net/atm/br2684.c

   1 /*
   2  * Ethernet netdevice using ATM AAL5 as underlying carrier
   3  * (RFC1483 obsoleted by RFC2684) for Linux
   4  *
   5  * Authors: Marcell GAL, 2000, XDSL Ltd, Hungary
   6  *          Eric Kinzie, 2006-2007, US Naval Research Laboratory
   7  */
   8
   9 #define pr_fmt(fmt) KBUILD_MODNAME ":%s: " fmt, __func__
  10
  11 #include <linux/module.h>
  12 #include <linux/init.h>
  13 #include <linux/kernel.h>
  14 #include <linux/list.h>
  15 #include <linux/netdevice.h>
  16 #include <linux/skbuff.h>
  17 #include <linux/etherdevice.h>
  18 #include <linux/rtnetlink.h>
  19 #include <linux/ip.h>
  20 #include <linux/uaccess.h>
  21 #include <linux/slab.h>
  22 #include <net/arp.h>
  23 #include <linux/atm.h>
  24 #include <linux/atmdev.h>
  25 #include <linux/capability.h>
  26 #include <linux/seq_file.h>
  27
  28 #include <linux/atmbr2684.h>
  29
  30 #include "common.h"
  31
  32 static void skb_debug(const struct sk_buff *skb)
  33 {
  34 #ifdef SKB_DEBUG
  35 #define NUM2PRINT 50
  36         print_hex_dump(KERN_DEBUG, "br2684: skb: ", DUMP_OFFSET,
  37                        16, 1, skb->data, min(NUM2PRINT, skb->len), true);
  38 #endif
  39 }
  40
  41 #define BR2684_ETHERTYPE_LEN    2
  42 #define BR2684_PAD_LEN          2
  43
  44 #define LLC             0xaa, 0xaa, 0x03
  45 #define SNAP_BRIDGED    0x00, 0x80, 0xc2
  46 #define SNAP_ROUTED     0x00, 0x00, 0x00
  47 #define PID_ETHERNET    0x00, 0x07
  48 #define ETHERTYPE_IPV4  0x08, 0x00
  49 #define ETHERTYPE_IPV6  0x86, 0xdd
  50 #define PAD_BRIDGED     0x00, 0x00
  51
  52 static const unsigned char ethertype_ipv4[] = { ETHERTYPE_IPV4 };
  53 static const unsigned char ethertype_ipv6[] = { ETHERTYPE_IPV6 };
  54 static const unsigned char llc_oui_pid_pad[] =
  55                         { LLC, SNAP_BRIDGED, PID_ETHERNET, PAD_BRIDGED };
  56 static const unsigned char pad[] = { PAD_BRIDGED };
  57 static const unsigned char llc_oui_ipv4[] = { LLC, SNAP_ROUTED, ETHERTYPE_IPV4 };
  58 static const unsigned char llc_oui_ipv6[] = { LLC, SNAP_ROUTED, ETHERTYPE_IPV6 };
  59
  60 enum br2684_encaps {
  61         e_vc = BR2684_ENCAPS_VC,
  62         e_llc = BR2684_ENCAPS_LLC,
  63 };
  64
  65 struct br2684_vcc {
  66         struct atm_vcc *atmvcc;
  67         struct net_device *device;
  68         /* keep old push, pop functions for chaining */
  69         void (*old_push)(struct atm_vcc *vcc, struct sk_buff *skb);
  70         void (*old_pop)(struct atm_vcc *vcc, struct sk_buff *skb);
  71         void (*old_release_cb)(struct atm_vcc *vcc);
  72         enum br2684_encaps encaps;
  73         struct list_head brvccs;
  74 #ifdef CONFIG_ATM_BR2684_IPFILTER
  75         struct br2684_filter filter;
  76 #endif /* CONFIG_ATM_BR2684_IPFILTER */
  77         unsigned int copies_needed, copies_failed;
  78         atomic_t qspace;
  79 };
  80
  81 struct br2684_dev {
  82         struct net_device *net_dev;
  83         struct list_head br2684_devs;
  84         int number;
  85         struct list_head brvccs;        /* one device <=> one vcc (before xmas) */
  86         int mac_was_set;
  87         enum br2684_payload payload;
  88 };
  89
  90 /*
  91  * This lock should be held for writing any time the list of devices or
  92  * their attached vcc's could be altered.  It should be held for reading
  93  * any time these are being queried.  Note that we sometimes need to
  94  * do read-locking under interrupt context, so write locking must block
  95  * the current CPU's interrupts
  96  */
  97 static DEFINE_RWLOCK(devs_lock);
  98
  99 static LIST_HEAD(br2684_devs);
 100
 101 static inline struct br2684_dev *BRPRIV(const struct net_device *net_dev)
 102 {
 103         return netdev_priv(net_dev);
 104 }
 105
 106 static inline struct net_device *list_entry_brdev(const struct list_head *le)
 107 {
 108         return list_entry(le, struct br2684_dev, br2684_devs)->net_dev;
 109 }
 110
 111 static inline struct br2684_vcc *BR2684_VCC(const struct atm_vcc *atmvcc)
 112 {
 113         return (struct br2684_vcc *)(atmvcc->user_back);
 114 }
 115
 116 static inline struct br2684_vcc *list_entry_brvcc(const struct list_head *le)
 117 {
 118         return list_entry(le, struct br2684_vcc, brvccs);
 119 }
 120
 121 /* Caller should hold read_lock(&devs_lock) */
 122 static struct net_device *br2684_find_dev(const struct br2684_if_spec *s)
 123 {
 124         struct list_head *lh;
 125         struct net_device *net_dev;
 126         switch (s->method) {
 127         case BR2684_FIND_BYNUM:
 128                 list_for_each(lh, &br2684_devs) {
 129                         net_dev = list_entry_brdev(lh);
 130                         if (BRPRIV(net_dev)->number == s->spec.devnum)
 131                                 return net_dev;
 132                 }
 133                 break;
 134         case BR2684_FIND_BYIFNAME:
 135                 list_for_each(lh, &br2684_devs) {
 136                         net_dev = list_entry_brdev(lh);
 137                         if (!strncmp(net_dev->name, s->spec.ifname, IFNAMSIZ))
 138                                 return net_dev;
 139                 }
 140                 break;
 141         }
 142         return NULL;
 143 }
 144
 145 static int atm_dev_event(struct notifier_block *this, unsigned long event,
 146                  void *arg)
 147 {
 148         struct atm_dev *atm_dev = arg;
 149         struct list_head *lh;
 150         struct net_device *net_dev;
 151         struct br2684_vcc *brvcc;
 152         struct atm_vcc *atm_vcc;
 153         unsigned long flags;
 154
 155         pr_debug("event=%ld dev=%p\n", event, atm_dev);
 156
 157         read_lock_irqsave(&devs_lock, flags);
 158         list_for_each(lh, &br2684_devs) {
 159                 net_dev = list_entry_brdev(lh);
 160
 161                 list_for_each_entry(brvcc, &BRPRIV(net_dev)->brvccs, brvccs) {
 162                         atm_vcc = brvcc->atmvcc;
 163                         if (atm_vcc && brvcc->atmvcc->dev == atm_dev) {
 164
 165                                 if (atm_vcc->dev->signal == ATM_PHY_SIG_LOST)
 166                                         netif_carrier_off(net_dev);
 167                                 else
 168                                         netif_carrier_on(net_dev);
 169
 170                         }
 171                 }
 172         }
 173         read_unlock_irqrestore(&devs_lock, flags);
 174
 175         return NOTIFY_DONE;
 176 }
 177
 178 static struct notifier_block atm_dev_notifier = {
 179         .notifier_call = atm_dev_event,
 180 };
 181
 182 /* chained vcc->pop function.  Check if we should wake the netif_queue */
 183 static void br2684_pop(struct atm_vcc *vcc, struct sk_buff *skb)
 184 {
 185         struct br2684_vcc *brvcc = BR2684_VCC(vcc);
 186
 187         pr_debug("(vcc %p ; net_dev %p )\n", vcc, brvcc->device);
 188         brvcc->old_pop(vcc, skb);
 189
 190         /* If the queue space just went up from zero, wake */
 191         if (atomic_inc_return(&brvcc->qspace) == 1)
 192                 netif_wake_queue(brvcc->device);
 193 }
 194
 195 /*
 196  * Send a packet out a particular vcc.  Not to useful right now, but paves
 197  * the way for multiple vcc's per itf.  Returns true if we can send,
 198  * otherwise false
 199  */
 200 static int br2684_xmit_vcc(struct sk_buff *skb, struct net_device *dev,
 201                            struct br2684_vcc *brvcc)
 202 {
 203         struct br2684_dev *brdev = BRPRIV(dev);
 204         struct atm_vcc *atmvcc;
 205         int minheadroom = (brvcc->encaps == e_llc) ?
 206                 ((brdev->payload == p_bridged) ?
 207                         sizeof(llc_oui_pid_pad) : sizeof(llc_oui_ipv4)) :
 208                 ((brdev->payload == p_bridged) ? BR2684_PAD_LEN : 0);
 209
 210         if (skb_headroom(skb) < minheadroom) {
 211                 struct sk_buff *skb2 = skb_realloc_headroom(skb, minheadroom);
 212                 brvcc->copies_needed++;
 213                 dev_kfree_skb(skb);
 214                 if (skb2 == NULL) {
 215                         brvcc->copies_failed++;
 216                         return 0;
 217                 }
 218                 skb = skb2;
 219         }
 220
 221         if (brvcc->encaps == e_llc) {
 222                 if (brdev->payload == p_bridged) {
 223                         skb_push(skb, sizeof(llc_oui_pid_pad));
 224                         skb_copy_to_linear_data(skb, llc_oui_pid_pad,
 225                                                 sizeof(llc_oui_pid_pad));
 226                 } else if (brdev->payload == p_routed) {
 227                         unsigned short prot = ntohs(skb->protocol);
 228
 229                         skb_push(skb, sizeof(llc_oui_ipv4));
 230                         switch (prot) {
 231                         case ETH_P_IP:
 232                                 skb_copy_to_linear_data(skb, llc_oui_ipv4,
 233                                                         sizeof(llc_oui_ipv4));
 234                                 break;
 235                         case ETH_P_IPV6:
 236                                 skb_copy_to_linear_data(skb, llc_oui_ipv6,
 237                                                         sizeof(llc_oui_ipv6));
 238                                 break;
 239                         default:
 240                                 dev_kfree_skb(skb);
 241                                 return 0;
 242                         }
 243                 }
 244         } else { /* e_vc */
 245                 if (brdev->payload == p_bridged) {
 246                         skb_push(skb, 2);
 247                         memset(skb->data, 0, 2);
 248                 }
 249         }
 250         skb_debug(skb);
 251
 252         ATM_SKB(skb)->vcc = atmvcc = brvcc->atmvcc;
 253         pr_debug("atm_skb(%p)->vcc(%p)->dev(%p)\n", skb, atmvcc, atmvcc->dev);
 254         atomic_add(skb->truesize, &sk_atm(atmvcc)->sk_wmem_alloc);
 255         ATM_SKB(skb)->atm_options = atmvcc->atm_options;
 256         dev->stats.tx_packets++;
 257         dev->stats.tx_bytes += skb->len;
 258
 259         if (atomic_dec_return(&brvcc->qspace) < 1) {
 260                 /* No more please! */
 261                 netif_stop_queue(brvcc->device);
 262                 /* We might have raced with br2684_pop() */
 263                 if (unlikely(atomic_read(&brvcc->qspace) > 0))
 264                         netif_wake_queue(brvcc->device);
 265         }
 266
 267         /* If this fails immediately, the skb will be freed and br2684_pop()
 268            will wake the queue if appropriate. Just return an error so that
 269            the stats are updated correctly */
 270         return !atmvcc->send(atmvcc, skb);
 271 }
 272
 273 static void br2684_release_cb(struct atm_vcc *atmvcc)
 274 {
 275         struct br2684_vcc *brvcc = BR2684_VCC(atmvcc);
 276
 277         if (atomic_read(&brvcc->qspace) > 0)
 278                 netif_wake_queue(brvcc->device);
 279
 280         if (brvcc->old_release_cb)
 281                 brvcc->old_release_cb(atmvcc);
 282 }
 283
 284 static inline struct br2684_vcc *pick_outgoing_vcc(const struct sk_buff *skb,
 285                                                    const struct br2684_dev *brdev)
 286 {
 287         return list_empty(&brdev->brvccs) ? NULL : list_entry_brvcc(brdev->brvccs.next);        /* 1 vcc/dev right now */
 288 }
 289
 290 static netdev_tx_t br2684_start_xmit(struct sk_buff *skb,
 291                                      struct net_device *dev)
 292 {
 293         struct br2684_dev *brdev = BRPRIV(dev);
 294         struct br2684_vcc *brvcc;
 295         struct atm_vcc *atmvcc;
 296         netdev_tx_t ret = NETDEV_TX_OK;
 297
 298         pr_debug("skb_dst(skb)=%p\n", skb_dst(skb));
 299         read_lock(&devs_lock);
 300         brvcc = pick_outgoing_vcc(skb, brdev);
 301         if (brvcc == NULL) {
 302                 pr_debug("no vcc attached to dev %s\n", dev->name);
 303                 dev->stats.tx_errors++;
 304                 dev->stats.tx_carrier_errors++;
 305                 /* netif_stop_queue(dev); */
 306                 dev_kfree_skb(skb);
 307                 goto out_devs;
 308         }
 309         atmvcc = brvcc->atmvcc;
 310
 311         bh_lock_sock(sk_atm(atmvcc));
 312
 313         if (test_bit(ATM_VF_RELEASED, &atmvcc->flags) ||
 314             test_bit(ATM_VF_CLOSE, &atmvcc->flags) ||
 315             !test_bit(ATM_VF_READY, &atmvcc->flags)) {
 316                 dev->stats.tx_dropped++;
 317                 dev_kfree_skb(skb);
 318                 goto out;
 319         }
 320
 321         if (sock_owned_by_user(sk_atm(atmvcc))) {
 322                 netif_stop_queue(brvcc->device);
 323                 ret = NETDEV_TX_BUSY;
 324                 goto out;
 325         }
 326
 327         if (!br2684_xmit_vcc(skb, dev, brvcc)) {
 328                 /*
 329                  * We should probably use netif_*_queue() here, but that
 330                  * involves added complication.  We need to walk before
 331                  * we can run.
 332                  *
 333                  * Don't free here! this pointer might be no longer valid!
 334                  */
 335                 dev->stats.tx_errors++;
 336                 dev->stats.tx_fifo_errors++;
 337         }
 338  out:
 339         bh_unlock_sock(sk_atm(atmvcc));
 340  out_devs:
 341         read_unlock(&devs_lock);
 342         return ret;
 343 }
 344
 345 /*
 346  * We remember when the MAC gets set, so we don't override it later with
 347  * the ESI of the ATM card of the first VC
 348  */
 349 static int br2684_mac_addr(struct net_device *dev, void *p)
 350 {
 351         int err = eth_mac_addr(dev, p);
 352         if (!err)
 353                 BRPRIV(dev)->mac_was_set = 1;
 354         return err;
 355 }
 356
 357 #ifdef CONFIG_ATM_BR2684_IPFILTER
 358 /* this IOCTL is experimental. */
 359 static int br2684_setfilt(struct atm_vcc *atmvcc, void __user * arg)
 360 {
 361         struct br2684_vcc *brvcc;
 362         struct br2684_filter_set fs;
 363
 364         if (copy_from_user(&fs, arg, sizeof fs))
 365                 return -EFAULT;
 366         if (fs.ifspec.method != BR2684_FIND_BYNOTHING) {
 367                 /*
 368                  * This is really a per-vcc thing, but we can also search
 369                  * by device.
 370                  */
 371                 struct br2684_dev *brdev;
 372                 read_lock(&devs_lock);
 373                 brdev = BRPRIV(br2684_find_dev(&fs.ifspec));
 374                 if (brdev == NULL || list_empty(&brdev->brvccs) ||
 375                     brdev->brvccs.next != brdev->brvccs.prev)   /* >1 VCC */
 376                         brvcc = NULL;
 377                 else
 378                         brvcc = list_entry_brvcc(brdev->brvccs.next);
 379                 read_unlock(&devs_lock);
 380                 if (brvcc == NULL)
 381                         return -ESRCH;
 382         } else
 383                 brvcc = BR2684_VCC(atmvcc);
 384         memcpy(&brvcc->filter, &fs.filter, sizeof(brvcc->filter));
 385         return 0;
 386 }
 387
 388 /* Returns 1 if packet should be dropped */
 389 static inline int
 390 packet_fails_filter(__be16 type, struct br2684_vcc *brvcc, struct sk_buff *skb)
 391 {
 392         if (brvcc->filter.netmask == 0)
 393                 return 0;       /* no filter in place */
 394         if (type == htons(ETH_P_IP) &&
 395             (((struct iphdr *)(skb->data))->daddr & brvcc->filter.
 396              netmask) == brvcc->filter.prefix)
 397                 return 0;
 398         if (type == htons(ETH_P_ARP))
 399                 return 0;
 400         /*
 401          * TODO: we should probably filter ARPs too.. don't want to have
 402          * them returning values that don't make sense, or is that ok?
 403          */
 404         return 1;               /* drop */
 405 }
 406 #endif /* CONFIG_ATM_BR2684_IPFILTER */
 407
 408 static void br2684_close_vcc(struct br2684_vcc *brvcc)
 409 {
 410         pr_debug("removing VCC %p from dev %p\n", brvcc, brvcc->device);
 411         write_lock_irq(&devs_lock);
 412         list_del(&brvcc->brvccs);
 413         write_unlock_irq(&devs_lock);
 414         brvcc->atmvcc->user_back = NULL;        /* what about vcc->recvq ??? */
 415         brvcc->atmvcc->release_cb = brvcc->old_release_cb;
 416         brvcc->old_push(brvcc->atmvcc, NULL);   /* pass on the bad news */
 417         kfree(brvcc);
 418         module_put(THIS_MODULE);
 419 }
 420
 421 /* when AAL5 PDU comes in: */
 422 static void br2684_push(struct atm_vcc *atmvcc, struct sk_buff *skb)
 423 {
 424         struct br2684_vcc *brvcc = BR2684_VCC(atmvcc);
 425         struct net_device *net_dev = brvcc->device;
 426         struct br2684_dev *brdev = BRPRIV(net_dev);
 427
 428         pr_debug("\n");
 429
 430         if (unlikely(skb == NULL)) {
 431                 /* skb==NULL means VCC is being destroyed */
 432                 br2684_close_vcc(brvcc);
 433                 if (list_empty(&brdev->brvccs)) {
 434                         write_lock_irq(&devs_lock);
 435                         list_del(&brdev->br2684_devs);
 436                         write_unlock_irq(&devs_lock);
 437                         unregister_netdev(net_dev);
 438                         free_netdev(net_dev);
 439                 }
 440                 return;
 441         }
 442
 443         skb_debug(skb);
 444         atm_return(atmvcc, skb->truesize);
 445         pr_debug("skb from brdev %p\n", brdev);
 446         if (brvcc->encaps == e_llc) {
 447
 448                 if (skb->len > 7 && skb->data[7] == 0x01)
 449                         __skb_trim(skb, skb->len - 4);
 450
 451                 /* accept packets that have "ipv[46]" in the snap header */
 452                 if ((skb->len >= (sizeof(llc_oui_ipv4))) &&
 453                     (memcmp(skb->data, llc_oui_ipv4,
 454                             sizeof(llc_oui_ipv4) - BR2684_ETHERTYPE_LEN) == 0)) {
 455                         if (memcmp(skb->data + 6, ethertype_ipv6,
 456                                    sizeof(ethertype_ipv6)) == 0)
 457                                 skb->protocol = htons(ETH_P_IPV6);
 458                         else if (memcmp(skb->data + 6, ethertype_ipv4,
 459                                         sizeof(ethertype_ipv4)) == 0)
 460                                 skb->protocol = htons(ETH_P_IP);
 461                         else
 462                                 goto error;
 463                         skb_pull(skb, sizeof(llc_oui_ipv4));
 464                         skb_reset_network_header(skb);
 465                         skb->pkt_type = PACKET_HOST;
 466                 /*
 467                  * Let us waste some time for checking the encapsulation.
 468                  * Note, that only 7 char is checked so frames with a valid FCS
 469                  * are also accepted (but FCS is not checked of course).
 470                  */
 471                 } else if ((skb->len >= sizeof(llc_oui_pid_pad)) &&
 472                            (memcmp(skb->data, llc_oui_pid_pad, 7) == 0)) {
 473                         skb_pull(skb, sizeof(llc_oui_pid_pad));
 474                         skb->protocol = eth_type_trans(skb, net_dev);
 475                 } else
 476                         goto error;
 477
 478         } else { /* e_vc */
 479                 if (brdev->payload == p_routed) {
 480                         struct iphdr *iph;
 481
 482                         skb_reset_network_header(skb);
 483                         iph = ip_hdr(skb);
 484                         if (iph->version == 4)
 485                                 skb->protocol = htons(ETH_P_IP);
 486                         else if (iph->version == 6)
 487                                 skb->protocol = htons(ETH_P_IPV6);
 488                         else
 489                                 goto error;
 490                         skb->pkt_type = PACKET_HOST;
 491                 } else { /* p_bridged */
 492                         /* first 2 chars should be 0 */
 493                         if (memcmp(skb->data, pad, BR2684_PAD_LEN) != 0)
 494                                 goto error;
 495                         skb_pull(skb, BR2684_PAD_LEN);
 496                         skb->protocol = eth_type_trans(skb, net_dev);
 497                 }
 498         }
 499
 500 #ifdef CONFIG_ATM_BR2684_IPFILTER
 501         if (unlikely(packet_fails_filter(skb->protocol, brvcc, skb)))
 502                 goto dropped;
 503 #endif /* CONFIG_ATM_BR2684_IPFILTER */
 504         skb->dev = net_dev;
 505         ATM_SKB(skb)->vcc = atmvcc;     /* needed ? */
 506         pr_debug("received packet's protocol: %x\n", ntohs(skb->protocol));
 507         skb_debug(skb);
 508         /* sigh, interface is down? */
 509         if (unlikely(!(net_dev->flags & IFF_UP)))
 510                 goto dropped;
 511         net_dev->stats.rx_packets++;
 512         net_dev->stats.rx_bytes += skb->len;
 513         memset(ATM_SKB(skb), 0, sizeof(struct atm_skb_data));
 514         netif_rx(skb);
 515         return;
 516
 517 dropped:
 518         net_dev->stats.rx_dropped++;
 519         goto free_skb;
 520 error:
 521         net_dev->stats.rx_errors++;
 522 free_skb:
 523         dev_kfree_skb(skb);
 524 }
 525
 526 /*
 527  * Assign a vcc to a dev
 528  * Note: we do not have explicit unassign, but look at _push()
 529  */
 530 static int br2684_regvcc(struct atm_vcc *atmvcc, void __user * arg)
 531 {
 532         struct br2684_vcc *brvcc;
 533         struct br2684_dev *brdev;
 534         struct net_device *net_dev;
 535         struct atm_backend_br2684 be;
 536         int err;
 537
 538         if (copy_from_user(&be, arg, sizeof be))
 539                 return -EFAULT;
 540         brvcc = kzalloc(sizeof(struct br2684_vcc), GFP_KERNEL);
 541         if (!brvcc)
 542                 return -ENOMEM;
 543         /*
 544          * Allow two packets in the ATM queue. One actually being sent, and one
 545          * for the ATM 'TX done' handler to send. It shouldn't take long to get
 546          * the next one from the netdev queue, when we need it. More than that
 547          * would be bufferbloat.
 548          */
 549         atomic_set(&brvcc->qspace, 2);
 550         write_lock_irq(&devs_lock);
 551         net_dev = br2684_find_dev(&be.ifspec);
 552         if (net_dev == NULL) {
 553                 pr_err("tried to attach to non-existent device\n");
 554                 err = -ENXIO;
 555                 goto error;
 556         }
 557         brdev = BRPRIV(net_dev);
 558         if (atmvcc->push == NULL) {
 559                 err = -EBADFD;
 560                 goto error;
 561         }
 562         if (!list_empty(&brdev->brvccs)) {
 563                 /* Only 1 VCC/dev right now */
 564                 err = -EEXIST;
 565                 goto error;
 566         }
 567         if (be.fcs_in != BR2684_FCSIN_NO ||
 568             be.fcs_out != BR2684_FCSOUT_NO ||
 569             be.fcs_auto || be.has_vpiid || be.send_padding ||
 570             (be.encaps != BR2684_ENCAPS_VC &&
 571              be.encaps != BR2684_ENCAPS_LLC) ||
 572             be.min_size != 0) {
 573                 err = -EINVAL;
 574                 goto error;
 575         }
 576         pr_debug("vcc=%p, encaps=%d, brvcc=%p\n", atmvcc, be.encaps, brvcc);
 577         if (list_empty(&brdev->brvccs) && !brdev->mac_was_set) {
 578                 unsigned char *esi = atmvcc->dev->esi;
 579                 if (esi[0] | esi[1] | esi[2] | esi[3] | esi[4] | esi[5])
 580                         memcpy(net_dev->dev_addr, esi, net_dev->addr_len);
 581                 else
 582                         net_dev->dev_addr[2] = 1;
 583         }
 584         list_add(&brvcc->brvccs, &brdev->brvccs);
 585         write_unlock_irq(&devs_lock);
 586         brvcc->device = net_dev;
 587         brvcc->atmvcc = atmvcc;
 588         atmvcc->user_back = brvcc;
 589         brvcc->encaps = (enum br2684_encaps)be.encaps;
 590         brvcc->old_push = atmvcc->push;
 591         brvcc->old_pop = atmvcc->pop;
 592         brvcc->old_release_cb = atmvcc->release_cb;
 593         barrier();
 594         atmvcc->push = br2684_push;
 595         atmvcc->pop = br2684_pop;
 596         atmvcc->release_cb = br2684_release_cb;
 597
 598         /* initialize netdev carrier state */
 599         if (atmvcc->dev->signal == ATM_PHY_SIG_LOST)
 600                 netif_carrier_off(net_dev);
 601         else
 602                 netif_carrier_on(net_dev);
 603
 604         __module_get(THIS_MODULE);
 605
 606         /* re-process everything received between connection setup and
 607            backend setup */
 608         vcc_process_recv_queue(atmvcc);
 609         return 0;
 610
 611 error:
 612         write_unlock_irq(&devs_lock);
 613         kfree(brvcc);
 614         return err;
 615 }
 616
 617 static const struct net_device_ops br2684_netdev_ops = {
 618         .ndo_start_xmit         = br2684_start_xmit,
 619         .ndo_set_mac_address    = br2684_mac_addr,
 620         .ndo_change_mtu         = eth_change_mtu,
 621         .ndo_validate_addr      = eth_validate_addr,
 622 };
 623
 624 static const struct net_device_ops br2684_netdev_ops_routed = {
 625         .ndo_start_xmit         = br2684_start_xmit,
 626         .ndo_set_mac_address    = br2684_mac_addr,
 627         .ndo_change_mtu         = eth_change_mtu
 628 };
 629
 630 static void br2684_setup(struct net_device *netdev)
 631 {
 632         struct br2684_dev *brdev = BRPRIV(netdev);
 633
 634         ether_setup(netdev);
 635         netdev->hard_header_len += sizeof(llc_oui_pid_pad); /* worst case */
 636         brdev->net_dev = netdev;
 637
 638         netdev->netdev_ops = &br2684_netdev_ops;
 639
 640         INIT_LIST_HEAD(&brdev->brvccs);
 641 }
 642
 643 static void br2684_setup_routed(struct net_device *netdev)
 644 {
 645         struct br2684_dev *brdev = BRPRIV(netdev);
 646
 647         brdev->net_dev = netdev;
 648         netdev->hard_header_len = sizeof(llc_oui_ipv4); /* worst case */
 649         netdev->netdev_ops = &br2684_netdev_ops_routed;
 650         netdev->addr_len = 0;
 651         netdev->mtu = 1500;
 652         netdev->type = ARPHRD_PPP;
 653         netdev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
 654         netdev->tx_queue_len = 100;
 655         INIT_LIST_HEAD(&brdev->brvccs);
 656 }
 657
 658 static int br2684_create(void __user *arg)
 659 {
 660         int err;
 661         struct net_device *netdev;
 662         struct br2684_dev *brdev;
 663         struct atm_newif_br2684 ni;
 664         enum br2684_payload payload;
 665
 666         pr_debug("\n");
 667
 668         if (copy_from_user(&ni, arg, sizeof ni))
 669                 return -EFAULT;
 670
 671         if (ni.media & BR2684_FLAG_ROUTED)
 672                 payload = p_routed;
 673         else
 674                 payload = p_bridged;
 675         ni.media &= 0xffff;     /* strip flags */
 676
 677         if (ni.media != BR2684_MEDIA_ETHERNET || ni.mtu != 1500)
 678                 return -EINVAL;
 679
 680         netdev = alloc_netdev(sizeof(struct br2684_dev),
 681                               ni.ifname[0] ? ni.ifname : "nas%d",
 682                               (payload == p_routed) ?
 683                               br2684_setup_routed : br2684_setup);
 684         if (!netdev)
 685                 return -ENOMEM;
 686
 687         brdev = BRPRIV(netdev);
 688
 689         pr_debug("registered netdev %s\n", netdev->name);
 690         /* open, stop, do_ioctl ? */
 691         err = register_netdev(netdev);
 692         if (err < 0) {
 693                 pr_err("register_netdev failed\n");
 694                 free_netdev(netdev);
 695                 return err;
 696         }
 697
 698         write_lock_irq(&devs_lock);
 699
 700         brdev->payload = payload;
 701
 702         if (list_empty(&br2684_devs)) {
 703                 /* 1st br2684 device */
 704                 brdev->number = 1;
 705         } else
 706                 brdev->number = BRPRIV(list_entry_brdev(br2684_devs.prev))->number + 1;
 707
 708         list_add_tail(&brdev->br2684_devs, &br2684_devs);
 709         write_unlock_irq(&devs_lock);
 710         return 0;
 711 }
 712
 713 /*
 714  * This handles ioctls actually performed on our vcc - we must return
 715  * -ENOIOCTLCMD for any unrecognized ioctl
 716  */
 717 static int br2684_ioctl(struct socket *sock, unsigned int cmd,
 718                         unsigned long arg)
 719 {
 720         struct atm_vcc *atmvcc = ATM_SD(sock);
 721         void __user *argp = (void __user *)arg;
 722         atm_backend_t b;
 723
 724         int err;
 725         switch (cmd) {
 726         case ATM_SETBACKEND:
 727         case ATM_NEWBACKENDIF:
 728                 err = get_user(b, (atm_backend_t __user *) argp);
 729                 if (err)
 730                         return -EFAULT;
 731                 if (b != ATM_BACKEND_BR2684)
 732                         return -ENOIOCTLCMD;
 733                 if (!capable(CAP_NET_ADMIN))
 734                         return -EPERM;
 735                 if (cmd == ATM_SETBACKEND)
 736                         return br2684_regvcc(atmvcc, argp);
 737                 else
 738                         return br2684_create(argp);
 739 #ifdef CONFIG_ATM_BR2684_IPFILTER
 740         case BR2684_SETFILT:
 741                 if (atmvcc->push != br2684_push)
 742                         return -ENOIOCTLCMD;
 743                 if (!capable(CAP_NET_ADMIN))
 744                         return -EPERM;
 745                 err = br2684_setfilt(atmvcc, argp);
 746
 747                 return err;
 748 #endif /* CONFIG_ATM_BR2684_IPFILTER */
 749         }
 750         return -ENOIOCTLCMD;
 751 }
 752
 753 static struct atm_ioctl br2684_ioctl_ops = {
 754         .owner = THIS_MODULE,
 755         .ioctl = br2684_ioctl,
 756 };
 757
 758 #ifdef CONFIG_PROC_FS
 759 static void *br2684_seq_start(struct seq_file *seq, loff_t * pos)
 760         __acquires(devs_lock)
 761 {
 762         read_lock(&devs_lock);
 763         return seq_list_start(&br2684_devs, *pos);
 764 }
 765
 766 static void *br2684_seq_next(struct seq_file *seq, void *v, loff_t * pos)
 767 {
 768         return seq_list_next(v, &br2684_devs, pos);
 769 }
 770
 771 static void br2684_seq_stop(struct seq_file *seq, void *v)
 772         __releases(devs_lock)
 773 {
 774         read_unlock(&devs_lock);
 775 }
 776
 777 static int br2684_seq_show(struct seq_file *seq, void *v)
 778 {
 779         const struct br2684_dev *brdev = list_entry(v, struct br2684_dev,
 780                                                     br2684_devs);
 781         const struct net_device *net_dev = brdev->net_dev;
 782         const struct br2684_vcc *brvcc;
 783
 784         seq_printf(seq, "dev %.16s: num=%d, mac=%pM (%s)\n",
 785                    net_dev->name,
 786                    brdev->number,
 787                    net_dev->dev_addr,
 788                    brdev->mac_was_set ? "set" : "auto");
 789
 790         list_for_each_entry(brvcc, &brdev->brvccs, brvccs) {
 791                 seq_printf(seq, "  vcc %d.%d.%d: encaps=%s payload=%s"
 792                            ", failed copies %u/%u"
 793                            "\n", brvcc->atmvcc->dev->number,
 794                            brvcc->atmvcc->vpi, brvcc->atmvcc->vci,
 795                            (brvcc->encaps == e_llc) ? "LLC" : "VC",
 796                            (brdev->payload == p_bridged) ? "bridged" : "routed",
 797                            brvcc->copies_failed, brvcc->copies_needed);
 798 #ifdef CONFIG_ATM_BR2684_IPFILTER
 799 #define b1(var, byte)   ((u8 *) &brvcc->filter.var)[byte]
 800 #define bs(var)         b1(var, 0), b1(var, 1), b1(var, 2), b1(var, 3)
 801                 if (brvcc->filter.netmask != 0)
 802                         seq_printf(seq, "    filter=%d.%d.%d.%d/"
 803                                    "%d.%d.%d.%d\n", bs(prefix), bs(netmask));
 804 #undef bs
 805 #undef b1
 806 #endif /* CONFIG_ATM_BR2684_IPFILTER */
 807         }
 808         return 0;
 809 }
 810
 811 static const struct seq_operations br2684_seq_ops = {
 812         .start = br2684_seq_start,
 813         .next = br2684_seq_next,
 814         .stop = br2684_seq_stop,
 815         .show = br2684_seq_show,
 816 };
 817
 818 static int br2684_proc_open(struct inode *inode, struct file *file)
 819 {
 820         return seq_open(file, &br2684_seq_ops);
 821 }
 822
 823 static const struct file_operations br2684_proc_ops = {
 824         .owner = THIS_MODULE,
 825         .open = br2684_proc_open,
 826         .read = seq_read,
 827         .llseek = seq_lseek,
 828         .release = seq_release,
 829 };
 830
 831 extern struct proc_dir_entry *atm_proc_root;    /* from proc.c */
 832 #endif /* CONFIG_PROC_FS */
 833
 834 static int __init br2684_init(void)
 835 {
 836 #ifdef CONFIG_PROC_FS
 837         struct proc_dir_entry *p;
 838         p = proc_create("br2684", 0, atm_proc_root, &br2684_proc_ops);
 839         if (p == NULL)
 840                 return -ENOMEM;
 841 #endif
 842         register_atm_ioctl(&br2684_ioctl_ops);
 843         register_atmdevice_notifier(&atm_dev_notifier);
 844         return 0;
 845 }
 846
 847 static void __exit br2684_exit(void)
 848 {
 849         struct net_device *net_dev;
 850         struct br2684_dev *brdev;
 851         struct br2684_vcc *brvcc;
 852         deregister_atm_ioctl(&br2684_ioctl_ops);
 853
 854 #ifdef CONFIG_PROC_FS
 855         remove_proc_entry("br2684", atm_proc_root);
 856 #endif
 857
 858
 859         unregister_atmdevice_notifier(&atm_dev_notifier);
 860
 861         while (!list_empty(&br2684_devs)) {
 862                 net_dev = list_entry_brdev(br2684_devs.next);
 863                 brdev = BRPRIV(net_dev);
 864                 while (!list_empty(&brdev->brvccs)) {
 865                         brvcc = list_entry_brvcc(brdev->brvccs.next);
 866                         br2684_close_vcc(brvcc);
 867                 }
 868
 869                 list_del(&brdev->br2684_devs);
 870                 unregister_netdev(net_dev);
 871                 free_netdev(net_dev);
 872         }
 873 }
 874
 875 module_init(br2684_init);
 876 module_exit(br2684_exit);
 877
 878 MODULE_AUTHOR("Marcell GAL");
 879 MODULE_DESCRIPTION("RFC2684 bridged protocols over ATM/AAL5");
 880 MODULE_LICENSE("GPL");