Linux Audio

Check our new training course

Loading...
v6.8
   1/*
   2 * cdc_ncm.c
   3 *
   4 * Copyright (C) ST-Ericsson 2010-2012
   5 * Contact: Alexey Orishko <alexey.orishko@stericsson.com>
   6 * Original author: Hans Petter Selasky <hans.petter.selasky@stericsson.com>
   7 *
   8 * USB Host Driver for Network Control Model (NCM)
   9 * http://www.usb.org/developers/docs/devclass_docs/NCM10_012011.zip
  10 *
  11 * The NCM encoding, decoding and initialization logic
  12 * derives from FreeBSD 8.x. if_cdce.c and if_cdcereg.h
  13 *
  14 * This software is available to you under a choice of one of two
  15 * licenses. You may choose this file to be licensed under the terms
  16 * of the GNU General Public License (GPL) Version 2 or the 2-clause
  17 * BSD license listed below:
  18 *
  19 * Redistribution and use in source and binary forms, with or without
  20 * modification, are permitted provided that the following conditions
  21 * are met:
  22 * 1. Redistributions of source code must retain the above copyright
  23 *    notice, this list of conditions and the following disclaimer.
  24 * 2. Redistributions in binary form must reproduce the above copyright
  25 *    notice, this list of conditions and the following disclaimer in the
  26 *    documentation and/or other materials provided with the distribution.
  27 *
  28 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  29 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  30 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  31 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  32 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  33 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  34 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  35 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  36 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  37 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  38 * SUCH DAMAGE.
  39 */
  40
  41#include <linux/module.h>
  42#include <linux/netdevice.h>
  43#include <linux/ctype.h>
  44#include <linux/etherdevice.h>
  45#include <linux/ethtool.h>
  46#include <linux/kstrtox.h>
  47#include <linux/workqueue.h>
  48#include <linux/mii.h>
  49#include <linux/crc32.h>
  50#include <linux/usb.h>
  51#include <linux/hrtimer.h>
  52#include <linux/atomic.h>
  53#include <linux/usb/usbnet.h>
  54#include <linux/usb/cdc.h>
  55#include <linux/usb/cdc_ncm.h>
  56
  57#if IS_ENABLED(CONFIG_USB_NET_CDC_MBIM)
  58static bool prefer_mbim = true;
  59#else
  60static bool prefer_mbim;
  61#endif
  62module_param(prefer_mbim, bool, 0644);
  63MODULE_PARM_DESC(prefer_mbim, "Prefer MBIM setting on dual NCM/MBIM functions");
  64
  65static void cdc_ncm_txpath_bh(struct tasklet_struct *t);
  66static void cdc_ncm_tx_timeout_start(struct cdc_ncm_ctx *ctx);
  67static enum hrtimer_restart cdc_ncm_tx_timer_cb(struct hrtimer *hr_timer);
  68static struct usb_driver cdc_ncm_driver;
  69
  70struct cdc_ncm_stats {
  71	char stat_string[ETH_GSTRING_LEN];
  72	int sizeof_stat;
  73	int stat_offset;
  74};
  75
  76#define CDC_NCM_STAT(str, m) { \
  77		.stat_string = str, \
  78		.sizeof_stat = sizeof(((struct cdc_ncm_ctx *)0)->m), \
  79		.stat_offset = offsetof(struct cdc_ncm_ctx, m) }
  80#define CDC_NCM_SIMPLE_STAT(m)	CDC_NCM_STAT(__stringify(m), m)
  81
  82static const struct cdc_ncm_stats cdc_ncm_gstrings_stats[] = {
  83	CDC_NCM_SIMPLE_STAT(tx_reason_ntb_full),
  84	CDC_NCM_SIMPLE_STAT(tx_reason_ndp_full),
  85	CDC_NCM_SIMPLE_STAT(tx_reason_timeout),
  86	CDC_NCM_SIMPLE_STAT(tx_reason_max_datagram),
  87	CDC_NCM_SIMPLE_STAT(tx_overhead),
  88	CDC_NCM_SIMPLE_STAT(tx_ntbs),
  89	CDC_NCM_SIMPLE_STAT(rx_overhead),
  90	CDC_NCM_SIMPLE_STAT(rx_ntbs),
  91};
  92
  93#define CDC_NCM_LOW_MEM_MAX_CNT 10
  94
  95static int cdc_ncm_get_sset_count(struct net_device __always_unused *netdev, int sset)
  96{
  97	switch (sset) {
  98	case ETH_SS_STATS:
  99		return ARRAY_SIZE(cdc_ncm_gstrings_stats);
 100	default:
 101		return -EOPNOTSUPP;
 102	}
 103}
 104
 105static void cdc_ncm_get_ethtool_stats(struct net_device *netdev,
 106				    struct ethtool_stats __always_unused *stats,
 107				    u64 *data)
 108{
 109	struct usbnet *dev = netdev_priv(netdev);
 110	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 111	int i;
 112	char *p = NULL;
 113
 114	for (i = 0; i < ARRAY_SIZE(cdc_ncm_gstrings_stats); i++) {
 115		p = (char *)ctx + cdc_ncm_gstrings_stats[i].stat_offset;
 116		data[i] = (cdc_ncm_gstrings_stats[i].sizeof_stat == sizeof(u64)) ? *(u64 *)p : *(u32 *)p;
 117	}
 118}
 119
 120static void cdc_ncm_get_strings(struct net_device __always_unused *netdev, u32 stringset, u8 *data)
 121{
 122	u8 *p = data;
 123	int i;
 124
 125	switch (stringset) {
 126	case ETH_SS_STATS:
 127		for (i = 0; i < ARRAY_SIZE(cdc_ncm_gstrings_stats); i++) {
 128			memcpy(p, cdc_ncm_gstrings_stats[i].stat_string, ETH_GSTRING_LEN);
 129			p += ETH_GSTRING_LEN;
 130		}
 131	}
 132}
 133
 134static void cdc_ncm_update_rxtx_max(struct usbnet *dev, u32 new_rx, u32 new_tx);
 135
 136static const struct ethtool_ops cdc_ncm_ethtool_ops = {
 137	.get_link		= usbnet_get_link,
 138	.nway_reset		= usbnet_nway_reset,
 139	.get_drvinfo		= usbnet_get_drvinfo,
 140	.get_msglevel		= usbnet_get_msglevel,
 141	.set_msglevel		= usbnet_set_msglevel,
 142	.get_ts_info		= ethtool_op_get_ts_info,
 143	.get_sset_count		= cdc_ncm_get_sset_count,
 144	.get_strings		= cdc_ncm_get_strings,
 145	.get_ethtool_stats	= cdc_ncm_get_ethtool_stats,
 146	.get_link_ksettings	= usbnet_get_link_ksettings_internal,
 147	.set_link_ksettings	= NULL,
 148};
 149
 150static u32 cdc_ncm_check_rx_max(struct usbnet *dev, u32 new_rx)
 151{
 152	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 153	u32 val, max, min;
 154
 155	/* clamp new_rx to sane values */
 156	min = USB_CDC_NCM_NTB_MIN_IN_SIZE;
 157	max = min_t(u32, CDC_NCM_NTB_MAX_SIZE_RX, le32_to_cpu(ctx->ncm_parm.dwNtbInMaxSize));
 158
 159	/* dwNtbInMaxSize spec violation? Use MIN size for both limits */
 160	if (max < min) {
 161		dev_warn(&dev->intf->dev, "dwNtbInMaxSize=%u is too small. Using %u\n",
 162			 le32_to_cpu(ctx->ncm_parm.dwNtbInMaxSize), min);
 163		max = min;
 164	}
 165
 166	val = clamp_t(u32, new_rx, min, max);
 167	if (val != new_rx)
 168		dev_dbg(&dev->intf->dev, "rx_max must be in the [%u, %u] range\n", min, max);
 169
 170	return val;
 171}
 172
 173static u32 cdc_ncm_check_tx_max(struct usbnet *dev, u32 new_tx)
 174{
 175	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 176	u32 val, max, min;
 177
 178	/* clamp new_tx to sane values */
 179	if (ctx->is_ndp16)
 180		min = ctx->max_datagram_size + ctx->max_ndp_size + sizeof(struct usb_cdc_ncm_nth16);
 181	else
 182		min = ctx->max_datagram_size + ctx->max_ndp_size + sizeof(struct usb_cdc_ncm_nth32);
 183
 184	if (le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize) == 0)
 185		max = CDC_NCM_NTB_MAX_SIZE_TX; /* dwNtbOutMaxSize not set */
 186	else
 187		max = clamp_t(u32, le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize),
 188			      USB_CDC_NCM_NTB_MIN_OUT_SIZE,
 189			      CDC_NCM_NTB_MAX_SIZE_TX);
 190
 191	/* some devices set dwNtbOutMaxSize too low for the above default */
 192	min = min(min, max);
 193
 194	val = clamp_t(u32, new_tx, min, max);
 195	if (val != new_tx)
 196		dev_dbg(&dev->intf->dev, "tx_max must be in the [%u, %u] range\n", min, max);
 197
 198	return val;
 199}
 200
 201static ssize_t min_tx_pkt_show(struct device *d,
 202			       struct device_attribute *attr, char *buf)
 203{
 204	struct usbnet *dev = netdev_priv(to_net_dev(d));
 205	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 206
 207	return sprintf(buf, "%u\n", ctx->min_tx_pkt);
 208}
 209
 210static ssize_t rx_max_show(struct device *d,
 211			   struct device_attribute *attr, char *buf)
 212{
 213	struct usbnet *dev = netdev_priv(to_net_dev(d));
 214	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 215
 216	return sprintf(buf, "%u\n", ctx->rx_max);
 217}
 218
 219static ssize_t tx_max_show(struct device *d,
 220			   struct device_attribute *attr, char *buf)
 221{
 222	struct usbnet *dev = netdev_priv(to_net_dev(d));
 223	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 224
 225	return sprintf(buf, "%u\n", ctx->tx_max);
 226}
 227
 228static ssize_t tx_timer_usecs_show(struct device *d,
 229				   struct device_attribute *attr, char *buf)
 230{
 231	struct usbnet *dev = netdev_priv(to_net_dev(d));
 232	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 233
 234	return sprintf(buf, "%u\n", ctx->timer_interval / (u32)NSEC_PER_USEC);
 235}
 236
 237static ssize_t min_tx_pkt_store(struct device *d,
 238				struct device_attribute *attr,
 239				const char *buf, size_t len)
 240{
 241	struct usbnet *dev = netdev_priv(to_net_dev(d));
 242	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 243	unsigned long val;
 244
 245	/* no need to restrict values - anything from 0 to infinity is OK */
 246	if (kstrtoul(buf, 0, &val))
 247		return -EINVAL;
 248
 249	ctx->min_tx_pkt = val;
 250	return len;
 251}
 252
 253static ssize_t rx_max_store(struct device *d,
 254			    struct device_attribute *attr,
 255			    const char *buf, size_t len)
 256{
 257	struct usbnet *dev = netdev_priv(to_net_dev(d));
 258	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 259	unsigned long val;
 260
 261	if (kstrtoul(buf, 0, &val) || cdc_ncm_check_rx_max(dev, val) != val)
 262		return -EINVAL;
 263
 264	cdc_ncm_update_rxtx_max(dev, val, ctx->tx_max);
 265	return len;
 266}
 267
 268static ssize_t tx_max_store(struct device *d,
 269			    struct device_attribute *attr,
 270			    const char *buf, size_t len)
 271{
 272	struct usbnet *dev = netdev_priv(to_net_dev(d));
 273	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 274	unsigned long val;
 275
 276	if (kstrtoul(buf, 0, &val) || cdc_ncm_check_tx_max(dev, val) != val)
 277		return -EINVAL;
 278
 279	cdc_ncm_update_rxtx_max(dev, ctx->rx_max, val);
 280	return len;
 281}
 282
 283static ssize_t tx_timer_usecs_store(struct device *d,
 284				    struct device_attribute *attr,
 285				    const char *buf, size_t len)
 286{
 287	struct usbnet *dev = netdev_priv(to_net_dev(d));
 288	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 289	ssize_t ret;
 290	unsigned long val;
 291
 292	ret = kstrtoul(buf, 0, &val);
 293	if (ret)
 294		return ret;
 295	if (val && (val < CDC_NCM_TIMER_INTERVAL_MIN || val > CDC_NCM_TIMER_INTERVAL_MAX))
 296		return -EINVAL;
 297
 298	spin_lock_bh(&ctx->mtx);
 299	ctx->timer_interval = val * NSEC_PER_USEC;
 300	if (!ctx->timer_interval)
 301		ctx->tx_timer_pending = 0;
 302	spin_unlock_bh(&ctx->mtx);
 303	return len;
 304}
 305
 306static DEVICE_ATTR_RW(min_tx_pkt);
 307static DEVICE_ATTR_RW(rx_max);
 308static DEVICE_ATTR_RW(tx_max);
 309static DEVICE_ATTR_RW(tx_timer_usecs);
 310
 311static ssize_t ndp_to_end_show(struct device *d, struct device_attribute *attr, char *buf)
 312{
 313	struct usbnet *dev = netdev_priv(to_net_dev(d));
 314	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 315
 316	return sprintf(buf, "%c\n", ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END ? 'Y' : 'N');
 317}
 318
 319static ssize_t ndp_to_end_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
 320{
 321	struct usbnet *dev = netdev_priv(to_net_dev(d));
 322	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 323	bool enable;
 324
 325	if (kstrtobool(buf, &enable))
 326		return -EINVAL;
 327
 328	/* no change? */
 329	if (enable == (ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END))
 330		return len;
 331
 332	if (enable) {
 333		if (ctx->is_ndp16 && !ctx->delayed_ndp16) {
 334			ctx->delayed_ndp16 = kzalloc(ctx->max_ndp_size, GFP_KERNEL);
 335			if (!ctx->delayed_ndp16)
 336				return -ENOMEM;
 337		}
 338		if (!ctx->is_ndp16 && !ctx->delayed_ndp32) {
 339			ctx->delayed_ndp32 = kzalloc(ctx->max_ndp_size, GFP_KERNEL);
 340			if (!ctx->delayed_ndp32)
 341				return -ENOMEM;
 342		}
 343	}
 344
 345	/* flush pending data before changing flag */
 346	netif_tx_lock_bh(dev->net);
 347	usbnet_start_xmit(NULL, dev->net);
 348	spin_lock_bh(&ctx->mtx);
 349	if (enable)
 350		ctx->drvflags |= CDC_NCM_FLAG_NDP_TO_END;
 351	else
 352		ctx->drvflags &= ~CDC_NCM_FLAG_NDP_TO_END;
 353	spin_unlock_bh(&ctx->mtx);
 354	netif_tx_unlock_bh(dev->net);
 355
 356	return len;
 357}
 358static DEVICE_ATTR_RW(ndp_to_end);
 359
 360#define NCM_PARM_ATTR(name, format, tocpu)				\
 361static ssize_t cdc_ncm_show_##name(struct device *d, struct device_attribute *attr, char *buf) \
 362{ \
 363	struct usbnet *dev = netdev_priv(to_net_dev(d)); \
 364	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0]; \
 365	return sprintf(buf, format "\n", tocpu(ctx->ncm_parm.name));	\
 366} \
 367static DEVICE_ATTR(name, 0444, cdc_ncm_show_##name, NULL)
 368
 369NCM_PARM_ATTR(bmNtbFormatsSupported, "0x%04x", le16_to_cpu);
 370NCM_PARM_ATTR(dwNtbInMaxSize, "%u", le32_to_cpu);
 371NCM_PARM_ATTR(wNdpInDivisor, "%u", le16_to_cpu);
 372NCM_PARM_ATTR(wNdpInPayloadRemainder, "%u", le16_to_cpu);
 373NCM_PARM_ATTR(wNdpInAlignment, "%u", le16_to_cpu);
 374NCM_PARM_ATTR(dwNtbOutMaxSize, "%u", le32_to_cpu);
 375NCM_PARM_ATTR(wNdpOutDivisor, "%u", le16_to_cpu);
 376NCM_PARM_ATTR(wNdpOutPayloadRemainder, "%u", le16_to_cpu);
 377NCM_PARM_ATTR(wNdpOutAlignment, "%u", le16_to_cpu);
 378NCM_PARM_ATTR(wNtbOutMaxDatagrams, "%u", le16_to_cpu);
 379
 380static struct attribute *cdc_ncm_sysfs_attrs[] = {
 381	&dev_attr_min_tx_pkt.attr,
 382	&dev_attr_ndp_to_end.attr,
 383	&dev_attr_rx_max.attr,
 384	&dev_attr_tx_max.attr,
 385	&dev_attr_tx_timer_usecs.attr,
 386	&dev_attr_bmNtbFormatsSupported.attr,
 387	&dev_attr_dwNtbInMaxSize.attr,
 388	&dev_attr_wNdpInDivisor.attr,
 389	&dev_attr_wNdpInPayloadRemainder.attr,
 390	&dev_attr_wNdpInAlignment.attr,
 391	&dev_attr_dwNtbOutMaxSize.attr,
 392	&dev_attr_wNdpOutDivisor.attr,
 393	&dev_attr_wNdpOutPayloadRemainder.attr,
 394	&dev_attr_wNdpOutAlignment.attr,
 395	&dev_attr_wNtbOutMaxDatagrams.attr,
 396	NULL,
 397};
 398
 399static const struct attribute_group cdc_ncm_sysfs_attr_group = {
 400	.name = "cdc_ncm",
 401	.attrs = cdc_ncm_sysfs_attrs,
 402};
 403
 404/* handle rx_max and tx_max changes */
 405static void cdc_ncm_update_rxtx_max(struct usbnet *dev, u32 new_rx, u32 new_tx)
 406{
 407	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 408	u8 iface_no = ctx->control->cur_altsetting->desc.bInterfaceNumber;
 409	u32 val;
 410
 411	val = cdc_ncm_check_rx_max(dev, new_rx);
 412
 413	/* inform device about NTB input size changes */
 414	if (val != ctx->rx_max) {
 415		__le32 dwNtbInMaxSize = cpu_to_le32(val);
 416
 417		dev_info(&dev->intf->dev, "setting rx_max = %u\n", val);
 418
 419		/* tell device to use new size */
 420		if (usbnet_write_cmd(dev, USB_CDC_SET_NTB_INPUT_SIZE,
 421				     USB_TYPE_CLASS | USB_DIR_OUT
 422				     | USB_RECIP_INTERFACE,
 423				     0, iface_no, &dwNtbInMaxSize, 4) < 0)
 424			dev_dbg(&dev->intf->dev, "Setting NTB Input Size failed\n");
 425		else
 426			ctx->rx_max = val;
 427	}
 428
 429	/* usbnet use these values for sizing rx queues */
 430	if (dev->rx_urb_size != ctx->rx_max) {
 431		dev->rx_urb_size = ctx->rx_max;
 432		if (netif_running(dev->net))
 433			usbnet_unlink_rx_urbs(dev);
 434	}
 435
 436	val = cdc_ncm_check_tx_max(dev, new_tx);
 437	if (val != ctx->tx_max)
 438		dev_info(&dev->intf->dev, "setting tx_max = %u\n", val);
 439
 440	/* Adding a pad byte here if necessary simplifies the handling
 441	 * in cdc_ncm_fill_tx_frame, making tx_max always represent
 442	 * the real skb max size.
 443	 *
 444	 * We cannot use dev->maxpacket here because this is called from
 445	 * .bind which is called before usbnet sets up dev->maxpacket
 446	 */
 447	if (val != le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize) &&
 448	    val % usb_maxpacket(dev->udev, dev->out) == 0)
 449		val++;
 450
 451	/* we might need to flush any pending tx buffers if running */
 452	if (netif_running(dev->net) && val > ctx->tx_max) {
 453		netif_tx_lock_bh(dev->net);
 454		usbnet_start_xmit(NULL, dev->net);
 455		/* make sure tx_curr_skb is reallocated if it was empty */
 456		if (ctx->tx_curr_skb) {
 457			dev_kfree_skb_any(ctx->tx_curr_skb);
 458			ctx->tx_curr_skb = NULL;
 459		}
 460		ctx->tx_max = val;
 461		netif_tx_unlock_bh(dev->net);
 462	} else {
 463		ctx->tx_max = val;
 464	}
 465
 466	dev->hard_mtu = ctx->tx_max;
 467
 468	/* max qlen depend on hard_mtu and rx_urb_size */
 469	usbnet_update_max_qlen(dev);
 470
 471	/* never pad more than 3 full USB packets per transfer */
 472	ctx->min_tx_pkt = clamp_t(u16, ctx->tx_max - 3 * usb_maxpacket(dev->udev, dev->out),
 473				  CDC_NCM_MIN_TX_PKT, ctx->tx_max);
 474}
 475
 476/* helpers for NCM and MBIM differences */
 477static u8 cdc_ncm_flags(struct usbnet *dev)
 478{
 479	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 480
 481	if (cdc_ncm_comm_intf_is_mbim(dev->intf->cur_altsetting) && ctx->mbim_desc)
 482		return ctx->mbim_desc->bmNetworkCapabilities;
 483	if (ctx->func_desc)
 484		return ctx->func_desc->bmNetworkCapabilities;
 485	return 0;
 486}
 487
 488static int cdc_ncm_eth_hlen(struct usbnet *dev)
 489{
 490	if (cdc_ncm_comm_intf_is_mbim(dev->intf->cur_altsetting))
 491		return 0;
 492	return ETH_HLEN;
 493}
 494
 495static u32 cdc_ncm_min_dgram_size(struct usbnet *dev)
 496{
 497	if (cdc_ncm_comm_intf_is_mbim(dev->intf->cur_altsetting))
 498		return CDC_MBIM_MIN_DATAGRAM_SIZE;
 499	return CDC_NCM_MIN_DATAGRAM_SIZE;
 500}
 501
 502static u32 cdc_ncm_max_dgram_size(struct usbnet *dev)
 503{
 504	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 505
 506	if (cdc_ncm_comm_intf_is_mbim(dev->intf->cur_altsetting) && ctx->mbim_desc)
 507		return le16_to_cpu(ctx->mbim_desc->wMaxSegmentSize);
 508	if (ctx->ether_desc)
 509		return le16_to_cpu(ctx->ether_desc->wMaxSegmentSize);
 510	return CDC_NCM_MAX_DATAGRAM_SIZE;
 511}
 512
 513/* initial one-time device setup.  MUST be called with the data interface
 514 * in altsetting 0
 515 */
 516static int cdc_ncm_init(struct usbnet *dev)
 517{
 518	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 519	u8 iface_no = ctx->control->cur_altsetting->desc.bInterfaceNumber;
 520	int err;
 
 
 
 
 
 
 521
 522	err = usbnet_read_cmd(dev, USB_CDC_GET_NTB_PARAMETERS,
 523			      USB_TYPE_CLASS | USB_DIR_IN
 524			      |USB_RECIP_INTERFACE,
 525			      0, iface_no, &ctx->ncm_parm,
 526			      sizeof(ctx->ncm_parm));
 527	if (err < 0) {
 528		dev_err(&dev->intf->dev, "failed GET_NTB_PARAMETERS\n");
 529		return err; /* GET_NTB_PARAMETERS is required */
 530	}
 531
 532	/* set CRC Mode */
 533	if (cdc_ncm_flags(dev) & USB_CDC_NCM_NCAP_CRC_MODE) {
 534		dev_dbg(&dev->intf->dev, "Setting CRC mode off\n");
 535		err = usbnet_write_cmd(dev, USB_CDC_SET_CRC_MODE,
 536				       USB_TYPE_CLASS | USB_DIR_OUT
 537				       | USB_RECIP_INTERFACE,
 538				       USB_CDC_NCM_CRC_NOT_APPENDED,
 539				       iface_no, NULL, 0);
 540		if (err < 0)
 541			dev_err(&dev->intf->dev, "SET_CRC_MODE failed\n");
 542	}
 543
 544	/* use ndp16 by default */
 545	ctx->is_ndp16 = 1;
 546
 547	/* set NTB format, if both formats are supported.
 548	 *
 549	 * "The host shall only send this command while the NCM Data
 550	 *  Interface is in alternate setting 0."
 551	 */
 552	if (le16_to_cpu(ctx->ncm_parm.bmNtbFormatsSupported) &
 553						USB_CDC_NCM_NTB32_SUPPORTED) {
 554		if (ctx->drvflags & CDC_NCM_FLAG_PREFER_NTB32) {
 555			ctx->is_ndp16 = 0;
 556			dev_dbg(&dev->intf->dev, "Setting NTB format to 32-bit\n");
 557			err = usbnet_write_cmd(dev, USB_CDC_SET_NTB_FORMAT,
 558					       USB_TYPE_CLASS | USB_DIR_OUT
 559					       | USB_RECIP_INTERFACE,
 560					       USB_CDC_NCM_NTB32_FORMAT,
 561					       iface_no, NULL, 0);
 562		} else {
 563			ctx->is_ndp16 = 1;
 564			dev_dbg(&dev->intf->dev, "Setting NTB format to 16-bit\n");
 565			err = usbnet_write_cmd(dev, USB_CDC_SET_NTB_FORMAT,
 566					       USB_TYPE_CLASS | USB_DIR_OUT
 567					       | USB_RECIP_INTERFACE,
 568					       USB_CDC_NCM_NTB16_FORMAT,
 569					       iface_no, NULL, 0);
 570		}
 571		if (err < 0) {
 572			ctx->is_ndp16 = 1;
 573			dev_err(&dev->intf->dev, "SET_NTB_FORMAT failed\n");
 574		}
 575	}
 576
 577	/* set initial device values */
 578	ctx->rx_max = le32_to_cpu(ctx->ncm_parm.dwNtbInMaxSize);
 579	ctx->tx_max = le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize);
 580	ctx->tx_remainder = le16_to_cpu(ctx->ncm_parm.wNdpOutPayloadRemainder);
 581	ctx->tx_modulus = le16_to_cpu(ctx->ncm_parm.wNdpOutDivisor);
 582	ctx->tx_ndp_modulus = le16_to_cpu(ctx->ncm_parm.wNdpOutAlignment);
 583	/* devices prior to NCM Errata shall set this field to zero */
 584	ctx->tx_max_datagrams = le16_to_cpu(ctx->ncm_parm.wNtbOutMaxDatagrams);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 585
 586	dev_dbg(&dev->intf->dev,
 587		"dwNtbInMaxSize=%u dwNtbOutMaxSize=%u wNdpOutPayloadRemainder=%u wNdpOutDivisor=%u wNdpOutAlignment=%u wNtbOutMaxDatagrams=%u flags=0x%x\n",
 588		ctx->rx_max, ctx->tx_max, ctx->tx_remainder, ctx->tx_modulus,
 589		ctx->tx_ndp_modulus, ctx->tx_max_datagrams, cdc_ncm_flags(dev));
 590
 591	/* max count of tx datagrams */
 592	if ((ctx->tx_max_datagrams == 0) ||
 593			(ctx->tx_max_datagrams > CDC_NCM_DPT_DATAGRAMS_MAX))
 594		ctx->tx_max_datagrams = CDC_NCM_DPT_DATAGRAMS_MAX;
 595
 596	/* set up maximum NDP size */
 597	if (ctx->is_ndp16)
 598		ctx->max_ndp_size = sizeof(struct usb_cdc_ncm_ndp16) + (ctx->tx_max_datagrams + 1) * sizeof(struct usb_cdc_ncm_dpe16);
 599	else
 600		ctx->max_ndp_size = sizeof(struct usb_cdc_ncm_ndp32) + (ctx->tx_max_datagrams + 1) * sizeof(struct usb_cdc_ncm_dpe32);
 601
 602	/* initial coalescing timer interval */
 603	ctx->timer_interval = CDC_NCM_TIMER_INTERVAL_USEC * NSEC_PER_USEC;
 604
 605	return 0;
 606}
 607
 608/* set a new max datagram size */
 609static void cdc_ncm_set_dgram_size(struct usbnet *dev, int new_size)
 610{
 611	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 612	u8 iface_no = ctx->control->cur_altsetting->desc.bInterfaceNumber;
 613	__le16 max_datagram_size;
 614	u16 mbim_mtu;
 615	int err;
 616
 617	/* set default based on descriptors */
 618	ctx->max_datagram_size = clamp_t(u32, new_size,
 619					 cdc_ncm_min_dgram_size(dev),
 620					 CDC_NCM_MAX_DATAGRAM_SIZE);
 621
 622	/* inform the device about the selected Max Datagram Size? */
 623	if (!(cdc_ncm_flags(dev) & USB_CDC_NCM_NCAP_MAX_DATAGRAM_SIZE))
 624		goto out;
 625
 626	/* read current mtu value from device */
 627	err = usbnet_read_cmd(dev, USB_CDC_GET_MAX_DATAGRAM_SIZE,
 628			      USB_TYPE_CLASS | USB_DIR_IN | USB_RECIP_INTERFACE,
 629			      0, iface_no, &max_datagram_size, sizeof(max_datagram_size));
 630	if (err != sizeof(max_datagram_size)) {
 631		dev_dbg(&dev->intf->dev, "GET_MAX_DATAGRAM_SIZE failed\n");
 632		goto out;
 633	}
 634
 635	if (le16_to_cpu(max_datagram_size) == ctx->max_datagram_size)
 636		goto out;
 637
 638	max_datagram_size = cpu_to_le16(ctx->max_datagram_size);
 639	err = usbnet_write_cmd(dev, USB_CDC_SET_MAX_DATAGRAM_SIZE,
 640			       USB_TYPE_CLASS | USB_DIR_OUT | USB_RECIP_INTERFACE,
 641			       0, iface_no, &max_datagram_size, sizeof(max_datagram_size));
 642	if (err < 0)
 643		dev_dbg(&dev->intf->dev, "SET_MAX_DATAGRAM_SIZE failed\n");
 644
 645out:
 646	/* set MTU to max supported by the device if necessary */
 647	dev->net->mtu = min_t(int, dev->net->mtu, ctx->max_datagram_size - cdc_ncm_eth_hlen(dev));
 648
 649	/* do not exceed operator preferred MTU */
 650	if (ctx->mbim_extended_desc) {
 651		mbim_mtu = le16_to_cpu(ctx->mbim_extended_desc->wMTU);
 652		if (mbim_mtu != 0 && mbim_mtu < dev->net->mtu)
 653			dev->net->mtu = mbim_mtu;
 
 654	}
 655}
 656
 657static void cdc_ncm_fix_modulus(struct usbnet *dev)
 658{
 659	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 660	u32 val;
 
 
 661
 662	/*
 663	 * verify that the structure alignment is:
 664	 * - power of two
 665	 * - not greater than the maximum transmit length
 666	 * - not less than four bytes
 667	 */
 668	val = ctx->tx_ndp_modulus;
 669
 670	if ((val < USB_CDC_NCM_NDP_ALIGN_MIN_SIZE) ||
 671	    (val != ((-val) & val)) || (val >= ctx->tx_max)) {
 672		dev_dbg(&dev->intf->dev, "Using default alignment: 4 bytes\n");
 673		ctx->tx_ndp_modulus = USB_CDC_NCM_NDP_ALIGN_MIN_SIZE;
 674	}
 675
 676	/*
 677	 * verify that the payload alignment is:
 678	 * - power of two
 679	 * - not greater than the maximum transmit length
 680	 * - not less than four bytes
 681	 */
 682	val = ctx->tx_modulus;
 683
 684	if ((val < USB_CDC_NCM_NDP_ALIGN_MIN_SIZE) ||
 685	    (val != ((-val) & val)) || (val >= ctx->tx_max)) {
 686		dev_dbg(&dev->intf->dev, "Using default transmit modulus: 4 bytes\n");
 687		ctx->tx_modulus = USB_CDC_NCM_NDP_ALIGN_MIN_SIZE;
 688	}
 689
 690	/* verify the payload remainder */
 691	if (ctx->tx_remainder >= ctx->tx_modulus) {
 692		dev_dbg(&dev->intf->dev, "Using default transmit remainder: 0 bytes\n");
 693		ctx->tx_remainder = 0;
 694	}
 695
 696	/* adjust TX-remainder according to NCM specification. */
 697	ctx->tx_remainder = ((ctx->tx_remainder - cdc_ncm_eth_hlen(dev)) &
 698			     (ctx->tx_modulus - 1));
 699}
 700
 701static int cdc_ncm_setup(struct usbnet *dev)
 702{
 703	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 704	u32 def_rx, def_tx;
 705
 706	/* be conservative when selecting initial buffer size to
 707	 * increase the number of hosts this will work for
 708	 */
 709	def_rx = min_t(u32, CDC_NCM_NTB_DEF_SIZE_RX,
 710		       le32_to_cpu(ctx->ncm_parm.dwNtbInMaxSize));
 711	def_tx = min_t(u32, CDC_NCM_NTB_DEF_SIZE_TX,
 712		       le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize));
 
 
 
 713
 714	/* clamp rx_max and tx_max and inform device */
 715	cdc_ncm_update_rxtx_max(dev, def_rx, def_tx);
 
 
 
 
 
 
 
 
 716
 717	/* sanitize the modulus and remainder values */
 718	cdc_ncm_fix_modulus(dev);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 719
 720	/* set max datagram size */
 721	cdc_ncm_set_dgram_size(dev, cdc_ncm_max_dgram_size(dev));
 722	return 0;
 723}
 724
 725static void
 726cdc_ncm_find_endpoints(struct usbnet *dev, struct usb_interface *intf)
 727{
 728	struct usb_host_endpoint *e, *in = NULL, *out = NULL;
 729	u8 ep;
 730
 731	for (ep = 0; ep < intf->cur_altsetting->desc.bNumEndpoints; ep++) {
 732		e = intf->cur_altsetting->endpoint + ep;
 733
 734		/* ignore endpoints which cannot transfer data */
 735		if (!usb_endpoint_maxp(&e->desc))
 736			continue;
 737
 
 738		switch (e->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
 739		case USB_ENDPOINT_XFER_INT:
 740			if (usb_endpoint_dir_in(&e->desc)) {
 741				if (!dev->status)
 742					dev->status = e;
 743			}
 744			break;
 745
 746		case USB_ENDPOINT_XFER_BULK:
 747			if (usb_endpoint_dir_in(&e->desc)) {
 748				if (!in)
 749					in = e;
 750			} else {
 751				if (!out)
 752					out = e;
 753			}
 754			break;
 755
 756		default:
 757			break;
 758		}
 759	}
 760	if (in && !dev->in)
 761		dev->in = usb_rcvbulkpipe(dev->udev,
 762					  in->desc.bEndpointAddress &
 763					  USB_ENDPOINT_NUMBER_MASK);
 764	if (out && !dev->out)
 765		dev->out = usb_sndbulkpipe(dev->udev,
 766					   out->desc.bEndpointAddress &
 767					   USB_ENDPOINT_NUMBER_MASK);
 768}
 769
 770static void cdc_ncm_free(struct cdc_ncm_ctx *ctx)
 771{
 772	if (ctx == NULL)
 773		return;
 774
 775	if (ctx->tx_rem_skb != NULL) {
 776		dev_kfree_skb_any(ctx->tx_rem_skb);
 777		ctx->tx_rem_skb = NULL;
 778	}
 779
 780	if (ctx->tx_curr_skb != NULL) {
 781		dev_kfree_skb_any(ctx->tx_curr_skb);
 782		ctx->tx_curr_skb = NULL;
 783	}
 784
 785	if (ctx->is_ndp16)
 786		kfree(ctx->delayed_ndp16);
 787	else
 788		kfree(ctx->delayed_ndp32);
 789
 790	kfree(ctx);
 791}
 792
 793/* we need to override the usbnet change_mtu ndo for two reasons:
 794 *  - respect the negotiated maximum datagram size
 795 *  - avoid unwanted changes to rx and tx buffers
 796 */
 797int cdc_ncm_change_mtu(struct net_device *net, int new_mtu)
 798{
 799	struct usbnet *dev = netdev_priv(net);
 800
 801	net->mtu = new_mtu;
 802	cdc_ncm_set_dgram_size(dev, new_mtu + cdc_ncm_eth_hlen(dev));
 803
 804	return 0;
 805}
 806EXPORT_SYMBOL_GPL(cdc_ncm_change_mtu);
 807
 808static const struct net_device_ops cdc_ncm_netdev_ops = {
 809	.ndo_open	     = usbnet_open,
 810	.ndo_stop	     = usbnet_stop,
 811	.ndo_start_xmit	     = usbnet_start_xmit,
 812	.ndo_tx_timeout	     = usbnet_tx_timeout,
 813	.ndo_set_rx_mode     = usbnet_set_rx_mode,
 814	.ndo_get_stats64     = dev_get_tstats64,
 815	.ndo_change_mtu	     = cdc_ncm_change_mtu,
 816	.ndo_set_mac_address = eth_mac_addr,
 817	.ndo_validate_addr   = eth_validate_addr,
 818};
 819
 820int cdc_ncm_bind_common(struct usbnet *dev, struct usb_interface *intf, u8 data_altsetting, int drvflags)
 821{
 
 822	struct cdc_ncm_ctx *ctx;
 823	struct usb_driver *driver;
 824	u8 *buf;
 825	int len;
 826	int temp;
 827	u8 iface_no;
 828	struct usb_cdc_parsed_header hdr;
 829
 830	ctx = kzalloc(sizeof(*ctx), GFP_KERNEL);
 831	if (!ctx)
 832		return -ENOMEM;
 833
 834	ctx->dev = dev;
 835
 836	hrtimer_init(&ctx->tx_timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL);
 837	ctx->tx_timer.function = &cdc_ncm_tx_timer_cb;
 838	tasklet_setup(&ctx->bh, cdc_ncm_txpath_bh);
 
 839	atomic_set(&ctx->stop, 0);
 840	spin_lock_init(&ctx->mtx);
 841
 842	/* store ctx pointer in device data field */
 843	dev->data[0] = (unsigned long)ctx;
 844
 845	/* only the control interface can be successfully probed */
 846	ctx->control = intf;
 847
 848	/* get some pointers */
 849	driver = driver_of(intf);
 850	buf = intf->cur_altsetting->extra;
 851	len = intf->cur_altsetting->extralen;
 852
 853	/* parse through descriptors associated with control interface */
 854	cdc_parse_cdc_header(&hdr, intf, buf, len);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 855
 856	if (hdr.usb_cdc_union_desc)
 857		ctx->data = usb_ifnum_to_if(dev->udev,
 858					    hdr.usb_cdc_union_desc->bSlaveInterface0);
 859	ctx->ether_desc = hdr.usb_cdc_ether_desc;
 860	ctx->func_desc = hdr.usb_cdc_ncm_desc;
 861	ctx->mbim_desc = hdr.usb_cdc_mbim_desc;
 862	ctx->mbim_extended_desc = hdr.usb_cdc_mbim_extended_desc;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 863
 864	/* some buggy devices have an IAD but no CDC Union */
 865	if (!hdr.usb_cdc_union_desc && intf->intf_assoc && intf->intf_assoc->bInterfaceCount == 2) {
 866		ctx->data = usb_ifnum_to_if(dev->udev, intf->cur_altsetting->desc.bInterfaceNumber + 1);
 867		dev_dbg(&intf->dev, "CDC Union missing - got slave from IAD\n");
 868	}
 869
 870	/* check if we got everything */
 871	if (!ctx->data) {
 872		dev_err(&intf->dev, "CDC Union missing and no IAD found\n");
 873		goto error;
 874	}
 875	if (cdc_ncm_comm_intf_is_mbim(intf->cur_altsetting)) {
 876		if (!ctx->mbim_desc) {
 877			dev_err(&intf->dev, "MBIM functional descriptor missing\n");
 878			goto error;
 879		}
 880	} else {
 881		if (!ctx->ether_desc || !ctx->func_desc) {
 882			dev_err(&intf->dev, "NCM or ECM functional descriptors missing\n");
 883			goto error;
 884		}
 885	}
 886
 887	/* claim data interface, if different from control */
 888	if (ctx->data != ctx->control) {
 889		temp = usb_driver_claim_interface(driver, ctx->data, dev);
 890		if (temp) {
 891			dev_err(&intf->dev, "failed to claim data intf\n");
 892			goto error;
 893		}
 894	}
 895
 896	iface_no = ctx->data->cur_altsetting->desc.bInterfaceNumber;
 897
 898	/* Device-specific flags */
 899	ctx->drvflags = drvflags;
 900
 901	/* Reset data interface. Some devices will not reset properly
 902	 * unless they are configured first.  Toggle the altsetting to
 903	 * force a reset.
 904	 * Some other devices do not work properly with this procedure
 905	 * that can be avoided using quirk CDC_MBIM_FLAG_AVOID_ALTSETTING_TOGGLE
 906	 */
 907	if (!(ctx->drvflags & CDC_MBIM_FLAG_AVOID_ALTSETTING_TOGGLE))
 908		usb_set_interface(dev->udev, iface_no, data_altsetting);
 909
 910	temp = usb_set_interface(dev->udev, iface_no, 0);
 911	if (temp) {
 912		dev_dbg(&intf->dev, "set interface failed\n");
 913		goto error2;
 914	}
 915
 916	/* initialize basic device settings */
 917	if (cdc_ncm_init(dev))
 918		goto error2;
 919
 920	/* Some firmwares need a pause here or they will silently fail
 921	 * to set up the interface properly.  This value was decided
 922	 * empirically on a Sierra Wireless MC7455 running 02.08.02.00
 923	 * firmware.
 924	 */
 925	usleep_range(10000, 20000);
 926
 927	/* configure data interface */
 928	temp = usb_set_interface(dev->udev, iface_no, data_altsetting);
 929	if (temp) {
 930		dev_dbg(&intf->dev, "set interface failed\n");
 931		goto error2;
 932	}
 933
 934	cdc_ncm_find_endpoints(dev, ctx->data);
 935	cdc_ncm_find_endpoints(dev, ctx->control);
 936	if (!dev->in || !dev->out || !dev->status) {
 937		dev_dbg(&intf->dev, "failed to collect endpoints\n");
 938		goto error2;
 939	}
 940
 
 941	usb_set_intfdata(ctx->control, dev);
 942
 943	if (ctx->ether_desc) {
 944		temp = usbnet_get_ethernet_addr(dev, ctx->ether_desc->iMACAddress);
 945		if (temp) {
 946			dev_err(&intf->dev, "failed to get mac address\n");
 947			goto error2;
 948		}
 949		dev_info(&intf->dev, "MAC-Address: %pM\n", dev->net->dev_addr);
 950	}
 951
 952	/* finish setting up the device specific data */
 953	cdc_ncm_setup(dev);
 954
 955	/* Allocate the delayed NDP if needed. */
 956	if (ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END) {
 957		if (ctx->is_ndp16) {
 958			ctx->delayed_ndp16 = kzalloc(ctx->max_ndp_size, GFP_KERNEL);
 959			if (!ctx->delayed_ndp16)
 960				goto error2;
 961		} else {
 962			ctx->delayed_ndp32 = kzalloc(ctx->max_ndp_size, GFP_KERNEL);
 963			if (!ctx->delayed_ndp32)
 964				goto error2;
 965		}
 966		dev_info(&intf->dev, "NDP will be placed at end of frame for this device.");
 967	}
 968
 969	/* override ethtool_ops */
 970	dev->net->ethtool_ops = &cdc_ncm_ethtool_ops;
 971
 972	/* add our sysfs attrs */
 973	dev->net->sysfs_groups[0] = &cdc_ncm_sysfs_attr_group;
 974
 975	/* must handle MTU changes */
 976	dev->net->netdev_ops = &cdc_ncm_netdev_ops;
 977	dev->net->max_mtu = cdc_ncm_max_dgram_size(dev) - cdc_ncm_eth_hlen(dev);
 
 
 
 
 
 978
 979	return 0;
 980
 981error2:
 982	usb_set_intfdata(ctx->control, NULL);
 983	usb_set_intfdata(ctx->data, NULL);
 984	if (ctx->data != ctx->control)
 985		usb_driver_release_interface(driver, ctx->data);
 986error:
 987	cdc_ncm_free((struct cdc_ncm_ctx *)dev->data[0]);
 988	dev->data[0] = 0;
 989	dev_info(&intf->dev, "bind() failure\n");
 990	return -ENODEV;
 991}
 992EXPORT_SYMBOL_GPL(cdc_ncm_bind_common);
 993
 994void cdc_ncm_unbind(struct usbnet *dev, struct usb_interface *intf)
 995{
 996	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 997	struct usb_driver *driver = driver_of(intf);
 998
 999	if (ctx == NULL)
1000		return;		/* no setup */
1001
1002	atomic_set(&ctx->stop, 1);
1003
1004	hrtimer_cancel(&ctx->tx_timer);
 
1005
1006	tasklet_kill(&ctx->bh);
1007
1008	/* handle devices with combined control and data interface */
1009	if (ctx->control == ctx->data)
1010		ctx->data = NULL;
1011
1012	/* disconnect master --> disconnect slave */
1013	if (intf == ctx->control && ctx->data) {
1014		usb_set_intfdata(ctx->data, NULL);
1015		usb_driver_release_interface(driver, ctx->data);
1016		ctx->data = NULL;
1017
1018	} else if (intf == ctx->data && ctx->control) {
1019		usb_set_intfdata(ctx->control, NULL);
1020		usb_driver_release_interface(driver, ctx->control);
1021		ctx->control = NULL;
1022	}
1023
1024	usb_set_intfdata(intf, NULL);
1025	cdc_ncm_free(ctx);
1026}
1027EXPORT_SYMBOL_GPL(cdc_ncm_unbind);
1028
1029/* Return the number of the MBIM control interface altsetting iff it
1030 * is preferred and available,
1031 */
1032u8 cdc_ncm_select_altsetting(struct usb_interface *intf)
1033{
1034	struct usb_host_interface *alt;
1035
1036	/* The MBIM spec defines a NCM compatible default altsetting,
1037	 * which we may have matched:
1038	 *
1039	 *  "Functions that implement both NCM 1.0 and MBIM (an
1040	 *   “NCM/MBIM function”) according to this recommendation
1041	 *   shall provide two alternate settings for the
1042	 *   Communication Interface.  Alternate setting 0, and the
1043	 *   associated class and endpoint descriptors, shall be
1044	 *   constructed according to the rules given for the
1045	 *   Communication Interface in section 5 of [USBNCM10].
1046	 *   Alternate setting 1, and the associated class and
1047	 *   endpoint descriptors, shall be constructed according to
1048	 *   the rules given in section 6 (USB Device Model) of this
1049	 *   specification."
1050	 */
1051	if (intf->num_altsetting < 2)
1052		return intf->cur_altsetting->desc.bAlternateSetting;
1053
1054	if (prefer_mbim) {
1055		alt = usb_altnum_to_altsetting(intf, CDC_NCM_COMM_ALTSETTING_MBIM);
1056		if (alt && cdc_ncm_comm_intf_is_mbim(alt))
1057			return CDC_NCM_COMM_ALTSETTING_MBIM;
 
 
 
1058	}
1059	return CDC_NCM_COMM_ALTSETTING_NCM;
1060}
1061EXPORT_SYMBOL_GPL(cdc_ncm_select_altsetting);
1062
1063static int cdc_ncm_bind(struct usbnet *dev, struct usb_interface *intf)
1064{
 
 
1065	/* MBIM backwards compatible function? */
1066	if (cdc_ncm_select_altsetting(intf) != CDC_NCM_COMM_ALTSETTING_NCM)
 
1067		return -ENODEV;
1068
1069	/* The NCM data altsetting is fixed, so we hard-coded it.
1070	 * Additionally, generic NCM devices are assumed to accept arbitrarily
1071	 * placed NDP.
 
 
 
 
 
1072	 */
1073	return cdc_ncm_bind_common(dev, intf, CDC_NCM_DATA_ALTSETTING_NCM, 0);
 
1074}
1075
1076static void cdc_ncm_align_tail(struct sk_buff *skb, size_t modulus, size_t remainder, size_t max)
1077{
1078	size_t align = ALIGN(skb->len, modulus) - skb->len + remainder;
1079
1080	if (skb->len + align > max)
1081		align = max - skb->len;
1082	if (align && skb_tailroom(skb) >= align)
1083		skb_put_zero(skb, align);
1084}
1085
1086/* return a pointer to a valid struct usb_cdc_ncm_ndp16 of type sign, possibly
1087 * allocating a new one within skb
1088 */
1089static struct usb_cdc_ncm_ndp16 *cdc_ncm_ndp16(struct cdc_ncm_ctx *ctx, struct sk_buff *skb, __le32 sign, size_t reserve)
1090{
1091	struct usb_cdc_ncm_ndp16 *ndp16 = NULL;
1092	struct usb_cdc_ncm_nth16 *nth16 = (void *)skb->data;
1093	size_t ndpoffset = le16_to_cpu(nth16->wNdpIndex);
1094
1095	/* If NDP should be moved to the end of the NCM package, we can't follow the
1096	* NTH16 header as we would normally do. NDP isn't written to the SKB yet, and
1097	* the wNdpIndex field in the header is actually not consistent with reality. It will be later.
1098	*/
1099	if (ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END) {
1100		if (ctx->delayed_ndp16->dwSignature == sign)
1101			return ctx->delayed_ndp16;
1102
1103		/* We can only push a single NDP to the end. Return
1104		 * NULL to send what we've already got and queue this
1105		 * skb for later.
1106		 */
1107		else if (ctx->delayed_ndp16->dwSignature)
1108			return NULL;
1109	}
1110
1111	/* follow the chain of NDPs, looking for a match */
1112	while (ndpoffset) {
1113		ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb->data + ndpoffset);
1114		if  (ndp16->dwSignature == sign)
1115			return ndp16;
1116		ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);
1117	}
1118
1119	/* align new NDP */
1120	if (!(ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END))
1121		cdc_ncm_align_tail(skb, ctx->tx_ndp_modulus, 0, ctx->tx_curr_size);
1122
1123	/* verify that there is room for the NDP and the datagram (reserve) */
1124	if ((ctx->tx_curr_size - skb->len - reserve) < ctx->max_ndp_size)
1125		return NULL;
1126
1127	/* link to it */
1128	if (ndp16)
1129		ndp16->wNextNdpIndex = cpu_to_le16(skb->len);
1130	else
1131		nth16->wNdpIndex = cpu_to_le16(skb->len);
1132
1133	/* push a new empty NDP */
1134	if (!(ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END))
1135		ndp16 = skb_put_zero(skb, ctx->max_ndp_size);
1136	else
1137		ndp16 = ctx->delayed_ndp16;
1138
1139	ndp16->dwSignature = sign;
1140	ndp16->wLength = cpu_to_le16(sizeof(struct usb_cdc_ncm_ndp16) + sizeof(struct usb_cdc_ncm_dpe16));
1141	return ndp16;
1142}
1143
1144static struct usb_cdc_ncm_ndp32 *cdc_ncm_ndp32(struct cdc_ncm_ctx *ctx, struct sk_buff *skb, __le32 sign, size_t reserve)
1145{
1146	struct usb_cdc_ncm_ndp32 *ndp32 = NULL;
1147	struct usb_cdc_ncm_nth32 *nth32 = (void *)skb->data;
1148	size_t ndpoffset = le32_to_cpu(nth32->dwNdpIndex);
1149
1150	/* If NDP should be moved to the end of the NCM package, we can't follow the
1151	 * NTH32 header as we would normally do. NDP isn't written to the SKB yet, and
1152	 * the wNdpIndex field in the header is actually not consistent with reality. It will be later.
1153	 */
1154	if (ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END) {
1155		if (ctx->delayed_ndp32->dwSignature == sign)
1156			return ctx->delayed_ndp32;
1157
1158		/* We can only push a single NDP to the end. Return
1159		 * NULL to send what we've already got and queue this
1160		 * skb for later.
1161		 */
1162		else if (ctx->delayed_ndp32->dwSignature)
1163			return NULL;
1164	}
1165
1166	/* follow the chain of NDPs, looking for a match */
1167	while (ndpoffset) {
1168		ndp32 = (struct usb_cdc_ncm_ndp32 *)(skb->data + ndpoffset);
1169		if  (ndp32->dwSignature == sign)
1170			return ndp32;
1171		ndpoffset = le32_to_cpu(ndp32->dwNextNdpIndex);
1172	}
1173
1174	/* align new NDP */
1175	if (!(ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END))
1176		cdc_ncm_align_tail(skb, ctx->tx_ndp_modulus, 0, ctx->tx_curr_size);
1177
1178	/* verify that there is room for the NDP and the datagram (reserve) */
1179	if ((ctx->tx_curr_size - skb->len - reserve) < ctx->max_ndp_size)
1180		return NULL;
1181
1182	/* link to it */
1183	if (ndp32)
1184		ndp32->dwNextNdpIndex = cpu_to_le32(skb->len);
1185	else
1186		nth32->dwNdpIndex = cpu_to_le32(skb->len);
1187
1188	/* push a new empty NDP */
1189	if (!(ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END))
1190		ndp32 = skb_put_zero(skb, ctx->max_ndp_size);
1191	else
1192		ndp32 = ctx->delayed_ndp32;
1193
1194	ndp32->dwSignature = sign;
1195	ndp32->wLength = cpu_to_le16(sizeof(struct usb_cdc_ncm_ndp32) + sizeof(struct usb_cdc_ncm_dpe32));
1196	return ndp32;
1197}
1198
1199struct sk_buff *
1200cdc_ncm_fill_tx_frame(struct usbnet *dev, struct sk_buff *skb, __le32 sign)
1201{
1202	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
1203	union {
1204		struct usb_cdc_ncm_nth16 *nth16;
1205		struct usb_cdc_ncm_nth32 *nth32;
1206	} nth;
1207	union {
1208		struct usb_cdc_ncm_ndp16 *ndp16;
1209		struct usb_cdc_ncm_ndp32 *ndp32;
1210	} ndp;
1211	struct sk_buff *skb_out;
1212	u16 n = 0, index, ndplen;
1213	u8 ready2send = 0;
1214	u32 delayed_ndp_size;
1215	size_t padding_count;
1216
1217	/* When our NDP gets written in cdc_ncm_ndp(), then skb_out->len gets updated
1218	 * accordingly. Otherwise, we should check here.
1219	 */
1220	if (ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END)
1221		delayed_ndp_size = ctx->max_ndp_size +
1222			max_t(u32,
1223			      ctx->tx_ndp_modulus,
1224			      ctx->tx_modulus + ctx->tx_remainder) - 1;
1225	else
1226		delayed_ndp_size = 0;
1227
1228	/* if there is a remaining skb, it gets priority */
1229	if (skb != NULL) {
1230		swap(skb, ctx->tx_rem_skb);
1231		swap(sign, ctx->tx_rem_sign);
1232	} else {
1233		ready2send = 1;
1234	}
1235
1236	/* check if we are resuming an OUT skb */
1237	skb_out = ctx->tx_curr_skb;
1238
1239	/* allocate a new OUT skb */
1240	if (!skb_out) {
1241		if (ctx->tx_low_mem_val == 0) {
1242			ctx->tx_curr_size = ctx->tx_max;
1243			skb_out = alloc_skb(ctx->tx_curr_size, GFP_ATOMIC);
1244			/* If the memory allocation fails we will wait longer
1245			 * each time before attempting another full size
1246			 * allocation again to not overload the system
1247			 * further.
1248			 */
1249			if (skb_out == NULL) {
1250				/* If even the smallest allocation fails, abort. */
1251				if (ctx->tx_curr_size == USB_CDC_NCM_NTB_MIN_OUT_SIZE)
1252					goto alloc_failed;
1253				ctx->tx_low_mem_max_cnt = min(ctx->tx_low_mem_max_cnt + 1,
1254							      (unsigned)CDC_NCM_LOW_MEM_MAX_CNT);
1255				ctx->tx_low_mem_val = ctx->tx_low_mem_max_cnt;
1256			}
1257		}
1258		if (skb_out == NULL) {
1259			/* See if a very small allocation is possible.
1260			 * We will send this packet immediately and hope
1261			 * that there is more memory available later.
1262			 */
1263			if (skb)
1264				ctx->tx_curr_size = max(skb->len,
1265					(u32)USB_CDC_NCM_NTB_MIN_OUT_SIZE);
1266			else
1267				ctx->tx_curr_size = USB_CDC_NCM_NTB_MIN_OUT_SIZE;
1268			skb_out = alloc_skb(ctx->tx_curr_size, GFP_ATOMIC);
1269
1270			/* No allocation possible so we will abort */
1271			if (!skb_out)
1272				goto alloc_failed;
1273			ctx->tx_low_mem_val--;
1274		}
1275		if (ctx->is_ndp16) {
1276			/* fill out the initial 16-bit NTB header */
1277			nth.nth16 = skb_put_zero(skb_out, sizeof(struct usb_cdc_ncm_nth16));
1278			nth.nth16->dwSignature = cpu_to_le32(USB_CDC_NCM_NTH16_SIGN);
1279			nth.nth16->wHeaderLength = cpu_to_le16(sizeof(struct usb_cdc_ncm_nth16));
1280			nth.nth16->wSequence = cpu_to_le16(ctx->tx_seq++);
1281		} else {
1282			/* fill out the initial 32-bit NTB header */
1283			nth.nth32 = skb_put_zero(skb_out, sizeof(struct usb_cdc_ncm_nth32));
1284			nth.nth32->dwSignature = cpu_to_le32(USB_CDC_NCM_NTH32_SIGN);
1285			nth.nth32->wHeaderLength = cpu_to_le16(sizeof(struct usb_cdc_ncm_nth32));
1286			nth.nth32->wSequence = cpu_to_le16(ctx->tx_seq++);
1287		}
 
 
 
 
 
1288
1289		/* count total number of frames in this NTB */
1290		ctx->tx_curr_frame_num = 0;
1291
1292		/* recent payload counter for this skb_out */
1293		ctx->tx_curr_frame_payload = 0;
1294	}
1295
1296	for (n = ctx->tx_curr_frame_num; n < ctx->tx_max_datagrams; n++) {
1297		/* send any remaining skb first */
1298		if (skb == NULL) {
1299			skb = ctx->tx_rem_skb;
1300			sign = ctx->tx_rem_sign;
1301			ctx->tx_rem_skb = NULL;
1302
1303			/* check for end of skb */
1304			if (skb == NULL)
1305				break;
1306		}
1307
1308		/* get the appropriate NDP for this skb */
1309		if (ctx->is_ndp16)
1310			ndp.ndp16 = cdc_ncm_ndp16(ctx, skb_out, sign, skb->len + ctx->tx_modulus + ctx->tx_remainder);
1311		else
1312			ndp.ndp32 = cdc_ncm_ndp32(ctx, skb_out, sign, skb->len + ctx->tx_modulus + ctx->tx_remainder);
1313
1314		/* align beginning of next frame */
1315		cdc_ncm_align_tail(skb_out,  ctx->tx_modulus, ctx->tx_remainder, ctx->tx_curr_size);
1316
1317		/* check if we had enough room left for both NDP and frame */
1318		if ((ctx->is_ndp16 && !ndp.ndp16) || (!ctx->is_ndp16 && !ndp.ndp32) ||
1319		    skb_out->len + skb->len + delayed_ndp_size > ctx->tx_curr_size) {
1320			if (n == 0) {
1321				/* won't fit, MTU problem? */
1322				dev_kfree_skb_any(skb);
1323				skb = NULL;
1324				dev->net->stats.tx_dropped++;
1325			} else {
1326				/* no room for skb - store for later */
1327				if (ctx->tx_rem_skb != NULL) {
1328					dev_kfree_skb_any(ctx->tx_rem_skb);
1329					dev->net->stats.tx_dropped++;
1330				}
1331				ctx->tx_rem_skb = skb;
1332				ctx->tx_rem_sign = sign;
1333				skb = NULL;
1334				ready2send = 1;
1335				ctx->tx_reason_ntb_full++;	/* count reason for transmitting */
1336			}
1337			break;
1338		}
1339
1340		/* calculate frame number within this NDP */
1341		if (ctx->is_ndp16) {
1342			ndplen = le16_to_cpu(ndp.ndp16->wLength);
1343			index = (ndplen - sizeof(struct usb_cdc_ncm_ndp16)) / sizeof(struct usb_cdc_ncm_dpe16) - 1;
1344
1345			/* OK, add this skb */
1346			ndp.ndp16->dpe16[index].wDatagramLength = cpu_to_le16(skb->len);
1347			ndp.ndp16->dpe16[index].wDatagramIndex = cpu_to_le16(skb_out->len);
1348			ndp.ndp16->wLength = cpu_to_le16(ndplen + sizeof(struct usb_cdc_ncm_dpe16));
1349		} else {
1350			ndplen = le16_to_cpu(ndp.ndp32->wLength);
1351			index = (ndplen - sizeof(struct usb_cdc_ncm_ndp32)) / sizeof(struct usb_cdc_ncm_dpe32) - 1;
1352
1353			ndp.ndp32->dpe32[index].dwDatagramLength = cpu_to_le32(skb->len);
1354			ndp.ndp32->dpe32[index].dwDatagramIndex = cpu_to_le32(skb_out->len);
1355			ndp.ndp32->wLength = cpu_to_le16(ndplen + sizeof(struct usb_cdc_ncm_dpe32));
1356		}
1357		skb_put_data(skb_out, skb->data, skb->len);
1358		ctx->tx_curr_frame_payload += skb->len;	/* count real tx payload data */
1359		dev_kfree_skb_any(skb);
1360		skb = NULL;
1361
1362		/* send now if this NDP is full */
1363		if (index >= CDC_NCM_DPT_DATAGRAMS_MAX) {
1364			ready2send = 1;
1365			ctx->tx_reason_ndp_full++;	/* count reason for transmitting */
1366			break;
1367		}
1368	}
1369
1370	/* free up any dangling skb */
1371	if (skb != NULL) {
1372		dev_kfree_skb_any(skb);
1373		skb = NULL;
1374		dev->net->stats.tx_dropped++;
1375	}
1376
1377	ctx->tx_curr_frame_num = n;
1378
1379	if (n == 0) {
1380		/* wait for more frames */
1381		/* push variables */
1382		ctx->tx_curr_skb = skb_out;
1383		goto exit_no_skb;
1384
1385	} else if ((n < ctx->tx_max_datagrams) && (ready2send == 0) && (ctx->timer_interval > 0)) {
1386		/* wait for more frames */
1387		/* push variables */
1388		ctx->tx_curr_skb = skb_out;
1389		/* set the pending count */
1390		if (n < CDC_NCM_RESTART_TIMER_DATAGRAM_CNT)
1391			ctx->tx_timer_pending = CDC_NCM_TIMER_PENDING_CNT;
1392		goto exit_no_skb;
1393
1394	} else {
1395		if (n == ctx->tx_max_datagrams)
1396			ctx->tx_reason_max_datagram++;	/* count reason for transmitting */
1397		/* frame goes out */
1398		/* variables will be reset at next call */
1399	}
1400
1401	/* If requested, put NDP at end of frame. */
1402	if (ctx->drvflags & CDC_NCM_FLAG_NDP_TO_END) {
1403		if (ctx->is_ndp16) {
1404			nth.nth16 = (struct usb_cdc_ncm_nth16 *)skb_out->data;
1405			cdc_ncm_align_tail(skb_out, ctx->tx_ndp_modulus, 0, ctx->tx_curr_size - ctx->max_ndp_size);
1406			nth.nth16->wNdpIndex = cpu_to_le16(skb_out->len);
1407			skb_put_data(skb_out, ctx->delayed_ndp16, ctx->max_ndp_size);
1408
1409			/* Zero out delayed NDP - signature checking will naturally fail. */
1410			ndp.ndp16 = memset(ctx->delayed_ndp16, 0, ctx->max_ndp_size);
1411		} else {
1412			nth.nth32 = (struct usb_cdc_ncm_nth32 *)skb_out->data;
1413			cdc_ncm_align_tail(skb_out, ctx->tx_ndp_modulus, 0, ctx->tx_curr_size - ctx->max_ndp_size);
1414			nth.nth32->dwNdpIndex = cpu_to_le32(skb_out->len);
1415			skb_put_data(skb_out, ctx->delayed_ndp32, ctx->max_ndp_size);
1416
1417			ndp.ndp32 = memset(ctx->delayed_ndp32, 0, ctx->max_ndp_size);
1418		}
1419	}
1420
1421	/* If collected data size is less or equal ctx->min_tx_pkt
1422	 * bytes, we send buffers as it is. If we get more data, it
1423	 * would be more efficient for USB HS mobile device with DMA
1424	 * engine to receive a full size NTB, than canceling DMA
1425	 * transfer and receiving a short packet.
1426	 *
1427	 * This optimization support is pointless if we end up sending
1428	 * a ZLP after full sized NTBs.
1429	 */
1430	if (!(dev->driver_info->flags & FLAG_SEND_ZLP) &&
1431	    skb_out->len > ctx->min_tx_pkt) {
1432		padding_count = ctx->tx_curr_size - skb_out->len;
1433		if (!WARN_ON(padding_count > ctx->tx_curr_size))
1434			skb_put_zero(skb_out, padding_count);
1435	} else if (skb_out->len < ctx->tx_curr_size &&
1436		   (skb_out->len % dev->maxpacket) == 0) {
1437		skb_put_u8(skb_out, 0);	/* force short packet */
1438	}
1439
1440	/* set final frame length */
1441	if (ctx->is_ndp16) {
1442		nth.nth16 = (struct usb_cdc_ncm_nth16 *)skb_out->data;
1443		nth.nth16->wBlockLength = cpu_to_le16(skb_out->len);
1444	} else {
1445		nth.nth32 = (struct usb_cdc_ncm_nth32 *)skb_out->data;
1446		nth.nth32->dwBlockLength = cpu_to_le32(skb_out->len);
1447	}
1448
1449	/* return skb */
1450	ctx->tx_curr_skb = NULL;
1451
1452	/* keep private stats: framing overhead and number of NTBs */
1453	ctx->tx_overhead += skb_out->len - ctx->tx_curr_frame_payload;
1454	ctx->tx_ntbs++;
1455
1456	/* usbnet will count all the framing overhead by default.
1457	 * Adjust the stats so that the tx_bytes counter show real
1458	 * payload data instead.
1459	 */
1460	usbnet_set_skb_tx_stats(skb_out, n,
1461				(long)ctx->tx_curr_frame_payload - skb_out->len);
1462
1463	return skb_out;
1464
1465alloc_failed:
1466	if (skb) {
1467		dev_kfree_skb_any(skb);
1468		dev->net->stats.tx_dropped++;
1469	}
1470exit_no_skb:
1471	/* Start timer, if there is a remaining non-empty skb */
1472	if (ctx->tx_curr_skb != NULL && n > 0)
1473		cdc_ncm_tx_timeout_start(ctx);
1474	return NULL;
1475}
1476EXPORT_SYMBOL_GPL(cdc_ncm_fill_tx_frame);
1477
1478static void cdc_ncm_tx_timeout_start(struct cdc_ncm_ctx *ctx)
1479{
1480	/* start timer, if not already started */
1481	if (!(hrtimer_active(&ctx->tx_timer) || atomic_read(&ctx->stop)))
1482		hrtimer_start(&ctx->tx_timer,
1483				ctx->timer_interval,
1484				HRTIMER_MODE_REL);
1485}
1486
1487static enum hrtimer_restart cdc_ncm_tx_timer_cb(struct hrtimer *timer)
1488{
1489	struct cdc_ncm_ctx *ctx =
1490			container_of(timer, struct cdc_ncm_ctx, tx_timer);
1491
1492	if (!atomic_read(&ctx->stop))
1493		tasklet_schedule(&ctx->bh);
1494	return HRTIMER_NORESTART;
1495}
1496
1497static void cdc_ncm_txpath_bh(struct tasklet_struct *t)
1498{
1499	struct cdc_ncm_ctx *ctx = from_tasklet(ctx, t, bh);
1500	struct usbnet *dev = ctx->dev;
1501
1502	spin_lock(&ctx->mtx);
1503	if (ctx->tx_timer_pending != 0) {
1504		ctx->tx_timer_pending--;
1505		cdc_ncm_tx_timeout_start(ctx);
1506		spin_unlock(&ctx->mtx);
1507	} else if (dev->net != NULL) {
1508		ctx->tx_reason_timeout++;	/* count reason for transmitting */
1509		spin_unlock(&ctx->mtx);
1510		netif_tx_lock_bh(dev->net);
1511		usbnet_start_xmit(NULL, dev->net);
1512		netif_tx_unlock_bh(dev->net);
1513	} else {
1514		spin_unlock(&ctx->mtx);
1515	}
1516}
1517
1518struct sk_buff *
1519cdc_ncm_tx_fixup(struct usbnet *dev, struct sk_buff *skb, gfp_t flags)
1520{
1521	struct sk_buff *skb_out;
1522	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
1523
1524	/*
1525	 * The Ethernet API we are using does not support transmitting
1526	 * multiple Ethernet frames in a single call. This driver will
1527	 * accumulate multiple Ethernet frames and send out a larger
1528	 * USB frame when the USB buffer is full or when a single jiffies
1529	 * timeout happens.
1530	 */
1531	if (ctx == NULL)
1532		goto error;
1533
1534	spin_lock_bh(&ctx->mtx);
1535
1536	if (ctx->is_ndp16)
1537		skb_out = cdc_ncm_fill_tx_frame(dev, skb, cpu_to_le32(USB_CDC_NCM_NDP16_NOCRC_SIGN));
1538	else
1539		skb_out = cdc_ncm_fill_tx_frame(dev, skb, cpu_to_le32(USB_CDC_NCM_NDP32_NOCRC_SIGN));
1540
1541	spin_unlock_bh(&ctx->mtx);
1542	return skb_out;
1543
1544error:
1545	if (skb != NULL)
1546		dev_kfree_skb_any(skb);
1547
1548	return NULL;
1549}
1550EXPORT_SYMBOL_GPL(cdc_ncm_tx_fixup);
1551
1552/* verify NTB header and return offset of first NDP, or negative error */
1553int cdc_ncm_rx_verify_nth16(struct cdc_ncm_ctx *ctx, struct sk_buff *skb_in)
1554{
1555	struct usbnet *dev = netdev_priv(skb_in->dev);
1556	struct usb_cdc_ncm_nth16 *nth16;
1557	int len;
1558	int ret = -EINVAL;
1559
1560	if (ctx == NULL)
1561		goto error;
1562
1563	if (skb_in->len < (sizeof(struct usb_cdc_ncm_nth16) +
1564					sizeof(struct usb_cdc_ncm_ndp16))) {
1565		netif_dbg(dev, rx_err, dev->net, "frame too short\n");
1566		goto error;
1567	}
1568
1569	nth16 = (struct usb_cdc_ncm_nth16 *)skb_in->data;
1570
1571	if (nth16->dwSignature != cpu_to_le32(USB_CDC_NCM_NTH16_SIGN)) {
1572		netif_dbg(dev, rx_err, dev->net,
1573			  "invalid NTH16 signature <%#010x>\n",
1574			  le32_to_cpu(nth16->dwSignature));
1575		goto error;
1576	}
1577
1578	len = le16_to_cpu(nth16->wBlockLength);
1579	if (len > ctx->rx_max) {
1580		netif_dbg(dev, rx_err, dev->net,
1581			  "unsupported NTB block length %u/%u\n", len,
1582			  ctx->rx_max);
1583		goto error;
1584	}
1585
1586	if ((ctx->rx_seq + 1) != le16_to_cpu(nth16->wSequence) &&
1587	    (ctx->rx_seq || le16_to_cpu(nth16->wSequence)) &&
1588	    !((ctx->rx_seq == 0xffff) && !le16_to_cpu(nth16->wSequence))) {
1589		netif_dbg(dev, rx_err, dev->net,
1590			  "sequence number glitch prev=%d curr=%d\n",
1591			  ctx->rx_seq, le16_to_cpu(nth16->wSequence));
1592	}
1593	ctx->rx_seq = le16_to_cpu(nth16->wSequence);
1594
1595	ret = le16_to_cpu(nth16->wNdpIndex);
1596error:
1597	return ret;
1598}
1599EXPORT_SYMBOL_GPL(cdc_ncm_rx_verify_nth16);
1600
1601int cdc_ncm_rx_verify_nth32(struct cdc_ncm_ctx *ctx, struct sk_buff *skb_in)
1602{
1603	struct usbnet *dev = netdev_priv(skb_in->dev);
1604	struct usb_cdc_ncm_nth32 *nth32;
1605	int len;
1606	int ret = -EINVAL;
1607
1608	if (ctx == NULL)
1609		goto error;
1610
1611	if (skb_in->len < (sizeof(struct usb_cdc_ncm_nth32) +
1612					sizeof(struct usb_cdc_ncm_ndp32))) {
1613		netif_dbg(dev, rx_err, dev->net, "frame too short\n");
1614		goto error;
1615	}
1616
1617	nth32 = (struct usb_cdc_ncm_nth32 *)skb_in->data;
1618
1619	if (nth32->dwSignature != cpu_to_le32(USB_CDC_NCM_NTH32_SIGN)) {
1620		netif_dbg(dev, rx_err, dev->net,
1621			  "invalid NTH32 signature <%#010x>\n",
1622			  le32_to_cpu(nth32->dwSignature));
1623		goto error;
1624	}
1625
1626	len = le32_to_cpu(nth32->dwBlockLength);
1627	if (len > ctx->rx_max) {
1628		netif_dbg(dev, rx_err, dev->net,
1629			  "unsupported NTB block length %u/%u\n", len,
1630			  ctx->rx_max);
1631		goto error;
1632	}
1633
1634	if ((ctx->rx_seq + 1) != le16_to_cpu(nth32->wSequence) &&
1635	    (ctx->rx_seq || le16_to_cpu(nth32->wSequence)) &&
1636	    !((ctx->rx_seq == 0xffff) && !le16_to_cpu(nth32->wSequence))) {
1637		netif_dbg(dev, rx_err, dev->net,
1638			  "sequence number glitch prev=%d curr=%d\n",
1639			  ctx->rx_seq, le16_to_cpu(nth32->wSequence));
1640	}
1641	ctx->rx_seq = le16_to_cpu(nth32->wSequence);
1642
1643	ret = le32_to_cpu(nth32->dwNdpIndex);
1644error:
1645	return ret;
1646}
1647EXPORT_SYMBOL_GPL(cdc_ncm_rx_verify_nth32);
1648
1649/* verify NDP header and return number of datagrams, or negative error */
1650int cdc_ncm_rx_verify_ndp16(struct sk_buff *skb_in, int ndpoffset)
1651{
1652	struct usbnet *dev = netdev_priv(skb_in->dev);
1653	struct usb_cdc_ncm_ndp16 *ndp16;
1654	int ret = -EINVAL;
1655
1656	if ((ndpoffset + sizeof(struct usb_cdc_ncm_ndp16)) > skb_in->len) {
1657		netif_dbg(dev, rx_err, dev->net, "invalid NDP offset  <%u>\n",
1658			  ndpoffset);
1659		goto error;
1660	}
1661	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);
1662
1663	if (le16_to_cpu(ndp16->wLength) < USB_CDC_NCM_NDP16_LENGTH_MIN) {
1664		netif_dbg(dev, rx_err, dev->net, "invalid DPT16 length <%u>\n",
1665			  le16_to_cpu(ndp16->wLength));
1666		goto error;
1667	}
1668
1669	ret = ((le16_to_cpu(ndp16->wLength) -
1670					sizeof(struct usb_cdc_ncm_ndp16)) /
1671					sizeof(struct usb_cdc_ncm_dpe16));
1672	ret--; /* we process NDP entries except for the last one */
1673
1674	if ((sizeof(struct usb_cdc_ncm_ndp16) +
1675	     ret * (sizeof(struct usb_cdc_ncm_dpe16))) > skb_in->len) {
1676		netif_dbg(dev, rx_err, dev->net, "Invalid nframes = %d\n", ret);
1677		ret = -EINVAL;
1678	}
1679
1680error:
1681	return ret;
1682}
1683EXPORT_SYMBOL_GPL(cdc_ncm_rx_verify_ndp16);
1684
1685/* verify NDP header and return number of datagrams, or negative error */
1686int cdc_ncm_rx_verify_ndp32(struct sk_buff *skb_in, int ndpoffset)
1687{
1688	struct usbnet *dev = netdev_priv(skb_in->dev);
1689	struct usb_cdc_ncm_ndp32 *ndp32;
1690	int ret = -EINVAL;
1691
1692	if ((ndpoffset + sizeof(struct usb_cdc_ncm_ndp32)) > skb_in->len) {
1693		netif_dbg(dev, rx_err, dev->net, "invalid NDP offset  <%u>\n",
1694			  ndpoffset);
1695		goto error;
1696	}
1697	ndp32 = (struct usb_cdc_ncm_ndp32 *)(skb_in->data + ndpoffset);
1698
1699	if (le16_to_cpu(ndp32->wLength) < USB_CDC_NCM_NDP32_LENGTH_MIN) {
1700		netif_dbg(dev, rx_err, dev->net, "invalid DPT32 length <%u>\n",
1701			  le16_to_cpu(ndp32->wLength));
1702		goto error;
1703	}
1704
1705	ret = ((le16_to_cpu(ndp32->wLength) -
1706					sizeof(struct usb_cdc_ncm_ndp32)) /
1707					sizeof(struct usb_cdc_ncm_dpe32));
1708	ret--; /* we process NDP entries except for the last one */
1709
1710	if ((sizeof(struct usb_cdc_ncm_ndp32) +
1711	     ret * (sizeof(struct usb_cdc_ncm_dpe32))) > skb_in->len) {
1712		netif_dbg(dev, rx_err, dev->net, "Invalid nframes = %d\n", ret);
1713		ret = -EINVAL;
1714	}
1715
1716error:
1717	return ret;
1718}
1719EXPORT_SYMBOL_GPL(cdc_ncm_rx_verify_ndp32);
1720
1721int cdc_ncm_rx_fixup(struct usbnet *dev, struct sk_buff *skb_in)
1722{
1723	struct sk_buff *skb;
1724	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
1725	unsigned int len;
1726	int nframes;
1727	int x;
1728	unsigned int offset;
1729	union {
1730		struct usb_cdc_ncm_ndp16 *ndp16;
1731		struct usb_cdc_ncm_ndp32 *ndp32;
1732	} ndp;
1733	union {
1734		struct usb_cdc_ncm_dpe16 *dpe16;
1735		struct usb_cdc_ncm_dpe32 *dpe32;
1736	} dpe;
1737
1738	int ndpoffset;
1739	int loopcount = 50; /* arbitrary max preventing infinite loop */
1740	u32 payload = 0;
1741
1742	if (ctx->is_ndp16)
1743		ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);
1744	else
1745		ndpoffset = cdc_ncm_rx_verify_nth32(ctx, skb_in);
1746
 
1747	if (ndpoffset < 0)
1748		goto error;
1749
1750next_ndp:
1751	if (ctx->is_ndp16) {
1752		nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);
1753		if (nframes < 0)
1754			goto error;
1755
1756		ndp.ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);
1757
1758		if (ndp.ndp16->dwSignature != cpu_to_le32(USB_CDC_NCM_NDP16_NOCRC_SIGN)) {
1759			netif_dbg(dev, rx_err, dev->net,
1760				  "invalid DPT16 signature <%#010x>\n",
1761				  le32_to_cpu(ndp.ndp16->dwSignature));
1762			goto err_ndp;
1763		}
1764		dpe.dpe16 = ndp.ndp16->dpe16;
1765	} else {
1766		nframes = cdc_ncm_rx_verify_ndp32(skb_in, ndpoffset);
1767		if (nframes < 0)
1768			goto error;
1769
1770		ndp.ndp32 = (struct usb_cdc_ncm_ndp32 *)(skb_in->data + ndpoffset);
1771
1772		if (ndp.ndp32->dwSignature != cpu_to_le32(USB_CDC_NCM_NDP32_NOCRC_SIGN)) {
1773			netif_dbg(dev, rx_err, dev->net,
1774				  "invalid DPT32 signature <%#010x>\n",
1775				  le32_to_cpu(ndp.ndp32->dwSignature));
1776			goto err_ndp;
1777		}
1778		dpe.dpe32 = ndp.ndp32->dpe32;
1779	}
1780
1781	for (x = 0; x < nframes; x++) {
1782		if (ctx->is_ndp16) {
1783			offset = le16_to_cpu(dpe.dpe16->wDatagramIndex);
1784			len = le16_to_cpu(dpe.dpe16->wDatagramLength);
1785		} else {
1786			offset = le32_to_cpu(dpe.dpe32->dwDatagramIndex);
1787			len = le32_to_cpu(dpe.dpe32->dwDatagramLength);
1788		}
 
 
 
1789
1790		/*
1791		 * CDC NCM ch. 3.7
1792		 * All entries after first NULL entry are to be ignored
1793		 */
1794		if ((offset == 0) || (len == 0)) {
1795			if (!x)
1796				goto err_ndp; /* empty NTB */
1797			break;
1798		}
1799
1800		/* sanity checking - watch out for integer wrap*/
1801		if ((offset > skb_in->len) || (len > skb_in->len - offset) ||
1802				(len > ctx->rx_max) || (len < ETH_HLEN)) {
1803			netif_dbg(dev, rx_err, dev->net,
1804				  "invalid frame detected (ignored) offset[%u]=%u, length=%u, skb=%p\n",
1805				  x, offset, len, skb_in);
1806			if (!x)
1807				goto err_ndp;
1808			break;
1809
1810		} else {
1811			/* create a fresh copy to reduce truesize */
1812			skb = netdev_alloc_skb_ip_align(dev->net,  len);
1813			if (!skb)
1814				goto error;
1815			skb_put_data(skb, skb_in->data + offset, len);
 
 
1816			usbnet_skb_return(dev, skb);
1817			payload += len;	/* count payload bytes in this NTB */
1818		}
1819
1820		if (ctx->is_ndp16)
1821			dpe.dpe16++;
1822		else
1823			dpe.dpe32++;
1824	}
1825err_ndp:
1826	/* are there more NDPs to process? */
1827	if (ctx->is_ndp16)
1828		ndpoffset = le16_to_cpu(ndp.ndp16->wNextNdpIndex);
1829	else
1830		ndpoffset = le32_to_cpu(ndp.ndp32->dwNextNdpIndex);
1831
1832	if (ndpoffset && loopcount--)
1833		goto next_ndp;
1834
1835	/* update stats */
1836	ctx->rx_overhead += skb_in->len - payload;
1837	ctx->rx_ntbs++;
1838
1839	return 1;
1840error:
1841	return 0;
1842}
1843EXPORT_SYMBOL_GPL(cdc_ncm_rx_fixup);
1844
1845static void
1846cdc_ncm_speed_change(struct usbnet *dev,
1847		     struct usb_cdc_speed_change *data)
1848{
1849	/* RTL8156 shipped before 2021 sends notification about every 32ms. */
1850	dev->rx_speed = le32_to_cpu(data->DLBitRRate);
1851	dev->tx_speed = le32_to_cpu(data->ULBitRate);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1852}
1853
1854static void cdc_ncm_status(struct usbnet *dev, struct urb *urb)
1855{
 
1856	struct usb_cdc_notification *event;
1857
 
 
1858	if (urb->actual_length < sizeof(*event))
1859		return;
1860
1861	/* test for split data in 8-byte chunks */
1862	if (test_and_clear_bit(EVENT_STS_SPLIT, &dev->flags)) {
1863		cdc_ncm_speed_change(dev,
1864		      (struct usb_cdc_speed_change *)urb->transfer_buffer);
1865		return;
1866	}
1867
1868	event = urb->transfer_buffer;
1869
1870	switch (event->bNotificationType) {
1871	case USB_CDC_NOTIFY_NETWORK_CONNECTION:
1872		/*
1873		 * According to the CDC NCM specification ch.7.1
1874		 * USB_CDC_NOTIFY_NETWORK_CONNECTION notification shall be
1875		 * sent by device after USB_CDC_NOTIFY_SPEED_CHANGE.
1876		 */
1877		/* RTL8156 shipped before 2021 sends notification about
1878		 * every 32ms. Don't forward notification if state is same.
1879		 */
1880		if (netif_carrier_ok(dev->net) != !!event->wValue)
1881			usbnet_link_change(dev, !!event->wValue, 0);
1882		break;
1883
1884	case USB_CDC_NOTIFY_SPEED_CHANGE:
1885		if (urb->actual_length < (sizeof(*event) +
1886					sizeof(struct usb_cdc_speed_change)))
1887			set_bit(EVENT_STS_SPLIT, &dev->flags);
1888		else
1889			cdc_ncm_speed_change(dev,
1890					     (struct usb_cdc_speed_change *)&event[1]);
1891		break;
1892
1893	default:
1894		dev_dbg(&dev->udev->dev,
1895			"NCM: unexpected notification 0x%02x!\n",
1896			event->bNotificationType);
1897		break;
1898	}
1899}
1900
1901static const struct driver_info cdc_ncm_info = {
1902	.description = "CDC NCM (NO ZLP)",
1903	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET
1904			| FLAG_LINK_INTR | FLAG_ETHER,
1905	.bind = cdc_ncm_bind,
1906	.unbind = cdc_ncm_unbind,
1907	.manage_power = usbnet_manage_power,
1908	.status = cdc_ncm_status,
1909	.rx_fixup = cdc_ncm_rx_fixup,
1910	.tx_fixup = cdc_ncm_tx_fixup,
1911	.set_rx_mode = usbnet_cdc_update_filter,
1912};
1913
1914/* Same as cdc_ncm_info, but with FLAG_SEND_ZLP  */
1915static const struct driver_info cdc_ncm_zlp_info = {
1916	.description = "CDC NCM (SEND ZLP)",
1917	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET
1918			| FLAG_LINK_INTR | FLAG_ETHER | FLAG_SEND_ZLP,
 
 
 
 
 
1919	.bind = cdc_ncm_bind,
1920	.unbind = cdc_ncm_unbind,
 
1921	.manage_power = usbnet_manage_power,
1922	.status = cdc_ncm_status,
1923	.rx_fixup = cdc_ncm_rx_fixup,
1924	.tx_fixup = cdc_ncm_tx_fixup,
1925	.set_rx_mode = usbnet_cdc_update_filter,
1926};
1927
1928/* Same as cdc_ncm_info, but with FLAG_WWAN */
1929static const struct driver_info wwan_info = {
1930	.description = "Mobile Broadband Network Device",
1931	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET
1932			| FLAG_LINK_INTR | FLAG_WWAN,
1933	.bind = cdc_ncm_bind,
1934	.unbind = cdc_ncm_unbind,
 
1935	.manage_power = usbnet_manage_power,
1936	.status = cdc_ncm_status,
1937	.rx_fixup = cdc_ncm_rx_fixup,
1938	.tx_fixup = cdc_ncm_tx_fixup,
1939	.set_rx_mode = usbnet_cdc_update_filter,
1940};
1941
1942/* Same as wwan_info, but with FLAG_NOARP  */
1943static const struct driver_info wwan_noarp_info = {
1944	.description = "Mobile Broadband Network Device (NO ARP)",
1945	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET
1946			| FLAG_LINK_INTR | FLAG_WWAN | FLAG_NOARP,
1947	.bind = cdc_ncm_bind,
1948	.unbind = cdc_ncm_unbind,
 
1949	.manage_power = usbnet_manage_power,
1950	.status = cdc_ncm_status,
1951	.rx_fixup = cdc_ncm_rx_fixup,
1952	.tx_fixup = cdc_ncm_tx_fixup,
1953	.set_rx_mode = usbnet_cdc_update_filter,
1954};
1955
1956static const struct usb_device_id cdc_devs[] = {
1957	/* Ericsson MBM devices like F5521gw */
1958	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
1959		| USB_DEVICE_ID_MATCH_VENDOR,
1960	  .idVendor = 0x0bdb,
1961	  .bInterfaceClass = USB_CLASS_COMM,
1962	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
1963	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
1964	  .driver_info = (unsigned long) &wwan_info,
1965	},
1966
1967	/* Telit LE910 V2 */
1968	{ USB_DEVICE_AND_INTERFACE_INFO(0x1bc7, 0x0036,
1969		USB_CLASS_COMM,
1970		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
1971	  .driver_info = (unsigned long)&wwan_noarp_info,
1972	},
1973
1974	/* DW5812 LTE Verizon Mobile Broadband Card
1975	 * Unlike DW5550 this device requires FLAG_NOARP
1976	 */
1977	{ USB_DEVICE_AND_INTERFACE_INFO(0x413c, 0x81bb,
1978		USB_CLASS_COMM,
1979		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
1980	  .driver_info = (unsigned long)&wwan_noarp_info,
1981	},
1982
1983	/* DW5813 LTE AT&T Mobile Broadband Card
1984	 * Unlike DW5550 this device requires FLAG_NOARP
1985	 */
1986	{ USB_DEVICE_AND_INTERFACE_INFO(0x413c, 0x81bc,
1987		USB_CLASS_COMM,
1988		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
1989	  .driver_info = (unsigned long)&wwan_noarp_info,
1990	},
1991
1992	/* Dell branded MBM devices like DW5550 */
1993	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
1994		| USB_DEVICE_ID_MATCH_VENDOR,
1995	  .idVendor = 0x413c,
1996	  .bInterfaceClass = USB_CLASS_COMM,
1997	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
1998	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
1999	  .driver_info = (unsigned long) &wwan_info,
2000	},
2001
2002	/* Toshiba branded MBM devices */
2003	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
2004		| USB_DEVICE_ID_MATCH_VENDOR,
2005	  .idVendor = 0x0930,
2006	  .bInterfaceClass = USB_CLASS_COMM,
2007	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
2008	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
2009	  .driver_info = (unsigned long) &wwan_info,
2010	},
2011
2012	/* tag Huawei devices as wwan */
2013	{ USB_VENDOR_AND_INTERFACE_INFO(0x12d1,
2014					USB_CLASS_COMM,
2015					USB_CDC_SUBCLASS_NCM,
2016					USB_CDC_PROTO_NONE),
2017	  .driver_info = (unsigned long)&wwan_info,
2018	},
2019
2020	/* Infineon(now Intel) HSPA Modem platform */
2021	{ USB_DEVICE_AND_INTERFACE_INFO(0x1519, 0x0443,
2022		USB_CLASS_COMM,
2023		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
2024	  .driver_info = (unsigned long)&wwan_noarp_info,
2025	},
2026
2027	/* u-blox TOBY-L4 */
2028	{ USB_DEVICE_AND_INTERFACE_INFO(0x1546, 0x1010,
2029		USB_CLASS_COMM,
2030		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
2031	  .driver_info = (unsigned long)&wwan_info,
2032	},
2033
2034	/* DisplayLink docking stations */
2035	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
2036		| USB_DEVICE_ID_MATCH_VENDOR,
2037	  .idVendor = 0x17e9,
2038	  .bInterfaceClass = USB_CLASS_COMM,
2039	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
2040	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
2041	  .driver_info = (unsigned long)&cdc_ncm_zlp_info,
2042	},
2043
2044	/* Generic CDC-NCM devices */
2045	{ USB_INTERFACE_INFO(USB_CLASS_COMM,
2046		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
2047		.driver_info = (unsigned long)&cdc_ncm_info,
2048	},
2049	{
2050	},
2051};
2052MODULE_DEVICE_TABLE(usb, cdc_devs);
2053
2054static struct usb_driver cdc_ncm_driver = {
2055	.name = "cdc_ncm",
2056	.id_table = cdc_devs,
2057	.probe = usbnet_probe,
2058	.disconnect = usbnet_disconnect,
2059	.suspend = usbnet_suspend,
2060	.resume = usbnet_resume,
2061	.reset_resume =	usbnet_resume,
2062	.supports_autosuspend = 1,
2063	.disable_hub_initiated_lpm = 1,
2064};
2065
2066module_usb_driver(cdc_ncm_driver);
2067
2068MODULE_AUTHOR("Hans Petter Selasky");
2069MODULE_DESCRIPTION("USB CDC NCM host driver");
2070MODULE_LICENSE("Dual BSD/GPL");
v3.15
   1/*
   2 * cdc_ncm.c
   3 *
   4 * Copyright (C) ST-Ericsson 2010-2012
   5 * Contact: Alexey Orishko <alexey.orishko@stericsson.com>
   6 * Original author: Hans Petter Selasky <hans.petter.selasky@stericsson.com>
   7 *
   8 * USB Host Driver for Network Control Model (NCM)
   9 * http://www.usb.org/developers/devclass_docs/NCM10.zip
  10 *
  11 * The NCM encoding, decoding and initialization logic
  12 * derives from FreeBSD 8.x. if_cdce.c and if_cdcereg.h
  13 *
  14 * This software is available to you under a choice of one of two
  15 * licenses. You may choose this file to be licensed under the terms
  16 * of the GNU General Public License (GPL) Version 2 or the 2-clause
  17 * BSD license listed below:
  18 *
  19 * Redistribution and use in source and binary forms, with or without
  20 * modification, are permitted provided that the following conditions
  21 * are met:
  22 * 1. Redistributions of source code must retain the above copyright
  23 *    notice, this list of conditions and the following disclaimer.
  24 * 2. Redistributions in binary form must reproduce the above copyright
  25 *    notice, this list of conditions and the following disclaimer in the
  26 *    documentation and/or other materials provided with the distribution.
  27 *
  28 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  29 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  30 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  31 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  32 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  33 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  34 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  35 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  36 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  37 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  38 * SUCH DAMAGE.
  39 */
  40
  41#include <linux/module.h>
  42#include <linux/netdevice.h>
  43#include <linux/ctype.h>
 
  44#include <linux/ethtool.h>
 
  45#include <linux/workqueue.h>
  46#include <linux/mii.h>
  47#include <linux/crc32.h>
  48#include <linux/usb.h>
  49#include <linux/hrtimer.h>
  50#include <linux/atomic.h>
  51#include <linux/usb/usbnet.h>
  52#include <linux/usb/cdc.h>
  53#include <linux/usb/cdc_ncm.h>
  54
  55#if IS_ENABLED(CONFIG_USB_NET_CDC_MBIM)
  56static bool prefer_mbim = true;
  57#else
  58static bool prefer_mbim;
  59#endif
  60module_param(prefer_mbim, bool, S_IRUGO | S_IWUSR);
  61MODULE_PARM_DESC(prefer_mbim, "Prefer MBIM setting on dual NCM/MBIM functions");
  62
  63static void cdc_ncm_txpath_bh(unsigned long param);
  64static void cdc_ncm_tx_timeout_start(struct cdc_ncm_ctx *ctx);
  65static enum hrtimer_restart cdc_ncm_tx_timer_cb(struct hrtimer *hr_timer);
  66static struct usb_driver cdc_ncm_driver;
  67
  68static int cdc_ncm_setup(struct usbnet *dev)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  69{
  70	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 
  71	u32 val;
  72	u8 flags;
  73	u8 iface_no;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  74	int err;
  75	int eth_hlen;
  76	u16 mbim_mtu;
  77	u16 ntb_fmt_supported;
  78	__le16 max_datagram_size;
  79
  80	iface_no = ctx->control->cur_altsetting->desc.bInterfaceNumber;
  81
  82	err = usbnet_read_cmd(dev, USB_CDC_GET_NTB_PARAMETERS,
  83			      USB_TYPE_CLASS | USB_DIR_IN
  84			      |USB_RECIP_INTERFACE,
  85			      0, iface_no, &ctx->ncm_parm,
  86			      sizeof(ctx->ncm_parm));
  87	if (err < 0) {
  88		dev_err(&dev->intf->dev, "failed GET_NTB_PARAMETERS\n");
  89		return err; /* GET_NTB_PARAMETERS is required */
  90	}
  91
  92	/* read correct set of parameters according to device mode */
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  93	ctx->rx_max = le32_to_cpu(ctx->ncm_parm.dwNtbInMaxSize);
  94	ctx->tx_max = le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize);
  95	ctx->tx_remainder = le16_to_cpu(ctx->ncm_parm.wNdpOutPayloadRemainder);
  96	ctx->tx_modulus = le16_to_cpu(ctx->ncm_parm.wNdpOutDivisor);
  97	ctx->tx_ndp_modulus = le16_to_cpu(ctx->ncm_parm.wNdpOutAlignment);
  98	/* devices prior to NCM Errata shall set this field to zero */
  99	ctx->tx_max_datagrams = le16_to_cpu(ctx->ncm_parm.wNtbOutMaxDatagrams);
 100	ntb_fmt_supported = le16_to_cpu(ctx->ncm_parm.bmNtbFormatsSupported);
 101
 102	/* there are some minor differences in NCM and MBIM defaults */
 103	if (cdc_ncm_comm_intf_is_mbim(ctx->control->cur_altsetting)) {
 104		if (!ctx->mbim_desc)
 105			return -EINVAL;
 106		eth_hlen = 0;
 107		flags = ctx->mbim_desc->bmNetworkCapabilities;
 108		ctx->max_datagram_size = le16_to_cpu(ctx->mbim_desc->wMaxSegmentSize);
 109		if (ctx->max_datagram_size < CDC_MBIM_MIN_DATAGRAM_SIZE)
 110			ctx->max_datagram_size = CDC_MBIM_MIN_DATAGRAM_SIZE;
 111	} else {
 112		if (!ctx->func_desc)
 113			return -EINVAL;
 114		eth_hlen = ETH_HLEN;
 115		flags = ctx->func_desc->bmNetworkCapabilities;
 116		ctx->max_datagram_size = le16_to_cpu(ctx->ether_desc->wMaxSegmentSize);
 117		if (ctx->max_datagram_size < CDC_NCM_MIN_DATAGRAM_SIZE)
 118			ctx->max_datagram_size = CDC_NCM_MIN_DATAGRAM_SIZE;
 119	}
 120
 121	/* common absolute max for NCM and MBIM */
 122	if (ctx->max_datagram_size > CDC_NCM_MAX_DATAGRAM_SIZE)
 123		ctx->max_datagram_size = CDC_NCM_MAX_DATAGRAM_SIZE;
 124
 125	dev_dbg(&dev->intf->dev,
 126		"dwNtbInMaxSize=%u dwNtbOutMaxSize=%u wNdpOutPayloadRemainder=%u wNdpOutDivisor=%u wNdpOutAlignment=%u wNtbOutMaxDatagrams=%u flags=0x%x\n",
 127		ctx->rx_max, ctx->tx_max, ctx->tx_remainder, ctx->tx_modulus,
 128		ctx->tx_ndp_modulus, ctx->tx_max_datagrams, flags);
 129
 130	/* max count of tx datagrams */
 131	if ((ctx->tx_max_datagrams == 0) ||
 132			(ctx->tx_max_datagrams > CDC_NCM_DPT_DATAGRAMS_MAX))
 133		ctx->tx_max_datagrams = CDC_NCM_DPT_DATAGRAMS_MAX;
 134
 135	/* verify maximum size of received NTB in bytes */
 136	if (ctx->rx_max < USB_CDC_NCM_NTB_MIN_IN_SIZE) {
 137		dev_dbg(&dev->intf->dev, "Using min receive length=%d\n",
 138			USB_CDC_NCM_NTB_MIN_IN_SIZE);
 139		ctx->rx_max = USB_CDC_NCM_NTB_MIN_IN_SIZE;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 140	}
 141
 142	if (ctx->rx_max > CDC_NCM_NTB_MAX_SIZE_RX) {
 143		dev_dbg(&dev->intf->dev, "Using default maximum receive length=%d\n",
 144			CDC_NCM_NTB_MAX_SIZE_RX);
 145		ctx->rx_max = CDC_NCM_NTB_MAX_SIZE_RX;
 146	}
 
 
 
 
 147
 148	/* inform device about NTB input size changes */
 149	if (ctx->rx_max != le32_to_cpu(ctx->ncm_parm.dwNtbInMaxSize)) {
 150		__le32 dwNtbInMaxSize = cpu_to_le32(ctx->rx_max);
 151
 152		err = usbnet_write_cmd(dev, USB_CDC_SET_NTB_INPUT_SIZE,
 153				       USB_TYPE_CLASS | USB_DIR_OUT
 154				       | USB_RECIP_INTERFACE,
 155				       0, iface_no, &dwNtbInMaxSize, 4);
 156		if (err < 0)
 157			dev_dbg(&dev->intf->dev, "Setting NTB Input Size failed\n");
 158	}
 
 159
 160	/* verify maximum size of transmitted NTB in bytes */
 161	if (ctx->tx_max > CDC_NCM_NTB_MAX_SIZE_TX) {
 162		dev_dbg(&dev->intf->dev, "Using default maximum transmit length=%d\n",
 163			CDC_NCM_NTB_MAX_SIZE_TX);
 164		ctx->tx_max = CDC_NCM_NTB_MAX_SIZE_TX;
 165	}
 166
 167	/*
 168	 * verify that the structure alignment is:
 169	 * - power of two
 170	 * - not greater than the maximum transmit length
 171	 * - not less than four bytes
 172	 */
 173	val = ctx->tx_ndp_modulus;
 174
 175	if ((val < USB_CDC_NCM_NDP_ALIGN_MIN_SIZE) ||
 176	    (val != ((-val) & val)) || (val >= ctx->tx_max)) {
 177		dev_dbg(&dev->intf->dev, "Using default alignment: 4 bytes\n");
 178		ctx->tx_ndp_modulus = USB_CDC_NCM_NDP_ALIGN_MIN_SIZE;
 179	}
 180
 181	/*
 182	 * verify that the payload alignment is:
 183	 * - power of two
 184	 * - not greater than the maximum transmit length
 185	 * - not less than four bytes
 186	 */
 187	val = ctx->tx_modulus;
 188
 189	if ((val < USB_CDC_NCM_NDP_ALIGN_MIN_SIZE) ||
 190	    (val != ((-val) & val)) || (val >= ctx->tx_max)) {
 191		dev_dbg(&dev->intf->dev, "Using default transmit modulus: 4 bytes\n");
 192		ctx->tx_modulus = USB_CDC_NCM_NDP_ALIGN_MIN_SIZE;
 193	}
 194
 195	/* verify the payload remainder */
 196	if (ctx->tx_remainder >= ctx->tx_modulus) {
 197		dev_dbg(&dev->intf->dev, "Using default transmit remainder: 0 bytes\n");
 198		ctx->tx_remainder = 0;
 199	}
 200
 201	/* adjust TX-remainder according to NCM specification. */
 202	ctx->tx_remainder = ((ctx->tx_remainder - eth_hlen) &
 203			     (ctx->tx_modulus - 1));
 
 204
 205	/* additional configuration */
 
 
 
 206
 207	/* set CRC Mode */
 208	if (flags & USB_CDC_NCM_NCAP_CRC_MODE) {
 209		err = usbnet_write_cmd(dev, USB_CDC_SET_CRC_MODE,
 210				       USB_TYPE_CLASS | USB_DIR_OUT
 211				       | USB_RECIP_INTERFACE,
 212				       USB_CDC_NCM_CRC_NOT_APPENDED,
 213				       iface_no, NULL, 0);
 214		if (err < 0)
 215			dev_dbg(&dev->intf->dev, "Setting CRC mode off failed\n");
 216	}
 217
 218	/* set NTB format, if both formats are supported */
 219	if (ntb_fmt_supported & USB_CDC_NCM_NTH32_SIGN) {
 220		err = usbnet_write_cmd(dev, USB_CDC_SET_NTB_FORMAT,
 221				       USB_TYPE_CLASS | USB_DIR_OUT
 222				       | USB_RECIP_INTERFACE,
 223				       USB_CDC_NCM_NTB16_FORMAT,
 224				       iface_no, NULL, 0);
 225		if (err < 0)
 226			dev_dbg(&dev->intf->dev, "Setting NTB format to 16-bit failed\n");
 227	}
 228
 229	/* inform the device about the selected Max Datagram Size */
 230	if (!(flags & USB_CDC_NCM_NCAP_MAX_DATAGRAM_SIZE))
 231		goto out;
 232
 233	/* read current mtu value from device */
 234	err = usbnet_read_cmd(dev, USB_CDC_GET_MAX_DATAGRAM_SIZE,
 235			      USB_TYPE_CLASS | USB_DIR_IN | USB_RECIP_INTERFACE,
 236			      0, iface_no, &max_datagram_size, 2);
 237	if (err < 0) {
 238		dev_dbg(&dev->intf->dev, "GET_MAX_DATAGRAM_SIZE failed\n");
 239		goto out;
 240	}
 241
 242	if (le16_to_cpu(max_datagram_size) == ctx->max_datagram_size)
 243		goto out;
 244
 245	max_datagram_size = cpu_to_le16(ctx->max_datagram_size);
 246	err = usbnet_write_cmd(dev, USB_CDC_SET_MAX_DATAGRAM_SIZE,
 247			       USB_TYPE_CLASS | USB_DIR_OUT | USB_RECIP_INTERFACE,
 248			       0, iface_no, &max_datagram_size, 2);
 249	if (err < 0)
 250		dev_dbg(&dev->intf->dev, "SET_MAX_DATAGRAM_SIZE failed\n");
 251
 252out:
 253	/* set MTU to max supported by the device if necessary */
 254	if (dev->net->mtu > ctx->max_datagram_size - eth_hlen)
 255		dev->net->mtu = ctx->max_datagram_size - eth_hlen;
 256
 257	/* do not exceed operater preferred MTU */
 258	if (ctx->mbim_extended_desc) {
 259		mbim_mtu = le16_to_cpu(ctx->mbim_extended_desc->wMTU);
 260		if (mbim_mtu != 0 && mbim_mtu < dev->net->mtu)
 261			dev->net->mtu = mbim_mtu;
 262	}
 263
 
 
 264	return 0;
 265}
 266
 267static void
 268cdc_ncm_find_endpoints(struct usbnet *dev, struct usb_interface *intf)
 269{
 270	struct usb_host_endpoint *e, *in = NULL, *out = NULL;
 271	u8 ep;
 272
 273	for (ep = 0; ep < intf->cur_altsetting->desc.bNumEndpoints; ep++) {
 
 
 
 
 
 274
 275		e = intf->cur_altsetting->endpoint + ep;
 276		switch (e->desc.bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) {
 277		case USB_ENDPOINT_XFER_INT:
 278			if (usb_endpoint_dir_in(&e->desc)) {
 279				if (!dev->status)
 280					dev->status = e;
 281			}
 282			break;
 283
 284		case USB_ENDPOINT_XFER_BULK:
 285			if (usb_endpoint_dir_in(&e->desc)) {
 286				if (!in)
 287					in = e;
 288			} else {
 289				if (!out)
 290					out = e;
 291			}
 292			break;
 293
 294		default:
 295			break;
 296		}
 297	}
 298	if (in && !dev->in)
 299		dev->in = usb_rcvbulkpipe(dev->udev,
 300					  in->desc.bEndpointAddress &
 301					  USB_ENDPOINT_NUMBER_MASK);
 302	if (out && !dev->out)
 303		dev->out = usb_sndbulkpipe(dev->udev,
 304					   out->desc.bEndpointAddress &
 305					   USB_ENDPOINT_NUMBER_MASK);
 306}
 307
 308static void cdc_ncm_free(struct cdc_ncm_ctx *ctx)
 309{
 310	if (ctx == NULL)
 311		return;
 312
 313	if (ctx->tx_rem_skb != NULL) {
 314		dev_kfree_skb_any(ctx->tx_rem_skb);
 315		ctx->tx_rem_skb = NULL;
 316	}
 317
 318	if (ctx->tx_curr_skb != NULL) {
 319		dev_kfree_skb_any(ctx->tx_curr_skb);
 320		ctx->tx_curr_skb = NULL;
 321	}
 322
 
 
 
 
 
 323	kfree(ctx);
 324}
 325
 326int cdc_ncm_bind_common(struct usbnet *dev, struct usb_interface *intf, u8 data_altsetting)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 327{
 328	const struct usb_cdc_union_desc *union_desc = NULL;
 329	struct cdc_ncm_ctx *ctx;
 330	struct usb_driver *driver;
 331	u8 *buf;
 332	int len;
 333	int temp;
 334	u8 iface_no;
 
 335
 336	ctx = kzalloc(sizeof(*ctx), GFP_KERNEL);
 337	if (!ctx)
 338		return -ENOMEM;
 339
 
 
 340	hrtimer_init(&ctx->tx_timer, CLOCK_MONOTONIC, HRTIMER_MODE_REL);
 341	ctx->tx_timer.function = &cdc_ncm_tx_timer_cb;
 342	ctx->bh.data = (unsigned long)dev;
 343	ctx->bh.func = cdc_ncm_txpath_bh;
 344	atomic_set(&ctx->stop, 0);
 345	spin_lock_init(&ctx->mtx);
 346
 347	/* store ctx pointer in device data field */
 348	dev->data[0] = (unsigned long)ctx;
 349
 350	/* only the control interface can be successfully probed */
 351	ctx->control = intf;
 352
 353	/* get some pointers */
 354	driver = driver_of(intf);
 355	buf = intf->cur_altsetting->extra;
 356	len = intf->cur_altsetting->extralen;
 357
 358	/* parse through descriptors associated with control interface */
 359	while ((len > 0) && (buf[0] > 2) && (buf[0] <= len)) {
 360
 361		if (buf[1] != USB_DT_CS_INTERFACE)
 362			goto advance;
 363
 364		switch (buf[2]) {
 365		case USB_CDC_UNION_TYPE:
 366			if (buf[0] < sizeof(*union_desc))
 367				break;
 368
 369			union_desc = (const struct usb_cdc_union_desc *)buf;
 370			/* the master must be the interface we are probing */
 371			if (intf->cur_altsetting->desc.bInterfaceNumber !=
 372			    union_desc->bMasterInterface0) {
 373				dev_dbg(&intf->dev, "bogus CDC Union\n");
 374				goto error;
 375			}
 376			ctx->data = usb_ifnum_to_if(dev->udev,
 377						    union_desc->bSlaveInterface0);
 378			break;
 379
 380		case USB_CDC_ETHERNET_TYPE:
 381			if (buf[0] < sizeof(*(ctx->ether_desc)))
 382				break;
 383
 384			ctx->ether_desc =
 385					(const struct usb_cdc_ether_desc *)buf;
 386			break;
 387
 388		case USB_CDC_NCM_TYPE:
 389			if (buf[0] < sizeof(*(ctx->func_desc)))
 390				break;
 391
 392			ctx->func_desc = (const struct usb_cdc_ncm_desc *)buf;
 393			break;
 394
 395		case USB_CDC_MBIM_TYPE:
 396			if (buf[0] < sizeof(*(ctx->mbim_desc)))
 397				break;
 398
 399			ctx->mbim_desc = (const struct usb_cdc_mbim_desc *)buf;
 400			break;
 401
 402		case USB_CDC_MBIM_EXTENDED_TYPE:
 403			if (buf[0] < sizeof(*(ctx->mbim_extended_desc)))
 404				break;
 405
 406			ctx->mbim_extended_desc =
 407				(const struct usb_cdc_mbim_extended_desc *)buf;
 408			break;
 409
 410		default:
 411			break;
 412		}
 413advance:
 414		/* advance to next descriptor */
 415		temp = buf[0];
 416		buf += temp;
 417		len -= temp;
 418	}
 419
 420	/* some buggy devices have an IAD but no CDC Union */
 421	if (!union_desc && intf->intf_assoc && intf->intf_assoc->bInterfaceCount == 2) {
 422		ctx->data = usb_ifnum_to_if(dev->udev, intf->cur_altsetting->desc.bInterfaceNumber + 1);
 423		dev_dbg(&intf->dev, "CDC Union missing - got slave from IAD\n");
 424	}
 425
 426	/* check if we got everything */
 427	if (!ctx->data || (!ctx->mbim_desc && !ctx->ether_desc)) {
 428		dev_dbg(&intf->dev, "CDC descriptors missing\n");
 429		goto error;
 430	}
 
 
 
 
 
 
 
 
 
 
 
 431
 432	/* claim data interface, if different from control */
 433	if (ctx->data != ctx->control) {
 434		temp = usb_driver_claim_interface(driver, ctx->data, dev);
 435		if (temp) {
 436			dev_dbg(&intf->dev, "failed to claim data intf\n");
 437			goto error;
 438		}
 439	}
 440
 441	iface_no = ctx->data->cur_altsetting->desc.bInterfaceNumber;
 442
 443	/* reset data interface */
 
 
 
 
 
 
 
 
 
 
 
 444	temp = usb_set_interface(dev->udev, iface_no, 0);
 445	if (temp) {
 446		dev_dbg(&intf->dev, "set interface failed\n");
 447		goto error2;
 448	}
 449
 450	/* initialize data interface */
 451	if (cdc_ncm_setup(dev))
 452		goto error2;
 453
 
 
 
 
 
 
 
 454	/* configure data interface */
 455	temp = usb_set_interface(dev->udev, iface_no, data_altsetting);
 456	if (temp) {
 457		dev_dbg(&intf->dev, "set interface failed\n");
 458		goto error2;
 459	}
 460
 461	cdc_ncm_find_endpoints(dev, ctx->data);
 462	cdc_ncm_find_endpoints(dev, ctx->control);
 463	if (!dev->in || !dev->out || !dev->status) {
 464		dev_dbg(&intf->dev, "failed to collect endpoints\n");
 465		goto error2;
 466	}
 467
 468	usb_set_intfdata(ctx->data, dev);
 469	usb_set_intfdata(ctx->control, dev);
 470
 471	if (ctx->ether_desc) {
 472		temp = usbnet_get_ethernet_addr(dev, ctx->ether_desc->iMACAddress);
 473		if (temp) {
 474			dev_dbg(&intf->dev, "failed to get mac address\n");
 475			goto error2;
 476		}
 477		dev_info(&intf->dev, "MAC-Address: %pM\n", dev->net->dev_addr);
 478	}
 479
 480	/* usbnet use these values for sizing tx/rx queues */
 481	dev->hard_mtu = ctx->tx_max;
 482	dev->rx_urb_size = ctx->rx_max;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 483
 484	/* cdc_ncm_setup will override dwNtbOutMaxSize if it is
 485	 * outside the sane range. Adding a pad byte here if necessary
 486	 * simplifies the handling in cdc_ncm_fill_tx_frame, making
 487	 * tx_max always represent the real skb max size.
 488	 */
 489	if (ctx->tx_max != le32_to_cpu(ctx->ncm_parm.dwNtbOutMaxSize) &&
 490	    ctx->tx_max % usb_maxpacket(dev->udev, dev->out, 1) == 0)
 491		ctx->tx_max++;
 492
 493	return 0;
 494
 495error2:
 496	usb_set_intfdata(ctx->control, NULL);
 497	usb_set_intfdata(ctx->data, NULL);
 498	if (ctx->data != ctx->control)
 499		usb_driver_release_interface(driver, ctx->data);
 500error:
 501	cdc_ncm_free((struct cdc_ncm_ctx *)dev->data[0]);
 502	dev->data[0] = 0;
 503	dev_info(&intf->dev, "bind() failure\n");
 504	return -ENODEV;
 505}
 506EXPORT_SYMBOL_GPL(cdc_ncm_bind_common);
 507
 508void cdc_ncm_unbind(struct usbnet *dev, struct usb_interface *intf)
 509{
 510	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 511	struct usb_driver *driver = driver_of(intf);
 512
 513	if (ctx == NULL)
 514		return;		/* no setup */
 515
 516	atomic_set(&ctx->stop, 1);
 517
 518	if (hrtimer_active(&ctx->tx_timer))
 519		hrtimer_cancel(&ctx->tx_timer);
 520
 521	tasklet_kill(&ctx->bh);
 522
 523	/* handle devices with combined control and data interface */
 524	if (ctx->control == ctx->data)
 525		ctx->data = NULL;
 526
 527	/* disconnect master --> disconnect slave */
 528	if (intf == ctx->control && ctx->data) {
 529		usb_set_intfdata(ctx->data, NULL);
 530		usb_driver_release_interface(driver, ctx->data);
 531		ctx->data = NULL;
 532
 533	} else if (intf == ctx->data && ctx->control) {
 534		usb_set_intfdata(ctx->control, NULL);
 535		usb_driver_release_interface(driver, ctx->control);
 536		ctx->control = NULL;
 537	}
 538
 539	usb_set_intfdata(intf, NULL);
 540	cdc_ncm_free(ctx);
 541}
 542EXPORT_SYMBOL_GPL(cdc_ncm_unbind);
 543
 544/* Select the MBIM altsetting iff it is preferred and available,
 545 * returning the number of the corresponding data interface altsetting
 546 */
 547u8 cdc_ncm_select_altsetting(struct usbnet *dev, struct usb_interface *intf)
 548{
 549	struct usb_host_interface *alt;
 550
 551	/* The MBIM spec defines a NCM compatible default altsetting,
 552	 * which we may have matched:
 553	 *
 554	 *  "Functions that implement both NCM 1.0 and MBIM (an
 555	 *   “NCM/MBIM function”) according to this recommendation
 556	 *   shall provide two alternate settings for the
 557	 *   Communication Interface.  Alternate setting 0, and the
 558	 *   associated class and endpoint descriptors, shall be
 559	 *   constructed according to the rules given for the
 560	 *   Communication Interface in section 5 of [USBNCM10].
 561	 *   Alternate setting 1, and the associated class and
 562	 *   endpoint descriptors, shall be constructed according to
 563	 *   the rules given in section 6 (USB Device Model) of this
 564	 *   specification."
 565	 */
 566	if (prefer_mbim && intf->num_altsetting == 2) {
 
 
 
 567		alt = usb_altnum_to_altsetting(intf, CDC_NCM_COMM_ALTSETTING_MBIM);
 568		if (alt && cdc_ncm_comm_intf_is_mbim(alt) &&
 569		    !usb_set_interface(dev->udev,
 570				       intf->cur_altsetting->desc.bInterfaceNumber,
 571				       CDC_NCM_COMM_ALTSETTING_MBIM))
 572			return CDC_NCM_DATA_ALTSETTING_MBIM;
 573	}
 574	return CDC_NCM_DATA_ALTSETTING_NCM;
 575}
 576EXPORT_SYMBOL_GPL(cdc_ncm_select_altsetting);
 577
 578static int cdc_ncm_bind(struct usbnet *dev, struct usb_interface *intf)
 579{
 580	int ret;
 581
 582	/* MBIM backwards compatible function? */
 583	cdc_ncm_select_altsetting(dev, intf);
 584	if (cdc_ncm_comm_intf_is_mbim(intf->cur_altsetting))
 585		return -ENODEV;
 586
 587	/* NCM data altsetting is always 1 */
 588	ret = cdc_ncm_bind_common(dev, intf, 1);
 589
 590	/*
 591	 * We should get an event when network connection is "connected" or
 592	 * "disconnected". Set network connection in "disconnected" state
 593	 * (carrier is OFF) during attach, so the IP network stack does not
 594	 * start IPv6 negotiation and more.
 595	 */
 596	usbnet_link_change(dev, 0, 0);
 597	return ret;
 598}
 599
 600static void cdc_ncm_align_tail(struct sk_buff *skb, size_t modulus, size_t remainder, size_t max)
 601{
 602	size_t align = ALIGN(skb->len, modulus) - skb->len + remainder;
 603
 604	if (skb->len + align > max)
 605		align = max - skb->len;
 606	if (align && skb_tailroom(skb) >= align)
 607		memset(skb_put(skb, align), 0, align);
 608}
 609
 610/* return a pointer to a valid struct usb_cdc_ncm_ndp16 of type sign, possibly
 611 * allocating a new one within skb
 612 */
 613static struct usb_cdc_ncm_ndp16 *cdc_ncm_ndp(struct cdc_ncm_ctx *ctx, struct sk_buff *skb, __le32 sign, size_t reserve)
 614{
 615	struct usb_cdc_ncm_ndp16 *ndp16 = NULL;
 616	struct usb_cdc_ncm_nth16 *nth16 = (void *)skb->data;
 617	size_t ndpoffset = le16_to_cpu(nth16->wNdpIndex);
 618
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 619	/* follow the chain of NDPs, looking for a match */
 620	while (ndpoffset) {
 621		ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb->data + ndpoffset);
 622		if  (ndp16->dwSignature == sign)
 623			return ndp16;
 624		ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);
 625	}
 626
 627	/* align new NDP */
 628	cdc_ncm_align_tail(skb, ctx->tx_ndp_modulus, 0, ctx->tx_max);
 
 629
 630	/* verify that there is room for the NDP and the datagram (reserve) */
 631	if ((ctx->tx_max - skb->len - reserve) < CDC_NCM_NDP_SIZE)
 632		return NULL;
 633
 634	/* link to it */
 635	if (ndp16)
 636		ndp16->wNextNdpIndex = cpu_to_le16(skb->len);
 637	else
 638		nth16->wNdpIndex = cpu_to_le16(skb->len);
 639
 640	/* push a new empty NDP */
 641	ndp16 = (struct usb_cdc_ncm_ndp16 *)memset(skb_put(skb, CDC_NCM_NDP_SIZE), 0, CDC_NCM_NDP_SIZE);
 
 
 
 
 642	ndp16->dwSignature = sign;
 643	ndp16->wLength = cpu_to_le16(sizeof(struct usb_cdc_ncm_ndp16) + sizeof(struct usb_cdc_ncm_dpe16));
 644	return ndp16;
 645}
 646
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 647struct sk_buff *
 648cdc_ncm_fill_tx_frame(struct usbnet *dev, struct sk_buff *skb, __le32 sign)
 649{
 650	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 651	struct usb_cdc_ncm_nth16 *nth16;
 652	struct usb_cdc_ncm_ndp16 *ndp16;
 
 
 
 
 
 
 653	struct sk_buff *skb_out;
 654	u16 n = 0, index, ndplen;
 655	u8 ready2send = 0;
 
 
 
 
 
 
 
 
 
 
 
 
 
 656
 657	/* if there is a remaining skb, it gets priority */
 658	if (skb != NULL) {
 659		swap(skb, ctx->tx_rem_skb);
 660		swap(sign, ctx->tx_rem_sign);
 661	} else {
 662		ready2send = 1;
 663	}
 664
 665	/* check if we are resuming an OUT skb */
 666	skb_out = ctx->tx_curr_skb;
 667
 668	/* allocate a new OUT skb */
 669	if (!skb_out) {
 670		skb_out = alloc_skb(ctx->tx_max, GFP_ATOMIC);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 671		if (skb_out == NULL) {
 672			if (skb != NULL) {
 673				dev_kfree_skb_any(skb);
 674				dev->net->stats.tx_dropped++;
 675			}
 676			goto exit_no_skb;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 677		}
 678		/* fill out the initial 16-bit NTB header */
 679		nth16 = (struct usb_cdc_ncm_nth16 *)memset(skb_put(skb_out, sizeof(struct usb_cdc_ncm_nth16)), 0, sizeof(struct usb_cdc_ncm_nth16));
 680		nth16->dwSignature = cpu_to_le32(USB_CDC_NCM_NTH16_SIGN);
 681		nth16->wHeaderLength = cpu_to_le16(sizeof(struct usb_cdc_ncm_nth16));
 682		nth16->wSequence = cpu_to_le16(ctx->tx_seq++);
 683
 684		/* count total number of frames in this NTB */
 685		ctx->tx_curr_frame_num = 0;
 
 
 
 686	}
 687
 688	for (n = ctx->tx_curr_frame_num; n < ctx->tx_max_datagrams; n++) {
 689		/* send any remaining skb first */
 690		if (skb == NULL) {
 691			skb = ctx->tx_rem_skb;
 692			sign = ctx->tx_rem_sign;
 693			ctx->tx_rem_skb = NULL;
 694
 695			/* check for end of skb */
 696			if (skb == NULL)
 697				break;
 698		}
 699
 700		/* get the appropriate NDP for this skb */
 701		ndp16 = cdc_ncm_ndp(ctx, skb_out, sign, skb->len + ctx->tx_modulus + ctx->tx_remainder);
 
 
 
 702
 703		/* align beginning of next frame */
 704		cdc_ncm_align_tail(skb_out,  ctx->tx_modulus, ctx->tx_remainder, ctx->tx_max);
 705
 706		/* check if we had enough room left for both NDP and frame */
 707		if (!ndp16 || skb_out->len + skb->len > ctx->tx_max) {
 
 708			if (n == 0) {
 709				/* won't fit, MTU problem? */
 710				dev_kfree_skb_any(skb);
 711				skb = NULL;
 712				dev->net->stats.tx_dropped++;
 713			} else {
 714				/* no room for skb - store for later */
 715				if (ctx->tx_rem_skb != NULL) {
 716					dev_kfree_skb_any(ctx->tx_rem_skb);
 717					dev->net->stats.tx_dropped++;
 718				}
 719				ctx->tx_rem_skb = skb;
 720				ctx->tx_rem_sign = sign;
 721				skb = NULL;
 722				ready2send = 1;
 
 723			}
 724			break;
 725		}
 726
 727		/* calculate frame number withing this NDP */
 728		ndplen = le16_to_cpu(ndp16->wLength);
 729		index = (ndplen - sizeof(struct usb_cdc_ncm_ndp16)) / sizeof(struct usb_cdc_ncm_dpe16) - 1;
 730
 731		/* OK, add this skb */
 732		ndp16->dpe16[index].wDatagramLength = cpu_to_le16(skb->len);
 733		ndp16->dpe16[index].wDatagramIndex = cpu_to_le16(skb_out->len);
 734		ndp16->wLength = cpu_to_le16(ndplen + sizeof(struct usb_cdc_ncm_dpe16));
 735		memcpy(skb_put(skb_out, skb->len), skb->data, skb->len);
 
 
 
 
 
 
 
 
 
 
 736		dev_kfree_skb_any(skb);
 737		skb = NULL;
 738
 739		/* send now if this NDP is full */
 740		if (index >= CDC_NCM_DPT_DATAGRAMS_MAX) {
 741			ready2send = 1;
 
 742			break;
 743		}
 744	}
 745
 746	/* free up any dangling skb */
 747	if (skb != NULL) {
 748		dev_kfree_skb_any(skb);
 749		skb = NULL;
 750		dev->net->stats.tx_dropped++;
 751	}
 752
 753	ctx->tx_curr_frame_num = n;
 754
 755	if (n == 0) {
 756		/* wait for more frames */
 757		/* push variables */
 758		ctx->tx_curr_skb = skb_out;
 759		goto exit_no_skb;
 760
 761	} else if ((n < ctx->tx_max_datagrams) && (ready2send == 0)) {
 762		/* wait for more frames */
 763		/* push variables */
 764		ctx->tx_curr_skb = skb_out;
 765		/* set the pending count */
 766		if (n < CDC_NCM_RESTART_TIMER_DATAGRAM_CNT)
 767			ctx->tx_timer_pending = CDC_NCM_TIMER_PENDING_CNT;
 768		goto exit_no_skb;
 769
 770	} else {
 
 
 771		/* frame goes out */
 772		/* variables will be reset at next call */
 773	}
 774
 775	/* If collected data size is less or equal CDC_NCM_MIN_TX_PKT
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 776	 * bytes, we send buffers as it is. If we get more data, it
 777	 * would be more efficient for USB HS mobile device with DMA
 778	 * engine to receive a full size NTB, than canceling DMA
 779	 * transfer and receiving a short packet.
 780	 *
 781	 * This optimization support is pointless if we end up sending
 782	 * a ZLP after full sized NTBs.
 783	 */
 784	if (!(dev->driver_info->flags & FLAG_SEND_ZLP) &&
 785	    skb_out->len > CDC_NCM_MIN_TX_PKT)
 786		memset(skb_put(skb_out, ctx->tx_max - skb_out->len), 0,
 787		       ctx->tx_max - skb_out->len);
 788	else if (skb_out->len < ctx->tx_max && (skb_out->len % dev->maxpacket) == 0)
 789		*skb_put(skb_out, 1) = 0;	/* force short packet */
 
 
 
 790
 791	/* set final frame length */
 792	nth16 = (struct usb_cdc_ncm_nth16 *)skb_out->data;
 793	nth16->wBlockLength = cpu_to_le16(skb_out->len);
 
 
 
 
 
 794
 795	/* return skb */
 796	ctx->tx_curr_skb = NULL;
 797	dev->net->stats.tx_packets += ctx->tx_curr_frame_num;
 
 
 
 
 
 
 
 
 
 
 
 798	return skb_out;
 799
 
 
 
 
 
 800exit_no_skb:
 801	/* Start timer, if there is a remaining skb */
 802	if (ctx->tx_curr_skb != NULL)
 803		cdc_ncm_tx_timeout_start(ctx);
 804	return NULL;
 805}
 806EXPORT_SYMBOL_GPL(cdc_ncm_fill_tx_frame);
 807
 808static void cdc_ncm_tx_timeout_start(struct cdc_ncm_ctx *ctx)
 809{
 810	/* start timer, if not already started */
 811	if (!(hrtimer_active(&ctx->tx_timer) || atomic_read(&ctx->stop)))
 812		hrtimer_start(&ctx->tx_timer,
 813				ktime_set(0, CDC_NCM_TIMER_INTERVAL),
 814				HRTIMER_MODE_REL);
 815}
 816
 817static enum hrtimer_restart cdc_ncm_tx_timer_cb(struct hrtimer *timer)
 818{
 819	struct cdc_ncm_ctx *ctx =
 820			container_of(timer, struct cdc_ncm_ctx, tx_timer);
 821
 822	if (!atomic_read(&ctx->stop))
 823		tasklet_schedule(&ctx->bh);
 824	return HRTIMER_NORESTART;
 825}
 826
 827static void cdc_ncm_txpath_bh(unsigned long param)
 828{
 829	struct usbnet *dev = (struct usbnet *)param;
 830	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 831
 832	spin_lock_bh(&ctx->mtx);
 833	if (ctx->tx_timer_pending != 0) {
 834		ctx->tx_timer_pending--;
 835		cdc_ncm_tx_timeout_start(ctx);
 836		spin_unlock_bh(&ctx->mtx);
 837	} else if (dev->net != NULL) {
 838		spin_unlock_bh(&ctx->mtx);
 
 839		netif_tx_lock_bh(dev->net);
 840		usbnet_start_xmit(NULL, dev->net);
 841		netif_tx_unlock_bh(dev->net);
 842	} else {
 843		spin_unlock_bh(&ctx->mtx);
 844	}
 845}
 846
 847struct sk_buff *
 848cdc_ncm_tx_fixup(struct usbnet *dev, struct sk_buff *skb, gfp_t flags)
 849{
 850	struct sk_buff *skb_out;
 851	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 852
 853	/*
 854	 * The Ethernet API we are using does not support transmitting
 855	 * multiple Ethernet frames in a single call. This driver will
 856	 * accumulate multiple Ethernet frames and send out a larger
 857	 * USB frame when the USB buffer is full or when a single jiffies
 858	 * timeout happens.
 859	 */
 860	if (ctx == NULL)
 861		goto error;
 862
 863	spin_lock_bh(&ctx->mtx);
 864	skb_out = cdc_ncm_fill_tx_frame(dev, skb, cpu_to_le32(USB_CDC_NCM_NDP16_NOCRC_SIGN));
 
 
 
 
 
 865	spin_unlock_bh(&ctx->mtx);
 866	return skb_out;
 867
 868error:
 869	if (skb != NULL)
 870		dev_kfree_skb_any(skb);
 871
 872	return NULL;
 873}
 874EXPORT_SYMBOL_GPL(cdc_ncm_tx_fixup);
 875
 876/* verify NTB header and return offset of first NDP, or negative error */
 877int cdc_ncm_rx_verify_nth16(struct cdc_ncm_ctx *ctx, struct sk_buff *skb_in)
 878{
 879	struct usbnet *dev = netdev_priv(skb_in->dev);
 880	struct usb_cdc_ncm_nth16 *nth16;
 881	int len;
 882	int ret = -EINVAL;
 883
 884	if (ctx == NULL)
 885		goto error;
 886
 887	if (skb_in->len < (sizeof(struct usb_cdc_ncm_nth16) +
 888					sizeof(struct usb_cdc_ncm_ndp16))) {
 889		netif_dbg(dev, rx_err, dev->net, "frame too short\n");
 890		goto error;
 891	}
 892
 893	nth16 = (struct usb_cdc_ncm_nth16 *)skb_in->data;
 894
 895	if (nth16->dwSignature != cpu_to_le32(USB_CDC_NCM_NTH16_SIGN)) {
 896		netif_dbg(dev, rx_err, dev->net,
 897			  "invalid NTH16 signature <%#010x>\n",
 898			  le32_to_cpu(nth16->dwSignature));
 899		goto error;
 900	}
 901
 902	len = le16_to_cpu(nth16->wBlockLength);
 903	if (len > ctx->rx_max) {
 904		netif_dbg(dev, rx_err, dev->net,
 905			  "unsupported NTB block length %u/%u\n", len,
 906			  ctx->rx_max);
 907		goto error;
 908	}
 909
 910	if ((ctx->rx_seq + 1) != le16_to_cpu(nth16->wSequence) &&
 911	    (ctx->rx_seq || le16_to_cpu(nth16->wSequence)) &&
 912	    !((ctx->rx_seq == 0xffff) && !le16_to_cpu(nth16->wSequence))) {
 913		netif_dbg(dev, rx_err, dev->net,
 914			  "sequence number glitch prev=%d curr=%d\n",
 915			  ctx->rx_seq, le16_to_cpu(nth16->wSequence));
 916	}
 917	ctx->rx_seq = le16_to_cpu(nth16->wSequence);
 918
 919	ret = le16_to_cpu(nth16->wNdpIndex);
 920error:
 921	return ret;
 922}
 923EXPORT_SYMBOL_GPL(cdc_ncm_rx_verify_nth16);
 924
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 925/* verify NDP header and return number of datagrams, or negative error */
 926int cdc_ncm_rx_verify_ndp16(struct sk_buff *skb_in, int ndpoffset)
 927{
 928	struct usbnet *dev = netdev_priv(skb_in->dev);
 929	struct usb_cdc_ncm_ndp16 *ndp16;
 930	int ret = -EINVAL;
 931
 932	if ((ndpoffset + sizeof(struct usb_cdc_ncm_ndp16)) > skb_in->len) {
 933		netif_dbg(dev, rx_err, dev->net, "invalid NDP offset  <%u>\n",
 934			  ndpoffset);
 935		goto error;
 936	}
 937	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);
 938
 939	if (le16_to_cpu(ndp16->wLength) < USB_CDC_NCM_NDP16_LENGTH_MIN) {
 940		netif_dbg(dev, rx_err, dev->net, "invalid DPT16 length <%u>\n",
 941			  le16_to_cpu(ndp16->wLength));
 942		goto error;
 943	}
 944
 945	ret = ((le16_to_cpu(ndp16->wLength) -
 946					sizeof(struct usb_cdc_ncm_ndp16)) /
 947					sizeof(struct usb_cdc_ncm_dpe16));
 948	ret--; /* we process NDP entries except for the last one */
 949
 950	if ((sizeof(struct usb_cdc_ncm_ndp16) +
 951	     ret * (sizeof(struct usb_cdc_ncm_dpe16))) > skb_in->len) {
 952		netif_dbg(dev, rx_err, dev->net, "Invalid nframes = %d\n", ret);
 953		ret = -EINVAL;
 954	}
 955
 956error:
 957	return ret;
 958}
 959EXPORT_SYMBOL_GPL(cdc_ncm_rx_verify_ndp16);
 960
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 961int cdc_ncm_rx_fixup(struct usbnet *dev, struct sk_buff *skb_in)
 962{
 963	struct sk_buff *skb;
 964	struct cdc_ncm_ctx *ctx = (struct cdc_ncm_ctx *)dev->data[0];
 965	int len;
 966	int nframes;
 967	int x;
 968	int offset;
 969	struct usb_cdc_ncm_ndp16 *ndp16;
 970	struct usb_cdc_ncm_dpe16 *dpe16;
 
 
 
 
 
 
 
 971	int ndpoffset;
 972	int loopcount = 50; /* arbitrary max preventing infinite loop */
 
 
 
 
 
 
 973
 974	ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);
 975	if (ndpoffset < 0)
 976		goto error;
 977
 978next_ndp:
 979	nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);
 980	if (nframes < 0)
 981		goto error;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 982
 983	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);
 
 
 
 
 
 
 
 984
 985	if (ndp16->dwSignature != cpu_to_le32(USB_CDC_NCM_NDP16_NOCRC_SIGN)) {
 986		netif_dbg(dev, rx_err, dev->net,
 987			  "invalid DPT16 signature <%#010x>\n",
 988			  le32_to_cpu(ndp16->dwSignature));
 989		goto err_ndp;
 990	}
 991	dpe16 = ndp16->dpe16;
 992
 993	for (x = 0; x < nframes; x++, dpe16++) {
 994		offset = le16_to_cpu(dpe16->wDatagramIndex);
 995		len = le16_to_cpu(dpe16->wDatagramLength);
 996
 997		/*
 998		 * CDC NCM ch. 3.7
 999		 * All entries after first NULL entry are to be ignored
1000		 */
1001		if ((offset == 0) || (len == 0)) {
1002			if (!x)
1003				goto err_ndp; /* empty NTB */
1004			break;
1005		}
1006
1007		/* sanity checking */
1008		if (((offset + len) > skb_in->len) ||
1009				(len > ctx->rx_max) || (len < ETH_HLEN)) {
1010			netif_dbg(dev, rx_err, dev->net,
1011				  "invalid frame detected (ignored) offset[%u]=%u, length=%u, skb=%p\n",
1012				  x, offset, len, skb_in);
1013			if (!x)
1014				goto err_ndp;
1015			break;
1016
1017		} else {
1018			skb = skb_clone(skb_in, GFP_ATOMIC);
 
1019			if (!skb)
1020				goto error;
1021			skb->len = len;
1022			skb->data = ((u8 *)skb_in->data) + offset;
1023			skb_set_tail_pointer(skb, len);
1024			usbnet_skb_return(dev, skb);
 
1025		}
 
 
 
 
 
1026	}
1027err_ndp:
1028	/* are there more NDPs to process? */
1029	ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);
 
 
 
 
1030	if (ndpoffset && loopcount--)
1031		goto next_ndp;
1032
 
 
 
 
1033	return 1;
1034error:
1035	return 0;
1036}
1037EXPORT_SYMBOL_GPL(cdc_ncm_rx_fixup);
1038
1039static void
1040cdc_ncm_speed_change(struct usbnet *dev,
1041		     struct usb_cdc_speed_change *data)
1042{
1043	uint32_t rx_speed = le32_to_cpu(data->DLBitRRate);
1044	uint32_t tx_speed = le32_to_cpu(data->ULBitRate);
1045
1046	/*
1047	 * Currently the USB-NET API does not support reporting the actual
1048	 * device speed. Do print it instead.
1049	 */
1050	if ((tx_speed > 1000000) && (rx_speed > 1000000)) {
1051		netif_info(dev, link, dev->net,
1052		       "%u mbit/s downlink %u mbit/s uplink\n",
1053		       (unsigned int)(rx_speed / 1000000U),
1054		       (unsigned int)(tx_speed / 1000000U));
1055	} else {
1056		netif_info(dev, link, dev->net,
1057		       "%u kbit/s downlink %u kbit/s uplink\n",
1058		       (unsigned int)(rx_speed / 1000U),
1059		       (unsigned int)(tx_speed / 1000U));
1060	}
1061}
1062
1063static void cdc_ncm_status(struct usbnet *dev, struct urb *urb)
1064{
1065	struct cdc_ncm_ctx *ctx;
1066	struct usb_cdc_notification *event;
1067
1068	ctx = (struct cdc_ncm_ctx *)dev->data[0];
1069
1070	if (urb->actual_length < sizeof(*event))
1071		return;
1072
1073	/* test for split data in 8-byte chunks */
1074	if (test_and_clear_bit(EVENT_STS_SPLIT, &dev->flags)) {
1075		cdc_ncm_speed_change(dev,
1076		      (struct usb_cdc_speed_change *)urb->transfer_buffer);
1077		return;
1078	}
1079
1080	event = urb->transfer_buffer;
1081
1082	switch (event->bNotificationType) {
1083	case USB_CDC_NOTIFY_NETWORK_CONNECTION:
1084		/*
1085		 * According to the CDC NCM specification ch.7.1
1086		 * USB_CDC_NOTIFY_NETWORK_CONNECTION notification shall be
1087		 * sent by device after USB_CDC_NOTIFY_SPEED_CHANGE.
1088		 */
1089		ctx->connected = le16_to_cpu(event->wValue);
1090		netif_info(dev, link, dev->net,
1091			   "network connection: %sconnected\n",
1092			   ctx->connected ? "" : "dis");
1093		usbnet_link_change(dev, ctx->connected, 0);
1094		break;
1095
1096	case USB_CDC_NOTIFY_SPEED_CHANGE:
1097		if (urb->actual_length < (sizeof(*event) +
1098					sizeof(struct usb_cdc_speed_change)))
1099			set_bit(EVENT_STS_SPLIT, &dev->flags);
1100		else
1101			cdc_ncm_speed_change(dev,
1102					     (struct usb_cdc_speed_change *)&event[1]);
1103		break;
1104
1105	default:
1106		dev_dbg(&dev->udev->dev,
1107			"NCM: unexpected notification 0x%02x!\n",
1108			event->bNotificationType);
1109		break;
1110	}
1111}
1112
1113static int cdc_ncm_check_connect(struct usbnet *dev)
1114{
1115	struct cdc_ncm_ctx *ctx;
 
 
 
 
 
 
 
 
 
1116
1117	ctx = (struct cdc_ncm_ctx *)dev->data[0];
1118	if (ctx == NULL)
1119		return 1;	/* disconnected */
1120
1121	return !ctx->connected;
1122}
1123
1124static const struct driver_info cdc_ncm_info = {
1125	.description = "CDC NCM",
1126	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET,
1127	.bind = cdc_ncm_bind,
1128	.unbind = cdc_ncm_unbind,
1129	.check_connect = cdc_ncm_check_connect,
1130	.manage_power = usbnet_manage_power,
1131	.status = cdc_ncm_status,
1132	.rx_fixup = cdc_ncm_rx_fixup,
1133	.tx_fixup = cdc_ncm_tx_fixup,
 
1134};
1135
1136/* Same as cdc_ncm_info, but with FLAG_WWAN */
1137static const struct driver_info wwan_info = {
1138	.description = "Mobile Broadband Network Device",
1139	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET
1140			| FLAG_WWAN,
1141	.bind = cdc_ncm_bind,
1142	.unbind = cdc_ncm_unbind,
1143	.check_connect = cdc_ncm_check_connect,
1144	.manage_power = usbnet_manage_power,
1145	.status = cdc_ncm_status,
1146	.rx_fixup = cdc_ncm_rx_fixup,
1147	.tx_fixup = cdc_ncm_tx_fixup,
 
1148};
1149
1150/* Same as wwan_info, but with FLAG_NOARP  */
1151static const struct driver_info wwan_noarp_info = {
1152	.description = "Mobile Broadband Network Device (NO ARP)",
1153	.flags = FLAG_POINTTOPOINT | FLAG_NO_SETINT | FLAG_MULTI_PACKET
1154			| FLAG_WWAN | FLAG_NOARP,
1155	.bind = cdc_ncm_bind,
1156	.unbind = cdc_ncm_unbind,
1157	.check_connect = cdc_ncm_check_connect,
1158	.manage_power = usbnet_manage_power,
1159	.status = cdc_ncm_status,
1160	.rx_fixup = cdc_ncm_rx_fixup,
1161	.tx_fixup = cdc_ncm_tx_fixup,
 
1162};
1163
1164static const struct usb_device_id cdc_devs[] = {
1165	/* Ericsson MBM devices like F5521gw */
1166	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
1167		| USB_DEVICE_ID_MATCH_VENDOR,
1168	  .idVendor = 0x0bdb,
1169	  .bInterfaceClass = USB_CLASS_COMM,
1170	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
1171	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
1172	  .driver_info = (unsigned long) &wwan_info,
1173	},
1174
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1175	/* Dell branded MBM devices like DW5550 */
1176	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
1177		| USB_DEVICE_ID_MATCH_VENDOR,
1178	  .idVendor = 0x413c,
1179	  .bInterfaceClass = USB_CLASS_COMM,
1180	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
1181	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
1182	  .driver_info = (unsigned long) &wwan_info,
1183	},
1184
1185	/* Toshiba branded MBM devices */
1186	{ .match_flags = USB_DEVICE_ID_MATCH_INT_INFO
1187		| USB_DEVICE_ID_MATCH_VENDOR,
1188	  .idVendor = 0x0930,
1189	  .bInterfaceClass = USB_CLASS_COMM,
1190	  .bInterfaceSubClass = USB_CDC_SUBCLASS_NCM,
1191	  .bInterfaceProtocol = USB_CDC_PROTO_NONE,
1192	  .driver_info = (unsigned long) &wwan_info,
1193	},
1194
1195	/* tag Huawei devices as wwan */
1196	{ USB_VENDOR_AND_INTERFACE_INFO(0x12d1,
1197					USB_CLASS_COMM,
1198					USB_CDC_SUBCLASS_NCM,
1199					USB_CDC_PROTO_NONE),
1200	  .driver_info = (unsigned long)&wwan_info,
1201	},
1202
1203	/* Infineon(now Intel) HSPA Modem platform */
1204	{ USB_DEVICE_AND_INTERFACE_INFO(0x1519, 0x0443,
1205		USB_CLASS_COMM,
1206		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
1207	  .driver_info = (unsigned long)&wwan_noarp_info,
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1208	},
1209
1210	/* Generic CDC-NCM devices */
1211	{ USB_INTERFACE_INFO(USB_CLASS_COMM,
1212		USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
1213		.driver_info = (unsigned long)&cdc_ncm_info,
1214	},
1215	{
1216	},
1217};
1218MODULE_DEVICE_TABLE(usb, cdc_devs);
1219
1220static struct usb_driver cdc_ncm_driver = {
1221	.name = "cdc_ncm",
1222	.id_table = cdc_devs,
1223	.probe = usbnet_probe,
1224	.disconnect = usbnet_disconnect,
1225	.suspend = usbnet_suspend,
1226	.resume = usbnet_resume,
1227	.reset_resume =	usbnet_resume,
1228	.supports_autosuspend = 1,
1229	.disable_hub_initiated_lpm = 1,
1230};
1231
1232module_usb_driver(cdc_ncm_driver);
1233
1234MODULE_AUTHOR("Hans Petter Selasky");
1235MODULE_DESCRIPTION("USB CDC NCM host driver");
1236MODULE_LICENSE("Dual BSD/GPL");