rndis_filter.c

   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * Copyright (c) 2009, Microsoft Corporation.
   4 *
   5 * Authors:
   6 *   Haiyang Zhang <haiyangz@microsoft.com>
   7 *   Hank Janssen  <hjanssen@microsoft.com>
   8 */
   9#include <linux/ethtool.h>
  10#include <linux/kernel.h>
  11#include <linux/sched.h>
  12#include <linux/wait.h>
  13#include <linux/highmem.h>
  14#include <linux/slab.h>
  15#include <linux/io.h>
  16#include <linux/if_ether.h>
  17#include <linux/netdevice.h>
  18#include <linux/if_vlan.h>
  19#include <linux/nls.h>
  20#include <linux/vmalloc.h>
  21#include <linux/rtnetlink.h>
  22#include <linux/ucs2_string.h>
  23#include <linux/string.h>
  24
  25#include "hyperv_net.h"
  26#include "netvsc_trace.h"
  27
  28static void rndis_set_multicast(struct work_struct *w);
  29
  30#define RNDIS_EXT_LEN HV_HYP_PAGE_SIZE
  31struct rndis_request {
  32	struct list_head list_ent;
  33	struct completion  wait_event;
  34
  35	struct rndis_message response_msg;
  36	/*
  37	 * The buffer for extended info after the RNDIS response message. It's
  38	 * referenced based on the data offset in the RNDIS message. Its size
  39	 * is enough for current needs, and should be sufficient for the near
  40	 * future.
  41	 */
  42	u8 response_ext[RNDIS_EXT_LEN];
  43
  44	/* Simplify allocation by having a netvsc packet inline */
  45	struct hv_netvsc_packet	pkt;
  46
  47	struct rndis_message request_msg;
  48	/*
  49	 * The buffer for the extended info after the RNDIS request message.
  50	 * It is referenced and sized in a similar way as response_ext.
  51	 */
  52	u8 request_ext[RNDIS_EXT_LEN];
  53};
  54
  55static const u8 netvsc_hash_key[NETVSC_HASH_KEYLEN] = {
  56	0x6d, 0x5a, 0x56, 0xda, 0x25, 0x5b, 0x0e, 0xc2,
  57	0x41, 0x67, 0x25, 0x3d, 0x43, 0xa3, 0x8f, 0xb0,
  58	0xd0, 0xca, 0x2b, 0xcb, 0xae, 0x7b, 0x30, 0xb4,
  59	0x77, 0xcb, 0x2d, 0xa3, 0x80, 0x30, 0xf2, 0x0c,
  60	0x6a, 0x42, 0xb7, 0x3b, 0xbe, 0xac, 0x01, 0xfa
  61};
  62
  63static struct rndis_device *get_rndis_device(void)
  64{
  65	struct rndis_device *device;
  66
  67	device = kzalloc(sizeof(struct rndis_device), GFP_KERNEL);
  68	if (!device)
  69		return NULL;
  70
  71	spin_lock_init(&device->request_lock);
  72
  73	INIT_LIST_HEAD(&device->req_list);
  74	INIT_WORK(&device->mcast_work, rndis_set_multicast);
  75
  76	device->state = RNDIS_DEV_UNINITIALIZED;
  77
  78	return device;
  79}
  80
  81static struct rndis_request *get_rndis_request(struct rndis_device *dev,
  82					     u32 msg_type,
  83					     u32 msg_len)
  84{
  85	struct rndis_request *request;
  86	struct rndis_message *rndis_msg;
  87	struct rndis_set_request *set;
  88	unsigned long flags;
  89
  90	request = kzalloc(sizeof(struct rndis_request), GFP_KERNEL);
  91	if (!request)
  92		return NULL;
  93
  94	init_completion(&request->wait_event);
  95
  96	rndis_msg = &request->request_msg;
  97	rndis_msg->ndis_msg_type = msg_type;
  98	rndis_msg->msg_len = msg_len;
  99
 100	request->pkt.q_idx = 0;
 101
 102	/*
 103	 * Set the request id. This field is always after the rndis header for
 104	 * request/response packet types so we just used the SetRequest as a
 105	 * template
 106	 */
 107	set = &rndis_msg->msg.set_req;
 108	set->req_id = atomic_inc_return(&dev->new_req_id);
 109
 110	/* Add to the request list */
 111	spin_lock_irqsave(&dev->request_lock, flags);
 112	list_add_tail(&request->list_ent, &dev->req_list);
 113	spin_unlock_irqrestore(&dev->request_lock, flags);
 114
 115	return request;
 116}
 117
 118static void put_rndis_request(struct rndis_device *dev,
 119			    struct rndis_request *req)
 120{
 121	unsigned long flags;
 122
 123	spin_lock_irqsave(&dev->request_lock, flags);
 124	list_del(&req->list_ent);
 125	spin_unlock_irqrestore(&dev->request_lock, flags);
 126
 127	kfree(req);
 128}
 129
 130static void dump_rndis_message(struct net_device *netdev,
 131			       const struct rndis_message *rndis_msg,
 132			       const void *data)
 133{
 134	switch (rndis_msg->ndis_msg_type) {
 135	case RNDIS_MSG_PACKET:
 136		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >= sizeof(struct rndis_packet)) {
 137			const struct rndis_packet *pkt = data + RNDIS_HEADER_SIZE;
 138			netdev_dbg(netdev, "RNDIS_MSG_PACKET (len %u, "
 139				   "data offset %u data len %u, # oob %u, "
 140				   "oob offset %u, oob len %u, pkt offset %u, "
 141				   "pkt len %u\n",
 142				   rndis_msg->msg_len,
 143				   pkt->data_offset,
 144				   pkt->data_len,
 145				   pkt->num_oob_data_elements,
 146				   pkt->oob_data_offset,
 147				   pkt->oob_data_len,
 148				   pkt->per_pkt_info_offset,
 149				   pkt->per_pkt_info_len);
 150		}
 151		break;
 152
 153	case RNDIS_MSG_INIT_C:
 154		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=
 155				sizeof(struct rndis_initialize_complete)) {
 156			const struct rndis_initialize_complete *init_complete =
 157				data + RNDIS_HEADER_SIZE;
 158			netdev_dbg(netdev, "RNDIS_MSG_INIT_C "
 159				"(len %u, id 0x%x, status 0x%x, major %d, minor %d, "
 160				"device flags %d, max xfer size 0x%x, max pkts %u, "
 161				"pkt aligned %u)\n",
 162				rndis_msg->msg_len,
 163				init_complete->req_id,
 164				init_complete->status,
 165				init_complete->major_ver,
 166				init_complete->minor_ver,
 167				init_complete->dev_flags,
 168				init_complete->max_xfer_size,
 169				init_complete->max_pkt_per_msg,
 170				init_complete->pkt_alignment_factor);
 171		}
 172		break;
 173
 174	case RNDIS_MSG_QUERY_C:
 175		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=
 176				sizeof(struct rndis_query_complete)) {
 177			const struct rndis_query_complete *query_complete =
 178				data + RNDIS_HEADER_SIZE;
 179			netdev_dbg(netdev, "RNDIS_MSG_QUERY_C "
 180				"(len %u, id 0x%x, status 0x%x, buf len %u, "
 181				"buf offset %u)\n",
 182				rndis_msg->msg_len,
 183				query_complete->req_id,
 184				query_complete->status,
 185				query_complete->info_buflen,
 186				query_complete->info_buf_offset);
 187		}
 188		break;
 189
 190	case RNDIS_MSG_SET_C:
 191		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE + sizeof(struct rndis_set_complete)) {
 192			const struct rndis_set_complete *set_complete =
 193				data + RNDIS_HEADER_SIZE;
 194			netdev_dbg(netdev,
 195				"RNDIS_MSG_SET_C (len %u, id 0x%x, status 0x%x)\n",
 196				rndis_msg->msg_len,
 197				set_complete->req_id,
 198				set_complete->status);
 199		}
 200		break;
 201
 202	case RNDIS_MSG_INDICATE:
 203		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=
 204				sizeof(struct rndis_indicate_status)) {
 205			const struct rndis_indicate_status *indicate_status =
 206				data + RNDIS_HEADER_SIZE;
 207			netdev_dbg(netdev, "RNDIS_MSG_INDICATE "
 208				"(len %u, status 0x%x, buf len %u, buf offset %u)\n",
 209				rndis_msg->msg_len,
 210				indicate_status->status,
 211				indicate_status->status_buflen,
 212				indicate_status->status_buf_offset);
 213		}
 214		break;
 215
 216	default:
 217		netdev_dbg(netdev, "0x%x (len %u)\n",
 218			rndis_msg->ndis_msg_type,
 219			rndis_msg->msg_len);
 220		break;
 221	}
 222}
 223
 224static int rndis_filter_send_request(struct rndis_device *dev,
 225				  struct rndis_request *req)
 226{
 227	struct hv_netvsc_packet *packet;
 228	struct hv_page_buffer pb;
 229	int ret;
 230
 231	/* Setup the packet to send it */
 232	packet = &req->pkt;
 233
 234	packet->total_data_buflen = req->request_msg.msg_len;
 235	packet->page_buf_cnt = 1;
 236
 237	pb.pfn = virt_to_phys(&req->request_msg) >> HV_HYP_PAGE_SHIFT;
 238	pb.len = req->request_msg.msg_len;
 239	pb.offset = offset_in_hvpage(&req->request_msg);
 240
 241	trace_rndis_send(dev->ndev, 0, &req->request_msg);
 242
 243	rcu_read_lock_bh();
 244	ret = netvsc_send(dev->ndev, packet, NULL, &pb, NULL, false);
 245	rcu_read_unlock_bh();
 246
 247	return ret;
 248}
 249
 250static void rndis_set_link_state(struct rndis_device *rdev,
 251				 struct rndis_request *request)
 252{
 253	u32 link_status;
 254	struct rndis_query_complete *query_complete;
 255	u32 msg_len = request->response_msg.msg_len;
 256
 257	/* Ensure the packet is big enough to access its fields */
 258	if (msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_query_complete))
 259		return;
 260
 261	query_complete = &request->response_msg.msg.query_complete;
 262
 263	if (query_complete->status == RNDIS_STATUS_SUCCESS &&
 264	    query_complete->info_buflen >= sizeof(u32) &&
 265	    query_complete->info_buf_offset >= sizeof(*query_complete) &&
 266	    msg_len - RNDIS_HEADER_SIZE >= query_complete->info_buf_offset &&
 267	    msg_len - RNDIS_HEADER_SIZE - query_complete->info_buf_offset
 268			>= query_complete->info_buflen) {
 269		memcpy(&link_status, (void *)((unsigned long)query_complete +
 270		       query_complete->info_buf_offset), sizeof(u32));
 271		rdev->link_state = link_status != 0;
 272	}
 273}
 274
 275static void rndis_filter_receive_response(struct net_device *ndev,
 276					  struct netvsc_device *nvdev,
 277					  struct rndis_message *resp,
 278					  void *data)
 279{
 280	u32 *req_id = &resp->msg.init_complete.req_id;
 281	struct rndis_device *dev = nvdev->extension;
 282	struct rndis_request *request = NULL;
 283	bool found = false;
 284	unsigned long flags;
 285
 286	/* This should never happen, it means control message
 287	 * response received after device removed.
 288	 */
 289	if (dev->state == RNDIS_DEV_UNINITIALIZED) {
 290		netdev_err(ndev,
 291			   "got rndis message uninitialized\n");
 292		return;
 293	}
 294
 295	/* Ensure the packet is big enough to read req_id. Req_id is the 1st
 296	 * field in any request/response message, so the payload should have at
 297	 * least sizeof(u32) bytes
 298	 */
 299	if (resp->msg_len - RNDIS_HEADER_SIZE < sizeof(u32)) {
 300		netdev_err(ndev, "rndis msg_len too small: %u\n",
 301			   resp->msg_len);
 302		return;
 303	}
 304
 305	/* Copy the request ID into nvchan->recv_buf */
 306	*req_id = *(u32 *)(data + RNDIS_HEADER_SIZE);
 307
 308	spin_lock_irqsave(&dev->request_lock, flags);
 309	list_for_each_entry(request, &dev->req_list, list_ent) {
 310		/*
 311		 * All request/response message contains RequestId as the 1st
 312		 * field
 313		 */
 314		if (request->request_msg.msg.init_req.req_id == *req_id) {
 315			found = true;
 316			break;
 317		}
 318	}
 319	spin_unlock_irqrestore(&dev->request_lock, flags);
 320
 321	if (found) {
 322		if (resp->msg_len <=
 323		    sizeof(struct rndis_message) + RNDIS_EXT_LEN) {
 324			memcpy(&request->response_msg, resp, RNDIS_HEADER_SIZE + sizeof(*req_id));
 325			unsafe_memcpy((void *)&request->response_msg + RNDIS_HEADER_SIZE + sizeof(*req_id),
 326			       data + RNDIS_HEADER_SIZE + sizeof(*req_id),
 327			       resp->msg_len - RNDIS_HEADER_SIZE - sizeof(*req_id),
 328			       "request->response_msg is followed by a padding of RNDIS_EXT_LEN inside rndis_request");
 329			if (request->request_msg.ndis_msg_type ==
 330			    RNDIS_MSG_QUERY && request->request_msg.msg.
 331			    query_req.oid == RNDIS_OID_GEN_MEDIA_CONNECT_STATUS)
 332				rndis_set_link_state(dev, request);
 333		} else {
 334			netdev_err(ndev,
 335				"rndis response buffer overflow "
 336				"detected (size %u max %zu)\n",
 337				resp->msg_len,
 338				sizeof(struct rndis_message));
 339
 340			if (resp->ndis_msg_type ==
 341			    RNDIS_MSG_RESET_C) {
 342				/* does not have a request id field */
 343				request->response_msg.msg.reset_complete.
 344					status = RNDIS_STATUS_BUFFER_OVERFLOW;
 345			} else {
 346				request->response_msg.msg.
 347				init_complete.status =
 348					RNDIS_STATUS_BUFFER_OVERFLOW;
 349			}
 350		}
 351
 352		netvsc_dma_unmap(((struct net_device_context *)
 353			netdev_priv(ndev))->device_ctx, &request->pkt);
 354		complete(&request->wait_event);
 355	} else {
 356		netdev_err(ndev,
 357			"no rndis request found for this response "
 358			"(id 0x%x res type 0x%x)\n",
 359			*req_id,
 360			resp->ndis_msg_type);
 361	}
 362}
 363
 364/*
 365 * Get the Per-Packet-Info with the specified type
 366 * return NULL if not found.
 367 */
 368static inline void *rndis_get_ppi(struct net_device *ndev,
 369				  struct rndis_packet *rpkt,
 370				  u32 rpkt_len, u32 type, u8 internal,
 371				  u32 ppi_size, void *data)
 372{
 373	struct rndis_per_packet_info *ppi;
 374	int len;
 375
 376	if (rpkt->per_pkt_info_offset == 0)
 377		return NULL;
 378
 379	/* Validate info_offset and info_len */
 380	if (rpkt->per_pkt_info_offset < sizeof(struct rndis_packet) ||
 381	    rpkt->per_pkt_info_offset > rpkt_len) {
 382		netdev_err(ndev, "Invalid per_pkt_info_offset: %u\n",
 383			   rpkt->per_pkt_info_offset);
 384		return NULL;
 385	}
 386
 387	if (rpkt->per_pkt_info_len < sizeof(*ppi) ||
 388	    rpkt->per_pkt_info_len > rpkt_len - rpkt->per_pkt_info_offset) {
 389		netdev_err(ndev, "Invalid per_pkt_info_len: %u\n",
 390			   rpkt->per_pkt_info_len);
 391		return NULL;
 392	}
 393
 394	ppi = (struct rndis_per_packet_info *)((ulong)rpkt +
 395		rpkt->per_pkt_info_offset);
 396	/* Copy the PPIs into nvchan->recv_buf */
 397	memcpy(ppi, data + RNDIS_HEADER_SIZE + rpkt->per_pkt_info_offset, rpkt->per_pkt_info_len);
 398	len = rpkt->per_pkt_info_len;
 399
 400	while (len > 0) {
 401		/* Validate ppi_offset and ppi_size */
 402		if (ppi->size > len) {
 403			netdev_err(ndev, "Invalid ppi size: %u\n", ppi->size);
 404			continue;
 405		}
 406
 407		if (ppi->ppi_offset >= ppi->size) {
 408			netdev_err(ndev, "Invalid ppi_offset: %u\n", ppi->ppi_offset);
 409			continue;
 410		}
 411
 412		if (ppi->type == type && ppi->internal == internal) {
 413			/* ppi->size should be big enough to hold the returned object. */
 414			if (ppi->size - ppi->ppi_offset < ppi_size) {
 415				netdev_err(ndev, "Invalid ppi: size %u ppi_offset %u\n",
 416					   ppi->size, ppi->ppi_offset);
 417				continue;
 418			}
 419			return (void *)((ulong)ppi + ppi->ppi_offset);
 420		}
 421		len -= ppi->size;
 422		ppi = (struct rndis_per_packet_info *)((ulong)ppi + ppi->size);
 423	}
 424
 425	return NULL;
 426}
 427
 428static inline
 429void rsc_add_data(struct netvsc_channel *nvchan,
 430		  const struct ndis_pkt_8021q_info *vlan,
 431		  const struct ndis_tcp_ip_checksum_info *csum_info,
 432		  const u32 *hash_info,
 433		  void *data, u32 len)
 434{
 435	u32 cnt = nvchan->rsc.cnt;
 436
 437	if (cnt) {
 438		nvchan->rsc.pktlen += len;
 439	} else {
 440		/* The data/values pointed by vlan, csum_info and hash_info are shared
 441		 * across the different 'fragments' of the RSC packet; store them into
 442		 * the packet itself.
 443		 */
 444		if (vlan != NULL) {
 445			memcpy(&nvchan->rsc.vlan, vlan, sizeof(*vlan));
 446			nvchan->rsc.ppi_flags |= NVSC_RSC_VLAN;
 447		} else {
 448			nvchan->rsc.ppi_flags &= ~NVSC_RSC_VLAN;
 449		}
 450		if (csum_info != NULL) {
 451			memcpy(&nvchan->rsc.csum_info, csum_info, sizeof(*csum_info));
 452			nvchan->rsc.ppi_flags |= NVSC_RSC_CSUM_INFO;
 453		} else {
 454			nvchan->rsc.ppi_flags &= ~NVSC_RSC_CSUM_INFO;
 455		}
 456		nvchan->rsc.pktlen = len;
 457		if (hash_info != NULL) {
 458			nvchan->rsc.hash_info = *hash_info;
 459			nvchan->rsc.ppi_flags |= NVSC_RSC_HASH_INFO;
 460		} else {
 461			nvchan->rsc.ppi_flags &= ~NVSC_RSC_HASH_INFO;
 462		}
 463	}
 464
 465	nvchan->rsc.data[cnt] = data;
 466	nvchan->rsc.len[cnt] = len;
 467	nvchan->rsc.cnt++;
 468}
 469
 470static int rndis_filter_receive_data(struct net_device *ndev,
 471				     struct netvsc_device *nvdev,
 472				     struct netvsc_channel *nvchan,
 473				     struct rndis_message *msg,
 474				     void *data, u32 data_buflen)
 475{
 476	struct rndis_packet *rndis_pkt = &msg->msg.pkt;
 477	const struct ndis_tcp_ip_checksum_info *csum_info;
 478	const struct ndis_pkt_8021q_info *vlan;
 479	const struct rndis_pktinfo_id *pktinfo_id;
 480	const u32 *hash_info;
 481	u32 data_offset, rpkt_len;
 482	bool rsc_more = false;
 483	int ret;
 484
 485	/* Ensure data_buflen is big enough to read header fields */
 486	if (data_buflen < RNDIS_HEADER_SIZE + sizeof(struct rndis_packet)) {
 487		netdev_err(ndev, "invalid rndis pkt, data_buflen too small: %u\n",
 488			   data_buflen);
 489		return NVSP_STAT_FAIL;
 490	}
 491
 492	/* Copy the RNDIS packet into nvchan->recv_buf */
 493	memcpy(rndis_pkt, data + RNDIS_HEADER_SIZE, sizeof(*rndis_pkt));
 494
 495	/* Validate rndis_pkt offset */
 496	if (rndis_pkt->data_offset >= data_buflen - RNDIS_HEADER_SIZE) {
 497		netdev_err(ndev, "invalid rndis packet offset: %u\n",
 498			   rndis_pkt->data_offset);
 499		return NVSP_STAT_FAIL;
 500	}
 501
 502	/* Remove the rndis header and pass it back up the stack */
 503	data_offset = RNDIS_HEADER_SIZE + rndis_pkt->data_offset;
 504
 505	rpkt_len = data_buflen - RNDIS_HEADER_SIZE;
 506	data_buflen -= data_offset;
 507
 508	/*
 509	 * Make sure we got a valid RNDIS message, now total_data_buflen
 510	 * should be the data packet size plus the trailer padding size
 511	 */
 512	if (unlikely(data_buflen < rndis_pkt->data_len)) {
 513		netdev_err(ndev, "rndis message buffer "
 514			   "overflow detected (got %u, min %u)"
 515			   "...dropping this message!\n",
 516			   data_buflen, rndis_pkt->data_len);
 517		return NVSP_STAT_FAIL;
 518	}
 519
 520	vlan = rndis_get_ppi(ndev, rndis_pkt, rpkt_len, IEEE_8021Q_INFO, 0, sizeof(*vlan),
 521			     data);
 522
 523	csum_info = rndis_get_ppi(ndev, rndis_pkt, rpkt_len, TCPIP_CHKSUM_PKTINFO, 0,
 524				  sizeof(*csum_info), data);
 525
 526	hash_info = rndis_get_ppi(ndev, rndis_pkt, rpkt_len, NBL_HASH_VALUE, 0,
 527				  sizeof(*hash_info), data);
 528
 529	pktinfo_id = rndis_get_ppi(ndev, rndis_pkt, rpkt_len, RNDIS_PKTINFO_ID, 1,
 530				   sizeof(*pktinfo_id), data);
 531
 532	/* Identify RSC frags, drop erroneous packets */
 533	if (pktinfo_id && (pktinfo_id->flag & RNDIS_PKTINFO_SUBALLOC)) {
 534		if (pktinfo_id->flag & RNDIS_PKTINFO_1ST_FRAG)
 535			nvchan->rsc.cnt = 0;
 536		else if (nvchan->rsc.cnt == 0)
 537			goto drop;
 538
 539		rsc_more = true;
 540
 541		if (pktinfo_id->flag & RNDIS_PKTINFO_LAST_FRAG)
 542			rsc_more = false;
 543
 544		if (rsc_more && nvchan->rsc.is_last)
 545			goto drop;
 546	} else {
 547		nvchan->rsc.cnt = 0;
 548	}
 549
 550	if (unlikely(nvchan->rsc.cnt >= NVSP_RSC_MAX))
 551		goto drop;
 552
 553	/* Put data into per channel structure.
 554	 * Also, remove the rndis trailer padding from rndis packet message
 555	 * rndis_pkt->data_len tell us the real data length, we only copy
 556	 * the data packet to the stack, without the rndis trailer padding
 557	 */
 558	rsc_add_data(nvchan, vlan, csum_info, hash_info,
 559		     data + data_offset, rndis_pkt->data_len);
 560
 561	if (rsc_more)
 562		return NVSP_STAT_SUCCESS;
 563
 564	ret = netvsc_recv_callback(ndev, nvdev, nvchan);
 565	nvchan->rsc.cnt = 0;
 566
 567	return ret;
 568
 569drop:
 570	return NVSP_STAT_FAIL;
 571}
 572
 573int rndis_filter_receive(struct net_device *ndev,
 574			 struct netvsc_device *net_dev,
 575			 struct netvsc_channel *nvchan,
 576			 void *data, u32 buflen)
 577{
 578	struct net_device_context *net_device_ctx = netdev_priv(ndev);
 579	struct rndis_message *rndis_msg = nvchan->recv_buf;
 580
 581	if (buflen < RNDIS_HEADER_SIZE) {
 582		netdev_err(ndev, "Invalid rndis_msg (buflen: %u)\n", buflen);
 583		return NVSP_STAT_FAIL;
 584	}
 585
 586	/* Copy the RNDIS msg header into nvchan->recv_buf */
 587	memcpy(rndis_msg, data, RNDIS_HEADER_SIZE);
 588
 589	/* Validate incoming rndis_message packet */
 590	if (rndis_msg->msg_len < RNDIS_HEADER_SIZE ||
 591	    buflen < rndis_msg->msg_len) {
 592		netdev_err(ndev, "Invalid rndis_msg (buflen: %u, msg_len: %u)\n",
 593			   buflen, rndis_msg->msg_len);
 594		return NVSP_STAT_FAIL;
 595	}
 596
 597	if (netif_msg_rx_status(net_device_ctx))
 598		dump_rndis_message(ndev, rndis_msg, data);
 599
 600	switch (rndis_msg->ndis_msg_type) {
 601	case RNDIS_MSG_PACKET:
 602		return rndis_filter_receive_data(ndev, net_dev, nvchan,
 603						 rndis_msg, data, buflen);
 604	case RNDIS_MSG_INIT_C:
 605	case RNDIS_MSG_QUERY_C:
 606	case RNDIS_MSG_SET_C:
 607		/* completion msgs */
 608		rndis_filter_receive_response(ndev, net_dev, rndis_msg, data);
 609		break;
 610
 611	case RNDIS_MSG_INDICATE:
 612		/* notification msgs */
 613		netvsc_linkstatus_callback(ndev, rndis_msg, data, buflen);
 614		break;
 615	default:
 616		netdev_err(ndev,
 617			"unhandled rndis message (type %u len %u)\n",
 618			   rndis_msg->ndis_msg_type,
 619			   rndis_msg->msg_len);
 620		return NVSP_STAT_FAIL;
 621	}
 622
 623	return NVSP_STAT_SUCCESS;
 624}
 625
 626static int rndis_filter_query_device(struct rndis_device *dev,
 627				     struct netvsc_device *nvdev,
 628				     u32 oid, void *result, u32 *result_size)
 629{
 630	struct rndis_request *request;
 631	u32 inresult_size = *result_size;
 632	struct rndis_query_request *query;
 633	struct rndis_query_complete *query_complete;
 634	u32 msg_len;
 635	int ret = 0;
 636
 637	if (!result)
 638		return -EINVAL;
 639
 640	*result_size = 0;
 641	request = get_rndis_request(dev, RNDIS_MSG_QUERY,
 642			RNDIS_MESSAGE_SIZE(struct rndis_query_request));
 643	if (!request) {
 644		ret = -ENOMEM;
 645		goto cleanup;
 646	}
 647
 648	/* Setup the rndis query */
 649	query = &request->request_msg.msg.query_req;
 650	query->oid = oid;
 651	query->info_buf_offset = sizeof(struct rndis_query_request);
 652	query->info_buflen = 0;
 653	query->dev_vc_handle = 0;
 654
 655	if (oid == OID_TCP_OFFLOAD_HARDWARE_CAPABILITIES) {
 656		struct ndis_offload *hwcaps;
 657		u32 nvsp_version = nvdev->nvsp_version;
 658		u8 ndis_rev;
 659		size_t size;
 660
 661		if (nvsp_version >= NVSP_PROTOCOL_VERSION_5) {
 662			ndis_rev = NDIS_OFFLOAD_PARAMETERS_REVISION_3;
 663			size = NDIS_OFFLOAD_SIZE;
 664		} else if (nvsp_version >= NVSP_PROTOCOL_VERSION_4) {
 665			ndis_rev = NDIS_OFFLOAD_PARAMETERS_REVISION_2;
 666			size = NDIS_OFFLOAD_SIZE_6_1;
 667		} else {
 668			ndis_rev = NDIS_OFFLOAD_PARAMETERS_REVISION_1;
 669			size = NDIS_OFFLOAD_SIZE_6_0;
 670		}
 671
 672		request->request_msg.msg_len += size;
 673		query->info_buflen = size;
 674		hwcaps = (struct ndis_offload *)
 675			((unsigned long)query + query->info_buf_offset);
 676
 677		hwcaps->header.type = NDIS_OBJECT_TYPE_OFFLOAD;
 678		hwcaps->header.revision = ndis_rev;
 679		hwcaps->header.size = size;
 680
 681	} else if (oid == OID_GEN_RECEIVE_SCALE_CAPABILITIES) {
 682		struct ndis_recv_scale_cap *cap;
 683
 684		request->request_msg.msg_len +=
 685			sizeof(struct ndis_recv_scale_cap);
 686		query->info_buflen = sizeof(struct ndis_recv_scale_cap);
 687		cap = (struct ndis_recv_scale_cap *)((unsigned long)query +
 688						     query->info_buf_offset);
 689		cap->hdr.type = NDIS_OBJECT_TYPE_RSS_CAPABILITIES;
 690		cap->hdr.rev = NDIS_RECEIVE_SCALE_CAPABILITIES_REVISION_2;
 691		cap->hdr.size = sizeof(struct ndis_recv_scale_cap);
 692	}
 693
 694	ret = rndis_filter_send_request(dev, request);
 695	if (ret != 0)
 696		goto cleanup;
 697
 698	wait_for_completion(&request->wait_event);
 699
 700	/* Copy the response back */
 701	query_complete = &request->response_msg.msg.query_complete;
 702	msg_len = request->response_msg.msg_len;
 703
 704	/* Ensure the packet is big enough to access its fields */
 705	if (msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_query_complete)) {
 706		ret = -1;
 707		goto cleanup;
 708	}
 709
 710	if (query_complete->info_buflen > inresult_size ||
 711	    query_complete->info_buf_offset < sizeof(*query_complete) ||
 712	    msg_len - RNDIS_HEADER_SIZE < query_complete->info_buf_offset ||
 713	    msg_len - RNDIS_HEADER_SIZE - query_complete->info_buf_offset
 714			< query_complete->info_buflen) {
 715		ret = -1;
 716		goto cleanup;
 717	}
 718
 719	memcpy(result,
 720	       (void *)((unsigned long)query_complete +
 721			 query_complete->info_buf_offset),
 722	       query_complete->info_buflen);
 723
 724	*result_size = query_complete->info_buflen;
 725
 726cleanup:
 727	if (request)
 728		put_rndis_request(dev, request);
 729
 730	return ret;
 731}
 732
 733/* Get the hardware offload capabilities */
 734static int
 735rndis_query_hwcaps(struct rndis_device *dev, struct netvsc_device *net_device,
 736		   struct ndis_offload *caps)
 737{
 738	u32 caps_len = sizeof(*caps);
 739	int ret;
 740
 741	memset(caps, 0, sizeof(*caps));
 742
 743	ret = rndis_filter_query_device(dev, net_device,
 744					OID_TCP_OFFLOAD_HARDWARE_CAPABILITIES,
 745					caps, &caps_len);
 746	if (ret)
 747		return ret;
 748
 749	if (caps->header.type != NDIS_OBJECT_TYPE_OFFLOAD) {
 750		netdev_warn(dev->ndev, "invalid NDIS objtype %#x\n",
 751			    caps->header.type);
 752		return -EINVAL;
 753	}
 754
 755	if (caps->header.revision < NDIS_OFFLOAD_PARAMETERS_REVISION_1) {
 756		netdev_warn(dev->ndev, "invalid NDIS objrev %x\n",
 757			    caps->header.revision);
 758		return -EINVAL;
 759	}
 760
 761	if (caps->header.size > caps_len ||
 762	    caps->header.size < NDIS_OFFLOAD_SIZE_6_0) {
 763		netdev_warn(dev->ndev,
 764			    "invalid NDIS objsize %u, data size %u\n",
 765			    caps->header.size, caps_len);
 766		return -EINVAL;
 767	}
 768
 769	return 0;
 770}
 771
 772static int rndis_filter_query_device_mac(struct rndis_device *dev,
 773					 struct netvsc_device *net_device)
 774{
 775	u32 size = ETH_ALEN;
 776
 777	return rndis_filter_query_device(dev, net_device,
 778				      RNDIS_OID_802_3_PERMANENT_ADDRESS,
 779				      dev->hw_mac_adr, &size);
 780}
 781
 782#define NWADR_STR "NetworkAddress"
 783#define NWADR_STRLEN 14
 784
 785int rndis_filter_set_device_mac(struct netvsc_device *nvdev,
 786				const char *mac)
 787{
 788	struct rndis_device *rdev = nvdev->extension;
 789	struct rndis_request *request;
 790	struct rndis_set_request *set;
 791	struct rndis_config_parameter_info *cpi;
 792	wchar_t *cfg_nwadr, *cfg_mac;
 793	struct rndis_set_complete *set_complete;
 794	char macstr[2*ETH_ALEN+1];
 795	u32 extlen = sizeof(struct rndis_config_parameter_info) +
 796		2*NWADR_STRLEN + 4*ETH_ALEN;
 797	int ret;
 798
 799	request = get_rndis_request(rdev, RNDIS_MSG_SET,
 800		RNDIS_MESSAGE_SIZE(struct rndis_set_request) + extlen);
 801	if (!request)
 802		return -ENOMEM;
 803
 804	set = &request->request_msg.msg.set_req;
 805	set->oid = RNDIS_OID_GEN_RNDIS_CONFIG_PARAMETER;
 806	set->info_buflen = extlen;
 807	set->info_buf_offset = sizeof(struct rndis_set_request);
 808	set->dev_vc_handle = 0;
 809
 810	cpi = (struct rndis_config_parameter_info *)((ulong)set +
 811		set->info_buf_offset);
 812	cpi->parameter_name_offset =
 813		sizeof(struct rndis_config_parameter_info);
 814	/* Multiply by 2 because host needs 2 bytes (utf16) for each char */
 815	cpi->parameter_name_length = 2*NWADR_STRLEN;
 816	cpi->parameter_type = RNDIS_CONFIG_PARAM_TYPE_STRING;
 817	cpi->parameter_value_offset =
 818		cpi->parameter_name_offset + cpi->parameter_name_length;
 819	/* Multiply by 4 because each MAC byte displayed as 2 utf16 chars */
 820	cpi->parameter_value_length = 4*ETH_ALEN;
 821
 822	cfg_nwadr = (wchar_t *)((ulong)cpi + cpi->parameter_name_offset);
 823	cfg_mac = (wchar_t *)((ulong)cpi + cpi->parameter_value_offset);
 824	ret = utf8s_to_utf16s(NWADR_STR, NWADR_STRLEN, UTF16_HOST_ENDIAN,
 825			      cfg_nwadr, NWADR_STRLEN);
 826	if (ret < 0)
 827		goto cleanup;
 828	snprintf(macstr, 2*ETH_ALEN+1, "%pm", mac);
 829	ret = utf8s_to_utf16s(macstr, 2*ETH_ALEN, UTF16_HOST_ENDIAN,
 830			      cfg_mac, 2*ETH_ALEN);
 831	if (ret < 0)
 832		goto cleanup;
 833
 834	ret = rndis_filter_send_request(rdev, request);
 835	if (ret != 0)
 836		goto cleanup;
 837
 838	wait_for_completion(&request->wait_event);
 839
 840	set_complete = &request->response_msg.msg.set_complete;
 841	if (set_complete->status != RNDIS_STATUS_SUCCESS)
 842		ret = -EIO;
 843
 844cleanup:
 845	put_rndis_request(rdev, request);
 846	return ret;
 847}
 848
 849int
 850rndis_filter_set_offload_params(struct net_device *ndev,
 851				struct netvsc_device *nvdev,
 852				struct ndis_offload_params *req_offloads)
 853{
 854	struct rndis_device *rdev = nvdev->extension;
 855	struct rndis_request *request;
 856	struct rndis_set_request *set;
 857	struct ndis_offload_params *offload_params;
 858	struct rndis_set_complete *set_complete;
 859	u32 extlen = sizeof(struct ndis_offload_params);
 860	int ret;
 861	u32 vsp_version = nvdev->nvsp_version;
 862
 863	if (vsp_version <= NVSP_PROTOCOL_VERSION_4) {
 864		extlen = VERSION_4_OFFLOAD_SIZE;
 865		/* On NVSP_PROTOCOL_VERSION_4 and below, we do not support
 866		 * UDP checksum offload.
 867		 */
 868		req_offloads->udp_ip_v4_csum = 0;
 869		req_offloads->udp_ip_v6_csum = 0;
 870	}
 871
 872	request = get_rndis_request(rdev, RNDIS_MSG_SET,
 873		RNDIS_MESSAGE_SIZE(struct rndis_set_request) + extlen);
 874	if (!request)
 875		return -ENOMEM;
 876
 877	set = &request->request_msg.msg.set_req;
 878	set->oid = OID_TCP_OFFLOAD_PARAMETERS;
 879	set->info_buflen = extlen;
 880	set->info_buf_offset = sizeof(struct rndis_set_request);
 881	set->dev_vc_handle = 0;
 882
 883	offload_params = (struct ndis_offload_params *)((ulong)set +
 884				set->info_buf_offset);
 885	*offload_params = *req_offloads;
 886	offload_params->header.type = NDIS_OBJECT_TYPE_DEFAULT;
 887	offload_params->header.revision = NDIS_OFFLOAD_PARAMETERS_REVISION_3;
 888	offload_params->header.size = extlen;
 889
 890	ret = rndis_filter_send_request(rdev, request);
 891	if (ret != 0)
 892		goto cleanup;
 893
 894	wait_for_completion(&request->wait_event);
 895	set_complete = &request->response_msg.msg.set_complete;
 896	if (set_complete->status != RNDIS_STATUS_SUCCESS) {
 897		netdev_err(ndev, "Fail to set offload on host side:0x%x\n",
 898			   set_complete->status);
 899		ret = -EINVAL;
 900	}
 901
 902cleanup:
 903	put_rndis_request(rdev, request);
 904	return ret;
 905}
 906
 907static int rndis_set_rss_param_msg(struct rndis_device *rdev,
 908				   const u8 *rss_key, u16 flag)
 909{
 910	struct net_device *ndev = rdev->ndev;
 911	struct net_device_context *ndc = netdev_priv(ndev);
 912	struct rndis_request *request;
 913	struct rndis_set_request *set;
 914	struct rndis_set_complete *set_complete;
 915	u32 extlen = sizeof(struct ndis_recv_scale_param) +
 916		     4 * ndc->rx_table_sz + NETVSC_HASH_KEYLEN;
 917	struct ndis_recv_scale_param *rssp;
 918	u32 *itab;
 919	u8 *keyp;
 920	int i, ret;
 921
 922	request = get_rndis_request(
 923			rdev, RNDIS_MSG_SET,
 924			RNDIS_MESSAGE_SIZE(struct rndis_set_request) + extlen);
 925	if (!request)
 926		return -ENOMEM;
 927
 928	set = &request->request_msg.msg.set_req;
 929	set->oid = OID_GEN_RECEIVE_SCALE_PARAMETERS;
 930	set->info_buflen = extlen;
 931	set->info_buf_offset = sizeof(struct rndis_set_request);
 932	set->dev_vc_handle = 0;
 933
 934	rssp = (struct ndis_recv_scale_param *)(set + 1);
 935	rssp->hdr.type = NDIS_OBJECT_TYPE_RSS_PARAMETERS;
 936	rssp->hdr.rev = NDIS_RECEIVE_SCALE_PARAMETERS_REVISION_2;
 937	rssp->hdr.size = sizeof(struct ndis_recv_scale_param);
 938	rssp->flag = flag;
 939	rssp->hashinfo = NDIS_HASH_FUNC_TOEPLITZ | NDIS_HASH_IPV4 |
 940			 NDIS_HASH_TCP_IPV4 | NDIS_HASH_IPV6 |
 941			 NDIS_HASH_TCP_IPV6;
 942	rssp->indirect_tabsize = 4 * ndc->rx_table_sz;
 943	rssp->indirect_taboffset = sizeof(struct ndis_recv_scale_param);
 944	rssp->hashkey_size = NETVSC_HASH_KEYLEN;
 945	rssp->hashkey_offset = rssp->indirect_taboffset +
 946			       rssp->indirect_tabsize;
 947
 948	/* Set indirection table entries */
 949	itab = (u32 *)(rssp + 1);
 950	for (i = 0; i < ndc->rx_table_sz; i++)
 951		itab[i] = ndc->rx_table[i];
 952
 953	/* Set hask key values */
 954	keyp = (u8 *)((unsigned long)rssp + rssp->hashkey_offset);
 955	memcpy(keyp, rss_key, NETVSC_HASH_KEYLEN);
 956
 957	ret = rndis_filter_send_request(rdev, request);
 958	if (ret != 0)
 959		goto cleanup;
 960
 961	wait_for_completion(&request->wait_event);
 962	set_complete = &request->response_msg.msg.set_complete;
 963	if (set_complete->status == RNDIS_STATUS_SUCCESS) {
 964		if (!(flag & NDIS_RSS_PARAM_FLAG_DISABLE_RSS) &&
 965		    !(flag & NDIS_RSS_PARAM_FLAG_HASH_KEY_UNCHANGED))
 966			memcpy(rdev->rss_key, rss_key, NETVSC_HASH_KEYLEN);
 967
 968	} else {
 969		netdev_err(ndev, "Fail to set RSS parameters:0x%x\n",
 970			   set_complete->status);
 971		ret = -EINVAL;
 972	}
 973
 974cleanup:
 975	put_rndis_request(rdev, request);
 976	return ret;
 977}
 978
 979int rndis_filter_set_rss_param(struct rndis_device *rdev,
 980			       const u8 *rss_key)
 981{
 982	/* Disable RSS before change */
 983	rndis_set_rss_param_msg(rdev, rss_key,
 984				NDIS_RSS_PARAM_FLAG_DISABLE_RSS);
 985
 986	return rndis_set_rss_param_msg(rdev, rss_key, 0);
 987}
 988
 989static int rndis_filter_query_device_link_status(struct rndis_device *dev,
 990						 struct netvsc_device *net_device)
 991{
 992	u32 size = sizeof(u32);
 993	u32 link_status;
 994
 995	return rndis_filter_query_device(dev, net_device,
 996					 RNDIS_OID_GEN_MEDIA_CONNECT_STATUS,
 997					 &link_status, &size);
 998}
 999
1000static int rndis_filter_query_link_speed(struct rndis_device *dev,
1001					 struct netvsc_device *net_device)
1002{
1003	u32 size = sizeof(u32);
1004	u32 link_speed;
1005	struct net_device_context *ndc;
1006	int ret;
1007
1008	ret = rndis_filter_query_device(dev, net_device,
1009					RNDIS_OID_GEN_LINK_SPEED,
1010					&link_speed, &size);
1011
1012	if (!ret) {
1013		ndc = netdev_priv(dev->ndev);
1014
1015		/* The link speed reported from host is in 100bps unit, so
1016		 * we convert it to Mbps here.
1017		 */
1018		ndc->speed = link_speed / 10000;
1019	}
1020
1021	return ret;
1022}
1023
1024static int rndis_filter_set_packet_filter(struct rndis_device *dev,
1025					  u32 new_filter)
1026{
1027	struct rndis_request *request;
1028	struct rndis_set_request *set;
1029	int ret;
1030
1031	if (dev->filter == new_filter)
1032		return 0;
1033
1034	request = get_rndis_request(dev, RNDIS_MSG_SET,
1035			RNDIS_MESSAGE_SIZE(struct rndis_set_request) +
1036			sizeof(u32));
1037	if (!request)
1038		return -ENOMEM;
1039
1040	/* Setup the rndis set */
1041	set = &request->request_msg.msg.set_req;
1042	set->oid = RNDIS_OID_GEN_CURRENT_PACKET_FILTER;
1043	set->info_buflen = sizeof(u32);
1044	set->info_buf_offset = offsetof(typeof(*set), info_buf);
1045	memcpy(set->info_buf, &new_filter, sizeof(u32));
1046
1047	ret = rndis_filter_send_request(dev, request);
1048	if (ret == 0) {
1049		wait_for_completion(&request->wait_event);
1050		dev->filter = new_filter;
1051	}
1052
1053	put_rndis_request(dev, request);
1054
1055	return ret;
1056}
1057
1058static void rndis_set_multicast(struct work_struct *w)
1059{
1060	struct rndis_device *rdev
1061		= container_of(w, struct rndis_device, mcast_work);
1062	u32 filter = NDIS_PACKET_TYPE_DIRECTED;
1063	unsigned int flags = rdev->ndev->flags;
1064
1065	if (flags & IFF_PROMISC) {
1066		filter = NDIS_PACKET_TYPE_PROMISCUOUS;
1067	} else {
1068		if (!netdev_mc_empty(rdev->ndev) || (flags & IFF_ALLMULTI))
1069			filter |= NDIS_PACKET_TYPE_ALL_MULTICAST;
1070		if (flags & IFF_BROADCAST)
1071			filter |= NDIS_PACKET_TYPE_BROADCAST;
1072	}
1073
1074	rndis_filter_set_packet_filter(rdev, filter);
1075}
1076
1077void rndis_filter_update(struct netvsc_device *nvdev)
1078{
1079	struct rndis_device *rdev = nvdev->extension;
1080
1081	schedule_work(&rdev->mcast_work);
1082}
1083
1084static int rndis_filter_init_device(struct rndis_device *dev,
1085				    struct netvsc_device *nvdev)
1086{
1087	struct rndis_request *request;
1088	struct rndis_initialize_request *init;
1089	struct rndis_initialize_complete *init_complete;
1090	u32 status;
1091	int ret;
1092
1093	request = get_rndis_request(dev, RNDIS_MSG_INIT,
1094			RNDIS_MESSAGE_SIZE(struct rndis_initialize_request));
1095	if (!request) {
1096		ret = -ENOMEM;
1097		goto cleanup;
1098	}
1099
1100	/* Setup the rndis set */
1101	init = &request->request_msg.msg.init_req;
1102	init->major_ver = RNDIS_MAJOR_VERSION;
1103	init->minor_ver = RNDIS_MINOR_VERSION;
1104	init->max_xfer_size = 0x4000;
1105
1106	dev->state = RNDIS_DEV_INITIALIZING;
1107
1108	ret = rndis_filter_send_request(dev, request);
1109	if (ret != 0) {
1110		dev->state = RNDIS_DEV_UNINITIALIZED;
1111		goto cleanup;
1112	}
1113
1114	wait_for_completion(&request->wait_event);
1115
1116	init_complete = &request->response_msg.msg.init_complete;
1117	status = init_complete->status;
1118	if (status == RNDIS_STATUS_SUCCESS) {
1119		dev->state = RNDIS_DEV_INITIALIZED;
1120		nvdev->max_pkt = init_complete->max_pkt_per_msg;
1121		nvdev->pkt_align = 1 << init_complete->pkt_alignment_factor;
1122		ret = 0;
1123	} else {
1124		dev->state = RNDIS_DEV_UNINITIALIZED;
1125		ret = -EINVAL;
1126	}
1127
1128cleanup:
1129	if (request)
1130		put_rndis_request(dev, request);
1131
1132	return ret;
1133}
1134
1135static bool netvsc_device_idle(const struct netvsc_device *nvdev)
1136{
1137	int i;
1138
1139	for (i = 0; i < nvdev->num_chn; i++) {
1140		const struct netvsc_channel *nvchan = &nvdev->chan_table[i];
1141
1142		if (nvchan->mrc.first != nvchan->mrc.next)
1143			return false;
1144
1145		if (atomic_read(&nvchan->queue_sends) > 0)
1146			return false;
1147	}
1148
1149	return true;
1150}
1151
1152static void rndis_filter_halt_device(struct netvsc_device *nvdev,
1153				     struct rndis_device *dev)
1154{
1155	struct rndis_request *request;
1156	struct rndis_halt_request *halt;
1157
1158	/* Attempt to do a rndis device halt */
1159	request = get_rndis_request(dev, RNDIS_MSG_HALT,
1160				RNDIS_MESSAGE_SIZE(struct rndis_halt_request));
1161	if (!request)
1162		goto cleanup;
1163
1164	/* Setup the rndis set */
1165	halt = &request->request_msg.msg.halt_req;
1166	halt->req_id = atomic_inc_return(&dev->new_req_id);
1167
1168	/* Ignore return since this msg is optional. */
1169	rndis_filter_send_request(dev, request);
1170
1171	dev->state = RNDIS_DEV_UNINITIALIZED;
1172
1173cleanup:
1174	nvdev->destroy = true;
1175
1176	/* Force flag to be ordered before waiting */
1177	wmb();
1178
1179	/* Wait for all send completions */
1180	wait_event(nvdev->wait_drain, netvsc_device_idle(nvdev));
1181
1182	if (request)
1183		put_rndis_request(dev, request);
1184}
1185
1186static int rndis_filter_open_device(struct rndis_device *dev)
1187{
1188	int ret;
1189
1190	if (dev->state != RNDIS_DEV_INITIALIZED)
1191		return 0;
1192
1193	ret = rndis_filter_set_packet_filter(dev,
1194					 NDIS_PACKET_TYPE_BROADCAST |
1195					 NDIS_PACKET_TYPE_ALL_MULTICAST |
1196					 NDIS_PACKET_TYPE_DIRECTED);
1197	if (ret == 0)
1198		dev->state = RNDIS_DEV_DATAINITIALIZED;
1199
1200	return ret;
1201}
1202
1203static int rndis_filter_close_device(struct rndis_device *dev)
1204{
1205	int ret;
1206
1207	if (dev->state != RNDIS_DEV_DATAINITIALIZED)
1208		return 0;
1209
1210	/* Make sure rndis_set_multicast doesn't re-enable filter! */
1211	cancel_work_sync(&dev->mcast_work);
1212
1213	ret = rndis_filter_set_packet_filter(dev, 0);
1214	if (ret == -ENODEV)
1215		ret = 0;
1216
1217	if (ret == 0)
1218		dev->state = RNDIS_DEV_INITIALIZED;
1219
1220	return ret;
1221}
1222
1223static void netvsc_sc_open(struct vmbus_channel *new_sc)
1224{
1225	struct net_device *ndev =
1226		hv_get_drvdata(new_sc->primary_channel->device_obj);
1227	struct net_device_context *ndev_ctx = netdev_priv(ndev);
1228	struct netvsc_device *nvscdev;
1229	u16 chn_index = new_sc->offermsg.offer.sub_channel_index;
1230	struct netvsc_channel *nvchan;
1231	int ret;
1232
1233	/* This is safe because this callback only happens when
1234	 * new device is being setup and waiting on the channel_init_wait.
1235	 */
1236	nvscdev = rcu_dereference_raw(ndev_ctx->nvdev);
1237	if (!nvscdev || chn_index >= nvscdev->num_chn)
1238		return;
1239
1240	nvchan = nvscdev->chan_table + chn_index;
1241
1242	/* Because the device uses NAPI, all the interrupt batching and
1243	 * control is done via Net softirq, not the channel handling
1244	 */
1245	set_channel_read_mode(new_sc, HV_CALL_ISR);
1246
1247	/* Set the channel before opening.*/
1248	nvchan->channel = new_sc;
1249
1250	new_sc->next_request_id_callback = vmbus_next_request_id;
1251	new_sc->request_addr_callback = vmbus_request_addr;
1252	new_sc->rqstor_size = netvsc_rqstor_size(netvsc_ring_bytes);
1253	new_sc->max_pkt_size = NETVSC_MAX_PKT_SIZE;
1254
1255	/* Enable napi before opening the vmbus channel to avoid races
1256	 * as the host placing data on the host->guest ring may be left
1257	 * out if napi was not enabled.
1258	 */
1259	napi_enable(&nvchan->napi);
1260	netif_queue_set_napi(ndev, chn_index, NETDEV_QUEUE_TYPE_RX,
1261			     &nvchan->napi);
1262	netif_queue_set_napi(ndev, chn_index, NETDEV_QUEUE_TYPE_TX,
1263			     &nvchan->napi);
1264
1265	ret = vmbus_open(new_sc, netvsc_ring_bytes,
1266			 netvsc_ring_bytes, NULL, 0,
1267			 netvsc_channel_cb, nvchan);
1268	if (ret != 0) {
1269		netdev_notice(ndev, "sub channel open failed: %d\n", ret);
1270		netif_queue_set_napi(ndev, chn_index, NETDEV_QUEUE_TYPE_TX,
1271				     NULL);
1272		netif_queue_set_napi(ndev, chn_index, NETDEV_QUEUE_TYPE_RX,
1273				     NULL);
1274		napi_disable(&nvchan->napi);
1275	}
1276
1277	if (atomic_inc_return(&nvscdev->open_chn) == nvscdev->num_chn)
1278		wake_up(&nvscdev->subchan_open);
1279}
1280
1281/* Open sub-channels after completing the handling of the device probe.
1282 * This breaks overlap of processing the host message for the
1283 * new primary channel with the initialization of sub-channels.
1284 */
1285int rndis_set_subchannel(struct net_device *ndev,
1286			 struct netvsc_device *nvdev,
1287			 struct netvsc_device_info *dev_info)
1288{
1289	struct nvsp_message *init_packet = &nvdev->channel_init_pkt;
1290	struct net_device_context *ndev_ctx = netdev_priv(ndev);
1291	struct hv_device *hv_dev = ndev_ctx->device_ctx;
1292	struct rndis_device *rdev = nvdev->extension;
1293	int i, ret;
1294
1295	ASSERT_RTNL();
1296
1297	memset(init_packet, 0, sizeof(struct nvsp_message));
1298	init_packet->hdr.msg_type = NVSP_MSG5_TYPE_SUBCHANNEL;
1299	init_packet->msg.v5_msg.subchn_req.op = NVSP_SUBCHANNEL_ALLOCATE;
1300	init_packet->msg.v5_msg.subchn_req.num_subchannels =
1301						nvdev->num_chn - 1;
1302	trace_nvsp_send(ndev, init_packet);
1303
1304	ret = vmbus_sendpacket(hv_dev->channel, init_packet,
1305			       sizeof(struct nvsp_message),
1306			       (unsigned long)init_packet,
1307			       VM_PKT_DATA_INBAND,
1308			       VMBUS_DATA_PACKET_FLAG_COMPLETION_REQUESTED);
1309	if (ret) {
1310		netdev_err(ndev, "sub channel allocate send failed: %d\n", ret);
1311		return ret;
1312	}
1313
1314	wait_for_completion(&nvdev->channel_init_wait);
1315	if (init_packet->msg.v5_msg.subchn_comp.status != NVSP_STAT_SUCCESS) {
1316		netdev_err(ndev, "sub channel request failed\n");
1317		return -EIO;
1318	}
1319
1320	/* Check that number of allocated sub channel is within the expected range */
1321	if (init_packet->msg.v5_msg.subchn_comp.num_subchannels > nvdev->num_chn - 1) {
1322		netdev_err(ndev, "invalid number of allocated sub channel\n");
1323		return -EINVAL;
1324	}
1325	nvdev->num_chn = 1 +
1326		init_packet->msg.v5_msg.subchn_comp.num_subchannels;
1327
1328	/* wait for all sub channels to open */
1329	wait_event(nvdev->subchan_open,
1330		   atomic_read(&nvdev->open_chn) == nvdev->num_chn);
1331
1332	for (i = 0; i < VRSS_SEND_TAB_SIZE; i++)
1333		ndev_ctx->tx_table[i] = i % nvdev->num_chn;
1334
1335	/* ignore failures from setting rss parameters, still have channels */
1336	if (dev_info)
1337		rndis_filter_set_rss_param(rdev, dev_info->rss_key);
1338	else
1339		rndis_filter_set_rss_param(rdev, netvsc_hash_key);
1340
1341	netif_set_real_num_tx_queues(ndev, nvdev->num_chn);
1342	netif_set_real_num_rx_queues(ndev, nvdev->num_chn);
1343
1344	return 0;
1345}
1346
1347static int rndis_netdev_set_hwcaps(struct rndis_device *rndis_device,
1348				   struct netvsc_device *nvdev)
1349{
1350	struct net_device *net = rndis_device->ndev;
1351	struct net_device_context *net_device_ctx = netdev_priv(net);
1352	struct ndis_offload hwcaps;
1353	struct ndis_offload_params offloads;
1354	int ret;
1355
1356	nvdev->netvsc_gso_max_size = GSO_LEGACY_MAX_SIZE;
1357
1358	/* Find HW offload capabilities */
1359	ret = rndis_query_hwcaps(rndis_device, nvdev, &hwcaps);
1360	if (ret != 0)
1361		return ret;
1362
1363	/* A value of zero means "no change"; now turn on what we want. */
1364	memset(&offloads, 0, sizeof(struct ndis_offload_params));
1365
1366	/* Linux does not care about IP checksum, always does in kernel */
1367	offloads.ip_v4_csum = NDIS_OFFLOAD_PARAMETERS_TX_RX_DISABLED;
1368
1369	/* Reset previously set hw_features flags */
1370	net->hw_features &= ~NETVSC_SUPPORTED_HW_FEATURES;
1371	net_device_ctx->tx_checksum_mask = 0;
1372
1373	/* Compute tx offload settings based on hw capabilities */
1374	net->hw_features |= NETIF_F_RXCSUM;
1375	net->hw_features |= NETIF_F_SG;
1376	net->hw_features |= NETIF_F_RXHASH;
1377
1378	if ((hwcaps.csum.ip4_txcsum & NDIS_TXCSUM_ALL_TCP4) == NDIS_TXCSUM_ALL_TCP4) {
1379		/* Can checksum TCP */
1380		net->hw_features |= NETIF_F_IP_CSUM;
1381		net_device_ctx->tx_checksum_mask |= TRANSPORT_INFO_IPV4_TCP;
1382
1383		offloads.tcp_ip_v4_csum = NDIS_OFFLOAD_PARAMETERS_TX_RX_ENABLED;
1384
1385		if (hwcaps.lsov2.ip4_encap & NDIS_OFFLOAD_ENCAP_8023) {
1386			offloads.lso_v2_ipv4 = NDIS_OFFLOAD_PARAMETERS_LSOV2_ENABLED;
1387			net->hw_features |= NETIF_F_TSO;
1388
1389			if (hwcaps.lsov2.ip4_maxsz < nvdev->netvsc_gso_max_size)
1390				nvdev->netvsc_gso_max_size = hwcaps.lsov2.ip4_maxsz;
1391		}
1392
1393		if (hwcaps.csum.ip4_txcsum & NDIS_TXCSUM_CAP_UDP4) {
1394			offloads.udp_ip_v4_csum = NDIS_OFFLOAD_PARAMETERS_TX_RX_ENABLED;
1395			net_device_ctx->tx_checksum_mask |= TRANSPORT_INFO_IPV4_UDP;
1396		}
1397	}
1398
1399	if ((hwcaps.csum.ip6_txcsum & NDIS_TXCSUM_ALL_TCP6) == NDIS_TXCSUM_ALL_TCP6) {
1400		net->hw_features |= NETIF_F_IPV6_CSUM;
1401
1402		offloads.tcp_ip_v6_csum = NDIS_OFFLOAD_PARAMETERS_TX_RX_ENABLED;
1403		net_device_ctx->tx_checksum_mask |= TRANSPORT_INFO_IPV6_TCP;
1404
1405		if ((hwcaps.lsov2.ip6_encap & NDIS_OFFLOAD_ENCAP_8023) &&
1406		    (hwcaps.lsov2.ip6_opts & NDIS_LSOV2_CAP_IP6) == NDIS_LSOV2_CAP_IP6) {
1407			offloads.lso_v2_ipv6 = NDIS_OFFLOAD_PARAMETERS_LSOV2_ENABLED;
1408			net->hw_features |= NETIF_F_TSO6;
1409
1410			if (hwcaps.lsov2.ip6_maxsz < nvdev->netvsc_gso_max_size)
1411				nvdev->netvsc_gso_max_size = hwcaps.lsov2.ip6_maxsz;
1412		}
1413
1414		if (hwcaps.csum.ip6_txcsum & NDIS_TXCSUM_CAP_UDP6) {
1415			offloads.udp_ip_v6_csum = NDIS_OFFLOAD_PARAMETERS_TX_RX_ENABLED;
1416			net_device_ctx->tx_checksum_mask |= TRANSPORT_INFO_IPV6_UDP;
1417		}
1418	}
1419
1420	if (hwcaps.rsc.ip4 && hwcaps.rsc.ip6) {
1421		net->hw_features |= NETIF_F_LRO;
1422
1423		if (net->features & NETIF_F_LRO) {
1424			offloads.rsc_ip_v4 = NDIS_OFFLOAD_PARAMETERS_RSC_ENABLED;
1425			offloads.rsc_ip_v6 = NDIS_OFFLOAD_PARAMETERS_RSC_ENABLED;
1426		} else {
1427			offloads.rsc_ip_v4 = NDIS_OFFLOAD_PARAMETERS_RSC_DISABLED;
1428			offloads.rsc_ip_v6 = NDIS_OFFLOAD_PARAMETERS_RSC_DISABLED;
1429		}
1430	}
1431
1432	/* In case some hw_features disappeared we need to remove them from
1433	 * net->features list as they're no longer supported.
1434	 */
1435	net->features &= ~NETVSC_SUPPORTED_HW_FEATURES | net->hw_features;
1436
1437	netif_set_tso_max_size(net, nvdev->netvsc_gso_max_size);
1438
1439	ret = rndis_filter_set_offload_params(net, nvdev, &offloads);
1440
1441	return ret;
1442}
1443
1444static void rndis_get_friendly_name(struct net_device *net,
1445				    struct rndis_device *rndis_device,
1446				    struct netvsc_device *net_device)
1447{
1448	ucs2_char_t wname[256];
1449	unsigned long len;
1450	u8 ifalias[256];
1451	u32 size;
1452
1453	size = sizeof(wname);
1454	if (rndis_filter_query_device(rndis_device, net_device,
1455				      RNDIS_OID_GEN_FRIENDLY_NAME,
1456				      wname, &size) != 0)
1457		return;	/* ignore if host does not support */
1458
1459	if (size == 0)
1460		return;	/* name not set */
1461
1462	/* Convert Windows Unicode string to UTF-8 */
1463	len = ucs2_as_utf8(ifalias, wname, sizeof(ifalias));
1464
1465	/* ignore the default value from host */
1466	if (strcmp(ifalias, "Network Adapter") != 0)
1467		dev_set_alias(net, ifalias, len);
1468}
1469
1470struct netvsc_device *rndis_filter_device_add(struct hv_device *dev,
1471				      struct netvsc_device_info *device_info)
1472{
1473	struct net_device *net = hv_get_drvdata(dev);
1474	struct net_device_context *ndc = netdev_priv(net);
1475	struct netvsc_device *net_device;
1476	struct rndis_device *rndis_device;
1477	struct ndis_recv_scale_cap rsscap;
1478	u32 rsscap_size = sizeof(struct ndis_recv_scale_cap);
1479	u32 mtu, size;
1480	u32 num_possible_rss_qs;
1481	int i, ret;
1482
1483	rndis_device = get_rndis_device();
1484	if (!rndis_device)
1485		return ERR_PTR(-ENODEV);
1486
1487	/* Let the inner driver handle this first to create the netvsc channel
1488	 * NOTE! Once the channel is created, we may get a receive callback
1489	 * (RndisFilterOnReceive()) before this call is completed
1490	 */
1491	net_device = netvsc_device_add(dev, device_info);
1492	if (IS_ERR(net_device)) {
1493		kfree(rndis_device);
1494		return net_device;
1495	}
1496
1497	/* Initialize the rndis device */
1498	net_device->max_chn = 1;
1499	net_device->num_chn = 1;
1500
1501	net_device->extension = rndis_device;
1502	rndis_device->ndev = net;
1503
1504	/* Send the rndis initialization message */
1505	ret = rndis_filter_init_device(rndis_device, net_device);
1506	if (ret != 0)
1507		goto err_dev_remv;
1508
1509	/* Get the MTU from the host */
1510	size = sizeof(u32);
1511	ret = rndis_filter_query_device(rndis_device, net_device,
1512					RNDIS_OID_GEN_MAXIMUM_FRAME_SIZE,
1513					&mtu, &size);
1514	if (ret == 0 && size == sizeof(u32) && mtu < net->mtu)
1515		net->mtu = mtu;
1516
1517	/* Get the mac address */
1518	ret = rndis_filter_query_device_mac(rndis_device, net_device);
1519	if (ret != 0)
1520		goto err_dev_remv;
1521
1522	memcpy(device_info->mac_adr, rndis_device->hw_mac_adr, ETH_ALEN);
1523
1524	/* Get friendly name as ifalias*/
1525	if (!net->ifalias)
1526		rndis_get_friendly_name(net, rndis_device, net_device);
1527
1528	/* Query and set hardware capabilities */
1529	ret = rndis_netdev_set_hwcaps(rndis_device, net_device);
1530	if (ret != 0)
1531		goto err_dev_remv;
1532
1533	rndis_filter_query_device_link_status(rndis_device, net_device);
1534
1535	netdev_dbg(net, "Device MAC %pM link state %s\n",
1536		   rndis_device->hw_mac_adr,
1537		   rndis_device->link_state ? "down" : "up");
1538
1539	if (net_device->nvsp_version < NVSP_PROTOCOL_VERSION_5)
1540		goto out;
1541
1542	rndis_filter_query_link_speed(rndis_device, net_device);
1543
1544	/* vRSS setup */
1545	memset(&rsscap, 0, rsscap_size);
1546	ret = rndis_filter_query_device(rndis_device, net_device,
1547					OID_GEN_RECEIVE_SCALE_CAPABILITIES,
1548					&rsscap, &rsscap_size);
1549	if (ret || rsscap.num_recv_que < 2)
1550		goto out;
1551
1552	if (rsscap.num_indirect_tabent &&
1553	    rsscap.num_indirect_tabent <= ITAB_NUM_MAX)
1554		ndc->rx_table_sz = rsscap.num_indirect_tabent;
1555	else
1556		ndc->rx_table_sz = ITAB_NUM;
1557
1558	ndc->rx_table = kcalloc(ndc->rx_table_sz, sizeof(u16), GFP_KERNEL);
1559	if (!ndc->rx_table) {
1560		ret = -ENOMEM;
1561		goto err_dev_remv;
1562	}
1563
1564	/* This guarantees that num_possible_rss_qs <= num_online_cpus */
1565	num_possible_rss_qs = min_t(u32, num_online_cpus(),
1566				    rsscap.num_recv_que);
1567
1568	net_device->max_chn = min_t(u32, VRSS_CHANNEL_MAX, num_possible_rss_qs);
1569
1570	/* We will use the given number of channels if available. */
1571	net_device->num_chn = min(net_device->max_chn, device_info->num_chn);
1572
1573	if (!netif_is_rxfh_configured(net)) {
1574		for (i = 0; i < ndc->rx_table_sz; i++)
1575			ndc->rx_table[i] = ethtool_rxfh_indir_default(
1576						i, net_device->num_chn);
1577	}
1578
1579	atomic_set(&net_device->open_chn, 1);
1580	vmbus_set_sc_create_callback(dev->channel, netvsc_sc_open);
1581
1582	for (i = 1; i < net_device->num_chn; i++) {
1583		ret = netvsc_alloc_recv_comp_ring(net_device, i);
1584		if (ret) {
1585			while (--i != 0)
1586				vfree(net_device->chan_table[i].mrc.slots);
1587			goto out;
1588		}
1589	}
1590
1591	for (i = 1; i < net_device->num_chn; i++)
1592		netif_napi_add(net, &net_device->chan_table[i].napi,
1593			       netvsc_poll);
1594
1595	return net_device;
1596
1597out:
1598	/* setting up multiple channels failed */
1599	net_device->max_chn = 1;
1600	net_device->num_chn = 1;
1601	return net_device;
1602
1603err_dev_remv:
1604	rndis_filter_device_remove(dev, net_device);
1605	return ERR_PTR(ret);
1606}
1607
1608void rndis_filter_device_remove(struct hv_device *dev,
1609				struct netvsc_device *net_dev)
1610{
1611	struct rndis_device *rndis_dev = net_dev->extension;
1612	struct net_device *net = hv_get_drvdata(dev);
1613	struct net_device_context *ndc;
1614
1615	ndc = netdev_priv(net);
1616
1617	/* Halt and release the rndis device */
1618	rndis_filter_halt_device(net_dev, rndis_dev);
1619
1620	netvsc_device_remove(dev);
1621
1622	ndc->rx_table_sz = 0;
1623	kfree(ndc->rx_table);
1624	ndc->rx_table = NULL;
1625}
1626
1627int rndis_filter_open(struct netvsc_device *nvdev)
1628{
1629	if (!nvdev)
1630		return -EINVAL;
1631
1632	return rndis_filter_open_device(nvdev->extension);
1633}
1634
1635int rndis_filter_close(struct netvsc_device *nvdev)
1636{
1637	if (!nvdev)
1638		return -EINVAL;
1639
1640	return rndis_filter_close_device(nvdev->extension);
1641}