syncppp.c 39 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476
  1. /*
  2. * NET3: A (fairly minimal) implementation of synchronous PPP for Linux
  3. * as well as a CISCO HDLC implementation. See the copyright
  4. * message below for the original source.
  5. *
  6. * This program is free software; you can redistribute it and/or
  7. * modify it under the terms of the GNU General Public License
  8. * as published by the Free Software Foundation; either version
  9. * 2 of the license, or (at your option) any later version.
  10. *
  11. * Note however. This code is also used in a different form by FreeBSD.
  12. * Therefore when making any non OS specific change please consider
  13. * contributing it back to the original author under the terms
  14. * below in addition.
  15. * -- Alan
  16. *
  17. * Port for Linux-2.1 by Jan "Yenya" Kasprzak <kas@fi.muni.cz>
  18. */
  19. /*
  20. * Synchronous PPP/Cisco link level subroutines.
  21. * Keepalive protocol implemented in both Cisco and PPP modes.
  22. *
  23. * Copyright (C) 1994 Cronyx Ltd.
  24. * Author: Serge Vakulenko, <vak@zebub.msk.su>
  25. *
  26. * This software is distributed with NO WARRANTIES, not even the implied
  27. * warranties for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  28. *
  29. * Authors grant any other persons or organisations permission to use
  30. * or modify this software as long as this message is kept with the software,
  31. * all derivative works or modified versions.
  32. *
  33. * Version 1.9, Wed Oct 4 18:58:15 MSK 1995
  34. *
  35. * $Id: syncppp.c,v 1.18 2000/04/11 05:25:31 asj Exp $
  36. */
  37. #undef DEBUG
  38. #include <linux/module.h>
  39. #include <linux/kernel.h>
  40. #include <linux/errno.h>
  41. #include <linux/init.h>
  42. #include <linux/if_arp.h>
  43. #include <linux/skbuff.h>
  44. #include <linux/route.h>
  45. #include <linux/netdevice.h>
  46. #include <linux/inetdevice.h>
  47. #include <linux/random.h>
  48. #include <linux/pkt_sched.h>
  49. #include <linux/spinlock.h>
  50. #include <linux/rcupdate.h>
  51. #include <net/net_namespace.h>
  52. #include <net/syncppp.h>
  53. #include <asm/byteorder.h>
  54. #include <asm/uaccess.h>
  55. #define MAXALIVECNT 6 /* max. alive packets */
  56. #define PPP_ALLSTATIONS 0xff /* All-Stations broadcast address */
  57. #define PPP_UI 0x03 /* Unnumbered Information */
  58. #define PPP_IP 0x0021 /* Internet Protocol */
  59. #define PPP_ISO 0x0023 /* ISO OSI Protocol */
  60. #define PPP_XNS 0x0025 /* Xerox NS Protocol */
  61. #define PPP_IPX 0x002b /* Novell IPX Protocol */
  62. #define PPP_LCP 0xc021 /* Link Control Protocol */
  63. #define PPP_IPCP 0x8021 /* Internet Protocol Control Protocol */
  64. #define LCP_CONF_REQ 1 /* PPP LCP configure request */
  65. #define LCP_CONF_ACK 2 /* PPP LCP configure acknowledge */
  66. #define LCP_CONF_NAK 3 /* PPP LCP configure negative ack */
  67. #define LCP_CONF_REJ 4 /* PPP LCP configure reject */
  68. #define LCP_TERM_REQ 5 /* PPP LCP terminate request */
  69. #define LCP_TERM_ACK 6 /* PPP LCP terminate acknowledge */
  70. #define LCP_CODE_REJ 7 /* PPP LCP code reject */
  71. #define LCP_PROTO_REJ 8 /* PPP LCP protocol reject */
  72. #define LCP_ECHO_REQ 9 /* PPP LCP echo request */
  73. #define LCP_ECHO_REPLY 10 /* PPP LCP echo reply */
  74. #define LCP_DISC_REQ 11 /* PPP LCP discard request */
  75. #define LCP_OPT_MRU 1 /* maximum receive unit */
  76. #define LCP_OPT_ASYNC_MAP 2 /* async control character map */
  77. #define LCP_OPT_AUTH_PROTO 3 /* authentication protocol */
  78. #define LCP_OPT_QUAL_PROTO 4 /* quality protocol */
  79. #define LCP_OPT_MAGIC 5 /* magic number */
  80. #define LCP_OPT_RESERVED 6 /* reserved */
  81. #define LCP_OPT_PROTO_COMP 7 /* protocol field compression */
  82. #define LCP_OPT_ADDR_COMP 8 /* address/control field compression */
  83. #define IPCP_CONF_REQ LCP_CONF_REQ /* PPP IPCP configure request */
  84. #define IPCP_CONF_ACK LCP_CONF_ACK /* PPP IPCP configure acknowledge */
  85. #define IPCP_CONF_NAK LCP_CONF_NAK /* PPP IPCP configure negative ack */
  86. #define IPCP_CONF_REJ LCP_CONF_REJ /* PPP IPCP configure reject */
  87. #define IPCP_TERM_REQ LCP_TERM_REQ /* PPP IPCP terminate request */
  88. #define IPCP_TERM_ACK LCP_TERM_ACK /* PPP IPCP terminate acknowledge */
  89. #define IPCP_CODE_REJ LCP_CODE_REJ /* PPP IPCP code reject */
  90. #define CISCO_MULTICAST 0x8f /* Cisco multicast address */
  91. #define CISCO_UNICAST 0x0f /* Cisco unicast address */
  92. #define CISCO_KEEPALIVE 0x8035 /* Cisco keepalive protocol */
  93. #define CISCO_ADDR_REQ 0 /* Cisco address request */
  94. #define CISCO_ADDR_REPLY 1 /* Cisco address reply */
  95. #define CISCO_KEEPALIVE_REQ 2 /* Cisco keepalive request */
  96. struct ppp_header {
  97. u8 address;
  98. u8 control;
  99. __be16 protocol;
  100. };
  101. #define PPP_HEADER_LEN sizeof (struct ppp_header)
  102. struct lcp_header {
  103. u8 type;
  104. u8 ident;
  105. __be16 len;
  106. };
  107. #define LCP_HEADER_LEN sizeof (struct lcp_header)
  108. struct cisco_packet {
  109. __be32 type;
  110. __be32 par1;
  111. __be32 par2;
  112. __be16 rel;
  113. __be16 time0;
  114. __be16 time1;
  115. };
  116. #define CISCO_PACKET_LEN 18
  117. #define CISCO_BIG_PACKET_LEN 20
  118. static struct sppp *spppq;
  119. static struct timer_list sppp_keepalive_timer;
  120. static DEFINE_SPINLOCK(spppq_lock);
  121. /* global xmit queue for sending packets while spinlock is held */
  122. static struct sk_buff_head tx_queue;
  123. static void sppp_keepalive (unsigned long dummy);
  124. static void sppp_cp_send (struct sppp *sp, u16 proto, u8 type,
  125. u8 ident, u16 len, void *data);
  126. static void sppp_cisco_send (struct sppp *sp, int type, u32 par1, u32 par2);
  127. static void sppp_lcp_input (struct sppp *sp, struct sk_buff *m);
  128. static void sppp_cisco_input (struct sppp *sp, struct sk_buff *m);
  129. static void sppp_ipcp_input (struct sppp *sp, struct sk_buff *m);
  130. static void sppp_lcp_open (struct sppp *sp);
  131. static void sppp_ipcp_open (struct sppp *sp);
  132. static int sppp_lcp_conf_parse_options (struct sppp *sp, struct lcp_header *h,
  133. int len, u32 *magic);
  134. static void sppp_cp_timeout (unsigned long arg);
  135. static char *sppp_lcp_type_name (u8 type);
  136. static char *sppp_ipcp_type_name (u8 type);
  137. static void sppp_print_bytes (u8 *p, u16 len);
  138. static int debug;
  139. /* Flush global outgoing packet queue to dev_queue_xmit().
  140. *
  141. * dev_queue_xmit() must be called with interrupts enabled
  142. * which means it can't be called with spinlocks held.
  143. * If a packet needs to be sent while a spinlock is held,
  144. * then put the packet into tx_queue, and call sppp_flush_xmit()
  145. * after spinlock is released.
  146. */
  147. static void sppp_flush_xmit(void)
  148. {
  149. struct sk_buff *skb;
  150. while ((skb = skb_dequeue(&tx_queue)) != NULL)
  151. dev_queue_xmit(skb);
  152. }
  153. /*
  154. * Interface down stub
  155. */
  156. static void if_down(struct net_device *dev)
  157. {
  158. struct sppp *sp = (struct sppp *)sppp_of(dev);
  159. sp->pp_link_state=SPPP_LINK_DOWN;
  160. }
  161. /*
  162. * Timeout routine activations.
  163. */
  164. static void sppp_set_timeout(struct sppp *p,int s)
  165. {
  166. if (! (p->pp_flags & PP_TIMO))
  167. {
  168. init_timer(&p->pp_timer);
  169. p->pp_timer.function=sppp_cp_timeout;
  170. p->pp_timer.expires=jiffies+s*HZ;
  171. p->pp_timer.data=(unsigned long)p;
  172. p->pp_flags |= PP_TIMO;
  173. add_timer(&p->pp_timer);
  174. }
  175. }
  176. static void sppp_clear_timeout(struct sppp *p)
  177. {
  178. if (p->pp_flags & PP_TIMO)
  179. {
  180. del_timer(&p->pp_timer);
  181. p->pp_flags &= ~PP_TIMO;
  182. }
  183. }
  184. /**
  185. * sppp_input - receive and process a WAN PPP frame
  186. * @skb: The buffer to process
  187. * @dev: The device it arrived on
  188. *
  189. * This can be called directly by cards that do not have
  190. * timing constraints but is normally called from the network layer
  191. * after interrupt servicing to process frames queued via netif_rx().
  192. *
  193. * We process the options in the card. If the frame is destined for
  194. * the protocol stacks then it requeues the frame for the upper level
  195. * protocol. If it is a control from it is processed and discarded
  196. * here.
  197. */
  198. static void sppp_input (struct net_device *dev, struct sk_buff *skb)
  199. {
  200. struct ppp_header *h;
  201. struct sppp *sp = (struct sppp *)sppp_of(dev);
  202. unsigned long flags;
  203. skb->dev=dev;
  204. skb_reset_mac_header(skb);
  205. if (!pskb_may_pull(skb, PPP_HEADER_LEN)) {
  206. /* Too small packet, drop it. */
  207. if (sp->pp_flags & PP_DEBUG)
  208. printk (KERN_DEBUG "%s: input packet is too small, %d bytes\n",
  209. dev->name, skb->len);
  210. kfree_skb(skb);
  211. return;
  212. }
  213. /* Get PPP header. */
  214. h = (struct ppp_header *)skb->data;
  215. skb_pull(skb,sizeof(struct ppp_header));
  216. spin_lock_irqsave(&sp->lock, flags);
  217. switch (h->address) {
  218. default: /* Invalid PPP packet. */
  219. goto invalid;
  220. case PPP_ALLSTATIONS:
  221. if (h->control != PPP_UI)
  222. goto invalid;
  223. if (sp->pp_flags & PP_CISCO) {
  224. if (sp->pp_flags & PP_DEBUG)
  225. printk (KERN_WARNING "%s: PPP packet in Cisco mode <0x%x 0x%x 0x%x>\n",
  226. dev->name,
  227. h->address, h->control, ntohs (h->protocol));
  228. goto drop;
  229. }
  230. switch (ntohs (h->protocol)) {
  231. default:
  232. if (sp->lcp.state == LCP_STATE_OPENED)
  233. sppp_cp_send (sp, PPP_LCP, LCP_PROTO_REJ,
  234. ++sp->pp_seq, skb->len + 2,
  235. &h->protocol);
  236. if (sp->pp_flags & PP_DEBUG)
  237. printk (KERN_WARNING "%s: invalid input protocol <0x%x 0x%x 0x%x>\n",
  238. dev->name,
  239. h->address, h->control, ntohs (h->protocol));
  240. goto drop;
  241. case PPP_LCP:
  242. sppp_lcp_input (sp, skb);
  243. goto drop;
  244. case PPP_IPCP:
  245. if (sp->lcp.state == LCP_STATE_OPENED)
  246. sppp_ipcp_input (sp, skb);
  247. else
  248. printk(KERN_DEBUG "IPCP when still waiting LCP finish.\n");
  249. goto drop;
  250. case PPP_IP:
  251. if (sp->ipcp.state == IPCP_STATE_OPENED) {
  252. if(sp->pp_flags&PP_DEBUG)
  253. printk(KERN_DEBUG "Yow an IP frame.\n");
  254. skb->protocol=htons(ETH_P_IP);
  255. netif_rx(skb);
  256. goto done;
  257. }
  258. break;
  259. #ifdef IPX
  260. case PPP_IPX:
  261. /* IPX IPXCP not implemented yet */
  262. if (sp->lcp.state == LCP_STATE_OPENED) {
  263. skb->protocol=htons(ETH_P_IPX);
  264. netif_rx(skb);
  265. goto done;
  266. }
  267. break;
  268. #endif
  269. }
  270. break;
  271. case CISCO_MULTICAST:
  272. case CISCO_UNICAST:
  273. /* Don't check the control field here (RFC 1547). */
  274. if (! (sp->pp_flags & PP_CISCO)) {
  275. if (sp->pp_flags & PP_DEBUG)
  276. printk (KERN_WARNING "%s: Cisco packet in PPP mode <0x%x 0x%x 0x%x>\n",
  277. dev->name,
  278. h->address, h->control, ntohs (h->protocol));
  279. goto drop;
  280. }
  281. switch (ntohs (h->protocol)) {
  282. default:
  283. goto invalid;
  284. case CISCO_KEEPALIVE:
  285. sppp_cisco_input (sp, skb);
  286. goto drop;
  287. #ifdef CONFIG_INET
  288. case ETH_P_IP:
  289. skb->protocol=htons(ETH_P_IP);
  290. netif_rx(skb);
  291. goto done;
  292. #endif
  293. #ifdef CONFIG_IPX
  294. case ETH_P_IPX:
  295. skb->protocol=htons(ETH_P_IPX);
  296. netif_rx(skb);
  297. goto done;
  298. #endif
  299. }
  300. break;
  301. }
  302. goto drop;
  303. invalid:
  304. if (sp->pp_flags & PP_DEBUG)
  305. printk (KERN_WARNING "%s: invalid input packet <0x%x 0x%x 0x%x>\n",
  306. dev->name, h->address, h->control, ntohs (h->protocol));
  307. drop:
  308. kfree_skb(skb);
  309. done:
  310. spin_unlock_irqrestore(&sp->lock, flags);
  311. sppp_flush_xmit();
  312. return;
  313. }
  314. /*
  315. * Handle transmit packets.
  316. */
  317. static int sppp_hard_header(struct sk_buff *skb,
  318. struct net_device *dev, __u16 type,
  319. const void *daddr, const void *saddr,
  320. unsigned int len)
  321. {
  322. struct sppp *sp = (struct sppp *)sppp_of(dev);
  323. struct ppp_header *h;
  324. skb_push(skb,sizeof(struct ppp_header));
  325. h=(struct ppp_header *)skb->data;
  326. if(sp->pp_flags&PP_CISCO)
  327. {
  328. h->address = CISCO_UNICAST;
  329. h->control = 0;
  330. }
  331. else
  332. {
  333. h->address = PPP_ALLSTATIONS;
  334. h->control = PPP_UI;
  335. }
  336. if(sp->pp_flags & PP_CISCO)
  337. {
  338. h->protocol = htons(type);
  339. }
  340. else switch(type)
  341. {
  342. case ETH_P_IP:
  343. h->protocol = htons(PPP_IP);
  344. break;
  345. case ETH_P_IPX:
  346. h->protocol = htons(PPP_IPX);
  347. break;
  348. }
  349. return sizeof(struct ppp_header);
  350. }
  351. static const struct header_ops sppp_header_ops = {
  352. .create = sppp_hard_header,
  353. };
  354. /*
  355. * Send keepalive packets, every 10 seconds.
  356. */
  357. static void sppp_keepalive (unsigned long dummy)
  358. {
  359. struct sppp *sp;
  360. unsigned long flags;
  361. spin_lock_irqsave(&spppq_lock, flags);
  362. for (sp=spppq; sp; sp=sp->pp_next)
  363. {
  364. struct net_device *dev = sp->pp_if;
  365. /* Keepalive mode disabled or channel down? */
  366. if (! (sp->pp_flags & PP_KEEPALIVE) ||
  367. ! (dev->flags & IFF_UP))
  368. continue;
  369. spin_lock(&sp->lock);
  370. /* No keepalive in PPP mode if LCP not opened yet. */
  371. if (! (sp->pp_flags & PP_CISCO) &&
  372. sp->lcp.state != LCP_STATE_OPENED) {
  373. spin_unlock(&sp->lock);
  374. continue;
  375. }
  376. if (sp->pp_alivecnt == MAXALIVECNT) {
  377. /* No keepalive packets got. Stop the interface. */
  378. printk (KERN_WARNING "%s: protocol down\n", dev->name);
  379. if_down (dev);
  380. if (! (sp->pp_flags & PP_CISCO)) {
  381. /* Shut down the PPP link. */
  382. sp->lcp.magic = jiffies;
  383. sp->lcp.state = LCP_STATE_CLOSED;
  384. sp->ipcp.state = IPCP_STATE_CLOSED;
  385. sppp_clear_timeout (sp);
  386. /* Initiate negotiation. */
  387. sppp_lcp_open (sp);
  388. }
  389. }
  390. if (sp->pp_alivecnt <= MAXALIVECNT)
  391. ++sp->pp_alivecnt;
  392. if (sp->pp_flags & PP_CISCO)
  393. sppp_cisco_send (sp, CISCO_KEEPALIVE_REQ, ++sp->pp_seq,
  394. sp->pp_rseq);
  395. else if (sp->lcp.state == LCP_STATE_OPENED) {
  396. __be32 nmagic = htonl (sp->lcp.magic);
  397. sp->lcp.echoid = ++sp->pp_seq;
  398. sppp_cp_send (sp, PPP_LCP, LCP_ECHO_REQ,
  399. sp->lcp.echoid, 4, &nmagic);
  400. }
  401. spin_unlock(&sp->lock);
  402. }
  403. spin_unlock_irqrestore(&spppq_lock, flags);
  404. sppp_flush_xmit();
  405. sppp_keepalive_timer.expires=jiffies+10*HZ;
  406. add_timer(&sppp_keepalive_timer);
  407. }
  408. /*
  409. * Handle incoming PPP Link Control Protocol packets.
  410. */
  411. static void sppp_lcp_input (struct sppp *sp, struct sk_buff *skb)
  412. {
  413. struct lcp_header *h;
  414. struct net_device *dev = sp->pp_if;
  415. int len = skb->len;
  416. u8 *p, opt[6];
  417. u32 rmagic = 0;
  418. if (!pskb_may_pull(skb, sizeof(struct lcp_header))) {
  419. if (sp->pp_flags & PP_DEBUG)
  420. printk (KERN_WARNING "%s: invalid lcp packet length: %d bytes\n",
  421. dev->name, len);
  422. return;
  423. }
  424. h = (struct lcp_header *)skb->data;
  425. skb_pull(skb,sizeof(struct lcp_header *));
  426. if (sp->pp_flags & PP_DEBUG)
  427. {
  428. char state = '?';
  429. switch (sp->lcp.state) {
  430. case LCP_STATE_CLOSED: state = 'C'; break;
  431. case LCP_STATE_ACK_RCVD: state = 'R'; break;
  432. case LCP_STATE_ACK_SENT: state = 'S'; break;
  433. case LCP_STATE_OPENED: state = 'O'; break;
  434. }
  435. printk (KERN_WARNING "%s: lcp input(%c): %d bytes <%s id=%xh len=%xh",
  436. dev->name, state, len,
  437. sppp_lcp_type_name (h->type), h->ident, ntohs (h->len));
  438. if (len > 4)
  439. sppp_print_bytes ((u8*) (h+1), len-4);
  440. printk (">\n");
  441. }
  442. if (len > ntohs (h->len))
  443. len = ntohs (h->len);
  444. switch (h->type) {
  445. default:
  446. /* Unknown packet type -- send Code-Reject packet. */
  447. sppp_cp_send (sp, PPP_LCP, LCP_CODE_REJ, ++sp->pp_seq,
  448. skb->len, h);
  449. break;
  450. case LCP_CONF_REQ:
  451. if (len < 4) {
  452. if (sp->pp_flags & PP_DEBUG)
  453. printk (KERN_DEBUG"%s: invalid lcp configure request packet length: %d bytes\n",
  454. dev->name, len);
  455. break;
  456. }
  457. if (len>4 && !sppp_lcp_conf_parse_options (sp, h, len, &rmagic))
  458. goto badreq;
  459. if (rmagic == sp->lcp.magic) {
  460. /* Local and remote magics equal -- loopback? */
  461. if (sp->pp_loopcnt >= MAXALIVECNT*5) {
  462. printk (KERN_WARNING "%s: loopback\n",
  463. dev->name);
  464. sp->pp_loopcnt = 0;
  465. if (dev->flags & IFF_UP) {
  466. if_down (dev);
  467. }
  468. } else if (sp->pp_flags & PP_DEBUG)
  469. printk (KERN_DEBUG "%s: conf req: magic glitch\n",
  470. dev->name);
  471. ++sp->pp_loopcnt;
  472. /* MUST send Conf-Nack packet. */
  473. rmagic = ~sp->lcp.magic;
  474. opt[0] = LCP_OPT_MAGIC;
  475. opt[1] = sizeof (opt);
  476. opt[2] = rmagic >> 24;
  477. opt[3] = rmagic >> 16;
  478. opt[4] = rmagic >> 8;
  479. opt[5] = rmagic;
  480. sppp_cp_send (sp, PPP_LCP, LCP_CONF_NAK,
  481. h->ident, sizeof (opt), &opt);
  482. badreq:
  483. switch (sp->lcp.state) {
  484. case LCP_STATE_OPENED:
  485. /* Initiate renegotiation. */
  486. sppp_lcp_open (sp);
  487. /* fall through... */
  488. case LCP_STATE_ACK_SENT:
  489. /* Go to closed state. */
  490. sp->lcp.state = LCP_STATE_CLOSED;
  491. sp->ipcp.state = IPCP_STATE_CLOSED;
  492. }
  493. break;
  494. }
  495. /* Send Configure-Ack packet. */
  496. sp->pp_loopcnt = 0;
  497. if (sp->lcp.state != LCP_STATE_OPENED) {
  498. sppp_cp_send (sp, PPP_LCP, LCP_CONF_ACK,
  499. h->ident, len-4, h+1);
  500. }
  501. /* Change the state. */
  502. switch (sp->lcp.state) {
  503. case LCP_STATE_CLOSED:
  504. sp->lcp.state = LCP_STATE_ACK_SENT;
  505. break;
  506. case LCP_STATE_ACK_RCVD:
  507. sp->lcp.state = LCP_STATE_OPENED;
  508. sppp_ipcp_open (sp);
  509. break;
  510. case LCP_STATE_OPENED:
  511. /* Remote magic changed -- close session. */
  512. sp->lcp.state = LCP_STATE_CLOSED;
  513. sp->ipcp.state = IPCP_STATE_CLOSED;
  514. /* Initiate renegotiation. */
  515. sppp_lcp_open (sp);
  516. /* Send ACK after our REQ in attempt to break loop */
  517. sppp_cp_send (sp, PPP_LCP, LCP_CONF_ACK,
  518. h->ident, len-4, h+1);
  519. sp->lcp.state = LCP_STATE_ACK_SENT;
  520. break;
  521. }
  522. break;
  523. case LCP_CONF_ACK:
  524. if (h->ident != sp->lcp.confid)
  525. break;
  526. sppp_clear_timeout (sp);
  527. if ((sp->pp_link_state != SPPP_LINK_UP) &&
  528. (dev->flags & IFF_UP)) {
  529. /* Coming out of loopback mode. */
  530. sp->pp_link_state=SPPP_LINK_UP;
  531. printk (KERN_INFO "%s: protocol up\n", dev->name);
  532. }
  533. switch (sp->lcp.state) {
  534. case LCP_STATE_CLOSED:
  535. sp->lcp.state = LCP_STATE_ACK_RCVD;
  536. sppp_set_timeout (sp, 5);
  537. break;
  538. case LCP_STATE_ACK_SENT:
  539. sp->lcp.state = LCP_STATE_OPENED;
  540. sppp_ipcp_open (sp);
  541. break;
  542. }
  543. break;
  544. case LCP_CONF_NAK:
  545. if (h->ident != sp->lcp.confid)
  546. break;
  547. p = (u8*) (h+1);
  548. if (len>=10 && p[0] == LCP_OPT_MAGIC && p[1] >= 4) {
  549. rmagic = (u32)p[2] << 24 |
  550. (u32)p[3] << 16 | p[4] << 8 | p[5];
  551. if (rmagic == ~sp->lcp.magic) {
  552. int newmagic;
  553. if (sp->pp_flags & PP_DEBUG)
  554. printk (KERN_DEBUG "%s: conf nak: magic glitch\n",
  555. dev->name);
  556. get_random_bytes(&newmagic, sizeof(newmagic));
  557. sp->lcp.magic += newmagic;
  558. } else
  559. sp->lcp.magic = rmagic;
  560. }
  561. if (sp->lcp.state != LCP_STATE_ACK_SENT) {
  562. /* Go to closed state. */
  563. sp->lcp.state = LCP_STATE_CLOSED;
  564. sp->ipcp.state = IPCP_STATE_CLOSED;
  565. }
  566. /* The link will be renegotiated after timeout,
  567. * to avoid endless req-nack loop. */
  568. sppp_clear_timeout (sp);
  569. sppp_set_timeout (sp, 2);
  570. break;
  571. case LCP_CONF_REJ:
  572. if (h->ident != sp->lcp.confid)
  573. break;
  574. sppp_clear_timeout (sp);
  575. /* Initiate renegotiation. */
  576. sppp_lcp_open (sp);
  577. if (sp->lcp.state != LCP_STATE_ACK_SENT) {
  578. /* Go to closed state. */
  579. sp->lcp.state = LCP_STATE_CLOSED;
  580. sp->ipcp.state = IPCP_STATE_CLOSED;
  581. }
  582. break;
  583. case LCP_TERM_REQ:
  584. sppp_clear_timeout (sp);
  585. /* Send Terminate-Ack packet. */
  586. sppp_cp_send (sp, PPP_LCP, LCP_TERM_ACK, h->ident, 0, NULL);
  587. /* Go to closed state. */
  588. sp->lcp.state = LCP_STATE_CLOSED;
  589. sp->ipcp.state = IPCP_STATE_CLOSED;
  590. /* Initiate renegotiation. */
  591. sppp_lcp_open (sp);
  592. break;
  593. case LCP_TERM_ACK:
  594. case LCP_CODE_REJ:
  595. case LCP_PROTO_REJ:
  596. /* Ignore for now. */
  597. break;
  598. case LCP_DISC_REQ:
  599. /* Discard the packet. */
  600. break;
  601. case LCP_ECHO_REQ:
  602. if (sp->lcp.state != LCP_STATE_OPENED)
  603. break;
  604. if (len < 8) {
  605. if (sp->pp_flags & PP_DEBUG)
  606. printk (KERN_WARNING "%s: invalid lcp echo request packet length: %d bytes\n",
  607. dev->name, len);
  608. break;
  609. }
  610. if (ntohl (*(__be32*)(h+1)) == sp->lcp.magic) {
  611. /* Line loopback mode detected. */
  612. printk (KERN_WARNING "%s: loopback\n", dev->name);
  613. if_down (dev);
  614. /* Shut down the PPP link. */
  615. sp->lcp.state = LCP_STATE_CLOSED;
  616. sp->ipcp.state = IPCP_STATE_CLOSED;
  617. sppp_clear_timeout (sp);
  618. /* Initiate negotiation. */
  619. sppp_lcp_open (sp);
  620. break;
  621. }
  622. *(__be32 *)(h+1) = htonl (sp->lcp.magic);
  623. sppp_cp_send (sp, PPP_LCP, LCP_ECHO_REPLY, h->ident, len-4, h+1);
  624. break;
  625. case LCP_ECHO_REPLY:
  626. if (h->ident != sp->lcp.echoid)
  627. break;
  628. if (len < 8) {
  629. if (sp->pp_flags & PP_DEBUG)
  630. printk (KERN_WARNING "%s: invalid lcp echo reply packet length: %d bytes\n",
  631. dev->name, len);
  632. break;
  633. }
  634. if (ntohl(*(__be32 *)(h+1)) != sp->lcp.magic)
  635. sp->pp_alivecnt = 0;
  636. break;
  637. }
  638. }
  639. /*
  640. * Handle incoming Cisco keepalive protocol packets.
  641. */
  642. static void sppp_cisco_input (struct sppp *sp, struct sk_buff *skb)
  643. {
  644. struct cisco_packet *h;
  645. struct net_device *dev = sp->pp_if;
  646. if (!pskb_may_pull(skb, sizeof(struct cisco_packet))
  647. || (skb->len != CISCO_PACKET_LEN
  648. && skb->len != CISCO_BIG_PACKET_LEN)) {
  649. if (sp->pp_flags & PP_DEBUG)
  650. printk (KERN_WARNING "%s: invalid cisco packet length: %d bytes\n",
  651. dev->name, skb->len);
  652. return;
  653. }
  654. h = (struct cisco_packet *)skb->data;
  655. skb_pull(skb, sizeof(struct cisco_packet*));
  656. if (sp->pp_flags & PP_DEBUG)
  657. printk (KERN_WARNING "%s: cisco input: %d bytes <%xh %xh %xh %xh %xh-%xh>\n",
  658. dev->name, skb->len,
  659. ntohl (h->type), h->par1, h->par2, h->rel,
  660. h->time0, h->time1);
  661. switch (ntohl (h->type)) {
  662. default:
  663. if (sp->pp_flags & PP_DEBUG)
  664. printk (KERN_WARNING "%s: unknown cisco packet type: 0x%x\n",
  665. dev->name, ntohl (h->type));
  666. break;
  667. case CISCO_ADDR_REPLY:
  668. /* Reply on address request, ignore */
  669. break;
  670. case CISCO_KEEPALIVE_REQ:
  671. sp->pp_alivecnt = 0;
  672. sp->pp_rseq = ntohl (h->par1);
  673. if (sp->pp_seq == sp->pp_rseq) {
  674. /* Local and remote sequence numbers are equal.
  675. * Probably, the line is in loopback mode. */
  676. int newseq;
  677. if (sp->pp_loopcnt >= MAXALIVECNT) {
  678. printk (KERN_WARNING "%s: loopback\n",
  679. dev->name);
  680. sp->pp_loopcnt = 0;
  681. if (dev->flags & IFF_UP) {
  682. if_down (dev);
  683. }
  684. }
  685. ++sp->pp_loopcnt;
  686. /* Generate new local sequence number */
  687. get_random_bytes(&newseq, sizeof(newseq));
  688. sp->pp_seq ^= newseq;
  689. break;
  690. }
  691. sp->pp_loopcnt = 0;
  692. if (sp->pp_link_state==SPPP_LINK_DOWN &&
  693. (dev->flags & IFF_UP)) {
  694. sp->pp_link_state=SPPP_LINK_UP;
  695. printk (KERN_INFO "%s: protocol up\n", dev->name);
  696. }
  697. break;
  698. case CISCO_ADDR_REQ:
  699. /* Stolen from net/ipv4/devinet.c -- SIOCGIFADDR ioctl */
  700. {
  701. __be32 addr = 0, mask = htonl(~0U); /* FIXME: is the mask correct? */
  702. #ifdef CONFIG_INET
  703. struct in_device *in_dev;
  704. struct in_ifaddr *ifa;
  705. rcu_read_lock();
  706. if ((in_dev = __in_dev_get_rcu(dev)) != NULL)
  707. {
  708. for (ifa=in_dev->ifa_list; ifa != NULL;
  709. ifa=ifa->ifa_next) {
  710. if (strcmp(dev->name, ifa->ifa_label) == 0)
  711. {
  712. addr = ifa->ifa_local;
  713. mask = ifa->ifa_mask;
  714. break;
  715. }
  716. }
  717. }
  718. rcu_read_unlock();
  719. #endif
  720. sppp_cisco_send (sp, CISCO_ADDR_REPLY, ntohl(addr), ntohl(mask));
  721. break;
  722. }
  723. }
  724. }
  725. /*
  726. * Send PPP LCP packet.
  727. */
  728. static void sppp_cp_send (struct sppp *sp, u16 proto, u8 type,
  729. u8 ident, u16 len, void *data)
  730. {
  731. struct ppp_header *h;
  732. struct lcp_header *lh;
  733. struct sk_buff *skb;
  734. struct net_device *dev = sp->pp_if;
  735. skb=alloc_skb(dev->hard_header_len+PPP_HEADER_LEN+LCP_HEADER_LEN+len,
  736. GFP_ATOMIC);
  737. if (skb==NULL)
  738. return;
  739. skb_reserve(skb,dev->hard_header_len);
  740. h = (struct ppp_header *)skb_put(skb, sizeof(struct ppp_header));
  741. h->address = PPP_ALLSTATIONS; /* broadcast address */
  742. h->control = PPP_UI; /* Unnumbered Info */
  743. h->protocol = htons (proto); /* Link Control Protocol */
  744. lh = (struct lcp_header *)skb_put(skb, sizeof(struct lcp_header));
  745. lh->type = type;
  746. lh->ident = ident;
  747. lh->len = htons (LCP_HEADER_LEN + len);
  748. if (len)
  749. memcpy(skb_put(skb,len),data, len);
  750. if (sp->pp_flags & PP_DEBUG) {
  751. printk (KERN_WARNING "%s: %s output <%s id=%xh len=%xh",
  752. dev->name,
  753. proto==PPP_LCP ? "lcp" : "ipcp",
  754. proto==PPP_LCP ? sppp_lcp_type_name (lh->type) :
  755. sppp_ipcp_type_name (lh->type), lh->ident,
  756. ntohs (lh->len));
  757. if (len)
  758. sppp_print_bytes ((u8*) (lh+1), len);
  759. printk (">\n");
  760. }
  761. /* Control is high priority so it doesn't get queued behind data */
  762. skb->priority=TC_PRIO_CONTROL;
  763. skb->dev = dev;
  764. skb_queue_tail(&tx_queue, skb);
  765. }
  766. /*
  767. * Send Cisco keepalive packet.
  768. */
  769. static void sppp_cisco_send (struct sppp *sp, int type, u32 par1, u32 par2)
  770. {
  771. struct ppp_header *h;
  772. struct cisco_packet *ch;
  773. struct sk_buff *skb;
  774. struct net_device *dev = sp->pp_if;
  775. u32 t = jiffies * 1000/HZ;
  776. skb=alloc_skb(dev->hard_header_len+PPP_HEADER_LEN+CISCO_PACKET_LEN,
  777. GFP_ATOMIC);
  778. if(skb==NULL)
  779. return;
  780. skb_reserve(skb, dev->hard_header_len);
  781. h = (struct ppp_header *)skb_put (skb, sizeof(struct ppp_header));
  782. h->address = CISCO_MULTICAST;
  783. h->control = 0;
  784. h->protocol = htons (CISCO_KEEPALIVE);
  785. ch = (struct cisco_packet*)skb_put(skb, CISCO_PACKET_LEN);
  786. ch->type = htonl (type);
  787. ch->par1 = htonl (par1);
  788. ch->par2 = htonl (par2);
  789. ch->rel = htons(0xffff);
  790. ch->time0 = htons ((u16) (t >> 16));
  791. ch->time1 = htons ((u16) t);
  792. if (sp->pp_flags & PP_DEBUG)
  793. printk (KERN_WARNING "%s: cisco output: <%xh %xh %xh %xh %xh-%xh>\n",
  794. dev->name, ntohl (ch->type), ch->par1,
  795. ch->par2, ch->rel, ch->time0, ch->time1);
  796. skb->priority=TC_PRIO_CONTROL;
  797. skb->dev = dev;
  798. skb_queue_tail(&tx_queue, skb);
  799. }
  800. /**
  801. * sppp_close - close down a synchronous PPP or Cisco HDLC link
  802. * @dev: The network device to drop the link of
  803. *
  804. * This drops the logical interface to the channel. It is not
  805. * done politely as we assume we will also be dropping DTR. Any
  806. * timeouts are killed.
  807. */
  808. int sppp_close (struct net_device *dev)
  809. {
  810. struct sppp *sp = (struct sppp *)sppp_of(dev);
  811. unsigned long flags;
  812. spin_lock_irqsave(&sp->lock, flags);
  813. sp->pp_link_state = SPPP_LINK_DOWN;
  814. sp->lcp.state = LCP_STATE_CLOSED;
  815. sp->ipcp.state = IPCP_STATE_CLOSED;
  816. sppp_clear_timeout (sp);
  817. spin_unlock_irqrestore(&sp->lock, flags);
  818. return 0;
  819. }
  820. EXPORT_SYMBOL(sppp_close);
  821. /**
  822. * sppp_open - open a synchronous PPP or Cisco HDLC link
  823. * @dev: Network device to activate
  824. *
  825. * Close down any existing synchronous session and commence
  826. * from scratch. In the PPP case this means negotiating LCP/IPCP
  827. * and friends, while for Cisco HDLC we simply need to start sending
  828. * keepalives
  829. */
  830. int sppp_open (struct net_device *dev)
  831. {
  832. struct sppp *sp = (struct sppp *)sppp_of(dev);
  833. unsigned long flags;
  834. sppp_close(dev);
  835. spin_lock_irqsave(&sp->lock, flags);
  836. if (!(sp->pp_flags & PP_CISCO)) {
  837. sppp_lcp_open (sp);
  838. }
  839. sp->pp_link_state = SPPP_LINK_DOWN;
  840. spin_unlock_irqrestore(&sp->lock, flags);
  841. sppp_flush_xmit();
  842. return 0;
  843. }
  844. EXPORT_SYMBOL(sppp_open);
  845. /**
  846. * sppp_reopen - notify of physical link loss
  847. * @dev: Device that lost the link
  848. *
  849. * This function informs the synchronous protocol code that
  850. * the underlying link died (for example a carrier drop on X.21)
  851. *
  852. * We increment the magic numbers to ensure that if the other end
  853. * failed to notice we will correctly start a new session. It happens
  854. * do to the nature of telco circuits is that you can lose carrier on
  855. * one endonly.
  856. *
  857. * Having done this we go back to negotiating. This function may
  858. * be called from an interrupt context.
  859. */
  860. int sppp_reopen (struct net_device *dev)
  861. {
  862. struct sppp *sp = (struct sppp *)sppp_of(dev);
  863. unsigned long flags;
  864. sppp_close(dev);
  865. spin_lock_irqsave(&sp->lock, flags);
  866. if (!(sp->pp_flags & PP_CISCO))
  867. {
  868. sp->lcp.magic = jiffies;
  869. ++sp->pp_seq;
  870. sp->lcp.state = LCP_STATE_CLOSED;
  871. sp->ipcp.state = IPCP_STATE_CLOSED;
  872. /* Give it a moment for the line to settle then go */
  873. sppp_set_timeout (sp, 1);
  874. }
  875. sp->pp_link_state=SPPP_LINK_DOWN;
  876. spin_unlock_irqrestore(&sp->lock, flags);
  877. return 0;
  878. }
  879. EXPORT_SYMBOL(sppp_reopen);
  880. /**
  881. * sppp_change_mtu - Change the link MTU
  882. * @dev: Device to change MTU on
  883. * @new_mtu: New MTU
  884. *
  885. * Change the MTU on the link. This can only be called with
  886. * the link down. It returns an error if the link is up or
  887. * the mtu is out of range.
  888. */
  889. static int sppp_change_mtu(struct net_device *dev, int new_mtu)
  890. {
  891. if(new_mtu<128||new_mtu>PPP_MTU||(dev->flags&IFF_UP))
  892. return -EINVAL;
  893. dev->mtu=new_mtu;
  894. return 0;
  895. }
  896. /**
  897. * sppp_do_ioctl - Ioctl handler for ppp/hdlc
  898. * @dev: Device subject to ioctl
  899. * @ifr: Interface request block from the user
  900. * @cmd: Command that is being issued
  901. *
  902. * This function handles the ioctls that may be issued by the user
  903. * to control the settings of a PPP/HDLC link. It does both busy
  904. * and security checks. This function is intended to be wrapped by
  905. * callers who wish to add additional ioctl calls of their own.
  906. */
  907. int sppp_do_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd)
  908. {
  909. struct sppp *sp = (struct sppp *)sppp_of(dev);
  910. if(dev->flags&IFF_UP)
  911. return -EBUSY;
  912. if(!capable(CAP_NET_ADMIN))
  913. return -EPERM;
  914. switch(cmd)
  915. {
  916. case SPPPIOCCISCO:
  917. sp->pp_flags|=PP_CISCO;
  918. dev->type = ARPHRD_HDLC;
  919. break;
  920. case SPPPIOCPPP:
  921. sp->pp_flags&=~PP_CISCO;
  922. dev->type = ARPHRD_PPP;
  923. break;
  924. case SPPPIOCDEBUG:
  925. sp->pp_flags&=~PP_DEBUG;
  926. if(ifr->ifr_flags)
  927. sp->pp_flags|=PP_DEBUG;
  928. break;
  929. case SPPPIOCGFLAGS:
  930. if(copy_to_user(ifr->ifr_data, &sp->pp_flags, sizeof(sp->pp_flags)))
  931. return -EFAULT;
  932. break;
  933. case SPPPIOCSFLAGS:
  934. if(copy_from_user(&sp->pp_flags, ifr->ifr_data, sizeof(sp->pp_flags)))
  935. return -EFAULT;
  936. break;
  937. default:
  938. return -EINVAL;
  939. }
  940. return 0;
  941. }
  942. EXPORT_SYMBOL(sppp_do_ioctl);
  943. /**
  944. * sppp_attach - attach synchronous PPP/HDLC to a device
  945. * @pd: PPP device to initialise
  946. *
  947. * This initialises the PPP/HDLC support on an interface. At the
  948. * time of calling the dev element must point to the network device
  949. * that this interface is attached to. The interface should not yet
  950. * be registered.
  951. */
  952. void sppp_attach(struct ppp_device *pd)
  953. {
  954. struct net_device *dev = pd->dev;
  955. struct sppp *sp = &pd->sppp;
  956. unsigned long flags;
  957. /* Make sure embedding is safe for sppp_of */
  958. BUG_ON(sppp_of(dev) != sp);
  959. spin_lock_irqsave(&spppq_lock, flags);
  960. /* Initialize keepalive handler. */
  961. if (! spppq)
  962. {
  963. init_timer(&sppp_keepalive_timer);
  964. sppp_keepalive_timer.expires=jiffies+10*HZ;
  965. sppp_keepalive_timer.function=sppp_keepalive;
  966. add_timer(&sppp_keepalive_timer);
  967. }
  968. /* Insert new entry into the keepalive list. */
  969. sp->pp_next = spppq;
  970. spppq = sp;
  971. spin_unlock_irqrestore(&spppq_lock, flags);
  972. sp->pp_loopcnt = 0;
  973. sp->pp_alivecnt = 0;
  974. sp->pp_seq = 0;
  975. sp->pp_rseq = 0;
  976. sp->pp_flags = PP_KEEPALIVE|PP_CISCO|debug;/*PP_DEBUG;*/
  977. sp->lcp.magic = 0;
  978. sp->lcp.state = LCP_STATE_CLOSED;
  979. sp->ipcp.state = IPCP_STATE_CLOSED;
  980. sp->pp_if = dev;
  981. spin_lock_init(&sp->lock);
  982. /*
  983. * Device specific setup. All but interrupt handler and
  984. * hard_start_xmit.
  985. */
  986. dev->header_ops = &sppp_header_ops;
  987. dev->tx_queue_len = 10;
  988. dev->type = ARPHRD_HDLC;
  989. dev->addr_len = 0;
  990. dev->hard_header_len = sizeof(struct ppp_header);
  991. dev->mtu = PPP_MTU;
  992. /*
  993. * These 4 are callers but MUST also call sppp_ functions
  994. */
  995. dev->do_ioctl = sppp_do_ioctl;
  996. #if 0
  997. dev->get_stats = NULL; /* Let the driver override these */
  998. dev->open = sppp_open;
  999. dev->stop = sppp_close;
  1000. #endif
  1001. dev->change_mtu = sppp_change_mtu;
  1002. dev->flags = IFF_MULTICAST|IFF_POINTOPOINT|IFF_NOARP;
  1003. }
  1004. EXPORT_SYMBOL(sppp_attach);
  1005. /**
  1006. * sppp_detach - release PPP resources from a device
  1007. * @dev: Network device to release
  1008. *
  1009. * Stop and free up any PPP/HDLC resources used by this
  1010. * interface. This must be called before the device is
  1011. * freed.
  1012. */
  1013. void sppp_detach (struct net_device *dev)
  1014. {
  1015. struct sppp **q, *p, *sp = (struct sppp *)sppp_of(dev);
  1016. unsigned long flags;
  1017. spin_lock_irqsave(&spppq_lock, flags);
  1018. /* Remove the entry from the keepalive list. */
  1019. for (q = &spppq; (p = *q); q = &p->pp_next)
  1020. if (p == sp) {
  1021. *q = p->pp_next;
  1022. break;
  1023. }
  1024. /* Stop keepalive handler. */
  1025. if (! spppq)
  1026. del_timer(&sppp_keepalive_timer);
  1027. sppp_clear_timeout (sp);
  1028. spin_unlock_irqrestore(&spppq_lock, flags);
  1029. }
  1030. EXPORT_SYMBOL(sppp_detach);
  1031. /*
  1032. * Analyze the LCP Configure-Request options list
  1033. * for the presence of unknown options.
  1034. * If the request contains unknown options, build and
  1035. * send Configure-reject packet, containing only unknown options.
  1036. */
  1037. static int
  1038. sppp_lcp_conf_parse_options (struct sppp *sp, struct lcp_header *h,
  1039. int len, u32 *magic)
  1040. {
  1041. u8 *buf, *r, *p;
  1042. int rlen;
  1043. len -= 4;
  1044. buf = r = kmalloc (len, GFP_ATOMIC);
  1045. if (! buf)
  1046. return (0);
  1047. p = (void*) (h+1);
  1048. for (rlen=0; len>1 && p[1]; len-=p[1], p+=p[1]) {
  1049. switch (*p) {
  1050. case LCP_OPT_MAGIC:
  1051. /* Magic number -- extract. */
  1052. if (len >= 6 && p[1] == 6) {
  1053. *magic = (u32)p[2] << 24 |
  1054. (u32)p[3] << 16 | p[4] << 8 | p[5];
  1055. continue;
  1056. }
  1057. break;
  1058. case LCP_OPT_ASYNC_MAP:
  1059. /* Async control character map -- check to be zero. */
  1060. if (len >= 6 && p[1] == 6 && ! p[2] && ! p[3] &&
  1061. ! p[4] && ! p[5])
  1062. continue;
  1063. break;
  1064. case LCP_OPT_MRU:
  1065. /* Maximum receive unit -- always OK. */
  1066. continue;
  1067. default:
  1068. /* Others not supported. */
  1069. break;
  1070. }
  1071. /* Add the option to rejected list. */
  1072. memcpy(r, p, p[1]);
  1073. r += p[1];
  1074. rlen += p[1];
  1075. }
  1076. if (rlen)
  1077. sppp_cp_send (sp, PPP_LCP, LCP_CONF_REJ, h->ident, rlen, buf);
  1078. kfree(buf);
  1079. return (rlen == 0);
  1080. }
  1081. static void sppp_ipcp_input (struct sppp *sp, struct sk_buff *skb)
  1082. {
  1083. struct lcp_header *h;
  1084. struct net_device *dev = sp->pp_if;
  1085. int len = skb->len;
  1086. if (!pskb_may_pull(skb, sizeof(struct lcp_header))) {
  1087. if (sp->pp_flags & PP_DEBUG)
  1088. printk (KERN_WARNING "%s: invalid ipcp packet length: %d bytes\n",
  1089. dev->name, len);
  1090. return;
  1091. }
  1092. h = (struct lcp_header *)skb->data;
  1093. skb_pull(skb,sizeof(struct lcp_header));
  1094. if (sp->pp_flags & PP_DEBUG) {
  1095. printk (KERN_WARNING "%s: ipcp input: %d bytes <%s id=%xh len=%xh",
  1096. dev->name, len,
  1097. sppp_ipcp_type_name (h->type), h->ident, ntohs (h->len));
  1098. if (len > 4)
  1099. sppp_print_bytes ((u8*) (h+1), len-4);
  1100. printk (">\n");
  1101. }
  1102. if (len > ntohs (h->len))
  1103. len = ntohs (h->len);
  1104. switch (h->type) {
  1105. default:
  1106. /* Unknown packet type -- send Code-Reject packet. */
  1107. sppp_cp_send (sp, PPP_IPCP, IPCP_CODE_REJ, ++sp->pp_seq, len, h);
  1108. break;
  1109. case IPCP_CONF_REQ:
  1110. if (len < 4) {
  1111. if (sp->pp_flags & PP_DEBUG)
  1112. printk (KERN_WARNING "%s: invalid ipcp configure request packet length: %d bytes\n",
  1113. dev->name, len);
  1114. return;
  1115. }
  1116. if (len > 4) {
  1117. sppp_cp_send (sp, PPP_IPCP, LCP_CONF_REJ, h->ident,
  1118. len-4, h+1);
  1119. switch (sp->ipcp.state) {
  1120. case IPCP_STATE_OPENED:
  1121. /* Initiate renegotiation. */
  1122. sppp_ipcp_open (sp);
  1123. /* fall through... */
  1124. case IPCP_STATE_ACK_SENT:
  1125. /* Go to closed state. */
  1126. sp->ipcp.state = IPCP_STATE_CLOSED;
  1127. }
  1128. } else {
  1129. /* Send Configure-Ack packet. */
  1130. sppp_cp_send (sp, PPP_IPCP, IPCP_CONF_ACK, h->ident,
  1131. 0, NULL);
  1132. /* Change the state. */
  1133. if (sp->ipcp.state == IPCP_STATE_ACK_RCVD)
  1134. sp->ipcp.state = IPCP_STATE_OPENED;
  1135. else
  1136. sp->ipcp.state = IPCP_STATE_ACK_SENT;
  1137. }
  1138. break;
  1139. case IPCP_CONF_ACK:
  1140. if (h->ident != sp->ipcp.confid)
  1141. break;
  1142. sppp_clear_timeout (sp);
  1143. switch (sp->ipcp.state) {
  1144. case IPCP_STATE_CLOSED:
  1145. sp->ipcp.state = IPCP_STATE_ACK_RCVD;
  1146. sppp_set_timeout (sp, 5);
  1147. break;
  1148. case IPCP_STATE_ACK_SENT:
  1149. sp->ipcp.state = IPCP_STATE_OPENED;
  1150. break;
  1151. }
  1152. break;
  1153. case IPCP_CONF_NAK:
  1154. case IPCP_CONF_REJ:
  1155. if (h->ident != sp->ipcp.confid)
  1156. break;
  1157. sppp_clear_timeout (sp);
  1158. /* Initiate renegotiation. */
  1159. sppp_ipcp_open (sp);
  1160. if (sp->ipcp.state != IPCP_STATE_ACK_SENT)
  1161. /* Go to closed state. */
  1162. sp->ipcp.state = IPCP_STATE_CLOSED;
  1163. break;
  1164. case IPCP_TERM_REQ:
  1165. /* Send Terminate-Ack packet. */
  1166. sppp_cp_send (sp, PPP_IPCP, IPCP_TERM_ACK, h->ident, 0, NULL);
  1167. /* Go to closed state. */
  1168. sp->ipcp.state = IPCP_STATE_CLOSED;
  1169. /* Initiate renegotiation. */
  1170. sppp_ipcp_open (sp);
  1171. break;
  1172. case IPCP_TERM_ACK:
  1173. /* Ignore for now. */
  1174. case IPCP_CODE_REJ:
  1175. /* Ignore for now. */
  1176. break;
  1177. }
  1178. }
  1179. static void sppp_lcp_open (struct sppp *sp)
  1180. {
  1181. char opt[6];
  1182. if (! sp->lcp.magic)
  1183. sp->lcp.magic = jiffies;
  1184. opt[0] = LCP_OPT_MAGIC;
  1185. opt[1] = sizeof (opt);
  1186. opt[2] = sp->lcp.magic >> 24;
  1187. opt[3] = sp->lcp.magic >> 16;
  1188. opt[4] = sp->lcp.magic >> 8;
  1189. opt[5] = sp->lcp.magic;
  1190. sp->lcp.confid = ++sp->pp_seq;
  1191. sppp_cp_send (sp, PPP_LCP, LCP_CONF_REQ, sp->lcp.confid,
  1192. sizeof (opt), &opt);
  1193. sppp_set_timeout (sp, 2);
  1194. }
  1195. static void sppp_ipcp_open (struct sppp *sp)
  1196. {
  1197. sp->ipcp.confid = ++sp->pp_seq;
  1198. sppp_cp_send (sp, PPP_IPCP, IPCP_CONF_REQ, sp->ipcp.confid, 0, NULL);
  1199. sppp_set_timeout (sp, 2);
  1200. }
  1201. /*
  1202. * Process PPP control protocol timeouts.
  1203. */
  1204. static void sppp_cp_timeout (unsigned long arg)
  1205. {
  1206. struct sppp *sp = (struct sppp*) arg;
  1207. unsigned long flags;
  1208. spin_lock_irqsave(&sp->lock, flags);
  1209. sp->pp_flags &= ~PP_TIMO;
  1210. if (! (sp->pp_if->flags & IFF_UP) || (sp->pp_flags & PP_CISCO)) {
  1211. spin_unlock_irqrestore(&sp->lock, flags);
  1212. return;
  1213. }
  1214. switch (sp->lcp.state) {
  1215. case LCP_STATE_CLOSED:
  1216. /* No ACK for Configure-Request, retry. */
  1217. sppp_lcp_open (sp);
  1218. break;
  1219. case LCP_STATE_ACK_RCVD:
  1220. /* ACK got, but no Configure-Request for peer, retry. */
  1221. sppp_lcp_open (sp);
  1222. sp->lcp.state = LCP_STATE_CLOSED;
  1223. break;
  1224. case LCP_STATE_ACK_SENT:
  1225. /* ACK sent but no ACK for Configure-Request, retry. */
  1226. sppp_lcp_open (sp);
  1227. break;
  1228. case LCP_STATE_OPENED:
  1229. /* LCP is already OK, try IPCP. */
  1230. switch (sp->ipcp.state) {
  1231. case IPCP_STATE_CLOSED:
  1232. /* No ACK for Configure-Request, retry. */
  1233. sppp_ipcp_open (sp);
  1234. break;
  1235. case IPCP_STATE_ACK_RCVD:
  1236. /* ACK got, but no Configure-Request for peer, retry. */
  1237. sppp_ipcp_open (sp);
  1238. sp->ipcp.state = IPCP_STATE_CLOSED;
  1239. break;
  1240. case IPCP_STATE_ACK_SENT:
  1241. /* ACK sent but no ACK for Configure-Request, retry. */
  1242. sppp_ipcp_open (sp);
  1243. break;
  1244. case IPCP_STATE_OPENED:
  1245. /* IPCP is OK. */
  1246. break;
  1247. }
  1248. break;
  1249. }
  1250. spin_unlock_irqrestore(&sp->lock, flags);
  1251. sppp_flush_xmit();
  1252. }
  1253. static char *sppp_lcp_type_name (u8 type)
  1254. {
  1255. static char buf [8];
  1256. switch (type) {
  1257. case LCP_CONF_REQ: return ("conf-req");
  1258. case LCP_CONF_ACK: return ("conf-ack");
  1259. case LCP_CONF_NAK: return ("conf-nack");
  1260. case LCP_CONF_REJ: return ("conf-rej");
  1261. case LCP_TERM_REQ: return ("term-req");
  1262. case LCP_TERM_ACK: return ("term-ack");
  1263. case LCP_CODE_REJ: return ("code-rej");
  1264. case LCP_PROTO_REJ: return ("proto-rej");
  1265. case LCP_ECHO_REQ: return ("echo-req");
  1266. case LCP_ECHO_REPLY: return ("echo-reply");
  1267. case LCP_DISC_REQ: return ("discard-req");
  1268. }
  1269. sprintf (buf, "%xh", type);
  1270. return (buf);
  1271. }
  1272. static char *sppp_ipcp_type_name (u8 type)
  1273. {
  1274. static char buf [8];
  1275. switch (type) {
  1276. case IPCP_CONF_REQ: return ("conf-req");
  1277. case IPCP_CONF_ACK: return ("conf-ack");
  1278. case IPCP_CONF_NAK: return ("conf-nack");
  1279. case IPCP_CONF_REJ: return ("conf-rej");
  1280. case IPCP_TERM_REQ: return ("term-req");
  1281. case IPCP_TERM_ACK: return ("term-ack");
  1282. case IPCP_CODE_REJ: return ("code-rej");
  1283. }
  1284. sprintf (buf, "%xh", type);
  1285. return (buf);
  1286. }
  1287. static void sppp_print_bytes (u_char *p, u16 len)
  1288. {
  1289. printk (" %x", *p++);
  1290. while (--len > 0)
  1291. printk ("-%x", *p++);
  1292. }
  1293. /**
  1294. * sppp_rcv - receive and process a WAN PPP frame
  1295. * @skb: The buffer to process
  1296. * @dev: The device it arrived on
  1297. * @p: Unused
  1298. * @orig_dev: Unused
  1299. *
  1300. * Protocol glue. This drives the deferred processing mode the poorer
  1301. * cards use. This can be called directly by cards that do not have
  1302. * timing constraints but is normally called from the network layer
  1303. * after interrupt servicing to process frames queued via netif_rx.
  1304. */
  1305. static int sppp_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *p, struct net_device *orig_dev)
  1306. {
  1307. if (dev_net(dev) != &init_net) {
  1308. kfree_skb(skb);
  1309. return 0;
  1310. }
  1311. if ((skb = skb_share_check(skb, GFP_ATOMIC)) == NULL)
  1312. return NET_RX_DROP;
  1313. sppp_input(dev,skb);
  1314. return 0;
  1315. }
  1316. static struct packet_type sppp_packet_type = {
  1317. .type = __constant_htons(ETH_P_WAN_PPP),
  1318. .func = sppp_rcv,
  1319. };
  1320. static char banner[] __initdata =
  1321. KERN_INFO "Cronyx Ltd, Synchronous PPP and CISCO HDLC (c) 1994\n"
  1322. KERN_INFO "Linux port (c) 1998 Building Number Three Ltd & "
  1323. "Jan \"Yenya\" Kasprzak.\n";
  1324. static int __init sync_ppp_init(void)
  1325. {
  1326. if(debug)
  1327. debug=PP_DEBUG;
  1328. printk(banner);
  1329. skb_queue_head_init(&tx_queue);
  1330. dev_add_pack(&sppp_packet_type);
  1331. return 0;
  1332. }
  1333. static void __exit sync_ppp_cleanup(void)
  1334. {
  1335. dev_remove_pack(&sppp_packet_type);
  1336. }
  1337. module_init(sync_ppp_init);
  1338. module_exit(sync_ppp_cleanup);
  1339. module_param(debug, int, 0);
  1340. MODULE_LICENSE("GPL");