Back to home page

OSCL-LXR

 
 

    


0001 // SPDX-License-Identifier: GPL-2.0-only
0002 /*
0003  * Ethernet netdevice using ATM AAL5 as underlying carrier
0004  * (RFC1483 obsoleted by RFC2684) for Linux
0005  *
0006  * Authors: Marcell GAL, 2000, XDSL Ltd, Hungary
0007  *          Eric Kinzie, 2006-2007, US Naval Research Laboratory
0008  */
0009 
0010 #define pr_fmt(fmt) KBUILD_MODNAME ":%s: " fmt, __func__
0011 
0012 #include <linux/module.h>
0013 #include <linux/init.h>
0014 #include <linux/kernel.h>
0015 #include <linux/list.h>
0016 #include <linux/netdevice.h>
0017 #include <linux/skbuff.h>
0018 #include <linux/etherdevice.h>
0019 #include <linux/rtnetlink.h>
0020 #include <linux/ip.h>
0021 #include <linux/uaccess.h>
0022 #include <linux/slab.h>
0023 #include <net/arp.h>
0024 #include <linux/atm.h>
0025 #include <linux/atmdev.h>
0026 #include <linux/capability.h>
0027 #include <linux/seq_file.h>
0028 
0029 #include <linux/atmbr2684.h>
0030 
0031 #include "common.h"
0032 
0033 static void skb_debug(const struct sk_buff *skb)
0034 {
0035 #ifdef SKB_DEBUG
0036 #define NUM2PRINT 50
0037     print_hex_dump(KERN_DEBUG, "br2684: skb: ", DUMP_OFFSET,
0038                16, 1, skb->data, min(NUM2PRINT, skb->len), true);
0039 #endif
0040 }
0041 
0042 #define BR2684_ETHERTYPE_LEN    2
0043 #define BR2684_PAD_LEN      2
0044 
0045 #define LLC     0xaa, 0xaa, 0x03
0046 #define SNAP_BRIDGED    0x00, 0x80, 0xc2
0047 #define SNAP_ROUTED 0x00, 0x00, 0x00
0048 #define PID_ETHERNET    0x00, 0x07
0049 #define ETHERTYPE_IPV4  0x08, 0x00
0050 #define ETHERTYPE_IPV6  0x86, 0xdd
0051 #define PAD_BRIDGED 0x00, 0x00
0052 
0053 static const unsigned char ethertype_ipv4[] = { ETHERTYPE_IPV4 };
0054 static const unsigned char ethertype_ipv6[] = { ETHERTYPE_IPV6 };
0055 static const unsigned char llc_oui_pid_pad[] =
0056             { LLC, SNAP_BRIDGED, PID_ETHERNET, PAD_BRIDGED };
0057 static const unsigned char pad[] = { PAD_BRIDGED };
0058 static const unsigned char llc_oui_ipv4[] = { LLC, SNAP_ROUTED, ETHERTYPE_IPV4 };
0059 static const unsigned char llc_oui_ipv6[] = { LLC, SNAP_ROUTED, ETHERTYPE_IPV6 };
0060 
0061 enum br2684_encaps {
0062     e_vc = BR2684_ENCAPS_VC,
0063     e_llc = BR2684_ENCAPS_LLC,
0064 };
0065 
0066 struct br2684_vcc {
0067     struct atm_vcc *atmvcc;
0068     struct net_device *device;
0069     /* keep old push, pop functions for chaining */
0070     void (*old_push)(struct atm_vcc *vcc, struct sk_buff *skb);
0071     void (*old_pop)(struct atm_vcc *vcc, struct sk_buff *skb);
0072     void (*old_release_cb)(struct atm_vcc *vcc);
0073     struct module *old_owner;
0074     enum br2684_encaps encaps;
0075     struct list_head brvccs;
0076 #ifdef CONFIG_ATM_BR2684_IPFILTER
0077     struct br2684_filter filter;
0078 #endif /* CONFIG_ATM_BR2684_IPFILTER */
0079     unsigned int copies_needed, copies_failed;
0080     atomic_t qspace;
0081 };
0082 
0083 struct br2684_dev {
0084     struct net_device *net_dev;
0085     struct list_head br2684_devs;
0086     int number;
0087     struct list_head brvccs;    /* one device <=> one vcc (before xmas) */
0088     int mac_was_set;
0089     enum br2684_payload payload;
0090 };
0091 
0092 /*
0093  * This lock should be held for writing any time the list of devices or
0094  * their attached vcc's could be altered.  It should be held for reading
0095  * any time these are being queried.  Note that we sometimes need to
0096  * do read-locking under interrupting context, so write locking must block
0097  * the current CPU's interrupts.
0098  */
0099 static DEFINE_RWLOCK(devs_lock);
0100 
0101 static LIST_HEAD(br2684_devs);
0102 
0103 static inline struct br2684_dev *BRPRIV(const struct net_device *net_dev)
0104 {
0105     return netdev_priv(net_dev);
0106 }
0107 
0108 static inline struct net_device *list_entry_brdev(const struct list_head *le)
0109 {
0110     return list_entry(le, struct br2684_dev, br2684_devs)->net_dev;
0111 }
0112 
0113 static inline struct br2684_vcc *BR2684_VCC(const struct atm_vcc *atmvcc)
0114 {
0115     return (struct br2684_vcc *)(atmvcc->user_back);
0116 }
0117 
0118 static inline struct br2684_vcc *list_entry_brvcc(const struct list_head *le)
0119 {
0120     return list_entry(le, struct br2684_vcc, brvccs);
0121 }
0122 
0123 /* Caller should hold read_lock(&devs_lock) */
0124 static struct net_device *br2684_find_dev(const struct br2684_if_spec *s)
0125 {
0126     struct list_head *lh;
0127     struct net_device *net_dev;
0128     switch (s->method) {
0129     case BR2684_FIND_BYNUM:
0130         list_for_each(lh, &br2684_devs) {
0131             net_dev = list_entry_brdev(lh);
0132             if (BRPRIV(net_dev)->number == s->spec.devnum)
0133                 return net_dev;
0134         }
0135         break;
0136     case BR2684_FIND_BYIFNAME:
0137         list_for_each(lh, &br2684_devs) {
0138             net_dev = list_entry_brdev(lh);
0139             if (!strncmp(net_dev->name, s->spec.ifname, IFNAMSIZ))
0140                 return net_dev;
0141         }
0142         break;
0143     }
0144     return NULL;
0145 }
0146 
0147 static int atm_dev_event(struct notifier_block *this, unsigned long event,
0148          void *arg)
0149 {
0150     struct atm_dev *atm_dev = arg;
0151     struct list_head *lh;
0152     struct net_device *net_dev;
0153     struct br2684_vcc *brvcc;
0154     struct atm_vcc *atm_vcc;
0155     unsigned long flags;
0156 
0157     pr_debug("event=%ld dev=%p\n", event, atm_dev);
0158 
0159     read_lock_irqsave(&devs_lock, flags);
0160     list_for_each(lh, &br2684_devs) {
0161         net_dev = list_entry_brdev(lh);
0162 
0163         list_for_each_entry(brvcc, &BRPRIV(net_dev)->brvccs, brvccs) {
0164             atm_vcc = brvcc->atmvcc;
0165             if (atm_vcc && brvcc->atmvcc->dev == atm_dev) {
0166 
0167                 if (atm_vcc->dev->signal == ATM_PHY_SIG_LOST)
0168                     netif_carrier_off(net_dev);
0169                 else
0170                     netif_carrier_on(net_dev);
0171 
0172             }
0173         }
0174     }
0175     read_unlock_irqrestore(&devs_lock, flags);
0176 
0177     return NOTIFY_DONE;
0178 }
0179 
0180 static struct notifier_block atm_dev_notifier = {
0181     .notifier_call = atm_dev_event,
0182 };
0183 
0184 /* chained vcc->pop function.  Check if we should wake the netif_queue */
0185 static void br2684_pop(struct atm_vcc *vcc, struct sk_buff *skb)
0186 {
0187     struct br2684_vcc *brvcc = BR2684_VCC(vcc);
0188 
0189     pr_debug("(vcc %p ; net_dev %p )\n", vcc, brvcc->device);
0190     brvcc->old_pop(vcc, skb);
0191 
0192     /* If the queue space just went up from zero, wake */
0193     if (atomic_inc_return(&brvcc->qspace) == 1)
0194         netif_wake_queue(brvcc->device);
0195 }
0196 
0197 /*
0198  * Send a packet out a particular vcc.  Not to useful right now, but paves
0199  * the way for multiple vcc's per itf.  Returns true if we can send,
0200  * otherwise false
0201  */
0202 static int br2684_xmit_vcc(struct sk_buff *skb, struct net_device *dev,
0203                struct br2684_vcc *brvcc)
0204 {
0205     struct br2684_dev *brdev = BRPRIV(dev);
0206     struct atm_vcc *atmvcc;
0207     int minheadroom = (brvcc->encaps == e_llc) ?
0208         ((brdev->payload == p_bridged) ?
0209             sizeof(llc_oui_pid_pad) : sizeof(llc_oui_ipv4)) :
0210         ((brdev->payload == p_bridged) ? BR2684_PAD_LEN : 0);
0211 
0212     if (skb_headroom(skb) < minheadroom) {
0213         struct sk_buff *skb2 = skb_realloc_headroom(skb, minheadroom);
0214         brvcc->copies_needed++;
0215         dev_kfree_skb(skb);
0216         if (skb2 == NULL) {
0217             brvcc->copies_failed++;
0218             return 0;
0219         }
0220         skb = skb2;
0221     }
0222 
0223     if (brvcc->encaps == e_llc) {
0224         if (brdev->payload == p_bridged) {
0225             skb_push(skb, sizeof(llc_oui_pid_pad));
0226             skb_copy_to_linear_data(skb, llc_oui_pid_pad,
0227                         sizeof(llc_oui_pid_pad));
0228         } else if (brdev->payload == p_routed) {
0229             unsigned short prot = ntohs(skb->protocol);
0230 
0231             skb_push(skb, sizeof(llc_oui_ipv4));
0232             switch (prot) {
0233             case ETH_P_IP:
0234                 skb_copy_to_linear_data(skb, llc_oui_ipv4,
0235                             sizeof(llc_oui_ipv4));
0236                 break;
0237             case ETH_P_IPV6:
0238                 skb_copy_to_linear_data(skb, llc_oui_ipv6,
0239                             sizeof(llc_oui_ipv6));
0240                 break;
0241             default:
0242                 dev_kfree_skb(skb);
0243                 return 0;
0244             }
0245         }
0246     } else { /* e_vc */
0247         if (brdev->payload == p_bridged) {
0248             skb_push(skb, 2);
0249             memset(skb->data, 0, 2);
0250         }
0251     }
0252     skb_debug(skb);
0253 
0254     ATM_SKB(skb)->vcc = atmvcc = brvcc->atmvcc;
0255     pr_debug("atm_skb(%p)->vcc(%p)->dev(%p)\n", skb, atmvcc, atmvcc->dev);
0256     atm_account_tx(atmvcc, skb);
0257     dev->stats.tx_packets++;
0258     dev->stats.tx_bytes += skb->len;
0259 
0260     if (atomic_dec_return(&brvcc->qspace) < 1) {
0261         /* No more please! */
0262         netif_stop_queue(brvcc->device);
0263         /* We might have raced with br2684_pop() */
0264         if (unlikely(atomic_read(&brvcc->qspace) > 0))
0265             netif_wake_queue(brvcc->device);
0266     }
0267 
0268     /* If this fails immediately, the skb will be freed and br2684_pop()
0269        will wake the queue if appropriate. Just return an error so that
0270        the stats are updated correctly */
0271     return !atmvcc->send(atmvcc, skb);
0272 }
0273 
0274 static void br2684_release_cb(struct atm_vcc *atmvcc)
0275 {
0276     struct br2684_vcc *brvcc = BR2684_VCC(atmvcc);
0277 
0278     if (atomic_read(&brvcc->qspace) > 0)
0279         netif_wake_queue(brvcc->device);
0280 
0281     if (brvcc->old_release_cb)
0282         brvcc->old_release_cb(atmvcc);
0283 }
0284 
0285 static inline struct br2684_vcc *pick_outgoing_vcc(const struct sk_buff *skb,
0286                            const struct br2684_dev *brdev)
0287 {
0288     return list_empty(&brdev->brvccs) ? NULL : list_entry_brvcc(brdev->brvccs.next);    /* 1 vcc/dev right now */
0289 }
0290 
0291 static netdev_tx_t br2684_start_xmit(struct sk_buff *skb,
0292                      struct net_device *dev)
0293 {
0294     struct br2684_dev *brdev = BRPRIV(dev);
0295     struct br2684_vcc *brvcc;
0296     struct atm_vcc *atmvcc;
0297     netdev_tx_t ret = NETDEV_TX_OK;
0298 
0299     pr_debug("skb_dst(skb)=%p\n", skb_dst(skb));
0300     read_lock(&devs_lock);
0301     brvcc = pick_outgoing_vcc(skb, brdev);
0302     if (brvcc == NULL) {
0303         pr_debug("no vcc attached to dev %s\n", dev->name);
0304         dev->stats.tx_errors++;
0305         dev->stats.tx_carrier_errors++;
0306         /* netif_stop_queue(dev); */
0307         dev_kfree_skb(skb);
0308         goto out_devs;
0309     }
0310     atmvcc = brvcc->atmvcc;
0311 
0312     bh_lock_sock(sk_atm(atmvcc));
0313 
0314     if (test_bit(ATM_VF_RELEASED, &atmvcc->flags) ||
0315         test_bit(ATM_VF_CLOSE, &atmvcc->flags) ||
0316         !test_bit(ATM_VF_READY, &atmvcc->flags)) {
0317         dev->stats.tx_dropped++;
0318         dev_kfree_skb(skb);
0319         goto out;
0320     }
0321 
0322     if (sock_owned_by_user(sk_atm(atmvcc))) {
0323         netif_stop_queue(brvcc->device);
0324         ret = NETDEV_TX_BUSY;
0325         goto out;
0326     }
0327 
0328     if (!br2684_xmit_vcc(skb, dev, brvcc)) {
0329         /*
0330          * We should probably use netif_*_queue() here, but that
0331          * involves added complication.  We need to walk before
0332          * we can run.
0333          *
0334          * Don't free here! this pointer might be no longer valid!
0335          */
0336         dev->stats.tx_errors++;
0337         dev->stats.tx_fifo_errors++;
0338     }
0339  out:
0340     bh_unlock_sock(sk_atm(atmvcc));
0341  out_devs:
0342     read_unlock(&devs_lock);
0343     return ret;
0344 }
0345 
0346 /*
0347  * We remember when the MAC gets set, so we don't override it later with
0348  * the ESI of the ATM card of the first VC
0349  */
0350 static int br2684_mac_addr(struct net_device *dev, void *p)
0351 {
0352     int err = eth_mac_addr(dev, p);
0353     if (!err)
0354         BRPRIV(dev)->mac_was_set = 1;
0355     return err;
0356 }
0357 
0358 #ifdef CONFIG_ATM_BR2684_IPFILTER
0359 /* this IOCTL is experimental. */
0360 static int br2684_setfilt(struct atm_vcc *atmvcc, void __user * arg)
0361 {
0362     struct br2684_vcc *brvcc;
0363     struct br2684_filter_set fs;
0364 
0365     if (copy_from_user(&fs, arg, sizeof fs))
0366         return -EFAULT;
0367     if (fs.ifspec.method != BR2684_FIND_BYNOTHING) {
0368         /*
0369          * This is really a per-vcc thing, but we can also search
0370          * by device.
0371          */
0372         struct br2684_dev *brdev;
0373         read_lock(&devs_lock);
0374         brdev = BRPRIV(br2684_find_dev(&fs.ifspec));
0375         if (brdev == NULL || list_empty(&brdev->brvccs) ||
0376             brdev->brvccs.next != brdev->brvccs.prev)   /* >1 VCC */
0377             brvcc = NULL;
0378         else
0379             brvcc = list_entry_brvcc(brdev->brvccs.next);
0380         read_unlock(&devs_lock);
0381         if (brvcc == NULL)
0382             return -ESRCH;
0383     } else
0384         brvcc = BR2684_VCC(atmvcc);
0385     memcpy(&brvcc->filter, &fs.filter, sizeof(brvcc->filter));
0386     return 0;
0387 }
0388 
0389 /* Returns 1 if packet should be dropped */
0390 static inline int
0391 packet_fails_filter(__be16 type, struct br2684_vcc *brvcc, struct sk_buff *skb)
0392 {
0393     if (brvcc->filter.netmask == 0)
0394         return 0;   /* no filter in place */
0395     if (type == htons(ETH_P_IP) &&
0396         (((struct iphdr *)(skb->data))->daddr & brvcc->filter.
0397          netmask) == brvcc->filter.prefix)
0398         return 0;
0399     if (type == htons(ETH_P_ARP))
0400         return 0;
0401     /*
0402      * TODO: we should probably filter ARPs too.. don't want to have
0403      * them returning values that don't make sense, or is that ok?
0404      */
0405     return 1;       /* drop */
0406 }
0407 #endif /* CONFIG_ATM_BR2684_IPFILTER */
0408 
0409 static void br2684_close_vcc(struct br2684_vcc *brvcc)
0410 {
0411     pr_debug("removing VCC %p from dev %p\n", brvcc, brvcc->device);
0412     write_lock_irq(&devs_lock);
0413     list_del(&brvcc->brvccs);
0414     write_unlock_irq(&devs_lock);
0415     brvcc->atmvcc->user_back = NULL;    /* what about vcc->recvq ??? */
0416     brvcc->atmvcc->release_cb = brvcc->old_release_cb;
0417     brvcc->old_push(brvcc->atmvcc, NULL);   /* pass on the bad news */
0418     module_put(brvcc->old_owner);
0419     kfree(brvcc);
0420 }
0421 
0422 /* when AAL5 PDU comes in: */
0423 static void br2684_push(struct atm_vcc *atmvcc, struct sk_buff *skb)
0424 {
0425     struct br2684_vcc *brvcc = BR2684_VCC(atmvcc);
0426     struct net_device *net_dev = brvcc->device;
0427     struct br2684_dev *brdev = BRPRIV(net_dev);
0428 
0429     pr_debug("\n");
0430 
0431     if (unlikely(skb == NULL)) {
0432         /* skb==NULL means VCC is being destroyed */
0433         br2684_close_vcc(brvcc);
0434         if (list_empty(&brdev->brvccs)) {
0435             write_lock_irq(&devs_lock);
0436             list_del(&brdev->br2684_devs);
0437             write_unlock_irq(&devs_lock);
0438             unregister_netdev(net_dev);
0439             free_netdev(net_dev);
0440         }
0441         return;
0442     }
0443 
0444     skb_debug(skb);
0445     atm_return(atmvcc, skb->truesize);
0446     pr_debug("skb from brdev %p\n", brdev);
0447     if (brvcc->encaps == e_llc) {
0448 
0449         if (skb->len > 7 && skb->data[7] == 0x01)
0450             __skb_trim(skb, skb->len - 4);
0451 
0452         /* accept packets that have "ipv[46]" in the snap header */
0453         if ((skb->len >= (sizeof(llc_oui_ipv4))) &&
0454             (memcmp(skb->data, llc_oui_ipv4,
0455                 sizeof(llc_oui_ipv4) - BR2684_ETHERTYPE_LEN) == 0)) {
0456             if (memcmp(skb->data + 6, ethertype_ipv6,
0457                    sizeof(ethertype_ipv6)) == 0)
0458                 skb->protocol = htons(ETH_P_IPV6);
0459             else if (memcmp(skb->data + 6, ethertype_ipv4,
0460                     sizeof(ethertype_ipv4)) == 0)
0461                 skb->protocol = htons(ETH_P_IP);
0462             else
0463                 goto error;
0464             skb_pull(skb, sizeof(llc_oui_ipv4));
0465             skb_reset_network_header(skb);
0466             skb->pkt_type = PACKET_HOST;
0467         /*
0468          * Let us waste some time for checking the encapsulation.
0469          * Note, that only 7 char is checked so frames with a valid FCS
0470          * are also accepted (but FCS is not checked of course).
0471          */
0472         } else if ((skb->len >= sizeof(llc_oui_pid_pad)) &&
0473                (memcmp(skb->data, llc_oui_pid_pad, 7) == 0)) {
0474             skb_pull(skb, sizeof(llc_oui_pid_pad));
0475             skb->protocol = eth_type_trans(skb, net_dev);
0476         } else
0477             goto error;
0478 
0479     } else { /* e_vc */
0480         if (brdev->payload == p_routed) {
0481             struct iphdr *iph;
0482 
0483             skb_reset_network_header(skb);
0484             iph = ip_hdr(skb);
0485             if (iph->version == 4)
0486                 skb->protocol = htons(ETH_P_IP);
0487             else if (iph->version == 6)
0488                 skb->protocol = htons(ETH_P_IPV6);
0489             else
0490                 goto error;
0491             skb->pkt_type = PACKET_HOST;
0492         } else { /* p_bridged */
0493             /* first 2 chars should be 0 */
0494             if (memcmp(skb->data, pad, BR2684_PAD_LEN) != 0)
0495                 goto error;
0496             skb_pull(skb, BR2684_PAD_LEN);
0497             skb->protocol = eth_type_trans(skb, net_dev);
0498         }
0499     }
0500 
0501 #ifdef CONFIG_ATM_BR2684_IPFILTER
0502     if (unlikely(packet_fails_filter(skb->protocol, brvcc, skb)))
0503         goto dropped;
0504 #endif /* CONFIG_ATM_BR2684_IPFILTER */
0505     skb->dev = net_dev;
0506     ATM_SKB(skb)->vcc = atmvcc; /* needed ? */
0507     pr_debug("received packet's protocol: %x\n", ntohs(skb->protocol));
0508     skb_debug(skb);
0509     /* sigh, interface is down? */
0510     if (unlikely(!(net_dev->flags & IFF_UP)))
0511         goto dropped;
0512     net_dev->stats.rx_packets++;
0513     net_dev->stats.rx_bytes += skb->len;
0514     memset(ATM_SKB(skb), 0, sizeof(struct atm_skb_data));
0515     netif_rx(skb);
0516     return;
0517 
0518 dropped:
0519     net_dev->stats.rx_dropped++;
0520     goto free_skb;
0521 error:
0522     net_dev->stats.rx_errors++;
0523 free_skb:
0524     dev_kfree_skb(skb);
0525 }
0526 
0527 /*
0528  * Assign a vcc to a dev
0529  * Note: we do not have explicit unassign, but look at _push()
0530  */
0531 static int br2684_regvcc(struct atm_vcc *atmvcc, void __user * arg)
0532 {
0533     struct br2684_vcc *brvcc;
0534     struct br2684_dev *brdev;
0535     struct net_device *net_dev;
0536     struct atm_backend_br2684 be;
0537     int err;
0538 
0539     if (copy_from_user(&be, arg, sizeof be))
0540         return -EFAULT;
0541     brvcc = kzalloc(sizeof(struct br2684_vcc), GFP_KERNEL);
0542     if (!brvcc)
0543         return -ENOMEM;
0544     /*
0545      * Allow two packets in the ATM queue. One actually being sent, and one
0546      * for the ATM 'TX done' handler to send. It shouldn't take long to get
0547      * the next one from the netdev queue, when we need it. More than that
0548      * would be bufferbloat.
0549      */
0550     atomic_set(&brvcc->qspace, 2);
0551     write_lock_irq(&devs_lock);
0552     net_dev = br2684_find_dev(&be.ifspec);
0553     if (net_dev == NULL) {
0554         pr_err("tried to attach to non-existent device\n");
0555         err = -ENXIO;
0556         goto error;
0557     }
0558     brdev = BRPRIV(net_dev);
0559     if (atmvcc->push == NULL) {
0560         err = -EBADFD;
0561         goto error;
0562     }
0563     if (!list_empty(&brdev->brvccs)) {
0564         /* Only 1 VCC/dev right now */
0565         err = -EEXIST;
0566         goto error;
0567     }
0568     if (be.fcs_in != BR2684_FCSIN_NO ||
0569         be.fcs_out != BR2684_FCSOUT_NO ||
0570         be.fcs_auto || be.has_vpiid || be.send_padding ||
0571         (be.encaps != BR2684_ENCAPS_VC &&
0572          be.encaps != BR2684_ENCAPS_LLC) ||
0573         be.min_size != 0) {
0574         err = -EINVAL;
0575         goto error;
0576     }
0577     pr_debug("vcc=%p, encaps=%d, brvcc=%p\n", atmvcc, be.encaps, brvcc);
0578     if (list_empty(&brdev->brvccs) && !brdev->mac_was_set) {
0579         unsigned char *esi = atmvcc->dev->esi;
0580         const u8 one = 1;
0581 
0582         if (esi[0] | esi[1] | esi[2] | esi[3] | esi[4] | esi[5])
0583             dev_addr_set(net_dev, esi);
0584         else
0585             dev_addr_mod(net_dev, 2, &one, 1);
0586     }
0587     list_add(&brvcc->brvccs, &brdev->brvccs);
0588     write_unlock_irq(&devs_lock);
0589     brvcc->device = net_dev;
0590     brvcc->atmvcc = atmvcc;
0591     atmvcc->user_back = brvcc;
0592     brvcc->encaps = (enum br2684_encaps)be.encaps;
0593     brvcc->old_push = atmvcc->push;
0594     brvcc->old_pop = atmvcc->pop;
0595     brvcc->old_release_cb = atmvcc->release_cb;
0596     brvcc->old_owner = atmvcc->owner;
0597     barrier();
0598     atmvcc->push = br2684_push;
0599     atmvcc->pop = br2684_pop;
0600     atmvcc->release_cb = br2684_release_cb;
0601     atmvcc->owner = THIS_MODULE;
0602 
0603     /* initialize netdev carrier state */
0604     if (atmvcc->dev->signal == ATM_PHY_SIG_LOST)
0605         netif_carrier_off(net_dev);
0606     else
0607         netif_carrier_on(net_dev);
0608 
0609     __module_get(THIS_MODULE);
0610 
0611     /* re-process everything received between connection setup and
0612        backend setup */
0613     vcc_process_recv_queue(atmvcc);
0614     return 0;
0615 
0616 error:
0617     write_unlock_irq(&devs_lock);
0618     kfree(brvcc);
0619     return err;
0620 }
0621 
0622 static const struct net_device_ops br2684_netdev_ops = {
0623     .ndo_start_xmit     = br2684_start_xmit,
0624     .ndo_set_mac_address    = br2684_mac_addr,
0625     .ndo_validate_addr  = eth_validate_addr,
0626 };
0627 
0628 static const struct net_device_ops br2684_netdev_ops_routed = {
0629     .ndo_start_xmit     = br2684_start_xmit,
0630     .ndo_set_mac_address    = br2684_mac_addr,
0631 };
0632 
0633 static void br2684_setup(struct net_device *netdev)
0634 {
0635     struct br2684_dev *brdev = BRPRIV(netdev);
0636 
0637     ether_setup(netdev);
0638     netdev->hard_header_len += sizeof(llc_oui_pid_pad); /* worst case */
0639     brdev->net_dev = netdev;
0640 
0641     netdev->netdev_ops = &br2684_netdev_ops;
0642 
0643     INIT_LIST_HEAD(&brdev->brvccs);
0644 }
0645 
0646 static void br2684_setup_routed(struct net_device *netdev)
0647 {
0648     struct br2684_dev *brdev = BRPRIV(netdev);
0649 
0650     brdev->net_dev = netdev;
0651     netdev->hard_header_len = sizeof(llc_oui_ipv4); /* worst case */
0652     netdev->netdev_ops = &br2684_netdev_ops_routed;
0653     netdev->addr_len = 0;
0654     netdev->mtu = ETH_DATA_LEN;
0655     netdev->min_mtu = 0;
0656     netdev->max_mtu = ETH_MAX_MTU;
0657     netdev->type = ARPHRD_PPP;
0658     netdev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
0659     netdev->tx_queue_len = 100;
0660     INIT_LIST_HEAD(&brdev->brvccs);
0661 }
0662 
0663 static int br2684_create(void __user *arg)
0664 {
0665     int err;
0666     struct net_device *netdev;
0667     struct br2684_dev *brdev;
0668     struct atm_newif_br2684 ni;
0669     enum br2684_payload payload;
0670 
0671     pr_debug("\n");
0672 
0673     if (copy_from_user(&ni, arg, sizeof ni))
0674         return -EFAULT;
0675 
0676     if (ni.media & BR2684_FLAG_ROUTED)
0677         payload = p_routed;
0678     else
0679         payload = p_bridged;
0680     ni.media &= 0xffff; /* strip flags */
0681 
0682     if (ni.media != BR2684_MEDIA_ETHERNET || ni.mtu != 1500)
0683         return -EINVAL;
0684 
0685     netdev = alloc_netdev(sizeof(struct br2684_dev),
0686                   ni.ifname[0] ? ni.ifname : "nas%d",
0687                   NET_NAME_UNKNOWN,
0688                   (payload == p_routed) ? br2684_setup_routed : br2684_setup);
0689     if (!netdev)
0690         return -ENOMEM;
0691 
0692     brdev = BRPRIV(netdev);
0693 
0694     pr_debug("registered netdev %s\n", netdev->name);
0695     /* open, stop, do_ioctl ? */
0696     err = register_netdev(netdev);
0697     if (err < 0) {
0698         pr_err("register_netdev failed\n");
0699         free_netdev(netdev);
0700         return err;
0701     }
0702 
0703     write_lock_irq(&devs_lock);
0704 
0705     brdev->payload = payload;
0706 
0707     if (list_empty(&br2684_devs)) {
0708         /* 1st br2684 device */
0709         brdev->number = 1;
0710     } else
0711         brdev->number = BRPRIV(list_entry_brdev(br2684_devs.prev))->number + 1;
0712 
0713     list_add_tail(&brdev->br2684_devs, &br2684_devs);
0714     write_unlock_irq(&devs_lock);
0715     return 0;
0716 }
0717 
0718 /*
0719  * This handles ioctls actually performed on our vcc - we must return
0720  * -ENOIOCTLCMD for any unrecognized ioctl
0721  */
0722 static int br2684_ioctl(struct socket *sock, unsigned int cmd,
0723             unsigned long arg)
0724 {
0725     struct atm_vcc *atmvcc = ATM_SD(sock);
0726     void __user *argp = (void __user *)arg;
0727     atm_backend_t b;
0728 
0729     int err;
0730     switch (cmd) {
0731     case ATM_SETBACKEND:
0732     case ATM_NEWBACKENDIF:
0733         err = get_user(b, (atm_backend_t __user *) argp);
0734         if (err)
0735             return -EFAULT;
0736         if (b != ATM_BACKEND_BR2684)
0737             return -ENOIOCTLCMD;
0738         if (!capable(CAP_NET_ADMIN))
0739             return -EPERM;
0740         if (cmd == ATM_SETBACKEND) {
0741             if (sock->state != SS_CONNECTED)
0742                 return -EINVAL;
0743             return br2684_regvcc(atmvcc, argp);
0744         } else {
0745             return br2684_create(argp);
0746         }
0747 #ifdef CONFIG_ATM_BR2684_IPFILTER
0748     case BR2684_SETFILT:
0749         if (atmvcc->push != br2684_push)
0750             return -ENOIOCTLCMD;
0751         if (!capable(CAP_NET_ADMIN))
0752             return -EPERM;
0753         err = br2684_setfilt(atmvcc, argp);
0754 
0755         return err;
0756 #endif /* CONFIG_ATM_BR2684_IPFILTER */
0757     }
0758     return -ENOIOCTLCMD;
0759 }
0760 
0761 static struct atm_ioctl br2684_ioctl_ops = {
0762     .owner = THIS_MODULE,
0763     .ioctl = br2684_ioctl,
0764 };
0765 
0766 #ifdef CONFIG_PROC_FS
0767 static void *br2684_seq_start(struct seq_file *seq, loff_t * pos)
0768     __acquires(devs_lock)
0769 {
0770     read_lock(&devs_lock);
0771     return seq_list_start(&br2684_devs, *pos);
0772 }
0773 
0774 static void *br2684_seq_next(struct seq_file *seq, void *v, loff_t * pos)
0775 {
0776     return seq_list_next(v, &br2684_devs, pos);
0777 }
0778 
0779 static void br2684_seq_stop(struct seq_file *seq, void *v)
0780     __releases(devs_lock)
0781 {
0782     read_unlock(&devs_lock);
0783 }
0784 
0785 static int br2684_seq_show(struct seq_file *seq, void *v)
0786 {
0787     const struct br2684_dev *brdev = list_entry(v, struct br2684_dev,
0788                             br2684_devs);
0789     const struct net_device *net_dev = brdev->net_dev;
0790     const struct br2684_vcc *brvcc;
0791 
0792     seq_printf(seq, "dev %.16s: num=%d, mac=%pM (%s)\n",
0793            net_dev->name,
0794            brdev->number,
0795            net_dev->dev_addr,
0796            brdev->mac_was_set ? "set" : "auto");
0797 
0798     list_for_each_entry(brvcc, &brdev->brvccs, brvccs) {
0799         seq_printf(seq, "  vcc %d.%d.%d: encaps=%s payload=%s"
0800                ", failed copies %u/%u"
0801                "\n", brvcc->atmvcc->dev->number,
0802                brvcc->atmvcc->vpi, brvcc->atmvcc->vci,
0803                (brvcc->encaps == e_llc) ? "LLC" : "VC",
0804                (brdev->payload == p_bridged) ? "bridged" : "routed",
0805                brvcc->copies_failed, brvcc->copies_needed);
0806 #ifdef CONFIG_ATM_BR2684_IPFILTER
0807         if (brvcc->filter.netmask != 0)
0808             seq_printf(seq, "    filter=%pI4/%pI4\n",
0809                    &brvcc->filter.prefix,
0810                    &brvcc->filter.netmask);
0811 #endif /* CONFIG_ATM_BR2684_IPFILTER */
0812     }
0813     return 0;
0814 }
0815 
0816 static const struct seq_operations br2684_seq_ops = {
0817     .start = br2684_seq_start,
0818     .next = br2684_seq_next,
0819     .stop = br2684_seq_stop,
0820     .show = br2684_seq_show,
0821 };
0822 
0823 extern struct proc_dir_entry *atm_proc_root;    /* from proc.c */
0824 #endif /* CONFIG_PROC_FS */
0825 
0826 static int __init br2684_init(void)
0827 {
0828 #ifdef CONFIG_PROC_FS
0829     struct proc_dir_entry *p;
0830     p = proc_create_seq("br2684", 0, atm_proc_root, &br2684_seq_ops);
0831     if (p == NULL)
0832         return -ENOMEM;
0833 #endif
0834     register_atm_ioctl(&br2684_ioctl_ops);
0835     register_atmdevice_notifier(&atm_dev_notifier);
0836     return 0;
0837 }
0838 
0839 static void __exit br2684_exit(void)
0840 {
0841     struct net_device *net_dev;
0842     struct br2684_dev *brdev;
0843     struct br2684_vcc *brvcc;
0844     deregister_atm_ioctl(&br2684_ioctl_ops);
0845 
0846 #ifdef CONFIG_PROC_FS
0847     remove_proc_entry("br2684", atm_proc_root);
0848 #endif
0849 
0850 
0851     unregister_atmdevice_notifier(&atm_dev_notifier);
0852 
0853     while (!list_empty(&br2684_devs)) {
0854         net_dev = list_entry_brdev(br2684_devs.next);
0855         brdev = BRPRIV(net_dev);
0856         while (!list_empty(&brdev->brvccs)) {
0857             brvcc = list_entry_brvcc(brdev->brvccs.next);
0858             br2684_close_vcc(brvcc);
0859         }
0860 
0861         list_del(&brdev->br2684_devs);
0862         unregister_netdev(net_dev);
0863         free_netdev(net_dev);
0864     }
0865 }
0866 
0867 module_init(br2684_init);
0868 module_exit(br2684_exit);
0869 
0870 MODULE_AUTHOR("Marcell GAL");
0871 MODULE_DESCRIPTION("RFC2684 bridged protocols over ATM/AAL5");
0872 MODULE_LICENSE("GPL");