Linux Audio

Check our new training course

Loading...
v4.6
   1/*
   2 * RNDIS MSG parser
   3 *
   4 * Authors:	Benedikt Spranger, Pengutronix
   5 *		Robert Schwebel, Pengutronix
   6 *
   7 *              This program is free software; you can redistribute it and/or
   8 *              modify it under the terms of the GNU General Public License
   9 *              version 2, as published by the Free Software Foundation.
  10 *
  11 *		This software was originally developed in conformance with
  12 *		Microsoft's Remote NDIS Specification License Agreement.
  13 *
  14 * 03/12/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
  15 *		Fixed message length bug in init_response
  16 *
  17 * 03/25/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
  18 *		Fixed rndis_rm_hdr length bug.
  19 *
  20 * Copyright (C) 2004 by David Brownell
  21 *		updates to merge with Linux 2.6, better match RNDIS spec
  22 */
  23
  24#include <linux/module.h>
  25#include <linux/moduleparam.h>
  26#include <linux/kernel.h>
  27#include <linux/errno.h>
  28#include <linux/idr.h>
  29#include <linux/list.h>
  30#include <linux/proc_fs.h>
  31#include <linux/slab.h>
  32#include <linux/seq_file.h>
  33#include <linux/netdevice.h>
  34
  35#include <asm/io.h>
  36#include <asm/byteorder.h>
  37#include <asm/unaligned.h>
  38
  39#include "u_rndis.h"
  40
  41#undef	VERBOSE_DEBUG
  42
  43#include "rndis.h"
  44
  45
  46/* The driver for your USB chip needs to support ep0 OUT to work with
  47 * RNDIS, plus all three CDC Ethernet endpoints (interrupt not optional).
  48 *
  49 * Windows hosts need an INF file like Documentation/usb/linux.inf
  50 * and will be happier if you provide the host_addr module parameter.
  51 */
  52
  53#if 0
  54static int rndis_debug = 0;
  55module_param (rndis_debug, int, 0);
  56MODULE_PARM_DESC (rndis_debug, "enable debugging");
  57#else
  58#define rndis_debug		0
  59#endif
  60
  61#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  62
  63#define	NAME_TEMPLATE "driver/rndis-%03d"
  64
  65#endif /* CONFIG_USB_GADGET_DEBUG_FILES */
  66
  67static DEFINE_IDA(rndis_ida);
  68
  69/* Driver Version */
  70static const __le32 rndis_driver_version = cpu_to_le32(1);
  71
  72/* Function Prototypes */
  73static rndis_resp_t *rndis_add_response(struct rndis_params *params,
  74					u32 length);
  75
  76#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  77
  78static const struct file_operations rndis_proc_fops;
  79
  80#endif /* CONFIG_USB_GADGET_DEBUG_FILES */
  81
  82/* supported OIDs */
  83static const u32 oid_supported_list[] =
  84{
  85	/* the general stuff */
  86	RNDIS_OID_GEN_SUPPORTED_LIST,
  87	RNDIS_OID_GEN_HARDWARE_STATUS,
  88	RNDIS_OID_GEN_MEDIA_SUPPORTED,
  89	RNDIS_OID_GEN_MEDIA_IN_USE,
  90	RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE,
  91	RNDIS_OID_GEN_LINK_SPEED,
  92	RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE,
  93	RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE,
  94	RNDIS_OID_GEN_VENDOR_ID,
  95	RNDIS_OID_GEN_VENDOR_DESCRIPTION,
  96	RNDIS_OID_GEN_VENDOR_DRIVER_VERSION,
  97	RNDIS_OID_GEN_CURRENT_PACKET_FILTER,
  98	RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE,
  99	RNDIS_OID_GEN_MEDIA_CONNECT_STATUS,
 100	RNDIS_OID_GEN_PHYSICAL_MEDIUM,
 101
 102	/* the statistical stuff */
 103	RNDIS_OID_GEN_XMIT_OK,
 104	RNDIS_OID_GEN_RCV_OK,
 105	RNDIS_OID_GEN_XMIT_ERROR,
 106	RNDIS_OID_GEN_RCV_ERROR,
 107	RNDIS_OID_GEN_RCV_NO_BUFFER,
 108#ifdef	RNDIS_OPTIONAL_STATS
 109	RNDIS_OID_GEN_DIRECTED_BYTES_XMIT,
 110	RNDIS_OID_GEN_DIRECTED_FRAMES_XMIT,
 111	RNDIS_OID_GEN_MULTICAST_BYTES_XMIT,
 112	RNDIS_OID_GEN_MULTICAST_FRAMES_XMIT,
 113	RNDIS_OID_GEN_BROADCAST_BYTES_XMIT,
 114	RNDIS_OID_GEN_BROADCAST_FRAMES_XMIT,
 115	RNDIS_OID_GEN_DIRECTED_BYTES_RCV,
 116	RNDIS_OID_GEN_DIRECTED_FRAMES_RCV,
 117	RNDIS_OID_GEN_MULTICAST_BYTES_RCV,
 118	RNDIS_OID_GEN_MULTICAST_FRAMES_RCV,
 119	RNDIS_OID_GEN_BROADCAST_BYTES_RCV,
 120	RNDIS_OID_GEN_BROADCAST_FRAMES_RCV,
 121	RNDIS_OID_GEN_RCV_CRC_ERROR,
 122	RNDIS_OID_GEN_TRANSMIT_QUEUE_LENGTH,
 123#endif	/* RNDIS_OPTIONAL_STATS */
 124
 125	/* mandatory 802.3 */
 126	/* the general stuff */
 127	RNDIS_OID_802_3_PERMANENT_ADDRESS,
 128	RNDIS_OID_802_3_CURRENT_ADDRESS,
 129	RNDIS_OID_802_3_MULTICAST_LIST,
 130	RNDIS_OID_802_3_MAC_OPTIONS,
 131	RNDIS_OID_802_3_MAXIMUM_LIST_SIZE,
 132
 133	/* the statistical stuff */
 134	RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT,
 135	RNDIS_OID_802_3_XMIT_ONE_COLLISION,
 136	RNDIS_OID_802_3_XMIT_MORE_COLLISIONS,
 137#ifdef	RNDIS_OPTIONAL_STATS
 138	RNDIS_OID_802_3_XMIT_DEFERRED,
 139	RNDIS_OID_802_3_XMIT_MAX_COLLISIONS,
 140	RNDIS_OID_802_3_RCV_OVERRUN,
 141	RNDIS_OID_802_3_XMIT_UNDERRUN,
 142	RNDIS_OID_802_3_XMIT_HEARTBEAT_FAILURE,
 143	RNDIS_OID_802_3_XMIT_TIMES_CRS_LOST,
 144	RNDIS_OID_802_3_XMIT_LATE_COLLISIONS,
 145#endif	/* RNDIS_OPTIONAL_STATS */
 146
 147#ifdef	RNDIS_PM
 148	/* PM and wakeup are "mandatory" for USB, but the RNDIS specs
 149	 * don't say what they mean ... and the NDIS specs are often
 150	 * confusing and/or ambiguous in this context.  (That is, more
 151	 * so than their specs for the other OIDs.)
 152	 *
 153	 * FIXME someone who knows what these should do, please
 154	 * implement them!
 155	 */
 156
 157	/* power management */
 158	OID_PNP_CAPABILITIES,
 159	OID_PNP_QUERY_POWER,
 160	OID_PNP_SET_POWER,
 161
 162#ifdef	RNDIS_WAKEUP
 163	/* wake up host */
 164	OID_PNP_ENABLE_WAKE_UP,
 165	OID_PNP_ADD_WAKE_UP_PATTERN,
 166	OID_PNP_REMOVE_WAKE_UP_PATTERN,
 167#endif	/* RNDIS_WAKEUP */
 168#endif	/* RNDIS_PM */
 169};
 170
 171
 172/* NDIS Functions */
 173static int gen_ndis_query_resp(struct rndis_params *params, u32 OID, u8 *buf,
 174			       unsigned buf_len, rndis_resp_t *r)
 175{
 176	int retval = -ENOTSUPP;
 177	u32 length = 4;	/* usually */
 178	__le32 *outbuf;
 179	int i, count;
 180	rndis_query_cmplt_type *resp;
 181	struct net_device *net;
 182	struct rtnl_link_stats64 temp;
 183	const struct rtnl_link_stats64 *stats;
 184
 185	if (!r) return -ENOMEM;
 186	resp = (rndis_query_cmplt_type *)r->buf;
 187
 188	if (!resp) return -ENOMEM;
 189
 190	if (buf_len && rndis_debug > 1) {
 191		pr_debug("query OID %08x value, len %d:\n", OID, buf_len);
 192		for (i = 0; i < buf_len; i += 16) {
 193			pr_debug("%03d: %08x %08x %08x %08x\n", i,
 194				get_unaligned_le32(&buf[i]),
 195				get_unaligned_le32(&buf[i + 4]),
 196				get_unaligned_le32(&buf[i + 8]),
 197				get_unaligned_le32(&buf[i + 12]));
 198		}
 199	}
 200
 201	/* response goes here, right after the header */
 202	outbuf = (__le32 *)&resp[1];
 203	resp->InformationBufferOffset = cpu_to_le32(16);
 204
 205	net = params->dev;
 206	stats = dev_get_stats(net, &temp);
 207
 208	switch (OID) {
 209
 210	/* general oids (table 4-1) */
 211
 212	/* mandatory */
 213	case RNDIS_OID_GEN_SUPPORTED_LIST:
 214		pr_debug("%s: RNDIS_OID_GEN_SUPPORTED_LIST\n", __func__);
 215		length = sizeof(oid_supported_list);
 216		count  = length / sizeof(u32);
 217		for (i = 0; i < count; i++)
 218			outbuf[i] = cpu_to_le32(oid_supported_list[i]);
 219		retval = 0;
 220		break;
 221
 222	/* mandatory */
 223	case RNDIS_OID_GEN_HARDWARE_STATUS:
 224		pr_debug("%s: RNDIS_OID_GEN_HARDWARE_STATUS\n", __func__);
 225		/* Bogus question!
 226		 * Hardware must be ready to receive high level protocols.
 227		 * BTW:
 228		 * reddite ergo quae sunt Caesaris Caesari
 229		 * et quae sunt Dei Deo!
 230		 */
 231		*outbuf = cpu_to_le32(0);
 232		retval = 0;
 233		break;
 234
 235	/* mandatory */
 236	case RNDIS_OID_GEN_MEDIA_SUPPORTED:
 237		pr_debug("%s: RNDIS_OID_GEN_MEDIA_SUPPORTED\n", __func__);
 238		*outbuf = cpu_to_le32(params->medium);
 239		retval = 0;
 240		break;
 241
 242	/* mandatory */
 243	case RNDIS_OID_GEN_MEDIA_IN_USE:
 244		pr_debug("%s: RNDIS_OID_GEN_MEDIA_IN_USE\n", __func__);
 245		/* one medium, one transport... (maybe you do it better) */
 246		*outbuf = cpu_to_le32(params->medium);
 247		retval = 0;
 248		break;
 249
 250	/* mandatory */
 251	case RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE:
 252		pr_debug("%s: RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE\n", __func__);
 253		if (params->dev) {
 254			*outbuf = cpu_to_le32(params->dev->mtu);
 255			retval = 0;
 256		}
 257		break;
 258
 259	/* mandatory */
 260	case RNDIS_OID_GEN_LINK_SPEED:
 261		if (rndis_debug > 1)
 262			pr_debug("%s: RNDIS_OID_GEN_LINK_SPEED\n", __func__);
 263		if (params->media_state == RNDIS_MEDIA_STATE_DISCONNECTED)
 264			*outbuf = cpu_to_le32(0);
 265		else
 266			*outbuf = cpu_to_le32(params->speed);
 267		retval = 0;
 268		break;
 269
 270	/* mandatory */
 271	case RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE:
 272		pr_debug("%s: RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE\n", __func__);
 273		if (params->dev) {
 274			*outbuf = cpu_to_le32(params->dev->mtu);
 275			retval = 0;
 276		}
 277		break;
 278
 279	/* mandatory */
 280	case RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE:
 281		pr_debug("%s: RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE\n", __func__);
 282		if (params->dev) {
 283			*outbuf = cpu_to_le32(params->dev->mtu);
 284			retval = 0;
 285		}
 286		break;
 287
 288	/* mandatory */
 289	case RNDIS_OID_GEN_VENDOR_ID:
 290		pr_debug("%s: RNDIS_OID_GEN_VENDOR_ID\n", __func__);
 291		*outbuf = cpu_to_le32(params->vendorID);
 292		retval = 0;
 293		break;
 294
 295	/* mandatory */
 296	case RNDIS_OID_GEN_VENDOR_DESCRIPTION:
 297		pr_debug("%s: RNDIS_OID_GEN_VENDOR_DESCRIPTION\n", __func__);
 298		if (params->vendorDescr) {
 299			length = strlen(params->vendorDescr);
 300			memcpy(outbuf, params->vendorDescr, length);
 301		} else {
 302			outbuf[0] = 0;
 303		}
 304		retval = 0;
 305		break;
 306
 307	case RNDIS_OID_GEN_VENDOR_DRIVER_VERSION:
 308		pr_debug("%s: RNDIS_OID_GEN_VENDOR_DRIVER_VERSION\n", __func__);
 309		/* Created as LE */
 310		*outbuf = rndis_driver_version;
 311		retval = 0;
 312		break;
 313
 314	/* mandatory */
 315	case RNDIS_OID_GEN_CURRENT_PACKET_FILTER:
 316		pr_debug("%s: RNDIS_OID_GEN_CURRENT_PACKET_FILTER\n", __func__);
 317		*outbuf = cpu_to_le32(*params->filter);
 318		retval = 0;
 319		break;
 320
 321	/* mandatory */
 322	case RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE:
 323		pr_debug("%s: RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE\n", __func__);
 324		*outbuf = cpu_to_le32(RNDIS_MAX_TOTAL_SIZE);
 325		retval = 0;
 326		break;
 327
 328	/* mandatory */
 329	case RNDIS_OID_GEN_MEDIA_CONNECT_STATUS:
 330		if (rndis_debug > 1)
 331			pr_debug("%s: RNDIS_OID_GEN_MEDIA_CONNECT_STATUS\n", __func__);
 332		*outbuf = cpu_to_le32(params->media_state);
 333		retval = 0;
 334		break;
 335
 336	case RNDIS_OID_GEN_PHYSICAL_MEDIUM:
 337		pr_debug("%s: RNDIS_OID_GEN_PHYSICAL_MEDIUM\n", __func__);
 338		*outbuf = cpu_to_le32(0);
 339		retval = 0;
 340		break;
 341
 342	/* The RNDIS specification is incomplete/wrong.   Some versions
 343	 * of MS-Windows expect OIDs that aren't specified there.  Other
 344	 * versions emit undefined RNDIS messages. DOCUMENT ALL THESE!
 345	 */
 346	case RNDIS_OID_GEN_MAC_OPTIONS:		/* from WinME */
 347		pr_debug("%s: RNDIS_OID_GEN_MAC_OPTIONS\n", __func__);
 348		*outbuf = cpu_to_le32(
 349			  RNDIS_MAC_OPTION_RECEIVE_SERIALIZED
 350			| RNDIS_MAC_OPTION_FULL_DUPLEX);
 351		retval = 0;
 352		break;
 353
 354	/* statistics OIDs (table 4-2) */
 355
 356	/* mandatory */
 357	case RNDIS_OID_GEN_XMIT_OK:
 358		if (rndis_debug > 1)
 359			pr_debug("%s: RNDIS_OID_GEN_XMIT_OK\n", __func__);
 360		if (stats) {
 361			*outbuf = cpu_to_le32(stats->tx_packets
 362				- stats->tx_errors - stats->tx_dropped);
 363			retval = 0;
 364		}
 365		break;
 366
 367	/* mandatory */
 368	case RNDIS_OID_GEN_RCV_OK:
 369		if (rndis_debug > 1)
 370			pr_debug("%s: RNDIS_OID_GEN_RCV_OK\n", __func__);
 371		if (stats) {
 372			*outbuf = cpu_to_le32(stats->rx_packets
 373				- stats->rx_errors - stats->rx_dropped);
 374			retval = 0;
 375		}
 376		break;
 377
 378	/* mandatory */
 379	case RNDIS_OID_GEN_XMIT_ERROR:
 380		if (rndis_debug > 1)
 381			pr_debug("%s: RNDIS_OID_GEN_XMIT_ERROR\n", __func__);
 382		if (stats) {
 383			*outbuf = cpu_to_le32(stats->tx_errors);
 384			retval = 0;
 385		}
 386		break;
 387
 388	/* mandatory */
 389	case RNDIS_OID_GEN_RCV_ERROR:
 390		if (rndis_debug > 1)
 391			pr_debug("%s: RNDIS_OID_GEN_RCV_ERROR\n", __func__);
 392		if (stats) {
 393			*outbuf = cpu_to_le32(stats->rx_errors);
 394			retval = 0;
 395		}
 396		break;
 397
 398	/* mandatory */
 399	case RNDIS_OID_GEN_RCV_NO_BUFFER:
 400		pr_debug("%s: RNDIS_OID_GEN_RCV_NO_BUFFER\n", __func__);
 401		if (stats) {
 402			*outbuf = cpu_to_le32(stats->rx_dropped);
 403			retval = 0;
 404		}
 405		break;
 406
 407	/* ieee802.3 OIDs (table 4-3) */
 408
 409	/* mandatory */
 410	case RNDIS_OID_802_3_PERMANENT_ADDRESS:
 411		pr_debug("%s: RNDIS_OID_802_3_PERMANENT_ADDRESS\n", __func__);
 412		if (params->dev) {
 413			length = ETH_ALEN;
 414			memcpy(outbuf, params->host_mac, length);
 415			retval = 0;
 416		}
 417		break;
 418
 419	/* mandatory */
 420	case RNDIS_OID_802_3_CURRENT_ADDRESS:
 421		pr_debug("%s: RNDIS_OID_802_3_CURRENT_ADDRESS\n", __func__);
 422		if (params->dev) {
 423			length = ETH_ALEN;
 424			memcpy(outbuf, params->host_mac, length);
 425			retval = 0;
 426		}
 427		break;
 428
 429	/* mandatory */
 430	case RNDIS_OID_802_3_MULTICAST_LIST:
 431		pr_debug("%s: RNDIS_OID_802_3_MULTICAST_LIST\n", __func__);
 432		/* Multicast base address only */
 433		*outbuf = cpu_to_le32(0xE0000000);
 434		retval = 0;
 435		break;
 436
 437	/* mandatory */
 438	case RNDIS_OID_802_3_MAXIMUM_LIST_SIZE:
 439		pr_debug("%s: RNDIS_OID_802_3_MAXIMUM_LIST_SIZE\n", __func__);
 440		/* Multicast base address only */
 441		*outbuf = cpu_to_le32(1);
 442		retval = 0;
 443		break;
 444
 445	case RNDIS_OID_802_3_MAC_OPTIONS:
 446		pr_debug("%s: RNDIS_OID_802_3_MAC_OPTIONS\n", __func__);
 447		*outbuf = cpu_to_le32(0);
 448		retval = 0;
 449		break;
 450
 451	/* ieee802.3 statistics OIDs (table 4-4) */
 452
 453	/* mandatory */
 454	case RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT:
 455		pr_debug("%s: RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT\n", __func__);
 456		if (stats) {
 457			*outbuf = cpu_to_le32(stats->rx_frame_errors);
 458			retval = 0;
 459		}
 460		break;
 461
 462	/* mandatory */
 463	case RNDIS_OID_802_3_XMIT_ONE_COLLISION:
 464		pr_debug("%s: RNDIS_OID_802_3_XMIT_ONE_COLLISION\n", __func__);
 465		*outbuf = cpu_to_le32(0);
 466		retval = 0;
 467		break;
 468
 469	/* mandatory */
 470	case RNDIS_OID_802_3_XMIT_MORE_COLLISIONS:
 471		pr_debug("%s: RNDIS_OID_802_3_XMIT_MORE_COLLISIONS\n", __func__);
 472		*outbuf = cpu_to_le32(0);
 473		retval = 0;
 474		break;
 475
 476	default:
 477		pr_warning("%s: query unknown OID 0x%08X\n",
 478			 __func__, OID);
 479	}
 480	if (retval < 0)
 481		length = 0;
 482
 483	resp->InformationBufferLength = cpu_to_le32(length);
 484	r->length = length + sizeof(*resp);
 485	resp->MessageLength = cpu_to_le32(r->length);
 486	return retval;
 487}
 488
 489static int gen_ndis_set_resp(struct rndis_params *params, u32 OID,
 490			     u8 *buf, u32 buf_len, rndis_resp_t *r)
 491{
 492	rndis_set_cmplt_type *resp;
 493	int i, retval = -ENOTSUPP;
 494
 495	if (!r)
 496		return -ENOMEM;
 497	resp = (rndis_set_cmplt_type *)r->buf;
 498	if (!resp)
 499		return -ENOMEM;
 500
 501	if (buf_len && rndis_debug > 1) {
 502		pr_debug("set OID %08x value, len %d:\n", OID, buf_len);
 503		for (i = 0; i < buf_len; i += 16) {
 504			pr_debug("%03d: %08x %08x %08x %08x\n", i,
 505				get_unaligned_le32(&buf[i]),
 506				get_unaligned_le32(&buf[i + 4]),
 507				get_unaligned_le32(&buf[i + 8]),
 508				get_unaligned_le32(&buf[i + 12]));
 509		}
 510	}
 511
 512	switch (OID) {
 513	case RNDIS_OID_GEN_CURRENT_PACKET_FILTER:
 514
 515		/* these NDIS_PACKET_TYPE_* bitflags are shared with
 516		 * cdc_filter; it's not RNDIS-specific
 517		 * NDIS_PACKET_TYPE_x == USB_CDC_PACKET_TYPE_x for x in:
 518		 *	PROMISCUOUS, DIRECTED,
 519		 *	MULTICAST, ALL_MULTICAST, BROADCAST
 520		 */
 521		*params->filter = (u16)get_unaligned_le32(buf);
 522		pr_debug("%s: RNDIS_OID_GEN_CURRENT_PACKET_FILTER %08x\n",
 523			__func__, *params->filter);
 524
 525		/* this call has a significant side effect:  it's
 526		 * what makes the packet flow start and stop, like
 527		 * activating the CDC Ethernet altsetting.
 528		 */
 529		retval = 0;
 530		if (*params->filter) {
 531			params->state = RNDIS_DATA_INITIALIZED;
 532			netif_carrier_on(params->dev);
 533			if (netif_running(params->dev))
 534				netif_wake_queue(params->dev);
 535		} else {
 536			params->state = RNDIS_INITIALIZED;
 537			netif_carrier_off(params->dev);
 538			netif_stop_queue(params->dev);
 539		}
 540		break;
 541
 542	case RNDIS_OID_802_3_MULTICAST_LIST:
 543		/* I think we can ignore this */
 544		pr_debug("%s: RNDIS_OID_802_3_MULTICAST_LIST\n", __func__);
 545		retval = 0;
 546		break;
 547
 548	default:
 549		pr_warning("%s: set unknown OID 0x%08X, size %d\n",
 550			 __func__, OID, buf_len);
 551	}
 552
 553	return retval;
 554}
 555
 556/*
 557 * Response Functions
 558 */
 559
 560static int rndis_init_response(struct rndis_params *params,
 561			       rndis_init_msg_type *buf)
 562{
 563	rndis_init_cmplt_type *resp;
 564	rndis_resp_t *r;
 565
 566	if (!params->dev)
 567		return -ENOTSUPP;
 568
 569	r = rndis_add_response(params, sizeof(rndis_init_cmplt_type));
 570	if (!r)
 571		return -ENOMEM;
 572	resp = (rndis_init_cmplt_type *)r->buf;
 573
 574	resp->MessageType = cpu_to_le32(RNDIS_MSG_INIT_C);
 575	resp->MessageLength = cpu_to_le32(52);
 576	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 577	resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 578	resp->MajorVersion = cpu_to_le32(RNDIS_MAJOR_VERSION);
 579	resp->MinorVersion = cpu_to_le32(RNDIS_MINOR_VERSION);
 580	resp->DeviceFlags = cpu_to_le32(RNDIS_DF_CONNECTIONLESS);
 581	resp->Medium = cpu_to_le32(RNDIS_MEDIUM_802_3);
 582	resp->MaxPacketsPerTransfer = cpu_to_le32(1);
 583	resp->MaxTransferSize = cpu_to_le32(
 584		  params->dev->mtu
 585		+ sizeof(struct ethhdr)
 586		+ sizeof(struct rndis_packet_msg_type)
 587		+ 22);
 588	resp->PacketAlignmentFactor = cpu_to_le32(0);
 589	resp->AFListOffset = cpu_to_le32(0);
 590	resp->AFListSize = cpu_to_le32(0);
 591
 592	params->resp_avail(params->v);
 593	return 0;
 594}
 595
 596static int rndis_query_response(struct rndis_params *params,
 597				rndis_query_msg_type *buf)
 598{
 599	rndis_query_cmplt_type *resp;
 600	rndis_resp_t *r;
 601
 602	/* pr_debug("%s: OID = %08X\n", __func__, cpu_to_le32(buf->OID)); */
 603	if (!params->dev)
 604		return -ENOTSUPP;
 605
 606	/*
 607	 * we need more memory:
 608	 * gen_ndis_query_resp expects enough space for
 609	 * rndis_query_cmplt_type followed by data.
 610	 * oid_supported_list is the largest data reply
 611	 */
 612	r = rndis_add_response(params,
 613		sizeof(oid_supported_list) + sizeof(rndis_query_cmplt_type));
 614	if (!r)
 615		return -ENOMEM;
 616	resp = (rndis_query_cmplt_type *)r->buf;
 617
 618	resp->MessageType = cpu_to_le32(RNDIS_MSG_QUERY_C);
 619	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 620
 621	if (gen_ndis_query_resp(params, le32_to_cpu(buf->OID),
 622			le32_to_cpu(buf->InformationBufferOffset)
 623					+ 8 + (u8 *)buf,
 624			le32_to_cpu(buf->InformationBufferLength),
 625			r)) {
 626		/* OID not supported */
 627		resp->Status = cpu_to_le32(RNDIS_STATUS_NOT_SUPPORTED);
 628		resp->MessageLength = cpu_to_le32(sizeof *resp);
 629		resp->InformationBufferLength = cpu_to_le32(0);
 630		resp->InformationBufferOffset = cpu_to_le32(0);
 631	} else
 632		resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 633
 634	params->resp_avail(params->v);
 635	return 0;
 636}
 637
 638static int rndis_set_response(struct rndis_params *params,
 639			      rndis_set_msg_type *buf)
 640{
 641	u32 BufLength, BufOffset;
 642	rndis_set_cmplt_type *resp;
 643	rndis_resp_t *r;
 644
 645	r = rndis_add_response(params, sizeof(rndis_set_cmplt_type));
 646	if (!r)
 647		return -ENOMEM;
 648	resp = (rndis_set_cmplt_type *)r->buf;
 649
 650	BufLength = le32_to_cpu(buf->InformationBufferLength);
 651	BufOffset = le32_to_cpu(buf->InformationBufferOffset);
 652
 653#ifdef	VERBOSE_DEBUG
 654	pr_debug("%s: Length: %d\n", __func__, BufLength);
 655	pr_debug("%s: Offset: %d\n", __func__, BufOffset);
 656	pr_debug("%s: InfoBuffer: ", __func__);
 657
 658	for (i = 0; i < BufLength; i++) {
 659		pr_debug("%02x ", *(((u8 *) buf) + i + 8 + BufOffset));
 660	}
 661
 662	pr_debug("\n");
 663#endif
 664
 665	resp->MessageType = cpu_to_le32(RNDIS_MSG_SET_C);
 666	resp->MessageLength = cpu_to_le32(16);
 667	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 668	if (gen_ndis_set_resp(params, le32_to_cpu(buf->OID),
 669			((u8 *)buf) + 8 + BufOffset, BufLength, r))
 670		resp->Status = cpu_to_le32(RNDIS_STATUS_NOT_SUPPORTED);
 671	else
 672		resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 673
 674	params->resp_avail(params->v);
 675	return 0;
 676}
 677
 678static int rndis_reset_response(struct rndis_params *params,
 679				rndis_reset_msg_type *buf)
 680{
 681	rndis_reset_cmplt_type *resp;
 682	rndis_resp_t *r;
 
 
 
 
 
 
 683
 684	r = rndis_add_response(params, sizeof(rndis_reset_cmplt_type));
 685	if (!r)
 686		return -ENOMEM;
 687	resp = (rndis_reset_cmplt_type *)r->buf;
 688
 689	resp->MessageType = cpu_to_le32(RNDIS_MSG_RESET_C);
 690	resp->MessageLength = cpu_to_le32(16);
 691	resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 692	/* resent information */
 693	resp->AddressingReset = cpu_to_le32(1);
 694
 695	params->resp_avail(params->v);
 696	return 0;
 697}
 698
 699static int rndis_keepalive_response(struct rndis_params *params,
 700				    rndis_keepalive_msg_type *buf)
 701{
 702	rndis_keepalive_cmplt_type *resp;
 703	rndis_resp_t *r;
 704
 705	/* host "should" check only in RNDIS_DATA_INITIALIZED state */
 706
 707	r = rndis_add_response(params, sizeof(rndis_keepalive_cmplt_type));
 708	if (!r)
 709		return -ENOMEM;
 710	resp = (rndis_keepalive_cmplt_type *)r->buf;
 711
 712	resp->MessageType = cpu_to_le32(RNDIS_MSG_KEEPALIVE_C);
 713	resp->MessageLength = cpu_to_le32(16);
 714	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 715	resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 716
 717	params->resp_avail(params->v);
 718	return 0;
 719}
 720
 721
 722/*
 723 * Device to Host Comunication
 724 */
 725static int rndis_indicate_status_msg(struct rndis_params *params, u32 status)
 726{
 727	rndis_indicate_status_msg_type *resp;
 728	rndis_resp_t *r;
 729
 730	if (params->state == RNDIS_UNINITIALIZED)
 731		return -ENOTSUPP;
 732
 733	r = rndis_add_response(params, sizeof(rndis_indicate_status_msg_type));
 734	if (!r)
 735		return -ENOMEM;
 736	resp = (rndis_indicate_status_msg_type *)r->buf;
 737
 738	resp->MessageType = cpu_to_le32(RNDIS_MSG_INDICATE);
 739	resp->MessageLength = cpu_to_le32(20);
 740	resp->Status = cpu_to_le32(status);
 741	resp->StatusBufferLength = cpu_to_le32(0);
 742	resp->StatusBufferOffset = cpu_to_le32(0);
 743
 744	params->resp_avail(params->v);
 745	return 0;
 746}
 747
 748int rndis_signal_connect(struct rndis_params *params)
 749{
 750	params->media_state = RNDIS_MEDIA_STATE_CONNECTED;
 751	return rndis_indicate_status_msg(params, RNDIS_STATUS_MEDIA_CONNECT);
 752}
 753EXPORT_SYMBOL_GPL(rndis_signal_connect);
 754
 755int rndis_signal_disconnect(struct rndis_params *params)
 756{
 757	params->media_state = RNDIS_MEDIA_STATE_DISCONNECTED;
 758	return rndis_indicate_status_msg(params, RNDIS_STATUS_MEDIA_DISCONNECT);
 759}
 760EXPORT_SYMBOL_GPL(rndis_signal_disconnect);
 761
 762void rndis_uninit(struct rndis_params *params)
 763{
 764	u8 *buf;
 765	u32 length;
 766
 767	if (!params)
 768		return;
 769	params->state = RNDIS_UNINITIALIZED;
 770
 771	/* drain the response queue */
 772	while ((buf = rndis_get_next_response(params, &length)))
 773		rndis_free_response(params, buf);
 774}
 775EXPORT_SYMBOL_GPL(rndis_uninit);
 776
 777void rndis_set_host_mac(struct rndis_params *params, const u8 *addr)
 778{
 779	params->host_mac = addr;
 780}
 781EXPORT_SYMBOL_GPL(rndis_set_host_mac);
 782
 783/*
 784 * Message Parser
 785 */
 786int rndis_msg_parser(struct rndis_params *params, u8 *buf)
 787{
 788	u32 MsgType, MsgLength;
 789	__le32 *tmp;
 790
 791	if (!buf)
 792		return -ENOMEM;
 793
 794	tmp = (__le32 *)buf;
 795	MsgType   = get_unaligned_le32(tmp++);
 796	MsgLength = get_unaligned_le32(tmp++);
 797
 798	if (!params)
 799		return -ENOTSUPP;
 800
 801	/* NOTE: RNDIS is *EXTREMELY* chatty ... Windows constantly polls for
 802	 * rx/tx statistics and link status, in addition to KEEPALIVE traffic
 803	 * and normal HC level polling to see if there's any IN traffic.
 804	 */
 805
 806	/* For USB: responses may take up to 10 seconds */
 807	switch (MsgType) {
 808	case RNDIS_MSG_INIT:
 809		pr_debug("%s: RNDIS_MSG_INIT\n",
 810			__func__);
 811		params->state = RNDIS_INITIALIZED;
 812		return rndis_init_response(params, (rndis_init_msg_type *)buf);
 813
 814	case RNDIS_MSG_HALT:
 815		pr_debug("%s: RNDIS_MSG_HALT\n",
 816			__func__);
 817		params->state = RNDIS_UNINITIALIZED;
 818		if (params->dev) {
 819			netif_carrier_off(params->dev);
 820			netif_stop_queue(params->dev);
 821		}
 822		return 0;
 823
 824	case RNDIS_MSG_QUERY:
 825		return rndis_query_response(params,
 826					(rndis_query_msg_type *)buf);
 827
 828	case RNDIS_MSG_SET:
 829		return rndis_set_response(params, (rndis_set_msg_type *)buf);
 830
 831	case RNDIS_MSG_RESET:
 832		pr_debug("%s: RNDIS_MSG_RESET\n",
 833			__func__);
 834		return rndis_reset_response(params,
 835					(rndis_reset_msg_type *)buf);
 836
 837	case RNDIS_MSG_KEEPALIVE:
 838		/* For USB: host does this every 5 seconds */
 839		if (rndis_debug > 1)
 840			pr_debug("%s: RNDIS_MSG_KEEPALIVE\n",
 841				__func__);
 842		return rndis_keepalive_response(params,
 843						 (rndis_keepalive_msg_type *)
 844						 buf);
 845
 846	default:
 847		/* At least Windows XP emits some undefined RNDIS messages.
 848		 * In one case those messages seemed to relate to the host
 849		 * suspending itself.
 850		 */
 851		pr_warning("%s: unknown RNDIS message 0x%08X len %d\n",
 852			__func__, MsgType, MsgLength);
 853		print_hex_dump_bytes(__func__, DUMP_PREFIX_OFFSET,
 854				     buf, MsgLength);
 855		break;
 856	}
 857
 858	return -ENOTSUPP;
 859}
 860EXPORT_SYMBOL_GPL(rndis_msg_parser);
 861
 862static inline int rndis_get_nr(void)
 863{
 864	return ida_simple_get(&rndis_ida, 0, 0, GFP_KERNEL);
 865}
 866
 867static inline void rndis_put_nr(int nr)
 868{
 869	ida_simple_remove(&rndis_ida, nr);
 870}
 871
 872struct rndis_params *rndis_register(void (*resp_avail)(void *v), void *v)
 873{
 874	struct rndis_params *params;
 875	int i;
 876
 877	if (!resp_avail)
 878		return ERR_PTR(-EINVAL);
 879
 880	i = rndis_get_nr();
 881	if (i < 0) {
 882		pr_debug("failed\n");
 883
 884		return ERR_PTR(-ENODEV);
 885	}
 886
 887	params = kzalloc(sizeof(*params), GFP_KERNEL);
 888	if (!params) {
 889		rndis_put_nr(i);
 890
 891		return ERR_PTR(-ENOMEM);
 892	}
 893
 894#ifdef	CONFIG_USB_GADGET_DEBUG_FILES
 895	{
 896		struct proc_dir_entry *proc_entry;
 897		char name[20];
 898
 899		sprintf(name, NAME_TEMPLATE, i);
 900		proc_entry = proc_create_data(name, 0660, NULL,
 901					      &rndis_proc_fops, params);
 902		if (!proc_entry) {
 903			kfree(params);
 904			rndis_put_nr(i);
 905
 906			return ERR_PTR(-EIO);
 907		}
 908	}
 909#endif
 910
 911	params->confignr = i;
 912	params->used = 1;
 913	params->state = RNDIS_UNINITIALIZED;
 914	params->media_state = RNDIS_MEDIA_STATE_DISCONNECTED;
 915	params->resp_avail = resp_avail;
 916	params->v = v;
 917	INIT_LIST_HEAD(&params->resp_queue);
 918	pr_debug("%s: configNr = %d\n", __func__, i);
 919
 920	return params;
 921}
 922EXPORT_SYMBOL_GPL(rndis_register);
 923
 924void rndis_deregister(struct rndis_params *params)
 925{
 926	int i;
 927
 928	pr_debug("%s:\n", __func__);
 929
 930	if (!params)
 931		return;
 932
 933	i = params->confignr;
 934
 935#ifdef CONFIG_USB_GADGET_DEBUG_FILES
 936	{
 937		char name[20];
 938
 939		sprintf(name, NAME_TEMPLATE, i);
 940		remove_proc_entry(name, NULL);
 941	}
 942#endif
 943
 944	kfree(params);
 945	rndis_put_nr(i);
 946}
 947EXPORT_SYMBOL_GPL(rndis_deregister);
 948int rndis_set_param_dev(struct rndis_params *params, struct net_device *dev,
 949			u16 *cdc_filter)
 950{
 951	pr_debug("%s:\n", __func__);
 952	if (!dev)
 953		return -EINVAL;
 954	if (!params)
 955		return -1;
 956
 957	params->dev = dev;
 958	params->filter = cdc_filter;
 959
 960	return 0;
 961}
 962EXPORT_SYMBOL_GPL(rndis_set_param_dev);
 963
 964int rndis_set_param_vendor(struct rndis_params *params, u32 vendorID,
 965			   const char *vendorDescr)
 966{
 967	pr_debug("%s:\n", __func__);
 968	if (!vendorDescr) return -1;
 969	if (!params)
 970		return -1;
 971
 972	params->vendorID = vendorID;
 973	params->vendorDescr = vendorDescr;
 974
 975	return 0;
 976}
 977EXPORT_SYMBOL_GPL(rndis_set_param_vendor);
 978
 979int rndis_set_param_medium(struct rndis_params *params, u32 medium, u32 speed)
 980{
 981	pr_debug("%s: %u %u\n", __func__, medium, speed);
 982	if (!params)
 983		return -1;
 984
 985	params->medium = medium;
 986	params->speed = speed;
 987
 988	return 0;
 989}
 990EXPORT_SYMBOL_GPL(rndis_set_param_medium);
 991
 992void rndis_add_hdr(struct sk_buff *skb)
 993{
 994	struct rndis_packet_msg_type *header;
 995
 996	if (!skb)
 997		return;
 998	header = (void *)skb_push(skb, sizeof(*header));
 999	memset(header, 0, sizeof *header);
1000	header->MessageType = cpu_to_le32(RNDIS_MSG_PACKET);
1001	header->MessageLength = cpu_to_le32(skb->len);
1002	header->DataOffset = cpu_to_le32(36);
1003	header->DataLength = cpu_to_le32(skb->len - sizeof(*header));
1004}
1005EXPORT_SYMBOL_GPL(rndis_add_hdr);
1006
1007void rndis_free_response(struct rndis_params *params, u8 *buf)
1008{
1009	rndis_resp_t *r, *n;
1010
1011	list_for_each_entry_safe(r, n, &params->resp_queue, list) {
1012		if (r->buf == buf) {
1013			list_del(&r->list);
1014			kfree(r);
1015		}
1016	}
1017}
1018EXPORT_SYMBOL_GPL(rndis_free_response);
1019
1020u8 *rndis_get_next_response(struct rndis_params *params, u32 *length)
1021{
1022	rndis_resp_t *r, *n;
1023
1024	if (!length) return NULL;
1025
1026	list_for_each_entry_safe(r, n, &params->resp_queue, list) {
1027		if (!r->send) {
1028			r->send = 1;
1029			*length = r->length;
1030			return r->buf;
1031		}
1032	}
1033
1034	return NULL;
1035}
1036EXPORT_SYMBOL_GPL(rndis_get_next_response);
1037
1038static rndis_resp_t *rndis_add_response(struct rndis_params *params, u32 length)
1039{
1040	rndis_resp_t *r;
1041
1042	/* NOTE: this gets copied into ether.c USB_BUFSIZ bytes ... */
1043	r = kmalloc(sizeof(rndis_resp_t) + length, GFP_ATOMIC);
1044	if (!r) return NULL;
1045
1046	r->buf = (u8 *)(r + 1);
1047	r->length = length;
1048	r->send = 0;
1049
1050	list_add_tail(&r->list, &params->resp_queue);
1051	return r;
1052}
1053
1054int rndis_rm_hdr(struct gether *port,
1055			struct sk_buff *skb,
1056			struct sk_buff_head *list)
1057{
1058	/* tmp points to a struct rndis_packet_msg_type */
1059	__le32 *tmp = (void *)skb->data;
1060
1061	/* MessageType, MessageLength */
1062	if (cpu_to_le32(RNDIS_MSG_PACKET)
1063			!= get_unaligned(tmp++)) {
1064		dev_kfree_skb_any(skb);
1065		return -EINVAL;
1066	}
1067	tmp++;
1068
1069	/* DataOffset, DataLength */
1070	if (!skb_pull(skb, get_unaligned_le32(tmp++) + 8)) {
1071		dev_kfree_skb_any(skb);
1072		return -EOVERFLOW;
1073	}
1074	skb_trim(skb, get_unaligned_le32(tmp++));
1075
1076	skb_queue_tail(list, skb);
1077	return 0;
1078}
1079EXPORT_SYMBOL_GPL(rndis_rm_hdr);
1080
1081#ifdef CONFIG_USB_GADGET_DEBUG_FILES
1082
1083static int rndis_proc_show(struct seq_file *m, void *v)
1084{
1085	rndis_params *param = m->private;
1086
1087	seq_printf(m,
1088			 "Config Nr. %d\n"
1089			 "used      : %s\n"
1090			 "state     : %s\n"
1091			 "medium    : 0x%08X\n"
1092			 "speed     : %d\n"
1093			 "cable     : %s\n"
1094			 "vendor ID : 0x%08X\n"
1095			 "vendor    : %s\n",
1096			 param->confignr, (param->used) ? "y" : "n",
1097			 ({ char *s = "?";
1098			 switch (param->state) {
1099			 case RNDIS_UNINITIALIZED:
1100				s = "RNDIS_UNINITIALIZED"; break;
1101			 case RNDIS_INITIALIZED:
1102				s = "RNDIS_INITIALIZED"; break;
1103			 case RNDIS_DATA_INITIALIZED:
1104				s = "RNDIS_DATA_INITIALIZED"; break;
1105			} s; }),
1106			 param->medium,
1107			 (param->media_state) ? 0 : param->speed*100,
1108			 (param->media_state) ? "disconnected" : "connected",
1109			 param->vendorID, param->vendorDescr);
1110	return 0;
1111}
1112
1113static ssize_t rndis_proc_write(struct file *file, const char __user *buffer,
1114				size_t count, loff_t *ppos)
1115{
1116	rndis_params *p = PDE_DATA(file_inode(file));
1117	u32 speed = 0;
1118	int i, fl_speed = 0;
1119
1120	for (i = 0; i < count; i++) {
1121		char c;
1122		if (get_user(c, buffer))
1123			return -EFAULT;
1124		switch (c) {
1125		case '0':
1126		case '1':
1127		case '2':
1128		case '3':
1129		case '4':
1130		case '5':
1131		case '6':
1132		case '7':
1133		case '8':
1134		case '9':
1135			fl_speed = 1;
1136			speed = speed * 10 + c - '0';
1137			break;
1138		case 'C':
1139		case 'c':
1140			rndis_signal_connect(p);
1141			break;
1142		case 'D':
1143		case 'd':
1144			rndis_signal_disconnect(p);
1145			break;
1146		default:
1147			if (fl_speed) p->speed = speed;
1148			else pr_debug("%c is not valid\n", c);
1149			break;
1150		}
1151
1152		buffer++;
1153	}
1154
1155	return count;
1156}
1157
1158static int rndis_proc_open(struct inode *inode, struct file *file)
1159{
1160	return single_open(file, rndis_proc_show, PDE_DATA(inode));
1161}
1162
1163static const struct file_operations rndis_proc_fops = {
1164	.owner		= THIS_MODULE,
1165	.open		= rndis_proc_open,
1166	.read		= seq_read,
1167	.llseek		= seq_lseek,
1168	.release	= single_release,
1169	.write		= rndis_proc_write,
1170};
1171
1172#define	NAME_TEMPLATE "driver/rndis-%03d"
1173
1174#endif /* CONFIG_USB_GADGET_DEBUG_FILES */
v4.10.11
   1/*
   2 * RNDIS MSG parser
   3 *
   4 * Authors:	Benedikt Spranger, Pengutronix
   5 *		Robert Schwebel, Pengutronix
   6 *
   7 *              This program is free software; you can redistribute it and/or
   8 *              modify it under the terms of the GNU General Public License
   9 *              version 2, as published by the Free Software Foundation.
  10 *
  11 *		This software was originally developed in conformance with
  12 *		Microsoft's Remote NDIS Specification License Agreement.
  13 *
  14 * 03/12/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
  15 *		Fixed message length bug in init_response
  16 *
  17 * 03/25/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
  18 *		Fixed rndis_rm_hdr length bug.
  19 *
  20 * Copyright (C) 2004 by David Brownell
  21 *		updates to merge with Linux 2.6, better match RNDIS spec
  22 */
  23
  24#include <linux/module.h>
  25#include <linux/moduleparam.h>
  26#include <linux/kernel.h>
  27#include <linux/errno.h>
  28#include <linux/idr.h>
  29#include <linux/list.h>
  30#include <linux/proc_fs.h>
  31#include <linux/slab.h>
  32#include <linux/seq_file.h>
  33#include <linux/netdevice.h>
  34
  35#include <asm/io.h>
  36#include <asm/byteorder.h>
  37#include <asm/unaligned.h>
  38
  39#include "u_rndis.h"
  40
  41#undef	VERBOSE_DEBUG
  42
  43#include "rndis.h"
  44
  45
  46/* The driver for your USB chip needs to support ep0 OUT to work with
  47 * RNDIS, plus all three CDC Ethernet endpoints (interrupt not optional).
  48 *
  49 * Windows hosts need an INF file like Documentation/usb/linux.inf
  50 * and will be happier if you provide the host_addr module parameter.
  51 */
  52
  53#if 0
  54static int rndis_debug = 0;
  55module_param (rndis_debug, int, 0);
  56MODULE_PARM_DESC (rndis_debug, "enable debugging");
  57#else
  58#define rndis_debug		0
  59#endif
  60
  61#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  62
  63#define	NAME_TEMPLATE "driver/rndis-%03d"
  64
  65#endif /* CONFIG_USB_GADGET_DEBUG_FILES */
  66
  67static DEFINE_IDA(rndis_ida);
  68
  69/* Driver Version */
  70static const __le32 rndis_driver_version = cpu_to_le32(1);
  71
  72/* Function Prototypes */
  73static rndis_resp_t *rndis_add_response(struct rndis_params *params,
  74					u32 length);
  75
  76#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  77
  78static const struct file_operations rndis_proc_fops;
  79
  80#endif /* CONFIG_USB_GADGET_DEBUG_FILES */
  81
  82/* supported OIDs */
  83static const u32 oid_supported_list[] = {
 
  84	/* the general stuff */
  85	RNDIS_OID_GEN_SUPPORTED_LIST,
  86	RNDIS_OID_GEN_HARDWARE_STATUS,
  87	RNDIS_OID_GEN_MEDIA_SUPPORTED,
  88	RNDIS_OID_GEN_MEDIA_IN_USE,
  89	RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE,
  90	RNDIS_OID_GEN_LINK_SPEED,
  91	RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE,
  92	RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE,
  93	RNDIS_OID_GEN_VENDOR_ID,
  94	RNDIS_OID_GEN_VENDOR_DESCRIPTION,
  95	RNDIS_OID_GEN_VENDOR_DRIVER_VERSION,
  96	RNDIS_OID_GEN_CURRENT_PACKET_FILTER,
  97	RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE,
  98	RNDIS_OID_GEN_MEDIA_CONNECT_STATUS,
  99	RNDIS_OID_GEN_PHYSICAL_MEDIUM,
 100
 101	/* the statistical stuff */
 102	RNDIS_OID_GEN_XMIT_OK,
 103	RNDIS_OID_GEN_RCV_OK,
 104	RNDIS_OID_GEN_XMIT_ERROR,
 105	RNDIS_OID_GEN_RCV_ERROR,
 106	RNDIS_OID_GEN_RCV_NO_BUFFER,
 107#ifdef	RNDIS_OPTIONAL_STATS
 108	RNDIS_OID_GEN_DIRECTED_BYTES_XMIT,
 109	RNDIS_OID_GEN_DIRECTED_FRAMES_XMIT,
 110	RNDIS_OID_GEN_MULTICAST_BYTES_XMIT,
 111	RNDIS_OID_GEN_MULTICAST_FRAMES_XMIT,
 112	RNDIS_OID_GEN_BROADCAST_BYTES_XMIT,
 113	RNDIS_OID_GEN_BROADCAST_FRAMES_XMIT,
 114	RNDIS_OID_GEN_DIRECTED_BYTES_RCV,
 115	RNDIS_OID_GEN_DIRECTED_FRAMES_RCV,
 116	RNDIS_OID_GEN_MULTICAST_BYTES_RCV,
 117	RNDIS_OID_GEN_MULTICAST_FRAMES_RCV,
 118	RNDIS_OID_GEN_BROADCAST_BYTES_RCV,
 119	RNDIS_OID_GEN_BROADCAST_FRAMES_RCV,
 120	RNDIS_OID_GEN_RCV_CRC_ERROR,
 121	RNDIS_OID_GEN_TRANSMIT_QUEUE_LENGTH,
 122#endif	/* RNDIS_OPTIONAL_STATS */
 123
 124	/* mandatory 802.3 */
 125	/* the general stuff */
 126	RNDIS_OID_802_3_PERMANENT_ADDRESS,
 127	RNDIS_OID_802_3_CURRENT_ADDRESS,
 128	RNDIS_OID_802_3_MULTICAST_LIST,
 129	RNDIS_OID_802_3_MAC_OPTIONS,
 130	RNDIS_OID_802_3_MAXIMUM_LIST_SIZE,
 131
 132	/* the statistical stuff */
 133	RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT,
 134	RNDIS_OID_802_3_XMIT_ONE_COLLISION,
 135	RNDIS_OID_802_3_XMIT_MORE_COLLISIONS,
 136#ifdef	RNDIS_OPTIONAL_STATS
 137	RNDIS_OID_802_3_XMIT_DEFERRED,
 138	RNDIS_OID_802_3_XMIT_MAX_COLLISIONS,
 139	RNDIS_OID_802_3_RCV_OVERRUN,
 140	RNDIS_OID_802_3_XMIT_UNDERRUN,
 141	RNDIS_OID_802_3_XMIT_HEARTBEAT_FAILURE,
 142	RNDIS_OID_802_3_XMIT_TIMES_CRS_LOST,
 143	RNDIS_OID_802_3_XMIT_LATE_COLLISIONS,
 144#endif	/* RNDIS_OPTIONAL_STATS */
 145
 146#ifdef	RNDIS_PM
 147	/* PM and wakeup are "mandatory" for USB, but the RNDIS specs
 148	 * don't say what they mean ... and the NDIS specs are often
 149	 * confusing and/or ambiguous in this context.  (That is, more
 150	 * so than their specs for the other OIDs.)
 151	 *
 152	 * FIXME someone who knows what these should do, please
 153	 * implement them!
 154	 */
 155
 156	/* power management */
 157	OID_PNP_CAPABILITIES,
 158	OID_PNP_QUERY_POWER,
 159	OID_PNP_SET_POWER,
 160
 161#ifdef	RNDIS_WAKEUP
 162	/* wake up host */
 163	OID_PNP_ENABLE_WAKE_UP,
 164	OID_PNP_ADD_WAKE_UP_PATTERN,
 165	OID_PNP_REMOVE_WAKE_UP_PATTERN,
 166#endif	/* RNDIS_WAKEUP */
 167#endif	/* RNDIS_PM */
 168};
 169
 170
 171/* NDIS Functions */
 172static int gen_ndis_query_resp(struct rndis_params *params, u32 OID, u8 *buf,
 173			       unsigned buf_len, rndis_resp_t *r)
 174{
 175	int retval = -ENOTSUPP;
 176	u32 length = 4;	/* usually */
 177	__le32 *outbuf;
 178	int i, count;
 179	rndis_query_cmplt_type *resp;
 180	struct net_device *net;
 181	struct rtnl_link_stats64 temp;
 182	const struct rtnl_link_stats64 *stats;
 183
 184	if (!r) return -ENOMEM;
 185	resp = (rndis_query_cmplt_type *)r->buf;
 186
 187	if (!resp) return -ENOMEM;
 188
 189	if (buf_len && rndis_debug > 1) {
 190		pr_debug("query OID %08x value, len %d:\n", OID, buf_len);
 191		for (i = 0; i < buf_len; i += 16) {
 192			pr_debug("%03d: %08x %08x %08x %08x\n", i,
 193				get_unaligned_le32(&buf[i]),
 194				get_unaligned_le32(&buf[i + 4]),
 195				get_unaligned_le32(&buf[i + 8]),
 196				get_unaligned_le32(&buf[i + 12]));
 197		}
 198	}
 199
 200	/* response goes here, right after the header */
 201	outbuf = (__le32 *)&resp[1];
 202	resp->InformationBufferOffset = cpu_to_le32(16);
 203
 204	net = params->dev;
 205	stats = dev_get_stats(net, &temp);
 206
 207	switch (OID) {
 208
 209	/* general oids (table 4-1) */
 210
 211	/* mandatory */
 212	case RNDIS_OID_GEN_SUPPORTED_LIST:
 213		pr_debug("%s: RNDIS_OID_GEN_SUPPORTED_LIST\n", __func__);
 214		length = sizeof(oid_supported_list);
 215		count  = length / sizeof(u32);
 216		for (i = 0; i < count; i++)
 217			outbuf[i] = cpu_to_le32(oid_supported_list[i]);
 218		retval = 0;
 219		break;
 220
 221	/* mandatory */
 222	case RNDIS_OID_GEN_HARDWARE_STATUS:
 223		pr_debug("%s: RNDIS_OID_GEN_HARDWARE_STATUS\n", __func__);
 224		/* Bogus question!
 225		 * Hardware must be ready to receive high level protocols.
 226		 * BTW:
 227		 * reddite ergo quae sunt Caesaris Caesari
 228		 * et quae sunt Dei Deo!
 229		 */
 230		*outbuf = cpu_to_le32(0);
 231		retval = 0;
 232		break;
 233
 234	/* mandatory */
 235	case RNDIS_OID_GEN_MEDIA_SUPPORTED:
 236		pr_debug("%s: RNDIS_OID_GEN_MEDIA_SUPPORTED\n", __func__);
 237		*outbuf = cpu_to_le32(params->medium);
 238		retval = 0;
 239		break;
 240
 241	/* mandatory */
 242	case RNDIS_OID_GEN_MEDIA_IN_USE:
 243		pr_debug("%s: RNDIS_OID_GEN_MEDIA_IN_USE\n", __func__);
 244		/* one medium, one transport... (maybe you do it better) */
 245		*outbuf = cpu_to_le32(params->medium);
 246		retval = 0;
 247		break;
 248
 249	/* mandatory */
 250	case RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE:
 251		pr_debug("%s: RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE\n", __func__);
 252		if (params->dev) {
 253			*outbuf = cpu_to_le32(params->dev->mtu);
 254			retval = 0;
 255		}
 256		break;
 257
 258	/* mandatory */
 259	case RNDIS_OID_GEN_LINK_SPEED:
 260		if (rndis_debug > 1)
 261			pr_debug("%s: RNDIS_OID_GEN_LINK_SPEED\n", __func__);
 262		if (params->media_state == RNDIS_MEDIA_STATE_DISCONNECTED)
 263			*outbuf = cpu_to_le32(0);
 264		else
 265			*outbuf = cpu_to_le32(params->speed);
 266		retval = 0;
 267		break;
 268
 269	/* mandatory */
 270	case RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE:
 271		pr_debug("%s: RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE\n", __func__);
 272		if (params->dev) {
 273			*outbuf = cpu_to_le32(params->dev->mtu);
 274			retval = 0;
 275		}
 276		break;
 277
 278	/* mandatory */
 279	case RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE:
 280		pr_debug("%s: RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE\n", __func__);
 281		if (params->dev) {
 282			*outbuf = cpu_to_le32(params->dev->mtu);
 283			retval = 0;
 284		}
 285		break;
 286
 287	/* mandatory */
 288	case RNDIS_OID_GEN_VENDOR_ID:
 289		pr_debug("%s: RNDIS_OID_GEN_VENDOR_ID\n", __func__);
 290		*outbuf = cpu_to_le32(params->vendorID);
 291		retval = 0;
 292		break;
 293
 294	/* mandatory */
 295	case RNDIS_OID_GEN_VENDOR_DESCRIPTION:
 296		pr_debug("%s: RNDIS_OID_GEN_VENDOR_DESCRIPTION\n", __func__);
 297		if (params->vendorDescr) {
 298			length = strlen(params->vendorDescr);
 299			memcpy(outbuf, params->vendorDescr, length);
 300		} else {
 301			outbuf[0] = 0;
 302		}
 303		retval = 0;
 304		break;
 305
 306	case RNDIS_OID_GEN_VENDOR_DRIVER_VERSION:
 307		pr_debug("%s: RNDIS_OID_GEN_VENDOR_DRIVER_VERSION\n", __func__);
 308		/* Created as LE */
 309		*outbuf = rndis_driver_version;
 310		retval = 0;
 311		break;
 312
 313	/* mandatory */
 314	case RNDIS_OID_GEN_CURRENT_PACKET_FILTER:
 315		pr_debug("%s: RNDIS_OID_GEN_CURRENT_PACKET_FILTER\n", __func__);
 316		*outbuf = cpu_to_le32(*params->filter);
 317		retval = 0;
 318		break;
 319
 320	/* mandatory */
 321	case RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE:
 322		pr_debug("%s: RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE\n", __func__);
 323		*outbuf = cpu_to_le32(RNDIS_MAX_TOTAL_SIZE);
 324		retval = 0;
 325		break;
 326
 327	/* mandatory */
 328	case RNDIS_OID_GEN_MEDIA_CONNECT_STATUS:
 329		if (rndis_debug > 1)
 330			pr_debug("%s: RNDIS_OID_GEN_MEDIA_CONNECT_STATUS\n", __func__);
 331		*outbuf = cpu_to_le32(params->media_state);
 332		retval = 0;
 333		break;
 334
 335	case RNDIS_OID_GEN_PHYSICAL_MEDIUM:
 336		pr_debug("%s: RNDIS_OID_GEN_PHYSICAL_MEDIUM\n", __func__);
 337		*outbuf = cpu_to_le32(0);
 338		retval = 0;
 339		break;
 340
 341	/* The RNDIS specification is incomplete/wrong.   Some versions
 342	 * of MS-Windows expect OIDs that aren't specified there.  Other
 343	 * versions emit undefined RNDIS messages. DOCUMENT ALL THESE!
 344	 */
 345	case RNDIS_OID_GEN_MAC_OPTIONS:		/* from WinME */
 346		pr_debug("%s: RNDIS_OID_GEN_MAC_OPTIONS\n", __func__);
 347		*outbuf = cpu_to_le32(
 348			  RNDIS_MAC_OPTION_RECEIVE_SERIALIZED
 349			| RNDIS_MAC_OPTION_FULL_DUPLEX);
 350		retval = 0;
 351		break;
 352
 353	/* statistics OIDs (table 4-2) */
 354
 355	/* mandatory */
 356	case RNDIS_OID_GEN_XMIT_OK:
 357		if (rndis_debug > 1)
 358			pr_debug("%s: RNDIS_OID_GEN_XMIT_OK\n", __func__);
 359		if (stats) {
 360			*outbuf = cpu_to_le32(stats->tx_packets
 361				- stats->tx_errors - stats->tx_dropped);
 362			retval = 0;
 363		}
 364		break;
 365
 366	/* mandatory */
 367	case RNDIS_OID_GEN_RCV_OK:
 368		if (rndis_debug > 1)
 369			pr_debug("%s: RNDIS_OID_GEN_RCV_OK\n", __func__);
 370		if (stats) {
 371			*outbuf = cpu_to_le32(stats->rx_packets
 372				- stats->rx_errors - stats->rx_dropped);
 373			retval = 0;
 374		}
 375		break;
 376
 377	/* mandatory */
 378	case RNDIS_OID_GEN_XMIT_ERROR:
 379		if (rndis_debug > 1)
 380			pr_debug("%s: RNDIS_OID_GEN_XMIT_ERROR\n", __func__);
 381		if (stats) {
 382			*outbuf = cpu_to_le32(stats->tx_errors);
 383			retval = 0;
 384		}
 385		break;
 386
 387	/* mandatory */
 388	case RNDIS_OID_GEN_RCV_ERROR:
 389		if (rndis_debug > 1)
 390			pr_debug("%s: RNDIS_OID_GEN_RCV_ERROR\n", __func__);
 391		if (stats) {
 392			*outbuf = cpu_to_le32(stats->rx_errors);
 393			retval = 0;
 394		}
 395		break;
 396
 397	/* mandatory */
 398	case RNDIS_OID_GEN_RCV_NO_BUFFER:
 399		pr_debug("%s: RNDIS_OID_GEN_RCV_NO_BUFFER\n", __func__);
 400		if (stats) {
 401			*outbuf = cpu_to_le32(stats->rx_dropped);
 402			retval = 0;
 403		}
 404		break;
 405
 406	/* ieee802.3 OIDs (table 4-3) */
 407
 408	/* mandatory */
 409	case RNDIS_OID_802_3_PERMANENT_ADDRESS:
 410		pr_debug("%s: RNDIS_OID_802_3_PERMANENT_ADDRESS\n", __func__);
 411		if (params->dev) {
 412			length = ETH_ALEN;
 413			memcpy(outbuf, params->host_mac, length);
 414			retval = 0;
 415		}
 416		break;
 417
 418	/* mandatory */
 419	case RNDIS_OID_802_3_CURRENT_ADDRESS:
 420		pr_debug("%s: RNDIS_OID_802_3_CURRENT_ADDRESS\n", __func__);
 421		if (params->dev) {
 422			length = ETH_ALEN;
 423			memcpy(outbuf, params->host_mac, length);
 424			retval = 0;
 425		}
 426		break;
 427
 428	/* mandatory */
 429	case RNDIS_OID_802_3_MULTICAST_LIST:
 430		pr_debug("%s: RNDIS_OID_802_3_MULTICAST_LIST\n", __func__);
 431		/* Multicast base address only */
 432		*outbuf = cpu_to_le32(0xE0000000);
 433		retval = 0;
 434		break;
 435
 436	/* mandatory */
 437	case RNDIS_OID_802_3_MAXIMUM_LIST_SIZE:
 438		pr_debug("%s: RNDIS_OID_802_3_MAXIMUM_LIST_SIZE\n", __func__);
 439		/* Multicast base address only */
 440		*outbuf = cpu_to_le32(1);
 441		retval = 0;
 442		break;
 443
 444	case RNDIS_OID_802_3_MAC_OPTIONS:
 445		pr_debug("%s: RNDIS_OID_802_3_MAC_OPTIONS\n", __func__);
 446		*outbuf = cpu_to_le32(0);
 447		retval = 0;
 448		break;
 449
 450	/* ieee802.3 statistics OIDs (table 4-4) */
 451
 452	/* mandatory */
 453	case RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT:
 454		pr_debug("%s: RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT\n", __func__);
 455		if (stats) {
 456			*outbuf = cpu_to_le32(stats->rx_frame_errors);
 457			retval = 0;
 458		}
 459		break;
 460
 461	/* mandatory */
 462	case RNDIS_OID_802_3_XMIT_ONE_COLLISION:
 463		pr_debug("%s: RNDIS_OID_802_3_XMIT_ONE_COLLISION\n", __func__);
 464		*outbuf = cpu_to_le32(0);
 465		retval = 0;
 466		break;
 467
 468	/* mandatory */
 469	case RNDIS_OID_802_3_XMIT_MORE_COLLISIONS:
 470		pr_debug("%s: RNDIS_OID_802_3_XMIT_MORE_COLLISIONS\n", __func__);
 471		*outbuf = cpu_to_le32(0);
 472		retval = 0;
 473		break;
 474
 475	default:
 476		pr_warn("%s: query unknown OID 0x%08X\n", __func__, OID);
 
 477	}
 478	if (retval < 0)
 479		length = 0;
 480
 481	resp->InformationBufferLength = cpu_to_le32(length);
 482	r->length = length + sizeof(*resp);
 483	resp->MessageLength = cpu_to_le32(r->length);
 484	return retval;
 485}
 486
 487static int gen_ndis_set_resp(struct rndis_params *params, u32 OID,
 488			     u8 *buf, u32 buf_len, rndis_resp_t *r)
 489{
 490	rndis_set_cmplt_type *resp;
 491	int i, retval = -ENOTSUPP;
 492
 493	if (!r)
 494		return -ENOMEM;
 495	resp = (rndis_set_cmplt_type *)r->buf;
 496	if (!resp)
 497		return -ENOMEM;
 498
 499	if (buf_len && rndis_debug > 1) {
 500		pr_debug("set OID %08x value, len %d:\n", OID, buf_len);
 501		for (i = 0; i < buf_len; i += 16) {
 502			pr_debug("%03d: %08x %08x %08x %08x\n", i,
 503				get_unaligned_le32(&buf[i]),
 504				get_unaligned_le32(&buf[i + 4]),
 505				get_unaligned_le32(&buf[i + 8]),
 506				get_unaligned_le32(&buf[i + 12]));
 507		}
 508	}
 509
 510	switch (OID) {
 511	case RNDIS_OID_GEN_CURRENT_PACKET_FILTER:
 512
 513		/* these NDIS_PACKET_TYPE_* bitflags are shared with
 514		 * cdc_filter; it's not RNDIS-specific
 515		 * NDIS_PACKET_TYPE_x == USB_CDC_PACKET_TYPE_x for x in:
 516		 *	PROMISCUOUS, DIRECTED,
 517		 *	MULTICAST, ALL_MULTICAST, BROADCAST
 518		 */
 519		*params->filter = (u16)get_unaligned_le32(buf);
 520		pr_debug("%s: RNDIS_OID_GEN_CURRENT_PACKET_FILTER %08x\n",
 521			__func__, *params->filter);
 522
 523		/* this call has a significant side effect:  it's
 524		 * what makes the packet flow start and stop, like
 525		 * activating the CDC Ethernet altsetting.
 526		 */
 527		retval = 0;
 528		if (*params->filter) {
 529			params->state = RNDIS_DATA_INITIALIZED;
 530			netif_carrier_on(params->dev);
 531			if (netif_running(params->dev))
 532				netif_wake_queue(params->dev);
 533		} else {
 534			params->state = RNDIS_INITIALIZED;
 535			netif_carrier_off(params->dev);
 536			netif_stop_queue(params->dev);
 537		}
 538		break;
 539
 540	case RNDIS_OID_802_3_MULTICAST_LIST:
 541		/* I think we can ignore this */
 542		pr_debug("%s: RNDIS_OID_802_3_MULTICAST_LIST\n", __func__);
 543		retval = 0;
 544		break;
 545
 546	default:
 547		pr_warn("%s: set unknown OID 0x%08X, size %d\n",
 548			__func__, OID, buf_len);
 549	}
 550
 551	return retval;
 552}
 553
 554/*
 555 * Response Functions
 556 */
 557
 558static int rndis_init_response(struct rndis_params *params,
 559			       rndis_init_msg_type *buf)
 560{
 561	rndis_init_cmplt_type *resp;
 562	rndis_resp_t *r;
 563
 564	if (!params->dev)
 565		return -ENOTSUPP;
 566
 567	r = rndis_add_response(params, sizeof(rndis_init_cmplt_type));
 568	if (!r)
 569		return -ENOMEM;
 570	resp = (rndis_init_cmplt_type *)r->buf;
 571
 572	resp->MessageType = cpu_to_le32(RNDIS_MSG_INIT_C);
 573	resp->MessageLength = cpu_to_le32(52);
 574	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 575	resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 576	resp->MajorVersion = cpu_to_le32(RNDIS_MAJOR_VERSION);
 577	resp->MinorVersion = cpu_to_le32(RNDIS_MINOR_VERSION);
 578	resp->DeviceFlags = cpu_to_le32(RNDIS_DF_CONNECTIONLESS);
 579	resp->Medium = cpu_to_le32(RNDIS_MEDIUM_802_3);
 580	resp->MaxPacketsPerTransfer = cpu_to_le32(1);
 581	resp->MaxTransferSize = cpu_to_le32(
 582		  params->dev->mtu
 583		+ sizeof(struct ethhdr)
 584		+ sizeof(struct rndis_packet_msg_type)
 585		+ 22);
 586	resp->PacketAlignmentFactor = cpu_to_le32(0);
 587	resp->AFListOffset = cpu_to_le32(0);
 588	resp->AFListSize = cpu_to_le32(0);
 589
 590	params->resp_avail(params->v);
 591	return 0;
 592}
 593
 594static int rndis_query_response(struct rndis_params *params,
 595				rndis_query_msg_type *buf)
 596{
 597	rndis_query_cmplt_type *resp;
 598	rndis_resp_t *r;
 599
 600	/* pr_debug("%s: OID = %08X\n", __func__, cpu_to_le32(buf->OID)); */
 601	if (!params->dev)
 602		return -ENOTSUPP;
 603
 604	/*
 605	 * we need more memory:
 606	 * gen_ndis_query_resp expects enough space for
 607	 * rndis_query_cmplt_type followed by data.
 608	 * oid_supported_list is the largest data reply
 609	 */
 610	r = rndis_add_response(params,
 611		sizeof(oid_supported_list) + sizeof(rndis_query_cmplt_type));
 612	if (!r)
 613		return -ENOMEM;
 614	resp = (rndis_query_cmplt_type *)r->buf;
 615
 616	resp->MessageType = cpu_to_le32(RNDIS_MSG_QUERY_C);
 617	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 618
 619	if (gen_ndis_query_resp(params, le32_to_cpu(buf->OID),
 620			le32_to_cpu(buf->InformationBufferOffset)
 621					+ 8 + (u8 *)buf,
 622			le32_to_cpu(buf->InformationBufferLength),
 623			r)) {
 624		/* OID not supported */
 625		resp->Status = cpu_to_le32(RNDIS_STATUS_NOT_SUPPORTED);
 626		resp->MessageLength = cpu_to_le32(sizeof *resp);
 627		resp->InformationBufferLength = cpu_to_le32(0);
 628		resp->InformationBufferOffset = cpu_to_le32(0);
 629	} else
 630		resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 631
 632	params->resp_avail(params->v);
 633	return 0;
 634}
 635
 636static int rndis_set_response(struct rndis_params *params,
 637			      rndis_set_msg_type *buf)
 638{
 639	u32 BufLength, BufOffset;
 640	rndis_set_cmplt_type *resp;
 641	rndis_resp_t *r;
 642
 643	r = rndis_add_response(params, sizeof(rndis_set_cmplt_type));
 644	if (!r)
 645		return -ENOMEM;
 646	resp = (rndis_set_cmplt_type *)r->buf;
 647
 648	BufLength = le32_to_cpu(buf->InformationBufferLength);
 649	BufOffset = le32_to_cpu(buf->InformationBufferOffset);
 650
 651#ifdef	VERBOSE_DEBUG
 652	pr_debug("%s: Length: %d\n", __func__, BufLength);
 653	pr_debug("%s: Offset: %d\n", __func__, BufOffset);
 654	pr_debug("%s: InfoBuffer: ", __func__);
 655
 656	for (i = 0; i < BufLength; i++) {
 657		pr_debug("%02x ", *(((u8 *) buf) + i + 8 + BufOffset));
 658	}
 659
 660	pr_debug("\n");
 661#endif
 662
 663	resp->MessageType = cpu_to_le32(RNDIS_MSG_SET_C);
 664	resp->MessageLength = cpu_to_le32(16);
 665	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 666	if (gen_ndis_set_resp(params, le32_to_cpu(buf->OID),
 667			((u8 *)buf) + 8 + BufOffset, BufLength, r))
 668		resp->Status = cpu_to_le32(RNDIS_STATUS_NOT_SUPPORTED);
 669	else
 670		resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 671
 672	params->resp_avail(params->v);
 673	return 0;
 674}
 675
 676static int rndis_reset_response(struct rndis_params *params,
 677				rndis_reset_msg_type *buf)
 678{
 679	rndis_reset_cmplt_type *resp;
 680	rndis_resp_t *r;
 681	u8 *xbuf;
 682	u32 length;
 683
 684	/* drain the response queue */
 685	while ((xbuf = rndis_get_next_response(params, &length)))
 686		rndis_free_response(params, xbuf);
 687
 688	r = rndis_add_response(params, sizeof(rndis_reset_cmplt_type));
 689	if (!r)
 690		return -ENOMEM;
 691	resp = (rndis_reset_cmplt_type *)r->buf;
 692
 693	resp->MessageType = cpu_to_le32(RNDIS_MSG_RESET_C);
 694	resp->MessageLength = cpu_to_le32(16);
 695	resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 696	/* resent information */
 697	resp->AddressingReset = cpu_to_le32(1);
 698
 699	params->resp_avail(params->v);
 700	return 0;
 701}
 702
 703static int rndis_keepalive_response(struct rndis_params *params,
 704				    rndis_keepalive_msg_type *buf)
 705{
 706	rndis_keepalive_cmplt_type *resp;
 707	rndis_resp_t *r;
 708
 709	/* host "should" check only in RNDIS_DATA_INITIALIZED state */
 710
 711	r = rndis_add_response(params, sizeof(rndis_keepalive_cmplt_type));
 712	if (!r)
 713		return -ENOMEM;
 714	resp = (rndis_keepalive_cmplt_type *)r->buf;
 715
 716	resp->MessageType = cpu_to_le32(RNDIS_MSG_KEEPALIVE_C);
 717	resp->MessageLength = cpu_to_le32(16);
 718	resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
 719	resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
 720
 721	params->resp_avail(params->v);
 722	return 0;
 723}
 724
 725
 726/*
 727 * Device to Host Comunication
 728 */
 729static int rndis_indicate_status_msg(struct rndis_params *params, u32 status)
 730{
 731	rndis_indicate_status_msg_type *resp;
 732	rndis_resp_t *r;
 733
 734	if (params->state == RNDIS_UNINITIALIZED)
 735		return -ENOTSUPP;
 736
 737	r = rndis_add_response(params, sizeof(rndis_indicate_status_msg_type));
 738	if (!r)
 739		return -ENOMEM;
 740	resp = (rndis_indicate_status_msg_type *)r->buf;
 741
 742	resp->MessageType = cpu_to_le32(RNDIS_MSG_INDICATE);
 743	resp->MessageLength = cpu_to_le32(20);
 744	resp->Status = cpu_to_le32(status);
 745	resp->StatusBufferLength = cpu_to_le32(0);
 746	resp->StatusBufferOffset = cpu_to_le32(0);
 747
 748	params->resp_avail(params->v);
 749	return 0;
 750}
 751
 752int rndis_signal_connect(struct rndis_params *params)
 753{
 754	params->media_state = RNDIS_MEDIA_STATE_CONNECTED;
 755	return rndis_indicate_status_msg(params, RNDIS_STATUS_MEDIA_CONNECT);
 756}
 757EXPORT_SYMBOL_GPL(rndis_signal_connect);
 758
 759int rndis_signal_disconnect(struct rndis_params *params)
 760{
 761	params->media_state = RNDIS_MEDIA_STATE_DISCONNECTED;
 762	return rndis_indicate_status_msg(params, RNDIS_STATUS_MEDIA_DISCONNECT);
 763}
 764EXPORT_SYMBOL_GPL(rndis_signal_disconnect);
 765
 766void rndis_uninit(struct rndis_params *params)
 767{
 768	u8 *buf;
 769	u32 length;
 770
 771	if (!params)
 772		return;
 773	params->state = RNDIS_UNINITIALIZED;
 774
 775	/* drain the response queue */
 776	while ((buf = rndis_get_next_response(params, &length)))
 777		rndis_free_response(params, buf);
 778}
 779EXPORT_SYMBOL_GPL(rndis_uninit);
 780
 781void rndis_set_host_mac(struct rndis_params *params, const u8 *addr)
 782{
 783	params->host_mac = addr;
 784}
 785EXPORT_SYMBOL_GPL(rndis_set_host_mac);
 786
 787/*
 788 * Message Parser
 789 */
 790int rndis_msg_parser(struct rndis_params *params, u8 *buf)
 791{
 792	u32 MsgType, MsgLength;
 793	__le32 *tmp;
 794
 795	if (!buf)
 796		return -ENOMEM;
 797
 798	tmp = (__le32 *)buf;
 799	MsgType   = get_unaligned_le32(tmp++);
 800	MsgLength = get_unaligned_le32(tmp++);
 801
 802	if (!params)
 803		return -ENOTSUPP;
 804
 805	/* NOTE: RNDIS is *EXTREMELY* chatty ... Windows constantly polls for
 806	 * rx/tx statistics and link status, in addition to KEEPALIVE traffic
 807	 * and normal HC level polling to see if there's any IN traffic.
 808	 */
 809
 810	/* For USB: responses may take up to 10 seconds */
 811	switch (MsgType) {
 812	case RNDIS_MSG_INIT:
 813		pr_debug("%s: RNDIS_MSG_INIT\n",
 814			__func__);
 815		params->state = RNDIS_INITIALIZED;
 816		return rndis_init_response(params, (rndis_init_msg_type *)buf);
 817
 818	case RNDIS_MSG_HALT:
 819		pr_debug("%s: RNDIS_MSG_HALT\n",
 820			__func__);
 821		params->state = RNDIS_UNINITIALIZED;
 822		if (params->dev) {
 823			netif_carrier_off(params->dev);
 824			netif_stop_queue(params->dev);
 825		}
 826		return 0;
 827
 828	case RNDIS_MSG_QUERY:
 829		return rndis_query_response(params,
 830					(rndis_query_msg_type *)buf);
 831
 832	case RNDIS_MSG_SET:
 833		return rndis_set_response(params, (rndis_set_msg_type *)buf);
 834
 835	case RNDIS_MSG_RESET:
 836		pr_debug("%s: RNDIS_MSG_RESET\n",
 837			__func__);
 838		return rndis_reset_response(params,
 839					(rndis_reset_msg_type *)buf);
 840
 841	case RNDIS_MSG_KEEPALIVE:
 842		/* For USB: host does this every 5 seconds */
 843		if (rndis_debug > 1)
 844			pr_debug("%s: RNDIS_MSG_KEEPALIVE\n",
 845				__func__);
 846		return rndis_keepalive_response(params,
 847						 (rndis_keepalive_msg_type *)
 848						 buf);
 849
 850	default:
 851		/* At least Windows XP emits some undefined RNDIS messages.
 852		 * In one case those messages seemed to relate to the host
 853		 * suspending itself.
 854		 */
 855		pr_warn("%s: unknown RNDIS message 0x%08X len %d\n",
 856			__func__, MsgType, MsgLength);
 857		print_hex_dump_bytes(__func__, DUMP_PREFIX_OFFSET,
 858				     buf, MsgLength);
 859		break;
 860	}
 861
 862	return -ENOTSUPP;
 863}
 864EXPORT_SYMBOL_GPL(rndis_msg_parser);
 865
 866static inline int rndis_get_nr(void)
 867{
 868	return ida_simple_get(&rndis_ida, 0, 0, GFP_KERNEL);
 869}
 870
 871static inline void rndis_put_nr(int nr)
 872{
 873	ida_simple_remove(&rndis_ida, nr);
 874}
 875
 876struct rndis_params *rndis_register(void (*resp_avail)(void *v), void *v)
 877{
 878	struct rndis_params *params;
 879	int i;
 880
 881	if (!resp_avail)
 882		return ERR_PTR(-EINVAL);
 883
 884	i = rndis_get_nr();
 885	if (i < 0) {
 886		pr_debug("failed\n");
 887
 888		return ERR_PTR(-ENODEV);
 889	}
 890
 891	params = kzalloc(sizeof(*params), GFP_KERNEL);
 892	if (!params) {
 893		rndis_put_nr(i);
 894
 895		return ERR_PTR(-ENOMEM);
 896	}
 897
 898#ifdef	CONFIG_USB_GADGET_DEBUG_FILES
 899	{
 900		struct proc_dir_entry *proc_entry;
 901		char name[20];
 902
 903		sprintf(name, NAME_TEMPLATE, i);
 904		proc_entry = proc_create_data(name, 0660, NULL,
 905					      &rndis_proc_fops, params);
 906		if (!proc_entry) {
 907			kfree(params);
 908			rndis_put_nr(i);
 909
 910			return ERR_PTR(-EIO);
 911		}
 912	}
 913#endif
 914
 915	params->confignr = i;
 916	params->used = 1;
 917	params->state = RNDIS_UNINITIALIZED;
 918	params->media_state = RNDIS_MEDIA_STATE_DISCONNECTED;
 919	params->resp_avail = resp_avail;
 920	params->v = v;
 921	INIT_LIST_HEAD(&params->resp_queue);
 922	pr_debug("%s: configNr = %d\n", __func__, i);
 923
 924	return params;
 925}
 926EXPORT_SYMBOL_GPL(rndis_register);
 927
 928void rndis_deregister(struct rndis_params *params)
 929{
 930	int i;
 931
 932	pr_debug("%s:\n", __func__);
 933
 934	if (!params)
 935		return;
 936
 937	i = params->confignr;
 938
 939#ifdef CONFIG_USB_GADGET_DEBUG_FILES
 940	{
 941		char name[20];
 942
 943		sprintf(name, NAME_TEMPLATE, i);
 944		remove_proc_entry(name, NULL);
 945	}
 946#endif
 947
 948	kfree(params);
 949	rndis_put_nr(i);
 950}
 951EXPORT_SYMBOL_GPL(rndis_deregister);
 952int rndis_set_param_dev(struct rndis_params *params, struct net_device *dev,
 953			u16 *cdc_filter)
 954{
 955	pr_debug("%s:\n", __func__);
 956	if (!dev)
 957		return -EINVAL;
 958	if (!params)
 959		return -1;
 960
 961	params->dev = dev;
 962	params->filter = cdc_filter;
 963
 964	return 0;
 965}
 966EXPORT_SYMBOL_GPL(rndis_set_param_dev);
 967
 968int rndis_set_param_vendor(struct rndis_params *params, u32 vendorID,
 969			   const char *vendorDescr)
 970{
 971	pr_debug("%s:\n", __func__);
 972	if (!vendorDescr) return -1;
 973	if (!params)
 974		return -1;
 975
 976	params->vendorID = vendorID;
 977	params->vendorDescr = vendorDescr;
 978
 979	return 0;
 980}
 981EXPORT_SYMBOL_GPL(rndis_set_param_vendor);
 982
 983int rndis_set_param_medium(struct rndis_params *params, u32 medium, u32 speed)
 984{
 985	pr_debug("%s: %u %u\n", __func__, medium, speed);
 986	if (!params)
 987		return -1;
 988
 989	params->medium = medium;
 990	params->speed = speed;
 991
 992	return 0;
 993}
 994EXPORT_SYMBOL_GPL(rndis_set_param_medium);
 995
 996void rndis_add_hdr(struct sk_buff *skb)
 997{
 998	struct rndis_packet_msg_type *header;
 999
1000	if (!skb)
1001		return;
1002	header = (void *)skb_push(skb, sizeof(*header));
1003	memset(header, 0, sizeof *header);
1004	header->MessageType = cpu_to_le32(RNDIS_MSG_PACKET);
1005	header->MessageLength = cpu_to_le32(skb->len);
1006	header->DataOffset = cpu_to_le32(36);
1007	header->DataLength = cpu_to_le32(skb->len - sizeof(*header));
1008}
1009EXPORT_SYMBOL_GPL(rndis_add_hdr);
1010
1011void rndis_free_response(struct rndis_params *params, u8 *buf)
1012{
1013	rndis_resp_t *r, *n;
1014
1015	list_for_each_entry_safe(r, n, &params->resp_queue, list) {
1016		if (r->buf == buf) {
1017			list_del(&r->list);
1018			kfree(r);
1019		}
1020	}
1021}
1022EXPORT_SYMBOL_GPL(rndis_free_response);
1023
1024u8 *rndis_get_next_response(struct rndis_params *params, u32 *length)
1025{
1026	rndis_resp_t *r, *n;
1027
1028	if (!length) return NULL;
1029
1030	list_for_each_entry_safe(r, n, &params->resp_queue, list) {
1031		if (!r->send) {
1032			r->send = 1;
1033			*length = r->length;
1034			return r->buf;
1035		}
1036	}
1037
1038	return NULL;
1039}
1040EXPORT_SYMBOL_GPL(rndis_get_next_response);
1041
1042static rndis_resp_t *rndis_add_response(struct rndis_params *params, u32 length)
1043{
1044	rndis_resp_t *r;
1045
1046	/* NOTE: this gets copied into ether.c USB_BUFSIZ bytes ... */
1047	r = kmalloc(sizeof(rndis_resp_t) + length, GFP_ATOMIC);
1048	if (!r) return NULL;
1049
1050	r->buf = (u8 *)(r + 1);
1051	r->length = length;
1052	r->send = 0;
1053
1054	list_add_tail(&r->list, &params->resp_queue);
1055	return r;
1056}
1057
1058int rndis_rm_hdr(struct gether *port,
1059			struct sk_buff *skb,
1060			struct sk_buff_head *list)
1061{
1062	/* tmp points to a struct rndis_packet_msg_type */
1063	__le32 *tmp = (void *)skb->data;
1064
1065	/* MessageType, MessageLength */
1066	if (cpu_to_le32(RNDIS_MSG_PACKET)
1067			!= get_unaligned(tmp++)) {
1068		dev_kfree_skb_any(skb);
1069		return -EINVAL;
1070	}
1071	tmp++;
1072
1073	/* DataOffset, DataLength */
1074	if (!skb_pull(skb, get_unaligned_le32(tmp++) + 8)) {
1075		dev_kfree_skb_any(skb);
1076		return -EOVERFLOW;
1077	}
1078	skb_trim(skb, get_unaligned_le32(tmp++));
1079
1080	skb_queue_tail(list, skb);
1081	return 0;
1082}
1083EXPORT_SYMBOL_GPL(rndis_rm_hdr);
1084
1085#ifdef CONFIG_USB_GADGET_DEBUG_FILES
1086
1087static int rndis_proc_show(struct seq_file *m, void *v)
1088{
1089	rndis_params *param = m->private;
1090
1091	seq_printf(m,
1092			 "Config Nr. %d\n"
1093			 "used      : %s\n"
1094			 "state     : %s\n"
1095			 "medium    : 0x%08X\n"
1096			 "speed     : %d\n"
1097			 "cable     : %s\n"
1098			 "vendor ID : 0x%08X\n"
1099			 "vendor    : %s\n",
1100			 param->confignr, (param->used) ? "y" : "n",
1101			 ({ char *s = "?";
1102			 switch (param->state) {
1103			 case RNDIS_UNINITIALIZED:
1104				s = "RNDIS_UNINITIALIZED"; break;
1105			 case RNDIS_INITIALIZED:
1106				s = "RNDIS_INITIALIZED"; break;
1107			 case RNDIS_DATA_INITIALIZED:
1108				s = "RNDIS_DATA_INITIALIZED"; break;
1109			} s; }),
1110			 param->medium,
1111			 (param->media_state) ? 0 : param->speed*100,
1112			 (param->media_state) ? "disconnected" : "connected",
1113			 param->vendorID, param->vendorDescr);
1114	return 0;
1115}
1116
1117static ssize_t rndis_proc_write(struct file *file, const char __user *buffer,
1118				size_t count, loff_t *ppos)
1119{
1120	rndis_params *p = PDE_DATA(file_inode(file));
1121	u32 speed = 0;
1122	int i, fl_speed = 0;
1123
1124	for (i = 0; i < count; i++) {
1125		char c;
1126		if (get_user(c, buffer))
1127			return -EFAULT;
1128		switch (c) {
1129		case '0':
1130		case '1':
1131		case '2':
1132		case '3':
1133		case '4':
1134		case '5':
1135		case '6':
1136		case '7':
1137		case '8':
1138		case '9':
1139			fl_speed = 1;
1140			speed = speed * 10 + c - '0';
1141			break;
1142		case 'C':
1143		case 'c':
1144			rndis_signal_connect(p);
1145			break;
1146		case 'D':
1147		case 'd':
1148			rndis_signal_disconnect(p);
1149			break;
1150		default:
1151			if (fl_speed) p->speed = speed;
1152			else pr_debug("%c is not valid\n", c);
1153			break;
1154		}
1155
1156		buffer++;
1157	}
1158
1159	return count;
1160}
1161
1162static int rndis_proc_open(struct inode *inode, struct file *file)
1163{
1164	return single_open(file, rndis_proc_show, PDE_DATA(inode));
1165}
1166
1167static const struct file_operations rndis_proc_fops = {
1168	.owner		= THIS_MODULE,
1169	.open		= rndis_proc_open,
1170	.read		= seq_read,
1171	.llseek		= seq_lseek,
1172	.release	= single_release,
1173	.write		= rndis_proc_write,
1174};
1175
1176#define	NAME_TEMPLATE "driver/rndis-%03d"
1177
1178#endif /* CONFIG_USB_GADGET_DEBUG_FILES */