Merge branch 'agp-next' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied...
[linux-2.6] / drivers / usb / gadget / rndis.c
1 /*
2  * RNDIS MSG parser
3  *
4  * Authors:     Benedikt Spranger, Pengutronix
5  *              Robert Schwebel, Pengutronix
6  *
7  *              This program is free software; you can redistribute it and/or
8  *              modify it under the terms of the GNU General Public License
9  *              version 2, as published by the Free Software Foundation.
10  *
11  *              This software was originally developed in conformance with
12  *              Microsoft's Remote NDIS Specification License Agreement.
13  *
14  * 03/12/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
15  *              Fixed message length bug in init_response
16  *
17  * 03/25/2004 Kai-Uwe Bloem <linux-development@auerswald.de>
18  *              Fixed rndis_rm_hdr length bug.
19  *
20  * Copyright (C) 2004 by David Brownell
21  *              updates to merge with Linux 2.6, better match RNDIS spec
22  */
23
24 #include <linux/module.h>
25 #include <linux/moduleparam.h>
26 #include <linux/kernel.h>
27 #include <linux/errno.h>
28 #include <linux/init.h>
29 #include <linux/list.h>
30 #include <linux/proc_fs.h>
31 #include <linux/seq_file.h>
32 #include <linux/netdevice.h>
33
34 #include <asm/io.h>
35 #include <asm/byteorder.h>
36 #include <asm/system.h>
37 #include <asm/unaligned.h>
38
39
40 #undef  VERBOSE_DEBUG
41
42 #include "rndis.h"
43
44
45 /* The driver for your USB chip needs to support ep0 OUT to work with
46  * RNDIS, plus all three CDC Ethernet endpoints (interrupt not optional).
47  *
48  * Windows hosts need an INF file like Documentation/usb/linux.inf
49  * and will be happier if you provide the host_addr module parameter.
50  */
51
52 #if 0
53 static int rndis_debug = 0;
54 module_param (rndis_debug, int, 0);
55 MODULE_PARM_DESC (rndis_debug, "enable debugging");
56 #else
57 #define rndis_debug             0
58 #endif
59
60 #define RNDIS_MAX_CONFIGS       1
61
62
63 static rndis_params rndis_per_dev_params [RNDIS_MAX_CONFIGS];
64
65 /* Driver Version */
66 static const __le32 rndis_driver_version = __constant_cpu_to_le32 (1);
67
68 /* Function Prototypes */
69 static rndis_resp_t *rndis_add_response (int configNr, u32 length);
70
71
72 /* supported OIDs */
73 static const u32 oid_supported_list [] =
74 {
75         /* the general stuff */
76         OID_GEN_SUPPORTED_LIST,
77         OID_GEN_HARDWARE_STATUS,
78         OID_GEN_MEDIA_SUPPORTED,
79         OID_GEN_MEDIA_IN_USE,
80         OID_GEN_MAXIMUM_FRAME_SIZE,
81         OID_GEN_LINK_SPEED,
82         OID_GEN_TRANSMIT_BLOCK_SIZE,
83         OID_GEN_RECEIVE_BLOCK_SIZE,
84         OID_GEN_VENDOR_ID,
85         OID_GEN_VENDOR_DESCRIPTION,
86         OID_GEN_VENDOR_DRIVER_VERSION,
87         OID_GEN_CURRENT_PACKET_FILTER,
88         OID_GEN_MAXIMUM_TOTAL_SIZE,
89         OID_GEN_MEDIA_CONNECT_STATUS,
90         OID_GEN_PHYSICAL_MEDIUM,
91
92         /* the statistical stuff */
93         OID_GEN_XMIT_OK,
94         OID_GEN_RCV_OK,
95         OID_GEN_XMIT_ERROR,
96         OID_GEN_RCV_ERROR,
97         OID_GEN_RCV_NO_BUFFER,
98 #ifdef  RNDIS_OPTIONAL_STATS
99         OID_GEN_DIRECTED_BYTES_XMIT,
100         OID_GEN_DIRECTED_FRAMES_XMIT,
101         OID_GEN_MULTICAST_BYTES_XMIT,
102         OID_GEN_MULTICAST_FRAMES_XMIT,
103         OID_GEN_BROADCAST_BYTES_XMIT,
104         OID_GEN_BROADCAST_FRAMES_XMIT,
105         OID_GEN_DIRECTED_BYTES_RCV,
106         OID_GEN_DIRECTED_FRAMES_RCV,
107         OID_GEN_MULTICAST_BYTES_RCV,
108         OID_GEN_MULTICAST_FRAMES_RCV,
109         OID_GEN_BROADCAST_BYTES_RCV,
110         OID_GEN_BROADCAST_FRAMES_RCV,
111         OID_GEN_RCV_CRC_ERROR,
112         OID_GEN_TRANSMIT_QUEUE_LENGTH,
113 #endif  /* RNDIS_OPTIONAL_STATS */
114
115         /* mandatory 802.3 */
116         /* the general stuff */
117         OID_802_3_PERMANENT_ADDRESS,
118         OID_802_3_CURRENT_ADDRESS,
119         OID_802_3_MULTICAST_LIST,
120         OID_802_3_MAC_OPTIONS,
121         OID_802_3_MAXIMUM_LIST_SIZE,
122
123         /* the statistical stuff */
124         OID_802_3_RCV_ERROR_ALIGNMENT,
125         OID_802_3_XMIT_ONE_COLLISION,
126         OID_802_3_XMIT_MORE_COLLISIONS,
127 #ifdef  RNDIS_OPTIONAL_STATS
128         OID_802_3_XMIT_DEFERRED,
129         OID_802_3_XMIT_MAX_COLLISIONS,
130         OID_802_3_RCV_OVERRUN,
131         OID_802_3_XMIT_UNDERRUN,
132         OID_802_3_XMIT_HEARTBEAT_FAILURE,
133         OID_802_3_XMIT_TIMES_CRS_LOST,
134         OID_802_3_XMIT_LATE_COLLISIONS,
135 #endif  /* RNDIS_OPTIONAL_STATS */
136
137 #ifdef  RNDIS_PM
138         /* PM and wakeup are "mandatory" for USB, but the RNDIS specs
139          * don't say what they mean ... and the NDIS specs are often
140          * confusing and/or ambiguous in this context.  (That is, more
141          * so than their specs for the other OIDs.)
142          *
143          * FIXME someone who knows what these should do, please
144          * implement them!
145          */
146
147         /* power management */
148         OID_PNP_CAPABILITIES,
149         OID_PNP_QUERY_POWER,
150         OID_PNP_SET_POWER,
151
152 #ifdef  RNDIS_WAKEUP
153         /* wake up host */
154         OID_PNP_ENABLE_WAKE_UP,
155         OID_PNP_ADD_WAKE_UP_PATTERN,
156         OID_PNP_REMOVE_WAKE_UP_PATTERN,
157 #endif  /* RNDIS_WAKEUP */
158 #endif  /* RNDIS_PM */
159 };
160
161
162 /* NDIS Functions */
163 static int
164 gen_ndis_query_resp (int configNr, u32 OID, u8 *buf, unsigned buf_len,
165                 rndis_resp_t *r)
166 {
167         int                     retval = -ENOTSUPP;
168         u32                     length = 4;     /* usually */
169         __le32                  *outbuf;
170         int                     i, count;
171         rndis_query_cmplt_type  *resp;
172         struct net_device       *net;
173         struct net_device_stats *stats;
174
175         if (!r) return -ENOMEM;
176         resp = (rndis_query_cmplt_type *) r->buf;
177
178         if (!resp) return -ENOMEM;
179
180         if (buf_len && rndis_debug > 1) {
181                 pr_debug("query OID %08x value, len %d:\n", OID, buf_len);
182                 for (i = 0; i < buf_len; i += 16) {
183                         pr_debug("%03d: %08x %08x %08x %08x\n", i,
184                                 get_unaligned_le32(&buf[i]),
185                                 get_unaligned_le32(&buf[i + 4]),
186                                 get_unaligned_le32(&buf[i + 8]),
187                                 get_unaligned_le32(&buf[i + 12]));
188                 }
189         }
190
191         /* response goes here, right after the header */
192         outbuf = (__le32 *) &resp[1];
193         resp->InformationBufferOffset = __constant_cpu_to_le32 (16);
194
195         net = rndis_per_dev_params[configNr].dev;
196         if (net->get_stats)
197                 stats = net->get_stats(net);
198         else
199                 stats = NULL;
200
201         switch (OID) {
202
203         /* general oids (table 4-1) */
204
205         /* mandatory */
206         case OID_GEN_SUPPORTED_LIST:
207                 pr_debug("%s: OID_GEN_SUPPORTED_LIST\n", __func__);
208                 length = sizeof (oid_supported_list);
209                 count  = length / sizeof (u32);
210                 for (i = 0; i < count; i++)
211                         outbuf[i] = cpu_to_le32 (oid_supported_list[i]);
212                 retval = 0;
213                 break;
214
215         /* mandatory */
216         case OID_GEN_HARDWARE_STATUS:
217                 pr_debug("%s: OID_GEN_HARDWARE_STATUS\n", __func__);
218                 /* Bogus question!
219                  * Hardware must be ready to receive high level protocols.
220                  * BTW:
221                  * reddite ergo quae sunt Caesaris Caesari
222                  * et quae sunt Dei Deo!
223                  */
224                 *outbuf = __constant_cpu_to_le32 (0);
225                 retval = 0;
226                 break;
227
228         /* mandatory */
229         case OID_GEN_MEDIA_SUPPORTED:
230                 pr_debug("%s: OID_GEN_MEDIA_SUPPORTED\n", __func__);
231                 *outbuf = cpu_to_le32 (rndis_per_dev_params [configNr].medium);
232                 retval = 0;
233                 break;
234
235         /* mandatory */
236         case OID_GEN_MEDIA_IN_USE:
237                 pr_debug("%s: OID_GEN_MEDIA_IN_USE\n", __func__);
238                 /* one medium, one transport... (maybe you do it better) */
239                 *outbuf = cpu_to_le32 (rndis_per_dev_params [configNr].medium);
240                 retval = 0;
241                 break;
242
243         /* mandatory */
244         case OID_GEN_MAXIMUM_FRAME_SIZE:
245                 pr_debug("%s: OID_GEN_MAXIMUM_FRAME_SIZE\n", __func__);
246                 if (rndis_per_dev_params [configNr].dev) {
247                         *outbuf = cpu_to_le32 (
248                                 rndis_per_dev_params [configNr].dev->mtu);
249                         retval = 0;
250                 }
251                 break;
252
253         /* mandatory */
254         case OID_GEN_LINK_SPEED:
255                 if (rndis_debug > 1)
256                         pr_debug("%s: OID_GEN_LINK_SPEED\n", __func__);
257                 if (rndis_per_dev_params [configNr].media_state
258                                 == NDIS_MEDIA_STATE_DISCONNECTED)
259                         *outbuf = __constant_cpu_to_le32 (0);
260                 else
261                         *outbuf = cpu_to_le32 (
262                                 rndis_per_dev_params [configNr].speed);
263                 retval = 0;
264                 break;
265
266         /* mandatory */
267         case OID_GEN_TRANSMIT_BLOCK_SIZE:
268                 pr_debug("%s: OID_GEN_TRANSMIT_BLOCK_SIZE\n", __func__);
269                 if (rndis_per_dev_params [configNr].dev) {
270                         *outbuf = cpu_to_le32 (
271                                 rndis_per_dev_params [configNr].dev->mtu);
272                         retval = 0;
273                 }
274                 break;
275
276         /* mandatory */
277         case OID_GEN_RECEIVE_BLOCK_SIZE:
278                 pr_debug("%s: OID_GEN_RECEIVE_BLOCK_SIZE\n", __func__);
279                 if (rndis_per_dev_params [configNr].dev) {
280                         *outbuf = cpu_to_le32 (
281                                 rndis_per_dev_params [configNr].dev->mtu);
282                         retval = 0;
283                 }
284                 break;
285
286         /* mandatory */
287         case OID_GEN_VENDOR_ID:
288                 pr_debug("%s: OID_GEN_VENDOR_ID\n", __func__);
289                 *outbuf = cpu_to_le32 (
290                         rndis_per_dev_params [configNr].vendorID);
291                 retval = 0;
292                 break;
293
294         /* mandatory */
295         case OID_GEN_VENDOR_DESCRIPTION:
296                 pr_debug("%s: OID_GEN_VENDOR_DESCRIPTION\n", __func__);
297                 length = strlen (rndis_per_dev_params [configNr].vendorDescr);
298                 memcpy (outbuf,
299                         rndis_per_dev_params [configNr].vendorDescr, length);
300                 retval = 0;
301                 break;
302
303         case OID_GEN_VENDOR_DRIVER_VERSION:
304                 pr_debug("%s: OID_GEN_VENDOR_DRIVER_VERSION\n", __func__);
305                 /* Created as LE */
306                 *outbuf = rndis_driver_version;
307                 retval = 0;
308                 break;
309
310         /* mandatory */
311         case OID_GEN_CURRENT_PACKET_FILTER:
312                 pr_debug("%s: OID_GEN_CURRENT_PACKET_FILTER\n", __func__);
313                 *outbuf = cpu_to_le32 (*rndis_per_dev_params[configNr].filter);
314                 retval = 0;
315                 break;
316
317         /* mandatory */
318         case OID_GEN_MAXIMUM_TOTAL_SIZE:
319                 pr_debug("%s: OID_GEN_MAXIMUM_TOTAL_SIZE\n", __func__);
320                 *outbuf = __constant_cpu_to_le32(RNDIS_MAX_TOTAL_SIZE);
321                 retval = 0;
322                 break;
323
324         /* mandatory */
325         case OID_GEN_MEDIA_CONNECT_STATUS:
326                 if (rndis_debug > 1)
327                         pr_debug("%s: OID_GEN_MEDIA_CONNECT_STATUS\n", __func__);
328                 *outbuf = cpu_to_le32 (rndis_per_dev_params [configNr]
329                                                 .media_state);
330                 retval = 0;
331                 break;
332
333         case OID_GEN_PHYSICAL_MEDIUM:
334                 pr_debug("%s: OID_GEN_PHYSICAL_MEDIUM\n", __func__);
335                 *outbuf = __constant_cpu_to_le32 (0);
336                 retval = 0;
337                 break;
338
339         /* The RNDIS specification is incomplete/wrong.   Some versions
340          * of MS-Windows expect OIDs that aren't specified there.  Other
341          * versions emit undefined RNDIS messages. DOCUMENT ALL THESE!
342          */
343         case OID_GEN_MAC_OPTIONS:               /* from WinME */
344                 pr_debug("%s: OID_GEN_MAC_OPTIONS\n", __func__);
345                 *outbuf = __constant_cpu_to_le32(
346                           NDIS_MAC_OPTION_RECEIVE_SERIALIZED
347                         | NDIS_MAC_OPTION_FULL_DUPLEX);
348                 retval = 0;
349                 break;
350
351         /* statistics OIDs (table 4-2) */
352
353         /* mandatory */
354         case OID_GEN_XMIT_OK:
355                 if (rndis_debug > 1)
356                         pr_debug("%s: OID_GEN_XMIT_OK\n", __func__);
357                 if (stats) {
358                         *outbuf = cpu_to_le32(stats->tx_packets
359                                 - stats->tx_errors - stats->tx_dropped);
360                         retval = 0;
361                 }
362                 break;
363
364         /* mandatory */
365         case OID_GEN_RCV_OK:
366                 if (rndis_debug > 1)
367                         pr_debug("%s: OID_GEN_RCV_OK\n", __func__);
368                 if (stats) {
369                         *outbuf = cpu_to_le32(stats->rx_packets
370                                 - stats->rx_errors - stats->rx_dropped);
371                         retval = 0;
372                 }
373                 break;
374
375         /* mandatory */
376         case OID_GEN_XMIT_ERROR:
377                 if (rndis_debug > 1)
378                         pr_debug("%s: OID_GEN_XMIT_ERROR\n", __func__);
379                 if (stats) {
380                         *outbuf = cpu_to_le32(stats->tx_errors);
381                         retval = 0;
382                 }
383                 break;
384
385         /* mandatory */
386         case OID_GEN_RCV_ERROR:
387                 if (rndis_debug > 1)
388                         pr_debug("%s: OID_GEN_RCV_ERROR\n", __func__);
389                 if (stats) {
390                         *outbuf = cpu_to_le32(stats->rx_errors);
391                         retval = 0;
392                 }
393                 break;
394
395         /* mandatory */
396         case OID_GEN_RCV_NO_BUFFER:
397                 pr_debug("%s: OID_GEN_RCV_NO_BUFFER\n", __func__);
398                 if (stats) {
399                         *outbuf = cpu_to_le32(stats->rx_dropped);
400                         retval = 0;
401                 }
402                 break;
403
404         /* ieee802.3 OIDs (table 4-3) */
405
406         /* mandatory */
407         case OID_802_3_PERMANENT_ADDRESS:
408                 pr_debug("%s: OID_802_3_PERMANENT_ADDRESS\n", __func__);
409                 if (rndis_per_dev_params [configNr].dev) {
410                         length = ETH_ALEN;
411                         memcpy (outbuf,
412                                 rndis_per_dev_params [configNr].host_mac,
413                                 length);
414                         retval = 0;
415                 }
416                 break;
417
418         /* mandatory */
419         case OID_802_3_CURRENT_ADDRESS:
420                 pr_debug("%s: OID_802_3_CURRENT_ADDRESS\n", __func__);
421                 if (rndis_per_dev_params [configNr].dev) {
422                         length = ETH_ALEN;
423                         memcpy (outbuf,
424                                 rndis_per_dev_params [configNr].host_mac,
425                                 length);
426                         retval = 0;
427                 }
428                 break;
429
430         /* mandatory */
431         case OID_802_3_MULTICAST_LIST:
432                 pr_debug("%s: OID_802_3_MULTICAST_LIST\n", __func__);
433                 /* Multicast base address only */
434                 *outbuf = __constant_cpu_to_le32 (0xE0000000);
435                 retval = 0;
436                 break;
437
438         /* mandatory */
439         case OID_802_3_MAXIMUM_LIST_SIZE:
440                 pr_debug("%s: OID_802_3_MAXIMUM_LIST_SIZE\n", __func__);
441                 /* Multicast base address only */
442                 *outbuf = __constant_cpu_to_le32 (1);
443                 retval = 0;
444                 break;
445
446         case OID_802_3_MAC_OPTIONS:
447                 pr_debug("%s: OID_802_3_MAC_OPTIONS\n", __func__);
448                 break;
449
450         /* ieee802.3 statistics OIDs (table 4-4) */
451
452         /* mandatory */
453         case OID_802_3_RCV_ERROR_ALIGNMENT:
454                 pr_debug("%s: OID_802_3_RCV_ERROR_ALIGNMENT\n", __func__);
455                 if (stats) {
456                         *outbuf = cpu_to_le32(stats->rx_frame_errors);
457                         retval = 0;
458                 }
459                 break;
460
461         /* mandatory */
462         case OID_802_3_XMIT_ONE_COLLISION:
463                 pr_debug("%s: OID_802_3_XMIT_ONE_COLLISION\n", __func__);
464                 *outbuf = __constant_cpu_to_le32 (0);
465                 retval = 0;
466                 break;
467
468         /* mandatory */
469         case OID_802_3_XMIT_MORE_COLLISIONS:
470                 pr_debug("%s: OID_802_3_XMIT_MORE_COLLISIONS\n", __func__);
471                 *outbuf = __constant_cpu_to_le32 (0);
472                 retval = 0;
473                 break;
474
475         default:
476                 pr_warning("%s: query unknown OID 0x%08X\n",
477                          __func__, OID);
478         }
479         if (retval < 0)
480                 length = 0;
481
482         resp->InformationBufferLength = cpu_to_le32 (length);
483         r->length = length + sizeof *resp;
484         resp->MessageLength = cpu_to_le32 (r->length);
485         return retval;
486 }
487
488 static int gen_ndis_set_resp (u8 configNr, u32 OID, u8 *buf, u32 buf_len,
489                         rndis_resp_t *r)
490 {
491         rndis_set_cmplt_type            *resp;
492         int                             i, retval = -ENOTSUPP;
493         struct rndis_params             *params;
494
495         if (!r)
496                 return -ENOMEM;
497         resp = (rndis_set_cmplt_type *) r->buf;
498         if (!resp)
499                 return -ENOMEM;
500
501         if (buf_len && rndis_debug > 1) {
502                 pr_debug("set OID %08x value, len %d:\n", OID, buf_len);
503                 for (i = 0; i < buf_len; i += 16) {
504                         pr_debug("%03d: %08x %08x %08x %08x\n", i,
505                                 get_unaligned_le32(&buf[i]),
506                                 get_unaligned_le32(&buf[i + 4]),
507                                 get_unaligned_le32(&buf[i + 8]),
508                                 get_unaligned_le32(&buf[i + 12]));
509                 }
510         }
511
512         params = &rndis_per_dev_params [configNr];
513         switch (OID) {
514         case OID_GEN_CURRENT_PACKET_FILTER:
515
516                 /* these NDIS_PACKET_TYPE_* bitflags are shared with
517                  * cdc_filter; it's not RNDIS-specific
518                  * NDIS_PACKET_TYPE_x == USB_CDC_PACKET_TYPE_x for x in:
519                  *      PROMISCUOUS, DIRECTED,
520                  *      MULTICAST, ALL_MULTICAST, BROADCAST
521                  */
522                 *params->filter = (u16)get_unaligned_le32(buf);
523                 pr_debug("%s: OID_GEN_CURRENT_PACKET_FILTER %08x\n",
524                         __func__, *params->filter);
525
526                 /* this call has a significant side effect:  it's
527                  * what makes the packet flow start and stop, like
528                  * activating the CDC Ethernet altsetting.
529                  */
530                 retval = 0;
531                 if (*params->filter) {
532                         params->state = RNDIS_DATA_INITIALIZED;
533                         netif_carrier_on(params->dev);
534                         if (netif_running(params->dev))
535                                 netif_wake_queue (params->dev);
536                 } else {
537                         params->state = RNDIS_INITIALIZED;
538                         netif_carrier_off (params->dev);
539                         netif_stop_queue (params->dev);
540                 }
541                 break;
542
543         case OID_802_3_MULTICAST_LIST:
544                 /* I think we can ignore this */
545                 pr_debug("%s: OID_802_3_MULTICAST_LIST\n", __func__);
546                 retval = 0;
547                 break;
548
549         default:
550                 pr_warning("%s: set unknown OID 0x%08X, size %d\n",
551                          __func__, OID, buf_len);
552         }
553
554         return retval;
555 }
556
557 /*
558  * Response Functions
559  */
560
561 static int rndis_init_response (int configNr, rndis_init_msg_type *buf)
562 {
563         rndis_init_cmplt_type   *resp;
564         rndis_resp_t            *r;
565         struct rndis_params     *params = rndis_per_dev_params + configNr;
566
567         if (!params->dev)
568                 return -ENOTSUPP;
569
570         r = rndis_add_response (configNr, sizeof (rndis_init_cmplt_type));
571         if (!r)
572                 return -ENOMEM;
573         resp = (rndis_init_cmplt_type *) r->buf;
574
575         resp->MessageType = __constant_cpu_to_le32 (
576                         REMOTE_NDIS_INITIALIZE_CMPLT);
577         resp->MessageLength = __constant_cpu_to_le32 (52);
578         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
579         resp->Status = __constant_cpu_to_le32 (RNDIS_STATUS_SUCCESS);
580         resp->MajorVersion = __constant_cpu_to_le32 (RNDIS_MAJOR_VERSION);
581         resp->MinorVersion = __constant_cpu_to_le32 (RNDIS_MINOR_VERSION);
582         resp->DeviceFlags = __constant_cpu_to_le32 (RNDIS_DF_CONNECTIONLESS);
583         resp->Medium = __constant_cpu_to_le32 (RNDIS_MEDIUM_802_3);
584         resp->MaxPacketsPerTransfer = __constant_cpu_to_le32 (1);
585         resp->MaxTransferSize = cpu_to_le32 (
586                   params->dev->mtu
587                 + sizeof (struct ethhdr)
588                 + sizeof (struct rndis_packet_msg_type)
589                 + 22);
590         resp->PacketAlignmentFactor = __constant_cpu_to_le32 (0);
591         resp->AFListOffset = __constant_cpu_to_le32 (0);
592         resp->AFListSize = __constant_cpu_to_le32 (0);
593
594         params->resp_avail(params->v);
595         return 0;
596 }
597
598 static int rndis_query_response (int configNr, rndis_query_msg_type *buf)
599 {
600         rndis_query_cmplt_type *resp;
601         rndis_resp_t            *r;
602         struct rndis_params     *params = rndis_per_dev_params + configNr;
603
604         /* pr_debug("%s: OID = %08X\n", __func__, cpu_to_le32(buf->OID)); */
605         if (!params->dev)
606                 return -ENOTSUPP;
607
608         /*
609          * we need more memory:
610          * gen_ndis_query_resp expects enough space for
611          * rndis_query_cmplt_type followed by data.
612          * oid_supported_list is the largest data reply
613          */
614         r = rndis_add_response (configNr,
615                 sizeof (oid_supported_list) + sizeof(rndis_query_cmplt_type));
616         if (!r)
617                 return -ENOMEM;
618         resp = (rndis_query_cmplt_type *) r->buf;
619
620         resp->MessageType = __constant_cpu_to_le32 (REMOTE_NDIS_QUERY_CMPLT);
621         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
622
623         if (gen_ndis_query_resp (configNr, le32_to_cpu (buf->OID),
624                         le32_to_cpu(buf->InformationBufferOffset)
625                                         + 8 + (u8 *) buf,
626                         le32_to_cpu(buf->InformationBufferLength),
627                         r)) {
628                 /* OID not supported */
629                 resp->Status = __constant_cpu_to_le32 (
630                                 RNDIS_STATUS_NOT_SUPPORTED);
631                 resp->MessageLength = __constant_cpu_to_le32 (sizeof *resp);
632                 resp->InformationBufferLength = __constant_cpu_to_le32 (0);
633                 resp->InformationBufferOffset = __constant_cpu_to_le32 (0);
634         } else
635                 resp->Status = __constant_cpu_to_le32 (RNDIS_STATUS_SUCCESS);
636
637         params->resp_avail(params->v);
638         return 0;
639 }
640
641 static int rndis_set_response (int configNr, rndis_set_msg_type *buf)
642 {
643         u32                     BufLength, BufOffset;
644         rndis_set_cmplt_type    *resp;
645         rndis_resp_t            *r;
646         struct rndis_params     *params = rndis_per_dev_params + configNr;
647
648         r = rndis_add_response (configNr, sizeof (rndis_set_cmplt_type));
649         if (!r)
650                 return -ENOMEM;
651         resp = (rndis_set_cmplt_type *) r->buf;
652
653         BufLength = le32_to_cpu (buf->InformationBufferLength);
654         BufOffset = le32_to_cpu (buf->InformationBufferOffset);
655
656 #ifdef  VERBOSE_DEBUG
657         pr_debug("%s: Length: %d\n", __func__, BufLength);
658         pr_debug("%s: Offset: %d\n", __func__, BufOffset);
659         pr_debug("%s: InfoBuffer: ", __func__);
660
661         for (i = 0; i < BufLength; i++) {
662                 pr_debug("%02x ", *(((u8 *) buf) + i + 8 + BufOffset));
663         }
664
665         pr_debug("\n");
666 #endif
667
668         resp->MessageType = __constant_cpu_to_le32 (REMOTE_NDIS_SET_CMPLT);
669         resp->MessageLength = __constant_cpu_to_le32 (16);
670         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
671         if (gen_ndis_set_resp (configNr, le32_to_cpu (buf->OID),
672                         ((u8 *) buf) + 8 + BufOffset, BufLength, r))
673                 resp->Status = __constant_cpu_to_le32 (RNDIS_STATUS_NOT_SUPPORTED);
674         else
675                 resp->Status = __constant_cpu_to_le32 (RNDIS_STATUS_SUCCESS);
676
677         params->resp_avail(params->v);
678         return 0;
679 }
680
681 static int rndis_reset_response (int configNr, rndis_reset_msg_type *buf)
682 {
683         rndis_reset_cmplt_type  *resp;
684         rndis_resp_t            *r;
685         struct rndis_params     *params = rndis_per_dev_params + configNr;
686
687         r = rndis_add_response (configNr, sizeof (rndis_reset_cmplt_type));
688         if (!r)
689                 return -ENOMEM;
690         resp = (rndis_reset_cmplt_type *) r->buf;
691
692         resp->MessageType = __constant_cpu_to_le32 (REMOTE_NDIS_RESET_CMPLT);
693         resp->MessageLength = __constant_cpu_to_le32 (16);
694         resp->Status = __constant_cpu_to_le32 (RNDIS_STATUS_SUCCESS);
695         /* resent information */
696         resp->AddressingReset = __constant_cpu_to_le32 (1);
697
698         params->resp_avail(params->v);
699         return 0;
700 }
701
702 static int rndis_keepalive_response (int configNr,
703                                 rndis_keepalive_msg_type *buf)
704 {
705         rndis_keepalive_cmplt_type      *resp;
706         rndis_resp_t                    *r;
707         struct rndis_params     *params = rndis_per_dev_params + configNr;
708
709         /* host "should" check only in RNDIS_DATA_INITIALIZED state */
710
711         r = rndis_add_response (configNr, sizeof (rndis_keepalive_cmplt_type));
712         if (!r)
713                 return -ENOMEM;
714         resp = (rndis_keepalive_cmplt_type *) r->buf;
715
716         resp->MessageType = __constant_cpu_to_le32 (
717                         REMOTE_NDIS_KEEPALIVE_CMPLT);
718         resp->MessageLength = __constant_cpu_to_le32 (16);
719         resp->RequestID = buf->RequestID; /* Still LE in msg buffer */
720         resp->Status = __constant_cpu_to_le32 (RNDIS_STATUS_SUCCESS);
721
722         params->resp_avail(params->v);
723         return 0;
724 }
725
726
727 /*
728  * Device to Host Comunication
729  */
730 static int rndis_indicate_status_msg (int configNr, u32 status)
731 {
732         rndis_indicate_status_msg_type  *resp;
733         rndis_resp_t                    *r;
734         struct rndis_params     *params = rndis_per_dev_params + configNr;
735
736         if (params->state == RNDIS_UNINITIALIZED)
737                 return -ENOTSUPP;
738
739         r = rndis_add_response (configNr,
740                                 sizeof (rndis_indicate_status_msg_type));
741         if (!r)
742                 return -ENOMEM;
743         resp = (rndis_indicate_status_msg_type *) r->buf;
744
745         resp->MessageType = __constant_cpu_to_le32 (
746                         REMOTE_NDIS_INDICATE_STATUS_MSG);
747         resp->MessageLength = __constant_cpu_to_le32 (20);
748         resp->Status = cpu_to_le32 (status);
749         resp->StatusBufferLength = __constant_cpu_to_le32 (0);
750         resp->StatusBufferOffset = __constant_cpu_to_le32 (0);
751
752         params->resp_avail(params->v);
753         return 0;
754 }
755
756 int rndis_signal_connect (int configNr)
757 {
758         rndis_per_dev_params [configNr].media_state
759                         = NDIS_MEDIA_STATE_CONNECTED;
760         return rndis_indicate_status_msg (configNr,
761                                           RNDIS_STATUS_MEDIA_CONNECT);
762 }
763
764 int rndis_signal_disconnect (int configNr)
765 {
766         rndis_per_dev_params [configNr].media_state
767                         = NDIS_MEDIA_STATE_DISCONNECTED;
768         return rndis_indicate_status_msg (configNr,
769                                           RNDIS_STATUS_MEDIA_DISCONNECT);
770 }
771
772 void rndis_uninit (int configNr)
773 {
774         u8 *buf;
775         u32 length;
776
777         if (configNr >= RNDIS_MAX_CONFIGS)
778                 return;
779         rndis_per_dev_params [configNr].state = RNDIS_UNINITIALIZED;
780
781         /* drain the response queue */
782         while ((buf = rndis_get_next_response(configNr, &length)))
783                 rndis_free_response(configNr, buf);
784 }
785
786 void rndis_set_host_mac (int configNr, const u8 *addr)
787 {
788         rndis_per_dev_params [configNr].host_mac = addr;
789 }
790
791 /*
792  * Message Parser
793  */
794 int rndis_msg_parser (u8 configNr, u8 *buf)
795 {
796         u32 MsgType, MsgLength;
797         __le32 *tmp;
798         struct rndis_params             *params;
799
800         if (!buf)
801                 return -ENOMEM;
802
803         tmp = (__le32 *) buf;
804         MsgType   = get_unaligned_le32(tmp++);
805         MsgLength = get_unaligned_le32(tmp++);
806
807         if (configNr >= RNDIS_MAX_CONFIGS)
808                 return -ENOTSUPP;
809         params = &rndis_per_dev_params [configNr];
810
811         /* NOTE: RNDIS is *EXTREMELY* chatty ... Windows constantly polls for
812          * rx/tx statistics and link status, in addition to KEEPALIVE traffic
813          * and normal HC level polling to see if there's any IN traffic.
814          */
815
816         /* For USB: responses may take up to 10 seconds */
817         switch (MsgType) {
818         case REMOTE_NDIS_INITIALIZE_MSG:
819                 pr_debug("%s: REMOTE_NDIS_INITIALIZE_MSG\n",
820                         __func__ );
821                 params->state = RNDIS_INITIALIZED;
822                 return  rndis_init_response (configNr,
823                                         (rndis_init_msg_type *) buf);
824
825         case REMOTE_NDIS_HALT_MSG:
826                 pr_debug("%s: REMOTE_NDIS_HALT_MSG\n",
827                         __func__ );
828                 params->state = RNDIS_UNINITIALIZED;
829                 if (params->dev) {
830                         netif_carrier_off (params->dev);
831                         netif_stop_queue (params->dev);
832                 }
833                 return 0;
834
835         case REMOTE_NDIS_QUERY_MSG:
836                 return rndis_query_response (configNr,
837                                         (rndis_query_msg_type *) buf);
838
839         case REMOTE_NDIS_SET_MSG:
840                 return rndis_set_response (configNr,
841                                         (rndis_set_msg_type *) buf);
842
843         case REMOTE_NDIS_RESET_MSG:
844                 pr_debug("%s: REMOTE_NDIS_RESET_MSG\n",
845                         __func__ );
846                 return rndis_reset_response (configNr,
847                                         (rndis_reset_msg_type *) buf);
848
849         case REMOTE_NDIS_KEEPALIVE_MSG:
850                 /* For USB: host does this every 5 seconds */
851                 if (rndis_debug > 1)
852                         pr_debug("%s: REMOTE_NDIS_KEEPALIVE_MSG\n",
853                                 __func__ );
854                 return rndis_keepalive_response (configNr,
855                                                  (rndis_keepalive_msg_type *)
856                                                  buf);
857
858         default:
859                 /* At least Windows XP emits some undefined RNDIS messages.
860                  * In one case those messages seemed to relate to the host
861                  * suspending itself.
862                  */
863                 pr_warning("%s: unknown RNDIS message 0x%08X len %d\n",
864                         __func__ , MsgType, MsgLength);
865                 {
866                         unsigned i;
867                         for (i = 0; i < MsgLength; i += 16) {
868                                 pr_debug("%03d: "
869                                         " %02x %02x %02x %02x"
870                                         " %02x %02x %02x %02x"
871                                         " %02x %02x %02x %02x"
872                                         " %02x %02x %02x %02x"
873                                         "\n",
874                                         i,
875                                         buf[i], buf [i+1],
876                                                 buf[i+2], buf[i+3],
877                                         buf[i+4], buf [i+5],
878                                                 buf[i+6], buf[i+7],
879                                         buf[i+8], buf [i+9],
880                                                 buf[i+10], buf[i+11],
881                                         buf[i+12], buf [i+13],
882                                                 buf[i+14], buf[i+15]);
883                         }
884                 }
885                 break;
886         }
887
888         return -ENOTSUPP;
889 }
890
891 int rndis_register(void (*resp_avail)(void *v), void *v)
892 {
893         u8 i;
894
895         if (!resp_avail)
896                 return -EINVAL;
897
898         for (i = 0; i < RNDIS_MAX_CONFIGS; i++) {
899                 if (!rndis_per_dev_params [i].used) {
900                         rndis_per_dev_params [i].used = 1;
901                         rndis_per_dev_params [i].resp_avail = resp_avail;
902                         rndis_per_dev_params [i].v = v;
903                         pr_debug("%s: configNr = %d\n", __func__, i);
904                         return i;
905                 }
906         }
907         pr_debug("failed\n");
908
909         return -ENODEV;
910 }
911
912 void rndis_deregister (int configNr)
913 {
914         pr_debug("%s: \n", __func__);
915
916         if (configNr >= RNDIS_MAX_CONFIGS) return;
917         rndis_per_dev_params [configNr].used = 0;
918
919         return;
920 }
921
922 int rndis_set_param_dev(u8 configNr, struct net_device *dev, u16 *cdc_filter)
923 {
924         pr_debug("%s:\n", __func__);
925         if (!dev)
926                 return -EINVAL;
927         if (configNr >= RNDIS_MAX_CONFIGS) return -1;
928
929         rndis_per_dev_params [configNr].dev = dev;
930         rndis_per_dev_params [configNr].filter = cdc_filter;
931
932         return 0;
933 }
934
935 int rndis_set_param_vendor (u8 configNr, u32 vendorID, const char *vendorDescr)
936 {
937         pr_debug("%s:\n", __func__);
938         if (!vendorDescr) return -1;
939         if (configNr >= RNDIS_MAX_CONFIGS) return -1;
940
941         rndis_per_dev_params [configNr].vendorID = vendorID;
942         rndis_per_dev_params [configNr].vendorDescr = vendorDescr;
943
944         return 0;
945 }
946
947 int rndis_set_param_medium (u8 configNr, u32 medium, u32 speed)
948 {
949         pr_debug("%s: %u %u\n", __func__, medium, speed);
950         if (configNr >= RNDIS_MAX_CONFIGS) return -1;
951
952         rndis_per_dev_params [configNr].medium = medium;
953         rndis_per_dev_params [configNr].speed = speed;
954
955         return 0;
956 }
957
958 void rndis_add_hdr (struct sk_buff *skb)
959 {
960         struct rndis_packet_msg_type    *header;
961
962         if (!skb)
963                 return;
964         header = (void *) skb_push (skb, sizeof *header);
965         memset (header, 0, sizeof *header);
966         header->MessageType = __constant_cpu_to_le32(REMOTE_NDIS_PACKET_MSG);
967         header->MessageLength = cpu_to_le32(skb->len);
968         header->DataOffset = __constant_cpu_to_le32 (36);
969         header->DataLength = cpu_to_le32(skb->len - sizeof *header);
970 }
971
972 void rndis_free_response (int configNr, u8 *buf)
973 {
974         rndis_resp_t            *r;
975         struct list_head        *act, *tmp;
976
977         list_for_each_safe (act, tmp,
978                         &(rndis_per_dev_params [configNr].resp_queue))
979         {
980                 r = list_entry (act, rndis_resp_t, list);
981                 if (r && r->buf == buf) {
982                         list_del (&r->list);
983                         kfree (r);
984                 }
985         }
986 }
987
988 u8 *rndis_get_next_response (int configNr, u32 *length)
989 {
990         rndis_resp_t            *r;
991         struct list_head        *act, *tmp;
992
993         if (!length) return NULL;
994
995         list_for_each_safe (act, tmp,
996                         &(rndis_per_dev_params [configNr].resp_queue))
997         {
998                 r = list_entry (act, rndis_resp_t, list);
999                 if (!r->send) {
1000                         r->send = 1;
1001                         *length = r->length;
1002                         return r->buf;
1003                 }
1004         }
1005
1006         return NULL;
1007 }
1008
1009 static rndis_resp_t *rndis_add_response (int configNr, u32 length)
1010 {
1011         rndis_resp_t    *r;
1012
1013         /* NOTE:  this gets copied into ether.c USB_BUFSIZ bytes ... */
1014         r = kmalloc (sizeof (rndis_resp_t) + length, GFP_ATOMIC);
1015         if (!r) return NULL;
1016
1017         r->buf = (u8 *) (r + 1);
1018         r->length = length;
1019         r->send = 0;
1020
1021         list_add_tail (&r->list,
1022                 &(rndis_per_dev_params [configNr].resp_queue));
1023         return r;
1024 }
1025
1026 int rndis_rm_hdr(struct sk_buff *skb)
1027 {
1028         /* tmp points to a struct rndis_packet_msg_type */
1029         __le32          *tmp = (void *) skb->data;
1030
1031         /* MessageType, MessageLength */
1032         if (__constant_cpu_to_le32(REMOTE_NDIS_PACKET_MSG)
1033                         != get_unaligned(tmp++))
1034                 return -EINVAL;
1035         tmp++;
1036
1037         /* DataOffset, DataLength */
1038         if (!skb_pull(skb, get_unaligned_le32(tmp++) + 8))
1039                 return -EOVERFLOW;
1040         skb_trim(skb, get_unaligned_le32(tmp++));
1041
1042         return 0;
1043 }
1044
1045 #ifdef  CONFIG_USB_GADGET_DEBUG_FILES
1046
1047 static int rndis_proc_show(struct seq_file *m, void *v)
1048 {
1049         rndis_params *param = m->private;
1050
1051         seq_printf(m,
1052                          "Config Nr. %d\n"
1053                          "used      : %s\n"
1054                          "state     : %s\n"
1055                          "medium    : 0x%08X\n"
1056                          "speed     : %d\n"
1057                          "cable     : %s\n"
1058                          "vendor ID : 0x%08X\n"
1059                          "vendor    : %s\n",
1060                          param->confignr, (param->used) ? "y" : "n",
1061                          ({ char *s = "?";
1062                          switch (param->state) {
1063                          case RNDIS_UNINITIALIZED:
1064                                 s = "RNDIS_UNINITIALIZED"; break;
1065                          case RNDIS_INITIALIZED:
1066                                 s = "RNDIS_INITIALIZED"; break;
1067                          case RNDIS_DATA_INITIALIZED:
1068                                 s = "RNDIS_DATA_INITIALIZED"; break;
1069                         }; s; }),
1070                          param->medium,
1071                          (param->media_state) ? 0 : param->speed*100,
1072                          (param->media_state) ? "disconnected" : "connected",
1073                          param->vendorID, param->vendorDescr);
1074         return 0;
1075 }
1076
1077 static ssize_t rndis_proc_write(struct file *file, const char __user *buffer,
1078                 size_t count, loff_t *ppos)
1079 {
1080         rndis_params *p = PDE(file->f_path.dentry->d_inode)->data;
1081         u32 speed = 0;
1082         int i, fl_speed = 0;
1083
1084         for (i = 0; i < count; i++) {
1085                 char c;
1086                 if (get_user(c, buffer))
1087                         return -EFAULT;
1088                 switch (c) {
1089                 case '0':
1090                 case '1':
1091                 case '2':
1092                 case '3':
1093                 case '4':
1094                 case '5':
1095                 case '6':
1096                 case '7':
1097                 case '8':
1098                 case '9':
1099                         fl_speed = 1;
1100                         speed = speed*10 + c - '0';
1101                         break;
1102                 case 'C':
1103                 case 'c':
1104                         rndis_signal_connect (p->confignr);
1105                         break;
1106                 case 'D':
1107                 case 'd':
1108                         rndis_signal_disconnect(p->confignr);
1109                         break;
1110                 default:
1111                         if (fl_speed) p->speed = speed;
1112                         else pr_debug("%c is not valid\n", c);
1113                         break;
1114                 }
1115
1116                 buffer++;
1117         }
1118
1119         return count;
1120 }
1121
1122 static int rndis_proc_open(struct inode *inode, struct file *file)
1123 {
1124         return single_open(file, rndis_proc_show, PDE(inode)->data);
1125 }
1126
1127 static const struct file_operations rndis_proc_fops = {
1128         .owner          = THIS_MODULE,
1129         .open           = rndis_proc_open,
1130         .read           = seq_read,
1131         .llseek         = seq_lseek,
1132         .release        = single_release,
1133         .write          = rndis_proc_write,
1134 };
1135
1136 #define NAME_TEMPLATE   "driver/rndis-%03d"
1137
1138 static struct proc_dir_entry *rndis_connect_state [RNDIS_MAX_CONFIGS];
1139
1140 #endif  /* CONFIG_USB_GADGET_DEBUG_FILES */
1141
1142
1143 int __init rndis_init (void)
1144 {
1145         u8 i;
1146
1147         for (i = 0; i < RNDIS_MAX_CONFIGS; i++) {
1148 #ifdef  CONFIG_USB_GADGET_DEBUG_FILES
1149                 char name [20];
1150
1151                 sprintf (name, NAME_TEMPLATE, i);
1152                 if (!(rndis_connect_state [i]
1153                                 = proc_create_data(name, 0660, NULL,
1154                                         &rndis_proc_fops,
1155                                         (void *)(rndis_per_dev_params + i))))
1156                 {
1157                         pr_debug("%s :remove entries", __func__);
1158                         while (i) {
1159                                 sprintf (name, NAME_TEMPLATE, --i);
1160                                 remove_proc_entry (name, NULL);
1161                         }
1162                         pr_debug("\n");
1163                         return -EIO;
1164                 }
1165 #endif
1166                 rndis_per_dev_params [i].confignr = i;
1167                 rndis_per_dev_params [i].used = 0;
1168                 rndis_per_dev_params [i].state = RNDIS_UNINITIALIZED;
1169                 rndis_per_dev_params [i].media_state
1170                                 = NDIS_MEDIA_STATE_DISCONNECTED;
1171                 INIT_LIST_HEAD (&(rndis_per_dev_params [i].resp_queue));
1172         }
1173
1174         return 0;
1175 }
1176
1177 void rndis_exit (void)
1178 {
1179 #ifdef  CONFIG_USB_GADGET_DEBUG_FILES
1180         u8 i;
1181         char name [20];
1182
1183         for (i = 0; i < RNDIS_MAX_CONFIGS; i++) {
1184                 sprintf (name, NAME_TEMPLATE, i);
1185                 remove_proc_entry (name, NULL);
1186         }
1187 #endif
1188 }
1189