netpoll: fix netpoll_send_udp() bugs
[pandora-kernel.git] / net / core / netpoll.c
1 /*
2  * Common framework for low-level network console, dump, and debugger code
3  *
4  * Sep 8 2003  Matt Mackall <mpm@selenic.com>
5  *
6  * based on the netconsole code from:
7  *
8  * Copyright (C) 2001  Ingo Molnar <mingo@redhat.com>
9  * Copyright (C) 2002  Red Hat, Inc.
10  */
11
12 #include <linux/moduleparam.h>
13 #include <linux/netdevice.h>
14 #include <linux/etherdevice.h>
15 #include <linux/string.h>
16 #include <linux/if_arp.h>
17 #include <linux/inetdevice.h>
18 #include <linux/inet.h>
19 #include <linux/interrupt.h>
20 #include <linux/netpoll.h>
21 #include <linux/sched.h>
22 #include <linux/delay.h>
23 #include <linux/rcupdate.h>
24 #include <linux/workqueue.h>
25 #include <linux/slab.h>
26 #include <linux/export.h>
27 #include <net/tcp.h>
28 #include <net/udp.h>
29 #include <asm/unaligned.h>
30 #include <trace/events/napi.h>
31
32 /*
33  * We maintain a small pool of fully-sized skbs, to make sure the
34  * message gets out even in extreme OOM situations.
35  */
36
37 #define MAX_UDP_CHUNK 1460
38 #define MAX_SKBS 32
39
40 static struct sk_buff_head skb_pool;
41
42 static atomic_t trapped;
43
44 #define USEC_PER_POLL   50
45 #define NETPOLL_RX_ENABLED  1
46 #define NETPOLL_RX_DROP     2
47
48 #define MAX_SKB_SIZE \
49                 (MAX_UDP_CHUNK + sizeof(struct udphdr) + \
50                                 sizeof(struct iphdr) + sizeof(struct ethhdr))
51
52 static void zap_completion_queue(void);
53 static void arp_reply(struct sk_buff *skb);
54
55 static unsigned int carrier_timeout = 4;
56 module_param(carrier_timeout, uint, 0644);
57
58 static void queue_process(struct work_struct *work)
59 {
60         struct netpoll_info *npinfo =
61                 container_of(work, struct netpoll_info, tx_work.work);
62         struct sk_buff *skb;
63         unsigned long flags;
64
65         while ((skb = skb_dequeue(&npinfo->txq))) {
66                 struct net_device *dev = skb->dev;
67                 const struct net_device_ops *ops = dev->netdev_ops;
68                 struct netdev_queue *txq;
69
70                 if (!netif_device_present(dev) || !netif_running(dev)) {
71                         __kfree_skb(skb);
72                         continue;
73                 }
74
75                 txq = netdev_get_tx_queue(dev, skb_get_queue_mapping(skb));
76
77                 local_irq_save(flags);
78                 __netif_tx_lock(txq, smp_processor_id());
79                 if (netif_tx_queue_frozen_or_stopped(txq) ||
80                     ops->ndo_start_xmit(skb, dev) != NETDEV_TX_OK) {
81                         skb_queue_head(&npinfo->txq, skb);
82                         __netif_tx_unlock(txq);
83                         local_irq_restore(flags);
84
85                         schedule_delayed_work(&npinfo->tx_work, HZ/10);
86                         return;
87                 }
88                 __netif_tx_unlock(txq);
89                 local_irq_restore(flags);
90         }
91 }
92
93 static __sum16 checksum_udp(struct sk_buff *skb, struct udphdr *uh,
94                             unsigned short ulen, __be32 saddr, __be32 daddr)
95 {
96         __wsum psum;
97
98         if (uh->check == 0 || skb_csum_unnecessary(skb))
99                 return 0;
100
101         psum = csum_tcpudp_nofold(saddr, daddr, ulen, IPPROTO_UDP, 0);
102
103         if (skb->ip_summed == CHECKSUM_COMPLETE &&
104             !csum_fold(csum_add(psum, skb->csum)))
105                 return 0;
106
107         skb->csum = psum;
108
109         return __skb_checksum_complete(skb);
110 }
111
112 /*
113  * Check whether delayed processing was scheduled for our NIC. If so,
114  * we attempt to grab the poll lock and use ->poll() to pump the card.
115  * If this fails, either we've recursed in ->poll() or it's already
116  * running on another CPU.
117  *
118  * Note: we don't mask interrupts with this lock because we're using
119  * trylock here and interrupts are already disabled in the softirq
120  * case. Further, we test the poll_owner to avoid recursion on UP
121  * systems where the lock doesn't exist.
122  *
123  * In cases where there is bi-directional communications, reading only
124  * one message at a time can lead to packets being dropped by the
125  * network adapter, forcing superfluous retries and possibly timeouts.
126  * Thus, we set our budget to greater than 1.
127  */
128 static int poll_one_napi(struct netpoll_info *npinfo,
129                          struct napi_struct *napi, int budget)
130 {
131         int work;
132
133         /* net_rx_action's ->poll() invocations and our's are
134          * synchronized by this test which is only made while
135          * holding the napi->poll_lock.
136          */
137         if (!test_bit(NAPI_STATE_SCHED, &napi->state))
138                 return budget;
139
140         npinfo->rx_flags |= NETPOLL_RX_DROP;
141         atomic_inc(&trapped);
142         set_bit(NAPI_STATE_NPSVC, &napi->state);
143
144         work = napi->poll(napi, budget);
145         trace_napi_poll(napi);
146
147         clear_bit(NAPI_STATE_NPSVC, &napi->state);
148         atomic_dec(&trapped);
149         npinfo->rx_flags &= ~NETPOLL_RX_DROP;
150
151         return budget - work;
152 }
153
154 static void poll_napi(struct net_device *dev)
155 {
156         struct napi_struct *napi;
157         int budget = 16;
158
159         list_for_each_entry(napi, &dev->napi_list, dev_list) {
160                 if (napi->poll_owner != smp_processor_id() &&
161                     spin_trylock(&napi->poll_lock)) {
162                         budget = poll_one_napi(dev->npinfo, napi, budget);
163                         spin_unlock(&napi->poll_lock);
164
165                         if (!budget)
166                                 break;
167                 }
168         }
169 }
170
171 static void service_arp_queue(struct netpoll_info *npi)
172 {
173         if (npi) {
174                 struct sk_buff *skb;
175
176                 while ((skb = skb_dequeue(&npi->arp_tx)))
177                         arp_reply(skb);
178         }
179 }
180
181 static void netpoll_poll_dev(struct net_device *dev)
182 {
183         const struct net_device_ops *ops;
184
185         if (!dev || !netif_running(dev))
186                 return;
187
188         ops = dev->netdev_ops;
189         if (!ops->ndo_poll_controller)
190                 return;
191
192         /* Process pending work on NIC */
193         ops->ndo_poll_controller(dev);
194
195         poll_napi(dev);
196
197         if (dev->flags & IFF_SLAVE) {
198                 if (dev->npinfo) {
199                         struct net_device *bond_dev = dev->master;
200                         struct sk_buff *skb;
201                         while ((skb = skb_dequeue(&dev->npinfo->arp_tx))) {
202                                 skb->dev = bond_dev;
203                                 skb_queue_tail(&bond_dev->npinfo->arp_tx, skb);
204                         }
205                 }
206         }
207
208         service_arp_queue(dev->npinfo);
209
210         zap_completion_queue();
211 }
212
213 static void refill_skbs(void)
214 {
215         struct sk_buff *skb;
216         unsigned long flags;
217
218         spin_lock_irqsave(&skb_pool.lock, flags);
219         while (skb_pool.qlen < MAX_SKBS) {
220                 skb = alloc_skb(MAX_SKB_SIZE, GFP_ATOMIC);
221                 if (!skb)
222                         break;
223
224                 __skb_queue_tail(&skb_pool, skb);
225         }
226         spin_unlock_irqrestore(&skb_pool.lock, flags);
227 }
228
229 static void zap_completion_queue(void)
230 {
231         unsigned long flags;
232         struct softnet_data *sd = &get_cpu_var(softnet_data);
233
234         if (sd->completion_queue) {
235                 struct sk_buff *clist;
236
237                 local_irq_save(flags);
238                 clist = sd->completion_queue;
239                 sd->completion_queue = NULL;
240                 local_irq_restore(flags);
241
242                 while (clist != NULL) {
243                         struct sk_buff *skb = clist;
244                         clist = clist->next;
245                         if (skb->destructor) {
246                                 atomic_inc(&skb->users);
247                                 dev_kfree_skb_any(skb); /* put this one back */
248                         } else {
249                                 __kfree_skb(skb);
250                         }
251                 }
252         }
253
254         put_cpu_var(softnet_data);
255 }
256
257 static struct sk_buff *find_skb(struct netpoll *np, int len, int reserve)
258 {
259         int count = 0;
260         struct sk_buff *skb;
261
262         zap_completion_queue();
263         refill_skbs();
264 repeat:
265
266         skb = alloc_skb(len, GFP_ATOMIC);
267         if (!skb)
268                 skb = skb_dequeue(&skb_pool);
269
270         if (!skb) {
271                 if (++count < 10) {
272                         netpoll_poll_dev(np->dev);
273                         goto repeat;
274                 }
275                 return NULL;
276         }
277
278         atomic_set(&skb->users, 1);
279         skb_reserve(skb, reserve);
280         return skb;
281 }
282
283 static int netpoll_owner_active(struct net_device *dev)
284 {
285         struct napi_struct *napi;
286
287         list_for_each_entry(napi, &dev->napi_list, dev_list) {
288                 if (napi->poll_owner == smp_processor_id())
289                         return 1;
290         }
291         return 0;
292 }
293
294 void netpoll_send_skb_on_dev(struct netpoll *np, struct sk_buff *skb,
295                              struct net_device *dev)
296 {
297         int status = NETDEV_TX_BUSY;
298         unsigned long tries;
299         const struct net_device_ops *ops = dev->netdev_ops;
300         /* It is up to the caller to keep npinfo alive. */
301         struct netpoll_info *npinfo = np->dev->npinfo;
302
303         if (!npinfo || !netif_running(dev) || !netif_device_present(dev)) {
304                 __kfree_skb(skb);
305                 return;
306         }
307
308         /* don't get messages out of order, and no recursion */
309         if (skb_queue_len(&npinfo->txq) == 0 && !netpoll_owner_active(dev)) {
310                 struct netdev_queue *txq;
311                 unsigned long flags;
312
313                 txq = netdev_get_tx_queue(dev, skb_get_queue_mapping(skb));
314
315                 local_irq_save(flags);
316                 /* try until next clock tick */
317                 for (tries = jiffies_to_usecs(1)/USEC_PER_POLL;
318                      tries > 0; --tries) {
319                         if (__netif_tx_trylock(txq)) {
320                                 if (!netif_tx_queue_stopped(txq)) {
321                                         status = ops->ndo_start_xmit(skb, dev);
322                                         if (status == NETDEV_TX_OK)
323                                                 txq_trans_update(txq);
324                                 }
325                                 __netif_tx_unlock(txq);
326
327                                 if (status == NETDEV_TX_OK)
328                                         break;
329
330                         }
331
332                         /* tickle device maybe there is some cleanup */
333                         netpoll_poll_dev(np->dev);
334
335                         udelay(USEC_PER_POLL);
336                 }
337
338                 WARN_ONCE(!irqs_disabled(),
339                         "netpoll_send_skb(): %s enabled interrupts in poll (%pF)\n",
340                         dev->name, ops->ndo_start_xmit);
341
342                 local_irq_restore(flags);
343         }
344
345         if (status != NETDEV_TX_OK) {
346                 skb_queue_tail(&npinfo->txq, skb);
347                 schedule_delayed_work(&npinfo->tx_work,0);
348         }
349 }
350 EXPORT_SYMBOL(netpoll_send_skb_on_dev);
351
352 void netpoll_send_udp(struct netpoll *np, const char *msg, int len)
353 {
354         int total_len, ip_len, udp_len;
355         struct sk_buff *skb;
356         struct udphdr *udph;
357         struct iphdr *iph;
358         struct ethhdr *eth;
359
360         udp_len = len + sizeof(*udph);
361         ip_len = udp_len + sizeof(*iph);
362         total_len = ip_len + LL_RESERVED_SPACE(np->dev);
363
364         skb = find_skb(np, total_len + np->dev->needed_tailroom,
365                        total_len - len);
366         if (!skb)
367                 return;
368
369         skb_copy_to_linear_data(skb, msg, len);
370         skb_put(skb, len);
371
372         skb_push(skb, sizeof(*udph));
373         skb_reset_transport_header(skb);
374         udph = udp_hdr(skb);
375         udph->source = htons(np->local_port);
376         udph->dest = htons(np->remote_port);
377         udph->len = htons(udp_len);
378         udph->check = 0;
379         udph->check = csum_tcpudp_magic(np->local_ip,
380                                         np->remote_ip,
381                                         udp_len, IPPROTO_UDP,
382                                         csum_partial(udph, udp_len, 0));
383         if (udph->check == 0)
384                 udph->check = CSUM_MANGLED_0;
385
386         skb_push(skb, sizeof(*iph));
387         skb_reset_network_header(skb);
388         iph = ip_hdr(skb);
389
390         /* iph->version = 4; iph->ihl = 5; */
391         put_unaligned(0x45, (unsigned char *)iph);
392         iph->tos      = 0;
393         put_unaligned(htons(ip_len), &(iph->tot_len));
394         iph->id       = 0;
395         iph->frag_off = 0;
396         iph->ttl      = 64;
397         iph->protocol = IPPROTO_UDP;
398         iph->check    = 0;
399         put_unaligned(np->local_ip, &(iph->saddr));
400         put_unaligned(np->remote_ip, &(iph->daddr));
401         iph->check    = ip_fast_csum((unsigned char *)iph, iph->ihl);
402
403         eth = (struct ethhdr *) skb_push(skb, ETH_HLEN);
404         skb_reset_mac_header(skb);
405         skb->protocol = eth->h_proto = htons(ETH_P_IP);
406         memcpy(eth->h_source, np->dev->dev_addr, ETH_ALEN);
407         memcpy(eth->h_dest, np->remote_mac, ETH_ALEN);
408
409         skb->dev = np->dev;
410
411         netpoll_send_skb(np, skb);
412 }
413 EXPORT_SYMBOL(netpoll_send_udp);
414
415 static void arp_reply(struct sk_buff *skb)
416 {
417         struct netpoll_info *npinfo = skb->dev->npinfo;
418         struct arphdr *arp;
419         unsigned char *arp_ptr;
420         int size, type = ARPOP_REPLY, ptype = ETH_P_ARP;
421         __be32 sip, tip;
422         unsigned char *sha;
423         struct sk_buff *send_skb;
424         struct netpoll *np, *tmp;
425         unsigned long flags;
426         int hits = 0;
427
428         if (list_empty(&npinfo->rx_np))
429                 return;
430
431         /* Before checking the packet, we do some early
432            inspection whether this is interesting at all */
433         spin_lock_irqsave(&npinfo->rx_lock, flags);
434         list_for_each_entry_safe(np, tmp, &npinfo->rx_np, rx) {
435                 if (np->dev == skb->dev)
436                         hits++;
437         }
438         spin_unlock_irqrestore(&npinfo->rx_lock, flags);
439
440         /* No netpoll struct is using this dev */
441         if (!hits)
442                 return;
443
444         /* No arp on this interface */
445         if (skb->dev->flags & IFF_NOARP)
446                 return;
447
448         if (!pskb_may_pull(skb, arp_hdr_len(skb->dev)))
449                 return;
450
451         skb_reset_network_header(skb);
452         skb_reset_transport_header(skb);
453         arp = arp_hdr(skb);
454
455         if ((arp->ar_hrd != htons(ARPHRD_ETHER) &&
456              arp->ar_hrd != htons(ARPHRD_IEEE802)) ||
457             arp->ar_pro != htons(ETH_P_IP) ||
458             arp->ar_op != htons(ARPOP_REQUEST))
459                 return;
460
461         arp_ptr = (unsigned char *)(arp+1);
462         /* save the location of the src hw addr */
463         sha = arp_ptr;
464         arp_ptr += skb->dev->addr_len;
465         memcpy(&sip, arp_ptr, 4);
466         arp_ptr += 4;
467         /* If we actually cared about dst hw addr,
468            it would get copied here */
469         arp_ptr += skb->dev->addr_len;
470         memcpy(&tip, arp_ptr, 4);
471
472         /* Should we ignore arp? */
473         if (ipv4_is_loopback(tip) || ipv4_is_multicast(tip))
474                 return;
475
476         size = arp_hdr_len(skb->dev);
477
478         spin_lock_irqsave(&npinfo->rx_lock, flags);
479         list_for_each_entry_safe(np, tmp, &npinfo->rx_np, rx) {
480                 if (tip != np->local_ip)
481                         continue;
482
483                 send_skb = find_skb(np, size + LL_ALLOCATED_SPACE(np->dev),
484                                     LL_RESERVED_SPACE(np->dev));
485                 if (!send_skb)
486                         continue;
487
488                 skb_reset_network_header(send_skb);
489                 arp = (struct arphdr *) skb_put(send_skb, size);
490                 send_skb->dev = skb->dev;
491                 send_skb->protocol = htons(ETH_P_ARP);
492
493                 /* Fill the device header for the ARP frame */
494                 if (dev_hard_header(send_skb, skb->dev, ptype,
495                                     sha, np->dev->dev_addr,
496                                     send_skb->len) < 0) {
497                         kfree_skb(send_skb);
498                         continue;
499                 }
500
501                 /*
502                  * Fill out the arp protocol part.
503                  *
504                  * we only support ethernet device type,
505                  * which (according to RFC 1390) should
506                  * always equal 1 (Ethernet).
507                  */
508
509                 arp->ar_hrd = htons(np->dev->type);
510                 arp->ar_pro = htons(ETH_P_IP);
511                 arp->ar_hln = np->dev->addr_len;
512                 arp->ar_pln = 4;
513                 arp->ar_op = htons(type);
514
515                 arp_ptr = (unsigned char *)(arp + 1);
516                 memcpy(arp_ptr, np->dev->dev_addr, np->dev->addr_len);
517                 arp_ptr += np->dev->addr_len;
518                 memcpy(arp_ptr, &tip, 4);
519                 arp_ptr += 4;
520                 memcpy(arp_ptr, sha, np->dev->addr_len);
521                 arp_ptr += np->dev->addr_len;
522                 memcpy(arp_ptr, &sip, 4);
523
524                 netpoll_send_skb(np, send_skb);
525
526                 /* If there are several rx_hooks for the same address,
527                    we're fine by sending a single reply */
528                 break;
529         }
530         spin_unlock_irqrestore(&npinfo->rx_lock, flags);
531 }
532
533 int __netpoll_rx(struct sk_buff *skb)
534 {
535         int proto, len, ulen;
536         int hits = 0;
537         const struct iphdr *iph;
538         struct udphdr *uh;
539         struct netpoll_info *npinfo = skb->dev->npinfo;
540         struct netpoll *np, *tmp;
541
542         if (list_empty(&npinfo->rx_np))
543                 goto out;
544
545         if (skb->dev->type != ARPHRD_ETHER)
546                 goto out;
547
548         /* check if netpoll clients need ARP */
549         if (skb->protocol == htons(ETH_P_ARP) &&
550             atomic_read(&trapped)) {
551                 skb_queue_tail(&npinfo->arp_tx, skb);
552                 return 1;
553         }
554
555         proto = ntohs(eth_hdr(skb)->h_proto);
556         if (proto != ETH_P_IP)
557                 goto out;
558         if (skb->pkt_type == PACKET_OTHERHOST)
559                 goto out;
560         if (skb_shared(skb))
561                 goto out;
562
563         if (!pskb_may_pull(skb, sizeof(struct iphdr)))
564                 goto out;
565         iph = (struct iphdr *)skb->data;
566         if (iph->ihl < 5 || iph->version != 4)
567                 goto out;
568         if (!pskb_may_pull(skb, iph->ihl*4))
569                 goto out;
570         iph = (struct iphdr *)skb->data;
571         if (ip_fast_csum((u8 *)iph, iph->ihl) != 0)
572                 goto out;
573
574         len = ntohs(iph->tot_len);
575         if (skb->len < len || len < iph->ihl*4)
576                 goto out;
577
578         /*
579          * Our transport medium may have padded the buffer out.
580          * Now We trim to the true length of the frame.
581          */
582         if (pskb_trim_rcsum(skb, len))
583                 goto out;
584
585         iph = (struct iphdr *)skb->data;
586         if (iph->protocol != IPPROTO_UDP)
587                 goto out;
588
589         len -= iph->ihl*4;
590         uh = (struct udphdr *)(((char *)iph) + iph->ihl*4);
591         ulen = ntohs(uh->len);
592
593         if (ulen != len)
594                 goto out;
595         if (checksum_udp(skb, uh, ulen, iph->saddr, iph->daddr))
596                 goto out;
597
598         list_for_each_entry_safe(np, tmp, &npinfo->rx_np, rx) {
599                 if (np->local_ip && np->local_ip != iph->daddr)
600                         continue;
601                 if (np->remote_ip && np->remote_ip != iph->saddr)
602                         continue;
603                 if (np->local_port && np->local_port != ntohs(uh->dest))
604                         continue;
605
606                 np->rx_hook(np, ntohs(uh->source),
607                                (char *)(uh+1),
608                                ulen - sizeof(struct udphdr));
609                 hits++;
610         }
611
612         if (!hits)
613                 goto out;
614
615         kfree_skb(skb);
616         return 1;
617
618 out:
619         if (atomic_read(&trapped)) {
620                 kfree_skb(skb);
621                 return 1;
622         }
623
624         return 0;
625 }
626
627 void netpoll_print_options(struct netpoll *np)
628 {
629         printk(KERN_INFO "%s: local port %d\n",
630                          np->name, np->local_port);
631         printk(KERN_INFO "%s: local IP %pI4\n",
632                          np->name, &np->local_ip);
633         printk(KERN_INFO "%s: interface '%s'\n",
634                          np->name, np->dev_name);
635         printk(KERN_INFO "%s: remote port %d\n",
636                          np->name, np->remote_port);
637         printk(KERN_INFO "%s: remote IP %pI4\n",
638                          np->name, &np->remote_ip);
639         printk(KERN_INFO "%s: remote ethernet address %pM\n",
640                          np->name, np->remote_mac);
641 }
642 EXPORT_SYMBOL(netpoll_print_options);
643
644 int netpoll_parse_options(struct netpoll *np, char *opt)
645 {
646         char *cur=opt, *delim;
647
648         if (*cur != '@') {
649                 if ((delim = strchr(cur, '@')) == NULL)
650                         goto parse_failed;
651                 *delim = 0;
652                 np->local_port = simple_strtol(cur, NULL, 10);
653                 cur = delim;
654         }
655         cur++;
656
657         if (*cur != '/') {
658                 if ((delim = strchr(cur, '/')) == NULL)
659                         goto parse_failed;
660                 *delim = 0;
661                 np->local_ip = in_aton(cur);
662                 cur = delim;
663         }
664         cur++;
665
666         if (*cur != ',') {
667                 /* parse out dev name */
668                 if ((delim = strchr(cur, ',')) == NULL)
669                         goto parse_failed;
670                 *delim = 0;
671                 strlcpy(np->dev_name, cur, sizeof(np->dev_name));
672                 cur = delim;
673         }
674         cur++;
675
676         if (*cur != '@') {
677                 /* dst port */
678                 if ((delim = strchr(cur, '@')) == NULL)
679                         goto parse_failed;
680                 *delim = 0;
681                 if (*cur == ' ' || *cur == '\t')
682                         printk(KERN_INFO "%s: warning: whitespace"
683                                         "is not allowed\n", np->name);
684                 np->remote_port = simple_strtol(cur, NULL, 10);
685                 cur = delim;
686         }
687         cur++;
688
689         /* dst ip */
690         if ((delim = strchr(cur, '/')) == NULL)
691                 goto parse_failed;
692         *delim = 0;
693         np->remote_ip = in_aton(cur);
694         cur = delim + 1;
695
696         if (*cur != 0) {
697                 /* MAC address */
698                 if (!mac_pton(cur, np->remote_mac))
699                         goto parse_failed;
700         }
701
702         netpoll_print_options(np);
703
704         return 0;
705
706  parse_failed:
707         printk(KERN_INFO "%s: couldn't parse config at '%s'!\n",
708                np->name, cur);
709         return -1;
710 }
711 EXPORT_SYMBOL(netpoll_parse_options);
712
713 int __netpoll_setup(struct netpoll *np)
714 {
715         struct net_device *ndev = np->dev;
716         struct netpoll_info *npinfo;
717         const struct net_device_ops *ops;
718         unsigned long flags;
719         int err;
720
721         if ((ndev->priv_flags & IFF_DISABLE_NETPOLL) ||
722             !ndev->netdev_ops->ndo_poll_controller) {
723                 printk(KERN_ERR "%s: %s doesn't support polling, aborting.\n",
724                        np->name, np->dev_name);
725                 err = -ENOTSUPP;
726                 goto out;
727         }
728
729         if (!ndev->npinfo) {
730                 npinfo = kmalloc(sizeof(*npinfo), GFP_KERNEL);
731                 if (!npinfo) {
732                         err = -ENOMEM;
733                         goto out;
734                 }
735
736                 npinfo->rx_flags = 0;
737                 INIT_LIST_HEAD(&npinfo->rx_np);
738
739                 spin_lock_init(&npinfo->rx_lock);
740                 skb_queue_head_init(&npinfo->arp_tx);
741                 skb_queue_head_init(&npinfo->txq);
742                 INIT_DELAYED_WORK(&npinfo->tx_work, queue_process);
743
744                 atomic_set(&npinfo->refcnt, 1);
745
746                 ops = np->dev->netdev_ops;
747                 if (ops->ndo_netpoll_setup) {
748                         err = ops->ndo_netpoll_setup(ndev, npinfo);
749                         if (err)
750                                 goto free_npinfo;
751                 }
752         } else {
753                 npinfo = ndev->npinfo;
754                 atomic_inc(&npinfo->refcnt);
755         }
756
757         npinfo->netpoll = np;
758
759         if (np->rx_hook) {
760                 spin_lock_irqsave(&npinfo->rx_lock, flags);
761                 npinfo->rx_flags |= NETPOLL_RX_ENABLED;
762                 list_add_tail(&np->rx, &npinfo->rx_np);
763                 spin_unlock_irqrestore(&npinfo->rx_lock, flags);
764         }
765
766         /* last thing to do is link it to the net device structure */
767         rcu_assign_pointer(ndev->npinfo, npinfo);
768
769         return 0;
770
771 free_npinfo:
772         kfree(npinfo);
773 out:
774         return err;
775 }
776 EXPORT_SYMBOL_GPL(__netpoll_setup);
777
778 int netpoll_setup(struct netpoll *np)
779 {
780         struct net_device *ndev = NULL;
781         struct in_device *in_dev;
782         int err;
783
784         if (np->dev_name)
785                 ndev = dev_get_by_name(&init_net, np->dev_name);
786         if (!ndev) {
787                 printk(KERN_ERR "%s: %s doesn't exist, aborting.\n",
788                        np->name, np->dev_name);
789                 return -ENODEV;
790         }
791
792         if (ndev->master) {
793                 printk(KERN_ERR "%s: %s is a slave device, aborting.\n",
794                        np->name, np->dev_name);
795                 err = -EBUSY;
796                 goto put;
797         }
798
799         if (!netif_running(ndev)) {
800                 unsigned long atmost, atleast;
801
802                 printk(KERN_INFO "%s: device %s not up yet, forcing it\n",
803                        np->name, np->dev_name);
804
805                 rtnl_lock();
806                 err = dev_open(ndev);
807                 rtnl_unlock();
808
809                 if (err) {
810                         printk(KERN_ERR "%s: failed to open %s\n",
811                                np->name, ndev->name);
812                         goto put;
813                 }
814
815                 atleast = jiffies + HZ/10;
816                 atmost = jiffies + carrier_timeout * HZ;
817                 while (!netif_carrier_ok(ndev)) {
818                         if (time_after(jiffies, atmost)) {
819                                 printk(KERN_NOTICE
820                                        "%s: timeout waiting for carrier\n",
821                                        np->name);
822                                 break;
823                         }
824                         msleep(1);
825                 }
826
827                 /* If carrier appears to come up instantly, we don't
828                  * trust it and pause so that we don't pump all our
829                  * queued console messages into the bitbucket.
830                  */
831
832                 if (time_before(jiffies, atleast)) {
833                         printk(KERN_NOTICE "%s: carrier detect appears"
834                                " untrustworthy, waiting 4 seconds\n",
835                                np->name);
836                         msleep(4000);
837                 }
838         }
839
840         if (!np->local_ip) {
841                 rcu_read_lock();
842                 in_dev = __in_dev_get_rcu(ndev);
843
844                 if (!in_dev || !in_dev->ifa_list) {
845                         rcu_read_unlock();
846                         printk(KERN_ERR "%s: no IP address for %s, aborting\n",
847                                np->name, np->dev_name);
848                         err = -EDESTADDRREQ;
849                         goto put;
850                 }
851
852                 np->local_ip = in_dev->ifa_list->ifa_local;
853                 rcu_read_unlock();
854                 printk(KERN_INFO "%s: local IP %pI4\n", np->name, &np->local_ip);
855         }
856
857         np->dev = ndev;
858
859         /* fill up the skb queue */
860         refill_skbs();
861
862         rtnl_lock();
863         err = __netpoll_setup(np);
864         rtnl_unlock();
865
866         if (err)
867                 goto put;
868
869         return 0;
870
871 put:
872         dev_put(ndev);
873         return err;
874 }
875 EXPORT_SYMBOL(netpoll_setup);
876
877 static int __init netpoll_init(void)
878 {
879         skb_queue_head_init(&skb_pool);
880         return 0;
881 }
882 core_initcall(netpoll_init);
883
884 void __netpoll_cleanup(struct netpoll *np)
885 {
886         struct netpoll_info *npinfo;
887         unsigned long flags;
888
889         npinfo = np->dev->npinfo;
890         if (!npinfo)
891                 return;
892
893         if (!list_empty(&npinfo->rx_np)) {
894                 spin_lock_irqsave(&npinfo->rx_lock, flags);
895                 list_del(&np->rx);
896                 if (list_empty(&npinfo->rx_np))
897                         npinfo->rx_flags &= ~NETPOLL_RX_ENABLED;
898                 spin_unlock_irqrestore(&npinfo->rx_lock, flags);
899         }
900
901         if (atomic_dec_and_test(&npinfo->refcnt)) {
902                 const struct net_device_ops *ops;
903
904                 ops = np->dev->netdev_ops;
905                 if (ops->ndo_netpoll_cleanup)
906                         ops->ndo_netpoll_cleanup(np->dev);
907
908                 RCU_INIT_POINTER(np->dev->npinfo, NULL);
909
910                 /* avoid racing with NAPI reading npinfo */
911                 synchronize_rcu_bh();
912
913                 skb_queue_purge(&npinfo->arp_tx);
914                 skb_queue_purge(&npinfo->txq);
915                 cancel_delayed_work_sync(&npinfo->tx_work);
916
917                 /* clean after last, unfinished work */
918                 __skb_queue_purge(&npinfo->txq);
919                 kfree(npinfo);
920         }
921 }
922 EXPORT_SYMBOL_GPL(__netpoll_cleanup);
923
924 void netpoll_cleanup(struct netpoll *np)
925 {
926         if (!np->dev)
927                 return;
928
929         rtnl_lock();
930         __netpoll_cleanup(np);
931         rtnl_unlock();
932
933         dev_put(np->dev);
934         np->dev = NULL;
935 }
936 EXPORT_SYMBOL(netpoll_cleanup);
937
938 int netpoll_trap(void)
939 {
940         return atomic_read(&trapped);
941 }
942 EXPORT_SYMBOL(netpoll_trap);
943
944 void netpoll_set_trap(int trap)
945 {
946         if (trap)
947                 atomic_inc(&trapped);
948         else
949                 atomic_dec(&trapped);
950 }
951 EXPORT_SYMBOL(netpoll_set_trap);