2 * Copyright (c) 2012 Smith Micro Software, Inc.
3 * Copyright (c) 2012 Bjørn Mork <bjorn@mork.no>
5 * This driver is based on and reuse most of cdc_ncm, which is
6 * Copyright (C) ST-Ericsson 2010-2012
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * version 2 as published by the Free Software Foundation.
13 #include <linux/module.h>
14 #include <linux/netdevice.h>
15 #include <linux/ethtool.h>
16 #include <linux/if_vlan.h>
18 #include <linux/mii.h>
19 #include <linux/usb.h>
20 #include <linux/usb/cdc.h>
21 #include <linux/usb/usbnet.h>
22 #include <linux/usb/cdc-wdm.h>
23 #include <linux/usb/cdc_ncm.h>
25 #include <net/addrconf.h>
27 /* driver specific data - must match cdc_ncm usage */
28 struct cdc_mbim_state {
29 struct cdc_ncm_ctx *ctx;
31 struct usb_driver *subdriver;
32 struct usb_interface *control;
33 struct usb_interface *data;
36 /* using a counter to merge subdriver requests with our own into a combined state */
37 static int cdc_mbim_manage_power(struct usbnet *dev, int on)
39 struct cdc_mbim_state *info = (void *)&dev->data;
42 dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__, atomic_read(&info->pmcount), on);
44 if ((on && atomic_add_return(1, &info->pmcount) == 1) || (!on && atomic_dec_and_test(&info->pmcount))) {
45 /* need autopm_get/put here to ensure the usbcore sees the new value */
46 rv = usb_autopm_get_interface(dev->intf);
47 dev->intf->needs_remote_wakeup = on;
49 usb_autopm_put_interface(dev->intf);
54 static int cdc_mbim_wdm_manage_power(struct usb_interface *intf, int status)
56 struct usbnet *dev = usb_get_intfdata(intf);
58 /* can be called while disconnecting */
62 return cdc_mbim_manage_power(dev, status);
66 static int cdc_mbim_bind(struct usbnet *dev, struct usb_interface *intf)
68 struct cdc_ncm_ctx *ctx;
69 struct usb_driver *subdriver = ERR_PTR(-ENODEV);
71 u8 data_altsetting = cdc_ncm_select_altsetting(dev, intf);
72 struct cdc_mbim_state *info = (void *)&dev->data;
74 /* Probably NCM, defer for cdc_ncm_bind */
75 if (!cdc_ncm_comm_intf_is_mbim(intf->cur_altsetting))
78 ret = cdc_ncm_bind_common(dev, intf, data_altsetting);
84 /* The MBIM descriptor and the status endpoint are required */
85 if (ctx->mbim_desc && dev->status)
86 subdriver = usb_cdc_wdm_register(ctx->control,
88 le16_to_cpu(ctx->mbim_desc->wMaxControlMessage),
89 cdc_mbim_wdm_manage_power);
90 if (IS_ERR(subdriver)) {
91 ret = PTR_ERR(subdriver);
92 cdc_ncm_unbind(dev, intf);
96 /* can't let usbnet use the interrupt endpoint */
98 info->subdriver = subdriver;
100 /* MBIM cannot do ARP */
101 dev->net->flags |= IFF_NOARP;
103 /* no need to put the VLAN tci in the packet headers */
104 dev->net->features |= NETIF_F_HW_VLAN_CTAG_TX;
109 static void cdc_mbim_unbind(struct usbnet *dev, struct usb_interface *intf)
111 struct cdc_mbim_state *info = (void *)&dev->data;
112 struct cdc_ncm_ctx *ctx = info->ctx;
114 /* disconnect subdriver from control interface */
115 if (info->subdriver && info->subdriver->disconnect)
116 info->subdriver->disconnect(ctx->control);
117 info->subdriver = NULL;
119 /* let NCM unbind clean up both control and data interface */
120 cdc_ncm_unbind(dev, intf);
124 static struct sk_buff *cdc_mbim_tx_fixup(struct usbnet *dev, struct sk_buff *skb, gfp_t flags)
126 struct sk_buff *skb_out;
127 struct cdc_mbim_state *info = (void *)&dev->data;
128 struct cdc_ncm_ctx *ctx = info->ctx;
129 __le32 sign = cpu_to_le32(USB_CDC_MBIM_NDP16_IPS_SIGN);
137 if (skb->len <= ETH_HLEN)
140 /* mapping VLANs to MBIM sessions:
141 * no tag => IPS session <0>
142 * 1 - 255 => IPS session <vlanid>
143 * 256 - 511 => DSS session <vlanid - 256>
144 * 512 - 4095 => unsupported, drop
146 vlan_get_tag(skb, &tci);
148 switch (tci & 0x0f00) {
149 case 0x0000: /* VLAN ID 0 - 255 */
150 /* verify that datagram is IPv4 or IPv6 */
151 skb_reset_mac_header(skb);
152 switch (eth_hdr(skb)->h_proto) {
153 case htons(ETH_P_IP):
154 case htons(ETH_P_IPV6):
162 case 0x0100: /* VLAN ID 256 - 511 */
163 sign = cpu_to_le32(USB_CDC_MBIM_NDP16_DSS_SIGN);
168 netif_err(dev, tx_err, dev->net,
169 "unsupported tci=0x%04x\n", tci);
172 skb_pull(skb, ETH_HLEN);
175 spin_lock_bh(&ctx->mtx);
176 skb_out = cdc_ncm_fill_tx_frame(dev, skb, sign);
177 spin_unlock_bh(&ctx->mtx);
182 dev_kfree_skb_any(skb);
187 /* Some devices are known to send Neigbor Solicitation messages and
188 * require Neigbor Advertisement replies. The IPv6 core will not
189 * respond since IFF_NOARP is set, so we must handle them ourselves.
191 static void do_neigh_solicit(struct usbnet *dev, u8 *buf, u16 tci)
193 struct ipv6hdr *iph = (void *)buf;
194 struct nd_msg *msg = (void *)(iph + 1);
195 struct net_device *netdev;
196 struct inet6_dev *in6_dev;
199 /* we'll only respond to requests from unicast addresses to
200 * our solicited node addresses.
202 if (!ipv6_addr_is_solict_mult(&iph->daddr) ||
203 !(ipv6_addr_type(&iph->saddr) & IPV6_ADDR_UNICAST))
206 /* need to send the NA on the VLAN dev, if any */
209 netdev = __vlan_find_dev_deep(dev->net, htons(ETH_P_8021Q),
221 in6_dev = in6_dev_get(netdev);
224 is_router = !!in6_dev->cnf.forwarding;
225 in6_dev_put(in6_dev);
227 /* ipv6_stub != NULL if in6_dev_get returned an inet6_dev */
228 ipv6_stub->ndisc_send_na(netdev, NULL, &iph->saddr, &msg->target,
229 is_router /* router */,
230 true /* solicited */,
231 false /* override */,
237 static bool is_neigh_solicit(u8 *buf, size_t len)
239 struct ipv6hdr *iph = (void *)buf;
240 struct nd_msg *msg = (void *)(iph + 1);
242 return (len >= sizeof(struct ipv6hdr) + sizeof(struct nd_msg) &&
243 iph->nexthdr == IPPROTO_ICMPV6 &&
244 msg->icmph.icmp6_code == 0 &&
245 msg->icmph.icmp6_type == NDISC_NEIGHBOUR_SOLICITATION);
249 static struct sk_buff *cdc_mbim_process_dgram(struct usbnet *dev, u8 *buf, size_t len, u16 tci)
251 __be16 proto = htons(ETH_P_802_3);
252 struct sk_buff *skb = NULL;
254 if (tci < 256) { /* IPS session? */
255 if (len < sizeof(struct iphdr))
258 switch (*buf & 0xf0) {
260 proto = htons(ETH_P_IP);
263 if (is_neigh_solicit(buf, len))
264 do_neigh_solicit(dev, buf, tci);
265 proto = htons(ETH_P_IPV6);
272 skb = netdev_alloc_skb_ip_align(dev->net, len + ETH_HLEN);
276 /* add an ethernet header */
277 skb_put(skb, ETH_HLEN);
278 skb_reset_mac_header(skb);
279 eth_hdr(skb)->h_proto = proto;
280 memset(eth_hdr(skb)->h_source, 0, ETH_ALEN);
281 memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
284 memcpy(skb_put(skb, len), buf, len);
286 /* map MBIM session to VLAN */
288 vlan_put_tag(skb, htons(ETH_P_8021Q), tci);
293 static int cdc_mbim_rx_fixup(struct usbnet *dev, struct sk_buff *skb_in)
296 struct cdc_mbim_state *info = (void *)&dev->data;
297 struct cdc_ncm_ctx *ctx = info->ctx;
302 struct usb_cdc_ncm_ndp16 *ndp16;
303 struct usb_cdc_ncm_dpe16 *dpe16;
305 int loopcount = 50; /* arbitrary max preventing infinite loop */
309 ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);
314 nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);
318 ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);
320 switch (ndp16->dwSignature & cpu_to_le32(0x00ffffff)) {
321 case cpu_to_le32(USB_CDC_MBIM_NDP16_IPS_SIGN):
322 c = (u8 *)&ndp16->dwSignature;
325 case cpu_to_le32(USB_CDC_MBIM_NDP16_DSS_SIGN):
326 c = (u8 *)&ndp16->dwSignature;
330 netif_dbg(dev, rx_err, dev->net,
331 "unsupported NDP signature <0x%08x>\n",
332 le32_to_cpu(ndp16->dwSignature));
337 dpe16 = ndp16->dpe16;
338 for (x = 0; x < nframes; x++, dpe16++) {
339 offset = le16_to_cpu(dpe16->wDatagramIndex);
340 len = le16_to_cpu(dpe16->wDatagramLength);
344 * All entries after first NULL entry are to be ignored
346 if ((offset == 0) || (len == 0)) {
348 goto err_ndp; /* empty NTB */
352 /* sanity checking */
353 if (((offset + len) > skb_in->len) || (len > ctx->rx_max)) {
354 netif_dbg(dev, rx_err, dev->net,
355 "invalid frame detected (ignored) offset[%u]=%u, length=%u, skb=%p\n",
356 x, offset, len, skb_in);
361 skb = cdc_mbim_process_dgram(dev, skb_in->data + offset, len, tci);
364 usbnet_skb_return(dev, skb);
368 /* are there more NDPs to process? */
369 ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);
370 if (ndpoffset && loopcount--)
378 static int cdc_mbim_suspend(struct usb_interface *intf, pm_message_t message)
381 struct usbnet *dev = usb_get_intfdata(intf);
382 struct cdc_mbim_state *info = (void *)&dev->data;
383 struct cdc_ncm_ctx *ctx = info->ctx;
389 * Both usbnet_suspend() and subdriver->suspend() MUST return 0
390 * in system sleep context, otherwise, the resume callback has
391 * to recover device from previous suspend failure.
393 ret = usbnet_suspend(intf, message);
397 if (intf == ctx->control && info->subdriver && info->subdriver->suspend)
398 ret = info->subdriver->suspend(intf, message);
406 static int cdc_mbim_resume(struct usb_interface *intf)
409 struct usbnet *dev = usb_get_intfdata(intf);
410 struct cdc_mbim_state *info = (void *)&dev->data;
411 struct cdc_ncm_ctx *ctx = info->ctx;
412 bool callsub = (intf == ctx->control && info->subdriver && info->subdriver->resume);
415 ret = info->subdriver->resume(intf);
418 ret = usbnet_resume(intf);
419 if (ret < 0 && callsub)
420 info->subdriver->suspend(intf, PMSG_SUSPEND);
425 static const struct driver_info cdc_mbim_info = {
426 .description = "CDC MBIM",
427 .flags = FLAG_NO_SETINT | FLAG_MULTI_PACKET | FLAG_WWAN,
428 .bind = cdc_mbim_bind,
429 .unbind = cdc_mbim_unbind,
430 .manage_power = cdc_mbim_manage_power,
431 .rx_fixup = cdc_mbim_rx_fixup,
432 .tx_fixup = cdc_mbim_tx_fixup,
435 /* MBIM and NCM devices should not need a ZLP after NTBs with
436 * dwNtbOutMaxSize length. Nevertheless, a number of devices from
437 * different vendor IDs will fail unless we send ZLPs, forcing us
438 * to make this the default.
440 * This default may cause a performance penalty for spec conforming
441 * devices wanting to take advantage of optimizations possible without
442 * ZLPs. A whitelist is added in an attempt to avoid this for devices
443 * known to conform to the MBIM specification.
445 * All known devices supporting NCM compatibility mode are also
446 * conforming to the NCM and MBIM specifications. For this reason, the
447 * NCM subclass entry is also in the ZLP whitelist.
449 static const struct driver_info cdc_mbim_info_zlp = {
450 .description = "CDC MBIM",
451 .flags = FLAG_NO_SETINT | FLAG_MULTI_PACKET | FLAG_WWAN | FLAG_SEND_ZLP,
452 .bind = cdc_mbim_bind,
453 .unbind = cdc_mbim_unbind,
454 .manage_power = cdc_mbim_manage_power,
455 .rx_fixup = cdc_mbim_rx_fixup,
456 .tx_fixup = cdc_mbim_tx_fixup,
459 static const struct usb_device_id mbim_devs[] = {
460 /* This duplicate NCM entry is intentional. MBIM devices can
461 * be disguised as NCM by default, and this is necessary to
462 * allow us to bind the correct driver_info to such devices.
464 * bind() will sort out this for us, selecting the correct
465 * entry and reject the other
467 { USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_NCM, USB_CDC_PROTO_NONE),
468 .driver_info = (unsigned long)&cdc_mbim_info,
470 /* ZLP conformance whitelist: All Ericsson MBIM devices */
471 { USB_VENDOR_AND_INTERFACE_INFO(0x0bdb, USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
472 .driver_info = (unsigned long)&cdc_mbim_info,
475 { USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_MBIM, USB_CDC_PROTO_NONE),
476 .driver_info = (unsigned long)&cdc_mbim_info_zlp,
481 MODULE_DEVICE_TABLE(usb, mbim_devs);
483 static struct usb_driver cdc_mbim_driver = {
485 .id_table = mbim_devs,
486 .probe = usbnet_probe,
487 .disconnect = usbnet_disconnect,
488 .suspend = cdc_mbim_suspend,
489 .resume = cdc_mbim_resume,
490 .reset_resume = cdc_mbim_resume,
491 .supports_autosuspend = 1,
492 .disable_hub_initiated_lpm = 1,
494 module_usb_driver(cdc_mbim_driver);
496 MODULE_AUTHOR("Greg Suarez <gsuarez@smithmicro.com>");
497 MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
498 MODULE_DESCRIPTION("USB CDC MBIM host driver");
499 MODULE_LICENSE("GPL");