1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * lec.c: Lan Emulation driver
   4 *
   5 * Marko Kiiskila <mkiiskila@yahoo.com>
   6 */
   7
   8#define pr_fmt(fmt) KBUILD_MODNAME ":%s: " fmt, __func__
   9
  10#include <linux/slab.h>
  11#include <linux/kernel.h>
  12#include <linux/bitops.h>
  13#include <linux/capability.h>
  14
  15/* We are ethernet device */
  16#include <linux/if_ether.h>
  17#include <linux/netdevice.h>
  18#include <linux/etherdevice.h>
  19#include <net/sock.h>
  20#include <linux/skbuff.h>
  21#include <linux/ip.h>
  22#include <asm/byteorder.h>
  23#include <linux/uaccess.h>
  24#include <net/arp.h>
  25#include <net/dst.h>
  26#include <linux/proc_fs.h>
  27#include <linux/spinlock.h>
  28#include <linux/seq_file.h>
  29
  30/* And atm device */
  31#include <linux/atmdev.h>
  32#include <linux/atmlec.h>
  33
  34/* Proxy LEC knows about bridging */
  35#if IS_ENABLED(CONFIG_BRIDGE)
  36#include "../bridge/br_private.h"
  37
  38static unsigned char bridge_ula_lec[] = { 0x01, 0x80, 0xc2, 0x00, 0x00 };
  39#endif
  40
  41/* Modular too */
  42#include <linux/module.h>
  43#include <linux/init.h>
  44
  45/* Hardening for Spectre-v1 */
  46#include <linux/nospec.h>
  47
  48#include "lec.h"
  49#include "lec_arpc.h"
  50#include "resources.h"
  51
  52#define DUMP_PACKETS 0		/*
  53				 * 0 = None,
  54				 * 1 = 30 first bytes
  55				 * 2 = Whole packet
  56				 */
  57
  58#define LEC_UNRES_QUE_LEN 8	/*
  59				 * number of tx packets to queue for a
  60				 * single destination while waiting for SVC
  61				 */
  62
  63static int lec_open(struct net_device *dev);
  64static netdev_tx_t lec_start_xmit(struct sk_buff *skb,
  65				  struct net_device *dev);
  66static int lec_close(struct net_device *dev);
  67static struct lec_arp_table *lec_arp_find(struct lec_priv *priv,
  68					  const unsigned char *mac_addr);
  69static int lec_arp_remove(struct lec_priv *priv,
  70			  struct lec_arp_table *to_remove);
  71/* LANE2 functions */
  72static void lane2_associate_ind(struct net_device *dev, const u8 *mac_address,
  73				const u8 *tlvs, u32 sizeoftlvs);
  74static int lane2_resolve(struct net_device *dev, const u8 *dst_mac, int force,
  75			 u8 **tlvs, u32 *sizeoftlvs);
  76static int lane2_associate_req(struct net_device *dev, const u8 *lan_dst,
  77			       const u8 *tlvs, u32 sizeoftlvs);
  78
  79static int lec_addr_delete(struct lec_priv *priv, const unsigned char *atm_addr,
  80			   unsigned long permanent);
  81static void lec_arp_check_empties(struct lec_priv *priv,
  82				  struct atm_vcc *vcc, struct sk_buff *skb);
  83static void lec_arp_destroy(struct lec_priv *priv);
  84static void lec_arp_init(struct lec_priv *priv);
  85static struct atm_vcc *lec_arp_resolve(struct lec_priv *priv,
  86				       const unsigned char *mac_to_find,
  87				       int is_rdesc,
  88				       struct lec_arp_table **ret_entry);
  89static void lec_arp_update(struct lec_priv *priv, const unsigned char *mac_addr,
  90			   const unsigned char *atm_addr,
  91			   unsigned long remoteflag,
  92			   unsigned int targetless_le_arp);
  93static void lec_flush_complete(struct lec_priv *priv, unsigned long tran_id);
  94static int lec_mcast_make(struct lec_priv *priv, struct atm_vcc *vcc);
  95static void lec_set_flush_tran_id(struct lec_priv *priv,
  96				  const unsigned char *atm_addr,
  97				  unsigned long tran_id);
  98static void lec_vcc_added(struct lec_priv *priv,
  99			  const struct atmlec_ioc *ioc_data,
 100			  struct atm_vcc *vcc,
 101			  void (*old_push)(struct atm_vcc *vcc,
 102					   struct sk_buff *skb));
 103static void lec_vcc_close(struct lec_priv *priv, struct atm_vcc *vcc);
 104
 105/* must be done under lec_arp_lock */
 106static inline void lec_arp_hold(struct lec_arp_table *entry)
 107{
 108	refcount_inc(&entry->usage);
 109}
 110
 111static inline void lec_arp_put(struct lec_arp_table *entry)
 112{
 113	if (refcount_dec_and_test(&entry->usage))
 114		kfree(entry);
 115}
 116
 117static struct lane2_ops lane2_ops = {
 118	.resolve = lane2_resolve,		/* spec 3.1.3 */
 119	.associate_req = lane2_associate_req,	/* spec 3.1.4 */
 120	.associate_indicator = NULL             /* spec 3.1.5 */
 121};
 122
 123static unsigned char bus_mac[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
 124
 125/* Device structures */
 126static struct net_device *dev_lec[MAX_LEC_ITF];
 127
 128#if IS_ENABLED(CONFIG_BRIDGE)
 129static void lec_handle_bridge(struct sk_buff *skb, struct net_device *dev)
 130{
 131	char *buff;
 132	struct lec_priv *priv;
 133
 134	/*
 135	 * Check if this is a BPDU. If so, ask zeppelin to send
 136	 * LE_TOPOLOGY_REQUEST with the same value of Topology Change bit
 137	 * as the Config BPDU has
 138	 */
 139	buff = skb->data + skb->dev->hard_header_len;
 140	if (*buff++ == 0x42 && *buff++ == 0x42 && *buff++ == 0x03) {
 141		struct sock *sk;
 142		struct sk_buff *skb2;
 143		struct atmlec_msg *mesg;
 144
 145		skb2 = alloc_skb(sizeof(struct atmlec_msg), GFP_ATOMIC);
 146		if (skb2 == NULL)
 147			return;
 148		skb2->len = sizeof(struct atmlec_msg);
 149		mesg = (struct atmlec_msg *)skb2->data;
 150		mesg->type = l_topology_change;
 151		buff += 4;
 152		mesg->content.normal.flag = *buff & 0x01;
 153					/* 0x01 is topology change */
 154
 155		priv = netdev_priv(dev);
 156		atm_force_charge(priv->lecd, skb2->truesize);
 157		sk = sk_atm(priv->lecd);
 158		skb_queue_tail(&sk->sk_receive_queue, skb2);
 159		sk->sk_data_ready(sk);
 160	}
 161}
 162#endif /* IS_ENABLED(CONFIG_BRIDGE) */
 163
 164/*
 165 * Open/initialize the netdevice. This is called (in the current kernel)
 166 * sometime after booting when the 'ifconfig' program is run.
 167 *
 168 * This routine should set everything up anew at each open, even
 169 * registers that "should" only need to be set once at boot, so that
 170 * there is non-reboot way to recover if something goes wrong.
 171 */
 172
 173static int lec_open(struct net_device *dev)
 174{
 175	netif_start_queue(dev);
 176
 177	return 0;
 178}
 179
 180static void
 181lec_send(struct atm_vcc *vcc, struct sk_buff *skb)
 182{
 183	struct net_device *dev = skb->dev;
 184
 185	ATM_SKB(skb)->vcc = vcc;
 186	atm_account_tx(vcc, skb);
 187
 188	if (vcc->send(vcc, skb) < 0) {
 189		dev->stats.tx_dropped++;
 190		return;
 191	}
 192
 193	dev->stats.tx_packets++;
 194	dev->stats.tx_bytes += skb->len;
 195}
 196
 197static void lec_tx_timeout(struct net_device *dev, unsigned int txqueue)
 198{
 199	pr_info("%s\n", dev->name);
 200	netif_trans_update(dev);
 201	netif_wake_queue(dev);
 202}
 203
 204static netdev_tx_t lec_start_xmit(struct sk_buff *skb,
 205				  struct net_device *dev)
 206{
 207	struct sk_buff *skb2;
 208	struct lec_priv *priv = netdev_priv(dev);
 209	struct lecdatahdr_8023 *lec_h;
 210	struct atm_vcc *vcc;
 211	struct lec_arp_table *entry;
 212	unsigned char *dst;
 213	int min_frame_size;
 214	int is_rdesc;
 215
 216	pr_debug("called\n");
 217	if (!priv->lecd) {
 218		pr_info("%s:No lecd attached\n", dev->name);
 219		dev->stats.tx_errors++;
 220		netif_stop_queue(dev);
 221		kfree_skb(skb);
 222		return NETDEV_TX_OK;
 223	}
 224
 225	pr_debug("skbuff head:%lx data:%lx tail:%lx end:%lx\n",
 226		 (long)skb->head, (long)skb->data, (long)skb_tail_pointer(skb),
 227		 (long)skb_end_pointer(skb));
 228#if IS_ENABLED(CONFIG_BRIDGE)
 229	if (memcmp(skb->data, bridge_ula_lec, sizeof(bridge_ula_lec)) == 0)
 230		lec_handle_bridge(skb, dev);
 231#endif
 232
 233	/* Make sure we have room for lec_id */
 234	if (skb_headroom(skb) < 2) {
 235		pr_debug("reallocating skb\n");
 236		skb2 = skb_realloc_headroom(skb, LEC_HEADER_LEN);
 237		if (unlikely(!skb2)) {
 238			kfree_skb(skb);
 239			return NETDEV_TX_OK;
 240		}
 241		consume_skb(skb);
 242		skb = skb2;
 243	}
 244	skb_push(skb, 2);
 245
 246	/* Put le header to place */
 247	lec_h = (struct lecdatahdr_8023 *)skb->data;
 248	lec_h->le_header = htons(priv->lecid);
 249
 250#if DUMP_PACKETS >= 2
 251#define MAX_DUMP_SKB 99
 252#elif DUMP_PACKETS >= 1
 253#define MAX_DUMP_SKB 30
 254#endif
 255#if DUMP_PACKETS >= 1
 256	printk(KERN_DEBUG "%s: send datalen:%ld lecid:%4.4x\n",
 257	       dev->name, skb->len, priv->lecid);
 258	print_hex_dump(KERN_DEBUG, "", DUMP_OFFSET, 16, 1,
 259		       skb->data, min(skb->len, MAX_DUMP_SKB), true);
 260#endif /* DUMP_PACKETS >= 1 */
 261
 262	/* Minimum ethernet-frame size */
 263	min_frame_size = LEC_MINIMUM_8023_SIZE;
 264	if (skb->len < min_frame_size) {
 265		if ((skb->len + skb_tailroom(skb)) < min_frame_size) {
 266			skb2 = skb_copy_expand(skb, 0,
 267					       min_frame_size - skb->truesize,
 268					       GFP_ATOMIC);
 269			dev_kfree_skb(skb);
 270			if (skb2 == NULL) {
 271				dev->stats.tx_dropped++;
 272				return NETDEV_TX_OK;
 273			}
 274			skb = skb2;
 275		}
 276		skb_put(skb, min_frame_size - skb->len);
 277	}
 278
 279	/* Send to right vcc */
 280	is_rdesc = 0;
 281	dst = lec_h->h_dest;
 282	entry = NULL;
 283	vcc = lec_arp_resolve(priv, dst, is_rdesc, &entry);
 284	pr_debug("%s:vcc:%p vcc_flags:%lx, entry:%p\n",
 285		 dev->name, vcc, vcc ? vcc->flags : 0, entry);
 286	if (!vcc || !test_bit(ATM_VF_READY, &vcc->flags)) {
 287		if (entry && (entry->tx_wait.qlen < LEC_UNRES_QUE_LEN)) {
 288			pr_debug("%s:queuing packet, MAC address %pM\n",
 289				 dev->name, lec_h->h_dest);
 290			skb_queue_tail(&entry->tx_wait, skb);
 291		} else {
 292			pr_debug("%s:tx queue full or no arp entry, dropping, MAC address: %pM\n",
 293				 dev->name, lec_h->h_dest);
 294			dev->stats.tx_dropped++;
 295			dev_kfree_skb(skb);
 296		}
 297		goto out;
 298	}
 299#if DUMP_PACKETS > 0
 300	printk(KERN_DEBUG "%s:sending to vpi:%d vci:%d\n",
 301	       dev->name, vcc->vpi, vcc->vci);
 302#endif /* DUMP_PACKETS > 0 */
 303
 304	while (entry && (skb2 = skb_dequeue(&entry->tx_wait))) {
 305		pr_debug("emptying tx queue, MAC address %pM\n", lec_h->h_dest);
 306		lec_send(vcc, skb2);
 307	}
 308
 309	lec_send(vcc, skb);
 310
 311	if (!atm_may_send(vcc, 0)) {
 312		struct lec_vcc_priv *vpriv = LEC_VCC_PRIV(vcc);
 313
 314		vpriv->xoff = 1;
 315		netif_stop_queue(dev);
 316
 317		/*
 318		 * vcc->pop() might have occurred in between, making
 319		 * the vcc usuable again.  Since xmit is serialized,
 320		 * this is the only situation we have to re-test.
 321		 */
 322
 323		if (atm_may_send(vcc, 0))
 324			netif_wake_queue(dev);
 325	}
 326
 327out:
 328	if (entry)
 329		lec_arp_put(entry);
 330	netif_trans_update(dev);
 331	return NETDEV_TX_OK;
 332}
 333
 334/* The inverse routine to net_open(). */
 335static int lec_close(struct net_device *dev)
 336{
 337	netif_stop_queue(dev);
 338	return 0;
 339}
 340
 341static int lec_atm_send(struct atm_vcc *vcc, struct sk_buff *skb)
 342{
 343	unsigned long flags;
 344	struct net_device *dev = (struct net_device *)vcc->proto_data;
 345	struct lec_priv *priv = netdev_priv(dev);
 346	struct atmlec_msg *mesg;
 347	struct lec_arp_table *entry;
 348	int i;
 349	char *tmp;		/* FIXME */
 350
 351	WARN_ON(refcount_sub_and_test(skb->truesize, &sk_atm(vcc)->sk_wmem_alloc));
 352	mesg = (struct atmlec_msg *)skb->data;
 353	tmp = skb->data;
 354	tmp += sizeof(struct atmlec_msg);
 355	pr_debug("%s: msg from zeppelin:%d\n", dev->name, mesg->type);
 356	switch (mesg->type) {
 357	case l_set_mac_addr:
 358		for (i = 0; i < 6; i++)
 359			dev->dev_addr[i] = mesg->content.normal.mac_addr[i];
 360		break;
 361	case l_del_mac_addr:
 362		for (i = 0; i < 6; i++)
 363			dev->dev_addr[i] = 0;
 364		break;
 365	case l_addr_delete:
 366		lec_addr_delete(priv, mesg->content.normal.atm_addr,
 367				mesg->content.normal.flag);
 368		break;
 369	case l_topology_change:
 370		priv->topology_change = mesg->content.normal.flag;
 371		break;
 372	case l_flush_complete:
 373		lec_flush_complete(priv, mesg->content.normal.flag);
 374		break;
 375	case l_narp_req:	/* LANE2: see 7.1.35 in the lane2 spec */
 376		spin_lock_irqsave(&priv->lec_arp_lock, flags);
 377		entry = lec_arp_find(priv, mesg->content.normal.mac_addr);
 378		lec_arp_remove(priv, entry);
 379		spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
 380
 381		if (mesg->content.normal.no_source_le_narp)
 382			break;
 383		fallthrough;
 384	case l_arp_update:
 385		lec_arp_update(priv, mesg->content.normal.mac_addr,
 386			       mesg->content.normal.atm_addr,
 387			       mesg->content.normal.flag,
 388			       mesg->content.normal.targetless_le_arp);
 389		pr_debug("in l_arp_update\n");
 390		if (mesg->sizeoftlvs != 0) {	/* LANE2 3.1.5 */
 391			pr_debug("LANE2 3.1.5, got tlvs, size %d\n",
 392				 mesg->sizeoftlvs);
 393			lane2_associate_ind(dev, mesg->content.normal.mac_addr,
 394					    tmp, mesg->sizeoftlvs);
 395		}
 396		break;
 397	case l_config:
 398		priv->maximum_unknown_frame_count =
 399		    mesg->content.config.maximum_unknown_frame_count;
 400		priv->max_unknown_frame_time =
 401		    (mesg->content.config.max_unknown_frame_time * HZ);
 402		priv->max_retry_count = mesg->content.config.max_retry_count;
 403		priv->aging_time = (mesg->content.config.aging_time * HZ);
 404		priv->forward_delay_time =
 405		    (mesg->content.config.forward_delay_time * HZ);
 406		priv->arp_response_time =
 407		    (mesg->content.config.arp_response_time * HZ);
 408		priv->flush_timeout = (mesg->content.config.flush_timeout * HZ);
 409		priv->path_switching_delay =
 410		    (mesg->content.config.path_switching_delay * HZ);
 411		priv->lane_version = mesg->content.config.lane_version;
 412					/* LANE2 */
 413		priv->lane2_ops = NULL;
 414		if (priv->lane_version > 1)
 415			priv->lane2_ops = &lane2_ops;
 416		rtnl_lock();
 417		if (dev_set_mtu(dev, mesg->content.config.mtu))
 418			pr_info("%s: change_mtu to %d failed\n",
 419				dev->name, mesg->content.config.mtu);
 420		rtnl_unlock();
 421		priv->is_proxy = mesg->content.config.is_proxy;
 422		break;
 423	case l_flush_tran_id:
 424		lec_set_flush_tran_id(priv, mesg->content.normal.atm_addr,
 425				      mesg->content.normal.flag);
 426		break;
 427	case l_set_lecid:
 428		priv->lecid =
 429		    (unsigned short)(0xffff & mesg->content.normal.flag);
 430		break;
 431	case l_should_bridge:
 432#if IS_ENABLED(CONFIG_BRIDGE)
 433	{
 434		pr_debug("%s: bridge zeppelin asks about %pM\n",
 435			 dev->name, mesg->content.proxy.mac_addr);
 436
 437		if (br_fdb_test_addr_hook == NULL)
 438			break;
 439
 440		if (br_fdb_test_addr_hook(dev, mesg->content.proxy.mac_addr)) {
 441			/* hit from bridge table, send LE_ARP_RESPONSE */
 442			struct sk_buff *skb2;
 443			struct sock *sk;
 444
 445			pr_debug("%s: entry found, responding to zeppelin\n",
 446				 dev->name);
 447			skb2 = alloc_skb(sizeof(struct atmlec_msg), GFP_ATOMIC);
 448			if (skb2 == NULL)
 449				break;
 450			skb2->len = sizeof(struct atmlec_msg);
 451			skb_copy_to_linear_data(skb2, mesg, sizeof(*mesg));
 452			atm_force_charge(priv->lecd, skb2->truesize);
 453			sk = sk_atm(priv->lecd);
 454			skb_queue_tail(&sk->sk_receive_queue, skb2);
 455			sk->sk_data_ready(sk);
 456		}
 457	}
 458#endif /* IS_ENABLED(CONFIG_BRIDGE) */
 459		break;
 460	default:
 461		pr_info("%s: Unknown message type %d\n", dev->name, mesg->type);
 462		dev_kfree_skb(skb);
 463		return -EINVAL;
 464	}
 465	dev_kfree_skb(skb);
 466	return 0;
 467}
 468
 469static void lec_atm_close(struct atm_vcc *vcc)
 470{
 471	struct sk_buff *skb;
 472	struct net_device *dev = (struct net_device *)vcc->proto_data;
 473	struct lec_priv *priv = netdev_priv(dev);
 474
 475	priv->lecd = NULL;
 476	/* Do something needful? */
 477
 478	netif_stop_queue(dev);
 479	lec_arp_destroy(priv);
 480
 481	if (skb_peek(&sk_atm(vcc)->sk_receive_queue))
 482		pr_info("%s closing with messages pending\n", dev->name);
 483	while ((skb = skb_dequeue(&sk_atm(vcc)->sk_receive_queue))) {
 484		atm_return(vcc, skb->truesize);
 485		dev_kfree_skb(skb);
 486	}
 487
 488	pr_info("%s: Shut down!\n", dev->name);
 489	module_put(THIS_MODULE);
 490}
 491
 492static const struct atmdev_ops lecdev_ops = {
 493	.close = lec_atm_close,
 494	.send = lec_atm_send
 495};
 496
 497static struct atm_dev lecatm_dev = {
 498	.ops = &lecdev_ops,
 499	.type = "lec",
 500	.number = 999,		/* dummy device number */
 501	.lock = __SPIN_LOCK_UNLOCKED(lecatm_dev.lock)
 502};
 503
 504/*
 505 * LANE2: new argument struct sk_buff *data contains
 506 * the LE_ARP based TLVs introduced in the LANE2 spec
 507 */
 508static int
 509send_to_lecd(struct lec_priv *priv, atmlec_msg_type type,
 510	     const unsigned char *mac_addr, const unsigned char *atm_addr,
 511	     struct sk_buff *data)
 512{
 513	struct sock *sk;
 514	struct sk_buff *skb;
 515	struct atmlec_msg *mesg;
 516
 517	if (!priv || !priv->lecd)
 518		return -1;
 519	skb = alloc_skb(sizeof(struct atmlec_msg), GFP_ATOMIC);
 520	if (!skb)
 521		return -1;
 522	skb->len = sizeof(struct atmlec_msg);
 523	mesg = (struct atmlec_msg *)skb->data;
 524	memset(mesg, 0, sizeof(struct atmlec_msg));
 525	mesg->type = type;
 526	if (data != NULL)
 527		mesg->sizeoftlvs = data->len;
 528	if (mac_addr)
 529		ether_addr_copy(mesg->content.normal.mac_addr, mac_addr);
 530	else
 531		mesg->content.normal.targetless_le_arp = 1;
 532	if (atm_addr)
 533		memcpy(&mesg->content.normal.atm_addr, atm_addr, ATM_ESA_LEN);
 534
 535	atm_force_charge(priv->lecd, skb->truesize);
 536	sk = sk_atm(priv->lecd);
 537	skb_queue_tail(&sk->sk_receive_queue, skb);
 538	sk->sk_data_ready(sk);
 539
 540	if (data != NULL) {
 541		pr_debug("about to send %d bytes of data\n", data->len);
 542		atm_force_charge(priv->lecd, data->truesize);
 543		skb_queue_tail(&sk->sk_receive_queue, data);
 544		sk->sk_data_ready(sk);
 545	}
 546
 547	return 0;
 548}
 549
 550static void lec_set_multicast_list(struct net_device *dev)
 551{
 552	/*
 553	 * by default, all multicast frames arrive over the bus.
 554	 * eventually support selective multicast service
 555	 */
 556}
 557
 558static const struct net_device_ops lec_netdev_ops = {
 559	.ndo_open		= lec_open,
 560	.ndo_stop		= lec_close,
 561	.ndo_start_xmit		= lec_start_xmit,
 562	.ndo_tx_timeout		= lec_tx_timeout,
 563	.ndo_set_rx_mode	= lec_set_multicast_list,
 564};
 565
 566static const unsigned char lec_ctrl_magic[] = {
 567	0xff,
 568	0x00,
 569	0x01,
 570	0x01
 571};
 572
 573#define LEC_DATA_DIRECT_8023  2
 574#define LEC_DATA_DIRECT_8025  3
 575
 576static int lec_is_data_direct(struct atm_vcc *vcc)
 577{
 578	return ((vcc->sap.blli[0].l3.tr9577.snap[4] == LEC_DATA_DIRECT_8023) ||
 579		(vcc->sap.blli[0].l3.tr9577.snap[4] == LEC_DATA_DIRECT_8025));
 580}
 581
 582static void lec_push(struct atm_vcc *vcc, struct sk_buff *skb)
 583{
 584	unsigned long flags;
 585	struct net_device *dev = (struct net_device *)vcc->proto_data;
 586	struct lec_priv *priv = netdev_priv(dev);
 587
 588#if DUMP_PACKETS > 0
 589	printk(KERN_DEBUG "%s: vcc vpi:%d vci:%d\n",
 590	       dev->name, vcc->vpi, vcc->vci);
 591#endif
 592	if (!skb) {
 593		pr_debug("%s: null skb\n", dev->name);
 594		lec_vcc_close(priv, vcc);
 595		return;
 596	}
 597#if DUMP_PACKETS >= 2
 598#define MAX_SKB_DUMP 99
 599#elif DUMP_PACKETS >= 1
 600#define MAX_SKB_DUMP 30
 601#endif
 602#if DUMP_PACKETS > 0
 603	printk(KERN_DEBUG "%s: rcv datalen:%ld lecid:%4.4x\n",
 604	       dev->name, skb->len, priv->lecid);
 605	print_hex_dump(KERN_DEBUG, "", DUMP_OFFSET, 16, 1,
 606		       skb->data, min(MAX_SKB_DUMP, skb->len), true);
 607#endif /* DUMP_PACKETS > 0 */
 608	if (memcmp(skb->data, lec_ctrl_magic, 4) == 0) {
 609				/* Control frame, to daemon */
 610		struct sock *sk = sk_atm(vcc);
 611
 612		pr_debug("%s: To daemon\n", dev->name);
 613		skb_queue_tail(&sk->sk_receive_queue, skb);
 614		sk->sk_data_ready(sk);
 615	} else {		/* Data frame, queue to protocol handlers */
 616		struct lec_arp_table *entry;
 617		unsigned char *src, *dst;
 618
 619		atm_return(vcc, skb->truesize);
 620		if (*(__be16 *) skb->data == htons(priv->lecid) ||
 621		    !priv->lecd || !(dev->flags & IFF_UP)) {
 622			/*
 623			 * Probably looping back, or if lecd is missing,
 624			 * lecd has gone down
 625			 */
 626			pr_debug("Ignoring frame...\n");
 627			dev_kfree_skb(skb);
 628			return;
 629		}
 630		dst = ((struct lecdatahdr_8023 *)skb->data)->h_dest;
 631
 632		/*
 633		 * If this is a Data Direct VCC, and the VCC does not match
 634		 * the LE_ARP cache entry, delete the LE_ARP cache entry.
 635		 */
 636		spin_lock_irqsave(&priv->lec_arp_lock, flags);
 637		if (lec_is_data_direct(vcc)) {
 638			src = ((struct lecdatahdr_8023 *)skb->data)->h_source;
 639			entry = lec_arp_find(priv, src);
 640			if (entry && entry->vcc != vcc) {
 641				lec_arp_remove(priv, entry);
 642				lec_arp_put(entry);
 643			}
 644		}
 645		spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
 646
 647		if (!(dst[0] & 0x01) &&	/* Never filter Multi/Broadcast */
 648		    !priv->is_proxy &&	/* Proxy wants all the packets */
 649		    memcmp(dst, dev->dev_addr, dev->addr_len)) {
 650			dev_kfree_skb(skb);
 651			return;
 652		}
 653		if (!hlist_empty(&priv->lec_arp_empty_ones))
 654			lec_arp_check_empties(priv, vcc, skb);
 655		skb_pull(skb, 2);	/* skip lec_id */
 656		skb->protocol = eth_type_trans(skb, dev);
 657		dev->stats.rx_packets++;
 658		dev->stats.rx_bytes += skb->len;
 659		memset(ATM_SKB(skb), 0, sizeof(struct atm_skb_data));
 660		netif_rx(skb);
 661	}
 662}
 663
 664static void lec_pop(struct atm_vcc *vcc, struct sk_buff *skb)
 665{
 666	struct lec_vcc_priv *vpriv = LEC_VCC_PRIV(vcc);
 667	struct net_device *dev = skb->dev;
 668
 669	if (vpriv == NULL) {
 670		pr_info("vpriv = NULL!?!?!?\n");
 671		return;
 672	}
 673
 674	vpriv->old_pop(vcc, skb);
 675
 676	if (vpriv->xoff && atm_may_send(vcc, 0)) {
 677		vpriv->xoff = 0;
 678		if (netif_running(dev) && netif_queue_stopped(dev))
 679			netif_wake_queue(dev);
 680	}
 681}
 682
 683static int lec_vcc_attach(struct atm_vcc *vcc, void __user *arg)
 684{
 685	struct lec_vcc_priv *vpriv;
 686	int bytes_left;
 687	struct atmlec_ioc ioc_data;
 688
 689	/* Lecd must be up in this case */
 690	bytes_left = copy_from_user(&ioc_data, arg, sizeof(struct atmlec_ioc));
 691	if (bytes_left != 0)
 692		pr_info("copy from user failed for %d bytes\n", bytes_left);
 693	if (ioc_data.dev_num < 0 || ioc_data.dev_num >= MAX_LEC_ITF)
 694		return -EINVAL;
 695	ioc_data.dev_num = array_index_nospec(ioc_data.dev_num, MAX_LEC_ITF);
 696	if (!dev_lec[ioc_data.dev_num])
 697		return -EINVAL;
 698	vpriv = kmalloc(sizeof(struct lec_vcc_priv), GFP_KERNEL);
 699	if (!vpriv)
 700		return -ENOMEM;
 701	vpriv->xoff = 0;
 702	vpriv->old_pop = vcc->pop;
 703	vcc->user_back = vpriv;
 704	vcc->pop = lec_pop;
 705	lec_vcc_added(netdev_priv(dev_lec[ioc_data.dev_num]),
 706		      &ioc_data, vcc, vcc->push);
 707	vcc->proto_data = dev_lec[ioc_data.dev_num];
 708	vcc->push = lec_push;
 709	return 0;
 710}
 711
 712static int lec_mcast_attach(struct atm_vcc *vcc, int arg)
 713{
 714	if (arg < 0 || arg >= MAX_LEC_ITF)
 715		return -EINVAL;
 716	arg = array_index_nospec(arg, MAX_LEC_ITF);
 717	if (!dev_lec[arg])
 718		return -EINVAL;
 719	vcc->proto_data = dev_lec[arg];
 720	return lec_mcast_make(netdev_priv(dev_lec[arg]), vcc);
 721}
 722
 723/* Initialize device. */
 724static int lecd_attach(struct atm_vcc *vcc, int arg)
 725{
 726	int i;
 727	struct lec_priv *priv;
 728
 729	if (arg < 0)
 730		arg = 0;
 731	if (arg >= MAX_LEC_ITF)
 732		return -EINVAL;
 733	i = array_index_nospec(arg, MAX_LEC_ITF);
 734	if (!dev_lec[i]) {
 735		int size;
 736
 737		size = sizeof(struct lec_priv);
 738		dev_lec[i] = alloc_etherdev(size);
 739		if (!dev_lec[i])
 740			return -ENOMEM;
 741		dev_lec[i]->netdev_ops = &lec_netdev_ops;
 742		dev_lec[i]->max_mtu = 18190;
 743		snprintf(dev_lec[i]->name, IFNAMSIZ, "lec%d", i);
 744		if (register_netdev(dev_lec[i])) {
 745			free_netdev(dev_lec[i]);
 746			return -EINVAL;
 747		}
 748
 749		priv = netdev_priv(dev_lec[i]);
 750	} else {
 751		priv = netdev_priv(dev_lec[i]);
 752		if (priv->lecd)
 753			return -EADDRINUSE;
 754	}
 755	lec_arp_init(priv);
 756	priv->itfnum = i;	/* LANE2 addition */
 757	priv->lecd = vcc;
 758	vcc->dev = &lecatm_dev;
 759	vcc_insert_socket(sk_atm(vcc));
 760
 761	vcc->proto_data = dev_lec[i];
 762	set_bit(ATM_VF_META, &vcc->flags);
 763	set_bit(ATM_VF_READY, &vcc->flags);
 764
 765	/* Set default values to these variables */
 766	priv->maximum_unknown_frame_count = 1;
 767	priv->max_unknown_frame_time = (1 * HZ);
 768	priv->vcc_timeout_period = (1200 * HZ);
 769	priv->max_retry_count = 1;
 770	priv->aging_time = (300 * HZ);
 771	priv->forward_delay_time = (15 * HZ);
 772	priv->topology_change = 0;
 773	priv->arp_response_time = (1 * HZ);
 774	priv->flush_timeout = (4 * HZ);
 775	priv->path_switching_delay = (6 * HZ);
 776
 777	if (dev_lec[i]->flags & IFF_UP)
 778		netif_start_queue(dev_lec[i]);
 779	__module_get(THIS_MODULE);
 780	return i;
 781}
 782
 783#ifdef CONFIG_PROC_FS
 784static const char *lec_arp_get_status_string(unsigned char status)
 785{
 786	static const char *const lec_arp_status_string[] = {
 787		"ESI_UNKNOWN       ",
 788		"ESI_ARP_PENDING   ",
 789		"ESI_VC_PENDING    ",
 790		"<Undefined>       ",
 791		"ESI_FLUSH_PENDING ",
 792		"ESI_FORWARD_DIRECT"
 793	};
 794
 795	if (status > ESI_FORWARD_DIRECT)
 796		status = 3;	/* ESI_UNDEFINED */
 797	return lec_arp_status_string[status];
 798}
 799
 800static void lec_info(struct seq_file *seq, struct lec_arp_table *entry)
 801{
 802	seq_printf(seq, "%pM ", entry->mac_addr);
 803	seq_printf(seq, "%*phN ", ATM_ESA_LEN, entry->atm_addr);
 804	seq_printf(seq, "%s %4.4x", lec_arp_get_status_string(entry->status),
 805		   entry->flags & 0xffff);
 806	if (entry->vcc)
 807		seq_printf(seq, "%3d %3d ", entry->vcc->vpi, entry->vcc->vci);
 808	else
 809		seq_printf(seq, "        ");
 810	if (entry->recv_vcc) {
 811		seq_printf(seq, "     %3d %3d", entry->recv_vcc->vpi,
 812			   entry->recv_vcc->vci);
 813	}
 814	seq_putc(seq, '\n');
 815}
 816
 817struct lec_state {
 818	unsigned long flags;
 819	struct lec_priv *locked;
 820	struct hlist_node *node;
 821	struct net_device *dev;
 822	int itf;
 823	int arp_table;
 824	int misc_table;
 825};
 826
 827static void *lec_tbl_walk(struct lec_state *state, struct hlist_head *tbl,
 828			  loff_t *l)
 829{
 830	struct hlist_node *e = state->node;
 831
 832	if (!e)
 833		e = tbl->first;
 834	if (e == SEQ_START_TOKEN) {
 835		e = tbl->first;
 836		--*l;
 837	}
 838
 839	for (; e; e = e->next) {
 840		if (--*l < 0)
 841			break;
 842	}
 843	state->node = e;
 844
 845	return (*l < 0) ? state : NULL;
 846}
 847
 848static void *lec_arp_walk(struct lec_state *state, loff_t *l,
 849			  struct lec_priv *priv)
 850{
 851	void *v = NULL;
 852	int p;
 853
 854	for (p = state->arp_table; p < LEC_ARP_TABLE_SIZE; p++) {
 855		v = lec_tbl_walk(state, &priv->lec_arp_tables[p], l);
 856		if (v)
 857			break;
 858	}
 859	state->arp_table = p;
 860	return v;
 861}
 862
 863static void *lec_misc_walk(struct lec_state *state, loff_t *l,
 864			   struct lec_priv *priv)
 865{
 866	struct hlist_head *lec_misc_tables[] = {
 867		&priv->lec_arp_empty_ones,
 868		&priv->lec_no_forward,
 869		&priv->mcast_fwds
 870	};
 871	void *v = NULL;
 872	int q;
 873
 874	for (q = state->misc_table; q < ARRAY_SIZE(lec_misc_tables); q++) {
 875		v = lec_tbl_walk(state, lec_misc_tables[q], l);
 876		if (v)
 877			break;
 878	}
 879	state->misc_table = q;
 880	return v;
 881}
 882
 883static void *lec_priv_walk(struct lec_state *state, loff_t *l,
 884			   struct lec_priv *priv)
 885{
 886	if (!state->locked) {
 887		state->locked = priv;
 888		spin_lock_irqsave(&priv->lec_arp_lock, state->flags);
 889	}
 890	if (!lec_arp_walk(state, l, priv) && !lec_misc_walk(state, l, priv)) {
 891		spin_unlock_irqrestore(&priv->lec_arp_lock, state->flags);
 892		state->locked = NULL;
 893		/* Partial state reset for the next time we get called */
 894		state->arp_table = state->misc_table = 0;
 895	}
 896	return state->locked;
 897}
 898
 899static void *lec_itf_walk(struct lec_state *state, loff_t *l)
 900{
 901	struct net_device *dev;
 902	void *v;
 903
 904	dev = state->dev ? state->dev : dev_lec[state->itf];
 905	v = (dev && netdev_priv(dev)) ?
 906		lec_priv_walk(state, l, netdev_priv(dev)) : NULL;
 907	if (!v && dev) {
 908		dev_put(dev);
 909		/* Partial state reset for the next time we get called */
 910		dev = NULL;
 911	}
 912	state->dev = dev;
 913	return v;
 914}
 915
 916static void *lec_get_idx(struct lec_state *state, loff_t l)
 917{
 918	void *v = NULL;
 919
 920	for (; state->itf < MAX_LEC_ITF; state->itf++) {
 921		v = lec_itf_walk(state, &l);
 922		if (v)
 923			break;
 924	}
 925	return v;
 926}
 927
 928static void *lec_seq_start(struct seq_file *seq, loff_t *pos)
 929{
 930	struct lec_state *state = seq->private;
 931
 932	state->itf = 0;
 933	state->dev = NULL;
 934	state->locked = NULL;
 935	state->arp_table = 0;
 936	state->misc_table = 0;
 937	state->node = SEQ_START_TOKEN;
 938
 939	return *pos ? lec_get_idx(state, *pos) : SEQ_START_TOKEN;
 940}
 941
 942static void lec_seq_stop(struct seq_file *seq, void *v)
 943{
 944	struct lec_state *state = seq->private;
 945
 946	if (state->dev) {
 947		spin_unlock_irqrestore(&state->locked->lec_arp_lock,
 948				       state->flags);
 949		dev_put(state->dev);
 950	}
 951}
 952
 953static void *lec_seq_next(struct seq_file *seq, void *v, loff_t *pos)
 954{
 955	struct lec_state *state = seq->private;
 956
 957	v = lec_get_idx(state, 1);
 958	*pos += !!PTR_ERR(v);
 959	return v;
 960}
 961
 962static int lec_seq_show(struct seq_file *seq, void *v)
 963{
 964	static const char lec_banner[] =
 965	    "Itf  MAC          ATM destination"
 966	    "                          Status            Flags "
 967	    "VPI/VCI Recv VPI/VCI\n";
 968
 969	if (v == SEQ_START_TOKEN)
 970		seq_puts(seq, lec_banner);
 971	else {
 972		struct lec_state *state = seq->private;
 973		struct net_device *dev = state->dev;
 974		struct lec_arp_table *entry = hlist_entry(state->node,
 975							  struct lec_arp_table,
 976							  next);
 977
 978		seq_printf(seq, "%s ", dev->name);
 979		lec_info(seq, entry);
 980	}
 981	return 0;
 982}
 983
 984static const struct seq_operations lec_seq_ops = {
 985	.start = lec_seq_start,
 986	.next = lec_seq_next,
 987	.stop = lec_seq_stop,
 988	.show = lec_seq_show,
 989};
 990#endif
 991
 992static int lane_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
 993{
 994	struct atm_vcc *vcc = ATM_SD(sock);
 995	int err = 0;
 996
 997	switch (cmd) {
 998	case ATMLEC_CTRL:
 999	case ATMLEC_MCAST:
1000	case ATMLEC_DATA:
1001		if (!capable(CAP_NET_ADMIN))
1002			return -EPERM;
1003		break;
1004	default:
1005		return -ENOIOCTLCMD;
1006	}
1007
1008	switch (cmd) {
1009	case ATMLEC_CTRL:
1010		err = lecd_attach(vcc, (int)arg);
1011		if (err >= 0)
1012			sock->state = SS_CONNECTED;
1013		break;
1014	case ATMLEC_MCAST:
1015		err = lec_mcast_attach(vcc, (int)arg);
1016		break;
1017	case ATMLEC_DATA:
1018		err = lec_vcc_attach(vcc, (void __user *)arg);
1019		break;
1020	}
1021
1022	return err;
1023}
1024
1025static struct atm_ioctl lane_ioctl_ops = {
1026	.owner = THIS_MODULE,
1027	.ioctl = lane_ioctl,
1028};
1029
1030static int __init lane_module_init(void)
1031{
1032#ifdef CONFIG_PROC_FS
1033	struct proc_dir_entry *p;
1034
1035	p = proc_create_seq_private("lec", 0444, atm_proc_root, &lec_seq_ops,
1036			sizeof(struct lec_state), NULL);
1037	if (!p) {
1038		pr_err("Unable to initialize /proc/net/atm/lec\n");
1039		return -ENOMEM;
1040	}
1041#endif
1042
1043	register_atm_ioctl(&lane_ioctl_ops);
1044	pr_info("lec.c: initialized\n");
1045	return 0;
1046}
1047
1048static void __exit lane_module_cleanup(void)
1049{
1050	int i;
1051
1052#ifdef CONFIG_PROC_FS
1053	remove_proc_entry("lec", atm_proc_root);
1054#endif
1055
1056	deregister_atm_ioctl(&lane_ioctl_ops);
1057
1058	for (i = 0; i < MAX_LEC_ITF; i++) {
1059		if (dev_lec[i] != NULL) {
1060			unregister_netdev(dev_lec[i]);
1061			free_netdev(dev_lec[i]);
1062			dev_lec[i] = NULL;
1063		}
1064	}
1065}
1066
1067module_init(lane_module_init);
1068module_exit(lane_module_cleanup);
1069
1070/*
1071 * LANE2: 3.1.3, LE_RESOLVE.request
1072 * Non force allocates memory and fills in *tlvs, fills in *sizeoftlvs.
1073 * If sizeoftlvs == NULL the default TLVs associated with with this
1074 * lec will be used.
1075 * If dst_mac == NULL, targetless LE_ARP will be sent
1076 */
1077static int lane2_resolve(struct net_device *dev, const u8 *dst_mac, int force,
1078			 u8 **tlvs, u32 *sizeoftlvs)
1079{
1080	unsigned long flags;
1081	struct lec_priv *priv = netdev_priv(dev);
1082	struct lec_arp_table *table;
1083	struct sk_buff *skb;
1084	int retval;
1085
1086	if (force == 0) {
1087		spin_lock_irqsave(&priv->lec_arp_lock, flags);
1088		table = lec_arp_find(priv, dst_mac);
1089		spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1090		if (table == NULL)
1091			return -1;
1092
1093		*tlvs = kmemdup(table->tlvs, table->sizeoftlvs, GFP_ATOMIC);
1094		if (*tlvs == NULL)
1095			return -1;
1096
1097		*sizeoftlvs = table->sizeoftlvs;
1098
1099		return 0;
1100	}
1101
1102	if (sizeoftlvs == NULL)
1103		retval = send_to_lecd(priv, l_arp_xmt, dst_mac, NULL, NULL);
1104
1105	else {
1106		skb = alloc_skb(*sizeoftlvs, GFP_ATOMIC);
1107		if (skb == NULL)
1108			return -1;
1109		skb->len = *sizeoftlvs;
1110		skb_copy_to_linear_data(skb, *tlvs, *sizeoftlvs);
1111		retval = send_to_lecd(priv, l_arp_xmt, dst_mac, NULL, skb);
1112	}
1113	return retval;
1114}
1115
1116/*
1117 * LANE2: 3.1.4, LE_ASSOCIATE.request
1118 * Associate the *tlvs with the *lan_dst address.
1119 * Will overwrite any previous association
1120 * Returns 1 for success, 0 for failure (out of memory)
1121 *
1122 */
1123static int lane2_associate_req(struct net_device *dev, const u8 *lan_dst,
1124			       const u8 *tlvs, u32 sizeoftlvs)
1125{
1126	int retval;
1127	struct sk_buff *skb;
1128	struct lec_priv *priv = netdev_priv(dev);
1129
1130	if (!ether_addr_equal(lan_dst, dev->dev_addr))
1131		return 0;	/* not our mac address */
1132
1133	kfree(priv->tlvs);	/* NULL if there was no previous association */
1134
1135	priv->tlvs = kmemdup(tlvs, sizeoftlvs, GFP_KERNEL);
1136	if (priv->tlvs == NULL)
1137		return 0;
1138	priv->sizeoftlvs = sizeoftlvs;
1139
1140	skb = alloc_skb(sizeoftlvs, GFP_ATOMIC);
1141	if (skb == NULL)
1142		return 0;
1143	skb->len = sizeoftlvs;
1144	skb_copy_to_linear_data(skb, tlvs, sizeoftlvs);
1145	retval = send_to_lecd(priv, l_associate_req, NULL, NULL, skb);
1146	if (retval != 0)
1147		pr_info("lec.c: lane2_associate_req() failed\n");
1148	/*
1149	 * If the previous association has changed we must
1150	 * somehow notify other LANE entities about the change
1151	 */
1152	return 1;
1153}
1154
1155/*
1156 * LANE2: 3.1.5, LE_ASSOCIATE.indication
1157 *
1158 */
1159static void lane2_associate_ind(struct net_device *dev, const u8 *mac_addr,
1160				const u8 *tlvs, u32 sizeoftlvs)
1161{
1162#if 0
1163	int i = 0;
1164#endif
1165	struct lec_priv *priv = netdev_priv(dev);
1166#if 0				/*
1167				 * Why have the TLVs in LE_ARP entries
1168				 * since we do not use them? When you
1169				 * uncomment this code, make sure the
1170				 * TLVs get freed when entry is killed
1171				 */
1172	struct lec_arp_table *entry = lec_arp_find(priv, mac_addr);
1173
1174	if (entry == NULL)
1175		return;		/* should not happen */
1176
1177	kfree(entry->tlvs);
1178
1179	entry->tlvs = kmemdup(tlvs, sizeoftlvs, GFP_KERNEL);
1180	if (entry->tlvs == NULL)
1181		return;
1182	entry->sizeoftlvs = sizeoftlvs;
1183#endif
1184#if 0
1185	pr_info("\n");
1186	pr_info("dump of tlvs, sizeoftlvs=%d\n", sizeoftlvs);
1187	while (i < sizeoftlvs)
1188		pr_cont("%02x ", tlvs[i++]);
1189
1190	pr_cont("\n");
1191#endif
1192
1193	/* tell MPOA about the TLVs we saw */
1194	if (priv->lane2_ops && priv->lane2_ops->associate_indicator) {
1195		priv->lane2_ops->associate_indicator(dev, mac_addr,
1196						     tlvs, sizeoftlvs);
1197	}
1198}
1199
1200/*
1201 * Here starts what used to lec_arpc.c
1202 *
1203 * lec_arpc.c was added here when making
1204 * lane client modular. October 1997
1205 */
1206
1207#include <linux/types.h>
1208#include <linux/timer.h>
1209#include <linux/param.h>
1210#include <linux/atomic.h>
1211#include <linux/inetdevice.h>
1212#include <net/route.h>
1213
1214#if 0
1215#define pr_debug(format, args...)
1216/*
1217  #define pr_debug printk
1218*/
1219#endif
1220#define DEBUG_ARP_TABLE 0
1221
1222#define LEC_ARP_REFRESH_INTERVAL (3*HZ)
1223
1224static void lec_arp_check_expire(struct work_struct *work);
1225static void lec_arp_expire_arp(struct timer_list *t);
1226
1227/*
1228 * Arp table funcs
1229 */
1230
1231#define HASH(ch) (ch & (LEC_ARP_TABLE_SIZE - 1))
1232
1233/*
1234 * Initialization of arp-cache
1235 */
1236static void lec_arp_init(struct lec_priv *priv)
1237{
1238	unsigned short i;
1239
1240	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++)
1241		INIT_HLIST_HEAD(&priv->lec_arp_tables[i]);
1242	INIT_HLIST_HEAD(&priv->lec_arp_empty_ones);
1243	INIT_HLIST_HEAD(&priv->lec_no_forward);
1244	INIT_HLIST_HEAD(&priv->mcast_fwds);
1245	spin_lock_init(&priv->lec_arp_lock);
1246	INIT_DELAYED_WORK(&priv->lec_arp_work, lec_arp_check_expire);
1247	schedule_delayed_work(&priv->lec_arp_work, LEC_ARP_REFRESH_INTERVAL);
1248}
1249
1250static void lec_arp_clear_vccs(struct lec_arp_table *entry)
1251{
1252	if (entry->vcc) {
1253		struct atm_vcc *vcc = entry->vcc;
1254		struct lec_vcc_priv *vpriv = LEC_VCC_PRIV(vcc);
1255		struct net_device *dev = (struct net_device *)vcc->proto_data;
1256
1257		vcc->pop = vpriv->old_pop;
1258		if (vpriv->xoff)
1259			netif_wake_queue(dev);
1260		kfree(vpriv);
1261		vcc->user_back = NULL;
1262		vcc->push = entry->old_push;
1263		vcc_release_async(vcc, -EPIPE);
1264		entry->vcc = NULL;
1265	}
1266	if (entry->recv_vcc) {
1267		struct atm_vcc *vcc = entry->recv_vcc;
1268		struct lec_vcc_priv *vpriv = LEC_VCC_PRIV(vcc);
1269
1270		kfree(vpriv);
1271		vcc->user_back = NULL;
1272
1273		entry->recv_vcc->push = entry->old_recv_push;
1274		vcc_release_async(entry->recv_vcc, -EPIPE);
1275		entry->recv_vcc = NULL;
1276	}
1277}
1278
1279/*
1280 * Insert entry to lec_arp_table
1281 * LANE2: Add to the end of the list to satisfy 8.1.13
1282 */
1283static inline void
1284lec_arp_add(struct lec_priv *priv, struct lec_arp_table *entry)
1285{
1286	struct hlist_head *tmp;
1287
1288	tmp = &priv->lec_arp_tables[HASH(entry->mac_addr[ETH_ALEN - 1])];
1289	hlist_add_head(&entry->next, tmp);
1290
1291	pr_debug("Added entry:%pM\n", entry->mac_addr);
1292}
1293
1294/*
1295 * Remove entry from lec_arp_table
1296 */
1297static int
1298lec_arp_remove(struct lec_priv *priv, struct lec_arp_table *to_remove)
1299{
1300	struct lec_arp_table *entry;
1301	int i, remove_vcc = 1;
1302
1303	if (!to_remove)
1304		return -1;
1305
1306	hlist_del(&to_remove->next);
1307	del_timer(&to_remove->timer);
1308
1309	/*
1310	 * If this is the only MAC connected to this VCC,
1311	 * also tear down the VCC
1312	 */
1313	if (to_remove->status >= ESI_FLUSH_PENDING) {
1314		/*
1315		 * ESI_FLUSH_PENDING, ESI_FORWARD_DIRECT
1316		 */
1317		for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1318			hlist_for_each_entry(entry,
1319					     &priv->lec_arp_tables[i], next) {
1320				if (memcmp(to_remove->atm_addr,
1321					   entry->atm_addr, ATM_ESA_LEN) == 0) {
1322					remove_vcc = 0;
1323					break;
1324				}
1325			}
1326		}
1327		if (remove_vcc)
1328			lec_arp_clear_vccs(to_remove);
1329	}
1330	skb_queue_purge(&to_remove->tx_wait);	/* FIXME: good place for this? */
1331
1332	pr_debug("Removed entry:%pM\n", to_remove->mac_addr);
1333	return 0;
1334}
1335
1336#if DEBUG_ARP_TABLE
1337static const char *get_status_string(unsigned char st)
1338{
1339	switch (st) {
1340	case ESI_UNKNOWN:
1341		return "ESI_UNKNOWN";
1342	case ESI_ARP_PENDING:
1343		return "ESI_ARP_PENDING";
1344	case ESI_VC_PENDING:
1345		return "ESI_VC_PENDING";
1346	case ESI_FLUSH_PENDING:
1347		return "ESI_FLUSH_PENDING";
1348	case ESI_FORWARD_DIRECT:
1349		return "ESI_FORWARD_DIRECT";
1350	}
1351	return "<UNKNOWN>";
1352}
1353
1354static void dump_arp_table(struct lec_priv *priv)
1355{
1356	struct lec_arp_table *rulla;
1357	char buf[256];
1358	int i, offset;
1359
1360	pr_info("Dump %p:\n", priv);
1361	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1362		hlist_for_each_entry(rulla,
1363				     &priv->lec_arp_tables[i], next) {
1364			offset = 0;
1365			offset += sprintf(buf, "%d: %p\n", i, rulla);
1366			offset += sprintf(buf + offset, "Mac: %pM ",
1367					  rulla->mac_addr);
1368			offset += sprintf(buf + offset, "Atm: %*ph ", ATM_ESA_LEN,
1369					  rulla->atm_addr);
1370			offset += sprintf(buf + offset,
1371					  "Vcc vpi:%d vci:%d, Recv_vcc vpi:%d vci:%d Last_used:%lx, Timestamp:%lx, No_tries:%d ",
1372					  rulla->vcc ? rulla->vcc->vpi : 0,
1373					  rulla->vcc ? rulla->vcc->vci : 0,
1374					  rulla->recv_vcc ? rulla->recv_vcc->
1375					  vpi : 0,
1376					  rulla->recv_vcc ? rulla->recv_vcc->
1377					  vci : 0, rulla->last_used,
1378					  rulla->timestamp, rulla->no_tries);
1379			offset +=
1380			    sprintf(buf + offset,
1381				    "Flags:%x, Packets_flooded:%x, Status: %s ",
1382				    rulla->flags, rulla->packets_flooded,
1383				    get_status_string(rulla->status));
1384			pr_info("%s\n", buf);
1385		}
1386	}
1387
1388	if (!hlist_empty(&priv->lec_no_forward))
1389		pr_info("No forward\n");
1390	hlist_for_each_entry(rulla, &priv->lec_no_forward, next) {
1391		offset = 0;
1392		offset += sprintf(buf + offset, "Mac: %pM ", rulla->mac_addr);
1393		offset += sprintf(buf + offset, "Atm: %*ph ", ATM_ESA_LEN,
1394				  rulla->atm_addr);
1395		offset += sprintf(buf + offset,
1396				  "Vcc vpi:%d vci:%d, Recv_vcc vpi:%d vci:%d Last_used:%lx, Timestamp:%lx, No_tries:%d ",
1397				  rulla->vcc ? rulla->vcc->vpi : 0,
1398				  rulla->vcc ? rulla->vcc->vci : 0,
1399				  rulla->recv_vcc ? rulla->recv_vcc->vpi : 0,
1400				  rulla->recv_vcc ? rulla->recv_vcc->vci : 0,
1401				  rulla->last_used,
1402				  rulla->timestamp, rulla->no_tries);
1403		offset += sprintf(buf + offset,
1404				  "Flags:%x, Packets_flooded:%x, Status: %s ",
1405				  rulla->flags, rulla->packets_flooded,
1406				  get_status_string(rulla->status));
1407		pr_info("%s\n", buf);
1408	}
1409
1410	if (!hlist_empty(&priv->lec_arp_empty_ones))
1411		pr_info("Empty ones\n");
1412	hlist_for_each_entry(rulla, &priv->lec_arp_empty_ones, next) {
1413		offset = 0;
1414		offset += sprintf(buf + offset, "Mac: %pM ", rulla->mac_addr);
1415		offset += sprintf(buf + offset, "Atm: %*ph ", ATM_ESA_LEN,
1416				  rulla->atm_addr);
1417		offset += sprintf(buf + offset,
1418				  "Vcc vpi:%d vci:%d, Recv_vcc vpi:%d vci:%d Last_used:%lx, Timestamp:%lx, No_tries:%d ",
1419				  rulla->vcc ? rulla->vcc->vpi : 0,
1420				  rulla->vcc ? rulla->vcc->vci : 0,
1421				  rulla->recv_vcc ? rulla->recv_vcc->vpi : 0,
1422				  rulla->recv_vcc ? rulla->recv_vcc->vci : 0,
1423				  rulla->last_used,
1424				  rulla->timestamp, rulla->no_tries);
1425		offset += sprintf(buf + offset,
1426				  "Flags:%x, Packets_flooded:%x, Status: %s ",
1427				  rulla->flags, rulla->packets_flooded,
1428				  get_status_string(rulla->status));
1429		pr_info("%s", buf);
1430	}
1431
1432	if (!hlist_empty(&priv->mcast_fwds))
1433		pr_info("Multicast Forward VCCs\n");
1434	hlist_for_each_entry(rulla, &priv->mcast_fwds, next) {
1435		offset = 0;
1436		offset += sprintf(buf + offset, "Mac: %pM ", rulla->mac_addr);
1437		offset += sprintf(buf + offset, "Atm: %*ph ", ATM_ESA_LEN,
1438				  rulla->atm_addr);
1439		offset += sprintf(buf + offset,
1440				  "Vcc vpi:%d vci:%d, Recv_vcc vpi:%d vci:%d Last_used:%lx, Timestamp:%lx, No_tries:%d ",
1441				  rulla->vcc ? rulla->vcc->vpi : 0,
1442				  rulla->vcc ? rulla->vcc->vci : 0,
1443				  rulla->recv_vcc ? rulla->recv_vcc->vpi : 0,
1444				  rulla->recv_vcc ? rulla->recv_vcc->vci : 0,
1445				  rulla->last_used,
1446				  rulla->timestamp, rulla->no_tries);
1447		offset += sprintf(buf + offset,
1448				  "Flags:%x, Packets_flooded:%x, Status: %s ",
1449				  rulla->flags, rulla->packets_flooded,
1450				  get_status_string(rulla->status));
1451		pr_info("%s\n", buf);
1452	}
1453
1454}
1455#else
1456#define dump_arp_table(priv) do { } while (0)
1457#endif
1458
1459/*
1460 * Destruction of arp-cache
1461 */
1462static void lec_arp_destroy(struct lec_priv *priv)
1463{
1464	unsigned long flags;
1465	struct hlist_node *next;
1466	struct lec_arp_table *entry;
1467	int i;
1468
1469	cancel_delayed_work_sync(&priv->lec_arp_work);
1470
1471	/*
1472	 * Remove all entries
1473	 */
1474
1475	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1476	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1477		hlist_for_each_entry_safe(entry, next,
1478					  &priv->lec_arp_tables[i], next) {
1479			lec_arp_remove(priv, entry);
1480			lec_arp_put(entry);
1481		}
1482		INIT_HLIST_HEAD(&priv->lec_arp_tables[i]);
1483	}
1484
1485	hlist_for_each_entry_safe(entry, next,
1486				  &priv->lec_arp_empty_ones, next) {
1487		del_timer_sync(&entry->timer);
1488		lec_arp_clear_vccs(entry);
1489		hlist_del(&entry->next);
1490		lec_arp_put(entry);
1491	}
1492	INIT_HLIST_HEAD(&priv->lec_arp_empty_ones);
1493
1494	hlist_for_each_entry_safe(entry, next,
1495				  &priv->lec_no_forward, next) {
1496		del_timer_sync(&entry->timer);
1497		lec_arp_clear_vccs(entry);
1498		hlist_del(&entry->next);
1499		lec_arp_put(entry);
1500	}
1501	INIT_HLIST_HEAD(&priv->lec_no_forward);
1502
1503	hlist_for_each_entry_safe(entry, next, &priv->mcast_fwds, next) {
1504		/* No timer, LANEv2 7.1.20 and 2.3.5.3 */
1505		lec_arp_clear_vccs(entry);
1506		hlist_del(&entry->next);
1507		lec_arp_put(entry);
1508	}
1509	INIT_HLIST_HEAD(&priv->mcast_fwds);
1510	priv->mcast_vcc = NULL;
1511	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1512}
1513
1514/*
1515 * Find entry by mac_address
1516 */
1517static struct lec_arp_table *lec_arp_find(struct lec_priv *priv,
1518					  const unsigned char *mac_addr)
1519{
1520	struct hlist_head *head;
1521	struct lec_arp_table *entry;
1522
1523	pr_debug("%pM\n", mac_addr);
1524
1525	head = &priv->lec_arp_tables[HASH(mac_addr[ETH_ALEN - 1])];
1526	hlist_for_each_entry(entry, head, next) {
1527		if (ether_addr_equal(mac_addr, entry->mac_addr))
1528			return entry;
1529	}
1530	return NULL;
1531}
1532
1533static struct lec_arp_table *make_entry(struct lec_priv *priv,
1534					const unsigned char *mac_addr)
1535{
1536	struct lec_arp_table *to_return;
1537
1538	to_return = kzalloc(sizeof(struct lec_arp_table), GFP_ATOMIC);
1539	if (!to_return)
1540		return NULL;
1541	ether_addr_copy(to_return->mac_addr, mac_addr);
1542	INIT_HLIST_NODE(&to_return->next);
1543	timer_setup(&to_return->timer, lec_arp_expire_arp, 0);
1544	to_return->last_used = jiffies;
1545	to_return->priv = priv;
1546	skb_queue_head_init(&to_return->tx_wait);
1547	refcount_set(&to_return->usage, 1);
1548	return to_return;
1549}
1550
1551/* Arp sent timer expired */
1552static void lec_arp_expire_arp(struct timer_list *t)
1553{
1554	struct lec_arp_table *entry;
1555
1556	entry = from_timer(entry, t, timer);
1557
1558	pr_debug("\n");
1559	if (entry->status == ESI_ARP_PENDING) {
1560		if (entry->no_tries <= entry->priv->max_retry_count) {
1561			if (entry->is_rdesc)
1562				send_to_lecd(entry->priv, l_rdesc_arp_xmt,
1563					     entry->mac_addr, NULL, NULL);
1564			else
1565				send_to_lecd(entry->priv, l_arp_xmt,
1566					     entry->mac_addr, NULL, NULL);
1567			entry->no_tries++;
1568		}
1569		mod_timer(&entry->timer, jiffies + (1 * HZ));
1570	}
1571}
1572
1573/* Unknown/unused vcc expire, remove associated entry */
1574static void lec_arp_expire_vcc(struct timer_list *t)
1575{
1576	unsigned long flags;
1577	struct lec_arp_table *to_remove = from_timer(to_remove, t, timer);
1578	struct lec_priv *priv = to_remove->priv;
1579
1580	del_timer(&to_remove->timer);
1581
1582	pr_debug("%p %p: vpi:%d vci:%d\n",
1583		 to_remove, priv,
1584		 to_remove->vcc ? to_remove->recv_vcc->vpi : 0,
1585		 to_remove->vcc ? to_remove->recv_vcc->vci : 0);
1586
1587	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1588	hlist_del(&to_remove->next);
1589	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1590
1591	lec_arp_clear_vccs(to_remove);
1592	lec_arp_put(to_remove);
1593}
1594
1595static bool __lec_arp_check_expire(struct lec_arp_table *entry,
1596				   unsigned long now,
1597				   struct lec_priv *priv)
1598{
1599	unsigned long time_to_check;
1600
1601	if ((entry->flags) & LEC_REMOTE_FLAG && priv->topology_change)
1602		time_to_check = priv->forward_delay_time;
1603	else
1604		time_to_check = priv->aging_time;
1605
1606	pr_debug("About to expire: %lx - %lx > %lx\n",
1607		 now, entry->last_used, time_to_check);
1608	if (time_after(now, entry->last_used + time_to_check) &&
1609	    !(entry->flags & LEC_PERMANENT_FLAG) &&
1610	    !(entry->mac_addr[0] & 0x01)) {	/* LANE2: 7.1.20 */
1611		/* Remove entry */
1612		pr_debug("Entry timed out\n");
1613		lec_arp_remove(priv, entry);
1614		lec_arp_put(entry);
1615	} else {
1616		/* Something else */
1617		if ((entry->status == ESI_VC_PENDING ||
1618		     entry->status == ESI_ARP_PENDING) &&
1619		    time_after_eq(now, entry->timestamp +
1620				       priv->max_unknown_frame_time)) {
1621			entry->timestamp = jiffies;
1622			entry->packets_flooded = 0;
1623			if (entry->status == ESI_VC_PENDING)
1624				send_to_lecd(priv, l_svc_setup,
1625					     entry->mac_addr,
1626					     entry->atm_addr,
1627					     NULL);
1628		}
1629		if (entry->status == ESI_FLUSH_PENDING &&
1630		    time_after_eq(now, entry->timestamp +
1631				       priv->path_switching_delay)) {
1632			lec_arp_hold(entry);
1633			return true;
1634		}
1635	}
1636
1637	return false;
1638}
1639/*
1640 * Expire entries.
1641 * 1. Re-set timer
1642 * 2. For each entry, delete entries that have aged past the age limit.
1643 * 3. For each entry, depending on the status of the entry, perform
1644 *    the following maintenance.
1645 *    a. If status is ESI_VC_PENDING or ESI_ARP_PENDING then if the
1646 *       tick_count is above the max_unknown_frame_time, clear
1647 *       the tick_count to zero and clear the packets_flooded counter
1648 *       to zero. This supports the packet rate limit per address
1649 *       while flooding unknowns.
1650 *    b. If the status is ESI_FLUSH_PENDING and the tick_count is greater
1651 *       than or equal to the path_switching_delay, change the status
1652 *       to ESI_FORWARD_DIRECT. This causes the flush period to end
1653 *       regardless of the progress of the flush protocol.
1654 */
1655static void lec_arp_check_expire(struct work_struct *work)
1656{
1657	unsigned long flags;
1658	struct lec_priv *priv =
1659		container_of(work, struct lec_priv, lec_arp_work.work);
1660	struct hlist_node *next;
1661	struct lec_arp_table *entry;
1662	unsigned long now;
1663	int i;
1664
1665	pr_debug("%p\n", priv);
1666	now = jiffies;
1667restart:
1668	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1669	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1670		hlist_for_each_entry_safe(entry, next,
1671					  &priv->lec_arp_tables[i], next) {
1672			if (__lec_arp_check_expire(entry, now, priv)) {
1673				struct sk_buff *skb;
1674				struct atm_vcc *vcc = entry->vcc;
1675
1676				spin_unlock_irqrestore(&priv->lec_arp_lock,
1677						       flags);
1678				while ((skb = skb_dequeue(&entry->tx_wait)))
1679					lec_send(vcc, skb);
1680				entry->last_used = jiffies;
1681				entry->status = ESI_FORWARD_DIRECT;
1682				lec_arp_put(entry);
1683
1684				goto restart;
1685			}
1686		}
1687	}
1688	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1689
1690	schedule_delayed_work(&priv->lec_arp_work, LEC_ARP_REFRESH_INTERVAL);
1691}
1692
1693/*
1694 * Try to find vcc where mac_address is attached.
1695 *
1696 */
1697static struct atm_vcc *lec_arp_resolve(struct lec_priv *priv,
1698				       const unsigned char *mac_to_find,
1699				       int is_rdesc,
1700				       struct lec_arp_table **ret_entry)
1701{
1702	unsigned long flags;
1703	struct lec_arp_table *entry;
1704	struct atm_vcc *found;
1705
1706	if (mac_to_find[0] & 0x01) {
1707		switch (priv->lane_version) {
1708		case 1:
1709			return priv->mcast_vcc;
1710		case 2:	/* LANE2 wants arp for multicast addresses */
1711			if (ether_addr_equal(mac_to_find, bus_mac))
1712				return priv->mcast_vcc;
1713			break;
1714		default:
1715			break;
1716		}
1717	}
1718
1719	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1720	entry = lec_arp_find(priv, mac_to_find);
1721
1722	if (entry) {
1723		if (entry->status == ESI_FORWARD_DIRECT) {
1724			/* Connection Ok */
1725			entry->last_used = jiffies;
1726			lec_arp_hold(entry);
1727			*ret_entry = entry;
1728			found = entry->vcc;
1729			goto out;
1730		}
1731		/*
1732		 * If the LE_ARP cache entry is still pending, reset count to 0
1733		 * so another LE_ARP request can be made for this frame.
1734		 */
1735		if (entry->status == ESI_ARP_PENDING)
1736			entry->no_tries = 0;
1737		/*
1738		 * Data direct VC not yet set up, check to see if the unknown
1739		 * frame count is greater than the limit. If the limit has
1740		 * not been reached, allow the caller to send packet to
1741		 * BUS.
1742		 */
1743		if (entry->status != ESI_FLUSH_PENDING &&
1744		    entry->packets_flooded <
1745		    priv->maximum_unknown_frame_count) {
1746			entry->packets_flooded++;
1747			pr_debug("Flooding..\n");
1748			found = priv->mcast_vcc;
1749			goto out;
1750		}
1751		/*
1752		 * We got here because entry->status == ESI_FLUSH_PENDING
1753		 * or BUS flood limit was reached for an entry which is
1754		 * in ESI_ARP_PENDING or ESI_VC_PENDING state.
1755		 */
1756		lec_arp_hold(entry);
1757		*ret_entry = entry;
1758		pr_debug("entry->status %d entry->vcc %p\n", entry->status,
1759			 entry->vcc);
1760		found = NULL;
1761	} else {
1762		/* No matching entry was found */
1763		entry = make_entry(priv, mac_to_find);
1764		pr_debug("Making entry\n");
1765		if (!entry) {
1766			found = priv->mcast_vcc;
1767			goto out;
1768		}
1769		lec_arp_add(priv, entry);
1770		/* We want arp-request(s) to be sent */
1771		entry->packets_flooded = 1;
1772		entry->status = ESI_ARP_PENDING;
1773		entry->no_tries = 1;
1774		entry->last_used = entry->timestamp = jiffies;
1775		entry->is_rdesc = is_rdesc;
1776		if (entry->is_rdesc)
1777			send_to_lecd(priv, l_rdesc_arp_xmt, mac_to_find, NULL,
1778				     NULL);
1779		else
1780			send_to_lecd(priv, l_arp_xmt, mac_to_find, NULL, NULL);
1781		entry->timer.expires = jiffies + (1 * HZ);
1782		entry->timer.function = lec_arp_expire_arp;
1783		add_timer(&entry->timer);
1784		found = priv->mcast_vcc;
1785	}
1786
1787out:
1788	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1789	return found;
1790}
1791
1792static int
1793lec_addr_delete(struct lec_priv *priv, const unsigned char *atm_addr,
1794		unsigned long permanent)
1795{
1796	unsigned long flags;
1797	struct hlist_node *next;
1798	struct lec_arp_table *entry;
1799	int i;
1800
1801	pr_debug("\n");
1802	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1803	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1804		hlist_for_each_entry_safe(entry, next,
1805					  &priv->lec_arp_tables[i], next) {
1806			if (!memcmp(atm_addr, entry->atm_addr, ATM_ESA_LEN) &&
1807			    (permanent ||
1808			     !(entry->flags & LEC_PERMANENT_FLAG))) {
1809				lec_arp_remove(priv, entry);
1810				lec_arp_put(entry);
1811			}
1812			spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1813			return 0;
1814		}
1815	}
1816	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1817	return -1;
1818}
1819
1820/*
1821 * Notifies:  Response to arp_request (atm_addr != NULL)
1822 */
1823static void
1824lec_arp_update(struct lec_priv *priv, const unsigned char *mac_addr,
1825	       const unsigned char *atm_addr, unsigned long remoteflag,
1826	       unsigned int targetless_le_arp)
1827{
1828	unsigned long flags;
1829	struct hlist_node *next;
1830	struct lec_arp_table *entry, *tmp;
1831	int i;
1832
1833	pr_debug("%smac:%pM\n",
1834		 (targetless_le_arp) ? "targetless " : "", mac_addr);
1835
1836	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1837	entry = lec_arp_find(priv, mac_addr);
1838	if (entry == NULL && targetless_le_arp)
1839		goto out;	/*
1840				 * LANE2: ignore targetless LE_ARPs for which
1841				 * we have no entry in the cache. 7.1.30
1842				 */
1843	if (!hlist_empty(&priv->lec_arp_empty_ones)) {
1844		hlist_for_each_entry_safe(entry, next,
1845					  &priv->lec_arp_empty_ones, next) {
1846			if (memcmp(entry->atm_addr, atm_addr, ATM_ESA_LEN) == 0) {
1847				hlist_del(&entry->next);
1848				del_timer(&entry->timer);
1849				tmp = lec_arp_find(priv, mac_addr);
1850				if (tmp) {
1851					del_timer(&tmp->timer);
1852					tmp->status = ESI_FORWARD_DIRECT;
1853					memcpy(tmp->atm_addr, atm_addr, ATM_ESA_LEN);
1854					tmp->vcc = entry->vcc;
1855					tmp->old_push = entry->old_push;
1856					tmp->last_used = jiffies;
1857					del_timer(&entry->timer);
1858					lec_arp_put(entry);
1859					entry = tmp;
1860				} else {
1861					entry->status = ESI_FORWARD_DIRECT;
1862					ether_addr_copy(entry->mac_addr,
1863							mac_addr);
1864					entry->last_used = jiffies;
1865					lec_arp_add(priv, entry);
1866				}
1867				if (remoteflag)
1868					entry->flags |= LEC_REMOTE_FLAG;
1869				else
1870					entry->flags &= ~LEC_REMOTE_FLAG;
1871				pr_debug("After update\n");
1872				dump_arp_table(priv);
1873				goto out;
1874			}
1875		}
1876	}
1877
1878	entry = lec_arp_find(priv, mac_addr);
1879	if (!entry) {
1880		entry = make_entry(priv, mac_addr);
1881		if (!entry)
1882			goto out;
1883		entry->status = ESI_UNKNOWN;
1884		lec_arp_add(priv, entry);
1885		/* Temporary, changes before end of function */
1886	}
1887	memcpy(entry->atm_addr, atm_addr, ATM_ESA_LEN);
1888	del_timer(&entry->timer);
1889	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1890		hlist_for_each_entry(tmp,
1891				     &priv->lec_arp_tables[i], next) {
1892			if (entry != tmp &&
1893			    !memcmp(tmp->atm_addr, atm_addr, ATM_ESA_LEN)) {
1894				/* Vcc to this host exists */
1895				if (tmp->status > ESI_VC_PENDING) {
1896					/*
1897					 * ESI_FLUSH_PENDING,
1898					 * ESI_FORWARD_DIRECT
1899					 */
1900					entry->vcc = tmp->vcc;
1901					entry->old_push = tmp->old_push;
1902				}
1903				entry->status = tmp->status;
1904				break;
1905			}
1906		}
1907	}
1908	if (remoteflag)
1909		entry->flags |= LEC_REMOTE_FLAG;
1910	else
1911		entry->flags &= ~LEC_REMOTE_FLAG;
1912	if (entry->status == ESI_ARP_PENDING || entry->status == ESI_UNKNOWN) {
1913		entry->status = ESI_VC_PENDING;
1914		send_to_lecd(priv, l_svc_setup, entry->mac_addr, atm_addr, NULL);
1915	}
1916	pr_debug("After update2\n");
1917	dump_arp_table(priv);
1918out:
1919	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
1920}
1921
1922/*
1923 * Notifies: Vcc setup ready
1924 */
1925static void
1926lec_vcc_added(struct lec_priv *priv, const struct atmlec_ioc *ioc_data,
1927	      struct atm_vcc *vcc,
1928	      void (*old_push) (struct atm_vcc *vcc, struct sk_buff *skb))
1929{
1930	unsigned long flags;
1931	struct lec_arp_table *entry;
1932	int i, found_entry = 0;
1933
1934	spin_lock_irqsave(&priv->lec_arp_lock, flags);
1935	/* Vcc for Multicast Forward. No timer, LANEv2 7.1.20 and 2.3.5.3 */
1936	if (ioc_data->receive == 2) {
1937		pr_debug("LEC_ARP: Attaching mcast forward\n");
1938#if 0
1939		entry = lec_arp_find(priv, bus_mac);
1940		if (!entry) {
1941			pr_info("LEC_ARP: Multicast entry not found!\n");
1942			goto out;
1943		}
1944		memcpy(entry->atm_addr, ioc_data->atm_addr, ATM_ESA_LEN);
1945		entry->recv_vcc = vcc;
1946		entry->old_recv_push = old_push;
1947#endif
1948		entry = make_entry(priv, bus_mac);
1949		if (entry == NULL)
1950			goto out;
1951		del_timer(&entry->timer);
1952		memcpy(entry->atm_addr, ioc_data->atm_addr, ATM_ESA_LEN);
1953		entry->recv_vcc = vcc;
1954		entry->old_recv_push = old_push;
1955		hlist_add_head(&entry->next, &priv->mcast_fwds);
1956		goto out;
1957	} else if (ioc_data->receive == 1) {
1958		/*
1959		 * Vcc which we don't want to make default vcc,
1960		 * attach it anyway.
1961		 */
1962		pr_debug("LEC_ARP:Attaching data direct, not default: %*phN\n",
1963			 ATM_ESA_LEN, ioc_data->atm_addr);
1964		entry = make_entry(priv, bus_mac);
1965		if (entry == NULL)
1966			goto out;
1967		memcpy(entry->atm_addr, ioc_data->atm_addr, ATM_ESA_LEN);
1968		eth_zero_addr(entry->mac_addr);
1969		entry->recv_vcc = vcc;
1970		entry->old_recv_push = old_push;
1971		entry->status = ESI_UNKNOWN;
1972		entry->timer.expires = jiffies + priv->vcc_timeout_period;
1973		entry->timer.function = lec_arp_expire_vcc;
1974		hlist_add_head(&entry->next, &priv->lec_no_forward);
1975		add_timer(&entry->timer);
1976		dump_arp_table(priv);
1977		goto out;
1978	}
1979	pr_debug("LEC_ARP:Attaching data direct, default: %*phN\n",
1980		 ATM_ESA_LEN, ioc_data->atm_addr);
1981	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
1982		hlist_for_each_entry(entry,
1983				     &priv->lec_arp_tables[i], next) {
1984			if (memcmp
1985			    (ioc_data->atm_addr, entry->atm_addr,
1986			     ATM_ESA_LEN) == 0) {
1987				pr_debug("LEC_ARP: Attaching data direct\n");
1988				pr_debug("Currently -> Vcc: %d, Rvcc:%d\n",
1989					 entry->vcc ? entry->vcc->vci : 0,
1990					 entry->recv_vcc ? entry->recv_vcc->
1991					 vci : 0);
1992				found_entry = 1;
1993				del_timer(&entry->timer);
1994				entry->vcc = vcc;
1995				entry->old_push = old_push;
1996				if (entry->status == ESI_VC_PENDING) {
1997					if (priv->maximum_unknown_frame_count
1998					    == 0)
1999						entry->status =
2000						    ESI_FORWARD_DIRECT;
2001					else {
2002						entry->timestamp = jiffies;
2003						entry->status =
2004						    ESI_FLUSH_PENDING;
2005#if 0
2006						send_to_lecd(priv, l_flush_xmt,
2007							     NULL,
2008							     entry->atm_addr,
2009							     NULL);
2010#endif
2011					}
2012				} else {
2013					/*
2014					 * They were forming a connection
2015					 * to us, and we to them. Our
2016					 * ATM address is numerically lower
2017					 * than theirs, so we make connection
2018					 * we formed into default VCC (8.1.11).
2019					 * Connection they made gets torn
2020					 * down. This might confuse some
2021					 * clients. Can be changed if
2022					 * someone reports trouble...
2023					 */
2024					;
2025				}
2026			}
2027		}
2028	}
2029	if (found_entry) {
2030		pr_debug("After vcc was added\n");
2031		dump_arp_table(priv);
2032		goto out;
2033	}
2034	/*
2035	 * Not found, snatch address from first data packet that arrives
2036	 * from this vcc
2037	 */
2038	entry = make_entry(priv, bus_mac);
2039	if (!entry)
2040		goto out;
2041	entry->vcc = vcc;
2042	entry->old_push = old_push;
2043	memcpy(entry->atm_addr, ioc_data->atm_addr, ATM_ESA_LEN);
2044	eth_zero_addr(entry->mac_addr);
2045	entry->status = ESI_UNKNOWN;
2046	hlist_add_head(&entry->next, &priv->lec_arp_empty_ones);
2047	entry->timer.expires = jiffies + priv->vcc_timeout_period;
2048	entry->timer.function = lec_arp_expire_vcc;
2049	add_timer(&entry->timer);
2050	pr_debug("After vcc was added\n");
2051	dump_arp_table(priv);
2052out:
2053	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
2054}
2055
2056static void lec_flush_complete(struct lec_priv *priv, unsigned long tran_id)
2057{
2058	unsigned long flags;
2059	struct lec_arp_table *entry;
2060	int i;
2061
2062	pr_debug("%lx\n", tran_id);
2063restart:
2064	spin_lock_irqsave(&priv->lec_arp_lock, flags);
2065	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
2066		hlist_for_each_entry(entry,
2067				     &priv->lec_arp_tables[i], next) {
2068			if (entry->flush_tran_id == tran_id &&
2069			    entry->status == ESI_FLUSH_PENDING) {
2070				struct sk_buff *skb;
2071				struct atm_vcc *vcc = entry->vcc;
2072
2073				lec_arp_hold(entry);
2074				spin_unlock_irqrestore(&priv->lec_arp_lock,
2075						       flags);
2076				while ((skb = skb_dequeue(&entry->tx_wait)))
2077					lec_send(vcc, skb);
2078				entry->last_used = jiffies;
2079				entry->status = ESI_FORWARD_DIRECT;
2080				lec_arp_put(entry);
2081				pr_debug("LEC_ARP: Flushed\n");
2082				goto restart;
2083			}
2084		}
2085	}
2086	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
2087	dump_arp_table(priv);
2088}
2089
2090static void
2091lec_set_flush_tran_id(struct lec_priv *priv,
2092		      const unsigned char *atm_addr, unsigned long tran_id)
2093{
2094	unsigned long flags;
2095	struct lec_arp_table *entry;
2096	int i;
2097
2098	spin_lock_irqsave(&priv->lec_arp_lock, flags);
2099	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++)
2100		hlist_for_each_entry(entry,
2101				     &priv->lec_arp_tables[i], next) {
2102			if (!memcmp(atm_addr, entry->atm_addr, ATM_ESA_LEN)) {
2103				entry->flush_tran_id = tran_id;
2104				pr_debug("Set flush transaction id to %lx for %p\n",
2105					 tran_id, entry);
2106			}
2107		}
2108	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
2109}
2110
2111static int lec_mcast_make(struct lec_priv *priv, struct atm_vcc *vcc)
2112{
2113	unsigned long flags;
2114	unsigned char mac_addr[] = {
2115		0xff, 0xff, 0xff, 0xff, 0xff, 0xff
2116	};
2117	struct lec_arp_table *to_add;
2118	struct lec_vcc_priv *vpriv;
2119	int err = 0;
2120
2121	vpriv = kmalloc(sizeof(struct lec_vcc_priv), GFP_KERNEL);
2122	if (!vpriv)
2123		return -ENOMEM;
2124	vpriv->xoff = 0;
2125	vpriv->old_pop = vcc->pop;
2126	vcc->user_back = vpriv;
2127	vcc->pop = lec_pop;
2128	spin_lock_irqsave(&priv->lec_arp_lock, flags);
2129	to_add = make_entry(priv, mac_addr);
2130	if (!to_add) {
2131		vcc->pop = vpriv->old_pop;
2132		kfree(vpriv);
2133		err = -ENOMEM;
2134		goto out;
2135	}
2136	memcpy(to_add->atm_addr, vcc->remote.sas_addr.prv, ATM_ESA_LEN);
2137	to_add->status = ESI_FORWARD_DIRECT;
2138	to_add->flags |= LEC_PERMANENT_FLAG;
2139	to_add->vcc = vcc;
2140	to_add->old_push = vcc->push;
2141	vcc->push = lec_push;
2142	priv->mcast_vcc = vcc;
2143	lec_arp_add(priv, to_add);
2144out:
2145	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
2146	return err;
2147}
2148
2149static void lec_vcc_close(struct lec_priv *priv, struct atm_vcc *vcc)
2150{
2151	unsigned long flags;
2152	struct hlist_node *next;
2153	struct lec_arp_table *entry;
2154	int i;
2155
2156	pr_debug("LEC_ARP: lec_vcc_close vpi:%d vci:%d\n", vcc->vpi, vcc->vci);
2157	dump_arp_table(priv);
2158
2159	spin_lock_irqsave(&priv->lec_arp_lock, flags);
2160
2161	for (i = 0; i < LEC_ARP_TABLE_SIZE; i++) {
2162		hlist_for_each_entry_safe(entry, next,
2163					  &priv->lec_arp_tables[i], next) {
2164			if (vcc == entry->vcc) {
2165				lec_arp_remove(priv, entry);
2166				lec_arp_put(entry);
2167				if (priv->mcast_vcc == vcc)
2168					priv->mcast_vcc = NULL;
2169			}
2170		}
2171	}
2172
2173	hlist_for_each_entry_safe(entry, next,
2174				  &priv->lec_arp_empty_ones, next) {
2175		if (entry->vcc == vcc) {
2176			lec_arp_clear_vccs(entry);
2177			del_timer(&entry->timer);
2178			hlist_del(&entry->next);
2179			lec_arp_put(entry);
2180		}
2181	}
2182
2183	hlist_for_each_entry_safe(entry, next,
2184				  &priv->lec_no_forward, next) {
2185		if (entry->recv_vcc == vcc) {
2186			lec_arp_clear_vccs(entry);
2187			del_timer(&entry->timer);
2188			hlist_del(&entry->next);
2189			lec_arp_put(entry);
2190		}
2191	}
2192
2193	hlist_for_each_entry_safe(entry, next, &priv->mcast_fwds, next) {
2194		if (entry->recv_vcc == vcc) {
2195			lec_arp_clear_vccs(entry);
2196			/* No timer, LANEv2 7.1.20 and 2.3.5.3 */
2197			hlist_del(&entry->next);
2198			lec_arp_put(entry);
2199		}
2200	}
2201
2202	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
2203	dump_arp_table(priv);
2204}
2205
2206static void
2207lec_arp_check_empties(struct lec_priv *priv,
2208		      struct atm_vcc *vcc, struct sk_buff *skb)
2209{
2210	unsigned long flags;
2211	struct hlist_node *next;
2212	struct lec_arp_table *entry, *tmp;
2213	struct lecdatahdr_8023 *hdr = (struct lecdatahdr_8023 *)skb->data;
2214	unsigned char *src = hdr->h_source;
2215
2216	spin_lock_irqsave(&priv->lec_arp_lock, flags);
2217	hlist_for_each_entry_safe(entry, next,
2218				  &priv->lec_arp_empty_ones, next) {
2219		if (vcc == entry->vcc) {
2220			del_timer(&entry->timer);
2221			ether_addr_copy(entry->mac_addr, src);
2222			entry->status = ESI_FORWARD_DIRECT;
2223			entry->last_used = jiffies;
2224			/* We might have got an entry */
2225			tmp = lec_arp_find(priv, src);
2226			if (tmp) {
2227				lec_arp_remove(priv, tmp);
2228				lec_arp_put(tmp);
2229			}
2230			hlist_del(&entry->next);
2231			lec_arp_add(priv, entry);
2232			goto out;
2233		}
2234	}
2235	pr_debug("LEC_ARP: Arp_check_empties: entry not found!\n");
2236out:
2237	spin_unlock_irqrestore(&priv->lec_arp_lock, flags);
2238}
2239
2240MODULE_LICENSE("GPL");