[deliverable/linux.git] / drivers / net / usb / cdc_mbim.c

/*
 * Copyright (c) 2012  Smith Micro Software, Inc.
 * Copyright (c) 2012  Bjørn Mork <bjorn@mork.no>
 *
 * This driver is based on and reuse most of cdc_ncm, which is
 * Copyright (C) ST-Ericsson 2010-2012
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 */

#include <linux/module.h>
#include <linux/netdevice.h>
#include <linux/ethtool.h>
#include <linux/if_vlan.h>
#include <linux/ip.h>
#include <linux/mii.h>
#include <linux/usb.h>
#include <linux/usb/cdc.h>
#include <linux/usb/usbnet.h>
#include <linux/usb/cdc-wdm.h>
#include <linux/usb/cdc_ncm.h>
#include <net/ipv6.h>
#include <net/addrconf.h>

/* driver specific data - must match cdc_ncm usage */
struct cdc_mbim_state {
	struct cdc_ncm_ctx *ctx;
	atomic_t pmcount;
	struct usb_driver *subdriver;
	struct usb_interface *control;
	struct usb_interface *data;
};

/* using a counter to merge subdriver requests with our own into a combined state */
static int cdc_mbim_manage_power(struct usbnet *dev, int on)
{
	struct cdc_mbim_state *info = (void *)&dev->data;
	int rv = 0;

	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__, atomic_read(&info->pmcount), on);

	if ((on && atomic_add_return(1, &info->pmcount) == 1) || (!on && atomic_dec_and_test(&info->pmcount))) {
		/* need autopm_get/put here to ensure the usbcore sees the new value */
		rv = usb_autopm_get_interface(dev->intf);
		dev->intf->needs_remote_wakeup = on;
		if (!rv)
			usb_autopm_put_interface(dev->intf);
	}
	return 0;
}

static int cdc_mbim_wdm_manage_power(struct usb_interface *intf, int status)
{
	struct usbnet *dev = usb_get_intfdata(intf);

	/* can be called while disconnecting */
	if (!dev)
		return 0;

	return cdc_mbim_manage_power(dev, status);
}


static int cdc_mbim_bind(struct usbnet *dev, struct usb_interface *intf)
{
	struct cdc_ncm_ctx *ctx;
	struct usb_driver *subdriver = ERR_PTR(-ENODEV);
	int ret = -ENODEV;
	u8 data_altsetting = cdc_ncm_select_altsetting(dev, intf);
	struct cdc_mbim_state *info = (void *)&dev->data;

	/* Probably NCM, defer for cdc_ncm_bind */
	if (!cdc_ncm_comm_intf_is_mbim(intf->cur_altsetting))
		goto err;

	ret = cdc_ncm_bind_common(dev, intf, data_altsetting);
	if (ret)
		goto err;

	ctx = info->ctx;

	/* The MBIM descriptor and the status endpoint are required */
	if (ctx->mbim_desc && dev->status)
		subdriver = usb_cdc_wdm_register(ctx->control,
						 &dev->status->desc,
						 le16_to_cpu(ctx->mbim_desc->wMaxControlMessage),
						 cdc_mbim_wdm_manage_power);
	if (IS_ERR(subdriver)) {
		ret = PTR_ERR(subdriver);
		cdc_ncm_unbind(dev, intf);
		goto err;
	}

	/* can't let usbnet use the interrupt endpoint */
	dev->status = NULL;
	info->subdriver = subdriver;

	/* MBIM cannot do ARP */
	dev->net->flags |= IFF_NOARP;

	/* no need to put the VLAN tci in the packet headers */
	dev->net->features |= NETIF_F_HW_VLAN_CTAG_TX;
err:
	return ret;
}

static void cdc_mbim_unbind(struct usbnet *dev, struct usb_interface *intf)
{
	struct cdc_mbim_state *info = (void *)&dev->data;
	struct cdc_ncm_ctx *ctx = info->ctx;

	/* disconnect subdriver from control interface */
	if (info->subdriver && info->subdriver->disconnect)
		info->subdriver->disconnect(ctx->control);
	info->subdriver = NULL;

	/* let NCM unbind clean up both control and data interface */
	cdc_ncm_unbind(dev, intf);
}


static struct sk_buff *cdc_mbim_tx_fixup(struct usbnet *dev, struct sk_buff *skb, gfp_t flags)
{
	struct sk_buff *skb_out;
	struct cdc_mbim_state *info = (void *)&dev->data;
	struct cdc_ncm_ctx *ctx = info->ctx;
	__le32 sign = cpu_to_le32(USB_CDC_MBIM_NDP16_IPS_SIGN);
	u16 tci = 0;
	u8 *c;

	if (!ctx)
		goto error;

	if (skb) {
		if (skb->len <= ETH_HLEN)
			goto error;

		/* mapping VLANs to MBIM sessions:
		 *   no tag     => IPS session <0>
		 *   1 - 255    => IPS session <vlanid>
		 *   256 - 511  => DSS session <vlanid - 256>
		 *   512 - 4095 => unsupported, drop
		 */
		vlan_get_tag(skb, &tci);

		switch (tci & 0x0f00) {
		case 0x0000: /* VLAN ID 0 - 255 */
			/* verify that datagram is IPv4 or IPv6 */
			skb_reset_mac_header(skb);
			switch (eth_hdr(skb)->h_proto) {
			case htons(ETH_P_IP):
			case htons(ETH_P_IPV6):
				break;
			default:
				goto error;
			}
			c = (u8 *)&sign;
			c[3] = tci;
			break;
		case 0x0100: /* VLAN ID 256 - 511 */
			sign = cpu_to_le32(USB_CDC_MBIM_NDP16_DSS_SIGN);
			c = (u8 *)&sign;
			c[3] = tci;
			break;
		default:
			netif_err(dev, tx_err, dev->net,
				  "unsupported tci=0x%04x\n", tci);
			goto error;
		}
		skb_pull(skb, ETH_HLEN);
	}

	spin_lock_bh(&ctx->mtx);
	skb_out = cdc_ncm_fill_tx_frame(dev, skb, sign);
	spin_unlock_bh(&ctx->mtx);
	return skb_out;

error:
	if (skb)
		dev_kfree_skb_any(skb);

	return NULL;
}

/* Some devices are known to send Neigbor Solicitation messages and
 * require Neigbor Advertisement replies.  The IPv6 core will not
 * respond since IFF_NOARP is set, so we must handle them ourselves.
 */
static void do_neigh_solicit(struct usbnet *dev, u8 *buf, u16 tci)
{
	struct ipv6hdr *iph = (void *)buf;
	struct nd_msg *msg = (void *)(iph + 1);
	struct net_device *netdev;
	struct inet6_dev *in6_dev;
	bool is_router;

	/* we'll only respond to requests from unicast addresses to
	 * our solicited node addresses.
	 */
	if (!ipv6_addr_is_solict_mult(&iph->daddr) ||
	    !(ipv6_addr_type(&iph->saddr) & IPV6_ADDR_UNICAST))
		return;

	/* need to send the NA on the VLAN dev, if any */
	rcu_read_lock();
	if (tci) {
		netdev = __vlan_find_dev_deep(dev->net, htons(ETH_P_8021Q),
					      tci);
		if (!netdev) {
			rcu_read_unlock();
			return;
		}
	} else {
		netdev = dev->net;
	}
	dev_hold(netdev);
	rcu_read_unlock();

	in6_dev = in6_dev_get(netdev);
	if (!in6_dev)
		goto out;
	is_router = !!in6_dev->cnf.forwarding;
	in6_dev_put(in6_dev);

	/* ipv6_stub != NULL if in6_dev_get returned an inet6_dev */
	ipv6_stub->ndisc_send_na(netdev, NULL, &iph->saddr, &msg->target,
				 is_router /* router */,
				 true /* solicited */,
				 false /* override */,
				 true /* inc_opt */);
out:
	dev_put(netdev);
}

static bool is_neigh_solicit(u8 *buf, size_t len)
{
	struct ipv6hdr *iph = (void *)buf;
	struct nd_msg *msg = (void *)(iph + 1);

	return (len >= sizeof(struct ipv6hdr) + sizeof(struct nd_msg) &&
		iph->nexthdr == IPPROTO_ICMPV6 &&
		msg->icmph.icmp6_code == 0 &&
		msg->icmph.icmp6_type == NDISC_NEIGHBOUR_SOLICITATION);
}


static struct sk_buff *cdc_mbim_process_dgram(struct usbnet *dev, u8 *buf, size_t len, u16 tci)
{
	__be16 proto = htons(ETH_P_802_3);
	struct sk_buff *skb = NULL;

	if (tci < 256) { /* IPS session? */
		if (len < sizeof(struct iphdr))
			goto err;

		switch (*buf & 0xf0) {
		case 0x40:
			proto = htons(ETH_P_IP);
			break;
		case 0x60:
			if (is_neigh_solicit(buf, len))
				do_neigh_solicit(dev, buf, tci);
			proto = htons(ETH_P_IPV6);
			break;
		default:
			goto err;
		}
	}

	skb = netdev_alloc_skb_ip_align(dev->net,  len + ETH_HLEN);
	if (!skb)
		goto err;

	/* add an ethernet header */
	skb_put(skb, ETH_HLEN);
	skb_reset_mac_header(skb);
	eth_hdr(skb)->h_proto = proto;
	memset(eth_hdr(skb)->h_source, 0, ETH_ALEN);
	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);

	/* add datagram */
	memcpy(skb_put(skb, len), buf, len);

	/* map MBIM session to VLAN */
	if (tci)
		vlan_put_tag(skb, htons(ETH_P_8021Q), tci);
err:
	return skb;
}

static int cdc_mbim_rx_fixup(struct usbnet *dev, struct sk_buff *skb_in)
{
	struct sk_buff *skb;
	struct cdc_mbim_state *info = (void *)&dev->data;
	struct cdc_ncm_ctx *ctx = info->ctx;
	int len;
	int nframes;
	int x;
	int offset;
	struct usb_cdc_ncm_ndp16 *ndp16;
	struct usb_cdc_ncm_dpe16 *dpe16;
	int ndpoffset;
	int loopcount = 50; /* arbitrary max preventing infinite loop */
	u8 *c;
	u16 tci;

	ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);
	if (ndpoffset < 0)
		goto error;

next_ndp:
	nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);
	if (nframes < 0)
		goto error;

	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);

	switch (ndp16->dwSignature & cpu_to_le32(0x00ffffff)) {
	case cpu_to_le32(USB_CDC_MBIM_NDP16_IPS_SIGN):
		c = (u8 *)&ndp16->dwSignature;
		tci = c[3];
		break;
	case cpu_to_le32(USB_CDC_MBIM_NDP16_DSS_SIGN):
		c = (u8 *)&ndp16->dwSignature;
		tci = c[3] + 256;
		break;
	default:
		netif_dbg(dev, rx_err, dev->net,
			  "unsupported NDP signature <0x%08x>\n",
			  le32_to_cpu(ndp16->dwSignature));
		goto err_ndp;

	}

	dpe16 = ndp16->dpe16;
	for (x = 0; x < nframes; x++, dpe16++) {
		offset = le16_to_cpu(dpe16->wDatagramIndex);
		len = le16_to_cpu(dpe16->wDatagramLength);

		/*
		 * CDC NCM ch. 3.7
		 * All entries after first NULL entry are to be ignored
		 */
		if ((offset == 0) || (len == 0)) {
			if (!x)
				goto err_ndp; /* empty NTB */
			break;
		}

		/* sanity checking */
		if (((offset + len) > skb_in->len) || (len > ctx->rx_max)) {
			netif_dbg(dev, rx_err, dev->net,
				  "invalid frame detected (ignored) offset[%u]=%u, length=%u, skb=%p\n",
				  x, offset, len, skb_in);
			if (!x)
				goto err_ndp;
			break;
		} else {
			skb = cdc_mbim_process_dgram(dev, skb_in->data + offset, len, tci);
			if (!skb)
				goto error;
			usbnet_skb_return(dev, skb);
		}
	}
err_ndp:
	/* are there more NDPs to process? */
	ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);
	if (ndpoffset && loopcount--)
		goto next_ndp;

	return 1;
error:
	return 0;
}

static int cdc_mbim_suspend(struct usb_interface *intf, pm_message_t message)
{
	int ret = -ENODEV;
	struct usbnet *dev = usb_get_intfdata(intf);
	struct cdc_mbim_state *info = (void *)&dev->data;
	struct cdc_ncm_ctx *ctx = info->ctx;

	if (!ctx)
		goto error;

	/*
	 * Both usbnet_suspend() and subdriver->suspend() MUST return 0
	 * in system sleep context, otherwise, the resume callback has
	 * to recover device from previous suspend failure.
	 */
	ret = usbnet_suspend(intf, message);
	if (ret < 0)
		goto error;

	if (intf == ctx->control && info->subdriver && info->subdriver->suspend)
		ret = info->subdriver->suspend(intf, message);
	if (ret < 0)
		usbnet_resume(intf);

error:
	return ret;
}

static int cdc_mbim_resume(struct usb_interface *intf)
{
	int  ret = 0;
	struct usbnet *dev = usb_get_intfdata(intf);
	struct cdc_mbim_state *info = (void *)&dev->data;
	struct cdc_ncm_ctx *ctx = info->ctx;
	bool callsub = (intf == ctx->control && info->subdriver && info->subdriver->resume);

	if (callsub)
		ret = info->subdriver->resume(intf);
	if (ret < 0)
		goto err;
	ret = usbnet_resume(intf);
	if (ret < 0 && callsub)
		info->subdriver->suspend(intf, PMSG_SUSPEND);
err:
	return ret;
}

static const struct driver_info cdc_mbim_info = {
	.description = "CDC MBIM",
	.flags = FLAG_NO_SETINT | FLAG_MULTI_PACKET | FLAG_WWAN,
	.bind = cdc_mbim_bind,
	.unbind = cdc_mbim_unbind,
	.manage_power = cdc_mbim_manage_power,
	.rx_fixup = cdc_mbim_rx_fixup,
	.tx_fixup = cdc_mbim_tx_fixup,
};

/* MBIM and NCM devices should not need a ZLP after NTBs with
 * dwNtbOutMaxSize length. Nevertheless, a number of devices from
 * different vendor IDs will fail unless we send ZLPs, forcing us
 * to make this the default.
 *
 * This default may cause a performance penalty for spec conforming
 * devices wanting to take advantage of optimizations possible without
 * ZLPs.  A whitelist is added in an attempt to avoid this for devices
 * known to conform to the MBIM specification.
 *
 * All known devices supporting NCM compatibility mode are also
 * conforming to the NCM and MBIM specifications. For this reason, the
 * NCM subclass entry is also in the ZLP whitelist.
 */
static const struct driver_info cdc_mbim_info_zlp = {
	.description = "CDC MBIM",
	.flags = FLAG_NO_SETINT | FLAG_MULTI_PACKET | FLAG_WWAN | FLAG_SEND_ZLP,
	.bind = cdc_mbim_bind,
	.unbind = cdc_mbim_unbind,
	.manage_power = cdc_mbim_manage_power,
	.rx_fixup = cdc_mbim_rx_fixup,
	.tx_fixup = cdc_mbim_tx_fixup,
};

static const struct usb_device_id mbim_devs[] = {
	/* This duplicate NCM entry is intentional. MBIM devices can
	 * be disguised as NCM by default, and this is necessary to
	 * allow us to bind the correct driver_info to such devices.
	 *
	 * bind() will sort out this for us, selecting the correct
	 * entry and reject the other
	 */
	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
	  .driver_info = (unsigned long)&cdc_mbim_info,
	},
	/* ZLP conformance whitelist: All Ericsson MBIM devices */
	{ USB_VENDOR_AND_INTERFACE_INFO(0x0bdb, USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
	  .driver_info = (unsigned long)&cdc_mbim_info,
	},
	/* default entry */
	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
	  .driver_info = (unsigned long)&cdc_mbim_info_zlp,
	},
	{
	},
};
MODULE_DEVICE_TABLE(usb, mbim_devs);

static struct usb_driver cdc_mbim_driver = {
	.name = "cdc_mbim",
	.id_table = mbim_devs,
	.probe = usbnet_probe,
	.disconnect = usbnet_disconnect,
	.suspend = cdc_mbim_suspend,
	.resume = cdc_mbim_resume,
	.reset_resume =	cdc_mbim_resume,
	.supports_autosuspend = 1,
	.disable_hub_initiated_lpm = 1,
};
module_usb_driver(cdc_mbim_driver);

MODULE_AUTHOR("Greg Suarez <gsuarez@smithmicro.com>");
MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
MODULE_DESCRIPTION("USB CDC MBIM host driver");
MODULE_LICENSE("GPL");
Commit	Line	Data
9bf211a3 GS	1	/*
	2	* Copyright (c) 2012 Smith Micro Software, Inc.
	3	* Copyright (c) 2012 Bjørn Mork <bjorn@mork.no>
	4	*
	5	* This driver is based on and reuse most of cdc_ncm, which is
	6	* Copyright (C) ST-Ericsson 2010-2012
	7	*
	8	* This program is free software; you can redistribute it and/or
	9	* modify it under the terms of the GNU General Public License
	10	* version 2 as published by the Free Software Foundation.
	11	*/
	12
	13	#include <linux/module.h>
	14	#include <linux/netdevice.h>
	15	#include <linux/ethtool.h>
a82c7ce5	16	#include <linux/if_vlan.h>
9bf211a3 GS	17	#include <linux/ip.h>
	18	#include <linux/mii.h>
	19	#include <linux/usb.h>
	20	#include <linux/usb/cdc.h>
	21	#include <linux/usb/usbnet.h>
	22	#include <linux/usb/cdc-wdm.h>
	23	#include <linux/usb/cdc_ncm.h>
5b8f15f7 BM	24	#include <net/ipv6.h>
5b8f15f7 BM	25	#include <net/addrconf.h>
9bf211a3 GS	26
	27	/* driver specific data - must match cdc_ncm usage */
	28	struct cdc_mbim_state {
	29	struct cdc_ncm_ctx *ctx;
	30	atomic_t pmcount;
	31	struct usb_driver *subdriver;
	32	struct usb_interface *control;
	33	struct usb_interface *data;
	34	};
	35
	36	/* using a counter to merge subdriver requests with our own into a combined state */
	37	static int cdc_mbim_manage_power(struct usbnet *dev, int on)
	38	{
	39	struct cdc_mbim_state info = (void )&dev->data;
	40	int rv = 0;
	41
	42	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__, atomic_read(&info->pmcount), on);
	43
	44	if ((on && atomic_add_return(1, &info->pmcount) == 1) \|\| (!on && atomic_dec_and_test(&info->pmcount))) {
	45	/* need autopm_get/put here to ensure the usbcore sees the new value */
	46	rv = usb_autopm_get_interface(dev->intf);
9bf211a3	47	dev->intf->needs_remote_wakeup = on;
04d948a9 BM	48	if (!rv)
04d948a9 BM	49	usb_autopm_put_interface(dev->intf);
9bf211a3	50	}
04d948a9	51	return 0;
9bf211a3 GS	52	}
	53
	54	static int cdc_mbim_wdm_manage_power(struct usb_interface *intf, int status)
	55	{
	56	struct usbnet *dev = usb_get_intfdata(intf);
	57
	58	/* can be called while disconnecting */
	59	if (!dev)
	60	return 0;
	61
	62	return cdc_mbim_manage_power(dev, status);
	63	}
	64
	65
	66	static int cdc_mbim_bind(struct usbnet dev, struct usb_interface intf)
	67	{
	68	struct cdc_ncm_ctx *ctx;
	69	struct usb_driver *subdriver = ERR_PTR(-ENODEV);
	70	int ret = -ENODEV;
1e8bbe6c	71	u8 data_altsetting = cdc_ncm_select_altsetting(dev, intf);
9bf211a3 GS	72	struct cdc_mbim_state info = (void )&dev->data;
9bf211a3 GS	73
9bf211a3 GS	74	/* Probably NCM, defer for cdc_ncm_bind */
	75	if (!cdc_ncm_comm_intf_is_mbim(intf->cur_altsetting))
	76	goto err;
	77
	78	ret = cdc_ncm_bind_common(dev, intf, data_altsetting);
	79	if (ret)
	80	goto err;
	81
	82	ctx = info->ctx;
	83
	84	/* The MBIM descriptor and the status endpoint are required */
	85	if (ctx->mbim_desc && dev->status)
	86	subdriver = usb_cdc_wdm_register(ctx->control,
	87	&dev->status->desc,
	88	le16_to_cpu(ctx->mbim_desc->wMaxControlMessage),
	89	cdc_mbim_wdm_manage_power);
	90	if (IS_ERR(subdriver)) {
	91	ret = PTR_ERR(subdriver);
	92	cdc_ncm_unbind(dev, intf);
	93	goto err;
	94	}
	95
	96	/* can't let usbnet use the interrupt endpoint */
	97	dev->status = NULL;
	98	info->subdriver = subdriver;
	99
	100	/* MBIM cannot do ARP */
	101	dev->net->flags \|= IFF_NOARP;
a82c7ce5 BM	102
a82c7ce5 BM	103	/* no need to put the VLAN tci in the packet headers */
f646968f	104	dev->net->features \|= NETIF_F_HW_VLAN_CTAG_TX;
9bf211a3 GS	105	err:
	106	return ret;
	107	}
	108
	109	static void cdc_mbim_unbind(struct usbnet dev, struct usb_interface intf)
	110	{
	111	struct cdc_mbim_state info = (void )&dev->data;
	112	struct cdc_ncm_ctx *ctx = info->ctx;
	113
	114	/* disconnect subdriver from control interface */
	115	if (info->subdriver && info->subdriver->disconnect)
	116	info->subdriver->disconnect(ctx->control);
	117	info->subdriver = NULL;
	118
	119	/* let NCM unbind clean up both control and data interface */
	120	cdc_ncm_unbind(dev, intf);
	121	}
	122
	123
	124	static struct sk_buff cdc_mbim_tx_fixup(struct usbnet dev, struct sk_buff *skb, gfp_t flags)
	125	{
	126	struct sk_buff *skb_out;
	127	struct cdc_mbim_state info = (void )&dev->data;
	128	struct cdc_ncm_ctx *ctx = info->ctx;
a82c7ce5 BM	129	__le32 sign = cpu_to_le32(USB_CDC_MBIM_NDP16_IPS_SIGN);
	130	u16 tci = 0;
	131	u8 *c;
9bf211a3 GS	132
	133	if (!ctx)
	134	goto error;
	135
	136	if (skb) {
32b161aa	137	if (skb->len <= ETH_HLEN)
9bf211a3 GS	138	goto error;
9bf211a3 GS	139
a82c7ce5 BM	140	/* mapping VLANs to MBIM sessions:
	141	* no tag => IPS session <0>
	142	* 1 - 255 => IPS session <vlanid>
9f651cac BM	143	* 256 - 511 => DSS session <vlanid - 256>
9f651cac BM	144	* 512 - 4095 => unsupported, drop
a82c7ce5 BM	145	*/
	146	vlan_get_tag(skb, &tci);
	147
	148	switch (tci & 0x0f00) {
	149	case 0x0000: /* VLAN ID 0 - 255 */
9f651cac BM	150	/* verify that datagram is IPv4 or IPv6 */
	151	skb_reset_mac_header(skb);
	152	switch (eth_hdr(skb)->h_proto) {
	153	case htons(ETH_P_IP):
	154	case htons(ETH_P_IPV6):
	155	break;
	156	default:
	157	goto error;
	158	}
	159	c = (u8 *)&sign;
	160	c[3] = tci;
	161	break;
	162	case 0x0100: /* VLAN ID 256 - 511 */
	163	sign = cpu_to_le32(USB_CDC_MBIM_NDP16_DSS_SIGN);
a82c7ce5 BM	164	c = (u8 *)&sign;
	165	c[3] = tci;
	166	break;
	167	default:
	168	netif_err(dev, tx_err, dev->net,
	169	"unsupported tci=0x%04x\n", tci);
	170	goto error;
	171	}
9f651cac	172	skb_pull(skb, ETH_HLEN);
9bf211a3 GS	173	}
	174
	175	spin_lock_bh(&ctx->mtx);
bed6f762	176	skb_out = cdc_ncm_fill_tx_frame(dev, skb, sign);
9bf211a3 GS	177	spin_unlock_bh(&ctx->mtx);
	178	return skb_out;
	179
	180	error:
	181	if (skb)
	182	dev_kfree_skb_any(skb);
	183
	184	return NULL;
	185	}
	186
5b8f15f7 BM	187	/* Some devices are known to send Neigbor Solicitation messages and
	188	* require Neigbor Advertisement replies. The IPv6 core will not
	189	* respond since IFF_NOARP is set, so we must handle them ourselves.
	190	*/
	191	static void do_neigh_solicit(struct usbnet dev, u8 buf, u16 tci)
	192	{
	193	struct ipv6hdr iph = (void )buf;
	194	struct nd_msg msg = (void )(iph + 1);
	195	struct net_device *netdev;
	196	struct inet6_dev *in6_dev;
	197	bool is_router;
	198
	199	/* we'll only respond to requests from unicast addresses to
	200	* our solicited node addresses.
	201	*/
	202	if (!ipv6_addr_is_solict_mult(&iph->daddr) \|\|
	203	!(ipv6_addr_type(&iph->saddr) & IPV6_ADDR_UNICAST))
	204	return;
	205
	206	/* need to send the NA on the VLAN dev, if any */
4f4178f3 BM	207	rcu_read_lock();
4f4178f3 BM	208	if (tci) {
5b8f15f7 BM	209	netdev = __vlan_find_dev_deep(dev->net, htons(ETH_P_8021Q),
5b8f15f7 BM	210	tci);
4f4178f3 BM	211	if (!netdev) {
	212	rcu_read_unlock();
	213	return;
	214	}
	215	} else {
5b8f15f7	216	netdev = dev->net;
4f4178f3 BM	217	}
	218	dev_hold(netdev);
	219	rcu_read_unlock();
5b8f15f7 BM	220
	221	in6_dev = in6_dev_get(netdev);
	222	if (!in6_dev)
4f4178f3	223	goto out;
5b8f15f7 BM	224	is_router = !!in6_dev->cnf.forwarding;
	225	in6_dev_put(in6_dev);
	226
	227	/* ipv6_stub != NULL if in6_dev_get returned an inet6_dev */
	228	ipv6_stub->ndisc_send_na(netdev, NULL, &iph->saddr, &msg->target,
	229	is_router /* router */,
	230	true /* solicited */,
	231	false /* override */,
	232	true /* inc_opt */);
4f4178f3 BM	233	out:
4f4178f3 BM	234	dev_put(netdev);
5b8f15f7 BM	235	}
	236
	237	static bool is_neigh_solicit(u8 *buf, size_t len)
	238	{
	239	struct ipv6hdr iph = (void )buf;
	240	struct nd_msg msg = (void )(iph + 1);
	241
	242	return (len >= sizeof(struct ipv6hdr) + sizeof(struct nd_msg) &&
	243	iph->nexthdr == IPPROTO_ICMPV6 &&
	244	msg->icmph.icmp6_code == 0 &&
	245	msg->icmph.icmp6_type == NDISC_NEIGHBOUR_SOLICITATION);
	246	}
	247
	248
a82c7ce5	249	static struct sk_buff cdc_mbim_process_dgram(struct usbnet dev, u8 *buf, size_t len, u16 tci)
9bf211a3	250	{
9f651cac	251	__be16 proto = htons(ETH_P_802_3);
9bf211a3 GS	252	struct sk_buff *skb = NULL;
9bf211a3 GS	253
9f651cac BM	254	if (tci < 256) { /* IPS session? */
	255	if (len < sizeof(struct iphdr))
	256	goto err;
a82c7ce5	257
9f651cac BM	258	switch (*buf & 0xf0) {
	259	case 0x40:
	260	proto = htons(ETH_P_IP);
	261	break;
	262	case 0x60:
5b8f15f7 BM	263	if (is_neigh_solicit(buf, len))
5b8f15f7 BM	264	do_neigh_solicit(dev, buf, tci);
9f651cac BM	265	proto = htons(ETH_P_IPV6);
	266	break;
	267	default:
	268	goto err;
	269	}
9bf211a3 GS	270	}
	271
	272	skb = netdev_alloc_skb_ip_align(dev->net, len + ETH_HLEN);
	273	if (!skb)
	274	goto err;
	275
	276	/* add an ethernet header */
	277	skb_put(skb, ETH_HLEN);
	278	skb_reset_mac_header(skb);
	279	eth_hdr(skb)->h_proto = proto;
	280	memset(eth_hdr(skb)->h_source, 0, ETH_ALEN);
	281	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
	282
	283	/* add datagram */
	284	memcpy(skb_put(skb, len), buf, len);
a82c7ce5 BM	285
	286	/* map MBIM session to VLAN */
	287	if (tci)
86a9bad3	288	vlan_put_tag(skb, htons(ETH_P_8021Q), tci);
9bf211a3 GS	289	err:
	290	return skb;
	291	}
	292
	293	static int cdc_mbim_rx_fixup(struct usbnet dev, struct sk_buff skb_in)
	294	{
	295	struct sk_buff *skb;
a82c7ce5 BM	296	struct cdc_mbim_state info = (void )&dev->data;
a82c7ce5 BM	297	struct cdc_ncm_ctx *ctx = info->ctx;
9bf211a3 GS	298	int len;
	299	int nframes;
	300	int x;
	301	int offset;
	302	struct usb_cdc_ncm_ndp16 *ndp16;
	303	struct usb_cdc_ncm_dpe16 *dpe16;
	304	int ndpoffset;
	305	int loopcount = 50; /* arbitrary max preventing infinite loop */
a82c7ce5 BM	306	u8 *c;
a82c7ce5 BM	307	u16 tci;
9bf211a3 GS	308
	309	ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);
	310	if (ndpoffset < 0)
	311	goto error;
	312
	313	next_ndp:
	314	nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);
	315	if (nframes < 0)
	316	goto error;
	317
	318	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);
	319
a82c7ce5	320	switch (ndp16->dwSignature & cpu_to_le32(0x00ffffff)) {
9bf211a3	321	case cpu_to_le32(USB_CDC_MBIM_NDP16_IPS_SIGN):
a82c7ce5 BM	322	c = (u8 *)&ndp16->dwSignature;
a82c7ce5 BM	323	tci = c[3];
9bf211a3	324	break;
9f651cac BM	325	case cpu_to_le32(USB_CDC_MBIM_NDP16_DSS_SIGN):
	326	c = (u8 *)&ndp16->dwSignature;
	327	tci = c[3] + 256;
	328	break;
9bf211a3 GS	329	default:
	330	netif_dbg(dev, rx_err, dev->net,
	331	"unsupported NDP signature <0x%08x>\n",
	332	le32_to_cpu(ndp16->dwSignature));
	333	goto err_ndp;
	334
	335	}
	336
	337	dpe16 = ndp16->dpe16;
	338	for (x = 0; x < nframes; x++, dpe16++) {
	339	offset = le16_to_cpu(dpe16->wDatagramIndex);
	340	len = le16_to_cpu(dpe16->wDatagramLength);
	341
	342	/*
	343	* CDC NCM ch. 3.7
	344	* All entries after first NULL entry are to be ignored
	345	*/
	346	if ((offset == 0) \|\| (len == 0)) {
	347	if (!x)
	348	goto err_ndp; /* empty NTB */
	349	break;
	350	}
	351
	352	/* sanity checking */
a82c7ce5	353	if (((offset + len) > skb_in->len) \|\| (len > ctx->rx_max)) {
9bf211a3 GS	354	netif_dbg(dev, rx_err, dev->net,
	355	"invalid frame detected (ignored) offset[%u]=%u, length=%u, skb=%p\n",
	356	x, offset, len, skb_in);
	357	if (!x)
	358	goto err_ndp;
	359	break;
	360	} else {
a82c7ce5	361	skb = cdc_mbim_process_dgram(dev, skb_in->data + offset, len, tci);
9bf211a3 GS	362	if (!skb)
	363	goto error;
	364	usbnet_skb_return(dev, skb);
	365	}
	366	}
	367	err_ndp:
	368	/* are there more NDPs to process? */
	369	ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);
	370	if (ndpoffset && loopcount--)
	371	goto next_ndp;
	372
	373	return 1;
	374	error:
	375	return 0;
	376	}
	377
	378	static int cdc_mbim_suspend(struct usb_interface *intf, pm_message_t message)
	379	{
e62416e8	380	int ret = -ENODEV;
9bf211a3 GS	381	struct usbnet *dev = usb_get_intfdata(intf);
	382	struct cdc_mbim_state info = (void )&dev->data;
	383	struct cdc_ncm_ctx *ctx = info->ctx;
	384
e62416e8	385	if (!ctx)
9bf211a3	386	goto error;
9bf211a3	387
9a44312a ML	388	/*
	389	* Both usbnet_suspend() and subdriver->suspend() MUST return 0
	390	* in system sleep context, otherwise, the resume callback has
	391	* to recover device from previous suspend failure.
	392	*/
9bf211a3 GS	393	ret = usbnet_suspend(intf, message);
	394	if (ret < 0)
	395	goto error;
	396
	397	if (intf == ctx->control && info->subdriver && info->subdriver->suspend)
	398	ret = info->subdriver->suspend(intf, message);
	399	if (ret < 0)
	400	usbnet_resume(intf);
	401
	402	error:
	403	return ret;
	404	}
	405
	406	static int cdc_mbim_resume(struct usb_interface *intf)
	407	{
	408	int ret = 0;
	409	struct usbnet *dev = usb_get_intfdata(intf);
	410	struct cdc_mbim_state info = (void )&dev->data;
	411	struct cdc_ncm_ctx *ctx = info->ctx;
	412	bool callsub = (intf == ctx->control && info->subdriver && info->subdriver->resume);
	413
	414	if (callsub)
	415	ret = info->subdriver->resume(intf);
	416	if (ret < 0)
	417	goto err;
	418	ret = usbnet_resume(intf);
c37ac9b2	419	if (ret < 0 && callsub)
9bf211a3 GS	420	info->subdriver->suspend(intf, PMSG_SUSPEND);
	421	err:
	422	return ret;
	423	}
	424
	425	static const struct driver_info cdc_mbim_info = {
844e88f0 BM	426	.description = "CDC MBIM",
	427	.flags = FLAG_NO_SETINT \| FLAG_MULTI_PACKET \| FLAG_WWAN,
	428	.bind = cdc_mbim_bind,
	429	.unbind = cdc_mbim_unbind,
	430	.manage_power = cdc_mbim_manage_power,
	431	.rx_fixup = cdc_mbim_rx_fixup,
	432	.tx_fixup = cdc_mbim_tx_fixup,
	433	};
	434
	435	/* MBIM and NCM devices should not need a ZLP after NTBs with
c1a2e954 BM	436	* dwNtbOutMaxSize length. Nevertheless, a number of devices from
	437	* different vendor IDs will fail unless we send ZLPs, forcing us
	438	* to make this the default.
	439	*
	440	* This default may cause a performance penalty for spec conforming
	441	* devices wanting to take advantage of optimizations possible without
	442	* ZLPs. A whitelist is added in an attempt to avoid this for devices
	443	* known to conform to the MBIM specification.
	444	*
	445	* All known devices supporting NCM compatibility mode are also
	446	* conforming to the NCM and MBIM specifications. For this reason, the
	447	* NCM subclass entry is also in the ZLP whitelist.
844e88f0 BM	448	*/
844e88f0 BM	449	static const struct driver_info cdc_mbim_info_zlp = {
9bf211a3	450	.description = "CDC MBIM",
328d7b8a	451	.flags = FLAG_NO_SETINT \| FLAG_MULTI_PACKET \| FLAG_WWAN \| FLAG_SEND_ZLP,
9bf211a3 GS	452	.bind = cdc_mbim_bind,
	453	.unbind = cdc_mbim_unbind,
	454	.manage_power = cdc_mbim_manage_power,
	455	.rx_fixup = cdc_mbim_rx_fixup,
	456	.tx_fixup = cdc_mbim_tx_fixup,
	457	};
	458
	459	static const struct usb_device_id mbim_devs[] = {
	460	/* This duplicate NCM entry is intentional. MBIM devices can
	461	* be disguised as NCM by default, and this is necessary to
	462	* allow us to bind the correct driver_info to such devices.
	463	*
	464	* bind() will sort out this for us, selecting the correct
	465	* entry and reject the other
	466	*/
	467	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
	468	.driver_info = (unsigned long)&cdc_mbim_info,
	469	},
c1a2e954 BM	470	/* ZLP conformance whitelist: All Ericsson MBIM devices */
	471	{ USB_VENDOR_AND_INTERFACE_INFO(0x0bdb, USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
	472	.driver_info = (unsigned long)&cdc_mbim_info,
03803a59	473	},
c1a2e954	474	/* default entry */
9bf211a3	475	{ USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
c1a2e954	476	.driver_info = (unsigned long)&cdc_mbim_info_zlp,
9bf211a3 GS	477	},
	478	{
	479	},
	480	};
	481	MODULE_DEVICE_TABLE(usb, mbim_devs);
	482
	483	static struct usb_driver cdc_mbim_driver = {
	484	.name = "cdc_mbim",
	485	.id_table = mbim_devs,
	486	.probe = usbnet_probe,
	487	.disconnect = usbnet_disconnect,
	488	.suspend = cdc_mbim_suspend,
	489	.resume = cdc_mbim_resume,
	490	.reset_resume = cdc_mbim_resume,
	491	.supports_autosuspend = 1,
	492	.disable_hub_initiated_lpm = 1,
	493	};
	494	module_usb_driver(cdc_mbim_driver);
	495
	496	MODULE_AUTHOR("Greg Suarez <gsuarez@smithmicro.com>");
	497	MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
	498	MODULE_DESCRIPTION("USB CDC MBIM host driver");
	499	MODULE_LICENSE("GPL");