syncppp.c 39 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484
  1. /*
  2. * NET3: A (fairly minimal) implementation of synchronous PPP for Linux
  3. * as well as a CISCO HDLC implementation. See the copyright
  4. * message below for the original source.
  5. *
  6. * This program is free software; you can redistribute it and/or
  7. * modify it under the terms of the GNU General Public License
  8. * as published by the Free Software Foundation; either version
  9. * 2 of the license, or (at your option) any later version.
  10. *
  11. * Note however. This code is also used in a different form by FreeBSD.
  12. * Therefore when making any non OS specific change please consider
  13. * contributing it back to the original author under the terms
  14. * below in addition.
  15. * -- Alan
  16. *
  17. * Port for Linux-2.1 by Jan "Yenya" Kasprzak <kas@fi.muni.cz>
  18. */
  19. /*
  20. * Synchronous PPP/Cisco link level subroutines.
  21. * Keepalive protocol implemented in both Cisco and PPP modes.
  22. *
  23. * Copyright (C) 1994 Cronyx Ltd.
  24. * Author: Serge Vakulenko, <vak@zebub.msk.su>
  25. *
  26. * This software is distributed with NO WARRANTIES, not even the implied
  27. * warranties for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
  28. *
  29. * Authors grant any other persons or organisations permission to use
  30. * or modify this software as long as this message is kept with the software,
  31. * all derivative works or modified versions.
  32. *
  33. * Version 1.9, Wed Oct 4 18:58:15 MSK 1995
  34. *
  35. * $Id: syncppp.c,v 1.18 2000/04/11 05:25:31 asj Exp $
  36. */
  37. #undef DEBUG
  38. #include <linux/module.h>
  39. #include <linux/kernel.h>
  40. #include <linux/errno.h>
  41. #include <linux/init.h>
  42. #include <linux/if_arp.h>
  43. #include <linux/skbuff.h>
  44. #include <linux/route.h>
  45. #include <linux/netdevice.h>
  46. #include <linux/inetdevice.h>
  47. #include <linux/random.h>
  48. #include <linux/pkt_sched.h>
  49. #include <linux/spinlock.h>
  50. #include <linux/rcupdate.h>
  51. #include <net/syncppp.h>
  52. #include <asm/byteorder.h>
  53. #include <asm/uaccess.h>
  54. #define MAXALIVECNT 6 /* max. alive packets */
  55. #define PPP_ALLSTATIONS 0xff /* All-Stations broadcast address */
  56. #define PPP_UI 0x03 /* Unnumbered Information */
  57. #define PPP_IP 0x0021 /* Internet Protocol */
  58. #define PPP_ISO 0x0023 /* ISO OSI Protocol */
  59. #define PPP_XNS 0x0025 /* Xerox NS Protocol */
  60. #define PPP_IPX 0x002b /* Novell IPX Protocol */
  61. #define PPP_LCP 0xc021 /* Link Control Protocol */
  62. #define PPP_IPCP 0x8021 /* Internet Protocol Control Protocol */
  63. #define LCP_CONF_REQ 1 /* PPP LCP configure request */
  64. #define LCP_CONF_ACK 2 /* PPP LCP configure acknowledge */
  65. #define LCP_CONF_NAK 3 /* PPP LCP configure negative ack */
  66. #define LCP_CONF_REJ 4 /* PPP LCP configure reject */
  67. #define LCP_TERM_REQ 5 /* PPP LCP terminate request */
  68. #define LCP_TERM_ACK 6 /* PPP LCP terminate acknowledge */
  69. #define LCP_CODE_REJ 7 /* PPP LCP code reject */
  70. #define LCP_PROTO_REJ 8 /* PPP LCP protocol reject */
  71. #define LCP_ECHO_REQ 9 /* PPP LCP echo request */
  72. #define LCP_ECHO_REPLY 10 /* PPP LCP echo reply */
  73. #define LCP_DISC_REQ 11 /* PPP LCP discard request */
  74. #define LCP_OPT_MRU 1 /* maximum receive unit */
  75. #define LCP_OPT_ASYNC_MAP 2 /* async control character map */
  76. #define LCP_OPT_AUTH_PROTO 3 /* authentication protocol */
  77. #define LCP_OPT_QUAL_PROTO 4 /* quality protocol */
  78. #define LCP_OPT_MAGIC 5 /* magic number */
  79. #define LCP_OPT_RESERVED 6 /* reserved */
  80. #define LCP_OPT_PROTO_COMP 7 /* protocol field compression */
  81. #define LCP_OPT_ADDR_COMP 8 /* address/control field compression */
  82. #define IPCP_CONF_REQ LCP_CONF_REQ /* PPP IPCP configure request */
  83. #define IPCP_CONF_ACK LCP_CONF_ACK /* PPP IPCP configure acknowledge */
  84. #define IPCP_CONF_NAK LCP_CONF_NAK /* PPP IPCP configure negative ack */
  85. #define IPCP_CONF_REJ LCP_CONF_REJ /* PPP IPCP configure reject */
  86. #define IPCP_TERM_REQ LCP_TERM_REQ /* PPP IPCP terminate request */
  87. #define IPCP_TERM_ACK LCP_TERM_ACK /* PPP IPCP terminate acknowledge */
  88. #define IPCP_CODE_REJ LCP_CODE_REJ /* PPP IPCP code reject */
  89. #define CISCO_MULTICAST 0x8f /* Cisco multicast address */
  90. #define CISCO_UNICAST 0x0f /* Cisco unicast address */
  91. #define CISCO_KEEPALIVE 0x8035 /* Cisco keepalive protocol */
  92. #define CISCO_ADDR_REQ 0 /* Cisco address request */
  93. #define CISCO_ADDR_REPLY 1 /* Cisco address reply */
  94. #define CISCO_KEEPALIVE_REQ 2 /* Cisco keepalive request */
  95. struct ppp_header {
  96. u8 address;
  97. u8 control;
  98. u16 protocol;
  99. };
  100. #define PPP_HEADER_LEN sizeof (struct ppp_header)
  101. struct lcp_header {
  102. u8 type;
  103. u8 ident;
  104. u16 len;
  105. };
  106. #define LCP_HEADER_LEN sizeof (struct lcp_header)
  107. struct cisco_packet {
  108. u32 type;
  109. u32 par1;
  110. u32 par2;
  111. u16 rel;
  112. u16 time0;
  113. u16 time1;
  114. };
  115. #define CISCO_PACKET_LEN 18
  116. #define CISCO_BIG_PACKET_LEN 20
  117. static struct sppp *spppq;
  118. static struct timer_list sppp_keepalive_timer;
  119. static DEFINE_SPINLOCK(spppq_lock);
  120. /* global xmit queue for sending packets while spinlock is held */
  121. static struct sk_buff_head tx_queue;
  122. static void sppp_keepalive (unsigned long dummy);
  123. static void sppp_cp_send (struct sppp *sp, u16 proto, u8 type,
  124. u8 ident, u16 len, void *data);
  125. static void sppp_cisco_send (struct sppp *sp, int type, long par1, long par2);
  126. static void sppp_lcp_input (struct sppp *sp, struct sk_buff *m);
  127. static void sppp_cisco_input (struct sppp *sp, struct sk_buff *m);
  128. static void sppp_ipcp_input (struct sppp *sp, struct sk_buff *m);
  129. static void sppp_lcp_open (struct sppp *sp);
  130. static void sppp_ipcp_open (struct sppp *sp);
  131. static int sppp_lcp_conf_parse_options (struct sppp *sp, struct lcp_header *h,
  132. int len, u32 *magic);
  133. static void sppp_cp_timeout (unsigned long arg);
  134. static char *sppp_lcp_type_name (u8 type);
  135. static char *sppp_ipcp_type_name (u8 type);
  136. static void sppp_print_bytes (u8 *p, u16 len);
  137. static int debug;
  138. /* Flush global outgoing packet queue to dev_queue_xmit().
  139. *
  140. * dev_queue_xmit() must be called with interrupts enabled
  141. * which means it can't be called with spinlocks held.
  142. * If a packet needs to be sent while a spinlock is held,
  143. * then put the packet into tx_queue, and call sppp_flush_xmit()
  144. * after spinlock is released.
  145. */
  146. static void sppp_flush_xmit(void)
  147. {
  148. struct sk_buff *skb;
  149. while ((skb = skb_dequeue(&tx_queue)) != NULL)
  150. dev_queue_xmit(skb);
  151. }
  152. /*
  153. * Interface down stub
  154. */
  155. static void if_down(struct net_device *dev)
  156. {
  157. struct sppp *sp = (struct sppp *)sppp_of(dev);
  158. sp->pp_link_state=SPPP_LINK_DOWN;
  159. }
  160. /*
  161. * Timeout routine activations.
  162. */
  163. static void sppp_set_timeout(struct sppp *p,int s)
  164. {
  165. if (! (p->pp_flags & PP_TIMO))
  166. {
  167. init_timer(&p->pp_timer);
  168. p->pp_timer.function=sppp_cp_timeout;
  169. p->pp_timer.expires=jiffies+s*HZ;
  170. p->pp_timer.data=(unsigned long)p;
  171. p->pp_flags |= PP_TIMO;
  172. add_timer(&p->pp_timer);
  173. }
  174. }
  175. static void sppp_clear_timeout(struct sppp *p)
  176. {
  177. if (p->pp_flags & PP_TIMO)
  178. {
  179. del_timer(&p->pp_timer);
  180. p->pp_flags &= ~PP_TIMO;
  181. }
  182. }
  183. /**
  184. * sppp_input - receive and process a WAN PPP frame
  185. * @skb: The buffer to process
  186. * @dev: The device it arrived on
  187. *
  188. * This can be called directly by cards that do not have
  189. * timing constraints but is normally called from the network layer
  190. * after interrupt servicing to process frames queued via netif_rx().
  191. *
  192. * We process the options in the card. If the frame is destined for
  193. * the protocol stacks then it requeues the frame for the upper level
  194. * protocol. If it is a control from it is processed and discarded
  195. * here.
  196. */
  197. static void sppp_input (struct net_device *dev, struct sk_buff *skb)
  198. {
  199. struct ppp_header *h;
  200. struct sppp *sp = (struct sppp *)sppp_of(dev);
  201. unsigned long flags;
  202. skb->dev=dev;
  203. skb_reset_mac_header(skb);
  204. if (dev->flags & IFF_RUNNING)
  205. {
  206. /* Count received bytes, add FCS and one flag */
  207. sp->ibytes+= skb->len + 3;
  208. sp->ipkts++;
  209. }
  210. if (!pskb_may_pull(skb, PPP_HEADER_LEN)) {
  211. /* Too small packet, drop it. */
  212. if (sp->pp_flags & PP_DEBUG)
  213. printk (KERN_DEBUG "%s: input packet is too small, %d bytes\n",
  214. dev->name, skb->len);
  215. kfree_skb(skb);
  216. return;
  217. }
  218. /* Get PPP header. */
  219. h = (struct ppp_header *)skb->data;
  220. skb_pull(skb,sizeof(struct ppp_header));
  221. spin_lock_irqsave(&sp->lock, flags);
  222. switch (h->address) {
  223. default: /* Invalid PPP packet. */
  224. goto invalid;
  225. case PPP_ALLSTATIONS:
  226. if (h->control != PPP_UI)
  227. goto invalid;
  228. if (sp->pp_flags & PP_CISCO) {
  229. if (sp->pp_flags & PP_DEBUG)
  230. printk (KERN_WARNING "%s: PPP packet in Cisco mode <0x%x 0x%x 0x%x>\n",
  231. dev->name,
  232. h->address, h->control, ntohs (h->protocol));
  233. goto drop;
  234. }
  235. switch (ntohs (h->protocol)) {
  236. default:
  237. if (sp->lcp.state == LCP_STATE_OPENED)
  238. sppp_cp_send (sp, PPP_LCP, LCP_PROTO_REJ,
  239. ++sp->pp_seq, skb->len + 2,
  240. &h->protocol);
  241. if (sp->pp_flags & PP_DEBUG)
  242. printk (KERN_WARNING "%s: invalid input protocol <0x%x 0x%x 0x%x>\n",
  243. dev->name,
  244. h->address, h->control, ntohs (h->protocol));
  245. goto drop;
  246. case PPP_LCP:
  247. sppp_lcp_input (sp, skb);
  248. goto drop;
  249. case PPP_IPCP:
  250. if (sp->lcp.state == LCP_STATE_OPENED)
  251. sppp_ipcp_input (sp, skb);
  252. else
  253. printk(KERN_DEBUG "IPCP when still waiting LCP finish.\n");
  254. goto drop;
  255. case PPP_IP:
  256. if (sp->ipcp.state == IPCP_STATE_OPENED) {
  257. if(sp->pp_flags&PP_DEBUG)
  258. printk(KERN_DEBUG "Yow an IP frame.\n");
  259. skb->protocol=htons(ETH_P_IP);
  260. netif_rx(skb);
  261. dev->last_rx = jiffies;
  262. goto done;
  263. }
  264. break;
  265. #ifdef IPX
  266. case PPP_IPX:
  267. /* IPX IPXCP not implemented yet */
  268. if (sp->lcp.state == LCP_STATE_OPENED) {
  269. skb->protocol=htons(ETH_P_IPX);
  270. netif_rx(skb);
  271. dev->last_rx = jiffies;
  272. goto done;
  273. }
  274. break;
  275. #endif
  276. }
  277. break;
  278. case CISCO_MULTICAST:
  279. case CISCO_UNICAST:
  280. /* Don't check the control field here (RFC 1547). */
  281. if (! (sp->pp_flags & PP_CISCO)) {
  282. if (sp->pp_flags & PP_DEBUG)
  283. printk (KERN_WARNING "%s: Cisco packet in PPP mode <0x%x 0x%x 0x%x>\n",
  284. dev->name,
  285. h->address, h->control, ntohs (h->protocol));
  286. goto drop;
  287. }
  288. switch (ntohs (h->protocol)) {
  289. default:
  290. goto invalid;
  291. case CISCO_KEEPALIVE:
  292. sppp_cisco_input (sp, skb);
  293. goto drop;
  294. #ifdef CONFIG_INET
  295. case ETH_P_IP:
  296. skb->protocol=htons(ETH_P_IP);
  297. netif_rx(skb);
  298. dev->last_rx = jiffies;
  299. goto done;
  300. #endif
  301. #ifdef CONFIG_IPX
  302. case ETH_P_IPX:
  303. skb->protocol=htons(ETH_P_IPX);
  304. netif_rx(skb);
  305. dev->last_rx = jiffies;
  306. goto done;
  307. #endif
  308. }
  309. break;
  310. }
  311. goto drop;
  312. invalid:
  313. if (sp->pp_flags & PP_DEBUG)
  314. printk (KERN_WARNING "%s: invalid input packet <0x%x 0x%x 0x%x>\n",
  315. dev->name, h->address, h->control, ntohs (h->protocol));
  316. drop:
  317. kfree_skb(skb);
  318. done:
  319. spin_unlock_irqrestore(&sp->lock, flags);
  320. sppp_flush_xmit();
  321. return;
  322. }
  323. /*
  324. * Handle transmit packets.
  325. */
  326. static int sppp_hard_header(struct sk_buff *skb, struct net_device *dev, __u16 type,
  327. void *daddr, void *saddr, unsigned int len)
  328. {
  329. struct sppp *sp = (struct sppp *)sppp_of(dev);
  330. struct ppp_header *h;
  331. skb_push(skb,sizeof(struct ppp_header));
  332. h=(struct ppp_header *)skb->data;
  333. if(sp->pp_flags&PP_CISCO)
  334. {
  335. h->address = CISCO_UNICAST;
  336. h->control = 0;
  337. }
  338. else
  339. {
  340. h->address = PPP_ALLSTATIONS;
  341. h->control = PPP_UI;
  342. }
  343. if(sp->pp_flags & PP_CISCO)
  344. {
  345. h->protocol = htons(type);
  346. }
  347. else switch(type)
  348. {
  349. case ETH_P_IP:
  350. h->protocol = htons(PPP_IP);
  351. break;
  352. case ETH_P_IPX:
  353. h->protocol = htons(PPP_IPX);
  354. break;
  355. }
  356. return sizeof(struct ppp_header);
  357. }
  358. static int sppp_rebuild_header(struct sk_buff *skb)
  359. {
  360. return 0;
  361. }
  362. /*
  363. * Send keepalive packets, every 10 seconds.
  364. */
  365. static void sppp_keepalive (unsigned long dummy)
  366. {
  367. struct sppp *sp;
  368. unsigned long flags;
  369. spin_lock_irqsave(&spppq_lock, flags);
  370. for (sp=spppq; sp; sp=sp->pp_next)
  371. {
  372. struct net_device *dev = sp->pp_if;
  373. /* Keepalive mode disabled or channel down? */
  374. if (! (sp->pp_flags & PP_KEEPALIVE) ||
  375. ! (dev->flags & IFF_UP))
  376. continue;
  377. spin_lock(&sp->lock);
  378. /* No keepalive in PPP mode if LCP not opened yet. */
  379. if (! (sp->pp_flags & PP_CISCO) &&
  380. sp->lcp.state != LCP_STATE_OPENED) {
  381. spin_unlock(&sp->lock);
  382. continue;
  383. }
  384. if (sp->pp_alivecnt == MAXALIVECNT) {
  385. /* No keepalive packets got. Stop the interface. */
  386. printk (KERN_WARNING "%s: protocol down\n", dev->name);
  387. if_down (dev);
  388. if (! (sp->pp_flags & PP_CISCO)) {
  389. /* Shut down the PPP link. */
  390. sp->lcp.magic = jiffies;
  391. sp->lcp.state = LCP_STATE_CLOSED;
  392. sp->ipcp.state = IPCP_STATE_CLOSED;
  393. sppp_clear_timeout (sp);
  394. /* Initiate negotiation. */
  395. sppp_lcp_open (sp);
  396. }
  397. }
  398. if (sp->pp_alivecnt <= MAXALIVECNT)
  399. ++sp->pp_alivecnt;
  400. if (sp->pp_flags & PP_CISCO)
  401. sppp_cisco_send (sp, CISCO_KEEPALIVE_REQ, ++sp->pp_seq,
  402. sp->pp_rseq);
  403. else if (sp->lcp.state == LCP_STATE_OPENED) {
  404. long nmagic = htonl (sp->lcp.magic);
  405. sp->lcp.echoid = ++sp->pp_seq;
  406. sppp_cp_send (sp, PPP_LCP, LCP_ECHO_REQ,
  407. sp->lcp.echoid, 4, &nmagic);
  408. }
  409. spin_unlock(&sp->lock);
  410. }
  411. spin_unlock_irqrestore(&spppq_lock, flags);
  412. sppp_flush_xmit();
  413. sppp_keepalive_timer.expires=jiffies+10*HZ;
  414. add_timer(&sppp_keepalive_timer);
  415. }
  416. /*
  417. * Handle incoming PPP Link Control Protocol packets.
  418. */
  419. static void sppp_lcp_input (struct sppp *sp, struct sk_buff *skb)
  420. {
  421. struct lcp_header *h;
  422. struct net_device *dev = sp->pp_if;
  423. int len = skb->len;
  424. u8 *p, opt[6];
  425. u32 rmagic = 0;
  426. if (!pskb_may_pull(skb, sizeof(struct lcp_header))) {
  427. if (sp->pp_flags & PP_DEBUG)
  428. printk (KERN_WARNING "%s: invalid lcp packet length: %d bytes\n",
  429. dev->name, len);
  430. return;
  431. }
  432. h = (struct lcp_header *)skb->data;
  433. skb_pull(skb,sizeof(struct lcp_header *));
  434. if (sp->pp_flags & PP_DEBUG)
  435. {
  436. char state = '?';
  437. switch (sp->lcp.state) {
  438. case LCP_STATE_CLOSED: state = 'C'; break;
  439. case LCP_STATE_ACK_RCVD: state = 'R'; break;
  440. case LCP_STATE_ACK_SENT: state = 'S'; break;
  441. case LCP_STATE_OPENED: state = 'O'; break;
  442. }
  443. printk (KERN_WARNING "%s: lcp input(%c): %d bytes <%s id=%xh len=%xh",
  444. dev->name, state, len,
  445. sppp_lcp_type_name (h->type), h->ident, ntohs (h->len));
  446. if (len > 4)
  447. sppp_print_bytes ((u8*) (h+1), len-4);
  448. printk (">\n");
  449. }
  450. if (len > ntohs (h->len))
  451. len = ntohs (h->len);
  452. switch (h->type) {
  453. default:
  454. /* Unknown packet type -- send Code-Reject packet. */
  455. sppp_cp_send (sp, PPP_LCP, LCP_CODE_REJ, ++sp->pp_seq,
  456. skb->len, h);
  457. break;
  458. case LCP_CONF_REQ:
  459. if (len < 4) {
  460. if (sp->pp_flags & PP_DEBUG)
  461. printk (KERN_DEBUG"%s: invalid lcp configure request packet length: %d bytes\n",
  462. dev->name, len);
  463. break;
  464. }
  465. if (len>4 && !sppp_lcp_conf_parse_options (sp, h, len, &rmagic))
  466. goto badreq;
  467. if (rmagic == sp->lcp.magic) {
  468. /* Local and remote magics equal -- loopback? */
  469. if (sp->pp_loopcnt >= MAXALIVECNT*5) {
  470. printk (KERN_WARNING "%s: loopback\n",
  471. dev->name);
  472. sp->pp_loopcnt = 0;
  473. if (dev->flags & IFF_UP) {
  474. if_down (dev);
  475. }
  476. } else if (sp->pp_flags & PP_DEBUG)
  477. printk (KERN_DEBUG "%s: conf req: magic glitch\n",
  478. dev->name);
  479. ++sp->pp_loopcnt;
  480. /* MUST send Conf-Nack packet. */
  481. rmagic = ~sp->lcp.magic;
  482. opt[0] = LCP_OPT_MAGIC;
  483. opt[1] = sizeof (opt);
  484. opt[2] = rmagic >> 24;
  485. opt[3] = rmagic >> 16;
  486. opt[4] = rmagic >> 8;
  487. opt[5] = rmagic;
  488. sppp_cp_send (sp, PPP_LCP, LCP_CONF_NAK,
  489. h->ident, sizeof (opt), &opt);
  490. badreq:
  491. switch (sp->lcp.state) {
  492. case LCP_STATE_OPENED:
  493. /* Initiate renegotiation. */
  494. sppp_lcp_open (sp);
  495. /* fall through... */
  496. case LCP_STATE_ACK_SENT:
  497. /* Go to closed state. */
  498. sp->lcp.state = LCP_STATE_CLOSED;
  499. sp->ipcp.state = IPCP_STATE_CLOSED;
  500. }
  501. break;
  502. }
  503. /* Send Configure-Ack packet. */
  504. sp->pp_loopcnt = 0;
  505. if (sp->lcp.state != LCP_STATE_OPENED) {
  506. sppp_cp_send (sp, PPP_LCP, LCP_CONF_ACK,
  507. h->ident, len-4, h+1);
  508. }
  509. /* Change the state. */
  510. switch (sp->lcp.state) {
  511. case LCP_STATE_CLOSED:
  512. sp->lcp.state = LCP_STATE_ACK_SENT;
  513. break;
  514. case LCP_STATE_ACK_RCVD:
  515. sp->lcp.state = LCP_STATE_OPENED;
  516. sppp_ipcp_open (sp);
  517. break;
  518. case LCP_STATE_OPENED:
  519. /* Remote magic changed -- close session. */
  520. sp->lcp.state = LCP_STATE_CLOSED;
  521. sp->ipcp.state = IPCP_STATE_CLOSED;
  522. /* Initiate renegotiation. */
  523. sppp_lcp_open (sp);
  524. /* Send ACK after our REQ in attempt to break loop */
  525. sppp_cp_send (sp, PPP_LCP, LCP_CONF_ACK,
  526. h->ident, len-4, h+1);
  527. sp->lcp.state = LCP_STATE_ACK_SENT;
  528. break;
  529. }
  530. break;
  531. case LCP_CONF_ACK:
  532. if (h->ident != sp->lcp.confid)
  533. break;
  534. sppp_clear_timeout (sp);
  535. if ((sp->pp_link_state != SPPP_LINK_UP) &&
  536. (dev->flags & IFF_UP)) {
  537. /* Coming out of loopback mode. */
  538. sp->pp_link_state=SPPP_LINK_UP;
  539. printk (KERN_INFO "%s: protocol up\n", dev->name);
  540. }
  541. switch (sp->lcp.state) {
  542. case LCP_STATE_CLOSED:
  543. sp->lcp.state = LCP_STATE_ACK_RCVD;
  544. sppp_set_timeout (sp, 5);
  545. break;
  546. case LCP_STATE_ACK_SENT:
  547. sp->lcp.state = LCP_STATE_OPENED;
  548. sppp_ipcp_open (sp);
  549. break;
  550. }
  551. break;
  552. case LCP_CONF_NAK:
  553. if (h->ident != sp->lcp.confid)
  554. break;
  555. p = (u8*) (h+1);
  556. if (len>=10 && p[0] == LCP_OPT_MAGIC && p[1] >= 4) {
  557. rmagic = (u32)p[2] << 24 |
  558. (u32)p[3] << 16 | p[4] << 8 | p[5];
  559. if (rmagic == ~sp->lcp.magic) {
  560. int newmagic;
  561. if (sp->pp_flags & PP_DEBUG)
  562. printk (KERN_DEBUG "%s: conf nak: magic glitch\n",
  563. dev->name);
  564. get_random_bytes(&newmagic, sizeof(newmagic));
  565. sp->lcp.magic += newmagic;
  566. } else
  567. sp->lcp.magic = rmagic;
  568. }
  569. if (sp->lcp.state != LCP_STATE_ACK_SENT) {
  570. /* Go to closed state. */
  571. sp->lcp.state = LCP_STATE_CLOSED;
  572. sp->ipcp.state = IPCP_STATE_CLOSED;
  573. }
  574. /* The link will be renegotiated after timeout,
  575. * to avoid endless req-nack loop. */
  576. sppp_clear_timeout (sp);
  577. sppp_set_timeout (sp, 2);
  578. break;
  579. case LCP_CONF_REJ:
  580. if (h->ident != sp->lcp.confid)
  581. break;
  582. sppp_clear_timeout (sp);
  583. /* Initiate renegotiation. */
  584. sppp_lcp_open (sp);
  585. if (sp->lcp.state != LCP_STATE_ACK_SENT) {
  586. /* Go to closed state. */
  587. sp->lcp.state = LCP_STATE_CLOSED;
  588. sp->ipcp.state = IPCP_STATE_CLOSED;
  589. }
  590. break;
  591. case LCP_TERM_REQ:
  592. sppp_clear_timeout (sp);
  593. /* Send Terminate-Ack packet. */
  594. sppp_cp_send (sp, PPP_LCP, LCP_TERM_ACK, h->ident, 0, NULL);
  595. /* Go to closed state. */
  596. sp->lcp.state = LCP_STATE_CLOSED;
  597. sp->ipcp.state = IPCP_STATE_CLOSED;
  598. /* Initiate renegotiation. */
  599. sppp_lcp_open (sp);
  600. break;
  601. case LCP_TERM_ACK:
  602. case LCP_CODE_REJ:
  603. case LCP_PROTO_REJ:
  604. /* Ignore for now. */
  605. break;
  606. case LCP_DISC_REQ:
  607. /* Discard the packet. */
  608. break;
  609. case LCP_ECHO_REQ:
  610. if (sp->lcp.state != LCP_STATE_OPENED)
  611. break;
  612. if (len < 8) {
  613. if (sp->pp_flags & PP_DEBUG)
  614. printk (KERN_WARNING "%s: invalid lcp echo request packet length: %d bytes\n",
  615. dev->name, len);
  616. break;
  617. }
  618. if (ntohl (*(long*)(h+1)) == sp->lcp.magic) {
  619. /* Line loopback mode detected. */
  620. printk (KERN_WARNING "%s: loopback\n", dev->name);
  621. if_down (dev);
  622. /* Shut down the PPP link. */
  623. sp->lcp.state = LCP_STATE_CLOSED;
  624. sp->ipcp.state = IPCP_STATE_CLOSED;
  625. sppp_clear_timeout (sp);
  626. /* Initiate negotiation. */
  627. sppp_lcp_open (sp);
  628. break;
  629. }
  630. *(long*)(h+1) = htonl (sp->lcp.magic);
  631. sppp_cp_send (sp, PPP_LCP, LCP_ECHO_REPLY, h->ident, len-4, h+1);
  632. break;
  633. case LCP_ECHO_REPLY:
  634. if (h->ident != sp->lcp.echoid)
  635. break;
  636. if (len < 8) {
  637. if (sp->pp_flags & PP_DEBUG)
  638. printk (KERN_WARNING "%s: invalid lcp echo reply packet length: %d bytes\n",
  639. dev->name, len);
  640. break;
  641. }
  642. if (ntohl (*(long*)(h+1)) != sp->lcp.magic)
  643. sp->pp_alivecnt = 0;
  644. break;
  645. }
  646. }
  647. /*
  648. * Handle incoming Cisco keepalive protocol packets.
  649. */
  650. static void sppp_cisco_input (struct sppp *sp, struct sk_buff *skb)
  651. {
  652. struct cisco_packet *h;
  653. struct net_device *dev = sp->pp_if;
  654. if (!pskb_may_pull(skb, sizeof(struct cisco_packet))
  655. || (skb->len != CISCO_PACKET_LEN
  656. && skb->len != CISCO_BIG_PACKET_LEN)) {
  657. if (sp->pp_flags & PP_DEBUG)
  658. printk (KERN_WARNING "%s: invalid cisco packet length: %d bytes\n",
  659. dev->name, skb->len);
  660. return;
  661. }
  662. h = (struct cisco_packet *)skb->data;
  663. skb_pull(skb, sizeof(struct cisco_packet*));
  664. if (sp->pp_flags & PP_DEBUG)
  665. printk (KERN_WARNING "%s: cisco input: %d bytes <%xh %xh %xh %xh %xh-%xh>\n",
  666. dev->name, skb->len,
  667. ntohl (h->type), h->par1, h->par2, h->rel,
  668. h->time0, h->time1);
  669. switch (ntohl (h->type)) {
  670. default:
  671. if (sp->pp_flags & PP_DEBUG)
  672. printk (KERN_WARNING "%s: unknown cisco packet type: 0x%x\n",
  673. dev->name, ntohl (h->type));
  674. break;
  675. case CISCO_ADDR_REPLY:
  676. /* Reply on address request, ignore */
  677. break;
  678. case CISCO_KEEPALIVE_REQ:
  679. sp->pp_alivecnt = 0;
  680. sp->pp_rseq = ntohl (h->par1);
  681. if (sp->pp_seq == sp->pp_rseq) {
  682. /* Local and remote sequence numbers are equal.
  683. * Probably, the line is in loopback mode. */
  684. int newseq;
  685. if (sp->pp_loopcnt >= MAXALIVECNT) {
  686. printk (KERN_WARNING "%s: loopback\n",
  687. dev->name);
  688. sp->pp_loopcnt = 0;
  689. if (dev->flags & IFF_UP) {
  690. if_down (dev);
  691. }
  692. }
  693. ++sp->pp_loopcnt;
  694. /* Generate new local sequence number */
  695. get_random_bytes(&newseq, sizeof(newseq));
  696. sp->pp_seq ^= newseq;
  697. break;
  698. }
  699. sp->pp_loopcnt = 0;
  700. if (sp->pp_link_state==SPPP_LINK_DOWN &&
  701. (dev->flags & IFF_UP)) {
  702. sp->pp_link_state=SPPP_LINK_UP;
  703. printk (KERN_INFO "%s: protocol up\n", dev->name);
  704. }
  705. break;
  706. case CISCO_ADDR_REQ:
  707. /* Stolen from net/ipv4/devinet.c -- SIOCGIFADDR ioctl */
  708. {
  709. struct in_device *in_dev;
  710. struct in_ifaddr *ifa;
  711. __be32 addr = 0, mask = ~0; /* FIXME: is the mask correct? */
  712. #ifdef CONFIG_INET
  713. rcu_read_lock();
  714. if ((in_dev = __in_dev_get_rcu(dev)) != NULL)
  715. {
  716. for (ifa=in_dev->ifa_list; ifa != NULL;
  717. ifa=ifa->ifa_next) {
  718. if (strcmp(dev->name, ifa->ifa_label) == 0)
  719. {
  720. addr = ifa->ifa_local;
  721. mask = ifa->ifa_mask;
  722. break;
  723. }
  724. }
  725. }
  726. rcu_read_unlock();
  727. #endif
  728. /* I hope both addr and mask are in the net order */
  729. sppp_cisco_send (sp, CISCO_ADDR_REPLY, addr, mask);
  730. break;
  731. }
  732. }
  733. }
  734. /*
  735. * Send PPP LCP packet.
  736. */
  737. static void sppp_cp_send (struct sppp *sp, u16 proto, u8 type,
  738. u8 ident, u16 len, void *data)
  739. {
  740. struct ppp_header *h;
  741. struct lcp_header *lh;
  742. struct sk_buff *skb;
  743. struct net_device *dev = sp->pp_if;
  744. skb=alloc_skb(dev->hard_header_len+PPP_HEADER_LEN+LCP_HEADER_LEN+len,
  745. GFP_ATOMIC);
  746. if (skb==NULL)
  747. return;
  748. skb_reserve(skb,dev->hard_header_len);
  749. h = (struct ppp_header *)skb_put(skb, sizeof(struct ppp_header));
  750. h->address = PPP_ALLSTATIONS; /* broadcast address */
  751. h->control = PPP_UI; /* Unnumbered Info */
  752. h->protocol = htons (proto); /* Link Control Protocol */
  753. lh = (struct lcp_header *)skb_put(skb, sizeof(struct lcp_header));
  754. lh->type = type;
  755. lh->ident = ident;
  756. lh->len = htons (LCP_HEADER_LEN + len);
  757. if (len)
  758. memcpy(skb_put(skb,len),data, len);
  759. if (sp->pp_flags & PP_DEBUG) {
  760. printk (KERN_WARNING "%s: %s output <%s id=%xh len=%xh",
  761. dev->name,
  762. proto==PPP_LCP ? "lcp" : "ipcp",
  763. proto==PPP_LCP ? sppp_lcp_type_name (lh->type) :
  764. sppp_ipcp_type_name (lh->type), lh->ident,
  765. ntohs (lh->len));
  766. if (len)
  767. sppp_print_bytes ((u8*) (lh+1), len);
  768. printk (">\n");
  769. }
  770. sp->obytes += skb->len;
  771. /* Control is high priority so it doesn't get queued behind data */
  772. skb->priority=TC_PRIO_CONTROL;
  773. skb->dev = dev;
  774. skb_queue_tail(&tx_queue, skb);
  775. }
  776. /*
  777. * Send Cisco keepalive packet.
  778. */
  779. static void sppp_cisco_send (struct sppp *sp, int type, long par1, long par2)
  780. {
  781. struct ppp_header *h;
  782. struct cisco_packet *ch;
  783. struct sk_buff *skb;
  784. struct net_device *dev = sp->pp_if;
  785. u32 t = jiffies * 1000/HZ;
  786. skb=alloc_skb(dev->hard_header_len+PPP_HEADER_LEN+CISCO_PACKET_LEN,
  787. GFP_ATOMIC);
  788. if(skb==NULL)
  789. return;
  790. skb_reserve(skb, dev->hard_header_len);
  791. h = (struct ppp_header *)skb_put (skb, sizeof(struct ppp_header));
  792. h->address = CISCO_MULTICAST;
  793. h->control = 0;
  794. h->protocol = htons (CISCO_KEEPALIVE);
  795. ch = (struct cisco_packet*)skb_put(skb, CISCO_PACKET_LEN);
  796. ch->type = htonl (type);
  797. ch->par1 = htonl (par1);
  798. ch->par2 = htonl (par2);
  799. ch->rel = -1;
  800. ch->time0 = htons ((u16) (t >> 16));
  801. ch->time1 = htons ((u16) t);
  802. if (sp->pp_flags & PP_DEBUG)
  803. printk (KERN_WARNING "%s: cisco output: <%xh %xh %xh %xh %xh-%xh>\n",
  804. dev->name, ntohl (ch->type), ch->par1,
  805. ch->par2, ch->rel, ch->time0, ch->time1);
  806. sp->obytes += skb->len;
  807. skb->priority=TC_PRIO_CONTROL;
  808. skb->dev = dev;
  809. skb_queue_tail(&tx_queue, skb);
  810. }
  811. /**
  812. * sppp_close - close down a synchronous PPP or Cisco HDLC link
  813. * @dev: The network device to drop the link of
  814. *
  815. * This drops the logical interface to the channel. It is not
  816. * done politely as we assume we will also be dropping DTR. Any
  817. * timeouts are killed.
  818. */
  819. int sppp_close (struct net_device *dev)
  820. {
  821. struct sppp *sp = (struct sppp *)sppp_of(dev);
  822. unsigned long flags;
  823. spin_lock_irqsave(&sp->lock, flags);
  824. sp->pp_link_state = SPPP_LINK_DOWN;
  825. sp->lcp.state = LCP_STATE_CLOSED;
  826. sp->ipcp.state = IPCP_STATE_CLOSED;
  827. sppp_clear_timeout (sp);
  828. spin_unlock_irqrestore(&sp->lock, flags);
  829. return 0;
  830. }
  831. EXPORT_SYMBOL(sppp_close);
  832. /**
  833. * sppp_open - open a synchronous PPP or Cisco HDLC link
  834. * @dev: Network device to activate
  835. *
  836. * Close down any existing synchronous session and commence
  837. * from scratch. In the PPP case this means negotiating LCP/IPCP
  838. * and friends, while for Cisco HDLC we simply need to start sending
  839. * keepalives
  840. */
  841. int sppp_open (struct net_device *dev)
  842. {
  843. struct sppp *sp = (struct sppp *)sppp_of(dev);
  844. unsigned long flags;
  845. sppp_close(dev);
  846. spin_lock_irqsave(&sp->lock, flags);
  847. if (!(sp->pp_flags & PP_CISCO)) {
  848. sppp_lcp_open (sp);
  849. }
  850. sp->pp_link_state = SPPP_LINK_DOWN;
  851. spin_unlock_irqrestore(&sp->lock, flags);
  852. sppp_flush_xmit();
  853. return 0;
  854. }
  855. EXPORT_SYMBOL(sppp_open);
  856. /**
  857. * sppp_reopen - notify of physical link loss
  858. * @dev: Device that lost the link
  859. *
  860. * This function informs the synchronous protocol code that
  861. * the underlying link died (for example a carrier drop on X.21)
  862. *
  863. * We increment the magic numbers to ensure that if the other end
  864. * failed to notice we will correctly start a new session. It happens
  865. * do to the nature of telco circuits is that you can lose carrier on
  866. * one endonly.
  867. *
  868. * Having done this we go back to negotiating. This function may
  869. * be called from an interrupt context.
  870. */
  871. int sppp_reopen (struct net_device *dev)
  872. {
  873. struct sppp *sp = (struct sppp *)sppp_of(dev);
  874. unsigned long flags;
  875. sppp_close(dev);
  876. spin_lock_irqsave(&sp->lock, flags);
  877. if (!(sp->pp_flags & PP_CISCO))
  878. {
  879. sp->lcp.magic = jiffies;
  880. ++sp->pp_seq;
  881. sp->lcp.state = LCP_STATE_CLOSED;
  882. sp->ipcp.state = IPCP_STATE_CLOSED;
  883. /* Give it a moment for the line to settle then go */
  884. sppp_set_timeout (sp, 1);
  885. }
  886. sp->pp_link_state=SPPP_LINK_DOWN;
  887. spin_unlock_irqrestore(&sp->lock, flags);
  888. return 0;
  889. }
  890. EXPORT_SYMBOL(sppp_reopen);
  891. /**
  892. * sppp_change_mtu - Change the link MTU
  893. * @dev: Device to change MTU on
  894. * @new_mtu: New MTU
  895. *
  896. * Change the MTU on the link. This can only be called with
  897. * the link down. It returns an error if the link is up or
  898. * the mtu is out of range.
  899. */
  900. static int sppp_change_mtu(struct net_device *dev, int new_mtu)
  901. {
  902. if(new_mtu<128||new_mtu>PPP_MTU||(dev->flags&IFF_UP))
  903. return -EINVAL;
  904. dev->mtu=new_mtu;
  905. return 0;
  906. }
  907. /**
  908. * sppp_do_ioctl - Ioctl handler for ppp/hdlc
  909. * @dev: Device subject to ioctl
  910. * @ifr: Interface request block from the user
  911. * @cmd: Command that is being issued
  912. *
  913. * This function handles the ioctls that may be issued by the user
  914. * to control the settings of a PPP/HDLC link. It does both busy
  915. * and security checks. This function is intended to be wrapped by
  916. * callers who wish to add additional ioctl calls of their own.
  917. */
  918. int sppp_do_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd)
  919. {
  920. struct sppp *sp = (struct sppp *)sppp_of(dev);
  921. if(dev->flags&IFF_UP)
  922. return -EBUSY;
  923. if(!capable(CAP_NET_ADMIN))
  924. return -EPERM;
  925. switch(cmd)
  926. {
  927. case SPPPIOCCISCO:
  928. sp->pp_flags|=PP_CISCO;
  929. dev->type = ARPHRD_HDLC;
  930. break;
  931. case SPPPIOCPPP:
  932. sp->pp_flags&=~PP_CISCO;
  933. dev->type = ARPHRD_PPP;
  934. break;
  935. case SPPPIOCDEBUG:
  936. sp->pp_flags&=~PP_DEBUG;
  937. if(ifr->ifr_flags)
  938. sp->pp_flags|=PP_DEBUG;
  939. break;
  940. case SPPPIOCGFLAGS:
  941. if(copy_to_user(ifr->ifr_data, &sp->pp_flags, sizeof(sp->pp_flags)))
  942. return -EFAULT;
  943. break;
  944. case SPPPIOCSFLAGS:
  945. if(copy_from_user(&sp->pp_flags, ifr->ifr_data, sizeof(sp->pp_flags)))
  946. return -EFAULT;
  947. break;
  948. default:
  949. return -EINVAL;
  950. }
  951. return 0;
  952. }
  953. EXPORT_SYMBOL(sppp_do_ioctl);
  954. /**
  955. * sppp_attach - attach synchronous PPP/HDLC to a device
  956. * @pd: PPP device to initialise
  957. *
  958. * This initialises the PPP/HDLC support on an interface. At the
  959. * time of calling the dev element must point to the network device
  960. * that this interface is attached to. The interface should not yet
  961. * be registered.
  962. */
  963. void sppp_attach(struct ppp_device *pd)
  964. {
  965. struct net_device *dev = pd->dev;
  966. struct sppp *sp = &pd->sppp;
  967. unsigned long flags;
  968. /* Make sure embedding is safe for sppp_of */
  969. BUG_ON(sppp_of(dev) != sp);
  970. spin_lock_irqsave(&spppq_lock, flags);
  971. /* Initialize keepalive handler. */
  972. if (! spppq)
  973. {
  974. init_timer(&sppp_keepalive_timer);
  975. sppp_keepalive_timer.expires=jiffies+10*HZ;
  976. sppp_keepalive_timer.function=sppp_keepalive;
  977. add_timer(&sppp_keepalive_timer);
  978. }
  979. /* Insert new entry into the keepalive list. */
  980. sp->pp_next = spppq;
  981. spppq = sp;
  982. spin_unlock_irqrestore(&spppq_lock, flags);
  983. sp->pp_loopcnt = 0;
  984. sp->pp_alivecnt = 0;
  985. sp->pp_seq = 0;
  986. sp->pp_rseq = 0;
  987. sp->pp_flags = PP_KEEPALIVE|PP_CISCO|debug;/*PP_DEBUG;*/
  988. sp->lcp.magic = 0;
  989. sp->lcp.state = LCP_STATE_CLOSED;
  990. sp->ipcp.state = IPCP_STATE_CLOSED;
  991. sp->pp_if = dev;
  992. spin_lock_init(&sp->lock);
  993. /*
  994. * Device specific setup. All but interrupt handler and
  995. * hard_start_xmit.
  996. */
  997. dev->hard_header = sppp_hard_header;
  998. dev->rebuild_header = sppp_rebuild_header;
  999. dev->tx_queue_len = 10;
  1000. dev->type = ARPHRD_HDLC;
  1001. dev->addr_len = 0;
  1002. dev->hard_header_len = sizeof(struct ppp_header);
  1003. dev->mtu = PPP_MTU;
  1004. /*
  1005. * These 4 are callers but MUST also call sppp_ functions
  1006. */
  1007. dev->do_ioctl = sppp_do_ioctl;
  1008. #if 0
  1009. dev->get_stats = NULL; /* Let the driver override these */
  1010. dev->open = sppp_open;
  1011. dev->stop = sppp_close;
  1012. #endif
  1013. dev->change_mtu = sppp_change_mtu;
  1014. dev->hard_header_cache = NULL;
  1015. dev->header_cache_update = NULL;
  1016. dev->flags = IFF_MULTICAST|IFF_POINTOPOINT|IFF_NOARP;
  1017. }
  1018. EXPORT_SYMBOL(sppp_attach);
  1019. /**
  1020. * sppp_detach - release PPP resources from a device
  1021. * @dev: Network device to release
  1022. *
  1023. * Stop and free up any PPP/HDLC resources used by this
  1024. * interface. This must be called before the device is
  1025. * freed.
  1026. */
  1027. void sppp_detach (struct net_device *dev)
  1028. {
  1029. struct sppp **q, *p, *sp = (struct sppp *)sppp_of(dev);
  1030. unsigned long flags;
  1031. spin_lock_irqsave(&spppq_lock, flags);
  1032. /* Remove the entry from the keepalive list. */
  1033. for (q = &spppq; (p = *q); q = &p->pp_next)
  1034. if (p == sp) {
  1035. *q = p->pp_next;
  1036. break;
  1037. }
  1038. /* Stop keepalive handler. */
  1039. if (! spppq)
  1040. del_timer(&sppp_keepalive_timer);
  1041. sppp_clear_timeout (sp);
  1042. spin_unlock_irqrestore(&spppq_lock, flags);
  1043. }
  1044. EXPORT_SYMBOL(sppp_detach);
  1045. /*
  1046. * Analyze the LCP Configure-Request options list
  1047. * for the presence of unknown options.
  1048. * If the request contains unknown options, build and
  1049. * send Configure-reject packet, containing only unknown options.
  1050. */
  1051. static int
  1052. sppp_lcp_conf_parse_options (struct sppp *sp, struct lcp_header *h,
  1053. int len, u32 *magic)
  1054. {
  1055. u8 *buf, *r, *p;
  1056. int rlen;
  1057. len -= 4;
  1058. buf = r = kmalloc (len, GFP_ATOMIC);
  1059. if (! buf)
  1060. return (0);
  1061. p = (void*) (h+1);
  1062. for (rlen=0; len>1 && p[1]; len-=p[1], p+=p[1]) {
  1063. switch (*p) {
  1064. case LCP_OPT_MAGIC:
  1065. /* Magic number -- extract. */
  1066. if (len >= 6 && p[1] == 6) {
  1067. *magic = (u32)p[2] << 24 |
  1068. (u32)p[3] << 16 | p[4] << 8 | p[5];
  1069. continue;
  1070. }
  1071. break;
  1072. case LCP_OPT_ASYNC_MAP:
  1073. /* Async control character map -- check to be zero. */
  1074. if (len >= 6 && p[1] == 6 && ! p[2] && ! p[3] &&
  1075. ! p[4] && ! p[5])
  1076. continue;
  1077. break;
  1078. case LCP_OPT_MRU:
  1079. /* Maximum receive unit -- always OK. */
  1080. continue;
  1081. default:
  1082. /* Others not supported. */
  1083. break;
  1084. }
  1085. /* Add the option to rejected list. */
  1086. memcpy(r, p, p[1]);
  1087. r += p[1];
  1088. rlen += p[1];
  1089. }
  1090. if (rlen)
  1091. sppp_cp_send (sp, PPP_LCP, LCP_CONF_REJ, h->ident, rlen, buf);
  1092. kfree(buf);
  1093. return (rlen == 0);
  1094. }
  1095. static void sppp_ipcp_input (struct sppp *sp, struct sk_buff *skb)
  1096. {
  1097. struct lcp_header *h;
  1098. struct net_device *dev = sp->pp_if;
  1099. int len = skb->len;
  1100. if (!pskb_may_pull(skb, sizeof(struct lcp_header))) {
  1101. if (sp->pp_flags & PP_DEBUG)
  1102. printk (KERN_WARNING "%s: invalid ipcp packet length: %d bytes\n",
  1103. dev->name, len);
  1104. return;
  1105. }
  1106. h = (struct lcp_header *)skb->data;
  1107. skb_pull(skb,sizeof(struct lcp_header));
  1108. if (sp->pp_flags & PP_DEBUG) {
  1109. printk (KERN_WARNING "%s: ipcp input: %d bytes <%s id=%xh len=%xh",
  1110. dev->name, len,
  1111. sppp_ipcp_type_name (h->type), h->ident, ntohs (h->len));
  1112. if (len > 4)
  1113. sppp_print_bytes ((u8*) (h+1), len-4);
  1114. printk (">\n");
  1115. }
  1116. if (len > ntohs (h->len))
  1117. len = ntohs (h->len);
  1118. switch (h->type) {
  1119. default:
  1120. /* Unknown packet type -- send Code-Reject packet. */
  1121. sppp_cp_send (sp, PPP_IPCP, IPCP_CODE_REJ, ++sp->pp_seq, len, h);
  1122. break;
  1123. case IPCP_CONF_REQ:
  1124. if (len < 4) {
  1125. if (sp->pp_flags & PP_DEBUG)
  1126. printk (KERN_WARNING "%s: invalid ipcp configure request packet length: %d bytes\n",
  1127. dev->name, len);
  1128. return;
  1129. }
  1130. if (len > 4) {
  1131. sppp_cp_send (sp, PPP_IPCP, LCP_CONF_REJ, h->ident,
  1132. len-4, h+1);
  1133. switch (sp->ipcp.state) {
  1134. case IPCP_STATE_OPENED:
  1135. /* Initiate renegotiation. */
  1136. sppp_ipcp_open (sp);
  1137. /* fall through... */
  1138. case IPCP_STATE_ACK_SENT:
  1139. /* Go to closed state. */
  1140. sp->ipcp.state = IPCP_STATE_CLOSED;
  1141. }
  1142. } else {
  1143. /* Send Configure-Ack packet. */
  1144. sppp_cp_send (sp, PPP_IPCP, IPCP_CONF_ACK, h->ident,
  1145. 0, NULL);
  1146. /* Change the state. */
  1147. if (sp->ipcp.state == IPCP_STATE_ACK_RCVD)
  1148. sp->ipcp.state = IPCP_STATE_OPENED;
  1149. else
  1150. sp->ipcp.state = IPCP_STATE_ACK_SENT;
  1151. }
  1152. break;
  1153. case IPCP_CONF_ACK:
  1154. if (h->ident != sp->ipcp.confid)
  1155. break;
  1156. sppp_clear_timeout (sp);
  1157. switch (sp->ipcp.state) {
  1158. case IPCP_STATE_CLOSED:
  1159. sp->ipcp.state = IPCP_STATE_ACK_RCVD;
  1160. sppp_set_timeout (sp, 5);
  1161. break;
  1162. case IPCP_STATE_ACK_SENT:
  1163. sp->ipcp.state = IPCP_STATE_OPENED;
  1164. break;
  1165. }
  1166. break;
  1167. case IPCP_CONF_NAK:
  1168. case IPCP_CONF_REJ:
  1169. if (h->ident != sp->ipcp.confid)
  1170. break;
  1171. sppp_clear_timeout (sp);
  1172. /* Initiate renegotiation. */
  1173. sppp_ipcp_open (sp);
  1174. if (sp->ipcp.state != IPCP_STATE_ACK_SENT)
  1175. /* Go to closed state. */
  1176. sp->ipcp.state = IPCP_STATE_CLOSED;
  1177. break;
  1178. case IPCP_TERM_REQ:
  1179. /* Send Terminate-Ack packet. */
  1180. sppp_cp_send (sp, PPP_IPCP, IPCP_TERM_ACK, h->ident, 0, NULL);
  1181. /* Go to closed state. */
  1182. sp->ipcp.state = IPCP_STATE_CLOSED;
  1183. /* Initiate renegotiation. */
  1184. sppp_ipcp_open (sp);
  1185. break;
  1186. case IPCP_TERM_ACK:
  1187. /* Ignore for now. */
  1188. case IPCP_CODE_REJ:
  1189. /* Ignore for now. */
  1190. break;
  1191. }
  1192. }
  1193. static void sppp_lcp_open (struct sppp *sp)
  1194. {
  1195. char opt[6];
  1196. if (! sp->lcp.magic)
  1197. sp->lcp.magic = jiffies;
  1198. opt[0] = LCP_OPT_MAGIC;
  1199. opt[1] = sizeof (opt);
  1200. opt[2] = sp->lcp.magic >> 24;
  1201. opt[3] = sp->lcp.magic >> 16;
  1202. opt[4] = sp->lcp.magic >> 8;
  1203. opt[5] = sp->lcp.magic;
  1204. sp->lcp.confid = ++sp->pp_seq;
  1205. sppp_cp_send (sp, PPP_LCP, LCP_CONF_REQ, sp->lcp.confid,
  1206. sizeof (opt), &opt);
  1207. sppp_set_timeout (sp, 2);
  1208. }
  1209. static void sppp_ipcp_open (struct sppp *sp)
  1210. {
  1211. sp->ipcp.confid = ++sp->pp_seq;
  1212. sppp_cp_send (sp, PPP_IPCP, IPCP_CONF_REQ, sp->ipcp.confid, 0, NULL);
  1213. sppp_set_timeout (sp, 2);
  1214. }
  1215. /*
  1216. * Process PPP control protocol timeouts.
  1217. */
  1218. static void sppp_cp_timeout (unsigned long arg)
  1219. {
  1220. struct sppp *sp = (struct sppp*) arg;
  1221. unsigned long flags;
  1222. spin_lock_irqsave(&sp->lock, flags);
  1223. sp->pp_flags &= ~PP_TIMO;
  1224. if (! (sp->pp_if->flags & IFF_UP) || (sp->pp_flags & PP_CISCO)) {
  1225. spin_unlock_irqrestore(&sp->lock, flags);
  1226. return;
  1227. }
  1228. switch (sp->lcp.state) {
  1229. case LCP_STATE_CLOSED:
  1230. /* No ACK for Configure-Request, retry. */
  1231. sppp_lcp_open (sp);
  1232. break;
  1233. case LCP_STATE_ACK_RCVD:
  1234. /* ACK got, but no Configure-Request for peer, retry. */
  1235. sppp_lcp_open (sp);
  1236. sp->lcp.state = LCP_STATE_CLOSED;
  1237. break;
  1238. case LCP_STATE_ACK_SENT:
  1239. /* ACK sent but no ACK for Configure-Request, retry. */
  1240. sppp_lcp_open (sp);
  1241. break;
  1242. case LCP_STATE_OPENED:
  1243. /* LCP is already OK, try IPCP. */
  1244. switch (sp->ipcp.state) {
  1245. case IPCP_STATE_CLOSED:
  1246. /* No ACK for Configure-Request, retry. */
  1247. sppp_ipcp_open (sp);
  1248. break;
  1249. case IPCP_STATE_ACK_RCVD:
  1250. /* ACK got, but no Configure-Request for peer, retry. */
  1251. sppp_ipcp_open (sp);
  1252. sp->ipcp.state = IPCP_STATE_CLOSED;
  1253. break;
  1254. case IPCP_STATE_ACK_SENT:
  1255. /* ACK sent but no ACK for Configure-Request, retry. */
  1256. sppp_ipcp_open (sp);
  1257. break;
  1258. case IPCP_STATE_OPENED:
  1259. /* IPCP is OK. */
  1260. break;
  1261. }
  1262. break;
  1263. }
  1264. spin_unlock_irqrestore(&sp->lock, flags);
  1265. sppp_flush_xmit();
  1266. }
  1267. static char *sppp_lcp_type_name (u8 type)
  1268. {
  1269. static char buf [8];
  1270. switch (type) {
  1271. case LCP_CONF_REQ: return ("conf-req");
  1272. case LCP_CONF_ACK: return ("conf-ack");
  1273. case LCP_CONF_NAK: return ("conf-nack");
  1274. case LCP_CONF_REJ: return ("conf-rej");
  1275. case LCP_TERM_REQ: return ("term-req");
  1276. case LCP_TERM_ACK: return ("term-ack");
  1277. case LCP_CODE_REJ: return ("code-rej");
  1278. case LCP_PROTO_REJ: return ("proto-rej");
  1279. case LCP_ECHO_REQ: return ("echo-req");
  1280. case LCP_ECHO_REPLY: return ("echo-reply");
  1281. case LCP_DISC_REQ: return ("discard-req");
  1282. }
  1283. sprintf (buf, "%xh", type);
  1284. return (buf);
  1285. }
  1286. static char *sppp_ipcp_type_name (u8 type)
  1287. {
  1288. static char buf [8];
  1289. switch (type) {
  1290. case IPCP_CONF_REQ: return ("conf-req");
  1291. case IPCP_CONF_ACK: return ("conf-ack");
  1292. case IPCP_CONF_NAK: return ("conf-nack");
  1293. case IPCP_CONF_REJ: return ("conf-rej");
  1294. case IPCP_TERM_REQ: return ("term-req");
  1295. case IPCP_TERM_ACK: return ("term-ack");
  1296. case IPCP_CODE_REJ: return ("code-rej");
  1297. }
  1298. sprintf (buf, "%xh", type);
  1299. return (buf);
  1300. }
  1301. static void sppp_print_bytes (u_char *p, u16 len)
  1302. {
  1303. printk (" %x", *p++);
  1304. while (--len > 0)
  1305. printk ("-%x", *p++);
  1306. }
  1307. /**
  1308. * sppp_rcv - receive and process a WAN PPP frame
  1309. * @skb: The buffer to process
  1310. * @dev: The device it arrived on
  1311. * @p: Unused
  1312. * @orig_dev: Unused
  1313. *
  1314. * Protocol glue. This drives the deferred processing mode the poorer
  1315. * cards use. This can be called directly by cards that do not have
  1316. * timing constraints but is normally called from the network layer
  1317. * after interrupt servicing to process frames queued via netif_rx.
  1318. */
  1319. static int sppp_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *p, struct net_device *orig_dev)
  1320. {
  1321. if ((skb = skb_share_check(skb, GFP_ATOMIC)) == NULL)
  1322. return NET_RX_DROP;
  1323. sppp_input(dev,skb);
  1324. return 0;
  1325. }
  1326. static struct packet_type sppp_packet_type = {
  1327. .type = __constant_htons(ETH_P_WAN_PPP),
  1328. .func = sppp_rcv,
  1329. };
  1330. static char banner[] __initdata =
  1331. KERN_INFO "Cronyx Ltd, Synchronous PPP and CISCO HDLC (c) 1994\n"
  1332. KERN_INFO "Linux port (c) 1998 Building Number Three Ltd & "
  1333. "Jan \"Yenya\" Kasprzak.\n";
  1334. static int __init sync_ppp_init(void)
  1335. {
  1336. if(debug)
  1337. debug=PP_DEBUG;
  1338. printk(banner);
  1339. skb_queue_head_init(&tx_queue);
  1340. dev_add_pack(&sppp_packet_type);
  1341. return 0;
  1342. }
  1343. static void __exit sync_ppp_cleanup(void)
  1344. {
  1345. dev_remove_pack(&sppp_packet_type);
  1346. }
  1347. module_init(sync_ppp_init);
  1348. module_exit(sync_ppp_cleanup);
  1349. module_param(debug, int, 0);
  1350. MODULE_LICENSE("GPL");