mkiss.c 24.2 KB
Newer Older
L
Linus Torvalds 已提交
1
/*
R
Ralf Baechle 已提交
2 3 4
 *  This program is free software; you can distribute it and/or modify it
 *  under the terms of the GNU General Public License (Version 2) as
 *  published by the Free Software Foundation.
L
Linus Torvalds 已提交
5
 *
R
Ralf Baechle 已提交
6 7 8 9
 *  This program is distributed in the hope it will be useful, but WITHOUT
 *  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 *  FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 *  for more details.
L
Linus Torvalds 已提交
10
 *
R
Ralf Baechle 已提交
11 12 13
 *  You should have received a copy of the GNU General Public License along
 *  with this program; if not, write to the Free Software Foundation, Inc.,
 *  59 Temple Place - Suite 330, Boston MA 02111-1307, USA.
L
Linus Torvalds 已提交
14
 *
R
Ralf Baechle 已提交
15 16
 * Copyright (C) Hans Alblas PE1AYX <hans@esrac.ele.tue.nl>
 * Copyright (C) 2004, 05 Ralf Baechle DL5RB <ralf@linux-mips.org>
R
Ralf Baechle 已提交
17
 * Copyright (C) 2004, 05 Thomas Osterried DL9SAU <thomas@x-berg.in-berlin.de>
L
Linus Torvalds 已提交
18 19 20 21 22 23
 */
#include <linux/config.h>
#include <linux/module.h>
#include <asm/system.h>
#include <linux/bitops.h>
#include <asm/uaccess.h>
R
Ralf Baechle 已提交
24
#include <linux/crc16.h>
L
Linus Torvalds 已提交
25 26 27 28 29 30 31 32 33 34 35 36 37 38
#include <linux/string.h>
#include <linux/mm.h>
#include <linux/interrupt.h>
#include <linux/in.h>
#include <linux/inet.h>
#include <linux/tty.h>
#include <linux/errno.h>
#include <linux/netdevice.h>
#include <linux/major.h>
#include <linux/init.h>
#include <linux/rtnetlink.h>
#include <linux/etherdevice.h>
#include <linux/skbuff.h>
#include <linux/if_arp.h>
39
#include <linux/jiffies.h>
L
Linus Torvalds 已提交
40 41 42

#include <net/ax25.h>

R
Ralf Baechle 已提交
43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78
#define AX_MTU		236

/* SLIP/KISS protocol characters. */
#define END             0300		/* indicates end of frame	*/
#define ESC             0333		/* indicates byte stuffing	*/
#define ESC_END         0334		/* ESC ESC_END means END 'data'	*/
#define ESC_ESC         0335		/* ESC ESC_ESC means ESC 'data'	*/

struct mkiss {
	struct tty_struct	*tty;	/* ptr to TTY structure		*/
	struct net_device	*dev;	/* easy for intr handling	*/

	/* These are pointers to the malloc()ed frame buffers. */
	spinlock_t		buflock;/* lock for rbuf and xbuf */
	unsigned char		*rbuff;	/* receiver buffer		*/
	int			rcount;	/* received chars counter       */
	unsigned char		*xbuff;	/* transmitter buffer		*/
	unsigned char		*xhead;	/* pointer to next byte to XMIT */
	int			xleft;	/* bytes left in XMIT queue     */

	struct net_device_stats	stats;

	/* Detailed SLIP statistics. */
	int		mtu;		/* Our mtu (to spot changes!)   */
	int		buffsize;	/* Max buffers sizes            */

	unsigned long	flags;		/* Flag values/ mode etc	*/
					/* long req'd: used by set_bit --RR */
#define AXF_INUSE	0		/* Channel in use               */
#define AXF_ESCAPE	1               /* ESC received                 */
#define AXF_ERROR	2               /* Parity, etc. error           */
#define AXF_KEEPTEST	3		/* Keepalive test flag		*/
#define AXF_OUTWAIT	4		/* is outpacket was flag	*/

	int		mode;
        int		crcmode;	/* MW: for FlexNet, SMACK etc.  */
R
Ralf Baechle 已提交
79 80 81 82 83 84 85
	int		crcauto;	/* CRC auto mode */

#define CRC_MODE_NONE		0
#define CRC_MODE_FLEX		1
#define CRC_MODE_SMACK		2
#define CRC_MODE_FLEX_TEST	3
#define CRC_MODE_SMACK_TEST	4
R
Ralf Baechle 已提交
86 87 88 89

	atomic_t		refcnt;
	struct semaphore	dead_sem;
};
L
Linus Torvalds 已提交
90 91 92

/*---------------------------------------------------------------------------*/

R
Ralf Baechle 已提交
93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125
static const unsigned short crc_flex_table[] = {
	0x0f87, 0x1e0e, 0x2c95, 0x3d1c, 0x49a3, 0x582a, 0x6ab1, 0x7b38,
	0x83cf, 0x9246, 0xa0dd, 0xb154, 0xc5eb, 0xd462, 0xe6f9, 0xf770,
	0x1f06, 0x0e8f, 0x3c14, 0x2d9d, 0x5922, 0x48ab, 0x7a30, 0x6bb9,
	0x934e, 0x82c7, 0xb05c, 0xa1d5, 0xd56a, 0xc4e3, 0xf678, 0xe7f1,
	0x2e85, 0x3f0c, 0x0d97, 0x1c1e, 0x68a1, 0x7928, 0x4bb3, 0x5a3a,
	0xa2cd, 0xb344, 0x81df, 0x9056, 0xe4e9, 0xf560, 0xc7fb, 0xd672,
	0x3e04, 0x2f8d, 0x1d16, 0x0c9f, 0x7820, 0x69a9, 0x5b32, 0x4abb,
	0xb24c, 0xa3c5, 0x915e, 0x80d7, 0xf468, 0xe5e1, 0xd77a, 0xc6f3,
	0x4d83, 0x5c0a, 0x6e91, 0x7f18, 0x0ba7, 0x1a2e, 0x28b5, 0x393c,
	0xc1cb, 0xd042, 0xe2d9, 0xf350, 0x87ef, 0x9666, 0xa4fd, 0xb574,
	0x5d02, 0x4c8b, 0x7e10, 0x6f99, 0x1b26, 0x0aaf, 0x3834, 0x29bd,
	0xd14a, 0xc0c3, 0xf258, 0xe3d1, 0x976e, 0x86e7, 0xb47c, 0xa5f5,
	0x6c81, 0x7d08, 0x4f93, 0x5e1a, 0x2aa5, 0x3b2c, 0x09b7, 0x183e,
	0xe0c9, 0xf140, 0xc3db, 0xd252, 0xa6ed, 0xb764, 0x85ff, 0x9476,
	0x7c00, 0x6d89, 0x5f12, 0x4e9b, 0x3a24, 0x2bad, 0x1936, 0x08bf,
	0xf048, 0xe1c1, 0xd35a, 0xc2d3, 0xb66c, 0xa7e5, 0x957e, 0x84f7,
	0x8b8f, 0x9a06, 0xa89d, 0xb914, 0xcdab, 0xdc22, 0xeeb9, 0xff30,
	0x07c7, 0x164e, 0x24d5, 0x355c, 0x41e3, 0x506a, 0x62f1, 0x7378,
	0x9b0e, 0x8a87, 0xb81c, 0xa995, 0xdd2a, 0xcca3, 0xfe38, 0xefb1,
	0x1746, 0x06cf, 0x3454, 0x25dd, 0x5162, 0x40eb, 0x7270, 0x63f9,
	0xaa8d, 0xbb04, 0x899f, 0x9816, 0xeca9, 0xfd20, 0xcfbb, 0xde32,
	0x26c5, 0x374c, 0x05d7, 0x145e, 0x60e1, 0x7168, 0x43f3, 0x527a,
	0xba0c, 0xab85, 0x991e, 0x8897, 0xfc28, 0xeda1, 0xdf3a, 0xceb3,
	0x3644, 0x27cd, 0x1556, 0x04df, 0x7060, 0x61e9, 0x5372, 0x42fb,
	0xc98b, 0xd802, 0xea99, 0xfb10, 0x8faf, 0x9e26, 0xacbd, 0xbd34,
	0x45c3, 0x544a, 0x66d1, 0x7758, 0x03e7, 0x126e, 0x20f5, 0x317c,
	0xd90a, 0xc883, 0xfa18, 0xeb91, 0x9f2e, 0x8ea7, 0xbc3c, 0xadb5,
	0x5542, 0x44cb, 0x7650, 0x67d9, 0x1366, 0x02ef, 0x3074, 0x21fd,
	0xe889, 0xf900, 0xcb9b, 0xda12, 0xaead, 0xbf24, 0x8dbf, 0x9c36,
	0x64c1, 0x7548, 0x47d3, 0x565a, 0x22e5, 0x336c, 0x01f7, 0x107e,
	0xf808, 0xe981, 0xdb1a, 0xca93, 0xbe2c, 0xafa5, 0x9d3e, 0x8cb7,
	0x7440, 0x65c9, 0x5752, 0x46db, 0x3264, 0x23ed, 0x1176, 0x00ff
L
Linus Torvalds 已提交
126 127 128 129
};

static unsigned short calc_crc_flex(unsigned char *cp, int size)
{
R
Ralf Baechle 已提交
130
	unsigned short crc = 0xffff;
L
Linus Torvalds 已提交
131

R
Ralf Baechle 已提交
132 133
	while (size--)
		crc = (crc << 8) ^ crc_flex_table[((crc >> 8) ^ *cp++) & 0xff];
L
Linus Torvalds 已提交
134

R
Ralf Baechle 已提交
135 136
	return crc;
}
L
Linus Torvalds 已提交
137 138 139

static int check_crc_flex(unsigned char *cp, int size)
{
R
Ralf Baechle 已提交
140
	unsigned short crc = 0xffff;
L
Linus Torvalds 已提交
141

R
Ralf Baechle 已提交
142 143
	if (size < 3)
		return -1;
L
Linus Torvalds 已提交
144

R
Ralf Baechle 已提交
145 146
	while (size--)
		crc = (crc << 8) ^ crc_flex_table[((crc >> 8) ^ *cp++) & 0xff];
L
Linus Torvalds 已提交
147

R
Ralf Baechle 已提交
148 149
	if ((crc & 0xffff) != 0x7070)
		return -1;
L
Linus Torvalds 已提交
150

R
Ralf Baechle 已提交
151
	return 0;
L
Linus Torvalds 已提交
152 153
}

R
Ralf Baechle 已提交
154 155 156 157 158 159 160 161 162 163 164 165 166 167 168
static int check_crc_16(unsigned char *cp, int size)
{
	unsigned short crc = 0x0000;

	if (size < 3)
		return -1;

	crc = crc16(0, cp, size);

	if (crc != 0x0000)
		return -1;

	return 0;
}

R
Ralf Baechle 已提交
169 170 171
/*
 * Standard encapsulation
 */
L
Linus Torvalds 已提交
172

R
Ralf Baechle 已提交
173
static int kiss_esc(unsigned char *s, unsigned char *d, int len)
L
Linus Torvalds 已提交
174
{
R
Ralf Baechle 已提交
175 176
	unsigned char *ptr = d;
	unsigned char c;
L
Linus Torvalds 已提交
177

R
Ralf Baechle 已提交
178 179 180 181
	/*
	 * Send an initial END character to flush out any data that may have
	 * accumulated in the receiver due to line noise.
	 */
L
Linus Torvalds 已提交
182

R
Ralf Baechle 已提交
183
	*ptr++ = END;
L
Linus Torvalds 已提交
184

R
Ralf Baechle 已提交
185 186 187 188 189
	while (len-- > 0) {
		switch (c = *s++) {
		case END:
			*ptr++ = ESC;
			*ptr++ = ESC_END;
L
Linus Torvalds 已提交
190
			break;
R
Ralf Baechle 已提交
191 192 193 194 195 196 197 198
		case ESC:
			*ptr++ = ESC;
			*ptr++ = ESC_ESC;
			break;
		default:
			*ptr++ = c;
			break;
		}
L
Linus Torvalds 已提交
199 200
	}

R
Ralf Baechle 已提交
201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226
	*ptr++ = END;

	return ptr - d;
}

/*
 * MW:
 * OK its ugly, but tell me a better solution without copying the
 * packet to a temporary buffer :-)
 */
static int kiss_esc_crc(unsigned char *s, unsigned char *d, unsigned short crc,
	int len)
{
	unsigned char *ptr = d;
	unsigned char c=0;

	*ptr++ = END;
	while (len > 0) {
		if (len > 2)
			c = *s++;
		else if (len > 1)
			c = crc >> 8;
		else if (len > 0)
			c = crc & 0xff;

		len--;
L
Linus Torvalds 已提交
227

R
Ralf Baechle 已提交
228 229 230 231 232 233 234 235 236 237 238 239 240
		switch (c) {
		case END:
			*ptr++ = ESC;
			*ptr++ = ESC_END;
			break;
		case ESC:
			*ptr++ = ESC;
			*ptr++ = ESC_ESC;
			break;
		default:
			*ptr++ = c;
			break;
		}
L
Linus Torvalds 已提交
241
	}
R
Ralf Baechle 已提交
242 243 244 245 246 247 248 249 250 251 252 253 254
	*ptr++ = END;

	return ptr - d;
}

/* Send one completely decapsulated AX.25 packet to the AX.25 layer. */
static void ax_bump(struct mkiss *ax)
{
	struct sk_buff *skb;
	int count;

	spin_lock_bh(&ax->buflock);
	if (ax->rbuff[0] > 0x0f) {
R
Ralf Baechle 已提交
255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270
		if (ax->rbuff[0] & 0x80) {
			if (check_crc_16(ax->rbuff, ax->rcount) < 0) {
				ax->stats.rx_errors++;
				spin_unlock_bh(&ax->buflock);

				return;
			}
			if (ax->crcmode != CRC_MODE_SMACK && ax->crcauto) {
				printk(KERN_INFO
				       "mkiss: %s: Switchting to crc-smack\n",
				       ax->dev->name);
				ax->crcmode = CRC_MODE_SMACK;
			}
			ax->rcount -= 2;
			*ax->rbuff &= ~0x80;
		} else if (ax->rbuff[0] & 0x20)  {
R
Ralf Baechle 已提交
271
			if (check_crc_flex(ax->rbuff, ax->rcount) < 0) {
R
Ralf Baechle 已提交
272 273
				ax->stats.rx_errors++;
				spin_unlock_bh(&ax->buflock);
R
Ralf Baechle 已提交
274 275
				return;
			}
R
Ralf Baechle 已提交
276 277 278 279 280 281
			if (ax->crcmode != CRC_MODE_FLEX && ax->crcauto) {
				printk(KERN_INFO
				       "mkiss: %s: Switchting to crc-flexnet\n",
				       ax->dev->name);
				ax->crcmode = CRC_MODE_FLEX;
			}
R
Ralf Baechle 已提交
282
			ax->rcount -= 2;
R
Ralf Baechle 已提交
283 284 285 286 287 288

			/*
			 * dl9sau bugfix: the trailling two bytes flexnet crc
			 * will not be passed to the kernel. thus we have to
			 * correct the kissparm signature, because it indicates
			 * a crc but there's none
R
Ralf Baechle 已提交
289
			 */
R
Ralf Baechle 已提交
290
			*ax->rbuff &= ~0x20;
L
Linus Torvalds 已提交
291
		}
R
Ralf Baechle 已提交
292 293 294 295 296 297 298 299 300 301
 	}
	spin_unlock_bh(&ax->buflock);

	count = ax->rcount;

	if ((skb = dev_alloc_skb(count)) == NULL) {
		printk(KERN_ERR "mkiss: %s: memory squeeze, dropping packet.\n",
		       ax->dev->name);
		ax->stats.rx_dropped++;
		return;
L
Linus Torvalds 已提交
302 303
	}

R
Ralf Baechle 已提交
304 305 306 307 308 309 310 311
	spin_lock_bh(&ax->buflock);
	memcpy(skb_put(skb,count), ax->rbuff, count);
	spin_unlock_bh(&ax->buflock);
	skb->protocol = ax25_type_trans(skb, ax->dev);
	netif_rx(skb);
	ax->dev->last_rx = jiffies;
	ax->stats.rx_packets++;
	ax->stats.rx_bytes += count;
L
Linus Torvalds 已提交
312 313
}

R
Ralf Baechle 已提交
314
static void kiss_unesc(struct mkiss *ax, unsigned char s)
L
Linus Torvalds 已提交
315
{
R
Ralf Baechle 已提交
316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364
	switch (s) {
	case END:
		/* drop keeptest bit = VSV */
		if (test_bit(AXF_KEEPTEST, &ax->flags))
			clear_bit(AXF_KEEPTEST, &ax->flags);

		if (!test_and_clear_bit(AXF_ERROR, &ax->flags) && (ax->rcount > 2))
			ax_bump(ax);

		clear_bit(AXF_ESCAPE, &ax->flags);
		ax->rcount = 0;
		return;

	case ESC:
		set_bit(AXF_ESCAPE, &ax->flags);
		return;
	case ESC_ESC:
		if (test_and_clear_bit(AXF_ESCAPE, &ax->flags))
			s = ESC;
		break;
	case ESC_END:
		if (test_and_clear_bit(AXF_ESCAPE, &ax->flags))
			s = END;
		break;
	}

	spin_lock_bh(&ax->buflock);
	if (!test_bit(AXF_ERROR, &ax->flags)) {
		if (ax->rcount < ax->buffsize) {
			ax->rbuff[ax->rcount++] = s;
			spin_unlock_bh(&ax->buflock);
			return;
		}

		ax->stats.rx_over_errors++;
		set_bit(AXF_ERROR, &ax->flags);
	}
	spin_unlock_bh(&ax->buflock);
}

static int ax_set_mac_address(struct net_device *dev, void *addr)
{
	struct sockaddr_ax25 *sa = addr;

	spin_lock_irq(&dev->xmit_lock);
	memcpy(dev->dev_addr, &sa->sax25_call, AX25_ADDR_LEN);
	spin_unlock_irq(&dev->xmit_lock);

	return 0;
L
Linus Torvalds 已提交
365 366
}

R
Ralf Baechle 已提交
367 368 369
/*---------------------------------------------------------------------------*/

static void ax_changedmtu(struct mkiss *ax)
L
Linus Torvalds 已提交
370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388
{
	struct net_device *dev = ax->dev;
	unsigned char *xbuff, *rbuff, *oxbuff, *orbuff;
	int len;

	len = dev->mtu * 2;

	/*
	 * allow for arrival of larger UDP packets, even if we say not to
	 * also fixes a bug in which SunOS sends 512-byte packets even with
	 * an MSS of 128
	 */
	if (len < 576 * 2)
		len = 576 * 2;

	xbuff = kmalloc(len + 4, GFP_ATOMIC);
	rbuff = kmalloc(len + 4, GFP_ATOMIC);

	if (xbuff == NULL || rbuff == NULL)  {
R
Ralf Baechle 已提交
389 390
		printk(KERN_ERR "mkiss: %s: unable to grow ax25 buffers, "
		       "MTU change cancelled.\n",
L
Linus Torvalds 已提交
391 392
		       ax->dev->name);
		dev->mtu = ax->mtu;
393 394
		kfree(xbuff);
		kfree(rbuff);
L
Linus Torvalds 已提交
395 396 397 398 399 400 401 402 403 404 405 406 407 408 409
		return;
	}

	spin_lock_bh(&ax->buflock);

	oxbuff    = ax->xbuff;
	ax->xbuff = xbuff;
	orbuff    = ax->rbuff;
	ax->rbuff = rbuff;

	if (ax->xleft) {
		if (ax->xleft <= len) {
			memcpy(ax->xbuff, ax->xhead, ax->xleft);
		} else  {
			ax->xleft = 0;
R
Ralf Baechle 已提交
410
			ax->stats.tx_dropped++;
L
Linus Torvalds 已提交
411 412 413 414 415 416 417 418 419 420
		}
	}

	ax->xhead = ax->xbuff;

	if (ax->rcount) {
		if (ax->rcount <= len) {
			memcpy(ax->rbuff, orbuff, ax->rcount);
		} else  {
			ax->rcount = 0;
R
Ralf Baechle 已提交
421
			ax->stats.rx_over_errors++;
L
Linus Torvalds 已提交
422 423 424 425 426 427 428 429 430
			set_bit(AXF_ERROR, &ax->flags);
		}
	}

	ax->mtu      = dev->mtu + 73;
	ax->buffsize = len;

	spin_unlock_bh(&ax->buflock);

R
Ralf Baechle 已提交
431 432
	kfree(oxbuff);
	kfree(orbuff);
L
Linus Torvalds 已提交
433 434 435
}

/* Encapsulate one AX.25 packet and stuff into a TTY queue. */
R
Ralf Baechle 已提交
436
static void ax_encaps(struct net_device *dev, unsigned char *icp, int len)
L
Linus Torvalds 已提交
437
{
R
Ralf Baechle 已提交
438
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
439 440 441 442 443 444 445 446 447
	unsigned char *p;
	int actual, count;

	if (ax->mtu != ax->dev->mtu + 73)	/* Someone has been ifconfigging */
		ax_changedmtu(ax);

	if (len > ax->mtu) {		/* Sigh, shouldn't occur BUT ... */
		len = ax->mtu;
		printk(KERN_ERR "mkiss: %s: truncating oversized transmit packet!\n", ax->dev->name);
R
Ralf Baechle 已提交
448 449
		ax->stats.tx_dropped++;
		netif_start_queue(dev);
L
Linus Torvalds 已提交
450 451 452 453 454 455
		return;
	}

	p = icp;

	spin_lock_bh(&ax->buflock);
R
Ralf Baechle 已提交
456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486
	if ((*p & 0x0f) != 0) {
		/* Configuration Command (kissparms(1).
		 * Protocol spec says: never append CRC.
		 * This fixes a very old bug in the linux
		 * kiss driver. -- dl9sau */
		switch (*p & 0xff) {
		case 0x85:
			/* command from userspace especially for us,
			 * not for delivery to the tnc */
			if (len > 1) {
				int cmd = (p[1] & 0xff);
				switch(cmd) {
				case 3:
				  ax->crcmode = CRC_MODE_SMACK;
				  break;
				case 2:
				  ax->crcmode = CRC_MODE_FLEX;
				  break;
				case 1:
				  ax->crcmode = CRC_MODE_NONE;
				  break;
				case 0:
				default:
				  ax->crcmode = CRC_MODE_SMACK_TEST;
				  cmd = 0;
				}
				ax->crcauto = (cmd ? 0 : 1);
				printk(KERN_INFO "mkiss: %s: crc mode %s %d\n", ax->dev->name, (len) ? "set to" : "is", cmd);
			}
			spin_unlock_bh(&ax->buflock);
			netif_start_queue(dev);
L
Linus Torvalds 已提交
487

R
Ralf Baechle 已提交
488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517
			return;
		default:
			count = kiss_esc(p, (unsigned char *)ax->xbuff, len);
		}
	} else {
		unsigned short crc;
		switch (ax->crcmode) {
		case CRC_MODE_SMACK_TEST:
			ax->crcmode  = CRC_MODE_FLEX_TEST;
			printk(KERN_INFO "mkiss: %s: Trying crc-smack\n", ax->dev->name);
			// fall through
		case CRC_MODE_SMACK:
			*p |= 0x80;
			crc = swab16(crc16(0, p, len));
			count = kiss_esc_crc(p, (unsigned char *)ax->xbuff, crc, len+2);
			break;
		case CRC_MODE_FLEX_TEST:
			ax->crcmode = CRC_MODE_NONE;
			printk(KERN_INFO "mkiss: %s: Trying crc-flexnet\n", ax->dev->name);
			// fall through
		case CRC_MODE_FLEX:
			*p |= 0x20;
			crc = calc_crc_flex(p, len);
			count = kiss_esc_crc(p, (unsigned char *)ax->xbuff, crc, len+2);
			break;

		default:
			count = kiss_esc(p, (unsigned char *)ax->xbuff, len);
		}
  	}
518
	spin_unlock_bh(&ax->buflock);
L
Linus Torvalds 已提交
519

R
Ralf Baechle 已提交
520
	set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags);
L
Linus Torvalds 已提交
521
	actual = ax->tty->driver->write(ax->tty, ax->xbuff, count);
R
Ralf Baechle 已提交
522 523 524
	ax->stats.tx_packets++;
	ax->stats.tx_bytes += actual;

L
Linus Torvalds 已提交
525 526 527 528 529 530 531 532
	ax->dev->trans_start = jiffies;
	ax->xleft = count - actual;
	ax->xhead = ax->xbuff + actual;
}

/* Encapsulate an AX.25 packet and kick it into a TTY queue. */
static int ax_xmit(struct sk_buff *skb, struct net_device *dev)
{
R
Ralf Baechle 已提交
533
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
534 535 536 537 538 539 540 541 542 543 544

	if (!netif_running(dev))  {
		printk(KERN_ERR "mkiss: %s: xmit call when iface is down\n", dev->name);
		return 1;
	}

	if (netif_queue_stopped(dev)) {
		/*
		 * May be we must check transmitter timeout here ?
		 *      14 Oct 1994 Dmitry Gorodchanin.
		 */
545
		if (time_before(jiffies, dev->trans_start + 20 * HZ)) {
L
Linus Torvalds 已提交
546 547 548 549 550 551 552 553 554
			/* 20 sec timeout not reached */
			return 1;
		}

		printk(KERN_ERR "mkiss: %s: transmit timed out, %s?\n", dev->name,
		       (ax->tty->driver->chars_in_buffer(ax->tty) || ax->xleft) ?
		       "bad line quality" : "driver error");

		ax->xleft = 0;
R
Ralf Baechle 已提交
555 556
		clear_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags);
		netif_start_queue(dev);
L
Linus Torvalds 已提交
557 558 559 560
	}

	/* We were not busy, so we are now... :-) */
	if (skb != NULL) {
R
Ralf Baechle 已提交
561 562
		netif_stop_queue(dev);
		ax_encaps(dev, skb->data, skb->len);
L
Linus Torvalds 已提交
563 564 565 566 567 568
		kfree_skb(skb);
	}

	return 0;
}

R
Ralf Baechle 已提交
569 570 571 572 573 574 575 576 577 578
static int ax_open_dev(struct net_device *dev)
{
	struct mkiss *ax = netdev_priv(dev);

	if (ax->tty == NULL)
		return -ENODEV;

	return 0;
}

L
Linus Torvalds 已提交
579 580 581 582 583 584 585 586
#if defined(CONFIG_AX25) || defined(CONFIG_AX25_MODULE)

/* Return the frame type ID */
static int ax_header(struct sk_buff *skb, struct net_device *dev, unsigned short type,
	  void *daddr, void *saddr, unsigned len)
{
#ifdef CONFIG_INET
	if (type != htons(ETH_P_AX25))
587
		return ax25_hard_header(skb, dev, type, daddr, saddr, len);
L
Linus Torvalds 已提交
588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606
#endif
	return 0;
}


static int ax_rebuild_header(struct sk_buff *skb)
{
#ifdef CONFIG_INET
	return ax25_rebuild_header(skb);
#else
	return 0;
#endif
}

#endif	/* CONFIG_{AX25,AX25_MODULE} */

/* Open the low-level part of the AX25 channel. Easy! */
static int ax_open(struct net_device *dev)
{
R
Ralf Baechle 已提交
607
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656
	unsigned long len;

	if (ax->tty == NULL)
		return -ENODEV;

	/*
	 * Allocate the frame buffers:
	 *
	 * rbuff	Receive buffer.
	 * xbuff	Transmit buffer.
	 */
	len = dev->mtu * 2;

	/*
	 * allow for arrival of larger UDP packets, even if we say not to
	 * also fixes a bug in which SunOS sends 512-byte packets even with
	 * an MSS of 128
	 */
	if (len < 576 * 2)
		len = 576 * 2;

	if ((ax->rbuff = kmalloc(len + 4, GFP_KERNEL)) == NULL)
		goto norbuff;

	if ((ax->xbuff = kmalloc(len + 4, GFP_KERNEL)) == NULL)
		goto noxbuff;

	ax->mtu	     = dev->mtu + 73;
	ax->buffsize = len;
	ax->rcount   = 0;
	ax->xleft    = 0;

	ax->flags   &= (1 << AXF_INUSE);      /* Clear ESCAPE & ERROR flags */

	spin_lock_init(&ax->buflock);

	return 0;

noxbuff:
	kfree(ax->rbuff);

norbuff:
	return -ENOMEM;
}


/* Close the low-level part of the AX25 channel. Easy! */
static int ax_close(struct net_device *dev)
{
R
Ralf Baechle 已提交
657
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
658

R
Ralf Baechle 已提交
659 660
	if (ax->tty)
		clear_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags);
L
Linus Torvalds 已提交
661 662 663 664 665 666

	netif_stop_queue(dev);

	return 0;
}

R
Ralf Baechle 已提交
667
static struct net_device_stats *ax_get_stats(struct net_device *dev)
L
Linus Torvalds 已提交
668
{
R
Ralf Baechle 已提交
669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698
	struct mkiss *ax = netdev_priv(dev);

	return &ax->stats;
}

static void ax_setup(struct net_device *dev)
{
	static char ax25_bcast[AX25_ADDR_LEN] =
		{'Q'<<1,'S'<<1,'T'<<1,' '<<1,' '<<1,' '<<1,'0'<<1};
	static char ax25_test[AX25_ADDR_LEN] =
		{'L'<<1,'I'<<1,'N'<<1,'U'<<1,'X'<<1,' '<<1,'1'<<1};

	/* Finish setting up the DEVICE info. */
	dev->mtu             = AX_MTU;
	dev->hard_start_xmit = ax_xmit;
	dev->open            = ax_open_dev;
	dev->stop            = ax_close;
	dev->get_stats	     = ax_get_stats;
	dev->set_mac_address = ax_set_mac_address;
	dev->hard_header_len = 0;
	dev->addr_len        = 0;
	dev->type            = ARPHRD_AX25;
	dev->tx_queue_len    = 10;
	dev->hard_header     = ax_header;
	dev->rebuild_header  = ax_rebuild_header;

	memcpy(dev->broadcast, ax25_bcast, AX25_ADDR_LEN);
	memcpy(dev->dev_addr,  ax25_test,  AX25_ADDR_LEN);

	dev->flags      = IFF_BROADCAST | IFF_MULTICAST;
L
Linus Torvalds 已提交
699 700 701
}

/*
R
Ralf Baechle 已提交
702 703 704 705 706 707
 * We have a potential race on dereferencing tty->disc_data, because the tty
 * layer provides no locking at all - thus one cpu could be running
 * sixpack_receive_buf while another calls sixpack_close, which zeroes
 * tty->disc_data and frees the memory that sixpack_receive_buf is using.  The
 * best way to fix this is to use a rwlock in the tty struct, but for now we
 * use a single global rwlock for all ttys in ppp line discipline.
L
Linus Torvalds 已提交
708
 */
709
static DEFINE_RWLOCK(disc_data_lock);
R
Ralf Baechle 已提交
710 711

static struct mkiss *mkiss_get(struct tty_struct *tty)
L
Linus Torvalds 已提交
712
{
R
Ralf Baechle 已提交
713
	struct mkiss *ax;
L
Linus Torvalds 已提交
714

R
Ralf Baechle 已提交
715 716 717 718 719
	read_lock(&disc_data_lock);
	ax = tty->disc_data;
	if (ax)
		atomic_inc(&ax->refcnt);
	read_unlock(&disc_data_lock);
L
Linus Torvalds 已提交
720

R
Ralf Baechle 已提交
721 722
	return ax;
}
L
Linus Torvalds 已提交
723

R
Ralf Baechle 已提交
724 725 726 727
static void mkiss_put(struct mkiss *ax)
{
	if (atomic_dec_and_test(&ax->refcnt))
		up(&ax->dead_sem);
L
Linus Torvalds 已提交
728 729
}

R
Ralf Baechle 已提交
730 731
static int crc_force = 0;	/* Can be overridden with insmod */

R
Ralf Baechle 已提交
732
static int mkiss_open(struct tty_struct *tty)
L
Linus Torvalds 已提交
733
{
R
Ralf Baechle 已提交
734 735
	struct net_device *dev;
	struct mkiss *ax;
L
Linus Torvalds 已提交
736 737
	int err;

R
Ralf Baechle 已提交
738 739
	if (!capable(CAP_NET_ADMIN))
		return -EPERM;
L
Linus Torvalds 已提交
740

R
Ralf Baechle 已提交
741 742 743 744 745 746 747 748 749 750 751 752
	dev = alloc_netdev(sizeof(struct mkiss), "ax%d", ax_setup);
	if (!dev) {
		err = -ENOMEM;
		goto out;
	}

	ax = netdev_priv(dev);
	ax->dev = dev;

	spin_lock_init(&ax->buflock);
	atomic_set(&ax->refcnt, 1);
	init_MUTEX_LOCKED(&ax->dead_sem);
L
Linus Torvalds 已提交
753 754 755 756 757 758 759 760

	ax->tty = tty;
	tty->disc_data = ax;

	if (tty->driver->flush_buffer)
		tty->driver->flush_buffer(tty);

	/* Restore default settings */
R
Ralf Baechle 已提交
761
	dev->type = ARPHRD_AX25;
L
Linus Torvalds 已提交
762 763

	/* Perform the low-level AX25 initialization. */
R
Ralf Baechle 已提交
764 765 766
	if ((err = ax_open(ax->dev))) {
		goto out_free_netdev;
	}
L
Linus Torvalds 已提交
767

R
Ralf Baechle 已提交
768 769
	if (register_netdev(dev))
		goto out_free_buffers;
L
Linus Torvalds 已提交
770

R
Ralf Baechle 已提交
771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797
	/* after register_netdev() - because else printk smashes the kernel */
	switch (crc_force) {
	case 3:
		ax->crcmode  = CRC_MODE_SMACK;
		printk(KERN_INFO "mkiss: %s: crc mode smack forced.\n",
		       ax->dev->name);
		break;
	case 2:
		ax->crcmode  = CRC_MODE_FLEX;
		printk(KERN_INFO "mkiss: %s: crc mode flexnet forced.\n",
		       ax->dev->name);
		break;
	case 1:
		ax->crcmode  = CRC_MODE_NONE;
		printk(KERN_INFO "mkiss: %s: crc mode disabled.\n",
		       ax->dev->name);
		break;
	case 0:
		/* fall through */
	default:
		crc_force = 0;
		printk(KERN_INFO "mkiss: %s: crc mode is auto.\n",
		       ax->dev->name);
		ax->crcmode  = CRC_MODE_SMACK_TEST;
	}
	ax->crcauto = (crc_force ? 0 : 1);

R
Ralf Baechle 已提交
798
	netif_start_queue(dev);
L
Linus Torvalds 已提交
799

R
Ralf Baechle 已提交
800 801
	/* Done.  We have linked the TTY line to a channel. */
	return 0;
L
Linus Torvalds 已提交
802

R
Ralf Baechle 已提交
803 804 805
out_free_buffers:
	kfree(ax->rbuff);
	kfree(ax->xbuff);
L
Linus Torvalds 已提交
806

R
Ralf Baechle 已提交
807 808
out_free_netdev:
	free_netdev(dev);
L
Linus Torvalds 已提交
809

R
Ralf Baechle 已提交
810 811
out:
	return err;
L
Linus Torvalds 已提交
812 813
}

R
Ralf Baechle 已提交
814
static void mkiss_close(struct tty_struct *tty)
L
Linus Torvalds 已提交
815
{
R
Ralf Baechle 已提交
816
	struct mkiss *ax;
L
Linus Torvalds 已提交
817

R
Ralf Baechle 已提交
818 819 820 821
	write_lock(&disc_data_lock);
	ax = tty->disc_data;
	tty->disc_data = NULL;
	write_unlock(&disc_data_lock);
L
Linus Torvalds 已提交
822

R
Ralf Baechle 已提交
823 824
	if (ax == 0)
		return;
L
Linus Torvalds 已提交
825 826

	/*
R
Ralf Baechle 已提交
827 828
	 * We have now ensured that nobody can start using ap from now on, but
	 * we have to wait for all existing users to finish.
L
Linus Torvalds 已提交
829
	 */
R
Ralf Baechle 已提交
830 831
	if (!atomic_dec_and_test(&ax->refcnt))
		down(&ax->dead_sem);
L
Linus Torvalds 已提交
832

R
Ralf Baechle 已提交
833
	unregister_netdev(ax->dev);
L
Linus Torvalds 已提交
834

R
Ralf Baechle 已提交
835 836 837
	/* Free all AX25 frame buffers. */
	kfree(ax->rbuff);
	kfree(ax->xbuff);
L
Linus Torvalds 已提交
838

R
Ralf Baechle 已提交
839
	ax->tty = NULL;
L
Linus Torvalds 已提交
840 841
}

R
Ralf Baechle 已提交
842 843 844
/* Perform I/O control on an active ax25 channel. */
static int mkiss_ioctl(struct tty_struct *tty, struct file *file,
	unsigned int cmd, unsigned long arg)
L
Linus Torvalds 已提交
845
{
R
Ralf Baechle 已提交
846 847 848
	struct mkiss *ax = mkiss_get(tty);
	struct net_device *dev = ax->dev;
	unsigned int tmp, err;
L
Linus Torvalds 已提交
849

R
Ralf Baechle 已提交
850 851 852
	/* First make sure we're connected. */
	if (ax == NULL)
		return -ENXIO;
L
Linus Torvalds 已提交
853

R
Ralf Baechle 已提交
854 855 856 857 858 859 860 861 862 863 864 865 866 867
	switch (cmd) {
 	case SIOCGIFNAME:
		err = copy_to_user((void __user *) arg, ax->dev->name,
		                   strlen(ax->dev->name) + 1) ? -EFAULT : 0;
		break;

	case SIOCGIFENCAP:
		err = put_user(4, (int __user *) arg);
		break;

	case SIOCSIFENCAP:
		if (get_user(tmp, (int __user *) arg)) {
			err = -EFAULT;
			break;
L
Linus Torvalds 已提交
868 869
		}

R
Ralf Baechle 已提交
870 871 872 873 874
		ax->mode = tmp;
		dev->addr_len        = AX25_ADDR_LEN;
		dev->hard_header_len = AX25_KISS_HEADER_LEN +
		                       AX25_MAX_HEADER_LEN + 3;
		dev->type            = ARPHRD_AX25;
L
Linus Torvalds 已提交
875

R
Ralf Baechle 已提交
876 877
		err = 0;
		break;
L
Linus Torvalds 已提交
878

R
Ralf Baechle 已提交
879 880
	case SIOCSIFHWADDR: {
		char addr[AX25_ADDR_LEN];
L
Linus Torvalds 已提交
881

R
Ralf Baechle 已提交
882 883 884
		if (copy_from_user(&addr,
		                   (void __user *) arg, AX25_ADDR_LEN)) {
			err = -EFAULT;
L
Linus Torvalds 已提交
885 886 887
			break;
		}

R
Ralf Baechle 已提交
888 889 890 891 892 893 894 895 896
		spin_lock_irq(&dev->xmit_lock);
		memcpy(dev->dev_addr, addr, AX25_ADDR_LEN);
		spin_unlock_irq(&dev->xmit_lock);

		err = 0;
		break;
	}
	default:
		err = -ENOIOCTLCMD;
L
Linus Torvalds 已提交
897 898
	}

R
Ralf Baechle 已提交
899
	mkiss_put(ax);
L
Linus Torvalds 已提交
900

R
Ralf Baechle 已提交
901
	return err;
L
Linus Torvalds 已提交
902 903
}

R
Ralf Baechle 已提交
904 905 906 907 908 909 910 911
/*
 * Handle the 'receiver data ready' interrupt.
 * This function is called by the 'tty_io' module in the kernel when
 * a block of data has been received, which can now be decapsulated
 * and sent on to the AX.25 layer for further processing.
 */
static void mkiss_receive_buf(struct tty_struct *tty, const unsigned char *cp,
	char *fp, int count)
L
Linus Torvalds 已提交
912
{
R
Ralf Baechle 已提交
913
	struct mkiss *ax = mkiss_get(tty);
L
Linus Torvalds 已提交
914

R
Ralf Baechle 已提交
915 916
	if (!ax)
		return;
L
Linus Torvalds 已提交
917

R
Ralf Baechle 已提交
918 919 920 921 922 923
	/*
	 * Argh! mtu change time! - costs us the packet part received
	 * at the change
	 */
	if (ax->mtu != ax->dev->mtu + 73)
		ax_changedmtu(ax);
L
Linus Torvalds 已提交
924

R
Ralf Baechle 已提交
925 926 927 928 929 930 931 932
	/* Read the characters out of the buffer */
	while (count--) {
		if (fp != NULL && *fp++) {
			if (!test_and_set_bit(AXF_ERROR, &ax->flags))
				ax->stats.rx_errors++;
			cp++;
			continue;
		}
L
Linus Torvalds 已提交
933

R
Ralf Baechle 已提交
934
		kiss_unesc(ax, *cp++);
L
Linus Torvalds 已提交
935
	}
R
Ralf Baechle 已提交
936 937 938 939 940

	mkiss_put(ax);
	if (test_and_clear_bit(TTY_THROTTLED, &tty->flags)
	    && tty->driver->unthrottle)
		tty->driver->unthrottle(tty);
L
Linus Torvalds 已提交
941 942
}

R
Ralf Baechle 已提交
943
static int mkiss_receive_room(struct tty_struct *tty)
L
Linus Torvalds 已提交
944
{
R
Ralf Baechle 已提交
945
	return 65536;  /* We can handle an infinite amount of data. :-) */
L
Linus Torvalds 已提交
946 947
}

R
Ralf Baechle 已提交
948 949 950 951 952
/*
 * Called by the driver when there's room for more data.  If we have
 * more packets to send, we send them here.
 */
static void mkiss_write_wakeup(struct tty_struct *tty)
L
Linus Torvalds 已提交
953
{
R
Ralf Baechle 已提交
954 955
	struct mkiss *ax = mkiss_get(tty);
	int actual;
L
Linus Torvalds 已提交
956

R
Ralf Baechle 已提交
957 958
	if (!ax)
		return;
L
Linus Torvalds 已提交
959

R
Ralf Baechle 已提交
960 961 962 963 964
	if (ax->xleft <= 0)  {
		/* Now serial buffer is almost free & we can start
		 * transmission of another packet
		 */
		clear_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
L
Linus Torvalds 已提交
965

R
Ralf Baechle 已提交
966 967 968
		netif_wake_queue(ax->dev);
		goto out;
	}
L
Linus Torvalds 已提交
969

R
Ralf Baechle 已提交
970 971 972
	actual = tty->driver->write(tty, ax->xhead, ax->xleft);
	ax->xleft -= actual;
	ax->xhead += actual;
L
Linus Torvalds 已提交
973

R
Ralf Baechle 已提交
974 975
out:
	mkiss_put(ax);
L
Linus Torvalds 已提交
976 977
}

R
Ralf Baechle 已提交
978
static struct tty_ldisc ax_ldisc = {
979
	.owner		= THIS_MODULE,
R
Ralf Baechle 已提交
980 981 982 983 984 985 986 987 988
	.magic		= TTY_LDISC_MAGIC,
	.name		= "mkiss",
	.open		= mkiss_open,
	.close		= mkiss_close,
	.ioctl		= mkiss_ioctl,
	.receive_buf	= mkiss_receive_buf,
	.receive_room	= mkiss_receive_room,
	.write_wakeup	= mkiss_write_wakeup
};
L
Linus Torvalds 已提交
989

R
Ralf Baechle 已提交
990 991 992 993
static char banner[] __initdata = KERN_INFO \
	"mkiss: AX.25 Multikiss, Hans Albas PE1AYX\n";
static char msg_regfail[] __initdata = KERN_ERR \
	"mkiss: can't register line discipline (err = %d)\n";
L
Linus Torvalds 已提交
994 995 996 997 998 999 1000

static int __init mkiss_init_driver(void)
{
	int status;

	printk(banner);

R
Ralf Baechle 已提交
1001 1002
	if ((status = tty_register_ldisc(N_AX25, &ax_ldisc)) != 0)
		printk(msg_regfail);
L
Linus Torvalds 已提交
1003 1004 1005 1006

	return status;
}

R
Ralf Baechle 已提交
1007 1008 1009
static const char msg_unregfail[] __exitdata = KERN_ERR \
	"mkiss: can't unregister line discipline (err = %d)\n";

L
Linus Torvalds 已提交
1010 1011
static void __exit mkiss_exit_driver(void)
{
R
Ralf Baechle 已提交
1012
	int ret;
L
Linus Torvalds 已提交
1013

R
Ralf Baechle 已提交
1014 1015
	if ((ret = tty_unregister_ldisc(N_AX25)))
		printk(msg_unregfail, ret);
L
Linus Torvalds 已提交
1016 1017
}

R
Ralf Baechle 已提交
1018
MODULE_AUTHOR("Ralf Baechle DL5RB <ralf@linux-mips.org>");
L
Linus Torvalds 已提交
1019
MODULE_DESCRIPTION("KISS driver for AX.25 over TTYs");
R
Ralf Baechle 已提交
1020 1021
MODULE_PARM(crc_force, "i");
MODULE_PARM_DESC(crc_force, "crc [0 = auto | 1 = none | 2 = flexnet | 3 = smack]");
L
Linus Torvalds 已提交
1022 1023
MODULE_LICENSE("GPL");
MODULE_ALIAS_LDISC(N_AX25);
R
Ralf Baechle 已提交
1024

L
Linus Torvalds 已提交
1025 1026
module_init(mkiss_init_driver);
module_exit(mkiss_exit_driver);