6lowpan: fix first fragment (FRAG1) handling
[firefly-linux-kernel-4.4.55.git] / net / ieee802154 / 6lowpan.c
1 /*
2  * Copyright 2011, Siemens AG
3  * written by Alexander Smirnov <alex.bluesman.smirnov@gmail.com>
4  */
5
6 /*
7  * Based on patches from Jon Smirl <jonsmirl@gmail.com>
8  * Copyright (c) 2011 Jon Smirl <jonsmirl@gmail.com>
9  *
10  * This program is free software; you can redistribute it and/or modify
11  * it under the terms of the GNU General Public License version 2
12  * as published by the Free Software Foundation.
13  *
14  * This program is distributed in the hope that it will be useful,
15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17  * GNU General Public License for more details.
18  *
19  * You should have received a copy of the GNU General Public License along
20  * with this program; if not, write to the Free Software Foundation, Inc.,
21  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
22  */
23
24 /* Jon's code is based on 6lowpan implementation for Contiki which is:
25  * Copyright (c) 2008, Swedish Institute of Computer Science.
26  * All rights reserved.
27  *
28  * Redistribution and use in source and binary forms, with or without
29  * modification, are permitted provided that the following conditions
30  * are met:
31  * 1. Redistributions of source code must retain the above copyright
32  *    notice, this list of conditions and the following disclaimer.
33  * 2. Redistributions in binary form must reproduce the above copyright
34  *    notice, this list of conditions and the following disclaimer in the
35  *    documentation and/or other materials provided with the distribution.
36  * 3. Neither the name of the Institute nor the names of its contributors
37  *    may be used to endorse or promote products derived from this software
38  *    without specific prior written permission.
39  *
40  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
41  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
44  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50  * SUCH DAMAGE.
51  */
52
53 #include <linux/bitops.h>
54 #include <linux/if_arp.h>
55 #include <linux/module.h>
56 #include <linux/moduleparam.h>
57 #include <linux/netdevice.h>
58 #include <net/af_ieee802154.h>
59 #include <net/ieee802154.h>
60 #include <net/ieee802154_netdev.h>
61 #include <net/ipv6.h>
62
63 #include "6lowpan.h"
64
65 /* TTL uncompression values */
66 static const u8 lowpan_ttl_values[] = {0, 1, 64, 255};
67
68 static LIST_HEAD(lowpan_devices);
69
70 /*
71  * Uncompression of linklocal:
72  *   0 -> 16 bytes from packet
73  *   1 -> 2  bytes from prefix - bunch of zeroes and 8 from packet
74  *   2 -> 2  bytes from prefix - zeroes + 2 from packet
75  *   3 -> 2  bytes from prefix - infer 8 bytes from lladdr
76  *
77  *  NOTE: => the uncompress function does change 0xf to 0x10
78  *  NOTE: 0x00 => no-autoconfig => unspecified
79  */
80 static const u8 lowpan_unc_llconf[] = {0x0f, 0x28, 0x22, 0x20};
81
82 /*
83  * Uncompression of ctx-based:
84  *   0 -> 0 bits  from packet [unspecified / reserved]
85  *   1 -> 8 bytes from prefix - bunch of zeroes and 8 from packet
86  *   2 -> 8 bytes from prefix - zeroes + 2 from packet
87  *   3 -> 8 bytes from prefix - infer 8 bytes from lladdr
88  */
89 static const u8 lowpan_unc_ctxconf[] = {0x00, 0x88, 0x82, 0x80};
90
91 /*
92  * Uncompression of ctx-base
93  *   0 -> 0 bits from packet
94  *   1 -> 2 bytes from prefix - bunch of zeroes 5 from packet
95  *   2 -> 2 bytes from prefix - zeroes + 3 from packet
96  *   3 -> 2 bytes from prefix - infer 1 bytes from lladdr
97  */
98 static const u8 lowpan_unc_mxconf[] = {0x0f, 0x25, 0x23, 0x21};
99
100 /* Link local prefix */
101 static const u8 lowpan_llprefix[] = {0xfe, 0x80};
102
103 /* private device info */
104 struct lowpan_dev_info {
105         struct net_device       *real_dev; /* real WPAN device ptr */
106         struct mutex            dev_list_mtx; /* mutex for list ops */
107 };
108
109 struct lowpan_dev_record {
110         struct net_device *ldev;
111         struct list_head list;
112 };
113
114 struct lowpan_fragment {
115         struct sk_buff          *skb;           /* skb to be assembled */
116         u16                     length;         /* length to be assemled */
117         u32                     bytes_rcv;      /* bytes received */
118         u16                     tag;            /* current fragment tag */
119         struct timer_list       timer;          /* assembling timer */
120         struct list_head        list;           /* fragments list */
121 };
122
123 static unsigned short fragment_tag;
124 static LIST_HEAD(lowpan_fragments);
125 static DEFINE_SPINLOCK(flist_lock);
126
127 static inline struct
128 lowpan_dev_info *lowpan_dev_info(const struct net_device *dev)
129 {
130         return netdev_priv(dev);
131 }
132
133 static inline void lowpan_address_flip(u8 *src, u8 *dest)
134 {
135         int i;
136         for (i = 0; i < IEEE802154_ADDR_LEN; i++)
137                 (dest)[IEEE802154_ADDR_LEN - i - 1] = (src)[i];
138 }
139
140 /* list of all 6lowpan devices, uses for package delivering */
141 /* print data in line */
142 static inline void lowpan_raw_dump_inline(const char *caller, char *msg,
143                                    unsigned char *buf, int len)
144 {
145 #ifdef DEBUG
146         if (msg)
147                 pr_debug("(%s) %s: ", caller, msg);
148         print_hex_dump(KERN_DEBUG, "", DUMP_PREFIX_NONE,
149                        16, 1, buf, len, false);
150 #endif /* DEBUG */
151 }
152
153 /*
154  * print data in a table format:
155  *
156  * addr: xx xx xx xx xx xx
157  * addr: xx xx xx xx xx xx
158  * ...
159  */
160 static inline void lowpan_raw_dump_table(const char *caller, char *msg,
161                                    unsigned char *buf, int len)
162 {
163 #ifdef DEBUG
164         if (msg)
165                 pr_debug("(%s) %s:\n", caller, msg);
166         print_hex_dump(KERN_DEBUG, "\t", DUMP_PREFIX_OFFSET,
167                        16, 1, buf, len, false);
168 #endif /* DEBUG */
169 }
170
171 static u8
172 lowpan_compress_addr_64(u8 **hc06_ptr, u8 shift, const struct in6_addr *ipaddr,
173                  const unsigned char *lladdr)
174 {
175         u8 val = 0;
176
177         if (is_addr_mac_addr_based(ipaddr, lladdr))
178                 val = 3; /* 0-bits */
179         else if (lowpan_is_iid_16_bit_compressable(ipaddr)) {
180                 /* compress IID to 16 bits xxxx::XXXX */
181                 memcpy(*hc06_ptr, &ipaddr->s6_addr16[7], 2);
182                 *hc06_ptr += 2;
183                 val = 2; /* 16-bits */
184         } else {
185                 /* do not compress IID => xxxx::IID */
186                 memcpy(*hc06_ptr, &ipaddr->s6_addr16[4], 8);
187                 *hc06_ptr += 8;
188                 val = 1; /* 64-bits */
189         }
190
191         return rol8(val, shift);
192 }
193
194 static void
195 lowpan_uip_ds6_set_addr_iid(struct in6_addr *ipaddr, unsigned char *lladdr)
196 {
197         memcpy(&ipaddr->s6_addr[8], lladdr, IEEE802154_ADDR_LEN);
198         /* second bit-flip (Universe/Local) is done according RFC2464 */
199         ipaddr->s6_addr[8] ^= 0x02;
200 }
201
202 /*
203  * Uncompress addresses based on a prefix and a postfix with zeroes in
204  * between. If the postfix is zero in length it will use the link address
205  * to configure the IP address (autoconf style).
206  * pref_post_count takes a byte where the first nibble specify prefix count
207  * and the second postfix count (NOTE: 15/0xf => 16 bytes copy).
208  */
209 static int
210 lowpan_uncompress_addr(struct sk_buff *skb, struct in6_addr *ipaddr,
211         u8 const *prefix, u8 pref_post_count, unsigned char *lladdr)
212 {
213         u8 prefcount = pref_post_count >> 4;
214         u8 postcount = pref_post_count & 0x0f;
215
216         /* full nibble 15 => 16 */
217         prefcount = (prefcount == 15 ? 16 : prefcount);
218         postcount = (postcount == 15 ? 16 : postcount);
219
220         if (lladdr)
221                 lowpan_raw_dump_inline(__func__, "linklocal address",
222                                                 lladdr, IEEE802154_ADDR_LEN);
223         if (prefcount > 0)
224                 memcpy(ipaddr, prefix, prefcount);
225
226         if (prefcount + postcount < 16)
227                 memset(&ipaddr->s6_addr[prefcount], 0,
228                                         16 - (prefcount + postcount));
229
230         if (postcount > 0) {
231                 memcpy(&ipaddr->s6_addr[16 - postcount], skb->data, postcount);
232                 skb_pull(skb, postcount);
233         } else if (prefcount > 0) {
234                 if (lladdr == NULL)
235                         return -EINVAL;
236
237                 /* no IID based configuration if no prefix and no data */
238                 lowpan_uip_ds6_set_addr_iid(ipaddr, lladdr);
239         }
240
241         pr_debug("uncompressing %d + %d => ", prefcount, postcount);
242         lowpan_raw_dump_inline(NULL, NULL, ipaddr->s6_addr, 16);
243
244         return 0;
245 }
246
247 static void
248 lowpan_compress_udp_header(u8 **hc06_ptr, struct sk_buff *skb)
249 {
250         struct udphdr *uh = udp_hdr(skb);
251
252         if (((uh->source & LOWPAN_NHC_UDP_4BIT_MASK) ==
253                                 LOWPAN_NHC_UDP_4BIT_PORT) &&
254             ((uh->dest & LOWPAN_NHC_UDP_4BIT_MASK) ==
255                                 LOWPAN_NHC_UDP_4BIT_PORT)) {
256                 pr_debug("UDP header: both ports compression to 4 bits\n");
257                 **hc06_ptr = LOWPAN_NHC_UDP_CS_P_11;
258                 **(hc06_ptr + 1) = /* subtraction is faster */
259                    (u8)((uh->dest - LOWPAN_NHC_UDP_4BIT_PORT) +
260                        ((uh->source & LOWPAN_NHC_UDP_4BIT_PORT) << 4));
261                 *hc06_ptr += 2;
262         } else if ((uh->dest & LOWPAN_NHC_UDP_8BIT_MASK) ==
263                         LOWPAN_NHC_UDP_8BIT_PORT) {
264                 pr_debug("UDP header: remove 8 bits of dest\n");
265                 **hc06_ptr = LOWPAN_NHC_UDP_CS_P_01;
266                 memcpy(*hc06_ptr + 1, &uh->source, 2);
267                 **(hc06_ptr + 3) = (u8)(uh->dest - LOWPAN_NHC_UDP_8BIT_PORT);
268                 *hc06_ptr += 4;
269         } else if ((uh->source & LOWPAN_NHC_UDP_8BIT_MASK) ==
270                         LOWPAN_NHC_UDP_8BIT_PORT) {
271                 pr_debug("UDP header: remove 8 bits of source\n");
272                 **hc06_ptr = LOWPAN_NHC_UDP_CS_P_10;
273                 memcpy(*hc06_ptr + 1, &uh->dest, 2);
274                 **(hc06_ptr + 3) = (u8)(uh->source - LOWPAN_NHC_UDP_8BIT_PORT);
275                 *hc06_ptr += 4;
276         } else {
277                 pr_debug("UDP header: can't compress\n");
278                 **hc06_ptr = LOWPAN_NHC_UDP_CS_P_00;
279                 memcpy(*hc06_ptr + 1, &uh->source, 2);
280                 memcpy(*hc06_ptr + 3, &uh->dest, 2);
281                 *hc06_ptr += 5;
282         }
283
284         /* checksum is always inline */
285         memcpy(*hc06_ptr, &uh->check, 2);
286         *hc06_ptr += 2;
287 }
288
289 static inline int lowpan_fetch_skb_u8(struct sk_buff *skb, u8 *val)
290 {
291         if (unlikely(!pskb_may_pull(skb, 1)))
292                 return -EINVAL;
293
294         *val = skb->data[0];
295         skb_pull(skb, 1);
296
297         return 0;
298 }
299
300 static inline int lowpan_fetch_skb_u16(struct sk_buff *skb, u16 *val)
301 {
302         if (unlikely(!pskb_may_pull(skb, 2)))
303                 return -EINVAL;
304
305         *val = (skb->data[0] << 8) | skb->data[1];
306         skb_pull(skb, 2);
307
308         return 0;
309 }
310
311 static int
312 lowpan_uncompress_udp_header(struct sk_buff *skb)
313 {
314         struct udphdr *uh = udp_hdr(skb);
315         u8 tmp;
316
317         if (!uh)
318                 goto err;
319
320         if (lowpan_fetch_skb_u8(skb, &tmp))
321                 goto err;
322
323         if ((tmp & LOWPAN_NHC_UDP_MASK) == LOWPAN_NHC_UDP_ID) {
324                 pr_debug("UDP header uncompression\n");
325                 switch (tmp & LOWPAN_NHC_UDP_CS_P_11) {
326                 case LOWPAN_NHC_UDP_CS_P_00:
327                         memcpy(&uh->source, &skb->data[0], 2);
328                         memcpy(&uh->dest, &skb->data[2], 2);
329                         skb_pull(skb, 4);
330                         break;
331                 case LOWPAN_NHC_UDP_CS_P_01:
332                         memcpy(&uh->source, &skb->data[0], 2);
333                         uh->dest =
334                            skb->data[2] + LOWPAN_NHC_UDP_8BIT_PORT;
335                         skb_pull(skb, 3);
336                         break;
337                 case LOWPAN_NHC_UDP_CS_P_10:
338                         uh->source = skb->data[0] + LOWPAN_NHC_UDP_8BIT_PORT;
339                         memcpy(&uh->dest, &skb->data[1], 2);
340                         skb_pull(skb, 3);
341                         break;
342                 case LOWPAN_NHC_UDP_CS_P_11:
343                         uh->source =
344                            LOWPAN_NHC_UDP_4BIT_PORT + (skb->data[0] >> 4);
345                         uh->dest =
346                            LOWPAN_NHC_UDP_4BIT_PORT + (skb->data[0] & 0x0f);
347                         skb_pull(skb, 1);
348                         break;
349                 default:
350                         pr_debug("ERROR: unknown UDP format\n");
351                         goto err;
352                         break;
353                 }
354
355                 pr_debug("uncompressed UDP ports: src = %d, dst = %d\n",
356                          uh->source, uh->dest);
357
358                 /* copy checksum */
359                 memcpy(&uh->check, &skb->data[0], 2);
360                 skb_pull(skb, 2);
361         } else {
362                 pr_debug("ERROR: unsupported NH format\n");
363                 goto err;
364         }
365
366         return 0;
367 err:
368         return -EINVAL;
369 }
370
371 static int lowpan_header_create(struct sk_buff *skb,
372                            struct net_device *dev,
373                            unsigned short type, const void *_daddr,
374                            const void *_saddr, unsigned int len)
375 {
376         u8 tmp, iphc0, iphc1, *hc06_ptr;
377         struct ipv6hdr *hdr;
378         const u8 *saddr = _saddr;
379         const u8 *daddr = _daddr;
380         u8 head[100];
381         struct ieee802154_addr sa, da;
382
383         /* TODO:
384          * if this package isn't ipv6 one, where should it be routed?
385          */
386         if (type != ETH_P_IPV6)
387                 return 0;
388
389         hdr = ipv6_hdr(skb);
390         hc06_ptr = head + 2;
391
392         pr_debug("IPv6 header dump:\n\tversion = %d\n\tlength  = %d\n"
393                  "\tnexthdr = 0x%02x\n\thop_lim = %d\n", hdr->version,
394                  ntohs(hdr->payload_len), hdr->nexthdr, hdr->hop_limit);
395
396         lowpan_raw_dump_table(__func__, "raw skb network header dump",
397                 skb_network_header(skb), sizeof(struct ipv6hdr));
398
399         if (!saddr)
400                 saddr = dev->dev_addr;
401
402         lowpan_raw_dump_inline(__func__, "saddr", (unsigned char *)saddr, 8);
403
404         /*
405          * As we copy some bit-length fields, in the IPHC encoding bytes,
406          * we sometimes use |=
407          * If the field is 0, and the current bit value in memory is 1,
408          * this does not work. We therefore reset the IPHC encoding here
409          */
410         iphc0 = LOWPAN_DISPATCH_IPHC;
411         iphc1 = 0;
412
413         /* TODO: context lookup */
414
415         lowpan_raw_dump_inline(__func__, "daddr", (unsigned char *)daddr, 8);
416
417         /*
418          * Traffic class, flow label
419          * If flow label is 0, compress it. If traffic class is 0, compress it
420          * We have to process both in the same time as the offset of traffic
421          * class depends on the presence of version and flow label
422          */
423
424         /* hc06 format of TC is ECN | DSCP , original one is DSCP | ECN */
425         tmp = (hdr->priority << 4) | (hdr->flow_lbl[0] >> 4);
426         tmp = ((tmp & 0x03) << 6) | (tmp >> 2);
427
428         if (((hdr->flow_lbl[0] & 0x0F) == 0) &&
429              (hdr->flow_lbl[1] == 0) && (hdr->flow_lbl[2] == 0)) {
430                 /* flow label can be compressed */
431                 iphc0 |= LOWPAN_IPHC_FL_C;
432                 if ((hdr->priority == 0) &&
433                    ((hdr->flow_lbl[0] & 0xF0) == 0)) {
434                         /* compress (elide) all */
435                         iphc0 |= LOWPAN_IPHC_TC_C;
436                 } else {
437                         /* compress only the flow label */
438                         *hc06_ptr = tmp;
439                         hc06_ptr += 1;
440                 }
441         } else {
442                 /* Flow label cannot be compressed */
443                 if ((hdr->priority == 0) &&
444                    ((hdr->flow_lbl[0] & 0xF0) == 0)) {
445                         /* compress only traffic class */
446                         iphc0 |= LOWPAN_IPHC_TC_C;
447                         *hc06_ptr = (tmp & 0xc0) | (hdr->flow_lbl[0] & 0x0F);
448                         memcpy(hc06_ptr + 1, &hdr->flow_lbl[1], 2);
449                         hc06_ptr += 3;
450                 } else {
451                         /* compress nothing */
452                         memcpy(hc06_ptr, &hdr, 4);
453                         /* replace the top byte with new ECN | DSCP format */
454                         *hc06_ptr = tmp;
455                         hc06_ptr += 4;
456                 }
457         }
458
459         /* NOTE: payload length is always compressed */
460
461         /* Next Header is compress if UDP */
462         if (hdr->nexthdr == UIP_PROTO_UDP)
463                 iphc0 |= LOWPAN_IPHC_NH_C;
464
465         if ((iphc0 & LOWPAN_IPHC_NH_C) == 0) {
466                 *hc06_ptr = hdr->nexthdr;
467                 hc06_ptr += 1;
468         }
469
470         /*
471          * Hop limit
472          * if 1:   compress, encoding is 01
473          * if 64:  compress, encoding is 10
474          * if 255: compress, encoding is 11
475          * else do not compress
476          */
477         switch (hdr->hop_limit) {
478         case 1:
479                 iphc0 |= LOWPAN_IPHC_TTL_1;
480                 break;
481         case 64:
482                 iphc0 |= LOWPAN_IPHC_TTL_64;
483                 break;
484         case 255:
485                 iphc0 |= LOWPAN_IPHC_TTL_255;
486                 break;
487         default:
488                 *hc06_ptr = hdr->hop_limit;
489                 hc06_ptr += 1;
490                 break;
491         }
492
493         /* source address compression */
494         if (is_addr_unspecified(&hdr->saddr)) {
495                 pr_debug("source address is unspecified, setting SAC\n");
496                 iphc1 |= LOWPAN_IPHC_SAC;
497         /* TODO: context lookup */
498         } else if (is_addr_link_local(&hdr->saddr)) {
499                 pr_debug("source address is link-local\n");
500                 iphc1 |= lowpan_compress_addr_64(&hc06_ptr,
501                                 LOWPAN_IPHC_SAM_BIT, &hdr->saddr, saddr);
502         } else {
503                 pr_debug("send the full source address\n");
504                 memcpy(hc06_ptr, &hdr->saddr.s6_addr16[0], 16);
505                 hc06_ptr += 16;
506         }
507
508         /* destination address compression */
509         if (is_addr_mcast(&hdr->daddr)) {
510                 pr_debug("destination address is multicast: ");
511                 iphc1 |= LOWPAN_IPHC_M;
512                 if (lowpan_is_mcast_addr_compressable8(&hdr->daddr)) {
513                         pr_debug("compressed to 1 octet\n");
514                         iphc1 |= LOWPAN_IPHC_DAM_11;
515                         /* use last byte */
516                         *hc06_ptr = hdr->daddr.s6_addr[15];
517                         hc06_ptr += 1;
518                 } else if (lowpan_is_mcast_addr_compressable32(&hdr->daddr)) {
519                         pr_debug("compressed to 4 octets\n");
520                         iphc1 |= LOWPAN_IPHC_DAM_10;
521                         /* second byte + the last three */
522                         *hc06_ptr = hdr->daddr.s6_addr[1];
523                         memcpy(hc06_ptr + 1, &hdr->daddr.s6_addr[13], 3);
524                         hc06_ptr += 4;
525                 } else if (lowpan_is_mcast_addr_compressable48(&hdr->daddr)) {
526                         pr_debug("compressed to 6 octets\n");
527                         iphc1 |= LOWPAN_IPHC_DAM_01;
528                         /* second byte + the last five */
529                         *hc06_ptr = hdr->daddr.s6_addr[1];
530                         memcpy(hc06_ptr + 1, &hdr->daddr.s6_addr[11], 5);
531                         hc06_ptr += 6;
532                 } else {
533                         pr_debug("using full address\n");
534                         iphc1 |= LOWPAN_IPHC_DAM_00;
535                         memcpy(hc06_ptr, &hdr->daddr.s6_addr[0], 16);
536                         hc06_ptr += 16;
537                 }
538         } else {
539                 /* TODO: context lookup */
540                 if (is_addr_link_local(&hdr->daddr)) {
541                         pr_debug("dest address is unicast and link-local\n");
542                         iphc1 |= lowpan_compress_addr_64(&hc06_ptr,
543                                 LOWPAN_IPHC_DAM_BIT, &hdr->daddr, daddr);
544                 } else {
545                         pr_debug("dest address is unicast: using full one\n");
546                         memcpy(hc06_ptr, &hdr->daddr.s6_addr16[0], 16);
547                         hc06_ptr += 16;
548                 }
549         }
550
551         /* UDP header compression */
552         if (hdr->nexthdr == UIP_PROTO_UDP)
553                 lowpan_compress_udp_header(&hc06_ptr, skb);
554
555         head[0] = iphc0;
556         head[1] = iphc1;
557
558         skb_pull(skb, sizeof(struct ipv6hdr));
559         memcpy(skb_push(skb, hc06_ptr - head), head, hc06_ptr - head);
560
561         lowpan_raw_dump_table(__func__, "raw skb data dump", skb->data,
562                                 skb->len);
563
564         /*
565          * NOTE1: I'm still unsure about the fact that compression and WPAN
566          * header are created here and not later in the xmit. So wait for
567          * an opinion of net maintainers.
568          */
569         /*
570          * NOTE2: to be absolutely correct, we must derive PANid information
571          * from MAC subif of the 'dev' and 'real_dev' network devices, but
572          * this isn't implemented in mainline yet, so currently we assign 0xff
573          */
574         {
575                 mac_cb(skb)->flags = IEEE802154_FC_TYPE_DATA;
576
577                 /* prepare wpan address data */
578                 sa.addr_type = IEEE802154_ADDR_LONG;
579                 sa.pan_id = 0xff;
580                 memcpy(&(sa.hwaddr), saddr, 8);
581
582                 da.pan_id = 0xff;
583                 /*
584                  * if the destination address is the broadcast address, use the
585                  * corresponding short address
586                  */
587                 if (lowpan_is_addr_broadcast(daddr)) {
588                         da.addr_type = IEEE802154_ADDR_SHORT;
589                         da.short_addr = IEEE802154_ADDR_BROADCAST;
590                 } else {
591                         da.addr_type = IEEE802154_ADDR_LONG;
592                         memcpy(&(da.hwaddr), daddr, 8);
593
594                         /* request acknowledgment */
595                         mac_cb(skb)->flags |= MAC_CB_FLAG_ACKREQ;
596                 }
597
598                 return dev_hard_header(skb, lowpan_dev_info(dev)->real_dev,
599                                 type, (void *)&da, (void *)&sa, skb->len);
600         }
601 }
602
603 static int lowpan_give_skb_to_devices(struct sk_buff *skb)
604 {
605         struct lowpan_dev_record *entry;
606         struct sk_buff *skb_cp;
607         int stat = NET_RX_SUCCESS;
608
609         rcu_read_lock();
610         list_for_each_entry_rcu(entry, &lowpan_devices, list)
611                 if (lowpan_dev_info(entry->ldev)->real_dev == skb->dev) {
612                         skb_cp = skb_copy(skb, GFP_ATOMIC);
613                         if (!skb_cp) {
614                                 stat = -ENOMEM;
615                                 break;
616                         }
617
618                         skb_cp->dev = entry->ldev;
619                         stat = netif_rx(skb_cp);
620                 }
621         rcu_read_unlock();
622
623         return stat;
624 }
625
626 static int lowpan_skb_deliver(struct sk_buff *skb, struct ipv6hdr *hdr)
627 {
628         struct sk_buff *new;
629         int stat = NET_RX_SUCCESS;
630
631         new = skb_copy_expand(skb, sizeof(struct ipv6hdr), skb_tailroom(skb),
632                                                                 GFP_ATOMIC);
633         kfree_skb(skb);
634
635         if (!new)
636                 return -ENOMEM;
637
638         skb_push(new, sizeof(struct ipv6hdr));
639         skb_reset_network_header(new);
640         skb_copy_to_linear_data(new, hdr, sizeof(struct ipv6hdr));
641
642         new->protocol = htons(ETH_P_IPV6);
643         new->pkt_type = PACKET_HOST;
644
645         stat = lowpan_give_skb_to_devices(new);
646
647         kfree_skb(new);
648
649         return stat;
650 }
651
652 static void lowpan_fragment_timer_expired(unsigned long entry_addr)
653 {
654         struct lowpan_fragment *entry = (struct lowpan_fragment *)entry_addr;
655
656         pr_debug("timer expired for frame with tag %d\n", entry->tag);
657
658         list_del(&entry->list);
659         dev_kfree_skb(entry->skb);
660         kfree(entry);
661 }
662
663 static struct lowpan_fragment *
664 lowpan_alloc_new_frame(struct sk_buff *skb, u16 len, u16 tag)
665 {
666         struct lowpan_fragment *frame;
667
668         frame = kzalloc(sizeof(struct lowpan_fragment),
669                         GFP_ATOMIC);
670         if (!frame)
671                 goto frame_err;
672
673         INIT_LIST_HEAD(&frame->list);
674
675         frame->length = len;
676         frame->tag = tag;
677
678         /* allocate buffer for frame assembling */
679         frame->skb = netdev_alloc_skb_ip_align(skb->dev, frame->length +
680                                                sizeof(struct ipv6hdr));
681
682         if (!frame->skb)
683                 goto skb_err;
684
685         frame->skb->priority = skb->priority;
686         frame->skb->dev = skb->dev;
687
688         /* reserve headroom for uncompressed ipv6 header */
689         skb_reserve(frame->skb, sizeof(struct ipv6hdr));
690         skb_put(frame->skb, frame->length);
691
692         init_timer(&frame->timer);
693         /* time out is the same as for ipv6 - 60 sec */
694         frame->timer.expires = jiffies + LOWPAN_FRAG_TIMEOUT;
695         frame->timer.data = (unsigned long)frame;
696         frame->timer.function = lowpan_fragment_timer_expired;
697
698         add_timer(&frame->timer);
699
700         list_add_tail(&frame->list, &lowpan_fragments);
701
702         return frame;
703
704 skb_err:
705         kfree(frame);
706 frame_err:
707         return NULL;
708 }
709
710 static int
711 lowpan_process_data(struct sk_buff *skb)
712 {
713         struct ipv6hdr hdr;
714         u8 tmp, iphc0, iphc1, num_context = 0;
715         u8 *_saddr, *_daddr;
716         int err;
717
718         lowpan_raw_dump_table(__func__, "raw skb data dump", skb->data,
719                                 skb->len);
720         /* at least two bytes will be used for the encoding */
721         if (skb->len < 2)
722                 goto drop;
723
724         if (lowpan_fetch_skb_u8(skb, &iphc0))
725                 goto drop;
726
727         /* fragments assembling */
728         switch (iphc0 & LOWPAN_DISPATCH_MASK) {
729         case LOWPAN_DISPATCH_FRAG1:
730         case LOWPAN_DISPATCH_FRAGN:
731         {
732                 struct lowpan_fragment *frame;
733                 /* slen stores the rightmost 8 bits of the 11 bits length */
734                 u8 slen, offset = 0;
735                 u16 len, tag;
736                 bool found = false;
737
738                 if (lowpan_fetch_skb_u8(skb, &slen) || /* frame length */
739                     lowpan_fetch_skb_u16(skb, &tag))  /* fragment tag */
740                         goto drop;
741
742                 /* adds the 3 MSB to the 8 LSB to retrieve the 11 bits length */
743                 len = ((iphc0 & 7) << 8) | slen;
744
745                 /* FRAGN */
746                 if ((iphc0 & LOWPAN_DISPATCH_MASK) != LOWPAN_DISPATCH_FRAG1) {
747                         if (lowpan_fetch_skb_u8(skb, &offset))
748                                 goto unlock_and_drop;
749                 }
750
751                 /*
752                  * check if frame assembling with the same tag is
753                  * already in progress
754                  */
755                 spin_lock_bh(&flist_lock);
756
757                 list_for_each_entry(frame, &lowpan_fragments, list)
758                         if (frame->tag == tag) {
759                                 found = true;
760                                 break;
761                         }
762
763                 /* alloc new frame structure */
764                 if (!found) {
765                         frame = lowpan_alloc_new_frame(skb, len, tag);
766                         if (!frame)
767                                 goto unlock_and_drop;
768                 }
769
770                 /* if payload fits buffer, copy it */
771                 if (likely((offset * 8 + skb->len) <= frame->length))
772                         skb_copy_to_linear_data_offset(frame->skb, offset * 8,
773                                                         skb->data, skb->len);
774                 else
775                         goto unlock_and_drop;
776
777                 frame->bytes_rcv += skb->len;
778
779                 /* frame assembling complete */
780                 if ((frame->bytes_rcv == frame->length) &&
781                      frame->timer.expires > jiffies) {
782                         /* if timer haven't expired - first of all delete it */
783                         del_timer_sync(&frame->timer);
784                         list_del(&frame->list);
785                         spin_unlock_bh(&flist_lock);
786
787                         dev_kfree_skb(skb);
788                         skb = frame->skb;
789                         kfree(frame);
790
791                         if (lowpan_fetch_skb_u8(skb, &iphc0))
792                                 goto drop;
793
794                         break;
795                 }
796                 spin_unlock_bh(&flist_lock);
797
798                 return kfree_skb(skb), 0;
799         }
800         default:
801                 break;
802         }
803
804         if (lowpan_fetch_skb_u8(skb, &iphc1))
805                 goto drop;
806
807         _saddr = mac_cb(skb)->sa.hwaddr;
808         _daddr = mac_cb(skb)->da.hwaddr;
809
810         pr_debug("iphc0 = %02x, iphc1 = %02x\n", iphc0, iphc1);
811
812         /* another if the CID flag is set */
813         if (iphc1 & LOWPAN_IPHC_CID) {
814                 pr_debug("CID flag is set, increase header with one\n");
815                 if (lowpan_fetch_skb_u8(skb, &num_context))
816                         goto drop;
817         }
818
819         hdr.version = 6;
820
821         /* Traffic Class and Flow Label */
822         switch ((iphc0 & LOWPAN_IPHC_TF) >> 3) {
823         /*
824          * Traffic Class and FLow Label carried in-line
825          * ECN + DSCP + 4-bit Pad + Flow Label (4 bytes)
826          */
827         case 0: /* 00b */
828                 if (lowpan_fetch_skb_u8(skb, &tmp))
829                         goto drop;
830
831                 memcpy(&hdr.flow_lbl, &skb->data[0], 3);
832                 skb_pull(skb, 3);
833                 hdr.priority = ((tmp >> 2) & 0x0f);
834                 hdr.flow_lbl[0] = ((tmp >> 2) & 0x30) | (tmp << 6) |
835                                         (hdr.flow_lbl[0] & 0x0f);
836                 break;
837         /*
838          * Traffic class carried in-line
839          * ECN + DSCP (1 byte), Flow Label is elided
840          */
841         case 1: /* 10b */
842                 if (lowpan_fetch_skb_u8(skb, &tmp))
843                         goto drop;
844
845                 hdr.priority = ((tmp >> 2) & 0x0f);
846                 hdr.flow_lbl[0] = ((tmp << 6) & 0xC0) | ((tmp >> 2) & 0x30);
847                 hdr.flow_lbl[1] = 0;
848                 hdr.flow_lbl[2] = 0;
849                 break;
850         /*
851          * Flow Label carried in-line
852          * ECN + 2-bit Pad + Flow Label (3 bytes), DSCP is elided
853          */
854         case 2: /* 01b */
855                 if (lowpan_fetch_skb_u8(skb, &tmp))
856                         goto drop;
857
858                 hdr.flow_lbl[0] = (skb->data[0] & 0x0F) | ((tmp >> 2) & 0x30);
859                 memcpy(&hdr.flow_lbl[1], &skb->data[0], 2);
860                 skb_pull(skb, 2);
861                 break;
862         /* Traffic Class and Flow Label are elided */
863         case 3: /* 11b */
864                 hdr.priority = 0;
865                 hdr.flow_lbl[0] = 0;
866                 hdr.flow_lbl[1] = 0;
867                 hdr.flow_lbl[2] = 0;
868                 break;
869         default:
870                 break;
871         }
872
873         /* Next Header */
874         if ((iphc0 & LOWPAN_IPHC_NH_C) == 0) {
875                 /* Next header is carried inline */
876                 if (lowpan_fetch_skb_u8(skb, &(hdr.nexthdr)))
877                         goto drop;
878
879                 pr_debug("NH flag is set, next header carried inline: %02x\n",
880                          hdr.nexthdr);
881         }
882
883         /* Hop Limit */
884         if ((iphc0 & 0x03) != LOWPAN_IPHC_TTL_I)
885                 hdr.hop_limit = lowpan_ttl_values[iphc0 & 0x03];
886         else {
887                 if (lowpan_fetch_skb_u8(skb, &(hdr.hop_limit)))
888                         goto drop;
889         }
890
891         /* Extract SAM to the tmp variable */
892         tmp = ((iphc1 & LOWPAN_IPHC_SAM) >> LOWPAN_IPHC_SAM_BIT) & 0x03;
893
894         /* Source address uncompression */
895         pr_debug("source address stateless compression\n");
896         err = lowpan_uncompress_addr(skb, &hdr.saddr, lowpan_llprefix,
897                                 lowpan_unc_llconf[tmp], skb->data);
898         if (err)
899                 goto drop;
900
901         /* Extract DAM to the tmp variable */
902         tmp = ((iphc1 & LOWPAN_IPHC_DAM_11) >> LOWPAN_IPHC_DAM_BIT) & 0x03;
903
904         /* check for Multicast Compression */
905         if (iphc1 & LOWPAN_IPHC_M) {
906                 if (iphc1 & LOWPAN_IPHC_DAC) {
907                         pr_debug("dest: context-based mcast compression\n");
908                         /* TODO: implement this */
909                 } else {
910                         u8 prefix[] = {0xff, 0x02};
911
912                         pr_debug("dest: non context-based mcast compression\n");
913                         if (0 < tmp && tmp < 3) {
914                                 if (lowpan_fetch_skb_u8(skb, &prefix[1]))
915                                         goto drop;
916                         }
917
918                         err = lowpan_uncompress_addr(skb, &hdr.daddr, prefix,
919                                         lowpan_unc_mxconf[tmp], NULL);
920                         if (err)
921                                 goto drop;
922                 }
923         } else {
924                 pr_debug("dest: stateless compression\n");
925                 err = lowpan_uncompress_addr(skb, &hdr.daddr, lowpan_llprefix,
926                                 lowpan_unc_llconf[tmp], skb->data);
927                 if (err)
928                         goto drop;
929         }
930
931         /* UDP data uncompression */
932         if (iphc0 & LOWPAN_IPHC_NH_C) {
933                 if (lowpan_uncompress_udp_header(skb))
934                         goto drop;
935                 hdr.nexthdr = UIP_PROTO_UDP;
936         }
937
938         /* Not fragmented package */
939         hdr.payload_len = htons(skb->len);
940
941         pr_debug("skb headroom size = %d, data length = %d\n",
942                  skb_headroom(skb), skb->len);
943
944         pr_debug("IPv6 header dump:\n\tversion = %d\n\tlength  = %d\n\t"
945                  "nexthdr = 0x%02x\n\thop_lim = %d\n", hdr.version,
946                  ntohs(hdr.payload_len), hdr.nexthdr, hdr.hop_limit);
947
948         lowpan_raw_dump_table(__func__, "raw header dump", (u8 *)&hdr,
949                                                         sizeof(hdr));
950         return lowpan_skb_deliver(skb, &hdr);
951
952 unlock_and_drop:
953         spin_unlock_bh(&flist_lock);
954 drop:
955         kfree_skb(skb);
956         return -EINVAL;
957 }
958
959 static int lowpan_set_address(struct net_device *dev, void *p)
960 {
961         struct sockaddr *sa = p;
962
963         if (netif_running(dev))
964                 return -EBUSY;
965
966         /* TODO: validate addr */
967         memcpy(dev->dev_addr, sa->sa_data, dev->addr_len);
968
969         return 0;
970 }
971
972 static int lowpan_get_mac_header_length(struct sk_buff *skb)
973 {
974         /*
975          * Currently long addressing mode is supported only, so the overall
976          * header size is 21:
977          * FC SeqNum DPAN DA  SA  Sec
978          * 2  +  1  +  2 + 8 + 8 + 0  = 21
979          */
980         return 21;
981 }
982
983 static int
984 lowpan_fragment_xmit(struct sk_buff *skb, u8 *head,
985                         int mlen, int plen, int offset, int type)
986 {
987         struct sk_buff *frag;
988         int hlen, ret;
989
990         hlen = (type == LOWPAN_DISPATCH_FRAG1) ?
991                         LOWPAN_FRAG1_HEAD_SIZE : LOWPAN_FRAGN_HEAD_SIZE;
992
993         lowpan_raw_dump_inline(__func__, "6lowpan fragment header", head, hlen);
994
995         frag = dev_alloc_skb(hlen + mlen + plen + IEEE802154_MFR_SIZE);
996         if (!frag)
997                 return -ENOMEM;
998
999         frag->priority = skb->priority;
1000         frag->dev = skb->dev;
1001
1002         /* copy header, MFR and payload */
1003         memcpy(skb_put(frag, mlen), skb->data, mlen);
1004         memcpy(skb_put(frag, hlen), head, hlen);
1005
1006         if (plen)
1007                 skb_copy_from_linear_data_offset(skb, offset + mlen,
1008                                         skb_put(frag, plen), plen);
1009
1010         lowpan_raw_dump_table(__func__, " raw fragment dump", frag->data,
1011                                                                 frag->len);
1012
1013         ret = dev_queue_xmit(frag);
1014
1015         return ret;
1016 }
1017
1018 static int
1019 lowpan_skb_fragmentation(struct sk_buff *skb)
1020 {
1021         int  err, header_length, payload_length, tag, offset = 0;
1022         u8 head[5];
1023
1024         header_length = lowpan_get_mac_header_length(skb);
1025         payload_length = skb->len - header_length;
1026         tag = fragment_tag++;
1027
1028         /* first fragment header */
1029         head[0] = LOWPAN_DISPATCH_FRAG1 | ((payload_length >> 8) & 0x7);
1030         head[1] = payload_length & 0xff;
1031         head[2] = tag >> 8;
1032         head[3] = tag & 0xff;
1033
1034         err = lowpan_fragment_xmit(skb, head, header_length, LOWPAN_FRAG_SIZE,
1035                                    0, LOWPAN_DISPATCH_FRAG1);
1036
1037         if (err)
1038                 goto exit;
1039
1040         offset = LOWPAN_FRAG_SIZE;
1041
1042         /* next fragment header */
1043         head[0] &= ~LOWPAN_DISPATCH_FRAG1;
1044         head[0] |= LOWPAN_DISPATCH_FRAGN;
1045
1046         while ((payload_length - offset > 0) && (err >= 0)) {
1047                 int len = LOWPAN_FRAG_SIZE;
1048
1049                 head[4] = offset / 8;
1050
1051                 if (payload_length - offset < len)
1052                         len = payload_length - offset;
1053
1054                 err = lowpan_fragment_xmit(skb, head, header_length,
1055                                            len, offset, LOWPAN_DISPATCH_FRAGN);
1056                 if (err)
1057                         goto exit;
1058
1059                 offset += len;
1060         }
1061
1062 exit:
1063         return err;
1064 }
1065
1066 static netdev_tx_t lowpan_xmit(struct sk_buff *skb, struct net_device *dev)
1067 {
1068         int err = -1;
1069
1070         pr_debug("package xmit\n");
1071
1072         skb->dev = lowpan_dev_info(dev)->real_dev;
1073         if (skb->dev == NULL) {
1074                 pr_debug("ERROR: no real wpan device found\n");
1075                 goto error;
1076         }
1077
1078         /* Send directly if less than the MTU minus the 2 checksum bytes. */
1079         if (skb->len <= IEEE802154_MTU - IEEE802154_MFR_SIZE) {
1080                 err = dev_queue_xmit(skb);
1081                 goto out;
1082         }
1083
1084         pr_debug("frame is too big, fragmentation is needed\n");
1085         err = lowpan_skb_fragmentation(skb);
1086 error:
1087         dev_kfree_skb(skb);
1088 out:
1089         if (err < 0)
1090                 pr_debug("ERROR: xmit failed\n");
1091
1092         return (err < 0 ? NETDEV_TX_BUSY : NETDEV_TX_OK);
1093 }
1094
1095 static struct wpan_phy *lowpan_get_phy(const struct net_device *dev)
1096 {
1097         struct net_device *real_dev = lowpan_dev_info(dev)->real_dev;
1098         return ieee802154_mlme_ops(real_dev)->get_phy(real_dev);
1099 }
1100
1101 static u16 lowpan_get_pan_id(const struct net_device *dev)
1102 {
1103         struct net_device *real_dev = lowpan_dev_info(dev)->real_dev;
1104         return ieee802154_mlme_ops(real_dev)->get_pan_id(real_dev);
1105 }
1106
1107 static u16 lowpan_get_short_addr(const struct net_device *dev)
1108 {
1109         struct net_device *real_dev = lowpan_dev_info(dev)->real_dev;
1110         return ieee802154_mlme_ops(real_dev)->get_short_addr(real_dev);
1111 }
1112
1113 static struct header_ops lowpan_header_ops = {
1114         .create = lowpan_header_create,
1115 };
1116
1117 static const struct net_device_ops lowpan_netdev_ops = {
1118         .ndo_start_xmit         = lowpan_xmit,
1119         .ndo_set_mac_address    = lowpan_set_address,
1120 };
1121
1122 static struct ieee802154_mlme_ops lowpan_mlme = {
1123         .get_pan_id = lowpan_get_pan_id,
1124         .get_phy = lowpan_get_phy,
1125         .get_short_addr = lowpan_get_short_addr,
1126 };
1127
1128 static void lowpan_setup(struct net_device *dev)
1129 {
1130         dev->addr_len           = IEEE802154_ADDR_LEN;
1131         memset(dev->broadcast, 0xff, IEEE802154_ADDR_LEN);
1132         dev->type               = ARPHRD_IEEE802154;
1133         /* Frame Control + Sequence Number + Address fields + Security Header */
1134         dev->hard_header_len    = 2 + 1 + 20 + 14;
1135         dev->needed_tailroom    = 2; /* FCS */
1136         dev->mtu                = 1281;
1137         dev->tx_queue_len       = 0;
1138         dev->flags              = IFF_BROADCAST | IFF_MULTICAST;
1139         dev->watchdog_timeo     = 0;
1140
1141         dev->netdev_ops         = &lowpan_netdev_ops;
1142         dev->header_ops         = &lowpan_header_ops;
1143         dev->ml_priv            = &lowpan_mlme;
1144         dev->destructor         = free_netdev;
1145 }
1146
1147 static int lowpan_validate(struct nlattr *tb[], struct nlattr *data[])
1148 {
1149         if (tb[IFLA_ADDRESS]) {
1150                 if (nla_len(tb[IFLA_ADDRESS]) != IEEE802154_ADDR_LEN)
1151                         return -EINVAL;
1152         }
1153         return 0;
1154 }
1155
1156 static int lowpan_rcv(struct sk_buff *skb, struct net_device *dev,
1157         struct packet_type *pt, struct net_device *orig_dev)
1158 {
1159         struct sk_buff *local_skb;
1160
1161         if (!netif_running(dev))
1162                 goto drop;
1163
1164         if (dev->type != ARPHRD_IEEE802154)
1165                 goto drop;
1166
1167         /* check that it's our buffer */
1168         if (skb->data[0] == LOWPAN_DISPATCH_IPV6) {
1169                 /* Copy the packet so that the IPv6 header is
1170                  * properly aligned.
1171                  */
1172                 local_skb = skb_copy_expand(skb, NET_SKB_PAD - 1,
1173                                             skb_tailroom(skb), GFP_ATOMIC);
1174                 if (!local_skb)
1175                         goto drop;
1176
1177                 local_skb->protocol = htons(ETH_P_IPV6);
1178                 local_skb->pkt_type = PACKET_HOST;
1179
1180                 /* Pull off the 1-byte of 6lowpan header. */
1181                 skb_pull(local_skb, 1);
1182                 skb_reset_network_header(local_skb);
1183                 skb_set_transport_header(local_skb, sizeof(struct ipv6hdr));
1184
1185                 lowpan_give_skb_to_devices(local_skb);
1186
1187                 kfree_skb(local_skb);
1188                 kfree_skb(skb);
1189         } else {
1190                 switch (skb->data[0] & 0xe0) {
1191                 case LOWPAN_DISPATCH_IPHC:      /* ipv6 datagram */
1192                 case LOWPAN_DISPATCH_FRAG1:     /* first fragment header */
1193                 case LOWPAN_DISPATCH_FRAGN:     /* next fragments headers */
1194                         local_skb = skb_clone(skb, GFP_ATOMIC);
1195                         if (!local_skb)
1196                                 goto drop;
1197                         lowpan_process_data(local_skb);
1198
1199                         kfree_skb(skb);
1200                         break;
1201                 default:
1202                         break;
1203                 }
1204         }
1205
1206         return NET_RX_SUCCESS;
1207
1208 drop:
1209         kfree_skb(skb);
1210         return NET_RX_DROP;
1211 }
1212
1213 static int lowpan_newlink(struct net *src_net, struct net_device *dev,
1214                           struct nlattr *tb[], struct nlattr *data[])
1215 {
1216         struct net_device *real_dev;
1217         struct lowpan_dev_record *entry;
1218
1219         pr_debug("adding new link\n");
1220
1221         if (!tb[IFLA_LINK])
1222                 return -EINVAL;
1223         /* find and hold real wpan device */
1224         real_dev = dev_get_by_index(src_net, nla_get_u32(tb[IFLA_LINK]));
1225         if (!real_dev)
1226                 return -ENODEV;
1227
1228         lowpan_dev_info(dev)->real_dev = real_dev;
1229         mutex_init(&lowpan_dev_info(dev)->dev_list_mtx);
1230
1231         entry = kzalloc(sizeof(struct lowpan_dev_record), GFP_KERNEL);
1232         if (!entry) {
1233                 dev_put(real_dev);
1234                 lowpan_dev_info(dev)->real_dev = NULL;
1235                 return -ENOMEM;
1236         }
1237
1238         entry->ldev = dev;
1239
1240         mutex_lock(&lowpan_dev_info(dev)->dev_list_mtx);
1241         INIT_LIST_HEAD(&entry->list);
1242         list_add_tail(&entry->list, &lowpan_devices);
1243         mutex_unlock(&lowpan_dev_info(dev)->dev_list_mtx);
1244
1245         register_netdevice(dev);
1246
1247         return 0;
1248 }
1249
1250 static void lowpan_dellink(struct net_device *dev, struct list_head *head)
1251 {
1252         struct lowpan_dev_info *lowpan_dev = lowpan_dev_info(dev);
1253         struct net_device *real_dev = lowpan_dev->real_dev;
1254         struct lowpan_dev_record *entry, *tmp;
1255
1256         ASSERT_RTNL();
1257
1258         mutex_lock(&lowpan_dev_info(dev)->dev_list_mtx);
1259         list_for_each_entry_safe(entry, tmp, &lowpan_devices, list) {
1260                 if (entry->ldev == dev) {
1261                         list_del(&entry->list);
1262                         kfree(entry);
1263                 }
1264         }
1265         mutex_unlock(&lowpan_dev_info(dev)->dev_list_mtx);
1266
1267         mutex_destroy(&lowpan_dev_info(dev)->dev_list_mtx);
1268
1269         unregister_netdevice_queue(dev, head);
1270
1271         dev_put(real_dev);
1272 }
1273
1274 static struct rtnl_link_ops lowpan_link_ops __read_mostly = {
1275         .kind           = "lowpan",
1276         .priv_size      = sizeof(struct lowpan_dev_info),
1277         .setup          = lowpan_setup,
1278         .newlink        = lowpan_newlink,
1279         .dellink        = lowpan_dellink,
1280         .validate       = lowpan_validate,
1281 };
1282
1283 static inline int __init lowpan_netlink_init(void)
1284 {
1285         return rtnl_link_register(&lowpan_link_ops);
1286 }
1287
1288 static inline void lowpan_netlink_fini(void)
1289 {
1290         rtnl_link_unregister(&lowpan_link_ops);
1291 }
1292
1293 static int lowpan_device_event(struct notifier_block *unused,
1294                                 unsigned long event,
1295                                 void *ptr)
1296 {
1297         struct net_device *dev = ptr;
1298         LIST_HEAD(del_list);
1299         struct lowpan_dev_record *entry, *tmp;
1300
1301         if (dev->type != ARPHRD_IEEE802154)
1302                 goto out;
1303
1304         if (event == NETDEV_UNREGISTER) {
1305                 list_for_each_entry_safe(entry, tmp, &lowpan_devices, list) {
1306                         if (lowpan_dev_info(entry->ldev)->real_dev == dev)
1307                                 lowpan_dellink(entry->ldev, &del_list);
1308                 }
1309
1310                 unregister_netdevice_many(&del_list);
1311         }
1312
1313 out:
1314         return NOTIFY_DONE;
1315 }
1316
1317 static struct notifier_block lowpan_dev_notifier = {
1318         .notifier_call = lowpan_device_event,
1319 };
1320
1321 static struct packet_type lowpan_packet_type = {
1322         .type = __constant_htons(ETH_P_IEEE802154),
1323         .func = lowpan_rcv,
1324 };
1325
1326 static int __init lowpan_init_module(void)
1327 {
1328         int err = 0;
1329
1330         err = lowpan_netlink_init();
1331         if (err < 0)
1332                 goto out;
1333
1334         dev_add_pack(&lowpan_packet_type);
1335
1336         err = register_netdevice_notifier(&lowpan_dev_notifier);
1337         if (err < 0) {
1338                 dev_remove_pack(&lowpan_packet_type);
1339                 lowpan_netlink_fini();
1340         }
1341 out:
1342         return err;
1343 }
1344
1345 static void __exit lowpan_cleanup_module(void)
1346 {
1347         struct lowpan_fragment *frame, *tframe;
1348
1349         lowpan_netlink_fini();
1350
1351         dev_remove_pack(&lowpan_packet_type);
1352
1353         unregister_netdevice_notifier(&lowpan_dev_notifier);
1354
1355         /* Now 6lowpan packet_type is removed, so no new fragments are
1356          * expected on RX, therefore that's the time to clean incomplete
1357          * fragments.
1358          */
1359         spin_lock_bh(&flist_lock);
1360         list_for_each_entry_safe(frame, tframe, &lowpan_fragments, list) {
1361                 del_timer_sync(&frame->timer);
1362                 list_del(&frame->list);
1363                 dev_kfree_skb(frame->skb);
1364                 kfree(frame);
1365         }
1366         spin_unlock_bh(&flist_lock);
1367 }
1368
1369 module_init(lowpan_init_module);
1370 module_exit(lowpan_cleanup_module);
1371 MODULE_LICENSE("GPL");
1372 MODULE_ALIAS_RTNL_LINK("lowpan");