_node_free_ref(neigh_node);
	if (orig_node)
		kref_put(&orig_node->refcount, orig_node_free_ref);
	return ret;
1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475
}

int recv_unicast_packet(struct sk_buff *skb, struct batman_if *recv_if)
{
	struct unicast_packet *unicast_packet;
	int hdr_size = sizeof(struct unicast_packet);

	if (check_unicast_packet(skb, hdr_size) < 0)
		return NET_RX_DROP;

	unicast_packet = (struct unicast_packet *)skb->data;

	/* packet for me */
	if (is_my_mac(unicast_packet->dest)) {
		interface_rx(recv_if->soft_iface, skb, recv_if, hdr_size);
		return NET_RX_SUCCESS;
	}

	return route_unicast_packet(skb, recv_if, hdr_size);
}

int recv_ucast_frag_packet(struct sk_buff *skb, struct batman_if *recv_if)
{
	struct bat_priv *bat_priv = netdev_priv(recv_if->soft_iface);
	struct unicast_frag_packet *unicast_packet;
	int hdr_size = sizeof(struct unicast_frag_packet);
	struct sk_buff *new_skb = NULL;
	int ret;

	if (check_unicast_packet(skb, hdr_size) < 0)
		return NET_RX_DROP;

	unicast_packet = (struct unicast_frag_packet *)skb->data;

	/* packet for me */
	if (is_my_mac(unicast_packet->dest)) {

		ret = frag_reassemble_skb(skb, bat_priv, &new_skb);

		if (ret == NET_RX_DROP)
			return NET_RX_DROP;

		/* packet was buffered for late merge */
		if (!new_skb)
			return NET_RX_SUCCESS;

		interface_rx(recv_if->soft_iface, new_skb, recv_if,
			     sizeof(struct unicast_packet));
		return NET_RX_SUCCESS;
	}

	return route_unicast_packet(skb, recv_if, hdr_size);
}


int recv_bcast_packet(struct sk_buff *skb, struct batman_if *recv_if)
{
	struct bat_priv *bat_priv = netdev_priv(recv_if->soft_iface);
1476
	struct orig_node *orig_node = NULL;
1477 1478 1479
	struct bcast_packet *bcast_packet;
	struct ethhdr *ethhdr;
	int hdr_size = sizeof(struct bcast_packet);
1480
	int ret = NET_RX_DROP;
1481 1482 1483 1484
	int32_t seq_diff;

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, hdr_size)))
1485
		goto out;
1486 1487 1488 1489 1490

	ethhdr = (struct ethhdr *)skb_mac_header(skb);

	/* packet with broadcast indication but unicast recipient */
	if (!is_broadcast_ether_addr(ethhdr->h_dest))
1491
		goto out;
1492 1493 1494

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
1495
		goto out;
1496 1497 1498

	/* ignore broadcasts sent by myself */
	if (is_my_mac(ethhdr->h_source))
1499
		goto out;
1500 1501 1502 1503 1504

	bcast_packet = (struct bcast_packet *)skb->data;

	/* ignore broadcasts originated by myself */
	if (is_my_mac(bcast_packet->orig))
1505
		goto out;
1506 1507

	if (bcast_packet->ttl < 2)
1508
		goto out;
1509 1510

	spin_lock_bh(&bat_priv->orig_hash_lock);
1511
	rcu_read_lock();
1512 1513 1514
	orig_node = ((struct orig_node *)
		     hash_find(bat_priv->orig_hash, compare_orig, choose_orig,
			       bcast_packet->orig));
1515 1516 1517 1518 1519

	if (!orig_node)
		goto rcu_unlock;

	kref_get(&orig_node->refcount);
1520
	rcu_read_unlock();
1521

1522
	spin_lock_bh(&orig_node->bcast_seqno_lock);
1523 1524

	/* check whether the packet is a duplicate */
1525 1526 1527
	if (get_bit_status(orig_node->bcast_bits, orig_node->last_bcast_seqno,
			   ntohl(bcast_packet->seqno)))
		goto spin_unlock;
1528 1529 1530 1531 1532

	seq_diff = ntohl(bcast_packet->seqno) - orig_node->last_bcast_seqno;

	/* check whether the packet is old and the host just restarted. */
	if (window_protected(bat_priv, seq_diff,
1533 1534
			     &orig_node->bcast_seqno_reset))
		goto spin_unlock;
1535 1536 1537 1538 1539 1540

	/* mark broadcast in flood history, update window position
	 * if required. */
	if (bit_get_packet(bat_priv, orig_node->bcast_bits, seq_diff, 1))
		orig_node->last_bcast_seqno = ntohl(bcast_packet->seqno);

1541
	spin_unlock_bh(&orig_node->bcast_seqno_lock);
1542
	spin_unlock_bh(&bat_priv->orig_hash_lock);
1543

1544 1545 1546 1547 1548
	/* rebroadcast packet */
	add_bcast_packet_to_list(bat_priv, skb);

	/* broadcast for me */
	interface_rx(recv_if->soft_iface, skb, recv_if, hdr_size);
1549 1550
	ret = NET_RX_SUCCESS;
	goto out;
1551

1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562
rcu_unlock:
	rcu_read_unlock();
	spin_unlock_bh(&bat_priv->orig_hash_lock);
	goto out;
spin_unlock:
	spin_unlock_bh(&orig_node->bcast_seqno_lock);
	spin_unlock_bh(&bat_priv->orig_hash_lock);
out:
	if (orig_node)
		kref_put(&orig_node->refcount, orig_node_free_ref);
	return ret;
1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611
}

int recv_vis_packet(struct sk_buff *skb, struct batman_if *recv_if)
{
	struct vis_packet *vis_packet;
	struct ethhdr *ethhdr;
	struct bat_priv *bat_priv = netdev_priv(recv_if->soft_iface);
	int hdr_size = sizeof(struct vis_packet);

	/* keep skb linear */
	if (skb_linearize(skb) < 0)
		return NET_RX_DROP;

	if (unlikely(!pskb_may_pull(skb, hdr_size)))
		return NET_RX_DROP;

	vis_packet = (struct vis_packet *)skb->data;
	ethhdr = (struct ethhdr *)skb_mac_header(skb);

	/* not for me */
	if (!is_my_mac(ethhdr->h_dest))
		return NET_RX_DROP;

	/* ignore own packets */
	if (is_my_mac(vis_packet->vis_orig))
		return NET_RX_DROP;

	if (is_my_mac(vis_packet->sender_orig))
		return NET_RX_DROP;

	switch (vis_packet->vis_type) {
	case VIS_TYPE_SERVER_SYNC:
		receive_server_sync_packet(bat_priv, vis_packet,
					   skb_headlen(skb));
		break;

	case VIS_TYPE_CLIENT_UPDATE:
		receive_client_update_packet(bat_priv, vis_packet,
					     skb_headlen(skb));
		break;

	default:	/* ignore unknown packet */
		break;
	}

	/* We take a copy of the data in the packet, so we should
	   always free the skbuf. */
	return NET_RX_DROP;
}