tizen 2.4 release
[profile/mobile/platform/kernel/linux-3.10-sc7730.git] / drivers / usb / gadget / rndis.c
1 /*
2  * RNDIS MSG parser
3  *
4  * Authors:     Benedikt Spranger, Pengutronix
5  *              Robert Schwebel, Pengutronix
6  *
7  *              This program is free software; you can redistribute it and/or
8  *              modify it under the terms of the GNU General Public License
9  *              version 2, as published by the Free Software Foundation.
10  *
11  *              This software was originally developed in conformance with
12  *              Microsoft's Remote NDIS Specification License Agreement.
13  *
14  * 03/12/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
15  *              Fixed message length bug in init_response
16  *
17  * 03/25/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
18  *              Fixed rndis_rm_hdr length bug.
19  *
20  * Copyright (C) 2004 by David Brownell
21  *              updates to merge with Linux 2.6, better match RNDIS spec
22  */
23
24 #include <linux/module.h>
25 #include <linux/moduleparam.h>
26 #include <linux/kernel.h>
27 #include <linux/errno.h>
28 #include <linux/init.h>
29 #include <linux/list.h>
30 #include <linux/proc_fs.h>
31 #include <linux/slab.h>
32 #include <linux/seq_file.h>
33 #include <linux/netdevice.h>
34
35 #include <asm/io.h>
36 #include <asm/byteorder.h>
37 #include <asm/unaligned.h>
38
39
40 #undef  VERBOSE_DEBUG
41
42 #include "rndis.h"
43
44
45 /* The driver for your USB chip needs to support ep0 OUT to work with
46  * RNDIS, plus all three CDC Ethernet endpoints (interrupt not optional).
47  *
48  * Windows hosts need an INF file like Documentation/usb/linux.inf
49  * and will be happier if you provide the host_addr module parameter.
50  */
51
52 #if 0
53 static int rndis_debug = 0;
54 module_param (rndis_debug, int, 0);
55 MODULE_PARM_DESC (rndis_debug, "enable debugging");
56 #else
57 #define rndis_debug             0
58 #endif
59
60 #define RNDIS_MAX_CONFIGS       1
61
62
63 static rndis_params rndis_per_dev_params[RNDIS_MAX_CONFIGS];
64
65 /* Driver Version */
66 static const __le32 rndis_driver_version = cpu_to_le32(1);
67
68 /* Function Prototypes */
69 static rndis_resp_t *rndis_add_response(int configNr, u32 length);
70
71
72 /* supported OIDs */
73 static const u32 oid_supported_list[] =
74 {
75         /* the general stuff */
76         RNDIS_OID_GEN_SUPPORTED_LIST,
77         RNDIS_OID_GEN_HARDWARE_STATUS,
78         RNDIS_OID_GEN_MEDIA_SUPPORTED,
79         RNDIS_OID_GEN_MEDIA_IN_USE,
80         RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE,
81         RNDIS_OID_GEN_LINK_SPEED,
82         RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE,
83         RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE,
84         RNDIS_OID_GEN_VENDOR_ID,
85         RNDIS_OID_GEN_VENDOR_DESCRIPTION,
86         RNDIS_OID_GEN_VENDOR_DRIVER_VERSION,
87         RNDIS_OID_GEN_CURRENT_PACKET_FILTER,
88         RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE,
89         RNDIS_OID_GEN_MEDIA_CONNECT_STATUS,
90         RNDIS_OID_GEN_PHYSICAL_MEDIUM,
91
92         /* the statistical stuff */
93         RNDIS_OID_GEN_XMIT_OK,
94         RNDIS_OID_GEN_RCV_OK,
95         RNDIS_OID_GEN_XMIT_ERROR,
96         RNDIS_OID_GEN_RCV_ERROR,
97         RNDIS_OID_GEN_RCV_NO_BUFFER,
98 #ifdef  RNDIS_OPTIONAL_STATS
99         RNDIS_OID_GEN_DIRECTED_BYTES_XMIT,
100         RNDIS_OID_GEN_DIRECTED_FRAMES_XMIT,
101         RNDIS_OID_GEN_MULTICAST_BYTES_XMIT,
102         RNDIS_OID_GEN_MULTICAST_FRAMES_XMIT,
103         RNDIS_OID_GEN_BROADCAST_BYTES_XMIT,
104         RNDIS_OID_GEN_BROADCAST_FRAMES_XMIT,
105         RNDIS_OID_GEN_DIRECTED_BYTES_RCV,
106         RNDIS_OID_GEN_DIRECTED_FRAMES_RCV,
107         RNDIS_OID_GEN_MULTICAST_BYTES_RCV,
108         RNDIS_OID_GEN_MULTICAST_FRAMES_RCV,
109         RNDIS_OID_GEN_BROADCAST_BYTES_RCV,
110         RNDIS_OID_GEN_BROADCAST_FRAMES_RCV,
111         RNDIS_OID_GEN_RCV_CRC_ERROR,
112         RNDIS_OID_GEN_TRANSMIT_QUEUE_LENGTH,
113 #endif  /* RNDIS_OPTIONAL_STATS */
114
115         /* mandatory 802.3 */
116         /* the general stuff */
117         RNDIS_OID_802_3_PERMANENT_ADDRESS,
118         RNDIS_OID_802_3_CURRENT_ADDRESS,
119         RNDIS_OID_802_3_MULTICAST_LIST,
120         RNDIS_OID_802_3_MAC_OPTIONS,
121         RNDIS_OID_802_3_MAXIMUM_LIST_SIZE,
122
123         /* the statistical stuff */
124         RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT,
125         RNDIS_OID_802_3_XMIT_ONE_COLLISION,
126         RNDIS_OID_802_3_XMIT_MORE_COLLISIONS,
127 #ifdef  RNDIS_OPTIONAL_STATS
128         RNDIS_OID_802_3_XMIT_DEFERRED,
129         RNDIS_OID_802_3_XMIT_MAX_COLLISIONS,
130         RNDIS_OID_802_3_RCV_OVERRUN,
131         RNDIS_OID_802_3_XMIT_UNDERRUN,
132         RNDIS_OID_802_3_XMIT_HEARTBEAT_FAILURE,
133         RNDIS_OID_802_3_XMIT_TIMES_CRS_LOST,
134         RNDIS_OID_802_3_XMIT_LATE_COLLISIONS,
135 #endif  /* RNDIS_OPTIONAL_STATS */
136
137 #ifdef  RNDIS_PM
138         /* PM and wakeup are "mandatory" for USB, but the RNDIS specs
139          * don't say what they mean ... and the NDIS specs are often
140          * confusing and/or ambiguous in this context.  (That is, more
141          * so than their specs for the other OIDs.)
142          *
143          * FIXME someone who knows what these should do, please
144          * implement them!
145          */
146
147         /* power management */
148         OID_PNP_CAPABILITIES,
149         OID_PNP_QUERY_POWER,
150         OID_PNP_SET_POWER,
151
152 #ifdef  RNDIS_WAKEUP
153         /* wake up host */
154         OID_PNP_ENABLE_WAKE_UP,
155         OID_PNP_ADD_WAKE_UP_PATTERN,
156         OID_PNP_REMOVE_WAKE_UP_PATTERN,
157 #endif  /* RNDIS_WAKEUP */
158 #endif  /* RNDIS_PM */
159 };
160
161
162 /* NDIS Functions */
163 static int gen_ndis_query_resp(int configNr, u32 OID, u8 *buf,
164                                unsigned buf_len, rndis_resp_t *r)
165 {
166         int retval = -ENOTSUPP;
167         u32 length = 4; /* usually */
168         __le32 *outbuf;
169         int i, count;
170         rndis_query_cmplt_type *resp;
171         struct net_device *net;
172         struct rtnl_link_stats64 temp;
173         const struct rtnl_link_stats64 *stats;
174
175         if (!r) return -ENOMEM;
176         resp = (rndis_query_cmplt_type *)r->buf;
177
178         if (!resp) return -ENOMEM;
179
180         if (buf_len && rndis_debug > 1) {
181                 pr_debug("query OID %08x value, len %d:\n", OID, buf_len);
182                 for (i = 0; i < buf_len; i += 16) {
183                         pr_debug("%03d: %08x %08x %08x %08x\n", i,
184                                 get_unaligned_le32(&buf[i]),
185                                 get_unaligned_le32(&buf[i + 4]),
186                                 get_unaligned_le32(&buf[i + 8]),
187                                 get_unaligned_le32(&buf[i + 12]));
188                 }
189         }
190
191         /* response goes here, right after the header */
192         outbuf = (__le32 *)&resp[1];
193         resp->InformationBufferOffset = cpu_to_le32(16);
194
195         net = rndis_per_dev_params[configNr].dev;
196         stats = dev_get_stats(net, &temp);
197
198         switch (OID) {
199
200         /* general oids (table 4-1) */
201
202         /* mandatory */
203         case RNDIS_OID_GEN_SUPPORTED_LIST:
204                 pr_debug("%s: RNDIS_OID_GEN_SUPPORTED_LIST\n", __func__);
205                 length = sizeof(oid_supported_list);
206                 count  = length / sizeof(u32);
207                 for (i = 0; i < count; i++)
208                         outbuf[i] = cpu_to_le32(oid_supported_list[i]);
209                 retval = 0;
210                 break;
211
212         /* mandatory */
213         case RNDIS_OID_GEN_HARDWARE_STATUS:
214                 pr_debug("%s: RNDIS_OID_GEN_HARDWARE_STATUS\n", __func__);
215                 /* Bogus question!
216                  * Hardware must be ready to receive high level protocols.
217                  * BTW:
218                  * reddite ergo quae sunt Caesaris Caesari
219                  * et quae sunt Dei Deo!
220                  */
221                 *outbuf = cpu_to_le32(0);
222                 retval = 0;
223                 break;
224
225         /* mandatory */
226         case RNDIS_OID_GEN_MEDIA_SUPPORTED:
227                 pr_debug("%s: RNDIS_OID_GEN_MEDIA_SUPPORTED\n", __func__);
228                 *outbuf = cpu_to_le32(rndis_per_dev_params[configNr].medium);
229                 retval = 0;
230                 break;
231
232         /* mandatory */
233         case RNDIS_OID_GEN_MEDIA_IN_USE:
234                 pr_debug("%s: RNDIS_OID_GEN_MEDIA_IN_USE\n", __func__);
235                 /* one medium, one transport... (maybe you do it better) */
236                 *outbuf = cpu_to_le32(rndis_per_dev_params[configNr].medium);
237                 retval = 0;
238                 break;
239
240         /* mandatory */
241         case RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE:
242                 pr_debug("%s: RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE\n", __func__);
243                 if (rndis_per_dev_params[configNr].dev) {
244                         *outbuf = cpu_to_le32(
245                                 rndis_per_dev_params[configNr].dev->mtu);
246                         retval = 0;
247                 }
248                 break;
249
250         /* mandatory */
251         case RNDIS_OID_GEN_LINK_SPEED:
252                 if (rndis_debug > 1)
253                         pr_debug("%s: RNDIS_OID_GEN_LINK_SPEED\n", __func__);
254                 if (rndis_per_dev_params[configNr].media_state
255                                 == RNDIS_MEDIA_STATE_DISCONNECTED)
256                         *outbuf = cpu_to_le32(0);
257                 else
258                         *outbuf = cpu_to_le32(
259                                 rndis_per_dev_params[configNr].speed);
260                 retval = 0;
261                 break;
262
263         /* mandatory */
264         case RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE:
265                 pr_debug("%s: RNDIS_OID_GEN_TRANSMIT_BLOCK_SIZE\n", __func__);
266                 if (rndis_per_dev_params[configNr].dev) {
267                         *outbuf = cpu_to_le32(
268                                 rndis_per_dev_params[configNr].dev->mtu);
269                         retval = 0;
270                 }
271                 break;
272
273         /* mandatory */
274         case RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE:
275                 pr_debug("%s: RNDIS_OID_GEN_RECEIVE_BLOCK_SIZE\n", __func__);
276                 if (rndis_per_dev_params[configNr].dev) {
277                         *outbuf = cpu_to_le32(
278                                 rndis_per_dev_params[configNr].dev->mtu);
279                         retval = 0;
280                 }
281                 break;
282
283         /* mandatory */
284         case RNDIS_OID_GEN_VENDOR_ID:
285                 pr_debug("%s: RNDIS_OID_GEN_VENDOR_ID\n", __func__);
286                 *outbuf = cpu_to_le32(
287                         rndis_per_dev_params[configNr].vendorID);
288                 retval = 0;
289                 break;
290
291         /* mandatory */
292         case RNDIS_OID_GEN_VENDOR_DESCRIPTION:
293                 pr_debug("%s: RNDIS_OID_GEN_VENDOR_DESCRIPTION\n", __func__);
294                 if (rndis_per_dev_params[configNr].vendorDescr) {
295                         length = strlen(rndis_per_dev_params[configNr].
296                                         vendorDescr);
297                         memcpy(outbuf,
298                                 rndis_per_dev_params[configNr].vendorDescr,
299                                 length);
300                 } else {
301                         outbuf[0] = 0;
302                 }
303                 retval = 0;
304                 break;
305
306         case RNDIS_OID_GEN_VENDOR_DRIVER_VERSION:
307                 pr_debug("%s: RNDIS_OID_GEN_VENDOR_DRIVER_VERSION\n", __func__);
308                 /* Created as LE */
309                 *outbuf = rndis_driver_version;
310                 retval = 0;
311                 break;
312
313         /* mandatory */
314         case RNDIS_OID_GEN_CURRENT_PACKET_FILTER:
315                 pr_debug("%s: RNDIS_OID_GEN_CURRENT_PACKET_FILTER\n", __func__);
316                 *outbuf = cpu_to_le32(*rndis_per_dev_params[configNr].filter);
317                 retval = 0;
318                 break;
319
320         /* mandatory */
321         case RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE:
322                 pr_debug("%s: RNDIS_OID_GEN_MAXIMUM_TOTAL_SIZE\n", __func__);
323                 *outbuf = cpu_to_le32(RNDIS_MAX_TOTAL_SIZE);
324                 retval = 0;
325                 break;
326
327         /* mandatory */
328         case RNDIS_OID_GEN_MEDIA_CONNECT_STATUS:
329                 if (rndis_debug > 1)
330                         pr_debug("%s: RNDIS_OID_GEN_MEDIA_CONNECT_STATUS\n", __func__);
331                 *outbuf = cpu_to_le32(rndis_per_dev_params[configNr]
332                                                 .media_state);
333                 retval = 0;
334                 break;
335
336         case RNDIS_OID_GEN_PHYSICAL_MEDIUM:
337                 pr_debug("%s: RNDIS_OID_GEN_PHYSICAL_MEDIUM\n", __func__);
338                 *outbuf = cpu_to_le32(0);
339                 retval = 0;
340                 break;
341
342         /* The RNDIS specification is incomplete/wrong.   Some versions
343          * of MS-Windows expect OIDs that aren't specified there.  Other
344          * versions emit undefined RNDIS messages. DOCUMENT ALL THESE!
345          */
346         case RNDIS_OID_GEN_MAC_OPTIONS:         /* from WinME */
347                 pr_debug("%s: RNDIS_OID_GEN_MAC_OPTIONS\n", __func__);
348                 *outbuf = cpu_to_le32(
349                           RNDIS_MAC_OPTION_RECEIVE_SERIALIZED
350                         | RNDIS_MAC_OPTION_FULL_DUPLEX);
351                 retval = 0;
352                 break;
353
354         /* statistics OIDs (table 4-2) */
355
356         /* mandatory */
357         case RNDIS_OID_GEN_XMIT_OK:
358                 if (rndis_debug > 1)
359                         pr_debug("%s: RNDIS_OID_GEN_XMIT_OK\n", __func__);
360                 if (stats) {
361                         *outbuf = cpu_to_le32(stats->tx_packets
362                                 - stats->tx_errors - stats->tx_dropped);
363                         retval = 0;
364                 }
365                 break;
366
367         /* mandatory */
368         case RNDIS_OID_GEN_RCV_OK:
369                 if (rndis_debug > 1)
370                         pr_debug("%s: RNDIS_OID_GEN_RCV_OK\n", __func__);
371                 if (stats) {
372                         *outbuf = cpu_to_le32(stats->rx_packets
373                                 - stats->rx_errors - stats->rx_dropped);
374                         retval = 0;
375                 }
376                 break;
377
378         /* mandatory */
379         case RNDIS_OID_GEN_XMIT_ERROR:
380                 if (rndis_debug > 1)
381                         pr_debug("%s: RNDIS_OID_GEN_XMIT_ERROR\n", __func__);
382                 if (stats) {
383                         *outbuf = cpu_to_le32(stats->tx_errors);
384                         retval = 0;
385                 }
386                 break;
387
388         /* mandatory */
389         case RNDIS_OID_GEN_RCV_ERROR:
390                 if (rndis_debug > 1)
391                         pr_debug("%s: RNDIS_OID_GEN_RCV_ERROR\n", __func__);
392                 if (stats) {
393                         *outbuf = cpu_to_le32(stats->rx_errors);
394                         retval = 0;
395                 }
396                 break;
397
398         /* mandatory */
399         case RNDIS_OID_GEN_RCV_NO_BUFFER:
400                 pr_debug("%s: RNDIS_OID_GEN_RCV_NO_BUFFER\n", __func__);
401                 if (stats) {
402                         *outbuf = cpu_to_le32(stats->rx_dropped);
403                         retval = 0;
404                 }
405                 break;
406
407         /* ieee802.3 OIDs (table 4-3) */
408
409         /* mandatory */
410         case RNDIS_OID_802_3_PERMANENT_ADDRESS:
411                 pr_debug("%s: RNDIS_OID_802_3_PERMANENT_ADDRESS\n", __func__);
412                 if (rndis_per_dev_params[configNr].dev) {
413                         length = ETH_ALEN;
414                         memcpy(outbuf,
415                                 rndis_per_dev_params[configNr].host_mac,
416                                 length);
417                         retval = 0;
418                 }
419                 break;
420
421         /* mandatory */
422         case RNDIS_OID_802_3_CURRENT_ADDRESS:
423                 pr_debug("%s: RNDIS_OID_802_3_CURRENT_ADDRESS\n", __func__);
424                 if (rndis_per_dev_params[configNr].dev) {
425                         length = ETH_ALEN;
426                         memcpy(outbuf,
427                                 rndis_per_dev_params [configNr].host_mac,
428                                 length);
429                         retval = 0;
430                 }
431                 break;
432
433         /* mandatory */
434         case RNDIS_OID_802_3_MULTICAST_LIST:
435                 pr_debug("%s: RNDIS_OID_802_3_MULTICAST_LIST\n", __func__);
436                 /* Multicast base address only */
437                 *outbuf = cpu_to_le32(0xE0000000);
438                 retval = 0;
439                 break;
440
441         /* mandatory */
442         case RNDIS_OID_802_3_MAXIMUM_LIST_SIZE:
443                 pr_debug("%s: RNDIS_OID_802_3_MAXIMUM_LIST_SIZE\n", __func__);
444                 /* Multicast base address only */
445                 *outbuf = cpu_to_le32(1);
446                 retval = 0;
447                 break;
448
449         case RNDIS_OID_802_3_MAC_OPTIONS:
450                 pr_debug("%s: RNDIS_OID_802_3_MAC_OPTIONS\n", __func__);
451                 *outbuf = cpu_to_le32(0);
452                 retval = 0;
453                 break;
454
455         /* ieee802.3 statistics OIDs (table 4-4) */
456
457         /* mandatory */
458         case RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT:
459                 pr_debug("%s: RNDIS_OID_802_3_RCV_ERROR_ALIGNMENT\n", __func__);
460                 if (stats) {
461                         *outbuf = cpu_to_le32(stats->rx_frame_errors);
462                         retval = 0;
463                 }
464                 break;
465
466         /* mandatory */
467         case RNDIS_OID_802_3_XMIT_ONE_COLLISION:
468                 pr_debug("%s: RNDIS_OID_802_3_XMIT_ONE_COLLISION\n", __func__);
469                 *outbuf = cpu_to_le32(0);
470                 retval = 0;
471                 break;
472
473         /* mandatory */
474         case RNDIS_OID_802_3_XMIT_MORE_COLLISIONS:
475                 pr_debug("%s: RNDIS_OID_802_3_XMIT_MORE_COLLISIONS\n", __func__);
476                 *outbuf = cpu_to_le32(0);
477                 retval = 0;
478                 break;
479
480         default:
481                 pr_warning("%s: query unknown OID 0x%08X\n",
482                          __func__, OID);
483         }
484         if (retval < 0)
485                 length = 0;
486
487         resp->InformationBufferLength = cpu_to_le32(length);
488         r->length = length + sizeof(*resp);
489         resp->MessageLength = cpu_to_le32(r->length);
490         return retval;
491 }
492
493 static int gen_ndis_set_resp(u8 configNr, u32 OID, u8 *buf, u32 buf_len,
494                              rndis_resp_t *r)
495 {
496         rndis_set_cmplt_type *resp;
497         int i, retval = -ENOTSUPP;
498         struct rndis_params *params;
499
500         if (!r)
501                 return -ENOMEM;
502         resp = (rndis_set_cmplt_type *)r->buf;
503         if (!resp)
504                 return -ENOMEM;
505
506         if (buf_len && rndis_debug > 1) {
507                 pr_debug("set OID %08x value, len %d:\n", OID, buf_len);
508                 for (i = 0; i < buf_len; i += 16) {
509                         pr_debug("%03d: %08x %08x %08x %08x\n", i,
510                                 get_unaligned_le32(&buf[i]),
511                                 get_unaligned_le32(&buf[i + 4]),
512                                 get_unaligned_le32(&buf[i + 8]),
513                                 get_unaligned_le32(&buf[i + 12]));
514                 }
515         }
516
517         params = &rndis_per_dev_params[configNr];
518         switch (OID) {
519         case RNDIS_OID_GEN_CURRENT_PACKET_FILTER:
520
521                 /* these NDIS_PACKET_TYPE_* bitflags are shared with
522                  * cdc_filter; it's not RNDIS-specific
523                  * NDIS_PACKET_TYPE_x == USB_CDC_PACKET_TYPE_x for x in:
524                  *      PROMISCUOUS, DIRECTED,
525                  *      MULTICAST, ALL_MULTICAST, BROADCAST
526                  */
527                 *params->filter = (u16)get_unaligned_le32(buf);
528                 pr_debug("%s: RNDIS_OID_GEN_CURRENT_PACKET_FILTER %08x\n",
529                         __func__, *params->filter);
530
531                 /* this call has a significant side effect:  it's
532                  * what makes the packet flow start and stop, like
533                  * activating the CDC Ethernet altsetting.
534                  */
535                 retval = 0;
536                 if (*params->filter) {
537                         params->state = RNDIS_DATA_INITIALIZED;
538                         netif_carrier_on(params->dev);
539                         if (netif_running(params->dev))
540                                 netif_wake_queue(params->dev);
541                 } else {
542                         params->state = RNDIS_INITIALIZED;
543                         netif_carrier_off(params->dev);
544                         netif_stop_queue(params->dev);
545                 }
546                 break;
547
548         case RNDIS_OID_802_3_MULTICAST_LIST:
549                 /* I think we can ignore this */
550                 pr_debug("%s: RNDIS_OID_802_3_MULTICAST_LIST\n", __func__);
551                 retval = 0;
552                 break;
553
554         default:
555                 pr_warning("%s: set unknown OID 0x%08X, size %d\n",
556                          __func__, OID, buf_len);
557         }
558
559         return retval;
560 }
561
562 /*
563  * Response Functions
564  */
565 #ifdef CONFIG_USB_SPRD_DWC
566 #define RNDIS_MSG_MAX_NUM 10
567 #else
568 #define RNDIS_MSG_MAX_NUM 1
569 #endif
570 static int rndis_init_response(int configNr, rndis_init_msg_type *buf)
571 {
572         rndis_init_cmplt_type *resp;
573         rndis_resp_t *r;
574         struct rndis_params *params = rndis_per_dev_params + configNr;
575
576         if (!params->dev)
577                 return -ENOTSUPP;
578
579         r = rndis_add_response(configNr, sizeof(rndis_init_cmplt_type));
580         if (!r)
581                 return -ENOMEM;
582         resp = (rndis_init_cmplt_type *)r->buf;
583
584         resp->MessageType = cpu_to_le32(RNDIS_MSG_INIT_C);
585         resp->MessageLength = cpu_to_le32(52);
586         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
587         resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
588         resp->MajorVersion = cpu_to_le32(RNDIS_MAJOR_VERSION);
589         resp->MinorVersion = cpu_to_le32(RNDIS_MINOR_VERSION);
590         resp->DeviceFlags = cpu_to_le32(RNDIS_DF_CONNECTIONLESS);
591         resp->Medium = cpu_to_le32(RNDIS_MEDIUM_802_3);
592         resp->MaxPacketsPerTransfer = cpu_to_le32(RNDIS_MSG_MAX_NUM);
593         resp->MaxTransferSize = cpu_to_le32(
594                   (params->dev->mtu
595                 + sizeof(struct ethhdr)
596                 + sizeof(struct rndis_packet_msg_type)
597                 + 22)*RNDIS_MSG_MAX_NUM);
598         resp->PacketAlignmentFactor = cpu_to_le32(0);
599         resp->AFListOffset = cpu_to_le32(0);
600         resp->AFListSize = cpu_to_le32(0);
601
602         params->resp_avail(params->v);
603         return 0;
604 }
605
606 static int rndis_query_response(int configNr, rndis_query_msg_type *buf)
607 {
608         rndis_query_cmplt_type *resp;
609         rndis_resp_t *r;
610         struct rndis_params *params = rndis_per_dev_params + configNr;
611
612         /* pr_debug("%s: OID = %08X\n", __func__, cpu_to_le32(buf->OID)); */
613         if (!params->dev)
614                 return -ENOTSUPP;
615
616         /*
617          * we need more memory:
618          * gen_ndis_query_resp expects enough space for
619          * rndis_query_cmplt_type followed by data.
620          * oid_supported_list is the largest data reply
621          */
622         r = rndis_add_response(configNr,
623                 sizeof(oid_supported_list) + sizeof(rndis_query_cmplt_type));
624         if (!r)
625                 return -ENOMEM;
626         resp = (rndis_query_cmplt_type *)r->buf;
627
628         resp->MessageType = cpu_to_le32(RNDIS_MSG_QUERY_C);
629         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
630
631         if (gen_ndis_query_resp(configNr, le32_to_cpu(buf->OID),
632                         le32_to_cpu(buf->InformationBufferOffset)
633                                         + 8 + (u8 *)buf,
634                         le32_to_cpu(buf->InformationBufferLength),
635                         r)) {
636                 /* OID not supported */
637                 resp->Status = cpu_to_le32(RNDIS_STATUS_NOT_SUPPORTED);
638                 resp->MessageLength = cpu_to_le32(sizeof *resp);
639                 resp->InformationBufferLength = cpu_to_le32(0);
640                 resp->InformationBufferOffset = cpu_to_le32(0);
641         } else
642                 resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
643
644         params->resp_avail(params->v);
645         return 0;
646 }
647
648 static int rndis_set_response(int configNr, rndis_set_msg_type *buf)
649 {
650         u32 BufLength, BufOffset;
651         rndis_set_cmplt_type *resp;
652         rndis_resp_t *r;
653         struct rndis_params *params = rndis_per_dev_params + configNr;
654
655         r = rndis_add_response(configNr, sizeof(rndis_set_cmplt_type));
656         if (!r)
657                 return -ENOMEM;
658         resp = (rndis_set_cmplt_type *)r->buf;
659
660         BufLength = le32_to_cpu(buf->InformationBufferLength);
661         BufOffset = le32_to_cpu(buf->InformationBufferOffset);
662
663 #ifdef  VERBOSE_DEBUG
664         pr_debug("%s: Length: %d\n", __func__, BufLength);
665         pr_debug("%s: Offset: %d\n", __func__, BufOffset);
666         pr_debug("%s: InfoBuffer: ", __func__);
667
668         for (i = 0; i < BufLength; i++) {
669                 pr_debug("%02x ", *(((u8 *) buf) + i + 8 + BufOffset));
670         }
671
672         pr_debug("\n");
673 #endif
674
675         resp->MessageType = cpu_to_le32(RNDIS_MSG_SET_C);
676         resp->MessageLength = cpu_to_le32(16);
677         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
678         if (gen_ndis_set_resp(configNr, le32_to_cpu(buf->OID),
679                         ((u8 *)buf) + 8 + BufOffset, BufLength, r))
680                 resp->Status = cpu_to_le32(RNDIS_STATUS_NOT_SUPPORTED);
681         else
682                 resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
683
684         params->resp_avail(params->v);
685         return 0;
686 }
687
688 static int rndis_reset_response(int configNr, rndis_reset_msg_type *buf)
689 {
690         rndis_reset_cmplt_type *resp;
691         rndis_resp_t *r;
692         struct rndis_params *params = rndis_per_dev_params + configNr;
693         u32 length;
694         u8 *xbuf;
695
696         /* drain the response queue */
697         while ((xbuf = rndis_get_next_response(configNr, &length)))
698                 rndis_free_response(configNr, xbuf);
699
700         r = rndis_add_response(configNr, sizeof(rndis_reset_cmplt_type));
701         if (!r)
702                 return -ENOMEM;
703         resp = (rndis_reset_cmplt_type *)r->buf;
704
705         resp->MessageType = cpu_to_le32(RNDIS_MSG_RESET_C);
706         resp->MessageLength = cpu_to_le32(16);
707         resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
708         /* resent information */
709         resp->AddressingReset = cpu_to_le32(1);
710
711         params->resp_avail(params->v);
712         return 0;
713 }
714
715 static int rndis_keepalive_response(int configNr,
716                                     rndis_keepalive_msg_type *buf)
717 {
718         rndis_keepalive_cmplt_type *resp;
719         rndis_resp_t *r;
720         struct rndis_params *params = rndis_per_dev_params + configNr;
721
722         /* host "should" check only in RNDIS_DATA_INITIALIZED state */
723
724         r = rndis_add_response(configNr, sizeof(rndis_keepalive_cmplt_type));
725         if (!r)
726                 return -ENOMEM;
727         resp = (rndis_keepalive_cmplt_type *)r->buf;
728
729         resp->MessageType = cpu_to_le32(RNDIS_MSG_KEEPALIVE_C);
730         resp->MessageLength = cpu_to_le32(16);
731         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
732         resp->Status = cpu_to_le32(RNDIS_STATUS_SUCCESS);
733
734         params->resp_avail(params->v);
735         return 0;
736 }
737
738
739 /*
740  * Device to Host Comunication
741  */
742 static int rndis_indicate_status_msg(int configNr, u32 status)
743 {
744         rndis_indicate_status_msg_type *resp;
745         rndis_resp_t *r;
746         struct rndis_params *params = rndis_per_dev_params + configNr;
747
748         if (params->state == RNDIS_UNINITIALIZED)
749                 return -ENOTSUPP;
750
751         r = rndis_add_response(configNr,
752                                 sizeof(rndis_indicate_status_msg_type));
753         if (!r)
754                 return -ENOMEM;
755         resp = (rndis_indicate_status_msg_type *)r->buf;
756
757         resp->MessageType = cpu_to_le32(RNDIS_MSG_INDICATE);
758         resp->MessageLength = cpu_to_le32(20);
759         resp->Status = cpu_to_le32(status);
760         resp->StatusBufferLength = cpu_to_le32(0);
761         resp->StatusBufferOffset = cpu_to_le32(0);
762
763         params->resp_avail(params->v);
764         return 0;
765 }
766
767 int rndis_signal_connect(int configNr)
768 {
769         rndis_per_dev_params[configNr].media_state
770                         = RNDIS_MEDIA_STATE_CONNECTED;
771         return rndis_indicate_status_msg(configNr,
772                                           RNDIS_STATUS_MEDIA_CONNECT);
773 }
774
775 int rndis_signal_disconnect(int configNr)
776 {
777         rndis_per_dev_params[configNr].media_state
778                         = RNDIS_MEDIA_STATE_DISCONNECTED;
779         return rndis_indicate_status_msg(configNr,
780                                           RNDIS_STATUS_MEDIA_DISCONNECT);
781 }
782
783 void rndis_uninit(int configNr)
784 {
785         u8 *buf;
786         u32 length;
787
788         if (configNr >= RNDIS_MAX_CONFIGS)
789                 return;
790         rndis_per_dev_params[configNr].state = RNDIS_UNINITIALIZED;
791
792         /* drain the response queue */
793         while ((buf = rndis_get_next_response(configNr, &length)))
794                 rndis_free_response(configNr, buf);
795 }
796
797 void rndis_set_host_mac(int configNr, const u8 *addr)
798 {
799         rndis_per_dev_params[configNr].host_mac = addr;
800 }
801
802 /*
803  * Message Parser
804  */
805 int rndis_msg_parser(u8 configNr, u8 *buf)
806 {
807         u32 MsgType, MsgLength;
808         __le32 *tmp;
809         struct rndis_params *params;
810
811         if (!buf)
812                 return -ENOMEM;
813
814         tmp = (__le32 *)buf;
815         MsgType   = get_unaligned_le32(tmp++);
816         MsgLength = get_unaligned_le32(tmp++);
817
818         if (configNr >= RNDIS_MAX_CONFIGS)
819                 return -ENOTSUPP;
820         params = &rndis_per_dev_params[configNr];
821
822         /* NOTE: RNDIS is *EXTREMELY* chatty ... Windows constantly polls for
823          * rx/tx statistics and link status, in addition to KEEPALIVE traffic
824          * and normal HC level polling to see if there's any IN traffic.
825          */
826
827         /* For USB: responses may take up to 10 seconds */
828         switch (MsgType) {
829         case RNDIS_MSG_INIT:
830                 pr_debug("%s: RNDIS_MSG_INIT\n",
831                         __func__);
832                 params->state = RNDIS_INITIALIZED;
833                 return rndis_init_response(configNr,
834                                         (rndis_init_msg_type *)buf);
835
836         case RNDIS_MSG_HALT:
837                 pr_debug("%s: RNDIS_MSG_HALT\n",
838                         __func__);
839                 params->state = RNDIS_UNINITIALIZED;
840                 if (params->dev) {
841                         netif_carrier_off(params->dev);
842                         netif_stop_queue(params->dev);
843                 }
844                 return 0;
845
846         case RNDIS_MSG_QUERY:
847                 return rndis_query_response(configNr,
848                                         (rndis_query_msg_type *)buf);
849
850         case RNDIS_MSG_SET:
851                 return rndis_set_response(configNr,
852                                         (rndis_set_msg_type *)buf);
853
854         case RNDIS_MSG_RESET:
855                 pr_debug("%s: RNDIS_MSG_RESET\n",
856                         __func__);
857                 return rndis_reset_response(configNr,
858                                         (rndis_reset_msg_type *)buf);
859
860         case RNDIS_MSG_KEEPALIVE:
861                 /* For USB: host does this every 5 seconds */
862                 if (rndis_debug > 1)
863                         pr_debug("%s: RNDIS_MSG_KEEPALIVE\n",
864                                 __func__);
865                 return rndis_keepalive_response(configNr,
866                                                  (rndis_keepalive_msg_type *)
867                                                  buf);
868
869         default:
870                 /* At least Windows XP emits some undefined RNDIS messages.
871                  * In one case those messages seemed to relate to the host
872                  * suspending itself.
873                  */
874                 pr_warning("%s: unknown RNDIS message 0x%08X len %d\n",
875                         __func__, MsgType, MsgLength);
876                 print_hex_dump_bytes(__func__, DUMP_PREFIX_OFFSET,
877                                      buf, MsgLength);
878                 break;
879         }
880
881         return -ENOTSUPP;
882 }
883
884 int rndis_register(void (*resp_avail)(void *v), void *v)
885 {
886         u8 i;
887
888         if (!resp_avail)
889                 return -EINVAL;
890
891         for (i = 0; i < RNDIS_MAX_CONFIGS; i++) {
892                 if (!rndis_per_dev_params[i].used) {
893                         rndis_per_dev_params[i].used = 1;
894                         rndis_per_dev_params[i].resp_avail = resp_avail;
895                         rndis_per_dev_params[i].v = v;
896                         pr_debug("%s: configNr = %d\n", __func__, i);
897                         return i;
898                 }
899         }
900         pr_debug("failed\n");
901
902         return -ENODEV;
903 }
904
905 void rndis_deregister(int configNr)
906 {
907         pr_debug("%s:\n", __func__);
908
909         if (configNr >= RNDIS_MAX_CONFIGS) return;
910         rndis_per_dev_params[configNr].used = 0;
911 }
912
913 int rndis_set_param_dev(u8 configNr, struct net_device *dev, u16 *cdc_filter)
914 {
915         pr_debug("%s:\n", __func__);
916         if (!dev)
917                 return -EINVAL;
918         if (configNr >= RNDIS_MAX_CONFIGS) return -1;
919
920         rndis_per_dev_params[configNr].dev = dev;
921         rndis_per_dev_params[configNr].filter = cdc_filter;
922
923         return 0;
924 }
925
926 int rndis_set_param_vendor(u8 configNr, u32 vendorID, const char *vendorDescr)
927 {
928         pr_debug("%s:\n", __func__);
929         if (!vendorDescr) return -1;
930         if (configNr >= RNDIS_MAX_CONFIGS) return -1;
931
932         rndis_per_dev_params[configNr].vendorID = vendorID;
933         rndis_per_dev_params[configNr].vendorDescr = vendorDescr;
934
935         return 0;
936 }
937
938 int rndis_set_param_medium(u8 configNr, u32 medium, u32 speed)
939 {
940         pr_debug("%s: %u %u\n", __func__, medium, speed);
941         if (configNr >= RNDIS_MAX_CONFIGS) return -1;
942
943         rndis_per_dev_params[configNr].medium = medium;
944         rndis_per_dev_params[configNr].speed = speed;
945
946         return 0;
947 }
948
949 void rndis_add_hdr(struct sk_buff *skb)
950 {
951         struct rndis_packet_msg_type *header;
952
953         if (!skb)
954                 return;
955         header = (void *)skb_push(skb, sizeof(*header));
956         memset(header, 0, sizeof *header);
957         header->MessageType = cpu_to_le32(RNDIS_MSG_PACKET);
958         header->MessageLength = cpu_to_le32(skb->len);
959         header->DataOffset = cpu_to_le32(36);
960         header->DataLength = cpu_to_le32(skb->len - sizeof(*header));
961 }
962
963 void rndis_free_response(int configNr, u8 *buf)
964 {
965         rndis_resp_t *r;
966         struct list_head *act, *tmp;
967
968         list_for_each_safe(act, tmp,
969                         &(rndis_per_dev_params[configNr].resp_queue))
970         {
971                 r = list_entry(act, rndis_resp_t, list);
972                 if (r && r->buf == buf) {
973                         list_del(&r->list);
974                         kfree(r);
975                 }
976         }
977 }
978
979 u8 *rndis_get_next_response(int configNr, u32 *length)
980 {
981         rndis_resp_t *r;
982         struct list_head *act, *tmp;
983
984         if (!length) return NULL;
985
986         list_for_each_safe(act, tmp,
987                         &(rndis_per_dev_params[configNr].resp_queue))
988         {
989                 r = list_entry(act, rndis_resp_t, list);
990                 if (!r->send) {
991                         r->send = 1;
992                         *length = r->length;
993                         return r->buf;
994                 }
995         }
996
997         return NULL;
998 }
999
1000 static rndis_resp_t *rndis_add_response(int configNr, u32 length)
1001 {
1002         rndis_resp_t *r;
1003
1004         /* NOTE: this gets copied into ether.c USB_BUFSIZ bytes ... */
1005         r = kmalloc(sizeof(rndis_resp_t) + length, GFP_ATOMIC);
1006         if (!r) return NULL;
1007
1008         r->buf = (u8 *)(r + 1);
1009         r->length = length;
1010         r->send = 0;
1011
1012         list_add_tail(&r->list,
1013                 &(rndis_per_dev_params[configNr].resp_queue));
1014         return r;
1015 }
1016
1017 int rndis_rm_hdr(struct gether *port,
1018                         struct sk_buff *skb,
1019                         struct sk_buff_head *list)
1020 {
1021         int num_pkts = 0;
1022
1023         while (skb->len) {
1024                 struct rndis_packet_msg_type *hdr;
1025                 struct sk_buff          *skb2;
1026                 u32             msg_len, data_offset, data_len;
1027
1028                 if (skb->len < sizeof *hdr) {
1029                         pr_err("invalid rndis pkt: skblen:%u hdr_len:%u",
1030                                         skb->len, sizeof *hdr);
1031                         dev_kfree_skb_any(skb);
1032                         return -EINVAL;
1033                 }
1034
1035                 hdr = (void *)skb->data;
1036                 msg_len = le32_to_cpu(hdr->MessageLength);
1037                 data_offset = le32_to_cpu(hdr->DataOffset);
1038                 data_len = le32_to_cpu(hdr->DataLength);
1039
1040                 if (skb->len < msg_len ||
1041                         ((data_offset + data_len + 8) > msg_len)) {
1042                         pr_err("invalid rndis message: %d/%d/%d/%d, len:%d\n",
1043                                 le32_to_cpu(hdr->MessageType),
1044                                 msg_len, data_offset, data_len, skb->len);
1045                         dev_kfree_skb_any(skb);
1046                         return -EOVERFLOW;
1047                 }
1048
1049                 if (le32_to_cpu(hdr->MessageType) != RNDIS_MSG_PACKET) {
1050                         pr_err("invalid rndis message: %d/%d/%d/%d, len:%d\n",
1051                                 le32_to_cpu(hdr->MessageType),
1052                                 msg_len, data_offset, data_len, skb->len);
1053                         dev_kfree_skb_any(skb);
1054                         return -EINVAL;
1055                 }
1056
1057                 num_pkts++;
1058
1059                 skb_pull(skb, data_offset + 8);
1060
1061                 if (data_len == skb->len ||
1062                                 data_len == (skb->len - 1)) {
1063                         skb_trim(skb, data_len);
1064                         break;
1065                 }
1066
1067                 skb2 = skb_clone(skb, GFP_ATOMIC);
1068                 if (!skb2) {
1069                         pr_err("%s:skb clone failed\n", __func__);
1070                         dev_kfree_skb_any(skb);
1071                         return -ENOMEM;
1072                 }
1073
1074                 skb_pull(skb, msg_len - sizeof *hdr);
1075                 skb_trim(skb2, data_len);
1076                 skb_queue_tail(list, skb2);
1077         }
1078
1079         skb_queue_tail(list, skb);
1080
1081         return 0;
1082 }
1083
1084 #ifdef CONFIG_USB_GADGET_DEBUG_FILES
1085
1086 static int rndis_proc_show(struct seq_file *m, void *v)
1087 {
1088         rndis_params *param = m->private;
1089
1090         seq_printf(m,
1091                          "Config Nr. %d\n"
1092                          "used      : %s\n"
1093                          "state     : %s\n"
1094                          "medium    : 0x%08X\n"
1095                          "speed     : %d\n"
1096                          "cable     : %s\n"
1097                          "vendor ID : 0x%08X\n"
1098                          "vendor    : %s\n",
1099                          param->confignr, (param->used) ? "y" : "n",
1100                          ({ char *s = "?";
1101                          switch (param->state) {
1102                          case RNDIS_UNINITIALIZED:
1103                                 s = "RNDIS_UNINITIALIZED"; break;
1104                          case RNDIS_INITIALIZED:
1105                                 s = "RNDIS_INITIALIZED"; break;
1106                          case RNDIS_DATA_INITIALIZED:
1107                                 s = "RNDIS_DATA_INITIALIZED"; break;
1108                         }; s; }),
1109                          param->medium,
1110                          (param->media_state) ? 0 : param->speed*100,
1111                          (param->media_state) ? "disconnected" : "connected",
1112                          param->vendorID, param->vendorDescr);
1113         return 0;
1114 }
1115
1116 static ssize_t rndis_proc_write(struct file *file, const char __user *buffer,
1117                                 size_t count, loff_t *ppos)
1118 {
1119         rndis_params *p = PDE_DATA(file_inode(file));
1120         u32 speed = 0;
1121         int i, fl_speed = 0;
1122
1123         for (i = 0; i < count; i++) {
1124                 char c;
1125                 if (get_user(c, buffer))
1126                         return -EFAULT;
1127                 switch (c) {
1128                 case '0':
1129                 case '1':
1130                 case '2':
1131                 case '3':
1132                 case '4':
1133                 case '5':
1134                 case '6':
1135                 case '7':
1136                 case '8':
1137                 case '9':
1138                         fl_speed = 1;
1139                         speed = speed * 10 + c - '0';
1140                         break;
1141                 case 'C':
1142                 case 'c':
1143                         rndis_signal_connect(p->confignr);
1144                         break;
1145                 case 'D':
1146                 case 'd':
1147                         rndis_signal_disconnect(p->confignr);
1148                         break;
1149                 default:
1150                         if (fl_speed) p->speed = speed;
1151                         else pr_debug("%c is not valid\n", c);
1152                         break;
1153                 }
1154
1155                 buffer++;
1156         }
1157
1158         return count;
1159 }
1160
1161 static int rndis_proc_open(struct inode *inode, struct file *file)
1162 {
1163         return single_open(file, rndis_proc_show, PDE_DATA(inode));
1164 }
1165
1166 static const struct file_operations rndis_proc_fops = {
1167         .owner          = THIS_MODULE,
1168         .open           = rndis_proc_open,
1169         .read           = seq_read,
1170         .llseek         = seq_lseek,
1171         .release        = single_release,
1172         .write          = rndis_proc_write,
1173 };
1174
1175 #define NAME_TEMPLATE "driver/rndis-%03d"
1176
1177 static struct proc_dir_entry *rndis_connect_state [RNDIS_MAX_CONFIGS];
1178
1179 #endif /* CONFIG_USB_GADGET_DEBUG_FILES */
1180
1181 static bool rndis_initialized;
1182
1183 int rndis_init(void)
1184 {
1185         u8 i;
1186
1187         if (rndis_initialized)
1188                 return 0;
1189
1190         for (i = 0; i < RNDIS_MAX_CONFIGS; i++) {
1191 #ifdef  CONFIG_USB_GADGET_DEBUG_FILES
1192                 char name [20];
1193
1194                 sprintf(name, NAME_TEMPLATE, i);
1195                 rndis_connect_state[i] = proc_create_data(name, 0660, NULL,
1196                                         &rndis_proc_fops,
1197                                         (void *)(rndis_per_dev_params + i));
1198                 if (!rndis_connect_state[i]) {
1199                         pr_debug("%s: remove entries", __func__);
1200                         while (i) {
1201                                 sprintf(name, NAME_TEMPLATE, --i);
1202                                 remove_proc_entry(name, NULL);
1203                         }
1204                         pr_debug("\n");
1205                         return -EIO;
1206                 }
1207 #endif
1208                 rndis_per_dev_params[i].confignr = i;
1209                 rndis_per_dev_params[i].used = 0;
1210                 rndis_per_dev_params[i].state = RNDIS_UNINITIALIZED;
1211                 rndis_per_dev_params[i].media_state
1212                                 = RNDIS_MEDIA_STATE_DISCONNECTED;
1213                 INIT_LIST_HEAD(&(rndis_per_dev_params[i].resp_queue));
1214         }
1215
1216         rndis_initialized = true;
1217         return 0;
1218 }
1219
1220 void rndis_exit(void)
1221 {
1222 #ifdef CONFIG_USB_GADGET_DEBUG_FILES
1223         u8 i;
1224         char name[20];
1225 #endif
1226
1227         if (!rndis_initialized)
1228                 return;
1229         rndis_initialized = false;
1230
1231 #ifdef CONFIG_USB_GADGET_DEBUG_FILES
1232         for (i = 0; i < RNDIS_MAX_CONFIGS; i++) {
1233                 sprintf(name, NAME_TEMPLATE, i);
1234                 remove_proc_entry(name, NULL);
1235         }
1236 #endif
1237 }