IPoIB: Fix possible NULL dereference in ipoib_start_xmit()
[linux-2.6.git] / drivers / infiniband / ulp / ipoib / ipoib_main.c
blobfe89c4660d555fc821b8908c28a92ec208ca3070
1 /*
2 * Copyright (c) 2004 Topspin Communications. All rights reserved.
3 * Copyright (c) 2005 Sun Microsystems, Inc. All rights reserved.
4 * Copyright (c) 2004 Voltaire, Inc. All rights reserved.
6 * This software is available to you under a choice of one of two
7 * licenses. You may choose to be licensed under the terms of the GNU
8 * General Public License (GPL) Version 2, available from the file
9 * COPYING in the main directory of this source tree, or the
10 * OpenIB.org BSD license below:
12 * Redistribution and use in source and binary forms, with or
13 * without modification, are permitted provided that the following
14 * conditions are met:
16 * - Redistributions of source code must retain the above
17 * copyright notice, this list of conditions and the following
18 * disclaimer.
20 * - Redistributions in binary form must reproduce the above
21 * copyright notice, this list of conditions and the following
22 * disclaimer in the documentation and/or other materials
23 * provided with the distribution.
25 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
26 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
27 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
28 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
29 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
30 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
31 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
32 * SOFTWARE.
35 #include "ipoib.h"
37 #include <linux/module.h>
39 #include <linux/init.h>
40 #include <linux/slab.h>
41 #include <linux/kernel.h>
42 #include <linux/vmalloc.h>
44 #include <linux/if_arp.h> /* For ARPHRD_xxx */
46 #include <linux/ip.h>
47 #include <linux/in.h>
49 #include <net/dst.h>
51 MODULE_AUTHOR("Roland Dreier");
52 MODULE_DESCRIPTION("IP-over-InfiniBand net driver");
53 MODULE_LICENSE("Dual BSD/GPL");
55 int ipoib_sendq_size __read_mostly = IPOIB_TX_RING_SIZE;
56 int ipoib_recvq_size __read_mostly = IPOIB_RX_RING_SIZE;
58 module_param_named(send_queue_size, ipoib_sendq_size, int, 0444);
59 MODULE_PARM_DESC(send_queue_size, "Number of descriptors in send queue");
60 module_param_named(recv_queue_size, ipoib_recvq_size, int, 0444);
61 MODULE_PARM_DESC(recv_queue_size, "Number of descriptors in receive queue");
63 #ifdef CONFIG_INFINIBAND_IPOIB_DEBUG
64 int ipoib_debug_level;
66 module_param_named(debug_level, ipoib_debug_level, int, 0644);
67 MODULE_PARM_DESC(debug_level, "Enable debug tracing if > 0");
68 #endif
70 struct ipoib_path_iter {
71 struct net_device *dev;
72 struct ipoib_path path;
75 static const u8 ipv4_bcast_addr[] = {
76 0x00, 0xff, 0xff, 0xff,
77 0xff, 0x12, 0x40, 0x1b, 0x00, 0x00, 0x00, 0x00,
78 0x00, 0x00, 0x00, 0x00, 0xff, 0xff, 0xff, 0xff
81 struct workqueue_struct *ipoib_workqueue;
83 struct ib_sa_client ipoib_sa_client;
85 static void ipoib_add_one(struct ib_device *device);
86 static void ipoib_remove_one(struct ib_device *device);
88 static struct ib_client ipoib_client = {
89 .name = "ipoib",
90 .add = ipoib_add_one,
91 .remove = ipoib_remove_one
94 int ipoib_open(struct net_device *dev)
96 struct ipoib_dev_priv *priv = netdev_priv(dev);
98 ipoib_dbg(priv, "bringing up interface\n");
100 set_bit(IPOIB_FLAG_ADMIN_UP, &priv->flags);
102 if (ipoib_pkey_dev_delay_open(dev))
103 return 0;
105 if (ipoib_ib_dev_open(dev))
106 goto err_disable;
108 if (ipoib_ib_dev_up(dev))
109 goto err_stop;
111 if (!test_bit(IPOIB_FLAG_SUBINTERFACE, &priv->flags)) {
112 struct ipoib_dev_priv *cpriv;
114 /* Bring up any child interfaces too */
115 mutex_lock(&priv->vlan_mutex);
116 list_for_each_entry(cpriv, &priv->child_intfs, list) {
117 int flags;
119 flags = cpriv->dev->flags;
120 if (flags & IFF_UP)
121 continue;
123 dev_change_flags(cpriv->dev, flags | IFF_UP);
125 mutex_unlock(&priv->vlan_mutex);
128 netif_start_queue(dev);
130 return 0;
132 err_stop:
133 ipoib_ib_dev_stop(dev, 1);
135 err_disable:
136 clear_bit(IPOIB_FLAG_ADMIN_UP, &priv->flags);
138 return -EINVAL;
141 static int ipoib_stop(struct net_device *dev)
143 struct ipoib_dev_priv *priv = netdev_priv(dev);
145 ipoib_dbg(priv, "stopping interface\n");
147 clear_bit(IPOIB_FLAG_ADMIN_UP, &priv->flags);
149 netif_stop_queue(dev);
151 ipoib_ib_dev_down(dev, 0);
152 ipoib_ib_dev_stop(dev, 0);
154 if (!test_bit(IPOIB_FLAG_SUBINTERFACE, &priv->flags)) {
155 struct ipoib_dev_priv *cpriv;
157 /* Bring down any child interfaces too */
158 mutex_lock(&priv->vlan_mutex);
159 list_for_each_entry(cpriv, &priv->child_intfs, list) {
160 int flags;
162 flags = cpriv->dev->flags;
163 if (!(flags & IFF_UP))
164 continue;
166 dev_change_flags(cpriv->dev, flags & ~IFF_UP);
168 mutex_unlock(&priv->vlan_mutex);
171 return 0;
174 static u32 ipoib_fix_features(struct net_device *dev, u32 features)
176 struct ipoib_dev_priv *priv = netdev_priv(dev);
178 if (test_bit(IPOIB_FLAG_ADMIN_CM, &priv->flags))
179 features &= ~(NETIF_F_SG | NETIF_F_IP_CSUM | NETIF_F_TSO);
181 return features;
184 static int ipoib_change_mtu(struct net_device *dev, int new_mtu)
186 struct ipoib_dev_priv *priv = netdev_priv(dev);
188 /* dev->mtu > 2K ==> connected mode */
189 if (ipoib_cm_admin_enabled(dev)) {
190 if (new_mtu > ipoib_cm_max_mtu(dev))
191 return -EINVAL;
193 if (new_mtu > priv->mcast_mtu)
194 ipoib_warn(priv, "mtu > %d will cause multicast packet drops.\n",
195 priv->mcast_mtu);
197 dev->mtu = new_mtu;
198 return 0;
201 if (new_mtu > IPOIB_UD_MTU(priv->max_ib_mtu))
202 return -EINVAL;
204 priv->admin_mtu = new_mtu;
206 dev->mtu = min(priv->mcast_mtu, priv->admin_mtu);
208 return 0;
211 static struct ipoib_path *__path_find(struct net_device *dev, void *gid)
213 struct ipoib_dev_priv *priv = netdev_priv(dev);
214 struct rb_node *n = priv->path_tree.rb_node;
215 struct ipoib_path *path;
216 int ret;
218 while (n) {
219 path = rb_entry(n, struct ipoib_path, rb_node);
221 ret = memcmp(gid, path->pathrec.dgid.raw,
222 sizeof (union ib_gid));
224 if (ret < 0)
225 n = n->rb_left;
226 else if (ret > 0)
227 n = n->rb_right;
228 else
229 return path;
232 return NULL;
235 static int __path_add(struct net_device *dev, struct ipoib_path *path)
237 struct ipoib_dev_priv *priv = netdev_priv(dev);
238 struct rb_node **n = &priv->path_tree.rb_node;
239 struct rb_node *pn = NULL;
240 struct ipoib_path *tpath;
241 int ret;
243 while (*n) {
244 pn = *n;
245 tpath = rb_entry(pn, struct ipoib_path, rb_node);
247 ret = memcmp(path->pathrec.dgid.raw, tpath->pathrec.dgid.raw,
248 sizeof (union ib_gid));
249 if (ret < 0)
250 n = &pn->rb_left;
251 else if (ret > 0)
252 n = &pn->rb_right;
253 else
254 return -EEXIST;
257 rb_link_node(&path->rb_node, pn, n);
258 rb_insert_color(&path->rb_node, &priv->path_tree);
260 list_add_tail(&path->list, &priv->path_list);
262 return 0;
265 static void path_free(struct net_device *dev, struct ipoib_path *path)
267 struct ipoib_dev_priv *priv = netdev_priv(dev);
268 struct ipoib_neigh *neigh, *tn;
269 struct sk_buff *skb;
270 unsigned long flags;
272 while ((skb = __skb_dequeue(&path->queue)))
273 dev_kfree_skb_irq(skb);
275 spin_lock_irqsave(&priv->lock, flags);
277 list_for_each_entry_safe(neigh, tn, &path->neigh_list, list) {
279 * It's safe to call ipoib_put_ah() inside priv->lock
280 * here, because we know that path->ah will always
281 * hold one more reference, so ipoib_put_ah() will
282 * never do more than decrement the ref count.
284 if (neigh->ah)
285 ipoib_put_ah(neigh->ah);
287 ipoib_neigh_free(dev, neigh);
290 spin_unlock_irqrestore(&priv->lock, flags);
292 if (path->ah)
293 ipoib_put_ah(path->ah);
295 kfree(path);
298 #ifdef CONFIG_INFINIBAND_IPOIB_DEBUG
300 struct ipoib_path_iter *ipoib_path_iter_init(struct net_device *dev)
302 struct ipoib_path_iter *iter;
304 iter = kmalloc(sizeof *iter, GFP_KERNEL);
305 if (!iter)
306 return NULL;
308 iter->dev = dev;
309 memset(iter->path.pathrec.dgid.raw, 0, 16);
311 if (ipoib_path_iter_next(iter)) {
312 kfree(iter);
313 return NULL;
316 return iter;
319 int ipoib_path_iter_next(struct ipoib_path_iter *iter)
321 struct ipoib_dev_priv *priv = netdev_priv(iter->dev);
322 struct rb_node *n;
323 struct ipoib_path *path;
324 int ret = 1;
326 spin_lock_irq(&priv->lock);
328 n = rb_first(&priv->path_tree);
330 while (n) {
331 path = rb_entry(n, struct ipoib_path, rb_node);
333 if (memcmp(iter->path.pathrec.dgid.raw, path->pathrec.dgid.raw,
334 sizeof (union ib_gid)) < 0) {
335 iter->path = *path;
336 ret = 0;
337 break;
340 n = rb_next(n);
343 spin_unlock_irq(&priv->lock);
345 return ret;
348 void ipoib_path_iter_read(struct ipoib_path_iter *iter,
349 struct ipoib_path *path)
351 *path = iter->path;
354 #endif /* CONFIG_INFINIBAND_IPOIB_DEBUG */
356 void ipoib_mark_paths_invalid(struct net_device *dev)
358 struct ipoib_dev_priv *priv = netdev_priv(dev);
359 struct ipoib_path *path, *tp;
361 spin_lock_irq(&priv->lock);
363 list_for_each_entry_safe(path, tp, &priv->path_list, list) {
364 ipoib_dbg(priv, "mark path LID 0x%04x GID %pI6 invalid\n",
365 be16_to_cpu(path->pathrec.dlid),
366 path->pathrec.dgid.raw);
367 path->valid = 0;
370 spin_unlock_irq(&priv->lock);
373 void ipoib_flush_paths(struct net_device *dev)
375 struct ipoib_dev_priv *priv = netdev_priv(dev);
376 struct ipoib_path *path, *tp;
377 LIST_HEAD(remove_list);
378 unsigned long flags;
380 netif_tx_lock_bh(dev);
381 spin_lock_irqsave(&priv->lock, flags);
383 list_splice_init(&priv->path_list, &remove_list);
385 list_for_each_entry(path, &remove_list, list)
386 rb_erase(&path->rb_node, &priv->path_tree);
388 list_for_each_entry_safe(path, tp, &remove_list, list) {
389 if (path->query)
390 ib_sa_cancel_query(path->query_id, path->query);
391 spin_unlock_irqrestore(&priv->lock, flags);
392 netif_tx_unlock_bh(dev);
393 wait_for_completion(&path->done);
394 path_free(dev, path);
395 netif_tx_lock_bh(dev);
396 spin_lock_irqsave(&priv->lock, flags);
399 spin_unlock_irqrestore(&priv->lock, flags);
400 netif_tx_unlock_bh(dev);
403 static void path_rec_completion(int status,
404 struct ib_sa_path_rec *pathrec,
405 void *path_ptr)
407 struct ipoib_path *path = path_ptr;
408 struct net_device *dev = path->dev;
409 struct ipoib_dev_priv *priv = netdev_priv(dev);
410 struct ipoib_ah *ah = NULL;
411 struct ipoib_ah *old_ah = NULL;
412 struct ipoib_neigh *neigh, *tn;
413 struct sk_buff_head skqueue;
414 struct sk_buff *skb;
415 unsigned long flags;
417 if (!status)
418 ipoib_dbg(priv, "PathRec LID 0x%04x for GID %pI6\n",
419 be16_to_cpu(pathrec->dlid), pathrec->dgid.raw);
420 else
421 ipoib_dbg(priv, "PathRec status %d for GID %pI6\n",
422 status, path->pathrec.dgid.raw);
424 skb_queue_head_init(&skqueue);
426 if (!status) {
427 struct ib_ah_attr av;
429 if (!ib_init_ah_from_path(priv->ca, priv->port, pathrec, &av))
430 ah = ipoib_create_ah(dev, priv->pd, &av);
433 spin_lock_irqsave(&priv->lock, flags);
435 if (ah) {
436 path->pathrec = *pathrec;
438 old_ah = path->ah;
439 path->ah = ah;
441 ipoib_dbg(priv, "created address handle %p for LID 0x%04x, SL %d\n",
442 ah, be16_to_cpu(pathrec->dlid), pathrec->sl);
444 while ((skb = __skb_dequeue(&path->queue)))
445 __skb_queue_tail(&skqueue, skb);
447 list_for_each_entry_safe(neigh, tn, &path->neigh_list, list) {
448 if (neigh->ah) {
449 WARN_ON(neigh->ah != old_ah);
451 * Dropping the ah reference inside
452 * priv->lock is safe here, because we
453 * will hold one more reference from
454 * the original value of path->ah (ie
455 * old_ah).
457 ipoib_put_ah(neigh->ah);
459 kref_get(&path->ah->ref);
460 neigh->ah = path->ah;
461 memcpy(&neigh->dgid.raw, &path->pathrec.dgid.raw,
462 sizeof(union ib_gid));
464 if (ipoib_cm_enabled(dev, neigh->neighbour)) {
465 if (!ipoib_cm_get(neigh))
466 ipoib_cm_set(neigh, ipoib_cm_create_tx(dev,
467 path,
468 neigh));
469 if (!ipoib_cm_get(neigh)) {
470 list_del(&neigh->list);
471 if (neigh->ah)
472 ipoib_put_ah(neigh->ah);
473 ipoib_neigh_free(dev, neigh);
474 continue;
478 while ((skb = __skb_dequeue(&neigh->queue)))
479 __skb_queue_tail(&skqueue, skb);
481 path->valid = 1;
484 path->query = NULL;
485 complete(&path->done);
487 spin_unlock_irqrestore(&priv->lock, flags);
489 if (old_ah)
490 ipoib_put_ah(old_ah);
492 while ((skb = __skb_dequeue(&skqueue))) {
493 skb->dev = dev;
494 if (dev_queue_xmit(skb))
495 ipoib_warn(priv, "dev_queue_xmit failed "
496 "to requeue packet\n");
500 static struct ipoib_path *path_rec_create(struct net_device *dev, void *gid)
502 struct ipoib_dev_priv *priv = netdev_priv(dev);
503 struct ipoib_path *path;
505 if (!priv->broadcast)
506 return NULL;
508 path = kzalloc(sizeof *path, GFP_ATOMIC);
509 if (!path)
510 return NULL;
512 path->dev = dev;
514 skb_queue_head_init(&path->queue);
516 INIT_LIST_HEAD(&path->neigh_list);
518 memcpy(path->pathrec.dgid.raw, gid, sizeof (union ib_gid));
519 path->pathrec.sgid = priv->local_gid;
520 path->pathrec.pkey = cpu_to_be16(priv->pkey);
521 path->pathrec.numb_path = 1;
522 path->pathrec.traffic_class = priv->broadcast->mcmember.traffic_class;
524 return path;
527 static int path_rec_start(struct net_device *dev,
528 struct ipoib_path *path)
530 struct ipoib_dev_priv *priv = netdev_priv(dev);
532 ipoib_dbg(priv, "Start path record lookup for %pI6\n",
533 path->pathrec.dgid.raw);
535 init_completion(&path->done);
537 path->query_id =
538 ib_sa_path_rec_get(&ipoib_sa_client, priv->ca, priv->port,
539 &path->pathrec,
540 IB_SA_PATH_REC_DGID |
541 IB_SA_PATH_REC_SGID |
542 IB_SA_PATH_REC_NUMB_PATH |
543 IB_SA_PATH_REC_TRAFFIC_CLASS |
544 IB_SA_PATH_REC_PKEY,
545 1000, GFP_ATOMIC,
546 path_rec_completion,
547 path, &path->query);
548 if (path->query_id < 0) {
549 ipoib_warn(priv, "ib_sa_path_rec_get failed: %d\n", path->query_id);
550 path->query = NULL;
551 complete(&path->done);
552 return path->query_id;
555 return 0;
558 static void neigh_add_path(struct sk_buff *skb, struct net_device *dev)
560 struct ipoib_dev_priv *priv = netdev_priv(dev);
561 struct ipoib_path *path;
562 struct ipoib_neigh *neigh;
563 struct neighbour *n;
564 unsigned long flags;
566 n = dst_get_neighbour(skb_dst(skb));
567 neigh = ipoib_neigh_alloc(n, skb->dev);
568 if (!neigh) {
569 ++dev->stats.tx_dropped;
570 dev_kfree_skb_any(skb);
571 return;
574 spin_lock_irqsave(&priv->lock, flags);
576 path = __path_find(dev, n->ha + 4);
577 if (!path) {
578 path = path_rec_create(dev, n->ha + 4);
579 if (!path)
580 goto err_path;
582 __path_add(dev, path);
585 list_add_tail(&neigh->list, &path->neigh_list);
587 if (path->ah) {
588 kref_get(&path->ah->ref);
589 neigh->ah = path->ah;
590 memcpy(&neigh->dgid.raw, &path->pathrec.dgid.raw,
591 sizeof(union ib_gid));
593 if (ipoib_cm_enabled(dev, neigh->neighbour)) {
594 if (!ipoib_cm_get(neigh))
595 ipoib_cm_set(neigh, ipoib_cm_create_tx(dev, path, neigh));
596 if (!ipoib_cm_get(neigh)) {
597 list_del(&neigh->list);
598 if (neigh->ah)
599 ipoib_put_ah(neigh->ah);
600 ipoib_neigh_free(dev, neigh);
601 goto err_drop;
603 if (skb_queue_len(&neigh->queue) < IPOIB_MAX_PATH_REC_QUEUE)
604 __skb_queue_tail(&neigh->queue, skb);
605 else {
606 ipoib_warn(priv, "queue length limit %d. Packet drop.\n",
607 skb_queue_len(&neigh->queue));
608 goto err_drop;
610 } else {
611 spin_unlock_irqrestore(&priv->lock, flags);
612 ipoib_send(dev, skb, path->ah, IPOIB_QPN(n->ha));
613 return;
615 } else {
616 neigh->ah = NULL;
618 if (!path->query && path_rec_start(dev, path))
619 goto err_list;
621 __skb_queue_tail(&neigh->queue, skb);
624 spin_unlock_irqrestore(&priv->lock, flags);
625 return;
627 err_list:
628 list_del(&neigh->list);
630 err_path:
631 ipoib_neigh_free(dev, neigh);
632 err_drop:
633 ++dev->stats.tx_dropped;
634 dev_kfree_skb_any(skb);
636 spin_unlock_irqrestore(&priv->lock, flags);
639 static void ipoib_path_lookup(struct sk_buff *skb, struct net_device *dev)
641 struct ipoib_dev_priv *priv = netdev_priv(skb->dev);
642 struct dst_entry *dst = skb_dst(skb);
643 struct neighbour *n;
645 /* Look up path record for unicasts */
646 n = dst_get_neighbour(dst);
647 if (n->ha[4] != 0xff) {
648 neigh_add_path(skb, dev);
649 return;
652 /* Add in the P_Key for multicasts */
653 n->ha[8] = (priv->pkey >> 8) & 0xff;
654 n->ha[9] = priv->pkey & 0xff;
655 ipoib_mcast_send(dev, n->ha + 4, skb);
658 static void unicast_arp_send(struct sk_buff *skb, struct net_device *dev,
659 struct ipoib_pseudoheader *phdr)
661 struct ipoib_dev_priv *priv = netdev_priv(dev);
662 struct ipoib_path *path;
663 unsigned long flags;
665 spin_lock_irqsave(&priv->lock, flags);
667 path = __path_find(dev, phdr->hwaddr + 4);
668 if (!path || !path->valid) {
669 int new_path = 0;
671 if (!path) {
672 path = path_rec_create(dev, phdr->hwaddr + 4);
673 new_path = 1;
675 if (path) {
676 /* put pseudoheader back on for next time */
677 skb_push(skb, sizeof *phdr);
678 __skb_queue_tail(&path->queue, skb);
680 if (!path->query && path_rec_start(dev, path)) {
681 spin_unlock_irqrestore(&priv->lock, flags);
682 if (new_path)
683 path_free(dev, path);
684 return;
685 } else
686 __path_add(dev, path);
687 } else {
688 ++dev->stats.tx_dropped;
689 dev_kfree_skb_any(skb);
692 spin_unlock_irqrestore(&priv->lock, flags);
693 return;
696 if (path->ah) {
697 ipoib_dbg(priv, "Send unicast ARP to %04x\n",
698 be16_to_cpu(path->pathrec.dlid));
700 spin_unlock_irqrestore(&priv->lock, flags);
701 ipoib_send(dev, skb, path->ah, IPOIB_QPN(phdr->hwaddr));
702 return;
703 } else if ((path->query || !path_rec_start(dev, path)) &&
704 skb_queue_len(&path->queue) < IPOIB_MAX_PATH_REC_QUEUE) {
705 /* put pseudoheader back on for next time */
706 skb_push(skb, sizeof *phdr);
707 __skb_queue_tail(&path->queue, skb);
708 } else {
709 ++dev->stats.tx_dropped;
710 dev_kfree_skb_any(skb);
713 spin_unlock_irqrestore(&priv->lock, flags);
716 static int ipoib_start_xmit(struct sk_buff *skb, struct net_device *dev)
718 struct ipoib_dev_priv *priv = netdev_priv(dev);
719 struct ipoib_neigh *neigh;
720 struct neighbour *n = NULL;
721 unsigned long flags;
723 if (likely(skb_dst(skb)))
724 n = dst_get_neighbour(skb_dst(skb));
726 if (likely(n)) {
727 if (unlikely(!*to_ipoib_neigh(n))) {
728 ipoib_path_lookup(skb, dev);
729 return NETDEV_TX_OK;
732 neigh = *to_ipoib_neigh(n);
734 if (unlikely((memcmp(&neigh->dgid.raw,
735 n->ha + 4,
736 sizeof(union ib_gid))) ||
737 (neigh->dev != dev))) {
738 spin_lock_irqsave(&priv->lock, flags);
740 * It's safe to call ipoib_put_ah() inside
741 * priv->lock here, because we know that
742 * path->ah will always hold one more reference,
743 * so ipoib_put_ah() will never do more than
744 * decrement the ref count.
746 if (neigh->ah)
747 ipoib_put_ah(neigh->ah);
748 list_del(&neigh->list);
749 ipoib_neigh_free(dev, neigh);
750 spin_unlock_irqrestore(&priv->lock, flags);
751 ipoib_path_lookup(skb, dev);
752 return NETDEV_TX_OK;
755 if (ipoib_cm_get(neigh)) {
756 if (ipoib_cm_up(neigh)) {
757 ipoib_cm_send(dev, skb, ipoib_cm_get(neigh));
758 return NETDEV_TX_OK;
760 } else if (neigh->ah) {
761 ipoib_send(dev, skb, neigh->ah, IPOIB_QPN(n->ha));
762 return NETDEV_TX_OK;
765 if (skb_queue_len(&neigh->queue) < IPOIB_MAX_PATH_REC_QUEUE) {
766 spin_lock_irqsave(&priv->lock, flags);
767 __skb_queue_tail(&neigh->queue, skb);
768 spin_unlock_irqrestore(&priv->lock, flags);
769 } else {
770 ++dev->stats.tx_dropped;
771 dev_kfree_skb_any(skb);
773 } else {
774 struct ipoib_pseudoheader *phdr =
775 (struct ipoib_pseudoheader *) skb->data;
776 skb_pull(skb, sizeof *phdr);
778 if (phdr->hwaddr[4] == 0xff) {
779 /* Add in the P_Key for multicast*/
780 phdr->hwaddr[8] = (priv->pkey >> 8) & 0xff;
781 phdr->hwaddr[9] = priv->pkey & 0xff;
783 ipoib_mcast_send(dev, phdr->hwaddr + 4, skb);
784 } else {
785 /* unicast GID -- should be ARP or RARP reply */
787 if ((be16_to_cpup((__be16 *) skb->data) != ETH_P_ARP) &&
788 (be16_to_cpup((__be16 *) skb->data) != ETH_P_RARP)) {
789 ipoib_warn(priv, "Unicast, no %s: type %04x, QPN %06x %pI6\n",
790 skb_dst(skb) ? "neigh" : "dst",
791 be16_to_cpup((__be16 *) skb->data),
792 IPOIB_QPN(phdr->hwaddr),
793 phdr->hwaddr + 4);
794 dev_kfree_skb_any(skb);
795 ++dev->stats.tx_dropped;
796 return NETDEV_TX_OK;
799 unicast_arp_send(skb, dev, phdr);
803 return NETDEV_TX_OK;
806 static void ipoib_timeout(struct net_device *dev)
808 struct ipoib_dev_priv *priv = netdev_priv(dev);
810 ipoib_warn(priv, "transmit timeout: latency %d msecs\n",
811 jiffies_to_msecs(jiffies - dev->trans_start));
812 ipoib_warn(priv, "queue stopped %d, tx_head %u, tx_tail %u\n",
813 netif_queue_stopped(dev),
814 priv->tx_head, priv->tx_tail);
815 /* XXX reset QP, etc. */
818 static int ipoib_hard_header(struct sk_buff *skb,
819 struct net_device *dev,
820 unsigned short type,
821 const void *daddr, const void *saddr, unsigned len)
823 struct ipoib_header *header;
824 struct dst_entry *dst;
825 struct neighbour *n;
827 header = (struct ipoib_header *) skb_push(skb, sizeof *header);
829 header->proto = htons(type);
830 header->reserved = 0;
833 * If we don't have a neighbour structure, stuff the
834 * destination address onto the front of the skb so we can
835 * figure out where to send the packet later.
837 dst = skb_dst(skb);
838 n = NULL;
839 if (dst)
840 n = dst_get_neighbour(dst);
841 if ((!dst || !n) && daddr) {
842 struct ipoib_pseudoheader *phdr =
843 (struct ipoib_pseudoheader *) skb_push(skb, sizeof *phdr);
844 memcpy(phdr->hwaddr, daddr, INFINIBAND_ALEN);
847 return 0;
850 static void ipoib_set_mcast_list(struct net_device *dev)
852 struct ipoib_dev_priv *priv = netdev_priv(dev);
854 if (!test_bit(IPOIB_FLAG_OPER_UP, &priv->flags)) {
855 ipoib_dbg(priv, "IPOIB_FLAG_OPER_UP not set");
856 return;
859 queue_work(ipoib_workqueue, &priv->restart_task);
862 static void ipoib_neigh_cleanup(struct neighbour *n)
864 struct ipoib_neigh *neigh;
865 struct ipoib_dev_priv *priv = netdev_priv(n->dev);
866 unsigned long flags;
867 struct ipoib_ah *ah = NULL;
869 neigh = *to_ipoib_neigh(n);
870 if (neigh)
871 priv = netdev_priv(neigh->dev);
872 else
873 return;
874 ipoib_dbg(priv,
875 "neigh_cleanup for %06x %pI6\n",
876 IPOIB_QPN(n->ha),
877 n->ha + 4);
879 spin_lock_irqsave(&priv->lock, flags);
881 if (neigh->ah)
882 ah = neigh->ah;
883 list_del(&neigh->list);
884 ipoib_neigh_free(n->dev, neigh);
886 spin_unlock_irqrestore(&priv->lock, flags);
888 if (ah)
889 ipoib_put_ah(ah);
892 struct ipoib_neigh *ipoib_neigh_alloc(struct neighbour *neighbour,
893 struct net_device *dev)
895 struct ipoib_neigh *neigh;
897 neigh = kmalloc(sizeof *neigh, GFP_ATOMIC);
898 if (!neigh)
899 return NULL;
901 neigh->neighbour = neighbour;
902 neigh->dev = dev;
903 memset(&neigh->dgid.raw, 0, sizeof (union ib_gid));
904 *to_ipoib_neigh(neighbour) = neigh;
905 skb_queue_head_init(&neigh->queue);
906 ipoib_cm_set(neigh, NULL);
908 return neigh;
911 void ipoib_neigh_free(struct net_device *dev, struct ipoib_neigh *neigh)
913 struct sk_buff *skb;
914 *to_ipoib_neigh(neigh->neighbour) = NULL;
915 while ((skb = __skb_dequeue(&neigh->queue))) {
916 ++dev->stats.tx_dropped;
917 dev_kfree_skb_any(skb);
919 if (ipoib_cm_get(neigh))
920 ipoib_cm_destroy_tx(ipoib_cm_get(neigh));
921 kfree(neigh);
924 static int ipoib_neigh_setup_dev(struct net_device *dev, struct neigh_parms *parms)
926 parms->neigh_cleanup = ipoib_neigh_cleanup;
928 return 0;
931 int ipoib_dev_init(struct net_device *dev, struct ib_device *ca, int port)
933 struct ipoib_dev_priv *priv = netdev_priv(dev);
935 /* Allocate RX/TX "rings" to hold queued skbs */
936 priv->rx_ring = kzalloc(ipoib_recvq_size * sizeof *priv->rx_ring,
937 GFP_KERNEL);
938 if (!priv->rx_ring) {
939 printk(KERN_WARNING "%s: failed to allocate RX ring (%d entries)\n",
940 ca->name, ipoib_recvq_size);
941 goto out;
944 priv->tx_ring = vzalloc(ipoib_sendq_size * sizeof *priv->tx_ring);
945 if (!priv->tx_ring) {
946 printk(KERN_WARNING "%s: failed to allocate TX ring (%d entries)\n",
947 ca->name, ipoib_sendq_size);
948 goto out_rx_ring_cleanup;
951 /* priv->tx_head, tx_tail & tx_outstanding are already 0 */
953 if (ipoib_ib_dev_init(dev, ca, port))
954 goto out_tx_ring_cleanup;
956 return 0;
958 out_tx_ring_cleanup:
959 vfree(priv->tx_ring);
961 out_rx_ring_cleanup:
962 kfree(priv->rx_ring);
964 out:
965 return -ENOMEM;
968 void ipoib_dev_cleanup(struct net_device *dev)
970 struct ipoib_dev_priv *priv = netdev_priv(dev), *cpriv, *tcpriv;
972 ipoib_delete_debug_files(dev);
974 /* Delete any child interfaces first */
975 list_for_each_entry_safe(cpriv, tcpriv, &priv->child_intfs, list) {
976 unregister_netdev(cpriv->dev);
977 ipoib_dev_cleanup(cpriv->dev);
978 free_netdev(cpriv->dev);
981 ipoib_ib_dev_cleanup(dev);
983 kfree(priv->rx_ring);
984 vfree(priv->tx_ring);
986 priv->rx_ring = NULL;
987 priv->tx_ring = NULL;
990 static const struct header_ops ipoib_header_ops = {
991 .create = ipoib_hard_header,
994 static const struct net_device_ops ipoib_netdev_ops = {
995 .ndo_open = ipoib_open,
996 .ndo_stop = ipoib_stop,
997 .ndo_change_mtu = ipoib_change_mtu,
998 .ndo_fix_features = ipoib_fix_features,
999 .ndo_start_xmit = ipoib_start_xmit,
1000 .ndo_tx_timeout = ipoib_timeout,
1001 .ndo_set_multicast_list = ipoib_set_mcast_list,
1002 .ndo_neigh_setup = ipoib_neigh_setup_dev,
1005 static void ipoib_setup(struct net_device *dev)
1007 struct ipoib_dev_priv *priv = netdev_priv(dev);
1009 dev->netdev_ops = &ipoib_netdev_ops;
1010 dev->header_ops = &ipoib_header_ops;
1012 ipoib_set_ethtool_ops(dev);
1014 netif_napi_add(dev, &priv->napi, ipoib_poll, 100);
1016 dev->watchdog_timeo = HZ;
1018 dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1021 * We add in INFINIBAND_ALEN to allow for the destination
1022 * address "pseudoheader" for skbs without neighbour struct.
1024 dev->hard_header_len = IPOIB_ENCAP_LEN + INFINIBAND_ALEN;
1025 dev->addr_len = INFINIBAND_ALEN;
1026 dev->type = ARPHRD_INFINIBAND;
1027 dev->tx_queue_len = ipoib_sendq_size * 2;
1028 dev->features = (NETIF_F_VLAN_CHALLENGED |
1029 NETIF_F_HIGHDMA);
1030 dev->priv_flags &= ~IFF_XMIT_DST_RELEASE;
1032 memcpy(dev->broadcast, ipv4_bcast_addr, INFINIBAND_ALEN);
1034 netif_carrier_off(dev);
1036 priv->dev = dev;
1038 spin_lock_init(&priv->lock);
1040 mutex_init(&priv->vlan_mutex);
1042 INIT_LIST_HEAD(&priv->path_list);
1043 INIT_LIST_HEAD(&priv->child_intfs);
1044 INIT_LIST_HEAD(&priv->dead_ahs);
1045 INIT_LIST_HEAD(&priv->multicast_list);
1047 INIT_DELAYED_WORK(&priv->pkey_poll_task, ipoib_pkey_poll);
1048 INIT_DELAYED_WORK(&priv->mcast_task, ipoib_mcast_join_task);
1049 INIT_WORK(&priv->carrier_on_task, ipoib_mcast_carrier_on_task);
1050 INIT_WORK(&priv->flush_light, ipoib_ib_dev_flush_light);
1051 INIT_WORK(&priv->flush_normal, ipoib_ib_dev_flush_normal);
1052 INIT_WORK(&priv->flush_heavy, ipoib_ib_dev_flush_heavy);
1053 INIT_WORK(&priv->restart_task, ipoib_mcast_restart_task);
1054 INIT_DELAYED_WORK(&priv->ah_reap_task, ipoib_reap_ah);
1057 struct ipoib_dev_priv *ipoib_intf_alloc(const char *name)
1059 struct net_device *dev;
1061 dev = alloc_netdev((int) sizeof (struct ipoib_dev_priv), name,
1062 ipoib_setup);
1063 if (!dev)
1064 return NULL;
1066 return netdev_priv(dev);
1069 static ssize_t show_pkey(struct device *dev,
1070 struct device_attribute *attr, char *buf)
1072 struct ipoib_dev_priv *priv = netdev_priv(to_net_dev(dev));
1074 return sprintf(buf, "0x%04x\n", priv->pkey);
1076 static DEVICE_ATTR(pkey, S_IRUGO, show_pkey, NULL);
1078 static ssize_t show_umcast(struct device *dev,
1079 struct device_attribute *attr, char *buf)
1081 struct ipoib_dev_priv *priv = netdev_priv(to_net_dev(dev));
1083 return sprintf(buf, "%d\n", test_bit(IPOIB_FLAG_UMCAST, &priv->flags));
1086 static ssize_t set_umcast(struct device *dev,
1087 struct device_attribute *attr,
1088 const char *buf, size_t count)
1090 struct ipoib_dev_priv *priv = netdev_priv(to_net_dev(dev));
1091 unsigned long umcast_val = simple_strtoul(buf, NULL, 0);
1093 if (umcast_val > 0) {
1094 set_bit(IPOIB_FLAG_UMCAST, &priv->flags);
1095 ipoib_warn(priv, "ignoring multicast groups joined directly "
1096 "by userspace\n");
1097 } else
1098 clear_bit(IPOIB_FLAG_UMCAST, &priv->flags);
1100 return count;
1102 static DEVICE_ATTR(umcast, S_IWUSR | S_IRUGO, show_umcast, set_umcast);
1104 int ipoib_add_umcast_attr(struct net_device *dev)
1106 return device_create_file(&dev->dev, &dev_attr_umcast);
1109 static ssize_t create_child(struct device *dev,
1110 struct device_attribute *attr,
1111 const char *buf, size_t count)
1113 int pkey;
1114 int ret;
1116 if (sscanf(buf, "%i", &pkey) != 1)
1117 return -EINVAL;
1119 if (pkey < 0 || pkey > 0xffff)
1120 return -EINVAL;
1123 * Set the full membership bit, so that we join the right
1124 * broadcast group, etc.
1126 pkey |= 0x8000;
1128 ret = ipoib_vlan_add(to_net_dev(dev), pkey);
1130 return ret ? ret : count;
1132 static DEVICE_ATTR(create_child, S_IWUSR, NULL, create_child);
1134 static ssize_t delete_child(struct device *dev,
1135 struct device_attribute *attr,
1136 const char *buf, size_t count)
1138 int pkey;
1139 int ret;
1141 if (sscanf(buf, "%i", &pkey) != 1)
1142 return -EINVAL;
1144 if (pkey < 0 || pkey > 0xffff)
1145 return -EINVAL;
1147 ret = ipoib_vlan_delete(to_net_dev(dev), pkey);
1149 return ret ? ret : count;
1152 static DEVICE_ATTR(delete_child, S_IWUSR, NULL, delete_child);
1154 int ipoib_add_pkey_attr(struct net_device *dev)
1156 return device_create_file(&dev->dev, &dev_attr_pkey);
1159 int ipoib_set_dev_features(struct ipoib_dev_priv *priv, struct ib_device *hca)
1161 struct ib_device_attr *device_attr;
1162 int result = -ENOMEM;
1164 device_attr = kmalloc(sizeof *device_attr, GFP_KERNEL);
1165 if (!device_attr) {
1166 printk(KERN_WARNING "%s: allocation of %zu bytes failed\n",
1167 hca->name, sizeof *device_attr);
1168 return result;
1171 result = ib_query_device(hca, device_attr);
1172 if (result) {
1173 printk(KERN_WARNING "%s: ib_query_device failed (ret = %d)\n",
1174 hca->name, result);
1175 kfree(device_attr);
1176 return result;
1178 priv->hca_caps = device_attr->device_cap_flags;
1180 kfree(device_attr);
1182 if (priv->hca_caps & IB_DEVICE_UD_IP_CSUM) {
1183 priv->dev->hw_features = NETIF_F_SG |
1184 NETIF_F_IP_CSUM | NETIF_F_RXCSUM;
1186 if (priv->hca_caps & IB_DEVICE_UD_TSO)
1187 priv->dev->hw_features |= NETIF_F_TSO;
1189 priv->dev->features |= priv->dev->hw_features;
1192 return 0;
1195 static struct net_device *ipoib_add_port(const char *format,
1196 struct ib_device *hca, u8 port)
1198 struct ipoib_dev_priv *priv;
1199 struct ib_port_attr attr;
1200 int result = -ENOMEM;
1202 priv = ipoib_intf_alloc(format);
1203 if (!priv)
1204 goto alloc_mem_failed;
1206 SET_NETDEV_DEV(priv->dev, hca->dma_device);
1207 priv->dev->dev_id = port - 1;
1209 if (!ib_query_port(hca, port, &attr))
1210 priv->max_ib_mtu = ib_mtu_enum_to_int(attr.max_mtu);
1211 else {
1212 printk(KERN_WARNING "%s: ib_query_port %d failed\n",
1213 hca->name, port);
1214 goto device_init_failed;
1217 /* MTU will be reset when mcast join happens */
1218 priv->dev->mtu = IPOIB_UD_MTU(priv->max_ib_mtu);
1219 priv->mcast_mtu = priv->admin_mtu = priv->dev->mtu;
1221 result = ib_query_pkey(hca, port, 0, &priv->pkey);
1222 if (result) {
1223 printk(KERN_WARNING "%s: ib_query_pkey port %d failed (ret = %d)\n",
1224 hca->name, port, result);
1225 goto device_init_failed;
1228 if (ipoib_set_dev_features(priv, hca))
1229 goto device_init_failed;
1232 * Set the full membership bit, so that we join the right
1233 * broadcast group, etc.
1235 priv->pkey |= 0x8000;
1237 priv->dev->broadcast[8] = priv->pkey >> 8;
1238 priv->dev->broadcast[9] = priv->pkey & 0xff;
1240 result = ib_query_gid(hca, port, 0, &priv->local_gid);
1241 if (result) {
1242 printk(KERN_WARNING "%s: ib_query_gid port %d failed (ret = %d)\n",
1243 hca->name, port, result);
1244 goto device_init_failed;
1245 } else
1246 memcpy(priv->dev->dev_addr + 4, priv->local_gid.raw, sizeof (union ib_gid));
1248 result = ipoib_dev_init(priv->dev, hca, port);
1249 if (result < 0) {
1250 printk(KERN_WARNING "%s: failed to initialize port %d (ret = %d)\n",
1251 hca->name, port, result);
1252 goto device_init_failed;
1255 INIT_IB_EVENT_HANDLER(&priv->event_handler,
1256 priv->ca, ipoib_event);
1257 result = ib_register_event_handler(&priv->event_handler);
1258 if (result < 0) {
1259 printk(KERN_WARNING "%s: ib_register_event_handler failed for "
1260 "port %d (ret = %d)\n",
1261 hca->name, port, result);
1262 goto event_failed;
1265 result = register_netdev(priv->dev);
1266 if (result) {
1267 printk(KERN_WARNING "%s: couldn't register ipoib port %d; error %d\n",
1268 hca->name, port, result);
1269 goto register_failed;
1272 ipoib_create_debug_files(priv->dev);
1274 if (ipoib_cm_add_mode_attr(priv->dev))
1275 goto sysfs_failed;
1276 if (ipoib_add_pkey_attr(priv->dev))
1277 goto sysfs_failed;
1278 if (ipoib_add_umcast_attr(priv->dev))
1279 goto sysfs_failed;
1280 if (device_create_file(&priv->dev->dev, &dev_attr_create_child))
1281 goto sysfs_failed;
1282 if (device_create_file(&priv->dev->dev, &dev_attr_delete_child))
1283 goto sysfs_failed;
1285 return priv->dev;
1287 sysfs_failed:
1288 ipoib_delete_debug_files(priv->dev);
1289 unregister_netdev(priv->dev);
1291 register_failed:
1292 ib_unregister_event_handler(&priv->event_handler);
1293 flush_workqueue(ipoib_workqueue);
1295 event_failed:
1296 ipoib_dev_cleanup(priv->dev);
1298 device_init_failed:
1299 free_netdev(priv->dev);
1301 alloc_mem_failed:
1302 return ERR_PTR(result);
1305 static void ipoib_add_one(struct ib_device *device)
1307 struct list_head *dev_list;
1308 struct net_device *dev;
1309 struct ipoib_dev_priv *priv;
1310 int s, e, p;
1312 if (rdma_node_get_transport(device->node_type) != RDMA_TRANSPORT_IB)
1313 return;
1315 dev_list = kmalloc(sizeof *dev_list, GFP_KERNEL);
1316 if (!dev_list)
1317 return;
1319 INIT_LIST_HEAD(dev_list);
1321 if (device->node_type == RDMA_NODE_IB_SWITCH) {
1322 s = 0;
1323 e = 0;
1324 } else {
1325 s = 1;
1326 e = device->phys_port_cnt;
1329 for (p = s; p <= e; ++p) {
1330 if (rdma_port_get_link_layer(device, p) != IB_LINK_LAYER_INFINIBAND)
1331 continue;
1332 dev = ipoib_add_port("ib%d", device, p);
1333 if (!IS_ERR(dev)) {
1334 priv = netdev_priv(dev);
1335 list_add_tail(&priv->list, dev_list);
1339 ib_set_client_data(device, &ipoib_client, dev_list);
1342 static void ipoib_remove_one(struct ib_device *device)
1344 struct ipoib_dev_priv *priv, *tmp;
1345 struct list_head *dev_list;
1347 if (rdma_node_get_transport(device->node_type) != RDMA_TRANSPORT_IB)
1348 return;
1350 dev_list = ib_get_client_data(device, &ipoib_client);
1352 list_for_each_entry_safe(priv, tmp, dev_list, list) {
1353 ib_unregister_event_handler(&priv->event_handler);
1355 rtnl_lock();
1356 dev_change_flags(priv->dev, priv->dev->flags & ~IFF_UP);
1357 rtnl_unlock();
1359 flush_workqueue(ipoib_workqueue);
1361 unregister_netdev(priv->dev);
1362 ipoib_dev_cleanup(priv->dev);
1363 free_netdev(priv->dev);
1366 kfree(dev_list);
1369 static int __init ipoib_init_module(void)
1371 int ret;
1373 ipoib_recvq_size = roundup_pow_of_two(ipoib_recvq_size);
1374 ipoib_recvq_size = min(ipoib_recvq_size, IPOIB_MAX_QUEUE_SIZE);
1375 ipoib_recvq_size = max(ipoib_recvq_size, IPOIB_MIN_QUEUE_SIZE);
1377 ipoib_sendq_size = roundup_pow_of_two(ipoib_sendq_size);
1378 ipoib_sendq_size = min(ipoib_sendq_size, IPOIB_MAX_QUEUE_SIZE);
1379 ipoib_sendq_size = max3(ipoib_sendq_size, 2 * MAX_SEND_CQE, IPOIB_MIN_QUEUE_SIZE);
1380 #ifdef CONFIG_INFINIBAND_IPOIB_CM
1381 ipoib_max_conn_qp = min(ipoib_max_conn_qp, IPOIB_CM_MAX_CONN_QP);
1382 #endif
1385 * When copying small received packets, we only copy from the
1386 * linear data part of the SKB, so we rely on this condition.
1388 BUILD_BUG_ON(IPOIB_CM_COPYBREAK > IPOIB_CM_HEAD_SIZE);
1390 ret = ipoib_register_debugfs();
1391 if (ret)
1392 return ret;
1395 * We create our own workqueue mainly because we want to be
1396 * able to flush it when devices are being removed. We can't
1397 * use schedule_work()/flush_scheduled_work() because both
1398 * unregister_netdev() and linkwatch_event take the rtnl lock,
1399 * so flush_scheduled_work() can deadlock during device
1400 * removal.
1402 ipoib_workqueue = create_singlethread_workqueue("ipoib");
1403 if (!ipoib_workqueue) {
1404 ret = -ENOMEM;
1405 goto err_fs;
1408 ib_sa_register_client(&ipoib_sa_client);
1410 ret = ib_register_client(&ipoib_client);
1411 if (ret)
1412 goto err_sa;
1414 return 0;
1416 err_sa:
1417 ib_sa_unregister_client(&ipoib_sa_client);
1418 destroy_workqueue(ipoib_workqueue);
1420 err_fs:
1421 ipoib_unregister_debugfs();
1423 return ret;
1426 static void __exit ipoib_cleanup_module(void)
1428 ib_unregister_client(&ipoib_client);
1429 ib_sa_unregister_client(&ipoib_sa_client);
1430 ipoib_unregister_debugfs();
1431 destroy_workqueue(ipoib_workqueue);
1434 module_init(ipoib_init_module);
1435 module_exit(ipoib_cleanup_module);