1/* $Id: capi.c,v 1.1.2.7 2004/04/28 09:48:59 armin Exp $
2 *
3 * CAPI 2.0 Interface for Linux
4 *
5 * Copyright 1996 by Carsten Paeth <calle@calle.de>
6 *
7 * This software may be used and distributed according to the terms
8 * of the GNU General Public License, incorporated herein by reference.
9 *
10 */
11
12#include <linux/compiler.h>
13#include <linux/module.h>
14#include <linux/ethtool.h>
15#include <linux/errno.h>
16#include <linux/kernel.h>
17#include <linux/major.h>
18#include <linux/sched.h>
19#include <linux/slab.h>
20#include <linux/fcntl.h>
21#include <linux/fs.h>
22#include <linux/signal.h>
23#include <linux/mutex.h>
24#include <linux/mm.h>
25#include <linux/timer.h>
26#include <linux/wait.h>
27#include <linux/tty.h>
28#include <linux/netdevice.h>
29#include <linux/ppp_defs.h>
30#include <linux/ppp-ioctl.h>
31#include <linux/skbuff.h>
32#include <linux/proc_fs.h>
33#include <linux/seq_file.h>
34#include <linux/poll.h>
35#include <linux/capi.h>
36#include <linux/kernelcapi.h>
37#include <linux/init.h>
38#include <linux/device.h>
39#include <linux/moduleparam.h>
40#include <linux/isdn/capiutil.h>
41#include <linux/isdn/capicmd.h>
42
43#include "kcapi.h"
44
45MODULE_DESCRIPTION("CAPI4Linux: kernel CAPI layer and /dev/capi20 interface");
46MODULE_AUTHOR("Carsten Paeth");
47MODULE_LICENSE("GPL");
48
49/* -------- driver information -------------------------------------- */
50
51static DEFINE_MUTEX(capi_mutex);
52static const struct class capi_class = {
53	.name = "capi",
54};
55static int capi_major = 68;		/* allocated */
56
57module_param_named(major, capi_major, uint, 0);
58
59#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
60#define CAPINC_NR_PORTS		32
61#define CAPINC_MAX_PORTS	256
62
63static int capi_ttyminors = CAPINC_NR_PORTS;
64
65module_param_named(ttyminors, capi_ttyminors, uint, 0);
66#endif /* CONFIG_ISDN_CAPI_MIDDLEWARE */
67
68/* -------- defines ------------------------------------------------- */
69
70#define CAPINC_MAX_RECVQUEUE	10
71#define CAPINC_MAX_SENDQUEUE	10
72#define CAPI_MAX_BLKSIZE	2048
73
74/* -------- data structures ----------------------------------------- */
75
76struct capidev;
77struct capincci;
78struct capiminor;
79
80struct ackqueue_entry {
81	struct list_head	list;
82	u16			datahandle;
83};
84
85struct capiminor {
86	unsigned int      minor;
87
88	struct capi20_appl	*ap;
89	u32			ncci;
90	atomic_t		datahandle;
91	atomic_t		msgid;
92
93	struct tty_port port;
94	int                ttyinstop;
95	int                ttyoutstop;
96
97	struct sk_buff_head	inqueue;
98
99	struct sk_buff_head	outqueue;
100	int			outbytes;
101	struct sk_buff		*outskb;
102	spinlock_t		outlock;
103
104	/* transmit path */
105	struct list_head ackqueue;
106	int nack;
107	spinlock_t ackqlock;
108};
109
110struct capincci {
111	struct list_head list;
112	u32		 ncci;
113	struct capidev	*cdev;
114#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
115	struct capiminor *minorp;
116#endif /* CONFIG_ISDN_CAPI_MIDDLEWARE */
117};
118
119struct capidev {
120	struct list_head list;
121	struct capi20_appl ap;
122	u16		errcode;
123	unsigned        userflags;
124
125	struct sk_buff_head recvqueue;
126	wait_queue_head_t recvwait;
127
128	struct list_head nccis;
129
130	struct mutex lock;
131};
132
133/* -------- global variables ---------------------------------------- */
134
135static DEFINE_MUTEX(capidev_list_lock);
136static LIST_HEAD(capidev_list);
137
138#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
139
140static DEFINE_SPINLOCK(capiminors_lock);
141static struct capiminor **capiminors;
142
143static struct tty_driver *capinc_tty_driver;
144
145/* -------- datahandles --------------------------------------------- */
146
147static int capiminor_add_ack(struct capiminor *mp, u16 datahandle)
148{
149	struct ackqueue_entry *n;
150
151	n = kmalloc(sizeof(*n), GFP_ATOMIC);
152	if (unlikely(!n)) {
153		printk(KERN_ERR "capi: alloc datahandle failed\n");
154		return -1;
155	}
156	n->datahandle = datahandle;
157	INIT_LIST_HEAD(&n->list);
158	spin_lock_bh(&mp->ackqlock);
159	list_add_tail(&n->list, &mp->ackqueue);
160	mp->nack++;
161	spin_unlock_bh(&mp->ackqlock);
162	return 0;
163}
164
165static int capiminor_del_ack(struct capiminor *mp, u16 datahandle)
166{
167	struct ackqueue_entry *p, *tmp;
168
169	spin_lock_bh(&mp->ackqlock);
170	list_for_each_entry_safe(p, tmp, &mp->ackqueue, list) {
171		if (p->datahandle == datahandle) {
172			list_del(&p->list);
173			mp->nack--;
174			spin_unlock_bh(&mp->ackqlock);
175			kfree(p);
176			return 0;
177		}
178	}
179	spin_unlock_bh(&mp->ackqlock);
180	return -1;
181}
182
183static void capiminor_del_all_ack(struct capiminor *mp)
184{
185	struct ackqueue_entry *p, *tmp;
186
187	list_for_each_entry_safe(p, tmp, &mp->ackqueue, list) {
188		list_del(&p->list);
189		kfree(p);
190		mp->nack--;
191	}
192}
193
194
195/* -------- struct capiminor ---------------------------------------- */
196
197static void capiminor_destroy(struct tty_port *port)
198{
199	struct capiminor *mp = container_of(port, struct capiminor, port);
200
201	kfree_skb(mp->outskb);
202	skb_queue_purge(&mp->inqueue);
203	skb_queue_purge(&mp->outqueue);
204	capiminor_del_all_ack(mp);
205	kfree(mp);
206}
207
208static const struct tty_port_operations capiminor_port_ops = {
209	.destruct = capiminor_destroy,
210};
211
212static struct capiminor *capiminor_alloc(struct capi20_appl *ap, u32 ncci)
213{
214	struct capiminor *mp;
215	struct device *dev;
216	unsigned int minor;
217
218	mp = kzalloc(sizeof(*mp), GFP_KERNEL);
219	if (!mp) {
220		printk(KERN_ERR "capi: can't alloc capiminor\n");
221		return NULL;
222	}
223
224	mp->ap = ap;
225	mp->ncci = ncci;
226	INIT_LIST_HEAD(&mp->ackqueue);
227	spin_lock_init(&mp->ackqlock);
228
229	skb_queue_head_init(&mp->inqueue);
230	skb_queue_head_init(&mp->outqueue);
231	spin_lock_init(&mp->outlock);
232
233	tty_port_init(&mp->port);
234	mp->port.ops = &capiminor_port_ops;
235
236	/* Allocate the least unused minor number. */
237	spin_lock(&capiminors_lock);
238	for (minor = 0; minor < capi_ttyminors; minor++)
239		if (!capiminors[minor]) {
240			capiminors[minor] = mp;
241			break;
242		}
243	spin_unlock(&capiminors_lock);
244
245	if (minor == capi_ttyminors) {
246		printk(KERN_NOTICE "capi: out of minors\n");
247		goto err_out1;
248	}
249
250	mp->minor = minor;
251
252	dev = tty_port_register_device(&mp->port, capinc_tty_driver, minor,
253			NULL);
254	if (IS_ERR(dev))
255		goto err_out2;
256
257	return mp;
258
259err_out2:
260	spin_lock(&capiminors_lock);
261	capiminors[minor] = NULL;
262	spin_unlock(&capiminors_lock);
263
264err_out1:
265	tty_port_put(&mp->port);
266	return NULL;
267}
268
269static struct capiminor *capiminor_get(unsigned int minor)
270{
271	struct capiminor *mp;
272
273	spin_lock(&capiminors_lock);
274	mp = capiminors[minor];
275	if (mp)
276		tty_port_get(&mp->port);
277	spin_unlock(&capiminors_lock);
278
279	return mp;
280}
281
282static inline void capiminor_put(struct capiminor *mp)
283{
284	tty_port_put(&mp->port);
285}
286
287static void capiminor_free(struct capiminor *mp)
288{
289	tty_unregister_device(capinc_tty_driver, mp->minor);
290
291	spin_lock(&capiminors_lock);
292	capiminors[mp->minor] = NULL;
293	spin_unlock(&capiminors_lock);
294
295	capiminor_put(mp);
296}
297
298/* -------- struct capincci ----------------------------------------- */
299
300static void capincci_alloc_minor(struct capidev *cdev, struct capincci *np)
301{
302	if (cdev->userflags & CAPIFLAG_HIGHJACKING)
303		np->minorp = capiminor_alloc(&cdev->ap, np->ncci);
304}
305
306static void capincci_free_minor(struct capincci *np)
307{
308	struct capiminor *mp = np->minorp;
309	struct tty_struct *tty;
310
311	if (mp) {
312		tty = tty_port_tty_get(&mp->port);
313		if (tty) {
314			tty_vhangup(tty);
315			tty_kref_put(tty);
316		}
317
318		capiminor_free(mp);
319	}
320}
321
322static inline unsigned int capincci_minor_opencount(struct capincci *np)
323{
324	struct capiminor *mp = np->minorp;
325	unsigned int count = 0;
326	struct tty_struct *tty;
327
328	if (mp) {
329		tty = tty_port_tty_get(&mp->port);
330		if (tty) {
331			count = tty->count;
332			tty_kref_put(tty);
333		}
334	}
335	return count;
336}
337
338#else /* !CONFIG_ISDN_CAPI_MIDDLEWARE */
339
340static inline void
341capincci_alloc_minor(struct capidev *cdev, struct capincci *np) { }
342static inline void capincci_free_minor(struct capincci *np) { }
343
344#endif /* !CONFIG_ISDN_CAPI_MIDDLEWARE */
345
346static struct capincci *capincci_alloc(struct capidev *cdev, u32 ncci)
347{
348	struct capincci *np;
349
350	np = kzalloc(sizeof(*np), GFP_KERNEL);
351	if (!np)
352		return NULL;
353	np->ncci = ncci;
354	np->cdev = cdev;
355
356	capincci_alloc_minor(cdev, np);
357
358	list_add_tail(&np->list, &cdev->nccis);
359
360	return np;
361}
362
363static void capincci_free(struct capidev *cdev, u32 ncci)
364{
365	struct capincci *np, *tmp;
366
367	list_for_each_entry_safe(np, tmp, &cdev->nccis, list)
368		if (ncci == 0xffffffff || np->ncci == ncci) {
369			capincci_free_minor(np);
370			list_del(&np->list);
371			kfree(np);
372		}
373}
374
375#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
376static struct capincci *capincci_find(struct capidev *cdev, u32 ncci)
377{
378	struct capincci *np;
379
380	list_for_each_entry(np, &cdev->nccis, list)
381		if (np->ncci == ncci)
382			return np;
383	return NULL;
384}
385
386/* -------- handle data queue --------------------------------------- */
387
388static struct sk_buff *
389gen_data_b3_resp_for(struct capiminor *mp, struct sk_buff *skb)
390{
391	struct sk_buff *nskb;
392	nskb = alloc_skb(CAPI_DATA_B3_RESP_LEN, GFP_KERNEL);
393	if (nskb) {
394		u16 datahandle = CAPIMSG_U16(skb->data, CAPIMSG_BASELEN + 4 + 4 + 2);
395		unsigned char *s = skb_put(nskb, CAPI_DATA_B3_RESP_LEN);
396		capimsg_setu16(s, 0, CAPI_DATA_B3_RESP_LEN);
397		capimsg_setu16(s, 2, mp->ap->applid);
398		capimsg_setu8 (s, 4, CAPI_DATA_B3);
399		capimsg_setu8 (s, 5, CAPI_RESP);
400		capimsg_setu16(s, 6, atomic_inc_return(&mp->msgid));
401		capimsg_setu32(s, 8, mp->ncci);
402		capimsg_setu16(s, 12, datahandle);
403	}
404	return nskb;
405}
406
407static int handle_recv_skb(struct capiminor *mp, struct sk_buff *skb)
408{
409	unsigned int datalen = skb->len - CAPIMSG_LEN(skb->data);
410	struct tty_struct *tty;
411	struct sk_buff *nskb;
412	u16 errcode, datahandle;
413	struct tty_ldisc *ld;
414	int ret = -1;
415
416	tty = tty_port_tty_get(&mp->port);
417	if (!tty) {
418		pr_debug("capi: currently no receiver\n");
419		return -1;
420	}
421
422	ld = tty_ldisc_ref(tty);
423	if (!ld) {
424		/* fatal error, do not requeue */
425		ret = 0;
426		kfree_skb(skb);
427		goto deref_tty;
428	}
429
430	if (ld->ops->receive_buf == NULL) {
431		pr_debug("capi: ldisc has no receive_buf function\n");
432		/* fatal error, do not requeue */
433		goto free_skb;
434	}
435	if (mp->ttyinstop) {
436		pr_debug("capi: recv tty throttled\n");
437		goto deref_ldisc;
438	}
439
440	if (tty->receive_room < datalen) {
441		pr_debug("capi: no room in tty\n");
442		goto deref_ldisc;
443	}
444
445	nskb = gen_data_b3_resp_for(mp, skb);
446	if (!nskb) {
447		printk(KERN_ERR "capi: gen_data_b3_resp failed\n");
448		goto deref_ldisc;
449	}
450
451	datahandle = CAPIMSG_U16(skb->data, CAPIMSG_BASELEN + 4);
452
453	errcode = capi20_put_message(mp->ap, nskb);
454
455	if (errcode == CAPI_NOERROR) {
456		skb_pull(skb, CAPIMSG_LEN(skb->data));
457		pr_debug("capi: DATA_B3_RESP %u len=%d => ldisc\n",
458			 datahandle, skb->len);
459		ld->ops->receive_buf(tty, skb->data, NULL, skb->len);
460	} else {
461		printk(KERN_ERR "capi: send DATA_B3_RESP failed=%x\n",
462		       errcode);
463		kfree_skb(nskb);
464
465		if (errcode == CAPI_SENDQUEUEFULL)
466			goto deref_ldisc;
467	}
468
469free_skb:
470	ret = 0;
471	kfree_skb(skb);
472
473deref_ldisc:
474	tty_ldisc_deref(ld);
475
476deref_tty:
477	tty_kref_put(tty);
478	return ret;
479}
480
481static void handle_minor_recv(struct capiminor *mp)
482{
483	struct sk_buff *skb;
484
485	while ((skb = skb_dequeue(&mp->inqueue)) != NULL)
486		if (handle_recv_skb(mp, skb) < 0) {
487			skb_queue_head(&mp->inqueue, skb);
488			return;
489		}
490}
491
492static void handle_minor_send(struct capiminor *mp)
493{
494	struct tty_struct *tty;
495	struct sk_buff *skb;
496	u16 len;
497	u16 errcode;
498	u16 datahandle;
499
500	tty = tty_port_tty_get(&mp->port);
501	if (!tty)
502		return;
503
504	if (mp->ttyoutstop) {
505		pr_debug("capi: send: tty stopped\n");
506		tty_kref_put(tty);
507		return;
508	}
509
510	while (1) {
511		spin_lock_bh(&mp->outlock);
512		skb = __skb_dequeue(&mp->outqueue);
513		if (!skb) {
514			spin_unlock_bh(&mp->outlock);
515			break;
516		}
517		len = (u16)skb->len;
518		mp->outbytes -= len;
519		spin_unlock_bh(&mp->outlock);
520
521		datahandle = atomic_inc_return(&mp->datahandle);
522		skb_push(skb, CAPI_DATA_B3_REQ_LEN);
523		memset(skb->data, 0, CAPI_DATA_B3_REQ_LEN);
524		capimsg_setu16(skb->data, 0, CAPI_DATA_B3_REQ_LEN);
525		capimsg_setu16(skb->data, 2, mp->ap->applid);
526		capimsg_setu8 (skb->data, 4, CAPI_DATA_B3);
527		capimsg_setu8 (skb->data, 5, CAPI_REQ);
528		capimsg_setu16(skb->data, 6, atomic_inc_return(&mp->msgid));
529		capimsg_setu32(skb->data, 8, mp->ncci);	/* NCCI */
530		capimsg_setu32(skb->data, 12, (u32)(long)skb->data);/* Data32 */
531		capimsg_setu16(skb->data, 16, len);	/* Data length */
532		capimsg_setu16(skb->data, 18, datahandle);
533		capimsg_setu16(skb->data, 20, 0);	/* Flags */
534
535		if (capiminor_add_ack(mp, datahandle) < 0) {
536			skb_pull(skb, CAPI_DATA_B3_REQ_LEN);
537
538			spin_lock_bh(&mp->outlock);
539			__skb_queue_head(&mp->outqueue, skb);
540			mp->outbytes += len;
541			spin_unlock_bh(&mp->outlock);
542
543			break;
544		}
545		errcode = capi20_put_message(mp->ap, skb);
546		if (errcode == CAPI_NOERROR) {
547			pr_debug("capi: DATA_B3_REQ %u len=%u\n",
548				 datahandle, len);
549			continue;
550		}
551		capiminor_del_ack(mp, datahandle);
552
553		if (errcode == CAPI_SENDQUEUEFULL) {
554			skb_pull(skb, CAPI_DATA_B3_REQ_LEN);
555
556			spin_lock_bh(&mp->outlock);
557			__skb_queue_head(&mp->outqueue, skb);
558			mp->outbytes += len;
559			spin_unlock_bh(&mp->outlock);
560
561			break;
562		}
563
564		/* ups, drop packet */
565		printk(KERN_ERR "capi: put_message = %x\n", errcode);
566		kfree_skb(skb);
567	}
568	tty_kref_put(tty);
569}
570
571#endif /* CONFIG_ISDN_CAPI_MIDDLEWARE */
572/* -------- function called by lower level -------------------------- */
573
574static void capi_recv_message(struct capi20_appl *ap, struct sk_buff *skb)
575{
576	struct capidev *cdev = ap->private;
577#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
578	struct capiminor *mp;
579	u16 datahandle;
580	struct capincci *np;
581#endif /* CONFIG_ISDN_CAPI_MIDDLEWARE */
582
583	mutex_lock(&cdev->lock);
584
585	if (CAPIMSG_CMD(skb->data) == CAPI_CONNECT_B3_CONF) {
586		u16 info = CAPIMSG_U16(skb->data, 12); // Info field
587		if ((info & 0xff00) == 0)
588			capincci_alloc(cdev, CAPIMSG_NCCI(skb->data));
589	}
590	if (CAPIMSG_CMD(skb->data) == CAPI_CONNECT_B3_IND)
591		capincci_alloc(cdev, CAPIMSG_NCCI(skb->data));
592
593	if (CAPIMSG_COMMAND(skb->data) != CAPI_DATA_B3) {
594		skb_queue_tail(&cdev->recvqueue, skb);
595		wake_up_interruptible(&cdev->recvwait);
596		goto unlock_out;
597	}
598
599#ifndef CONFIG_ISDN_CAPI_MIDDLEWARE
600	skb_queue_tail(&cdev->recvqueue, skb);
601	wake_up_interruptible(&cdev->recvwait);
602
603#else /* CONFIG_ISDN_CAPI_MIDDLEWARE */
604
605	np = capincci_find(cdev, CAPIMSG_CONTROL(skb->data));
606	if (!np) {
607		printk(KERN_ERR "BUG: capi_signal: ncci not found\n");
608		skb_queue_tail(&cdev->recvqueue, skb);
609		wake_up_interruptible(&cdev->recvwait);
610		goto unlock_out;
611	}
612
613	mp = np->minorp;
614	if (!mp) {
615		skb_queue_tail(&cdev->recvqueue, skb);
616		wake_up_interruptible(&cdev->recvwait);
617		goto unlock_out;
618	}
619	if (CAPIMSG_SUBCOMMAND(skb->data) == CAPI_IND) {
620		datahandle = CAPIMSG_U16(skb->data, CAPIMSG_BASELEN + 4 + 4 + 2);
621		pr_debug("capi_signal: DATA_B3_IND %u len=%d\n",
622			 datahandle, skb->len-CAPIMSG_LEN(skb->data));
623		skb_queue_tail(&mp->inqueue, skb);
624
625		handle_minor_recv(mp);
626
627	} else if (CAPIMSG_SUBCOMMAND(skb->data) == CAPI_CONF) {
628
629		datahandle = CAPIMSG_U16(skb->data, CAPIMSG_BASELEN + 4);
630		pr_debug("capi_signal: DATA_B3_CONF %u 0x%x\n",
631			 datahandle,
632			 CAPIMSG_U16(skb->data, CAPIMSG_BASELEN + 4 + 2));
633		kfree_skb(skb);
634		capiminor_del_ack(mp, datahandle);
635		tty_port_tty_wakeup(&mp->port);
636		handle_minor_send(mp);
637
638	} else {
639		/* ups, let capi application handle it :-) */
640		skb_queue_tail(&cdev->recvqueue, skb);
641		wake_up_interruptible(&cdev->recvwait);
642	}
643#endif /* CONFIG_ISDN_CAPI_MIDDLEWARE */
644
645unlock_out:
646	mutex_unlock(&cdev->lock);
647}
648
649/* -------- file_operations for capidev ----------------------------- */
650
651static ssize_t
652capi_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)
653{
654	struct capidev *cdev = file->private_data;
655	struct sk_buff *skb;
656	size_t copied;
657	int err;
658
659	if (!cdev->ap.applid)
660		return -ENODEV;
661
662	skb = skb_dequeue(&cdev->recvqueue);
663	if (!skb) {
664		if (file->f_flags & O_NONBLOCK)
665			return -EAGAIN;
666		err = wait_event_interruptible(cdev->recvwait,
667					       (skb = skb_dequeue(&cdev->recvqueue)));
668		if (err)
669			return err;
670	}
671	if (skb->len > count) {
672		skb_queue_head(&cdev->recvqueue, skb);
673		return -EMSGSIZE;
674	}
675	if (copy_to_user(buf, skb->data, skb->len)) {
676		skb_queue_head(&cdev->recvqueue, skb);
677		return -EFAULT;
678	}
679	copied = skb->len;
680
681	kfree_skb(skb);
682
683	return copied;
684}
685
686static ssize_t
687capi_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)
688{
689	struct capidev *cdev = file->private_data;
690	struct sk_buff *skb;
691	u16 mlen;
692
693	if (!cdev->ap.applid)
694		return -ENODEV;
695
696	if (count < CAPIMSG_BASELEN)
697		return -EINVAL;
698
699	skb = alloc_skb(count, GFP_USER);
700	if (!skb)
701		return -ENOMEM;
702
703	if (copy_from_user(skb_put(skb, count), buf, count)) {
704		kfree_skb(skb);
705		return -EFAULT;
706	}
707	mlen = CAPIMSG_LEN(skb->data);
708	if (CAPIMSG_CMD(skb->data) == CAPI_DATA_B3_REQ) {
709		if (count < CAPI_DATA_B3_REQ_LEN ||
710		    (size_t)(mlen + CAPIMSG_DATALEN(skb->data)) != count) {
711			kfree_skb(skb);
712			return -EINVAL;
713		}
714	} else {
715		if (mlen != count) {
716			kfree_skb(skb);
717			return -EINVAL;
718		}
719	}
720	CAPIMSG_SETAPPID(skb->data, cdev->ap.applid);
721
722	if (CAPIMSG_CMD(skb->data) == CAPI_DISCONNECT_B3_RESP) {
723		if (count < CAPI_DISCONNECT_B3_RESP_LEN) {
724			kfree_skb(skb);
725			return -EINVAL;
726		}
727		mutex_lock(&cdev->lock);
728		capincci_free(cdev, CAPIMSG_NCCI(skb->data));
729		mutex_unlock(&cdev->lock);
730	}
731
732	cdev->errcode = capi20_put_message(&cdev->ap, skb);
733
734	if (cdev->errcode) {
735		kfree_skb(skb);
736		return -EIO;
737	}
738	return count;
739}
740
741static __poll_t
742capi_poll(struct file *file, poll_table *wait)
743{
744	struct capidev *cdev = file->private_data;
745	__poll_t mask = 0;
746
747	if (!cdev->ap.applid)
748		return EPOLLERR;
749
750	poll_wait(file, &(cdev->recvwait), wait);
751	mask = EPOLLOUT | EPOLLWRNORM;
752	if (!skb_queue_empty_lockless(&cdev->recvqueue))
753		mask |= EPOLLIN | EPOLLRDNORM;
754	return mask;
755}
756
757static int
758capi_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
759{
760	struct capidev *cdev = file->private_data;
761	capi_ioctl_struct data;
762	int retval = -EINVAL;
763	void __user *argp = (void __user *)arg;
764
765	switch (cmd) {
766	case CAPI_REGISTER:
767		mutex_lock(&cdev->lock);
768
769		if (cdev->ap.applid) {
770			retval = -EEXIST;
771			goto register_out;
772		}
773		if (copy_from_user(&cdev->ap.rparam, argp,
774				   sizeof(struct capi_register_params))) {
775			retval = -EFAULT;
776			goto register_out;
777		}
778		cdev->ap.private = cdev;
779		cdev->ap.recv_message = capi_recv_message;
780		cdev->errcode = capi20_register(&cdev->ap);
781		retval = (int)cdev->ap.applid;
782		if (cdev->errcode) {
783			cdev->ap.applid = 0;
784			retval = -EIO;
785		}
786
787register_out:
788		mutex_unlock(&cdev->lock);
789		return retval;
790
791	case CAPI_GET_VERSION:
792		if (copy_from_user(&data.contr, argp,
793				   sizeof(data.contr)))
794			return -EFAULT;
795		cdev->errcode = capi20_get_version(data.contr, &data.version);
796		if (cdev->errcode)
797			return -EIO;
798		if (copy_to_user(argp, &data.version,
799				 sizeof(data.version)))
800			return -EFAULT;
801		return 0;
802
803	case CAPI_GET_SERIAL:
804		if (copy_from_user(&data.contr, argp,
805				   sizeof(data.contr)))
806			return -EFAULT;
807		cdev->errcode = capi20_get_serial(data.contr, data.serial);
808		if (cdev->errcode)
809			return -EIO;
810		if (copy_to_user(argp, data.serial,
811				 sizeof(data.serial)))
812			return -EFAULT;
813		return 0;
814
815	case CAPI_GET_PROFILE:
816		if (copy_from_user(&data.contr, argp,
817				   sizeof(data.contr)))
818			return -EFAULT;
819
820		if (data.contr == 0) {
821			cdev->errcode = capi20_get_profile(data.contr, &data.profile);
822			if (cdev->errcode)
823				return -EIO;
824
825			retval = copy_to_user(argp,
826					      &data.profile.ncontroller,
827					      sizeof(data.profile.ncontroller));
828
829		} else {
830			cdev->errcode = capi20_get_profile(data.contr, &data.profile);
831			if (cdev->errcode)
832				return -EIO;
833
834			retval = copy_to_user(argp, &data.profile,
835					      sizeof(data.profile));
836		}
837		if (retval)
838			return -EFAULT;
839		return 0;
840
841	case CAPI_GET_MANUFACTURER:
842		if (copy_from_user(&data.contr, argp,
843				   sizeof(data.contr)))
844			return -EFAULT;
845		cdev->errcode = capi20_get_manufacturer(data.contr, data.manufacturer);
846		if (cdev->errcode)
847			return -EIO;
848
849		if (copy_to_user(argp, data.manufacturer,
850				 sizeof(data.manufacturer)))
851			return -EFAULT;
852
853		return 0;
854
855	case CAPI_GET_ERRCODE:
856		data.errcode = cdev->errcode;
857		cdev->errcode = CAPI_NOERROR;
858		if (arg) {
859			if (copy_to_user(argp, &data.errcode,
860					 sizeof(data.errcode)))
861				return -EFAULT;
862		}
863		return data.errcode;
864
865	case CAPI_INSTALLED:
866		if (capi20_isinstalled() == CAPI_NOERROR)
867			return 0;
868		return -ENXIO;
869
870	case CAPI_MANUFACTURER_CMD: {
871		struct capi_manufacturer_cmd mcmd;
872		if (!capable(CAP_SYS_ADMIN))
873			return -EPERM;
874		if (copy_from_user(&mcmd, argp, sizeof(mcmd)))
875			return -EFAULT;
876		return capi20_manufacturer(mcmd.cmd, mcmd.data);
877	}
878	case CAPI_SET_FLAGS:
879	case CAPI_CLR_FLAGS: {
880		unsigned userflags;
881
882		if (copy_from_user(&userflags, argp, sizeof(userflags)))
883			return -EFAULT;
884
885		mutex_lock(&cdev->lock);
886		if (cmd == CAPI_SET_FLAGS)
887			cdev->userflags |= userflags;
888		else
889			cdev->userflags &= ~userflags;
890		mutex_unlock(&cdev->lock);
891		return 0;
892	}
893	case CAPI_GET_FLAGS:
894		if (copy_to_user(argp, &cdev->userflags,
895				 sizeof(cdev->userflags)))
896			return -EFAULT;
897		return 0;
898
899#ifndef CONFIG_ISDN_CAPI_MIDDLEWARE
900	case CAPI_NCCI_OPENCOUNT:
901		return 0;
902
903#else /* CONFIG_ISDN_CAPI_MIDDLEWARE */
904	case CAPI_NCCI_OPENCOUNT: {
905		struct capincci *nccip;
906		unsigned ncci;
907		int count = 0;
908
909		if (copy_from_user(&ncci, argp, sizeof(ncci)))
910			return -EFAULT;
911
912		mutex_lock(&cdev->lock);
913		nccip = capincci_find(cdev, (u32)ncci);
914		if (nccip)
915			count = capincci_minor_opencount(nccip);
916		mutex_unlock(&cdev->lock);
917		return count;
918	}
919
920	case CAPI_NCCI_GETUNIT: {
921		struct capincci *nccip;
922		struct capiminor *mp;
923		unsigned ncci;
924		int unit = -ESRCH;
925
926		if (copy_from_user(&ncci, argp, sizeof(ncci)))
927			return -EFAULT;
928
929		mutex_lock(&cdev->lock);
930		nccip = capincci_find(cdev, (u32)ncci);
931		if (nccip) {
932			mp = nccip->minorp;
933			if (mp)
934				unit = mp->minor;
935		}
936		mutex_unlock(&cdev->lock);
937		return unit;
938	}
939#endif /* CONFIG_ISDN_CAPI_MIDDLEWARE */
940
941	default:
942		return -EINVAL;
943	}
944}
945
946static long
947capi_unlocked_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
948{
949	int ret;
950
951	mutex_lock(&capi_mutex);
952	ret = capi_ioctl(file, cmd, arg);
953	mutex_unlock(&capi_mutex);
954
955	return ret;
956}
957
958#ifdef CONFIG_COMPAT
959static long
960capi_compat_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
961{
962	int ret;
963
964	if (cmd == CAPI_MANUFACTURER_CMD) {
965		struct {
966			compat_ulong_t cmd;
967			compat_uptr_t data;
968		} mcmd32;
969
970		if (!capable(CAP_SYS_ADMIN))
971			return -EPERM;
972		if (copy_from_user(&mcmd32, compat_ptr(arg), sizeof(mcmd32)))
973			return -EFAULT;
974
975		mutex_lock(&capi_mutex);
976		ret = capi20_manufacturer(mcmd32.cmd, compat_ptr(mcmd32.data));
977		mutex_unlock(&capi_mutex);
978
979		return ret;
980	}
981
982	return capi_unlocked_ioctl(file, cmd, (unsigned long)compat_ptr(arg));
983}
984#endif
985
986static int capi_open(struct inode *inode, struct file *file)
987{
988	struct capidev *cdev;
989
990	cdev = kzalloc(sizeof(*cdev), GFP_KERNEL);
991	if (!cdev)
992		return -ENOMEM;
993
994	mutex_init(&cdev->lock);
995	skb_queue_head_init(&cdev->recvqueue);
996	init_waitqueue_head(&cdev->recvwait);
997	INIT_LIST_HEAD(&cdev->nccis);
998	file->private_data = cdev;
999
1000	mutex_lock(&capidev_list_lock);
1001	list_add_tail(&cdev->list, &capidev_list);
1002	mutex_unlock(&capidev_list_lock);
1003
1004	return stream_open(inode, file);
1005}
1006
1007static int capi_release(struct inode *inode, struct file *file)
1008{
1009	struct capidev *cdev = file->private_data;
1010
1011	mutex_lock(&capidev_list_lock);
1012	list_del(&cdev->list);
1013	mutex_unlock(&capidev_list_lock);
1014
1015	if (cdev->ap.applid)
1016		capi20_release(&cdev->ap);
1017	skb_queue_purge(&cdev->recvqueue);
1018	capincci_free(cdev, 0xffffffff);
1019
1020	kfree(cdev);
1021	return 0;
1022}
1023
1024static const struct file_operations capi_fops =
1025{
1026	.owner		= THIS_MODULE,
1027	.llseek		= no_llseek,
1028	.read		= capi_read,
1029	.write		= capi_write,
1030	.poll		= capi_poll,
1031	.unlocked_ioctl	= capi_unlocked_ioctl,
1032#ifdef CONFIG_COMPAT
1033	.compat_ioctl	= capi_compat_ioctl,
1034#endif
1035	.open		= capi_open,
1036	.release	= capi_release,
1037};
1038
1039#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
1040/* -------- tty_operations for capincci ----------------------------- */
1041
1042static int
1043capinc_tty_install(struct tty_driver *driver, struct tty_struct *tty)
1044{
1045	struct capiminor *mp = capiminor_get(tty->index);
1046	int ret = tty_standard_install(driver, tty);
1047
1048	if (ret == 0)
1049		tty->driver_data = mp;
1050	else
1051		capiminor_put(mp);
1052	return ret;
1053}
1054
1055static void capinc_tty_cleanup(struct tty_struct *tty)
1056{
1057	struct capiminor *mp = tty->driver_data;
1058	tty->driver_data = NULL;
1059	capiminor_put(mp);
1060}
1061
1062static int capinc_tty_open(struct tty_struct *tty, struct file *filp)
1063{
1064	struct capiminor *mp = tty->driver_data;
1065	int err;
1066
1067	err = tty_port_open(&mp->port, tty, filp);
1068	if (err)
1069		return err;
1070
1071	handle_minor_recv(mp);
1072	return 0;
1073}
1074
1075static void capinc_tty_close(struct tty_struct *tty, struct file *filp)
1076{
1077	struct capiminor *mp = tty->driver_data;
1078
1079	tty_port_close(&mp->port, tty, filp);
1080}
1081
1082static ssize_t capinc_tty_write(struct tty_struct *tty, const u8 *buf,
1083				size_t count)
1084{
1085	struct capiminor *mp = tty->driver_data;
1086	struct sk_buff *skb;
1087
1088	pr_debug("capinc_tty_write(count=%zu)\n", count);
1089
1090	spin_lock_bh(&mp->outlock);
1091	skb = mp->outskb;
1092	if (skb) {
1093		mp->outskb = NULL;
1094		__skb_queue_tail(&mp->outqueue, skb);
1095		mp->outbytes += skb->len;
1096	}
1097
1098	skb = alloc_skb(CAPI_DATA_B3_REQ_LEN + count, GFP_ATOMIC);
1099	if (!skb) {
1100		printk(KERN_ERR "capinc_tty_write: alloc_skb failed\n");
1101		spin_unlock_bh(&mp->outlock);
1102		return -ENOMEM;
1103	}
1104
1105	skb_reserve(skb, CAPI_DATA_B3_REQ_LEN);
1106	skb_put_data(skb, buf, count);
1107
1108	__skb_queue_tail(&mp->outqueue, skb);
1109	mp->outbytes += skb->len;
1110	spin_unlock_bh(&mp->outlock);
1111
1112	handle_minor_send(mp);
1113
1114	return count;
1115}
1116
1117static int capinc_tty_put_char(struct tty_struct *tty, u8 ch)
1118{
1119	struct capiminor *mp = tty->driver_data;
1120	bool invoke_send = false;
1121	struct sk_buff *skb;
1122	int ret = 1;
1123
1124	pr_debug("capinc_put_char(%u)\n", ch);
1125
1126	spin_lock_bh(&mp->outlock);
1127	skb = mp->outskb;
1128	if (skb) {
1129		if (skb_tailroom(skb) > 0) {
1130			skb_put_u8(skb, ch);
1131			goto unlock_out;
1132		}
1133		mp->outskb = NULL;
1134		__skb_queue_tail(&mp->outqueue, skb);
1135		mp->outbytes += skb->len;
1136		invoke_send = true;
1137	}
1138
1139	skb = alloc_skb(CAPI_DATA_B3_REQ_LEN + CAPI_MAX_BLKSIZE, GFP_ATOMIC);
1140	if (skb) {
1141		skb_reserve(skb, CAPI_DATA_B3_REQ_LEN);
1142		skb_put_u8(skb, ch);
1143		mp->outskb = skb;
1144	} else {
1145		printk(KERN_ERR "capinc_put_char: char %u lost\n", ch);
1146		ret = 0;
1147	}
1148
1149unlock_out:
1150	spin_unlock_bh(&mp->outlock);
1151
1152	if (invoke_send)
1153		handle_minor_send(mp);
1154
1155	return ret;
1156}
1157
1158static void capinc_tty_flush_chars(struct tty_struct *tty)
1159{
1160	struct capiminor *mp = tty->driver_data;
1161	struct sk_buff *skb;
1162
1163	spin_lock_bh(&mp->outlock);
1164	skb = mp->outskb;
1165	if (skb) {
1166		mp->outskb = NULL;
1167		__skb_queue_tail(&mp->outqueue, skb);
1168		mp->outbytes += skb->len;
1169		spin_unlock_bh(&mp->outlock);
1170
1171		handle_minor_send(mp);
1172	} else
1173		spin_unlock_bh(&mp->outlock);
1174
1175	handle_minor_recv(mp);
1176}
1177
1178static unsigned int capinc_tty_write_room(struct tty_struct *tty)
1179{
1180	struct capiminor *mp = tty->driver_data;
1181	unsigned int room;
1182
1183	room = CAPINC_MAX_SENDQUEUE-skb_queue_len(&mp->outqueue);
1184	room *= CAPI_MAX_BLKSIZE;
1185	pr_debug("capinc_tty_write_room = %u\n", room);
1186	return room;
1187}
1188
1189static unsigned int capinc_tty_chars_in_buffer(struct tty_struct *tty)
1190{
1191	struct capiminor *mp = tty->driver_data;
1192
1193	pr_debug("capinc_tty_chars_in_buffer = %d nack=%d sq=%d rq=%d\n",
1194		 mp->outbytes, mp->nack,
1195		 skb_queue_len(&mp->outqueue),
1196		 skb_queue_len(&mp->inqueue));
1197	return mp->outbytes;
1198}
1199
1200static void capinc_tty_throttle(struct tty_struct *tty)
1201{
1202	struct capiminor *mp = tty->driver_data;
1203	mp->ttyinstop = 1;
1204}
1205
1206static void capinc_tty_unthrottle(struct tty_struct *tty)
1207{
1208	struct capiminor *mp = tty->driver_data;
1209
1210	mp->ttyinstop = 0;
1211	handle_minor_recv(mp);
1212}
1213
1214static void capinc_tty_stop(struct tty_struct *tty)
1215{
1216	struct capiminor *mp = tty->driver_data;
1217
1218	mp->ttyoutstop = 1;
1219}
1220
1221static void capinc_tty_start(struct tty_struct *tty)
1222{
1223	struct capiminor *mp = tty->driver_data;
1224
1225	mp->ttyoutstop = 0;
1226	handle_minor_send(mp);
1227}
1228
1229static void capinc_tty_hangup(struct tty_struct *tty)
1230{
1231	struct capiminor *mp = tty->driver_data;
1232
1233	tty_port_hangup(&mp->port);
1234}
1235
1236static void capinc_tty_send_xchar(struct tty_struct *tty, u8 ch)
1237{
1238	pr_debug("capinc_tty_send_xchar(%u)\n", ch);
1239}
1240
1241static const struct tty_operations capinc_ops = {
1242	.open = capinc_tty_open,
1243	.close = capinc_tty_close,
1244	.write = capinc_tty_write,
1245	.put_char = capinc_tty_put_char,
1246	.flush_chars = capinc_tty_flush_chars,
1247	.write_room = capinc_tty_write_room,
1248	.chars_in_buffer = capinc_tty_chars_in_buffer,
1249	.throttle = capinc_tty_throttle,
1250	.unthrottle = capinc_tty_unthrottle,
1251	.stop = capinc_tty_stop,
1252	.start = capinc_tty_start,
1253	.hangup = capinc_tty_hangup,
1254	.send_xchar = capinc_tty_send_xchar,
1255	.install = capinc_tty_install,
1256	.cleanup = capinc_tty_cleanup,
1257};
1258
1259static int __init capinc_tty_init(void)
1260{
1261	struct tty_driver *drv;
1262	int err;
1263
1264	if (capi_ttyminors > CAPINC_MAX_PORTS)
1265		capi_ttyminors = CAPINC_MAX_PORTS;
1266	if (capi_ttyminors <= 0)
1267		capi_ttyminors = CAPINC_NR_PORTS;
1268
1269	capiminors = kcalloc(capi_ttyminors, sizeof(struct capiminor *),
1270			     GFP_KERNEL);
1271	if (!capiminors)
1272		return -ENOMEM;
1273
1274	drv = tty_alloc_driver(capi_ttyminors, TTY_DRIVER_REAL_RAW |
1275			TTY_DRIVER_RESET_TERMIOS | TTY_DRIVER_DYNAMIC_DEV);
1276	if (IS_ERR(drv)) {
1277		kfree(capiminors);
1278		return PTR_ERR(drv);
1279	}
1280	drv->driver_name = "capi_nc";
1281	drv->name = "capi!";
1282	drv->major = 0;
1283	drv->minor_start = 0;
1284	drv->type = TTY_DRIVER_TYPE_SERIAL;
1285	drv->subtype = SERIAL_TYPE_NORMAL;
1286	drv->init_termios = tty_std_termios;
1287	drv->init_termios.c_iflag = ICRNL;
1288	drv->init_termios.c_oflag = OPOST | ONLCR;
1289	drv->init_termios.c_cflag = B9600 | CS8 | CREAD | HUPCL | CLOCAL;
1290	drv->init_termios.c_lflag = 0;
1291	tty_set_operations(drv, &capinc_ops);
1292
1293	err = tty_register_driver(drv);
1294	if (err) {
1295		tty_driver_kref_put(drv);
1296		kfree(capiminors);
1297		printk(KERN_ERR "Couldn't register capi_nc driver\n");
1298		return err;
1299	}
1300	capinc_tty_driver = drv;
1301	return 0;
1302}
1303
1304static void __exit capinc_tty_exit(void)
1305{
1306	tty_unregister_driver(capinc_tty_driver);
1307	tty_driver_kref_put(capinc_tty_driver);
1308	kfree(capiminors);
1309}
1310
1311#else /* !CONFIG_ISDN_CAPI_MIDDLEWARE */
1312
1313static inline int capinc_tty_init(void)
1314{
1315	return 0;
1316}
1317
1318static inline void capinc_tty_exit(void) { }
1319
1320#endif /* !CONFIG_ISDN_CAPI_MIDDLEWARE */
1321
1322/* -------- /proc functions ----------------------------------------- */
1323
1324/*
1325 * /proc/capi/capi20:
1326 *  minor applid nrecvctlpkt nrecvdatapkt nsendctlpkt nsenddatapkt
1327 */
1328static int __maybe_unused capi20_proc_show(struct seq_file *m, void *v)
1329{
1330	struct capidev *cdev;
1331	struct list_head *l;
1332
1333	mutex_lock(&capidev_list_lock);
1334	list_for_each(l, &capidev_list) {
1335		cdev = list_entry(l, struct capidev, list);
1336		seq_printf(m, "0 %d %lu %lu %lu %lu\n",
1337			   cdev->ap.applid,
1338			   cdev->ap.nrecvctlpkt,
1339			   cdev->ap.nrecvdatapkt,
1340			   cdev->ap.nsentctlpkt,
1341			   cdev->ap.nsentdatapkt);
1342	}
1343	mutex_unlock(&capidev_list_lock);
1344	return 0;
1345}
1346
1347/*
1348 * /proc/capi/capi20ncci:
1349 *  applid ncci
1350 */
1351static int __maybe_unused capi20ncci_proc_show(struct seq_file *m, void *v)
1352{
1353	struct capidev *cdev;
1354	struct capincci *np;
1355
1356	mutex_lock(&capidev_list_lock);
1357	list_for_each_entry(cdev, &capidev_list, list) {
1358		mutex_lock(&cdev->lock);
1359		list_for_each_entry(np, &cdev->nccis, list)
1360			seq_printf(m, "%d 0x%x\n", cdev->ap.applid, np->ncci);
1361		mutex_unlock(&cdev->lock);
1362	}
1363	mutex_unlock(&capidev_list_lock);
1364	return 0;
1365}
1366
1367static void __init proc_init(void)
1368{
1369	proc_create_single("capi/capi20", 0, NULL, capi20_proc_show);
1370	proc_create_single("capi/capi20ncci", 0, NULL, capi20ncci_proc_show);
1371}
1372
1373static void __exit proc_exit(void)
1374{
1375	remove_proc_entry("capi/capi20", NULL);
1376	remove_proc_entry("capi/capi20ncci", NULL);
1377}
1378
1379/* -------- init function and module interface ---------------------- */
1380
1381
1382static int __init capi_init(void)
1383{
1384	const char *compileinfo;
1385	int major_ret;
1386	int ret;
1387
1388	ret = kcapi_init();
1389	if (ret)
1390		return ret;
1391
1392	major_ret = register_chrdev(capi_major, "capi20", &capi_fops);
1393	if (major_ret < 0) {
1394		printk(KERN_ERR "capi20: unable to get major %d\n", capi_major);
1395		kcapi_exit();
1396		return major_ret;
1397	}
1398
1399	ret = class_register(&capi_class);
1400	if (ret) {
1401		unregister_chrdev(capi_major, "capi20");
1402		kcapi_exit();
1403		return ret;
1404	}
1405
1406	device_create(&capi_class, NULL, MKDEV(capi_major, 0), NULL, "capi20");
1407
1408	if (capinc_tty_init() < 0) {
1409		device_destroy(&capi_class, MKDEV(capi_major, 0));
1410		class_unregister(&capi_class);
1411		unregister_chrdev(capi_major, "capi20");
1412		kcapi_exit();
1413		return -ENOMEM;
1414	}
1415
1416	proc_init();
1417
1418#ifdef CONFIG_ISDN_CAPI_MIDDLEWARE
1419	compileinfo = " (middleware)";
1420#else
1421	compileinfo = " (no middleware)";
1422#endif
1423	printk(KERN_NOTICE "CAPI 2.0 started up with major %d%s\n",
1424	       capi_major, compileinfo);
1425
1426	return 0;
1427}
1428
1429static void __exit capi_exit(void)
1430{
1431	proc_exit();
1432
1433	device_destroy(&capi_class, MKDEV(capi_major, 0));
1434	class_unregister(&capi_class);
1435	unregister_chrdev(capi_major, "capi20");
1436
1437	capinc_tty_exit();
1438
1439	kcapi_exit();
1440}
1441
1442module_init(capi_init);
1443module_exit(capi_exit);
1444