1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3 * USB CDC EEM network interface driver
4 * Copyright (C) 2009 Oberthur Technologies
5 * by Omar Laazimani, Olivier Condemine
6 */
7
8 #include <linux/module.h>
9 #include <linux/netdevice.h>
10 #include <linux/etherdevice.h>
11 #include <linux/ctype.h>
12 #include <linux/ethtool.h>
13 #include <linux/workqueue.h>
14 #include <linux/mii.h>
15 #include <linux/usb.h>
16 #include <linux/crc32.h>
17 #include <linux/usb/cdc.h>
18 #include <linux/usb/usbnet.h>
19 #include <linux/gfp.h>
20 #include <linux/if_vlan.h>
21
22
23 /*
24 * This driver is an implementation of the CDC "Ethernet Emulation
25 * Model" (EEM) specification, which encapsulates Ethernet frames
26 * for transport over USB using a simpler USB device model than the
27 * previous CDC "Ethernet Control Model" (ECM, or "CDC Ethernet").
28 *
29 * For details, see https://usb.org/sites/default/files/CDC_EEM10.pdf
30 *
31 * This version has been tested with GIGAntIC WuaoW SIM Smart Card on 2.6.24,
32 * 2.6.27 and 2.6.30rc2 kernel.
33 * It has also been validated on Openmoko Om 2008.12 (based on 2.6.24 kernel).
34 * build on 23-April-2009
35 */
36
37 #define EEM_HEAD 2 /* 2 byte header */
38
39 /*-------------------------------------------------------------------------*/
40
eem_linkcmd_complete(struct urb * urb)41 static void eem_linkcmd_complete(struct urb *urb)
42 {
43 dev_kfree_skb(urb->context);
44 usb_free_urb(urb);
45 }
46
eem_linkcmd(struct usbnet * dev,struct sk_buff * skb)47 static void eem_linkcmd(struct usbnet *dev, struct sk_buff *skb)
48 {
49 struct urb *urb;
50 int status;
51
52 urb = usb_alloc_urb(0, GFP_ATOMIC);
53 if (!urb)
54 goto fail;
55
56 usb_fill_bulk_urb(urb, dev->udev, dev->out,
57 skb->data, skb->len, eem_linkcmd_complete, skb);
58
59 status = usb_submit_urb(urb, GFP_ATOMIC);
60 if (status) {
61 usb_free_urb(urb);
62 fail:
63 dev_kfree_skb(skb);
64 netdev_warn(dev->net, "link cmd failure\n");
65 return;
66 }
67 }
68
eem_bind(struct usbnet * dev,struct usb_interface * intf)69 static int eem_bind(struct usbnet *dev, struct usb_interface *intf)
70 {
71 int status = 0;
72
73 status = usbnet_get_endpoints(dev, intf);
74 if (status < 0)
75 return status;
76
77 /* no jumbogram (16K) support for now */
78
79 dev->net->hard_header_len += EEM_HEAD + ETH_FCS_LEN + VLAN_HLEN;
80 dev->hard_mtu = dev->net->mtu + dev->net->hard_header_len;
81
82 return 0;
83 }
84
85 /*
86 * EEM permits packing multiple Ethernet frames into USB transfers
87 * (a "bundle"), but for TX we don't try to do that.
88 */
eem_tx_fixup(struct usbnet * dev,struct sk_buff * skb,gfp_t flags)89 static struct sk_buff *eem_tx_fixup(struct usbnet *dev, struct sk_buff *skb,
90 gfp_t flags)
91 {
92 struct sk_buff *skb2 = NULL;
93 u16 len = skb->len;
94 u32 crc = 0;
95 int padlen = 0;
96
97 /* When ((len + EEM_HEAD + ETH_FCS_LEN) % dev->maxpacket) is
98 * zero, stick two bytes of zero length EEM packet on the end.
99 * Else the framework would add invalid single byte padding,
100 * since it can't know whether ZLPs will be handled right by
101 * all the relevant hardware and software.
102 */
103 if (!((len + EEM_HEAD + ETH_FCS_LEN) % dev->maxpacket))
104 padlen += 2;
105
106 if (!skb_cloned(skb)) {
107 int headroom = skb_headroom(skb);
108 int tailroom = skb_tailroom(skb);
109
110 if ((tailroom >= ETH_FCS_LEN + padlen) &&
111 (headroom >= EEM_HEAD))
112 goto done;
113
114 if ((headroom + tailroom)
115 > (EEM_HEAD + ETH_FCS_LEN + padlen)) {
116 skb->data = memmove(skb->head +
117 EEM_HEAD,
118 skb->data,
119 skb->len);
120 skb_set_tail_pointer(skb, len);
121 goto done;
122 }
123 }
124
125 skb2 = skb_copy_expand(skb, EEM_HEAD, ETH_FCS_LEN + padlen, flags);
126 dev_kfree_skb_any(skb);
127 if (!skb2)
128 return NULL;
129
130 skb = skb2;
131
132 done:
133 /* we don't use the "no Ethernet CRC" option */
134 crc = crc32_le(~0, skb->data, skb->len);
135 crc = ~crc;
136
137 put_unaligned_le32(crc, skb_put(skb, 4));
138
139 /* EEM packet header format:
140 * b0..13: length of ethernet frame
141 * b14: bmCRC (1 == valid Ethernet CRC)
142 * b15: bmType (0 == data)
143 */
144 len = skb->len;
145 put_unaligned_le16(BIT(14) | len, skb_push(skb, 2));
146
147 /* Bundle a zero length EEM packet if needed */
148 if (padlen)
149 put_unaligned_le16(0, skb_put(skb, 2));
150
151 return skb;
152 }
153
eem_rx_fixup(struct usbnet * dev,struct sk_buff * skb)154 static int eem_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
155 {
156 /*
157 * Our task here is to strip off framing, leaving skb with one
158 * data frame for the usbnet framework code to process. But we
159 * may have received multiple EEM payloads, or command payloads.
160 * So we must process _everything_ as if it's a header, except
161 * maybe the last data payload
162 *
163 * REVISIT the framework needs updating so that when we consume
164 * all payloads (the last or only message was a command, or a
165 * zero length EEM packet) that is not accounted as an rx_error.
166 */
167 do {
168 struct sk_buff *skb2 = NULL;
169 u16 header;
170 u16 len = 0;
171
172 /* incomplete EEM header? */
173 if (skb->len < EEM_HEAD)
174 return 0;
175
176 /*
177 * EEM packet header format:
178 * b0..14: EEM type dependent (Data or Command)
179 * b15: bmType
180 */
181 header = get_unaligned_le16(skb->data);
182 skb_pull(skb, EEM_HEAD);
183
184 /*
185 * The bmType bit helps to denote when EEM
186 * packet is data or command :
187 * bmType = 0 : EEM data payload
188 * bmType = 1 : EEM (link) command
189 */
190 if (header & BIT(15)) {
191 u16 bmEEMCmd;
192
193 /*
194 * EEM (link) command packet:
195 * b0..10: bmEEMCmdParam
196 * b11..13: bmEEMCmd
197 * b14: bmReserved (must be 0)
198 * b15: 1 (EEM command)
199 */
200 if (header & BIT(14)) {
201 netdev_dbg(dev->net, "reserved command %04x\n",
202 header);
203 continue;
204 }
205
206 bmEEMCmd = (header >> 11) & 0x7;
207 switch (bmEEMCmd) {
208
209 /* Responding to echo requests is mandatory. */
210 case 0: /* Echo command */
211 len = header & 0x7FF;
212
213 /* bogus command? */
214 if (skb->len < len)
215 return 0;
216
217 skb2 = skb_clone(skb, GFP_ATOMIC);
218 if (unlikely(!skb2))
219 goto next;
220 skb_trim(skb2, len);
221 put_unaligned_le16(BIT(15) | BIT(11) | len,
222 skb_push(skb2, 2));
223 eem_linkcmd(dev, skb2);
224 break;
225
226 /*
227 * Host may choose to ignore hints.
228 * - suspend: peripheral ready to suspend
229 * - response: suggest N millisec polling
230 * - response complete: suggest N sec polling
231 *
232 * Suspend is reported and maybe heeded.
233 */
234 case 2: /* Suspend hint */
235 usbnet_device_suggests_idle(dev);
236 continue;
237 case 3: /* Response hint */
238 case 4: /* Response complete hint */
239 continue;
240
241 /*
242 * Hosts should never receive host-to-peripheral
243 * or reserved command codes; or responses to an
244 * echo command we didn't send.
245 */
246 case 1: /* Echo response */
247 case 5: /* Tickle */
248 default: /* reserved */
249 netdev_warn(dev->net,
250 "unexpected link command %d\n",
251 bmEEMCmd);
252 continue;
253 }
254
255 } else {
256 u32 crc, crc2;
257 int is_last;
258
259 /* zero length EEM packet? */
260 if (header == 0)
261 continue;
262
263 /*
264 * EEM data packet header :
265 * b0..13: length of ethernet frame
266 * b14: bmCRC
267 * b15: 0 (EEM data)
268 */
269 len = header & 0x3FFF;
270
271 /* bogus EEM payload? */
272 if (skb->len < len)
273 return 0;
274
275 /* bogus ethernet frame? */
276 if (len < (ETH_HLEN + ETH_FCS_LEN))
277 goto next;
278
279 /*
280 * Treat the last payload differently: framework
281 * code expects our "fixup" to have stripped off
282 * headers, so "skb" is a data packet (or error).
283 * Else if it's not the last payload, keep "skb"
284 * for further processing.
285 */
286 is_last = (len == skb->len);
287 if (is_last)
288 skb2 = skb;
289 else {
290 skb2 = skb_clone(skb, GFP_ATOMIC);
291 if (unlikely(!skb2))
292 return 0;
293 }
294
295 /*
296 * The bmCRC helps to denote when the CRC field in
297 * the Ethernet frame contains a calculated CRC:
298 * bmCRC = 1 : CRC is calculated
299 * bmCRC = 0 : CRC = 0xDEADBEEF
300 */
301 if (header & BIT(14)) {
302 crc = get_unaligned_le32(skb2->data
303 + len - ETH_FCS_LEN);
304 crc2 = ~crc32_le(~0, skb2->data, skb2->len
305 - ETH_FCS_LEN);
306 } else {
307 crc = get_unaligned_be32(skb2->data
308 + len - ETH_FCS_LEN);
309 crc2 = 0xdeadbeef;
310 }
311 skb_trim(skb2, len - ETH_FCS_LEN);
312
313 if (is_last)
314 return crc == crc2;
315
316 if (unlikely(crc != crc2)) {
317 dev->net->stats.rx_errors++;
318 dev_kfree_skb_any(skb2);
319 } else
320 usbnet_skb_return(dev, skb2);
321 }
322
323 next:
324 skb_pull(skb, len);
325 } while (skb->len);
326
327 return 1;
328 }
329
330 static const struct driver_info eem_info = {
331 .description = "CDC EEM Device",
332 .flags = FLAG_ETHER | FLAG_POINTTOPOINT,
333 .bind = eem_bind,
334 .rx_fixup = eem_rx_fixup,
335 .tx_fixup = eem_tx_fixup,
336 };
337
338 /*-------------------------------------------------------------------------*/
339
340 static const struct usb_device_id products[] = {
341 {
342 USB_INTERFACE_INFO(USB_CLASS_COMM, USB_CDC_SUBCLASS_EEM,
343 USB_CDC_PROTO_EEM),
344 .driver_info = (unsigned long) &eem_info,
345 },
346 {
347 /* EMPTY == end of list */
348 },
349 };
350 MODULE_DEVICE_TABLE(usb, products);
351
352 static struct usb_driver eem_driver = {
353 .name = "cdc_eem",
354 .id_table = products,
355 .probe = usbnet_probe,
356 .disconnect = usbnet_disconnect,
357 .suspend = usbnet_suspend,
358 .resume = usbnet_resume,
359 .disable_hub_initiated_lpm = 1,
360 };
361
362 module_usb_driver(eem_driver);
363
364 MODULE_AUTHOR("Omar Laazimani <omar.oberthur@gmail.com>");
365 MODULE_DESCRIPTION("USB CDC EEM");
366 MODULE_LICENSE("GPL");
367