mkiss.c 23.9 KB
Newer Older
L
Linus Torvalds 已提交
1
/*
R
Ralf Baechle 已提交
2 3 4
 *  This program is free software; you can distribute it and/or modify it
 *  under the terms of the GNU General Public License (Version 2) as
 *  published by the Free Software Foundation.
L
Linus Torvalds 已提交
5
 *
R
Ralf Baechle 已提交
6 7 8 9
 *  This program is distributed in the hope it will be useful, but WITHOUT
 *  ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 *  FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 *  for more details.
L
Linus Torvalds 已提交
10
 *
R
Ralf Baechle 已提交
11 12 13
 *  You should have received a copy of the GNU General Public License along
 *  with this program; if not, write to the Free Software Foundation, Inc.,
 *  59 Temple Place - Suite 330, Boston MA 02111-1307, USA.
L
Linus Torvalds 已提交
14
 *
R
Ralf Baechle 已提交
15 16
 * Copyright (C) Hans Alblas PE1AYX <hans@esrac.ele.tue.nl>
 * Copyright (C) 2004, 05 Ralf Baechle DL5RB <ralf@linux-mips.org>
R
Ralf Baechle 已提交
17
 * Copyright (C) 2004, 05 Thomas Osterried DL9SAU <thomas@x-berg.in-berlin.de>
L
Linus Torvalds 已提交
18 19 20 21 22
 */
#include <linux/module.h>
#include <asm/system.h>
#include <linux/bitops.h>
#include <asm/uaccess.h>
R
Ralf Baechle 已提交
23
#include <linux/crc16.h>
L
Linus Torvalds 已提交
24 25 26 27 28 29 30 31 32 33 34 35 36 37
#include <linux/string.h>
#include <linux/mm.h>
#include <linux/interrupt.h>
#include <linux/in.h>
#include <linux/inet.h>
#include <linux/tty.h>
#include <linux/errno.h>
#include <linux/netdevice.h>
#include <linux/major.h>
#include <linux/init.h>
#include <linux/rtnetlink.h>
#include <linux/etherdevice.h>
#include <linux/skbuff.h>
#include <linux/if_arp.h>
38
#include <linux/jiffies.h>
L
Linus Torvalds 已提交
39 40 41

#include <net/ax25.h>

R
Ralf Baechle 已提交
42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77
#define AX_MTU		236

/* SLIP/KISS protocol characters. */
#define END             0300		/* indicates end of frame	*/
#define ESC             0333		/* indicates byte stuffing	*/
#define ESC_END         0334		/* ESC ESC_END means END 'data'	*/
#define ESC_ESC         0335		/* ESC ESC_ESC means ESC 'data'	*/

struct mkiss {
	struct tty_struct	*tty;	/* ptr to TTY structure		*/
	struct net_device	*dev;	/* easy for intr handling	*/

	/* These are pointers to the malloc()ed frame buffers. */
	spinlock_t		buflock;/* lock for rbuf and xbuf */
	unsigned char		*rbuff;	/* receiver buffer		*/
	int			rcount;	/* received chars counter       */
	unsigned char		*xbuff;	/* transmitter buffer		*/
	unsigned char		*xhead;	/* pointer to next byte to XMIT */
	int			xleft;	/* bytes left in XMIT queue     */

	struct net_device_stats	stats;

	/* Detailed SLIP statistics. */
	int		mtu;		/* Our mtu (to spot changes!)   */
	int		buffsize;	/* Max buffers sizes            */

	unsigned long	flags;		/* Flag values/ mode etc	*/
					/* long req'd: used by set_bit --RR */
#define AXF_INUSE	0		/* Channel in use               */
#define AXF_ESCAPE	1               /* ESC received                 */
#define AXF_ERROR	2               /* Parity, etc. error           */
#define AXF_KEEPTEST	3		/* Keepalive test flag		*/
#define AXF_OUTWAIT	4		/* is outpacket was flag	*/

	int		mode;
        int		crcmode;	/* MW: for FlexNet, SMACK etc.  */
R
Ralf Baechle 已提交
78 79 80 81 82 83 84
	int		crcauto;	/* CRC auto mode */

#define CRC_MODE_NONE		0
#define CRC_MODE_FLEX		1
#define CRC_MODE_SMACK		2
#define CRC_MODE_FLEX_TEST	3
#define CRC_MODE_SMACK_TEST	4
R
Ralf Baechle 已提交
85 86 87 88

	atomic_t		refcnt;
	struct semaphore	dead_sem;
};
L
Linus Torvalds 已提交
89 90 91

/*---------------------------------------------------------------------------*/

R
Ralf Baechle 已提交
92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124
static const unsigned short crc_flex_table[] = {
	0x0f87, 0x1e0e, 0x2c95, 0x3d1c, 0x49a3, 0x582a, 0x6ab1, 0x7b38,
	0x83cf, 0x9246, 0xa0dd, 0xb154, 0xc5eb, 0xd462, 0xe6f9, 0xf770,
	0x1f06, 0x0e8f, 0x3c14, 0x2d9d, 0x5922, 0x48ab, 0x7a30, 0x6bb9,
	0x934e, 0x82c7, 0xb05c, 0xa1d5, 0xd56a, 0xc4e3, 0xf678, 0xe7f1,
	0x2e85, 0x3f0c, 0x0d97, 0x1c1e, 0x68a1, 0x7928, 0x4bb3, 0x5a3a,
	0xa2cd, 0xb344, 0x81df, 0x9056, 0xe4e9, 0xf560, 0xc7fb, 0xd672,
	0x3e04, 0x2f8d, 0x1d16, 0x0c9f, 0x7820, 0x69a9, 0x5b32, 0x4abb,
	0xb24c, 0xa3c5, 0x915e, 0x80d7, 0xf468, 0xe5e1, 0xd77a, 0xc6f3,
	0x4d83, 0x5c0a, 0x6e91, 0x7f18, 0x0ba7, 0x1a2e, 0x28b5, 0x393c,
	0xc1cb, 0xd042, 0xe2d9, 0xf350, 0x87ef, 0x9666, 0xa4fd, 0xb574,
	0x5d02, 0x4c8b, 0x7e10, 0x6f99, 0x1b26, 0x0aaf, 0x3834, 0x29bd,
	0xd14a, 0xc0c3, 0xf258, 0xe3d1, 0x976e, 0x86e7, 0xb47c, 0xa5f5,
	0x6c81, 0x7d08, 0x4f93, 0x5e1a, 0x2aa5, 0x3b2c, 0x09b7, 0x183e,
	0xe0c9, 0xf140, 0xc3db, 0xd252, 0xa6ed, 0xb764, 0x85ff, 0x9476,
	0x7c00, 0x6d89, 0x5f12, 0x4e9b, 0x3a24, 0x2bad, 0x1936, 0x08bf,
	0xf048, 0xe1c1, 0xd35a, 0xc2d3, 0xb66c, 0xa7e5, 0x957e, 0x84f7,
	0x8b8f, 0x9a06, 0xa89d, 0xb914, 0xcdab, 0xdc22, 0xeeb9, 0xff30,
	0x07c7, 0x164e, 0x24d5, 0x355c, 0x41e3, 0x506a, 0x62f1, 0x7378,
	0x9b0e, 0x8a87, 0xb81c, 0xa995, 0xdd2a, 0xcca3, 0xfe38, 0xefb1,
	0x1746, 0x06cf, 0x3454, 0x25dd, 0x5162, 0x40eb, 0x7270, 0x63f9,
	0xaa8d, 0xbb04, 0x899f, 0x9816, 0xeca9, 0xfd20, 0xcfbb, 0xde32,
	0x26c5, 0x374c, 0x05d7, 0x145e, 0x60e1, 0x7168, 0x43f3, 0x527a,
	0xba0c, 0xab85, 0x991e, 0x8897, 0xfc28, 0xeda1, 0xdf3a, 0xceb3,
	0x3644, 0x27cd, 0x1556, 0x04df, 0x7060, 0x61e9, 0x5372, 0x42fb,
	0xc98b, 0xd802, 0xea99, 0xfb10, 0x8faf, 0x9e26, 0xacbd, 0xbd34,
	0x45c3, 0x544a, 0x66d1, 0x7758, 0x03e7, 0x126e, 0x20f5, 0x317c,
	0xd90a, 0xc883, 0xfa18, 0xeb91, 0x9f2e, 0x8ea7, 0xbc3c, 0xadb5,
	0x5542, 0x44cb, 0x7650, 0x67d9, 0x1366, 0x02ef, 0x3074, 0x21fd,
	0xe889, 0xf900, 0xcb9b, 0xda12, 0xaead, 0xbf24, 0x8dbf, 0x9c36,
	0x64c1, 0x7548, 0x47d3, 0x565a, 0x22e5, 0x336c, 0x01f7, 0x107e,
	0xf808, 0xe981, 0xdb1a, 0xca93, 0xbe2c, 0xafa5, 0x9d3e, 0x8cb7,
	0x7440, 0x65c9, 0x5752, 0x46db, 0x3264, 0x23ed, 0x1176, 0x00ff
L
Linus Torvalds 已提交
125 126 127 128
};

static unsigned short calc_crc_flex(unsigned char *cp, int size)
{
R
Ralf Baechle 已提交
129
	unsigned short crc = 0xffff;
L
Linus Torvalds 已提交
130

R
Ralf Baechle 已提交
131 132
	while (size--)
		crc = (crc << 8) ^ crc_flex_table[((crc >> 8) ^ *cp++) & 0xff];
L
Linus Torvalds 已提交
133

R
Ralf Baechle 已提交
134 135
	return crc;
}
L
Linus Torvalds 已提交
136 137 138

static int check_crc_flex(unsigned char *cp, int size)
{
R
Ralf Baechle 已提交
139
	unsigned short crc = 0xffff;
L
Linus Torvalds 已提交
140

R
Ralf Baechle 已提交
141 142
	if (size < 3)
		return -1;
L
Linus Torvalds 已提交
143

R
Ralf Baechle 已提交
144 145
	while (size--)
		crc = (crc << 8) ^ crc_flex_table[((crc >> 8) ^ *cp++) & 0xff];
L
Linus Torvalds 已提交
146

R
Ralf Baechle 已提交
147 148
	if ((crc & 0xffff) != 0x7070)
		return -1;
L
Linus Torvalds 已提交
149

R
Ralf Baechle 已提交
150
	return 0;
L
Linus Torvalds 已提交
151 152
}

R
Ralf Baechle 已提交
153 154 155 156 157 158 159 160 161 162 163 164 165 166 167
static int check_crc_16(unsigned char *cp, int size)
{
	unsigned short crc = 0x0000;

	if (size < 3)
		return -1;

	crc = crc16(0, cp, size);

	if (crc != 0x0000)
		return -1;

	return 0;
}

R
Ralf Baechle 已提交
168 169 170
/*
 * Standard encapsulation
 */
L
Linus Torvalds 已提交
171

R
Ralf Baechle 已提交
172
static int kiss_esc(unsigned char *s, unsigned char *d, int len)
L
Linus Torvalds 已提交
173
{
R
Ralf Baechle 已提交
174 175
	unsigned char *ptr = d;
	unsigned char c;
L
Linus Torvalds 已提交
176

R
Ralf Baechle 已提交
177 178 179 180
	/*
	 * Send an initial END character to flush out any data that may have
	 * accumulated in the receiver due to line noise.
	 */
L
Linus Torvalds 已提交
181

R
Ralf Baechle 已提交
182
	*ptr++ = END;
L
Linus Torvalds 已提交
183

R
Ralf Baechle 已提交
184 185 186 187 188
	while (len-- > 0) {
		switch (c = *s++) {
		case END:
			*ptr++ = ESC;
			*ptr++ = ESC_END;
L
Linus Torvalds 已提交
189
			break;
R
Ralf Baechle 已提交
190 191 192 193 194 195 196 197
		case ESC:
			*ptr++ = ESC;
			*ptr++ = ESC_ESC;
			break;
		default:
			*ptr++ = c;
			break;
		}
L
Linus Torvalds 已提交
198 199
	}

R
Ralf Baechle 已提交
200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225
	*ptr++ = END;

	return ptr - d;
}

/*
 * MW:
 * OK its ugly, but tell me a better solution without copying the
 * packet to a temporary buffer :-)
 */
static int kiss_esc_crc(unsigned char *s, unsigned char *d, unsigned short crc,
	int len)
{
	unsigned char *ptr = d;
	unsigned char c=0;

	*ptr++ = END;
	while (len > 0) {
		if (len > 2)
			c = *s++;
		else if (len > 1)
			c = crc >> 8;
		else if (len > 0)
			c = crc & 0xff;

		len--;
L
Linus Torvalds 已提交
226

R
Ralf Baechle 已提交
227 228 229 230 231 232 233 234 235 236 237 238 239
		switch (c) {
		case END:
			*ptr++ = ESC;
			*ptr++ = ESC_END;
			break;
		case ESC:
			*ptr++ = ESC;
			*ptr++ = ESC_ESC;
			break;
		default:
			*ptr++ = c;
			break;
		}
L
Linus Torvalds 已提交
240
	}
R
Ralf Baechle 已提交
241 242 243 244 245 246 247 248 249 250 251 252 253
	*ptr++ = END;

	return ptr - d;
}

/* Send one completely decapsulated AX.25 packet to the AX.25 layer. */
static void ax_bump(struct mkiss *ax)
{
	struct sk_buff *skb;
	int count;

	spin_lock_bh(&ax->buflock);
	if (ax->rbuff[0] > 0x0f) {
R
Ralf Baechle 已提交
254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269
		if (ax->rbuff[0] & 0x80) {
			if (check_crc_16(ax->rbuff, ax->rcount) < 0) {
				ax->stats.rx_errors++;
				spin_unlock_bh(&ax->buflock);

				return;
			}
			if (ax->crcmode != CRC_MODE_SMACK && ax->crcauto) {
				printk(KERN_INFO
				       "mkiss: %s: Switchting to crc-smack\n",
				       ax->dev->name);
				ax->crcmode = CRC_MODE_SMACK;
			}
			ax->rcount -= 2;
			*ax->rbuff &= ~0x80;
		} else if (ax->rbuff[0] & 0x20)  {
R
Ralf Baechle 已提交
270
			if (check_crc_flex(ax->rbuff, ax->rcount) < 0) {
R
Ralf Baechle 已提交
271 272
				ax->stats.rx_errors++;
				spin_unlock_bh(&ax->buflock);
R
Ralf Baechle 已提交
273 274
				return;
			}
R
Ralf Baechle 已提交
275 276 277 278 279 280
			if (ax->crcmode != CRC_MODE_FLEX && ax->crcauto) {
				printk(KERN_INFO
				       "mkiss: %s: Switchting to crc-flexnet\n",
				       ax->dev->name);
				ax->crcmode = CRC_MODE_FLEX;
			}
R
Ralf Baechle 已提交
281
			ax->rcount -= 2;
R
Ralf Baechle 已提交
282 283 284 285 286 287

			/*
			 * dl9sau bugfix: the trailling two bytes flexnet crc
			 * will not be passed to the kernel. thus we have to
			 * correct the kissparm signature, because it indicates
			 * a crc but there's none
R
Ralf Baechle 已提交
288
			 */
R
Ralf Baechle 已提交
289
			*ax->rbuff &= ~0x20;
L
Linus Torvalds 已提交
290
		}
R
Ralf Baechle 已提交
291 292 293 294 295 296 297 298
 	}

	count = ax->rcount;

	if ((skb = dev_alloc_skb(count)) == NULL) {
		printk(KERN_ERR "mkiss: %s: memory squeeze, dropping packet.\n",
		       ax->dev->name);
		ax->stats.rx_dropped++;
J
Jarek Poplawski 已提交
299
		spin_unlock_bh(&ax->buflock);
R
Ralf Baechle 已提交
300
		return;
L
Linus Torvalds 已提交
301 302
	}

R
Ralf Baechle 已提交
303 304 305 306 307 308
	memcpy(skb_put(skb,count), ax->rbuff, count);
	skb->protocol = ax25_type_trans(skb, ax->dev);
	netif_rx(skb);
	ax->dev->last_rx = jiffies;
	ax->stats.rx_packets++;
	ax->stats.rx_bytes += count;
J
Jarek Poplawski 已提交
309
	spin_unlock_bh(&ax->buflock);
L
Linus Torvalds 已提交
310 311
}

R
Ralf Baechle 已提交
312
static void kiss_unesc(struct mkiss *ax, unsigned char s)
L
Linus Torvalds 已提交
313
{
R
Ralf Baechle 已提交
314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357
	switch (s) {
	case END:
		/* drop keeptest bit = VSV */
		if (test_bit(AXF_KEEPTEST, &ax->flags))
			clear_bit(AXF_KEEPTEST, &ax->flags);

		if (!test_and_clear_bit(AXF_ERROR, &ax->flags) && (ax->rcount > 2))
			ax_bump(ax);

		clear_bit(AXF_ESCAPE, &ax->flags);
		ax->rcount = 0;
		return;

	case ESC:
		set_bit(AXF_ESCAPE, &ax->flags);
		return;
	case ESC_ESC:
		if (test_and_clear_bit(AXF_ESCAPE, &ax->flags))
			s = ESC;
		break;
	case ESC_END:
		if (test_and_clear_bit(AXF_ESCAPE, &ax->flags))
			s = END;
		break;
	}

	spin_lock_bh(&ax->buflock);
	if (!test_bit(AXF_ERROR, &ax->flags)) {
		if (ax->rcount < ax->buffsize) {
			ax->rbuff[ax->rcount++] = s;
			spin_unlock_bh(&ax->buflock);
			return;
		}

		ax->stats.rx_over_errors++;
		set_bit(AXF_ERROR, &ax->flags);
	}
	spin_unlock_bh(&ax->buflock);
}

static int ax_set_mac_address(struct net_device *dev, void *addr)
{
	struct sockaddr_ax25 *sa = addr;

H
Herbert Xu 已提交
358
	netif_tx_lock_bh(dev);
359
	netif_addr_lock(dev);
R
Ralf Baechle 已提交
360
	memcpy(dev->dev_addr, &sa->sax25_call, AX25_ADDR_LEN);
361
	netif_addr_unlock(dev);
H
Herbert Xu 已提交
362
	netif_tx_unlock_bh(dev);
R
Ralf Baechle 已提交
363 364

	return 0;
L
Linus Torvalds 已提交
365 366
}

R
Ralf Baechle 已提交
367 368 369
/*---------------------------------------------------------------------------*/

static void ax_changedmtu(struct mkiss *ax)
L
Linus Torvalds 已提交
370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388
{
	struct net_device *dev = ax->dev;
	unsigned char *xbuff, *rbuff, *oxbuff, *orbuff;
	int len;

	len = dev->mtu * 2;

	/*
	 * allow for arrival of larger UDP packets, even if we say not to
	 * also fixes a bug in which SunOS sends 512-byte packets even with
	 * an MSS of 128
	 */
	if (len < 576 * 2)
		len = 576 * 2;

	xbuff = kmalloc(len + 4, GFP_ATOMIC);
	rbuff = kmalloc(len + 4, GFP_ATOMIC);

	if (xbuff == NULL || rbuff == NULL)  {
R
Ralf Baechle 已提交
389 390
		printk(KERN_ERR "mkiss: %s: unable to grow ax25 buffers, "
		       "MTU change cancelled.\n",
L
Linus Torvalds 已提交
391 392
		       ax->dev->name);
		dev->mtu = ax->mtu;
393 394
		kfree(xbuff);
		kfree(rbuff);
L
Linus Torvalds 已提交
395 396 397 398 399 400 401 402 403 404 405 406 407 408 409
		return;
	}

	spin_lock_bh(&ax->buflock);

	oxbuff    = ax->xbuff;
	ax->xbuff = xbuff;
	orbuff    = ax->rbuff;
	ax->rbuff = rbuff;

	if (ax->xleft) {
		if (ax->xleft <= len) {
			memcpy(ax->xbuff, ax->xhead, ax->xleft);
		} else  {
			ax->xleft = 0;
R
Ralf Baechle 已提交
410
			ax->stats.tx_dropped++;
L
Linus Torvalds 已提交
411 412 413 414 415 416 417 418 419 420
		}
	}

	ax->xhead = ax->xbuff;

	if (ax->rcount) {
		if (ax->rcount <= len) {
			memcpy(ax->rbuff, orbuff, ax->rcount);
		} else  {
			ax->rcount = 0;
R
Ralf Baechle 已提交
421
			ax->stats.rx_over_errors++;
L
Linus Torvalds 已提交
422 423 424 425 426 427 428 429 430
			set_bit(AXF_ERROR, &ax->flags);
		}
	}

	ax->mtu      = dev->mtu + 73;
	ax->buffsize = len;

	spin_unlock_bh(&ax->buflock);

R
Ralf Baechle 已提交
431 432
	kfree(oxbuff);
	kfree(orbuff);
L
Linus Torvalds 已提交
433 434 435
}

/* Encapsulate one AX.25 packet and stuff into a TTY queue. */
R
Ralf Baechle 已提交
436
static void ax_encaps(struct net_device *dev, unsigned char *icp, int len)
L
Linus Torvalds 已提交
437
{
R
Ralf Baechle 已提交
438
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
439 440 441 442 443 444 445 446 447
	unsigned char *p;
	int actual, count;

	if (ax->mtu != ax->dev->mtu + 73)	/* Someone has been ifconfigging */
		ax_changedmtu(ax);

	if (len > ax->mtu) {		/* Sigh, shouldn't occur BUT ... */
		len = ax->mtu;
		printk(KERN_ERR "mkiss: %s: truncating oversized transmit packet!\n", ax->dev->name);
R
Ralf Baechle 已提交
448 449
		ax->stats.tx_dropped++;
		netif_start_queue(dev);
L
Linus Torvalds 已提交
450 451 452 453 454 455
		return;
	}

	p = icp;

	spin_lock_bh(&ax->buflock);
R
Ralf Baechle 已提交
456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486
	if ((*p & 0x0f) != 0) {
		/* Configuration Command (kissparms(1).
		 * Protocol spec says: never append CRC.
		 * This fixes a very old bug in the linux
		 * kiss driver. -- dl9sau */
		switch (*p & 0xff) {
		case 0x85:
			/* command from userspace especially for us,
			 * not for delivery to the tnc */
			if (len > 1) {
				int cmd = (p[1] & 0xff);
				switch(cmd) {
				case 3:
				  ax->crcmode = CRC_MODE_SMACK;
				  break;
				case 2:
				  ax->crcmode = CRC_MODE_FLEX;
				  break;
				case 1:
				  ax->crcmode = CRC_MODE_NONE;
				  break;
				case 0:
				default:
				  ax->crcmode = CRC_MODE_SMACK_TEST;
				  cmd = 0;
				}
				ax->crcauto = (cmd ? 0 : 1);
				printk(KERN_INFO "mkiss: %s: crc mode %s %d\n", ax->dev->name, (len) ? "set to" : "is", cmd);
			}
			spin_unlock_bh(&ax->buflock);
			netif_start_queue(dev);
L
Linus Torvalds 已提交
487

R
Ralf Baechle 已提交
488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517
			return;
		default:
			count = kiss_esc(p, (unsigned char *)ax->xbuff, len);
		}
	} else {
		unsigned short crc;
		switch (ax->crcmode) {
		case CRC_MODE_SMACK_TEST:
			ax->crcmode  = CRC_MODE_FLEX_TEST;
			printk(KERN_INFO "mkiss: %s: Trying crc-smack\n", ax->dev->name);
			// fall through
		case CRC_MODE_SMACK:
			*p |= 0x80;
			crc = swab16(crc16(0, p, len));
			count = kiss_esc_crc(p, (unsigned char *)ax->xbuff, crc, len+2);
			break;
		case CRC_MODE_FLEX_TEST:
			ax->crcmode = CRC_MODE_NONE;
			printk(KERN_INFO "mkiss: %s: Trying crc-flexnet\n", ax->dev->name);
			// fall through
		case CRC_MODE_FLEX:
			*p |= 0x20;
			crc = calc_crc_flex(p, len);
			count = kiss_esc_crc(p, (unsigned char *)ax->xbuff, crc, len+2);
			break;

		default:
			count = kiss_esc(p, (unsigned char *)ax->xbuff, len);
		}
  	}
518
	spin_unlock_bh(&ax->buflock);
L
Linus Torvalds 已提交
519

R
Ralf Baechle 已提交
520
	set_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags);
A
Alan Cox 已提交
521
	actual = ax->tty->ops->write(ax->tty, ax->xbuff, count);
R
Ralf Baechle 已提交
522 523 524
	ax->stats.tx_packets++;
	ax->stats.tx_bytes += actual;

L
Linus Torvalds 已提交
525 526 527 528 529 530 531 532
	ax->dev->trans_start = jiffies;
	ax->xleft = count - actual;
	ax->xhead = ax->xbuff + actual;
}

/* Encapsulate an AX.25 packet and kick it into a TTY queue. */
static int ax_xmit(struct sk_buff *skb, struct net_device *dev)
{
R
Ralf Baechle 已提交
533
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
534 535 536 537 538 539 540 541 542 543 544

	if (!netif_running(dev))  {
		printk(KERN_ERR "mkiss: %s: xmit call when iface is down\n", dev->name);
		return 1;
	}

	if (netif_queue_stopped(dev)) {
		/*
		 * May be we must check transmitter timeout here ?
		 *      14 Oct 1994 Dmitry Gorodchanin.
		 */
545
		if (time_before(jiffies, dev->trans_start + 20 * HZ)) {
L
Linus Torvalds 已提交
546 547 548 549 550
			/* 20 sec timeout not reached */
			return 1;
		}

		printk(KERN_ERR "mkiss: %s: transmit timed out, %s?\n", dev->name,
A
Alan Cox 已提交
551
		       (ax->tty->ops->chars_in_buffer(ax->tty) || ax->xleft) ?
L
Linus Torvalds 已提交
552 553 554
		       "bad line quality" : "driver error");

		ax->xleft = 0;
R
Ralf Baechle 已提交
555 556
		clear_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags);
		netif_start_queue(dev);
L
Linus Torvalds 已提交
557 558 559 560
	}

	/* We were not busy, so we are now... :-) */
	if (skb != NULL) {
R
Ralf Baechle 已提交
561 562
		netif_stop_queue(dev);
		ax_encaps(dev, skb->data, skb->len);
L
Linus Torvalds 已提交
563 564 565 566 567 568
		kfree_skb(skb);
	}

	return 0;
}

R
Ralf Baechle 已提交
569 570 571 572 573 574 575 576 577 578
static int ax_open_dev(struct net_device *dev)
{
	struct mkiss *ax = netdev_priv(dev);

	if (ax->tty == NULL)
		return -ENODEV;

	return 0;
}

L
Linus Torvalds 已提交
579 580 581
#if defined(CONFIG_AX25) || defined(CONFIG_AX25_MODULE)

/* Return the frame type ID */
582 583 584
static int ax_header(struct sk_buff *skb, struct net_device *dev,
		     unsigned short type, const void *daddr,
		     const void *saddr, unsigned len)
L
Linus Torvalds 已提交
585 586
{
#ifdef CONFIG_INET
587
	if (type != ETH_P_AX25)
588
		return ax25_hard_header(skb, dev, type, daddr, saddr, len);
L
Linus Torvalds 已提交
589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607
#endif
	return 0;
}


static int ax_rebuild_header(struct sk_buff *skb)
{
#ifdef CONFIG_INET
	return ax25_rebuild_header(skb);
#else
	return 0;
#endif
}

#endif	/* CONFIG_{AX25,AX25_MODULE} */

/* Open the low-level part of the AX25 channel. Easy! */
static int ax_open(struct net_device *dev)
{
R
Ralf Baechle 已提交
608
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657
	unsigned long len;

	if (ax->tty == NULL)
		return -ENODEV;

	/*
	 * Allocate the frame buffers:
	 *
	 * rbuff	Receive buffer.
	 * xbuff	Transmit buffer.
	 */
	len = dev->mtu * 2;

	/*
	 * allow for arrival of larger UDP packets, even if we say not to
	 * also fixes a bug in which SunOS sends 512-byte packets even with
	 * an MSS of 128
	 */
	if (len < 576 * 2)
		len = 576 * 2;

	if ((ax->rbuff = kmalloc(len + 4, GFP_KERNEL)) == NULL)
		goto norbuff;

	if ((ax->xbuff = kmalloc(len + 4, GFP_KERNEL)) == NULL)
		goto noxbuff;

	ax->mtu	     = dev->mtu + 73;
	ax->buffsize = len;
	ax->rcount   = 0;
	ax->xleft    = 0;

	ax->flags   &= (1 << AXF_INUSE);      /* Clear ESCAPE & ERROR flags */

	spin_lock_init(&ax->buflock);

	return 0;

noxbuff:
	kfree(ax->rbuff);

norbuff:
	return -ENOMEM;
}


/* Close the low-level part of the AX25 channel. Easy! */
static int ax_close(struct net_device *dev)
{
R
Ralf Baechle 已提交
658
	struct mkiss *ax = netdev_priv(dev);
L
Linus Torvalds 已提交
659

R
Ralf Baechle 已提交
660 661
	if (ax->tty)
		clear_bit(TTY_DO_WRITE_WAKEUP, &ax->tty->flags);
L
Linus Torvalds 已提交
662 663 664 665 666 667

	netif_stop_queue(dev);

	return 0;
}

R
Ralf Baechle 已提交
668
static struct net_device_stats *ax_get_stats(struct net_device *dev)
L
Linus Torvalds 已提交
669
{
R
Ralf Baechle 已提交
670 671 672 673 674
	struct mkiss *ax = netdev_priv(dev);

	return &ax->stats;
}

675 676 677 678 679
static const struct header_ops ax_header_ops = {
	.create    = ax_header,
	.rebuild   = ax_rebuild_header,
};

R
Ralf Baechle 已提交
680 681 682 683 684 685 686 687 688 689 690 691 692
static void ax_setup(struct net_device *dev)
{
	/* Finish setting up the DEVICE info. */
	dev->mtu             = AX_MTU;
	dev->hard_start_xmit = ax_xmit;
	dev->open            = ax_open_dev;
	dev->stop            = ax_close;
	dev->get_stats	     = ax_get_stats;
	dev->set_mac_address = ax_set_mac_address;
	dev->hard_header_len = 0;
	dev->addr_len        = 0;
	dev->type            = ARPHRD_AX25;
	dev->tx_queue_len    = 10;
693 694
	dev->header_ops      = &ax_header_ops;

R
Ralf Baechle 已提交
695

696 697
	memcpy(dev->broadcast, &ax25_bcast, AX25_ADDR_LEN);
	memcpy(dev->dev_addr,  &ax25_defaddr,  AX25_ADDR_LEN);
R
Ralf Baechle 已提交
698 699

	dev->flags      = IFF_BROADCAST | IFF_MULTICAST;
L
Linus Torvalds 已提交
700 701 702
}

/*
R
Ralf Baechle 已提交
703 704 705 706 707 708
 * We have a potential race on dereferencing tty->disc_data, because the tty
 * layer provides no locking at all - thus one cpu could be running
 * sixpack_receive_buf while another calls sixpack_close, which zeroes
 * tty->disc_data and frees the memory that sixpack_receive_buf is using.  The
 * best way to fix this is to use a rwlock in the tty struct, but for now we
 * use a single global rwlock for all ttys in ppp line discipline.
L
Linus Torvalds 已提交
709
 */
710
static DEFINE_RWLOCK(disc_data_lock);
R
Ralf Baechle 已提交
711 712

static struct mkiss *mkiss_get(struct tty_struct *tty)
L
Linus Torvalds 已提交
713
{
R
Ralf Baechle 已提交
714
	struct mkiss *ax;
L
Linus Torvalds 已提交
715

R
Ralf Baechle 已提交
716 717 718 719 720
	read_lock(&disc_data_lock);
	ax = tty->disc_data;
	if (ax)
		atomic_inc(&ax->refcnt);
	read_unlock(&disc_data_lock);
L
Linus Torvalds 已提交
721

R
Ralf Baechle 已提交
722 723
	return ax;
}
L
Linus Torvalds 已提交
724

R
Ralf Baechle 已提交
725 726 727 728
static void mkiss_put(struct mkiss *ax)
{
	if (atomic_dec_and_test(&ax->refcnt))
		up(&ax->dead_sem);
L
Linus Torvalds 已提交
729 730
}

R
Ralf Baechle 已提交
731 732
static int crc_force = 0;	/* Can be overridden with insmod */

R
Ralf Baechle 已提交
733
static int mkiss_open(struct tty_struct *tty)
L
Linus Torvalds 已提交
734
{
R
Ralf Baechle 已提交
735 736
	struct net_device *dev;
	struct mkiss *ax;
L
Linus Torvalds 已提交
737 738
	int err;

R
Ralf Baechle 已提交
739 740
	if (!capable(CAP_NET_ADMIN))
		return -EPERM;
A
Alan Cox 已提交
741 742
	if (tty->ops->write == NULL)
		return -EOPNOTSUPP;
L
Linus Torvalds 已提交
743

R
Ralf Baechle 已提交
744 745 746 747 748 749 750 751 752 753 754 755
	dev = alloc_netdev(sizeof(struct mkiss), "ax%d", ax_setup);
	if (!dev) {
		err = -ENOMEM;
		goto out;
	}

	ax = netdev_priv(dev);
	ax->dev = dev;

	spin_lock_init(&ax->buflock);
	atomic_set(&ax->refcnt, 1);
	init_MUTEX_LOCKED(&ax->dead_sem);
L
Linus Torvalds 已提交
756 757 758

	ax->tty = tty;
	tty->disc_data = ax;
A
Alan Cox 已提交
759
	tty->receive_room = 65535;
L
Linus Torvalds 已提交
760

A
Alan Cox 已提交
761
	tty_driver_flush_buffer(tty);
L
Linus Torvalds 已提交
762 763

	/* Restore default settings */
R
Ralf Baechle 已提交
764
	dev->type = ARPHRD_AX25;
L
Linus Torvalds 已提交
765 766

	/* Perform the low-level AX25 initialization. */
R
Ralf Baechle 已提交
767 768 769
	if ((err = ax_open(ax->dev))) {
		goto out_free_netdev;
	}
L
Linus Torvalds 已提交
770

R
Ralf Baechle 已提交
771 772
	if (register_netdev(dev))
		goto out_free_buffers;
L
Linus Torvalds 已提交
773

R
Ralf Baechle 已提交
774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800
	/* after register_netdev() - because else printk smashes the kernel */
	switch (crc_force) {
	case 3:
		ax->crcmode  = CRC_MODE_SMACK;
		printk(KERN_INFO "mkiss: %s: crc mode smack forced.\n",
		       ax->dev->name);
		break;
	case 2:
		ax->crcmode  = CRC_MODE_FLEX;
		printk(KERN_INFO "mkiss: %s: crc mode flexnet forced.\n",
		       ax->dev->name);
		break;
	case 1:
		ax->crcmode  = CRC_MODE_NONE;
		printk(KERN_INFO "mkiss: %s: crc mode disabled.\n",
		       ax->dev->name);
		break;
	case 0:
		/* fall through */
	default:
		crc_force = 0;
		printk(KERN_INFO "mkiss: %s: crc mode is auto.\n",
		       ax->dev->name);
		ax->crcmode  = CRC_MODE_SMACK_TEST;
	}
	ax->crcauto = (crc_force ? 0 : 1);

R
Ralf Baechle 已提交
801
	netif_start_queue(dev);
L
Linus Torvalds 已提交
802

R
Ralf Baechle 已提交
803 804
	/* Done.  We have linked the TTY line to a channel. */
	return 0;
L
Linus Torvalds 已提交
805

R
Ralf Baechle 已提交
806 807 808
out_free_buffers:
	kfree(ax->rbuff);
	kfree(ax->xbuff);
L
Linus Torvalds 已提交
809

R
Ralf Baechle 已提交
810 811
out_free_netdev:
	free_netdev(dev);
L
Linus Torvalds 已提交
812

R
Ralf Baechle 已提交
813 814
out:
	return err;
L
Linus Torvalds 已提交
815 816
}

R
Ralf Baechle 已提交
817
static void mkiss_close(struct tty_struct *tty)
L
Linus Torvalds 已提交
818
{
R
Ralf Baechle 已提交
819
	struct mkiss *ax;
L
Linus Torvalds 已提交
820

R
Ralf Baechle 已提交
821 822 823 824
	write_lock(&disc_data_lock);
	ax = tty->disc_data;
	tty->disc_data = NULL;
	write_unlock(&disc_data_lock);
L
Linus Torvalds 已提交
825

A
Al Viro 已提交
826
	if (!ax)
R
Ralf Baechle 已提交
827
		return;
L
Linus Torvalds 已提交
828 829

	/*
R
Ralf Baechle 已提交
830 831
	 * We have now ensured that nobody can start using ap from now on, but
	 * we have to wait for all existing users to finish.
L
Linus Torvalds 已提交
832
	 */
R
Ralf Baechle 已提交
833 834
	if (!atomic_dec_and_test(&ax->refcnt))
		down(&ax->dead_sem);
L
Linus Torvalds 已提交
835

R
Ralf Baechle 已提交
836
	unregister_netdev(ax->dev);
L
Linus Torvalds 已提交
837

R
Ralf Baechle 已提交
838 839 840
	/* Free all AX25 frame buffers. */
	kfree(ax->rbuff);
	kfree(ax->xbuff);
L
Linus Torvalds 已提交
841

R
Ralf Baechle 已提交
842
	ax->tty = NULL;
L
Linus Torvalds 已提交
843 844
}

R
Ralf Baechle 已提交
845 846 847
/* Perform I/O control on an active ax25 channel. */
static int mkiss_ioctl(struct tty_struct *tty, struct file *file,
	unsigned int cmd, unsigned long arg)
L
Linus Torvalds 已提交
848
{
R
Ralf Baechle 已提交
849 850 851
	struct mkiss *ax = mkiss_get(tty);
	struct net_device *dev = ax->dev;
	unsigned int tmp, err;
L
Linus Torvalds 已提交
852

R
Ralf Baechle 已提交
853 854 855
	/* First make sure we're connected. */
	if (ax == NULL)
		return -ENXIO;
L
Linus Torvalds 已提交
856

R
Ralf Baechle 已提交
857 858 859 860 861 862 863 864 865 866 867 868 869 870
	switch (cmd) {
 	case SIOCGIFNAME:
		err = copy_to_user((void __user *) arg, ax->dev->name,
		                   strlen(ax->dev->name) + 1) ? -EFAULT : 0;
		break;

	case SIOCGIFENCAP:
		err = put_user(4, (int __user *) arg);
		break;

	case SIOCSIFENCAP:
		if (get_user(tmp, (int __user *) arg)) {
			err = -EFAULT;
			break;
L
Linus Torvalds 已提交
871 872
		}

R
Ralf Baechle 已提交
873 874 875 876 877
		ax->mode = tmp;
		dev->addr_len        = AX25_ADDR_LEN;
		dev->hard_header_len = AX25_KISS_HEADER_LEN +
		                       AX25_MAX_HEADER_LEN + 3;
		dev->type            = ARPHRD_AX25;
L
Linus Torvalds 已提交
878

R
Ralf Baechle 已提交
879 880
		err = 0;
		break;
L
Linus Torvalds 已提交
881

R
Ralf Baechle 已提交
882 883
	case SIOCSIFHWADDR: {
		char addr[AX25_ADDR_LEN];
L
Linus Torvalds 已提交
884

R
Ralf Baechle 已提交
885 886 887
		if (copy_from_user(&addr,
		                   (void __user *) arg, AX25_ADDR_LEN)) {
			err = -EFAULT;
L
Linus Torvalds 已提交
888 889 890
			break;
		}

H
Herbert Xu 已提交
891
		netif_tx_lock_bh(dev);
R
Ralf Baechle 已提交
892
		memcpy(dev->dev_addr, addr, AX25_ADDR_LEN);
H
Herbert Xu 已提交
893
		netif_tx_unlock_bh(dev);
R
Ralf Baechle 已提交
894 895 896 897 898 899

		err = 0;
		break;
	}
	default:
		err = -ENOIOCTLCMD;
L
Linus Torvalds 已提交
900 901
	}

R
Ralf Baechle 已提交
902
	mkiss_put(ax);
L
Linus Torvalds 已提交
903

R
Ralf Baechle 已提交
904
	return err;
L
Linus Torvalds 已提交
905 906
}

R
Ralf Baechle 已提交
907 908 909 910 911 912 913 914
/*
 * Handle the 'receiver data ready' interrupt.
 * This function is called by the 'tty_io' module in the kernel when
 * a block of data has been received, which can now be decapsulated
 * and sent on to the AX.25 layer for further processing.
 */
static void mkiss_receive_buf(struct tty_struct *tty, const unsigned char *cp,
	char *fp, int count)
L
Linus Torvalds 已提交
915
{
R
Ralf Baechle 已提交
916
	struct mkiss *ax = mkiss_get(tty);
L
Linus Torvalds 已提交
917

R
Ralf Baechle 已提交
918 919
	if (!ax)
		return;
L
Linus Torvalds 已提交
920

R
Ralf Baechle 已提交
921 922 923 924 925 926
	/*
	 * Argh! mtu change time! - costs us the packet part received
	 * at the change
	 */
	if (ax->mtu != ax->dev->mtu + 73)
		ax_changedmtu(ax);
L
Linus Torvalds 已提交
927

R
Ralf Baechle 已提交
928 929 930 931 932 933 934 935
	/* Read the characters out of the buffer */
	while (count--) {
		if (fp != NULL && *fp++) {
			if (!test_and_set_bit(AXF_ERROR, &ax->flags))
				ax->stats.rx_errors++;
			cp++;
			continue;
		}
L
Linus Torvalds 已提交
936

R
Ralf Baechle 已提交
937
		kiss_unesc(ax, *cp++);
L
Linus Torvalds 已提交
938
	}
R
Ralf Baechle 已提交
939 940

	mkiss_put(ax);
A
Alan Cox 已提交
941
	tty_unthrottle(tty);
L
Linus Torvalds 已提交
942 943
}

R
Ralf Baechle 已提交
944 945 946 947 948
/*
 * Called by the driver when there's room for more data.  If we have
 * more packets to send, we send them here.
 */
static void mkiss_write_wakeup(struct tty_struct *tty)
L
Linus Torvalds 已提交
949
{
R
Ralf Baechle 已提交
950 951
	struct mkiss *ax = mkiss_get(tty);
	int actual;
L
Linus Torvalds 已提交
952

R
Ralf Baechle 已提交
953 954
	if (!ax)
		return;
L
Linus Torvalds 已提交
955

R
Ralf Baechle 已提交
956 957 958 959 960
	if (ax->xleft <= 0)  {
		/* Now serial buffer is almost free & we can start
		 * transmission of another packet
		 */
		clear_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
L
Linus Torvalds 已提交
961

R
Ralf Baechle 已提交
962 963 964
		netif_wake_queue(ax->dev);
		goto out;
	}
L
Linus Torvalds 已提交
965

A
Alan Cox 已提交
966
	actual = tty->ops->write(tty, ax->xhead, ax->xleft);
R
Ralf Baechle 已提交
967 968
	ax->xleft -= actual;
	ax->xhead += actual;
L
Linus Torvalds 已提交
969

R
Ralf Baechle 已提交
970 971
out:
	mkiss_put(ax);
L
Linus Torvalds 已提交
972 973
}

R
Ralf Baechle 已提交
974
static struct tty_ldisc ax_ldisc = {
975
	.owner		= THIS_MODULE,
R
Ralf Baechle 已提交
976 977 978 979 980 981 982 983
	.magic		= TTY_LDISC_MAGIC,
	.name		= "mkiss",
	.open		= mkiss_open,
	.close		= mkiss_close,
	.ioctl		= mkiss_ioctl,
	.receive_buf	= mkiss_receive_buf,
	.write_wakeup	= mkiss_write_wakeup
};
L
Linus Torvalds 已提交
984

R
Ralf Baechle 已提交
985 986 987 988
static char banner[] __initdata = KERN_INFO \
	"mkiss: AX.25 Multikiss, Hans Albas PE1AYX\n";
static char msg_regfail[] __initdata = KERN_ERR \
	"mkiss: can't register line discipline (err = %d)\n";
L
Linus Torvalds 已提交
989 990 991 992 993 994 995

static int __init mkiss_init_driver(void)
{
	int status;

	printk(banner);

R
Ralf Baechle 已提交
996 997
	if ((status = tty_register_ldisc(N_AX25, &ax_ldisc)) != 0)
		printk(msg_regfail);
L
Linus Torvalds 已提交
998 999 1000 1001

	return status;
}

R
Ralf Baechle 已提交
1002 1003 1004
static const char msg_unregfail[] __exitdata = KERN_ERR \
	"mkiss: can't unregister line discipline (err = %d)\n";

L
Linus Torvalds 已提交
1005 1006
static void __exit mkiss_exit_driver(void)
{
R
Ralf Baechle 已提交
1007
	int ret;
L
Linus Torvalds 已提交
1008

R
Ralf Baechle 已提交
1009 1010
	if ((ret = tty_unregister_ldisc(N_AX25)))
		printk(msg_unregfail, ret);
L
Linus Torvalds 已提交
1011 1012
}

R
Ralf Baechle 已提交
1013
MODULE_AUTHOR("Ralf Baechle DL5RB <ralf@linux-mips.org>");
L
Linus Torvalds 已提交
1014
MODULE_DESCRIPTION("KISS driver for AX.25 over TTYs");
R
Rusty Russell 已提交
1015
module_param(crc_force, int, 0);
R
Ralf Baechle 已提交
1016
MODULE_PARM_DESC(crc_force, "crc [0 = auto | 1 = none | 2 = flexnet | 3 = smack]");
L
Linus Torvalds 已提交
1017 1018
MODULE_LICENSE("GPL");
MODULE_ALIAS_LDISC(N_AX25);
R
Ralf Baechle 已提交
1019

L
Linus Torvalds 已提交
1020 1021
module_init(mkiss_init_driver);
module_exit(mkiss_exit_driver);