firewire net: Fix memory leakage in fwnet_remove().
[firefly-linux-kernel-4.4.55.git] / drivers / firewire / net.c
1 /*
2  * IPv4 over IEEE 1394, per RFC 2734
3  *
4  * Copyright (C) 2009 Jay Fenlason <fenlason@redhat.com>
5  *
6  * based on eth1394 by Ben Collins et al
7  */
8
9 #include <linux/bug.h>
10 #include <linux/compiler.h>
11 #include <linux/delay.h>
12 #include <linux/device.h>
13 #include <linux/ethtool.h>
14 #include <linux/firewire.h>
15 #include <linux/firewire-constants.h>
16 #include <linux/highmem.h>
17 #include <linux/in.h>
18 #include <linux/ip.h>
19 #include <linux/jiffies.h>
20 #include <linux/mod_devicetable.h>
21 #include <linux/module.h>
22 #include <linux/moduleparam.h>
23 #include <linux/mutex.h>
24 #include <linux/netdevice.h>
25 #include <linux/skbuff.h>
26 #include <linux/slab.h>
27 #include <linux/spinlock.h>
28
29 #include <asm/unaligned.h>
30 #include <net/arp.h>
31
32 /* rx limits */
33 #define FWNET_MAX_FRAGMENTS             30 /* arbitrary, > TX queue depth */
34 #define FWNET_ISO_PAGE_COUNT            (PAGE_SIZE < 16*1024 ? 4 : 2)
35
36 /* tx limits */
37 #define FWNET_MAX_QUEUED_DATAGRAMS      20 /* < 64 = number of tlabels */
38 #define FWNET_MIN_QUEUED_DATAGRAMS      10 /* should keep AT DMA busy enough */
39 #define FWNET_TX_QUEUE_LEN              FWNET_MAX_QUEUED_DATAGRAMS /* ? */
40
41 #define IEEE1394_BROADCAST_CHANNEL      31
42 #define IEEE1394_ALL_NODES              (0xffc0 | 0x003f)
43 #define IEEE1394_MAX_PAYLOAD_S100       512
44 #define FWNET_NO_FIFO_ADDR              (~0ULL)
45
46 #define IANA_SPECIFIER_ID               0x00005eU
47 #define RFC2734_SW_VERSION              0x000001U
48
49 #define IEEE1394_GASP_HDR_SIZE  8
50
51 #define RFC2374_UNFRAG_HDR_SIZE 4
52 #define RFC2374_FRAG_HDR_SIZE   8
53 #define RFC2374_FRAG_OVERHEAD   4
54
55 #define RFC2374_HDR_UNFRAG      0       /* unfragmented         */
56 #define RFC2374_HDR_FIRSTFRAG   1       /* first fragment       */
57 #define RFC2374_HDR_LASTFRAG    2       /* last fragment        */
58 #define RFC2374_HDR_INTFRAG     3       /* interior fragment    */
59
60 #define RFC2734_HW_ADDR_LEN     16
61
62 struct rfc2734_arp {
63         __be16 hw_type;         /* 0x0018       */
64         __be16 proto_type;      /* 0x0806       */
65         u8 hw_addr_len;         /* 16           */
66         u8 ip_addr_len;         /* 4            */
67         __be16 opcode;          /* ARP Opcode   */
68         /* Above is exactly the same format as struct arphdr */
69
70         __be64 s_uniq_id;       /* Sender's 64bit EUI                   */
71         u8 max_rec;             /* Sender's max packet size             */
72         u8 sspd;                /* Sender's max speed                   */
73         __be16 fifo_hi;         /* hi 16bits of sender's FIFO addr      */
74         __be32 fifo_lo;         /* lo 32bits of sender's FIFO addr      */
75         __be32 sip;             /* Sender's IP Address                  */
76         __be32 tip;             /* IP Address of requested hw addr      */
77 } __packed;
78
79 /* This header format is specific to this driver implementation. */
80 #define FWNET_ALEN      8
81 #define FWNET_HLEN      10
82 struct fwnet_header {
83         u8 h_dest[FWNET_ALEN];  /* destination address */
84         __be16 h_proto;         /* packet type ID field */
85 } __packed;
86
87 /* IPv4 and IPv6 encapsulation header */
88 struct rfc2734_header {
89         u32 w0;
90         u32 w1;
91 };
92
93 #define fwnet_get_hdr_lf(h)             (((h)->w0 & 0xc0000000) >> 30)
94 #define fwnet_get_hdr_ether_type(h)     (((h)->w0 & 0x0000ffff))
95 #define fwnet_get_hdr_dg_size(h)        (((h)->w0 & 0x0fff0000) >> 16)
96 #define fwnet_get_hdr_fg_off(h)         (((h)->w0 & 0x00000fff))
97 #define fwnet_get_hdr_dgl(h)            (((h)->w1 & 0xffff0000) >> 16)
98
99 #define fwnet_set_hdr_lf(lf)            ((lf)  << 30)
100 #define fwnet_set_hdr_ether_type(et)    (et)
101 #define fwnet_set_hdr_dg_size(dgs)      ((dgs) << 16)
102 #define fwnet_set_hdr_fg_off(fgo)       (fgo)
103
104 #define fwnet_set_hdr_dgl(dgl)          ((dgl) << 16)
105
106 static inline void fwnet_make_uf_hdr(struct rfc2734_header *hdr,
107                 unsigned ether_type)
108 {
109         hdr->w0 = fwnet_set_hdr_lf(RFC2374_HDR_UNFRAG)
110                   | fwnet_set_hdr_ether_type(ether_type);
111 }
112
113 static inline void fwnet_make_ff_hdr(struct rfc2734_header *hdr,
114                 unsigned ether_type, unsigned dg_size, unsigned dgl)
115 {
116         hdr->w0 = fwnet_set_hdr_lf(RFC2374_HDR_FIRSTFRAG)
117                   | fwnet_set_hdr_dg_size(dg_size)
118                   | fwnet_set_hdr_ether_type(ether_type);
119         hdr->w1 = fwnet_set_hdr_dgl(dgl);
120 }
121
122 static inline void fwnet_make_sf_hdr(struct rfc2734_header *hdr,
123                 unsigned lf, unsigned dg_size, unsigned fg_off, unsigned dgl)
124 {
125         hdr->w0 = fwnet_set_hdr_lf(lf)
126                   | fwnet_set_hdr_dg_size(dg_size)
127                   | fwnet_set_hdr_fg_off(fg_off);
128         hdr->w1 = fwnet_set_hdr_dgl(dgl);
129 }
130
131 /* This list keeps track of what parts of the datagram have been filled in */
132 struct fwnet_fragment_info {
133         struct list_head fi_link;
134         u16 offset;
135         u16 len;
136 };
137
138 struct fwnet_partial_datagram {
139         struct list_head pd_link;
140         struct list_head fi_list;
141         struct sk_buff *skb;
142         /* FIXME Why not use skb->data? */
143         char *pbuf;
144         u16 datagram_label;
145         u16 ether_type;
146         u16 datagram_size;
147 };
148
149 static DEFINE_MUTEX(fwnet_device_mutex);
150 static LIST_HEAD(fwnet_device_list);
151
152 struct fwnet_device {
153         struct list_head dev_link;
154         spinlock_t lock;
155         enum {
156                 FWNET_BROADCAST_ERROR,
157                 FWNET_BROADCAST_RUNNING,
158                 FWNET_BROADCAST_STOPPED,
159         } broadcast_state;
160         struct fw_iso_context *broadcast_rcv_context;
161         struct fw_iso_buffer broadcast_rcv_buffer;
162         void **broadcast_rcv_buffer_ptrs;
163         unsigned broadcast_rcv_next_ptr;
164         unsigned num_broadcast_rcv_ptrs;
165         unsigned rcv_buffer_size;
166         /*
167          * This value is the maximum unfragmented datagram size that can be
168          * sent by the hardware.  It already has the GASP overhead and the
169          * unfragmented datagram header overhead calculated into it.
170          */
171         unsigned broadcast_xmt_max_payload;
172         u16 broadcast_xmt_datagramlabel;
173
174         /*
175          * The CSR address that remote nodes must send datagrams to for us to
176          * receive them.
177          */
178         struct fw_address_handler handler;
179         u64 local_fifo;
180
181         /* Number of tx datagrams that have been queued but not yet acked */
182         int queued_datagrams;
183
184         int peer_count;
185         struct list_head peer_list;
186         struct fw_card *card;
187         struct net_device *netdev;
188 };
189
190 struct fwnet_peer {
191         struct list_head peer_link;
192         struct fwnet_device *dev;
193         u64 guid;
194         u64 fifo;
195         __be32 ip;
196
197         /* guarded by dev->lock */
198         struct list_head pd_list; /* received partial datagrams */
199         unsigned pdg_size;        /* pd_list size */
200
201         u16 datagram_label;       /* outgoing datagram label */
202         u16 max_payload;          /* includes RFC2374_FRAG_HDR_SIZE overhead */
203         int node_id;
204         int generation;
205         unsigned speed;
206 };
207
208 /* This is our task struct. It's used for the packet complete callback.  */
209 struct fwnet_packet_task {
210         struct fw_transaction transaction;
211         struct rfc2734_header hdr;
212         struct sk_buff *skb;
213         struct fwnet_device *dev;
214
215         int outstanding_pkts;
216         u64 fifo_addr;
217         u16 dest_node;
218         u16 max_payload;
219         u8 generation;
220         u8 speed;
221         u8 enqueued;
222 };
223
224 /*
225  * saddr == NULL means use device source address.
226  * daddr == NULL means leave destination address (eg unresolved arp).
227  */
228 static int fwnet_header_create(struct sk_buff *skb, struct net_device *net,
229                         unsigned short type, const void *daddr,
230                         const void *saddr, unsigned len)
231 {
232         struct fwnet_header *h;
233
234         h = (struct fwnet_header *)skb_push(skb, sizeof(*h));
235         put_unaligned_be16(type, &h->h_proto);
236
237         if (net->flags & (IFF_LOOPBACK | IFF_NOARP)) {
238                 memset(h->h_dest, 0, net->addr_len);
239
240                 return net->hard_header_len;
241         }
242
243         if (daddr) {
244                 memcpy(h->h_dest, daddr, net->addr_len);
245
246                 return net->hard_header_len;
247         }
248
249         return -net->hard_header_len;
250 }
251
252 static int fwnet_header_rebuild(struct sk_buff *skb)
253 {
254         struct fwnet_header *h = (struct fwnet_header *)skb->data;
255
256         if (get_unaligned_be16(&h->h_proto) == ETH_P_IP)
257                 return arp_find((unsigned char *)&h->h_dest, skb);
258
259         dev_notice(&skb->dev->dev, "unable to resolve type %04x addresses\n",
260                    be16_to_cpu(h->h_proto));
261         return 0;
262 }
263
264 static int fwnet_header_cache(const struct neighbour *neigh,
265                               struct hh_cache *hh, __be16 type)
266 {
267         struct net_device *net;
268         struct fwnet_header *h;
269
270         if (type == cpu_to_be16(ETH_P_802_3))
271                 return -1;
272         net = neigh->dev;
273         h = (struct fwnet_header *)((u8 *)hh->hh_data + HH_DATA_OFF(sizeof(*h)));
274         h->h_proto = type;
275         memcpy(h->h_dest, neigh->ha, net->addr_len);
276         hh->hh_len = FWNET_HLEN;
277
278         return 0;
279 }
280
281 /* Called by Address Resolution module to notify changes in address. */
282 static void fwnet_header_cache_update(struct hh_cache *hh,
283                 const struct net_device *net, const unsigned char *haddr)
284 {
285         memcpy((u8 *)hh->hh_data + HH_DATA_OFF(FWNET_HLEN), haddr, net->addr_len);
286 }
287
288 static int fwnet_header_parse(const struct sk_buff *skb, unsigned char *haddr)
289 {
290         memcpy(haddr, skb->dev->dev_addr, FWNET_ALEN);
291
292         return FWNET_ALEN;
293 }
294
295 static const struct header_ops fwnet_header_ops = {
296         .create         = fwnet_header_create,
297         .rebuild        = fwnet_header_rebuild,
298         .cache          = fwnet_header_cache,
299         .cache_update   = fwnet_header_cache_update,
300         .parse          = fwnet_header_parse,
301 };
302
303 /* FIXME: is this correct for all cases? */
304 static bool fwnet_frag_overlap(struct fwnet_partial_datagram *pd,
305                                unsigned offset, unsigned len)
306 {
307         struct fwnet_fragment_info *fi;
308         unsigned end = offset + len;
309
310         list_for_each_entry(fi, &pd->fi_list, fi_link)
311                 if (offset < fi->offset + fi->len && end > fi->offset)
312                         return true;
313
314         return false;
315 }
316
317 /* Assumes that new fragment does not overlap any existing fragments */
318 static struct fwnet_fragment_info *fwnet_frag_new(
319         struct fwnet_partial_datagram *pd, unsigned offset, unsigned len)
320 {
321         struct fwnet_fragment_info *fi, *fi2, *new;
322         struct list_head *list;
323
324         list = &pd->fi_list;
325         list_for_each_entry(fi, &pd->fi_list, fi_link) {
326                 if (fi->offset + fi->len == offset) {
327                         /* The new fragment can be tacked on to the end */
328                         /* Did the new fragment plug a hole? */
329                         fi2 = list_entry(fi->fi_link.next,
330                                          struct fwnet_fragment_info, fi_link);
331                         if (fi->offset + fi->len == fi2->offset) {
332                                 /* glue fragments together */
333                                 fi->len += len + fi2->len;
334                                 list_del(&fi2->fi_link);
335                                 kfree(fi2);
336                         } else {
337                                 fi->len += len;
338                         }
339
340                         return fi;
341                 }
342                 if (offset + len == fi->offset) {
343                         /* The new fragment can be tacked on to the beginning */
344                         /* Did the new fragment plug a hole? */
345                         fi2 = list_entry(fi->fi_link.prev,
346                                          struct fwnet_fragment_info, fi_link);
347                         if (fi2->offset + fi2->len == fi->offset) {
348                                 /* glue fragments together */
349                                 fi2->len += fi->len + len;
350                                 list_del(&fi->fi_link);
351                                 kfree(fi);
352
353                                 return fi2;
354                         }
355                         fi->offset = offset;
356                         fi->len += len;
357
358                         return fi;
359                 }
360                 if (offset > fi->offset + fi->len) {
361                         list = &fi->fi_link;
362                         break;
363                 }
364                 if (offset + len < fi->offset) {
365                         list = fi->fi_link.prev;
366                         break;
367                 }
368         }
369
370         new = kmalloc(sizeof(*new), GFP_ATOMIC);
371         if (!new) {
372                 dev_err(&pd->skb->dev->dev, "out of memory\n");
373                 return NULL;
374         }
375
376         new->offset = offset;
377         new->len = len;
378         list_add(&new->fi_link, list);
379
380         return new;
381 }
382
383 static struct fwnet_partial_datagram *fwnet_pd_new(struct net_device *net,
384                 struct fwnet_peer *peer, u16 datagram_label, unsigned dg_size,
385                 void *frag_buf, unsigned frag_off, unsigned frag_len)
386 {
387         struct fwnet_partial_datagram *new;
388         struct fwnet_fragment_info *fi;
389
390         new = kmalloc(sizeof(*new), GFP_ATOMIC);
391         if (!new)
392                 goto fail;
393
394         INIT_LIST_HEAD(&new->fi_list);
395         fi = fwnet_frag_new(new, frag_off, frag_len);
396         if (fi == NULL)
397                 goto fail_w_new;
398
399         new->datagram_label = datagram_label;
400         new->datagram_size = dg_size;
401         new->skb = dev_alloc_skb(dg_size + LL_RESERVED_SPACE(net));
402         if (new->skb == NULL)
403                 goto fail_w_fi;
404
405         skb_reserve(new->skb, LL_RESERVED_SPACE(net));
406         new->pbuf = skb_put(new->skb, dg_size);
407         memcpy(new->pbuf + frag_off, frag_buf, frag_len);
408         list_add_tail(&new->pd_link, &peer->pd_list);
409
410         return new;
411
412 fail_w_fi:
413         kfree(fi);
414 fail_w_new:
415         kfree(new);
416 fail:
417         dev_err(&net->dev, "out of memory\n");
418
419         return NULL;
420 }
421
422 static struct fwnet_partial_datagram *fwnet_pd_find(struct fwnet_peer *peer,
423                                                     u16 datagram_label)
424 {
425         struct fwnet_partial_datagram *pd;
426
427         list_for_each_entry(pd, &peer->pd_list, pd_link)
428                 if (pd->datagram_label == datagram_label)
429                         return pd;
430
431         return NULL;
432 }
433
434
435 static void fwnet_pd_delete(struct fwnet_partial_datagram *old)
436 {
437         struct fwnet_fragment_info *fi, *n;
438
439         list_for_each_entry_safe(fi, n, &old->fi_list, fi_link)
440                 kfree(fi);
441
442         list_del(&old->pd_link);
443         dev_kfree_skb_any(old->skb);
444         kfree(old);
445 }
446
447 static bool fwnet_pd_update(struct fwnet_peer *peer,
448                 struct fwnet_partial_datagram *pd, void *frag_buf,
449                 unsigned frag_off, unsigned frag_len)
450 {
451         if (fwnet_frag_new(pd, frag_off, frag_len) == NULL)
452                 return false;
453
454         memcpy(pd->pbuf + frag_off, frag_buf, frag_len);
455
456         /*
457          * Move list entry to beginning of list so that oldest partial
458          * datagrams percolate to the end of the list
459          */
460         list_move_tail(&pd->pd_link, &peer->pd_list);
461
462         return true;
463 }
464
465 static bool fwnet_pd_is_complete(struct fwnet_partial_datagram *pd)
466 {
467         struct fwnet_fragment_info *fi;
468
469         fi = list_entry(pd->fi_list.next, struct fwnet_fragment_info, fi_link);
470
471         return fi->len == pd->datagram_size;
472 }
473
474 /* caller must hold dev->lock */
475 static struct fwnet_peer *fwnet_peer_find_by_guid(struct fwnet_device *dev,
476                                                   u64 guid)
477 {
478         struct fwnet_peer *peer;
479
480         list_for_each_entry(peer, &dev->peer_list, peer_link)
481                 if (peer->guid == guid)
482                         return peer;
483
484         return NULL;
485 }
486
487 /* caller must hold dev->lock */
488 static struct fwnet_peer *fwnet_peer_find_by_node_id(struct fwnet_device *dev,
489                                                 int node_id, int generation)
490 {
491         struct fwnet_peer *peer;
492
493         list_for_each_entry(peer, &dev->peer_list, peer_link)
494                 if (peer->node_id    == node_id &&
495                     peer->generation == generation)
496                         return peer;
497
498         return NULL;
499 }
500
501 /* See IEEE 1394-2008 table 6-4, table 8-8, table 16-18. */
502 static unsigned fwnet_max_payload(unsigned max_rec, unsigned speed)
503 {
504         max_rec = min(max_rec, speed + 8);
505         max_rec = clamp(max_rec, 8U, 11U); /* 512...4096 */
506
507         return (1 << (max_rec + 1)) - RFC2374_FRAG_HDR_SIZE;
508 }
509
510
511 static int fwnet_finish_incoming_packet(struct net_device *net,
512                                         struct sk_buff *skb, u16 source_node_id,
513                                         bool is_broadcast, u16 ether_type)
514 {
515         struct fwnet_device *dev;
516         static const __be64 broadcast_hw = cpu_to_be64(~0ULL);
517         int status;
518         __be64 guid;
519
520         dev = netdev_priv(net);
521         /* Write metadata, and then pass to the receive level */
522         skb->dev = net;
523         skb->ip_summed = CHECKSUM_NONE;
524
525         /*
526          * Parse the encapsulation header. This actually does the job of
527          * converting to an ethernet frame header, as well as arp
528          * conversion if needed. ARP conversion is easier in this
529          * direction, since we are using ethernet as our backend.
530          */
531         /*
532          * If this is an ARP packet, convert it. First, we want to make
533          * use of some of the fields, since they tell us a little bit
534          * about the sending machine.
535          */
536         if (ether_type == ETH_P_ARP) {
537                 struct rfc2734_arp *arp1394;
538                 struct arphdr *arp;
539                 unsigned char *arp_ptr;
540                 u64 fifo_addr;
541                 u64 peer_guid;
542                 unsigned sspd;
543                 u16 max_payload;
544                 struct fwnet_peer *peer;
545                 unsigned long flags;
546
547                 arp1394   = (struct rfc2734_arp *)skb->data;
548                 arp       = (struct arphdr *)skb->data;
549                 arp_ptr   = (unsigned char *)(arp + 1);
550                 peer_guid = get_unaligned_be64(&arp1394->s_uniq_id);
551                 fifo_addr = (u64)get_unaligned_be16(&arp1394->fifo_hi) << 32
552                                 | get_unaligned_be32(&arp1394->fifo_lo);
553
554                 sspd = arp1394->sspd;
555                 /* Sanity check.  OS X 10.3 PPC reportedly sends 131. */
556                 if (sspd > SCODE_3200) {
557                         dev_notice(&net->dev, "sspd %x out of range\n", sspd);
558                         sspd = SCODE_3200;
559                 }
560                 max_payload = fwnet_max_payload(arp1394->max_rec, sspd);
561
562                 spin_lock_irqsave(&dev->lock, flags);
563                 peer = fwnet_peer_find_by_guid(dev, peer_guid);
564                 if (peer) {
565                         peer->fifo = fifo_addr;
566
567                         if (peer->speed > sspd)
568                                 peer->speed = sspd;
569                         if (peer->max_payload > max_payload)
570                                 peer->max_payload = max_payload;
571
572                         peer->ip = arp1394->sip;
573                 }
574                 spin_unlock_irqrestore(&dev->lock, flags);
575
576                 if (!peer) {
577                         dev_notice(&net->dev,
578                                    "no peer for ARP packet from %016llx\n",
579                                    (unsigned long long)peer_guid);
580                         goto no_peer;
581                 }
582
583                 /*
584                  * Now that we're done with the 1394 specific stuff, we'll
585                  * need to alter some of the data.  Believe it or not, all
586                  * that needs to be done is sender_IP_address needs to be
587                  * moved, the destination hardware address get stuffed
588                  * in and the hardware address length set to 8.
589                  *
590                  * IMPORTANT: The code below overwrites 1394 specific data
591                  * needed above so keep the munging of the data for the
592                  * higher level IP stack last.
593                  */
594
595                 arp->ar_hln = 8;
596                 /* skip over sender unique id */
597                 arp_ptr += arp->ar_hln;
598                 /* move sender IP addr */
599                 put_unaligned(arp1394->sip, (u32 *)arp_ptr);
600                 /* skip over sender IP addr */
601                 arp_ptr += arp->ar_pln;
602
603                 if (arp->ar_op == htons(ARPOP_REQUEST))
604                         memset(arp_ptr, 0, sizeof(u64));
605                 else
606                         memcpy(arp_ptr, net->dev_addr, sizeof(u64));
607         }
608
609         /* Now add the ethernet header. */
610         guid = cpu_to_be64(dev->card->guid);
611         if (dev_hard_header(skb, net, ether_type,
612                            is_broadcast ? &broadcast_hw : &guid,
613                            NULL, skb->len) >= 0) {
614                 struct fwnet_header *eth;
615                 u16 *rawp;
616                 __be16 protocol;
617
618                 skb_reset_mac_header(skb);
619                 skb_pull(skb, sizeof(*eth));
620                 eth = (struct fwnet_header *)skb_mac_header(skb);
621                 if (*eth->h_dest & 1) {
622                         if (memcmp(eth->h_dest, net->broadcast,
623                                    net->addr_len) == 0)
624                                 skb->pkt_type = PACKET_BROADCAST;
625 #if 0
626                         else
627                                 skb->pkt_type = PACKET_MULTICAST;
628 #endif
629                 } else {
630                         if (memcmp(eth->h_dest, net->dev_addr, net->addr_len))
631                                 skb->pkt_type = PACKET_OTHERHOST;
632                 }
633                 if (ntohs(eth->h_proto) >= 1536) {
634                         protocol = eth->h_proto;
635                 } else {
636                         rawp = (u16 *)skb->data;
637                         if (*rawp == 0xffff)
638                                 protocol = htons(ETH_P_802_3);
639                         else
640                                 protocol = htons(ETH_P_802_2);
641                 }
642                 skb->protocol = protocol;
643         }
644         status = netif_rx(skb);
645         if (status == NET_RX_DROP) {
646                 net->stats.rx_errors++;
647                 net->stats.rx_dropped++;
648         } else {
649                 net->stats.rx_packets++;
650                 net->stats.rx_bytes += skb->len;
651         }
652
653         return 0;
654
655  no_peer:
656         net->stats.rx_errors++;
657         net->stats.rx_dropped++;
658
659         dev_kfree_skb_any(skb);
660
661         return -ENOENT;
662 }
663
664 static int fwnet_incoming_packet(struct fwnet_device *dev, __be32 *buf, int len,
665                                  int source_node_id, int generation,
666                                  bool is_broadcast)
667 {
668         struct sk_buff *skb;
669         struct net_device *net = dev->netdev;
670         struct rfc2734_header hdr;
671         unsigned lf;
672         unsigned long flags;
673         struct fwnet_peer *peer;
674         struct fwnet_partial_datagram *pd;
675         int fg_off;
676         int dg_size;
677         u16 datagram_label;
678         int retval;
679         u16 ether_type;
680
681         hdr.w0 = be32_to_cpu(buf[0]);
682         lf = fwnet_get_hdr_lf(&hdr);
683         if (lf == RFC2374_HDR_UNFRAG) {
684                 /*
685                  * An unfragmented datagram has been received by the ieee1394
686                  * bus. Build an skbuff around it so we can pass it to the
687                  * high level network layer.
688                  */
689                 ether_type = fwnet_get_hdr_ether_type(&hdr);
690                 buf++;
691                 len -= RFC2374_UNFRAG_HDR_SIZE;
692
693                 skb = dev_alloc_skb(len + LL_RESERVED_SPACE(net));
694                 if (unlikely(!skb)) {
695                         dev_err(&net->dev, "out of memory\n");
696                         net->stats.rx_dropped++;
697
698                         return -ENOMEM;
699                 }
700                 skb_reserve(skb, LL_RESERVED_SPACE(net));
701                 memcpy(skb_put(skb, len), buf, len);
702
703                 return fwnet_finish_incoming_packet(net, skb, source_node_id,
704                                                     is_broadcast, ether_type);
705         }
706         /* A datagram fragment has been received, now the fun begins. */
707         hdr.w1 = ntohl(buf[1]);
708         buf += 2;
709         len -= RFC2374_FRAG_HDR_SIZE;
710         if (lf == RFC2374_HDR_FIRSTFRAG) {
711                 ether_type = fwnet_get_hdr_ether_type(&hdr);
712                 fg_off = 0;
713         } else {
714                 ether_type = 0;
715                 fg_off = fwnet_get_hdr_fg_off(&hdr);
716         }
717         datagram_label = fwnet_get_hdr_dgl(&hdr);
718         dg_size = fwnet_get_hdr_dg_size(&hdr); /* ??? + 1 */
719
720         spin_lock_irqsave(&dev->lock, flags);
721
722         peer = fwnet_peer_find_by_node_id(dev, source_node_id, generation);
723         if (!peer) {
724                 retval = -ENOENT;
725                 goto fail;
726         }
727
728         pd = fwnet_pd_find(peer, datagram_label);
729         if (pd == NULL) {
730                 while (peer->pdg_size >= FWNET_MAX_FRAGMENTS) {
731                         /* remove the oldest */
732                         fwnet_pd_delete(list_first_entry(&peer->pd_list,
733                                 struct fwnet_partial_datagram, pd_link));
734                         peer->pdg_size--;
735                 }
736                 pd = fwnet_pd_new(net, peer, datagram_label,
737                                   dg_size, buf, fg_off, len);
738                 if (pd == NULL) {
739                         retval = -ENOMEM;
740                         goto fail;
741                 }
742                 peer->pdg_size++;
743         } else {
744                 if (fwnet_frag_overlap(pd, fg_off, len) ||
745                     pd->datagram_size != dg_size) {
746                         /*
747                          * Differing datagram sizes or overlapping fragments,
748                          * discard old datagram and start a new one.
749                          */
750                         fwnet_pd_delete(pd);
751                         pd = fwnet_pd_new(net, peer, datagram_label,
752                                           dg_size, buf, fg_off, len);
753                         if (pd == NULL) {
754                                 peer->pdg_size--;
755                                 retval = -ENOMEM;
756                                 goto fail;
757                         }
758                 } else {
759                         if (!fwnet_pd_update(peer, pd, buf, fg_off, len)) {
760                                 /*
761                                  * Couldn't save off fragment anyway
762                                  * so might as well obliterate the
763                                  * datagram now.
764                                  */
765                                 fwnet_pd_delete(pd);
766                                 peer->pdg_size--;
767                                 retval = -ENOMEM;
768                                 goto fail;
769                         }
770                 }
771         } /* new datagram or add to existing one */
772
773         if (lf == RFC2374_HDR_FIRSTFRAG)
774                 pd->ether_type = ether_type;
775
776         if (fwnet_pd_is_complete(pd)) {
777                 ether_type = pd->ether_type;
778                 peer->pdg_size--;
779                 skb = skb_get(pd->skb);
780                 fwnet_pd_delete(pd);
781
782                 spin_unlock_irqrestore(&dev->lock, flags);
783
784                 return fwnet_finish_incoming_packet(net, skb, source_node_id,
785                                                     false, ether_type);
786         }
787         /*
788          * Datagram is not complete, we're done for the
789          * moment.
790          */
791         retval = 0;
792  fail:
793         spin_unlock_irqrestore(&dev->lock, flags);
794
795         return retval;
796 }
797
798 static void fwnet_receive_packet(struct fw_card *card, struct fw_request *r,
799                 int tcode, int destination, int source, int generation,
800                 unsigned long long offset, void *payload, size_t length,
801                 void *callback_data)
802 {
803         struct fwnet_device *dev = callback_data;
804         int rcode;
805
806         if (destination == IEEE1394_ALL_NODES) {
807                 kfree(r);
808
809                 return;
810         }
811
812         if (offset != dev->handler.offset)
813                 rcode = RCODE_ADDRESS_ERROR;
814         else if (tcode != TCODE_WRITE_BLOCK_REQUEST)
815                 rcode = RCODE_TYPE_ERROR;
816         else if (fwnet_incoming_packet(dev, payload, length,
817                                        source, generation, false) != 0) {
818                 dev_err(&dev->netdev->dev, "incoming packet failure\n");
819                 rcode = RCODE_CONFLICT_ERROR;
820         } else
821                 rcode = RCODE_COMPLETE;
822
823         fw_send_response(card, r, rcode);
824 }
825
826 static void fwnet_receive_broadcast(struct fw_iso_context *context,
827                 u32 cycle, size_t header_length, void *header, void *data)
828 {
829         struct fwnet_device *dev;
830         struct fw_iso_packet packet;
831         __be16 *hdr_ptr;
832         __be32 *buf_ptr;
833         int retval;
834         u32 length;
835         u16 source_node_id;
836         u32 specifier_id;
837         u32 ver;
838         unsigned long offset;
839         unsigned long flags;
840
841         dev = data;
842         hdr_ptr = header;
843         length = be16_to_cpup(hdr_ptr);
844
845         spin_lock_irqsave(&dev->lock, flags);
846
847         offset = dev->rcv_buffer_size * dev->broadcast_rcv_next_ptr;
848         buf_ptr = dev->broadcast_rcv_buffer_ptrs[dev->broadcast_rcv_next_ptr++];
849         if (dev->broadcast_rcv_next_ptr == dev->num_broadcast_rcv_ptrs)
850                 dev->broadcast_rcv_next_ptr = 0;
851
852         spin_unlock_irqrestore(&dev->lock, flags);
853
854         specifier_id =    (be32_to_cpu(buf_ptr[0]) & 0xffff) << 8
855                         | (be32_to_cpu(buf_ptr[1]) & 0xff000000) >> 24;
856         ver = be32_to_cpu(buf_ptr[1]) & 0xffffff;
857         source_node_id = be32_to_cpu(buf_ptr[0]) >> 16;
858
859         if (specifier_id == IANA_SPECIFIER_ID && ver == RFC2734_SW_VERSION) {
860                 buf_ptr += 2;
861                 length -= IEEE1394_GASP_HDR_SIZE;
862                 fwnet_incoming_packet(dev, buf_ptr, length, source_node_id,
863                                       context->card->generation, true);
864         }
865
866         packet.payload_length = dev->rcv_buffer_size;
867         packet.interrupt = 1;
868         packet.skip = 0;
869         packet.tag = 3;
870         packet.sy = 0;
871         packet.header_length = IEEE1394_GASP_HDR_SIZE;
872
873         spin_lock_irqsave(&dev->lock, flags);
874
875         retval = fw_iso_context_queue(dev->broadcast_rcv_context, &packet,
876                                       &dev->broadcast_rcv_buffer, offset);
877
878         spin_unlock_irqrestore(&dev->lock, flags);
879
880         if (retval >= 0)
881                 fw_iso_context_queue_flush(dev->broadcast_rcv_context);
882         else
883                 dev_err(&dev->netdev->dev, "requeue failed\n");
884 }
885
886 static struct kmem_cache *fwnet_packet_task_cache;
887
888 static void fwnet_free_ptask(struct fwnet_packet_task *ptask)
889 {
890         dev_kfree_skb_any(ptask->skb);
891         kmem_cache_free(fwnet_packet_task_cache, ptask);
892 }
893
894 /* Caller must hold dev->lock. */
895 static void dec_queued_datagrams(struct fwnet_device *dev)
896 {
897         if (--dev->queued_datagrams == FWNET_MIN_QUEUED_DATAGRAMS)
898                 netif_wake_queue(dev->netdev);
899 }
900
901 static int fwnet_send_packet(struct fwnet_packet_task *ptask);
902
903 static void fwnet_transmit_packet_done(struct fwnet_packet_task *ptask)
904 {
905         struct fwnet_device *dev = ptask->dev;
906         struct sk_buff *skb = ptask->skb;
907         unsigned long flags;
908         bool free;
909
910         spin_lock_irqsave(&dev->lock, flags);
911
912         ptask->outstanding_pkts--;
913
914         /* Check whether we or the networking TX soft-IRQ is last user. */
915         free = (ptask->outstanding_pkts == 0 && ptask->enqueued);
916         if (free)
917                 dec_queued_datagrams(dev);
918
919         if (ptask->outstanding_pkts == 0) {
920                 dev->netdev->stats.tx_packets++;
921                 dev->netdev->stats.tx_bytes += skb->len;
922         }
923
924         spin_unlock_irqrestore(&dev->lock, flags);
925
926         if (ptask->outstanding_pkts > 0) {
927                 u16 dg_size;
928                 u16 fg_off;
929                 u16 datagram_label;
930                 u16 lf;
931
932                 /* Update the ptask to point to the next fragment and send it */
933                 lf = fwnet_get_hdr_lf(&ptask->hdr);
934                 switch (lf) {
935                 case RFC2374_HDR_LASTFRAG:
936                 case RFC2374_HDR_UNFRAG:
937                 default:
938                         dev_err(&dev->netdev->dev,
939                                 "outstanding packet %x lf %x, header %x,%x\n",
940                                 ptask->outstanding_pkts, lf, ptask->hdr.w0,
941                                 ptask->hdr.w1);
942                         BUG();
943
944                 case RFC2374_HDR_FIRSTFRAG:
945                         /* Set frag type here for future interior fragments */
946                         dg_size = fwnet_get_hdr_dg_size(&ptask->hdr);
947                         fg_off = ptask->max_payload - RFC2374_FRAG_HDR_SIZE;
948                         datagram_label = fwnet_get_hdr_dgl(&ptask->hdr);
949                         break;
950
951                 case RFC2374_HDR_INTFRAG:
952                         dg_size = fwnet_get_hdr_dg_size(&ptask->hdr);
953                         fg_off = fwnet_get_hdr_fg_off(&ptask->hdr)
954                                   + ptask->max_payload - RFC2374_FRAG_HDR_SIZE;
955                         datagram_label = fwnet_get_hdr_dgl(&ptask->hdr);
956                         break;
957                 }
958
959                 if (ptask->dest_node == IEEE1394_ALL_NODES) {
960                         skb_pull(skb,
961                                  ptask->max_payload + IEEE1394_GASP_HDR_SIZE);
962                 } else {
963                         skb_pull(skb, ptask->max_payload);
964                 }
965                 if (ptask->outstanding_pkts > 1) {
966                         fwnet_make_sf_hdr(&ptask->hdr, RFC2374_HDR_INTFRAG,
967                                           dg_size, fg_off, datagram_label);
968                 } else {
969                         fwnet_make_sf_hdr(&ptask->hdr, RFC2374_HDR_LASTFRAG,
970                                           dg_size, fg_off, datagram_label);
971                         ptask->max_payload = skb->len + RFC2374_FRAG_HDR_SIZE;
972                 }
973                 fwnet_send_packet(ptask);
974         }
975
976         if (free)
977                 fwnet_free_ptask(ptask);
978 }
979
980 static void fwnet_transmit_packet_failed(struct fwnet_packet_task *ptask)
981 {
982         struct fwnet_device *dev = ptask->dev;
983         unsigned long flags;
984         bool free;
985
986         spin_lock_irqsave(&dev->lock, flags);
987
988         /* One fragment failed; don't try to send remaining fragments. */
989         ptask->outstanding_pkts = 0;
990
991         /* Check whether we or the networking TX soft-IRQ is last user. */
992         free = ptask->enqueued;
993         if (free)
994                 dec_queued_datagrams(dev);
995
996         dev->netdev->stats.tx_dropped++;
997         dev->netdev->stats.tx_errors++;
998
999         spin_unlock_irqrestore(&dev->lock, flags);
1000
1001         if (free)
1002                 fwnet_free_ptask(ptask);
1003 }
1004
1005 static void fwnet_write_complete(struct fw_card *card, int rcode,
1006                                  void *payload, size_t length, void *data)
1007 {
1008         struct fwnet_packet_task *ptask = data;
1009         static unsigned long j;
1010         static int last_rcode, errors_skipped;
1011
1012         if (rcode == RCODE_COMPLETE) {
1013                 fwnet_transmit_packet_done(ptask);
1014         } else {
1015                 fwnet_transmit_packet_failed(ptask);
1016
1017                 if (printk_timed_ratelimit(&j,  1000) || rcode != last_rcode) {
1018                         dev_err(&ptask->dev->netdev->dev,
1019                                 "fwnet_write_complete failed: %x (skipped %d)\n",
1020                                 rcode, errors_skipped);
1021
1022                         errors_skipped = 0;
1023                         last_rcode = rcode;
1024                 } else
1025                         errors_skipped++;
1026         }
1027 }
1028
1029 static int fwnet_send_packet(struct fwnet_packet_task *ptask)
1030 {
1031         struct fwnet_device *dev;
1032         unsigned tx_len;
1033         struct rfc2734_header *bufhdr;
1034         unsigned long flags;
1035         bool free;
1036
1037         dev = ptask->dev;
1038         tx_len = ptask->max_payload;
1039         switch (fwnet_get_hdr_lf(&ptask->hdr)) {
1040         case RFC2374_HDR_UNFRAG:
1041                 bufhdr = (struct rfc2734_header *)
1042                                 skb_push(ptask->skb, RFC2374_UNFRAG_HDR_SIZE);
1043                 put_unaligned_be32(ptask->hdr.w0, &bufhdr->w0);
1044                 break;
1045
1046         case RFC2374_HDR_FIRSTFRAG:
1047         case RFC2374_HDR_INTFRAG:
1048         case RFC2374_HDR_LASTFRAG:
1049                 bufhdr = (struct rfc2734_header *)
1050                                 skb_push(ptask->skb, RFC2374_FRAG_HDR_SIZE);
1051                 put_unaligned_be32(ptask->hdr.w0, &bufhdr->w0);
1052                 put_unaligned_be32(ptask->hdr.w1, &bufhdr->w1);
1053                 break;
1054
1055         default:
1056                 BUG();
1057         }
1058         if (ptask->dest_node == IEEE1394_ALL_NODES) {
1059                 u8 *p;
1060                 int generation;
1061                 int node_id;
1062
1063                 /* ptask->generation may not have been set yet */
1064                 generation = dev->card->generation;
1065                 smp_rmb();
1066                 node_id = dev->card->node_id;
1067
1068                 p = skb_push(ptask->skb, IEEE1394_GASP_HDR_SIZE);
1069                 put_unaligned_be32(node_id << 16 | IANA_SPECIFIER_ID >> 8, p);
1070                 put_unaligned_be32((IANA_SPECIFIER_ID & 0xff) << 24
1071                                                 | RFC2734_SW_VERSION, &p[4]);
1072
1073                 /* We should not transmit if broadcast_channel.valid == 0. */
1074                 fw_send_request(dev->card, &ptask->transaction,
1075                                 TCODE_STREAM_DATA,
1076                                 fw_stream_packet_destination_id(3,
1077                                                 IEEE1394_BROADCAST_CHANNEL, 0),
1078                                 generation, SCODE_100, 0ULL, ptask->skb->data,
1079                                 tx_len + 8, fwnet_write_complete, ptask);
1080
1081                 spin_lock_irqsave(&dev->lock, flags);
1082
1083                 /* If the AT tasklet already ran, we may be last user. */
1084                 free = (ptask->outstanding_pkts == 0 && !ptask->enqueued);
1085                 if (!free)
1086                         ptask->enqueued = true;
1087                 else
1088                         dec_queued_datagrams(dev);
1089
1090                 spin_unlock_irqrestore(&dev->lock, flags);
1091
1092                 goto out;
1093         }
1094
1095         fw_send_request(dev->card, &ptask->transaction,
1096                         TCODE_WRITE_BLOCK_REQUEST, ptask->dest_node,
1097                         ptask->generation, ptask->speed, ptask->fifo_addr,
1098                         ptask->skb->data, tx_len, fwnet_write_complete, ptask);
1099
1100         spin_lock_irqsave(&dev->lock, flags);
1101
1102         /* If the AT tasklet already ran, we may be last user. */
1103         free = (ptask->outstanding_pkts == 0 && !ptask->enqueued);
1104         if (!free)
1105                 ptask->enqueued = true;
1106         else
1107                 dec_queued_datagrams(dev);
1108
1109         spin_unlock_irqrestore(&dev->lock, flags);
1110
1111         dev->netdev->trans_start = jiffies;
1112  out:
1113         if (free)
1114                 fwnet_free_ptask(ptask);
1115
1116         return 0;
1117 }
1118
1119 static void fwnet_fifo_stop(struct fwnet_device *dev)
1120 {
1121         if (dev->local_fifo == FWNET_NO_FIFO_ADDR)
1122                 return;
1123
1124         fw_core_remove_address_handler(&dev->handler);
1125         dev->local_fifo = FWNET_NO_FIFO_ADDR;
1126 }
1127
1128 static int fwnet_fifo_start(struct fwnet_device *dev)
1129 {
1130         int retval;
1131
1132         if (dev->local_fifo != FWNET_NO_FIFO_ADDR)
1133                 return 0;
1134
1135         dev->handler.length = 4096;
1136         dev->handler.address_callback = fwnet_receive_packet;
1137         dev->handler.callback_data = dev;
1138
1139         retval = fw_core_add_address_handler(&dev->handler,
1140                                              &fw_high_memory_region);
1141         if (retval < 0)
1142                 return retval;
1143
1144         dev->local_fifo = dev->handler.offset;
1145
1146         return 0;
1147 }
1148
1149 static int fwnet_broadcast_start(struct fwnet_device *dev)
1150 {
1151         struct fw_iso_context *context;
1152         int retval;
1153         unsigned num_packets;
1154         unsigned max_receive;
1155         struct fw_iso_packet packet;
1156         unsigned long offset;
1157         unsigned u;
1158
1159         if (dev->broadcast_state != FWNET_BROADCAST_ERROR)
1160                 return 0;
1161
1162         max_receive = 1U << (dev->card->max_receive + 1);
1163         num_packets = (FWNET_ISO_PAGE_COUNT * PAGE_SIZE) / max_receive;
1164
1165         if (!dev->broadcast_rcv_context) {
1166                 void **ptrptr;
1167
1168                 context = fw_iso_context_create(dev->card,
1169                     FW_ISO_CONTEXT_RECEIVE, IEEE1394_BROADCAST_CHANNEL,
1170                     dev->card->link_speed, 8, fwnet_receive_broadcast, dev);
1171                 if (IS_ERR(context)) {
1172                         retval = PTR_ERR(context);
1173                         goto failed_context_create;
1174                 }
1175
1176                 retval = fw_iso_buffer_init(&dev->broadcast_rcv_buffer,
1177                     dev->card, FWNET_ISO_PAGE_COUNT, DMA_FROM_DEVICE);
1178                 if (retval < 0)
1179                         goto failed_buffer_init;
1180
1181                 ptrptr = kmalloc(sizeof(void *) * num_packets, GFP_KERNEL);
1182                 if (!ptrptr) {
1183                         retval = -ENOMEM;
1184                         goto failed_ptrs_alloc;
1185                 }
1186
1187                 dev->broadcast_rcv_buffer_ptrs = ptrptr;
1188                 for (u = 0; u < FWNET_ISO_PAGE_COUNT; u++) {
1189                         void *ptr;
1190                         unsigned v;
1191
1192                         ptr = kmap(dev->broadcast_rcv_buffer.pages[u]);
1193                         for (v = 0; v < num_packets / FWNET_ISO_PAGE_COUNT; v++)
1194                                 *ptrptr++ = (void *)
1195                                                 ((char *)ptr + v * max_receive);
1196                 }
1197                 dev->broadcast_rcv_context = context;
1198         } else {
1199                 context = dev->broadcast_rcv_context;
1200         }
1201
1202         packet.payload_length = max_receive;
1203         packet.interrupt = 1;
1204         packet.skip = 0;
1205         packet.tag = 3;
1206         packet.sy = 0;
1207         packet.header_length = IEEE1394_GASP_HDR_SIZE;
1208         offset = 0;
1209
1210         for (u = 0; u < num_packets; u++) {
1211                 retval = fw_iso_context_queue(context, &packet,
1212                                 &dev->broadcast_rcv_buffer, offset);
1213                 if (retval < 0)
1214                         goto failed_rcv_queue;
1215
1216                 offset += max_receive;
1217         }
1218         dev->num_broadcast_rcv_ptrs = num_packets;
1219         dev->rcv_buffer_size = max_receive;
1220         dev->broadcast_rcv_next_ptr = 0U;
1221         retval = fw_iso_context_start(context, -1, 0,
1222                         FW_ISO_CONTEXT_MATCH_ALL_TAGS); /* ??? sync */
1223         if (retval < 0)
1224                 goto failed_rcv_queue;
1225
1226         /* FIXME: adjust it according to the min. speed of all known peers? */
1227         dev->broadcast_xmt_max_payload = IEEE1394_MAX_PAYLOAD_S100
1228                         - IEEE1394_GASP_HDR_SIZE - RFC2374_UNFRAG_HDR_SIZE;
1229         dev->broadcast_state = FWNET_BROADCAST_RUNNING;
1230
1231         return 0;
1232
1233  failed_rcv_queue:
1234         kfree(dev->broadcast_rcv_buffer_ptrs);
1235         dev->broadcast_rcv_buffer_ptrs = NULL;
1236  failed_ptrs_alloc:
1237         fw_iso_buffer_destroy(&dev->broadcast_rcv_buffer, dev->card);
1238  failed_buffer_init:
1239         fw_iso_context_destroy(context);
1240         dev->broadcast_rcv_context = NULL;
1241  failed_context_create:
1242
1243         return retval;
1244 }
1245
1246 static void set_carrier_state(struct fwnet_device *dev)
1247 {
1248         if (dev->peer_count > 1)
1249                 netif_carrier_on(dev->netdev);
1250         else
1251                 netif_carrier_off(dev->netdev);
1252 }
1253
1254 /* ifup */
1255 static int fwnet_open(struct net_device *net)
1256 {
1257         struct fwnet_device *dev = netdev_priv(net);
1258         int ret;
1259
1260         ret = fwnet_fifo_start(dev);
1261         if (ret)
1262                 return ret;
1263
1264         ret = fwnet_broadcast_start(dev);
1265         if (ret)
1266                 goto out;
1267
1268         netif_start_queue(net);
1269
1270         spin_lock_irq(&dev->lock);
1271         set_carrier_state(dev);
1272         spin_unlock_irq(&dev->lock);
1273
1274         return 0;
1275 out:
1276         fwnet_fifo_stop(dev);
1277         return ret;
1278 }
1279
1280 /* ifdown */
1281 static int fwnet_stop(struct net_device *net)
1282 {
1283         netif_stop_queue(net);
1284
1285         /* Deallocate iso context for use by other applications? */
1286
1287         return 0;
1288 }
1289
1290 static netdev_tx_t fwnet_tx(struct sk_buff *skb, struct net_device *net)
1291 {
1292         struct fwnet_header hdr_buf;
1293         struct fwnet_device *dev = netdev_priv(net);
1294         __be16 proto;
1295         u16 dest_node;
1296         unsigned max_payload;
1297         u16 dg_size;
1298         u16 *datagram_label_ptr;
1299         struct fwnet_packet_task *ptask;
1300         struct fwnet_peer *peer;
1301         unsigned long flags;
1302
1303         spin_lock_irqsave(&dev->lock, flags);
1304
1305         /* Can this happen? */
1306         if (netif_queue_stopped(dev->netdev)) {
1307                 spin_unlock_irqrestore(&dev->lock, flags);
1308
1309                 return NETDEV_TX_BUSY;
1310         }
1311
1312         ptask = kmem_cache_alloc(fwnet_packet_task_cache, GFP_ATOMIC);
1313         if (ptask == NULL)
1314                 goto fail;
1315
1316         skb = skb_share_check(skb, GFP_ATOMIC);
1317         if (!skb)
1318                 goto fail;
1319
1320         /*
1321          * Make a copy of the driver-specific header.
1322          * We might need to rebuild the header on tx failure.
1323          */
1324         memcpy(&hdr_buf, skb->data, sizeof(hdr_buf));
1325         skb_pull(skb, sizeof(hdr_buf));
1326
1327         proto = hdr_buf.h_proto;
1328         dg_size = skb->len;
1329
1330         /*
1331          * Set the transmission type for the packet.  ARP packets and IP
1332          * broadcast packets are sent via GASP.
1333          */
1334         if (memcmp(hdr_buf.h_dest, net->broadcast, FWNET_ALEN) == 0
1335             || proto == htons(ETH_P_ARP)
1336             || (proto == htons(ETH_P_IP)
1337                 && IN_MULTICAST(ntohl(ip_hdr(skb)->daddr)))) {
1338                 max_payload        = dev->broadcast_xmt_max_payload;
1339                 datagram_label_ptr = &dev->broadcast_xmt_datagramlabel;
1340
1341                 ptask->fifo_addr   = FWNET_NO_FIFO_ADDR;
1342                 ptask->generation  = 0;
1343                 ptask->dest_node   = IEEE1394_ALL_NODES;
1344                 ptask->speed       = SCODE_100;
1345         } else {
1346                 __be64 guid = get_unaligned((__be64 *)hdr_buf.h_dest);
1347                 u8 generation;
1348
1349                 peer = fwnet_peer_find_by_guid(dev, be64_to_cpu(guid));
1350                 if (!peer || peer->fifo == FWNET_NO_FIFO_ADDR)
1351                         goto fail;
1352
1353                 generation         = peer->generation;
1354                 dest_node          = peer->node_id;
1355                 max_payload        = peer->max_payload;
1356                 datagram_label_ptr = &peer->datagram_label;
1357
1358                 ptask->fifo_addr   = peer->fifo;
1359                 ptask->generation  = generation;
1360                 ptask->dest_node   = dest_node;
1361                 ptask->speed       = peer->speed;
1362         }
1363
1364         /* If this is an ARP packet, convert it */
1365         if (proto == htons(ETH_P_ARP)) {
1366                 struct arphdr *arp = (struct arphdr *)skb->data;
1367                 unsigned char *arp_ptr = (unsigned char *)(arp + 1);
1368                 struct rfc2734_arp *arp1394 = (struct rfc2734_arp *)skb->data;
1369                 __be32 ipaddr;
1370
1371                 ipaddr = get_unaligned((__be32 *)(arp_ptr + FWNET_ALEN));
1372
1373                 arp1394->hw_addr_len    = RFC2734_HW_ADDR_LEN;
1374                 arp1394->max_rec        = dev->card->max_receive;
1375                 arp1394->sspd           = dev->card->link_speed;
1376
1377                 put_unaligned_be16(dev->local_fifo >> 32,
1378                                    &arp1394->fifo_hi);
1379                 put_unaligned_be32(dev->local_fifo & 0xffffffff,
1380                                    &arp1394->fifo_lo);
1381                 put_unaligned(ipaddr, &arp1394->sip);
1382         }
1383
1384         ptask->hdr.w0 = 0;
1385         ptask->hdr.w1 = 0;
1386         ptask->skb = skb;
1387         ptask->dev = dev;
1388
1389         /* Does it all fit in one packet? */
1390         if (dg_size <= max_payload) {
1391                 fwnet_make_uf_hdr(&ptask->hdr, ntohs(proto));
1392                 ptask->outstanding_pkts = 1;
1393                 max_payload = dg_size + RFC2374_UNFRAG_HDR_SIZE;
1394         } else {
1395                 u16 datagram_label;
1396
1397                 max_payload -= RFC2374_FRAG_OVERHEAD;
1398                 datagram_label = (*datagram_label_ptr)++;
1399                 fwnet_make_ff_hdr(&ptask->hdr, ntohs(proto), dg_size,
1400                                   datagram_label);
1401                 ptask->outstanding_pkts = DIV_ROUND_UP(dg_size, max_payload);
1402                 max_payload += RFC2374_FRAG_HDR_SIZE;
1403         }
1404
1405         if (++dev->queued_datagrams == FWNET_MAX_QUEUED_DATAGRAMS)
1406                 netif_stop_queue(dev->netdev);
1407
1408         spin_unlock_irqrestore(&dev->lock, flags);
1409
1410         ptask->max_payload = max_payload;
1411         ptask->enqueued    = 0;
1412
1413         fwnet_send_packet(ptask);
1414
1415         return NETDEV_TX_OK;
1416
1417  fail:
1418         spin_unlock_irqrestore(&dev->lock, flags);
1419
1420         if (ptask)
1421                 kmem_cache_free(fwnet_packet_task_cache, ptask);
1422
1423         if (skb != NULL)
1424                 dev_kfree_skb(skb);
1425
1426         net->stats.tx_dropped++;
1427         net->stats.tx_errors++;
1428
1429         /*
1430          * FIXME: According to a patch from 2003-02-26, "returning non-zero
1431          * causes serious problems" here, allegedly.  Before that patch,
1432          * -ERRNO was returned which is not appropriate under Linux 2.6.
1433          * Perhaps more needs to be done?  Stop the queue in serious
1434          * conditions and restart it elsewhere?
1435          */
1436         return NETDEV_TX_OK;
1437 }
1438
1439 static int fwnet_change_mtu(struct net_device *net, int new_mtu)
1440 {
1441         if (new_mtu < 68)
1442                 return -EINVAL;
1443
1444         net->mtu = new_mtu;
1445         return 0;
1446 }
1447
1448 static const struct ethtool_ops fwnet_ethtool_ops = {
1449         .get_link       = ethtool_op_get_link,
1450 };
1451
1452 static const struct net_device_ops fwnet_netdev_ops = {
1453         .ndo_open       = fwnet_open,
1454         .ndo_stop       = fwnet_stop,
1455         .ndo_start_xmit = fwnet_tx,
1456         .ndo_change_mtu = fwnet_change_mtu,
1457 };
1458
1459 static void fwnet_init_dev(struct net_device *net)
1460 {
1461         net->header_ops         = &fwnet_header_ops;
1462         net->netdev_ops         = &fwnet_netdev_ops;
1463         net->watchdog_timeo     = 2 * HZ;
1464         net->flags              = IFF_BROADCAST | IFF_MULTICAST;
1465         net->features           = NETIF_F_HIGHDMA;
1466         net->addr_len           = FWNET_ALEN;
1467         net->hard_header_len    = FWNET_HLEN;
1468         net->type               = ARPHRD_IEEE1394;
1469         net->tx_queue_len       = FWNET_TX_QUEUE_LEN;
1470         net->ethtool_ops        = &fwnet_ethtool_ops;
1471 }
1472
1473 /* caller must hold fwnet_device_mutex */
1474 static struct fwnet_device *fwnet_dev_find(struct fw_card *card)
1475 {
1476         struct fwnet_device *dev;
1477
1478         list_for_each_entry(dev, &fwnet_device_list, dev_link)
1479                 if (dev->card == card)
1480                         return dev;
1481
1482         return NULL;
1483 }
1484
1485 static int fwnet_add_peer(struct fwnet_device *dev,
1486                           struct fw_unit *unit, struct fw_device *device)
1487 {
1488         struct fwnet_peer *peer;
1489
1490         peer = kmalloc(sizeof(*peer), GFP_KERNEL);
1491         if (!peer)
1492                 return -ENOMEM;
1493
1494         dev_set_drvdata(&unit->device, peer);
1495
1496         peer->dev = dev;
1497         peer->guid = (u64)device->config_rom[3] << 32 | device->config_rom[4];
1498         peer->fifo = FWNET_NO_FIFO_ADDR;
1499         peer->ip = 0;
1500         INIT_LIST_HEAD(&peer->pd_list);
1501         peer->pdg_size = 0;
1502         peer->datagram_label = 0;
1503         peer->speed = device->max_speed;
1504         peer->max_payload = fwnet_max_payload(device->max_rec, peer->speed);
1505
1506         peer->generation = device->generation;
1507         smp_rmb();
1508         peer->node_id = device->node_id;
1509
1510         spin_lock_irq(&dev->lock);
1511         list_add_tail(&peer->peer_link, &dev->peer_list);
1512         dev->peer_count++;
1513         set_carrier_state(dev);
1514         spin_unlock_irq(&dev->lock);
1515
1516         return 0;
1517 }
1518
1519 static int fwnet_probe(struct device *_dev)
1520 {
1521         struct fw_unit *unit = fw_unit(_dev);
1522         struct fw_device *device = fw_parent_device(unit);
1523         struct fw_card *card = device->card;
1524         struct net_device *net;
1525         bool allocated_netdev = false;
1526         struct fwnet_device *dev;
1527         unsigned max_mtu;
1528         int ret;
1529
1530         mutex_lock(&fwnet_device_mutex);
1531
1532         dev = fwnet_dev_find(card);
1533         if (dev) {
1534                 net = dev->netdev;
1535                 goto have_dev;
1536         }
1537
1538         net = alloc_netdev(sizeof(*dev), "firewire%d", fwnet_init_dev);
1539         if (net == NULL) {
1540                 ret = -ENOMEM;
1541                 goto out;
1542         }
1543
1544         allocated_netdev = true;
1545         SET_NETDEV_DEV(net, card->device);
1546         dev = netdev_priv(net);
1547
1548         spin_lock_init(&dev->lock);
1549         dev->broadcast_state = FWNET_BROADCAST_ERROR;
1550         dev->broadcast_rcv_context = NULL;
1551         dev->broadcast_xmt_max_payload = 0;
1552         dev->broadcast_xmt_datagramlabel = 0;
1553         dev->local_fifo = FWNET_NO_FIFO_ADDR;
1554         dev->queued_datagrams = 0;
1555         INIT_LIST_HEAD(&dev->peer_list);
1556         dev->card = card;
1557         dev->netdev = net;
1558
1559         /*
1560          * Use the RFC 2734 default 1500 octets or the maximum payload
1561          * as initial MTU
1562          */
1563         max_mtu = (1 << (card->max_receive + 1))
1564                   - sizeof(struct rfc2734_header) - IEEE1394_GASP_HDR_SIZE;
1565         net->mtu = min(1500U, max_mtu);
1566
1567         /* Set our hardware address while we're at it */
1568         put_unaligned_be64(card->guid, net->dev_addr);
1569         put_unaligned_be64(~0ULL, net->broadcast);
1570         ret = register_netdev(net);
1571         if (ret)
1572                 goto out;
1573
1574         list_add_tail(&dev->dev_link, &fwnet_device_list);
1575         dev_notice(&net->dev, "IPv4 over IEEE 1394 on card %s\n",
1576                    dev_name(card->device));
1577  have_dev:
1578         ret = fwnet_add_peer(dev, unit, device);
1579         if (ret && allocated_netdev) {
1580                 unregister_netdev(net);
1581                 list_del(&dev->dev_link);
1582         }
1583  out:
1584         if (ret && allocated_netdev)
1585                 free_netdev(net);
1586
1587         mutex_unlock(&fwnet_device_mutex);
1588
1589         return ret;
1590 }
1591
1592 static void fwnet_remove_peer(struct fwnet_peer *peer, struct fwnet_device *dev)
1593 {
1594         struct fwnet_partial_datagram *pd, *pd_next;
1595
1596         spin_lock_irq(&dev->lock);
1597         list_del(&peer->peer_link);
1598         dev->peer_count--;
1599         set_carrier_state(dev);
1600         spin_unlock_irq(&dev->lock);
1601
1602         list_for_each_entry_safe(pd, pd_next, &peer->pd_list, pd_link)
1603                 fwnet_pd_delete(pd);
1604
1605         kfree(peer);
1606 }
1607
1608 static int fwnet_remove(struct device *_dev)
1609 {
1610         struct fwnet_peer *peer = dev_get_drvdata(_dev);
1611         struct fwnet_device *dev = peer->dev;
1612         struct net_device *net;
1613         int i;
1614
1615         mutex_lock(&fwnet_device_mutex);
1616
1617         net = dev->netdev;
1618         if (net && peer->ip)
1619                 arp_invalidate(net, peer->ip);
1620
1621         fwnet_remove_peer(peer, dev);
1622
1623         if (list_empty(&dev->peer_list)) {
1624                 unregister_netdev(net);
1625
1626                 fwnet_fifo_stop(dev);
1627                 if (dev->broadcast_rcv_context) {
1628                         fw_iso_context_stop(dev->broadcast_rcv_context);
1629                         kfree(dev->broadcast_rcv_buffer_ptrs);
1630                         dev->broadcast_rcv_buffer_ptrs = NULL;
1631                         fw_iso_buffer_destroy(&dev->broadcast_rcv_buffer,
1632                                               dev->card);
1633                         fw_iso_context_destroy(dev->broadcast_rcv_context);
1634                 }
1635                 for (i = 0; dev->queued_datagrams && i < 5; i++)
1636                         ssleep(1);
1637                 WARN_ON(dev->queued_datagrams);
1638                 list_del(&dev->dev_link);
1639
1640                 free_netdev(net);
1641         }
1642
1643         mutex_unlock(&fwnet_device_mutex);
1644
1645         return 0;
1646 }
1647
1648 /*
1649  * FIXME abort partially sent fragmented datagrams,
1650  * discard partially received fragmented datagrams
1651  */
1652 static void fwnet_update(struct fw_unit *unit)
1653 {
1654         struct fw_device *device = fw_parent_device(unit);
1655         struct fwnet_peer *peer = dev_get_drvdata(&unit->device);
1656         int generation;
1657
1658         generation = device->generation;
1659
1660         spin_lock_irq(&peer->dev->lock);
1661         peer->node_id    = device->node_id;
1662         peer->generation = generation;
1663         spin_unlock_irq(&peer->dev->lock);
1664 }
1665
1666 static const struct ieee1394_device_id fwnet_id_table[] = {
1667         {
1668                 .match_flags  = IEEE1394_MATCH_SPECIFIER_ID |
1669                                 IEEE1394_MATCH_VERSION,
1670                 .specifier_id = IANA_SPECIFIER_ID,
1671                 .version      = RFC2734_SW_VERSION,
1672         },
1673         { }
1674 };
1675
1676 static struct fw_driver fwnet_driver = {
1677         .driver = {
1678                 .owner  = THIS_MODULE,
1679                 .name   = KBUILD_MODNAME,
1680                 .bus    = &fw_bus_type,
1681                 .probe  = fwnet_probe,
1682                 .remove = fwnet_remove,
1683         },
1684         .update   = fwnet_update,
1685         .id_table = fwnet_id_table,
1686 };
1687
1688 static const u32 rfc2374_unit_directory_data[] = {
1689         0x00040000,     /* directory_length             */
1690         0x1200005e,     /* unit_specifier_id: IANA      */
1691         0x81000003,     /* textual descriptor offset    */
1692         0x13000001,     /* unit_sw_version: RFC 2734    */
1693         0x81000005,     /* textual descriptor offset    */
1694         0x00030000,     /* descriptor_length            */
1695         0x00000000,     /* text                         */
1696         0x00000000,     /* minimal ASCII, en            */
1697         0x49414e41,     /* I A N A                      */
1698         0x00030000,     /* descriptor_length            */
1699         0x00000000,     /* text                         */
1700         0x00000000,     /* minimal ASCII, en            */
1701         0x49507634,     /* I P v 4                      */
1702 };
1703
1704 static struct fw_descriptor rfc2374_unit_directory = {
1705         .length = ARRAY_SIZE(rfc2374_unit_directory_data),
1706         .key    = (CSR_DIRECTORY | CSR_UNIT) << 24,
1707         .data   = rfc2374_unit_directory_data
1708 };
1709
1710 static int __init fwnet_init(void)
1711 {
1712         int err;
1713
1714         err = fw_core_add_descriptor(&rfc2374_unit_directory);
1715         if (err)
1716                 return err;
1717
1718         fwnet_packet_task_cache = kmem_cache_create("packet_task",
1719                         sizeof(struct fwnet_packet_task), 0, 0, NULL);
1720         if (!fwnet_packet_task_cache) {
1721                 err = -ENOMEM;
1722                 goto out;
1723         }
1724
1725         err = driver_register(&fwnet_driver.driver);
1726         if (!err)
1727                 return 0;
1728
1729         kmem_cache_destroy(fwnet_packet_task_cache);
1730 out:
1731         fw_core_remove_descriptor(&rfc2374_unit_directory);
1732
1733         return err;
1734 }
1735 module_init(fwnet_init);
1736
1737 static void __exit fwnet_cleanup(void)
1738 {
1739         driver_unregister(&fwnet_driver.driver);
1740         kmem_cache_destroy(fwnet_packet_task_cache);
1741         fw_core_remove_descriptor(&rfc2374_unit_directory);
1742 }
1743 module_exit(fwnet_cleanup);
1744
1745 MODULE_AUTHOR("Jay Fenlason <fenlason@redhat.com>");
1746 MODULE_DESCRIPTION("IPv4 over IEEE1394 as per RFC 2734");
1747 MODULE_LICENSE("GPL");
1748 MODULE_DEVICE_TABLE(ieee1394, fwnet_id_table);