1 // SPDX-License-Identifier: GPL-2.0
2 /* Copyright (C) B.A.T.M.A.N. contributors:
3  *
4  * Martin Hundebøll, Jeppe Ledet-Pedersen
5  */
6 
7 #include "network-coding.h"
8 #include "main.h"
9 
10 #include <linux/atomic.h>
11 #include <linux/bitops.h>
12 #include <linux/byteorder/generic.h>
13 #include <linux/compiler.h>
14 #include <linux/errno.h>
15 #include <linux/etherdevice.h>
16 #include <linux/gfp.h>
17 #include <linux/if_ether.h>
18 #include <linux/if_packet.h>
19 #include <linux/init.h>
20 #include <linux/jhash.h>
21 #include <linux/jiffies.h>
22 #include <linux/kernel.h>
23 #include <linux/kref.h>
24 #include <linux/list.h>
25 #include <linux/lockdep.h>
26 #include <linux/net.h>
27 #include <linux/netdevice.h>
28 #include <linux/prandom.h>
29 #include <linux/printk.h>
30 #include <linux/rculist.h>
31 #include <linux/rcupdate.h>
32 #include <linux/skbuff.h>
33 #include <linux/slab.h>
34 #include <linux/spinlock.h>
35 #include <linux/stddef.h>
36 #include <linux/string.h>
37 #include <linux/workqueue.h>
38 #include <uapi/linux/batadv_packet.h>
39 
40 #include "hash.h"
41 #include "log.h"
42 #include "originator.h"
43 #include "routing.h"
44 #include "send.h"
45 #include "tvlv.h"
46 
47 static struct lock_class_key batadv_nc_coding_hash_lock_class_key;
48 static struct lock_class_key batadv_nc_decoding_hash_lock_class_key;
49 
50 static void batadv_nc_worker(struct work_struct *work);
51 static int batadv_nc_recv_coded_packet(struct sk_buff *skb,
52 				       struct batadv_hard_iface *recv_if);
53 
54 /**
55  * batadv_nc_init() - one-time initialization for network coding
56  *
57  * Return: 0 on success or negative error number in case of failure
58  */
59 int __init batadv_nc_init(void)
60 {
61 	int ret;
62 
63 	/* Register our packet type */
64 	ret = batadv_recv_handler_register(BATADV_CODED,
65 					   batadv_nc_recv_coded_packet);
66 
67 	return ret;
68 }
69 
70 /**
71  * batadv_nc_start_timer() - initialise the nc periodic worker
72  * @bat_priv: the bat priv with all the soft interface information
73  */
74 static void batadv_nc_start_timer(struct batadv_priv *bat_priv)
75 {
76 	queue_delayed_work(batadv_event_workqueue, &bat_priv->nc.work,
77 			   msecs_to_jiffies(10));
78 }
79 
80 /**
81  * batadv_nc_tvlv_container_update() - update the network coding tvlv container
82  *  after network coding setting change
83  * @bat_priv: the bat priv with all the soft interface information
84  */
85 static void batadv_nc_tvlv_container_update(struct batadv_priv *bat_priv)
86 {
87 	char nc_mode;
88 
89 	nc_mode = atomic_read(&bat_priv->network_coding);
90 
91 	switch (nc_mode) {
92 	case 0:
93 		batadv_tvlv_container_unregister(bat_priv, BATADV_TVLV_NC, 1);
94 		break;
95 	case 1:
96 		batadv_tvlv_container_register(bat_priv, BATADV_TVLV_NC, 1,
97 					       NULL, 0);
98 		break;
99 	}
100 }
101 
102 /**
103  * batadv_nc_status_update() - update the network coding tvlv container after
104  *  network coding setting change
105  * @net_dev: the soft interface net device
106  */
107 void batadv_nc_status_update(struct net_device *net_dev)
108 {
109 	struct batadv_priv *bat_priv = netdev_priv(net_dev);
110 
111 	batadv_nc_tvlv_container_update(bat_priv);
112 }
113 
114 /**
115  * batadv_nc_tvlv_ogm_handler_v1() - process incoming nc tvlv container
116  * @bat_priv: the bat priv with all the soft interface information
117  * @orig: the orig_node of the ogm
118  * @flags: flags indicating the tvlv state (see batadv_tvlv_handler_flags)
119  * @tvlv_value: tvlv buffer containing the gateway data
120  * @tvlv_value_len: tvlv buffer length
121  */
122 static void batadv_nc_tvlv_ogm_handler_v1(struct batadv_priv *bat_priv,
123 					  struct batadv_orig_node *orig,
124 					  u8 flags,
125 					  void *tvlv_value, u16 tvlv_value_len)
126 {
127 	if (flags & BATADV_TVLV_HANDLER_OGM_CIFNOTFND)
128 		clear_bit(BATADV_ORIG_CAPA_HAS_NC, &orig->capabilities);
129 	else
130 		set_bit(BATADV_ORIG_CAPA_HAS_NC, &orig->capabilities);
131 }
132 
133 /**
134  * batadv_nc_mesh_init() - initialise coding hash table and start housekeeping
135  * @bat_priv: the bat priv with all the soft interface information
136  *
137  * Return: 0 on success or negative error number in case of failure
138  */
139 int batadv_nc_mesh_init(struct batadv_priv *bat_priv)
140 {
141 	bat_priv->nc.timestamp_fwd_flush = jiffies;
142 	bat_priv->nc.timestamp_sniffed_purge = jiffies;
143 
144 	if (bat_priv->nc.coding_hash || bat_priv->nc.decoding_hash)
145 		return 0;
146 
147 	bat_priv->nc.coding_hash = batadv_hash_new(128);
148 	if (!bat_priv->nc.coding_hash)
149 		goto err;
150 
151 	batadv_hash_set_lock_class(bat_priv->nc.coding_hash,
152 				   &batadv_nc_coding_hash_lock_class_key);
153 
154 	bat_priv->nc.decoding_hash = batadv_hash_new(128);
155 	if (!bat_priv->nc.decoding_hash) {
156 		batadv_hash_destroy(bat_priv->nc.coding_hash);
157 		goto err;
158 	}
159 
160 	batadv_hash_set_lock_class(bat_priv->nc.decoding_hash,
161 				   &batadv_nc_decoding_hash_lock_class_key);
162 
163 	INIT_DELAYED_WORK(&bat_priv->nc.work, batadv_nc_worker);
164 	batadv_nc_start_timer(bat_priv);
165 
166 	batadv_tvlv_handler_register(bat_priv, batadv_nc_tvlv_ogm_handler_v1,
167 				     NULL, BATADV_TVLV_NC, 1,
168 				     BATADV_TVLV_HANDLER_OGM_CIFNOTFND);
169 	batadv_nc_tvlv_container_update(bat_priv);
170 	return 0;
171 
172 err:
173 	return -ENOMEM;
174 }
175 
176 /**
177  * batadv_nc_init_bat_priv() - initialise the nc specific bat_priv variables
178  * @bat_priv: the bat priv with all the soft interface information
179  */
180 void batadv_nc_init_bat_priv(struct batadv_priv *bat_priv)
181 {
182 	atomic_set(&bat_priv->network_coding, 0);
183 	bat_priv->nc.min_tq = 200;
184 	bat_priv->nc.max_fwd_delay = 10;
185 	bat_priv->nc.max_buffer_time = 200;
186 }
187 
188 /**
189  * batadv_nc_init_orig() - initialise the nc fields of an orig_node
190  * @orig_node: the orig_node which is going to be initialised
191  */
192 void batadv_nc_init_orig(struct batadv_orig_node *orig_node)
193 {
194 	INIT_LIST_HEAD(&orig_node->in_coding_list);
195 	INIT_LIST_HEAD(&orig_node->out_coding_list);
196 	spin_lock_init(&orig_node->in_coding_list_lock);
197 	spin_lock_init(&orig_node->out_coding_list_lock);
198 }
199 
200 /**
201  * batadv_nc_node_release() - release nc_node from lists and queue for free
202  *  after rcu grace period
203  * @ref: kref pointer of the nc_node
204  */
205 static void batadv_nc_node_release(struct kref *ref)
206 {
207 	struct batadv_nc_node *nc_node;
208 
209 	nc_node = container_of(ref, struct batadv_nc_node, refcount);
210 
211 	batadv_orig_node_put(nc_node->orig_node);
212 	kfree_rcu(nc_node, rcu);
213 }
214 
215 /**
216  * batadv_nc_node_put() - decrement the nc_node refcounter and possibly
217  *  release it
218  * @nc_node: nc_node to be free'd
219  */
220 static void batadv_nc_node_put(struct batadv_nc_node *nc_node)
221 {
222 	if (!nc_node)
223 		return;
224 
225 	kref_put(&nc_node->refcount, batadv_nc_node_release);
226 }
227 
228 /**
229  * batadv_nc_path_release() - release nc_path from lists and queue for free
230  *  after rcu grace period
231  * @ref: kref pointer of the nc_path
232  */
233 static void batadv_nc_path_release(struct kref *ref)
234 {
235 	struct batadv_nc_path *nc_path;
236 
237 	nc_path = container_of(ref, struct batadv_nc_path, refcount);
238 
239 	kfree_rcu(nc_path, rcu);
240 }
241 
242 /**
243  * batadv_nc_path_put() - decrement the nc_path refcounter and possibly
244  *  release it
245  * @nc_path: nc_path to be free'd
246  */
247 static void batadv_nc_path_put(struct batadv_nc_path *nc_path)
248 {
249 	if (!nc_path)
250 		return;
251 
252 	kref_put(&nc_path->refcount, batadv_nc_path_release);
253 }
254 
255 /**
256  * batadv_nc_packet_free() - frees nc packet
257  * @nc_packet: the nc packet to free
258  * @dropped: whether the packet is freed because is dropped
259  */
260 static void batadv_nc_packet_free(struct batadv_nc_packet *nc_packet,
261 				  bool dropped)
262 {
263 	if (dropped)
264 		kfree_skb(nc_packet->skb);
265 	else
266 		consume_skb(nc_packet->skb);
267 
268 	batadv_nc_path_put(nc_packet->nc_path);
269 	kfree(nc_packet);
270 }
271 
272 /**
273  * batadv_nc_to_purge_nc_node() - checks whether an nc node has to be purged
274  * @bat_priv: the bat priv with all the soft interface information
275  * @nc_node: the nc node to check
276  *
277  * Return: true if the entry has to be purged now, false otherwise
278  */
279 static bool batadv_nc_to_purge_nc_node(struct batadv_priv *bat_priv,
280 				       struct batadv_nc_node *nc_node)
281 {
282 	if (atomic_read(&bat_priv->mesh_state) != BATADV_MESH_ACTIVE)
283 		return true;
284 
285 	return batadv_has_timed_out(nc_node->last_seen, BATADV_NC_NODE_TIMEOUT);
286 }
287 
288 /**
289  * batadv_nc_to_purge_nc_path_coding() - checks whether an nc path has timed out
290  * @bat_priv: the bat priv with all the soft interface information
291  * @nc_path: the nc path to check
292  *
293  * Return: true if the entry has to be purged now, false otherwise
294  */
295 static bool batadv_nc_to_purge_nc_path_coding(struct batadv_priv *bat_priv,
296 					      struct batadv_nc_path *nc_path)
297 {
298 	if (atomic_read(&bat_priv->mesh_state) != BATADV_MESH_ACTIVE)
299 		return true;
300 
301 	/* purge the path when no packets has been added for 10 times the
302 	 * max_fwd_delay time
303 	 */
304 	return batadv_has_timed_out(nc_path->last_valid,
305 				    bat_priv->nc.max_fwd_delay * 10);
306 }
307 
308 /**
309  * batadv_nc_to_purge_nc_path_decoding() - checks whether an nc path has timed
310  *  out
311  * @bat_priv: the bat priv with all the soft interface information
312  * @nc_path: the nc path to check
313  *
314  * Return: true if the entry has to be purged now, false otherwise
315  */
316 static bool batadv_nc_to_purge_nc_path_decoding(struct batadv_priv *bat_priv,
317 						struct batadv_nc_path *nc_path)
318 {
319 	if (atomic_read(&bat_priv->mesh_state) != BATADV_MESH_ACTIVE)
320 		return true;
321 
322 	/* purge the path when no packets has been added for 10 times the
323 	 * max_buffer time
324 	 */
325 	return batadv_has_timed_out(nc_path->last_valid,
326 				    bat_priv->nc.max_buffer_time * 10);
327 }
328 
329 /**
330  * batadv_nc_purge_orig_nc_nodes() - go through list of nc nodes and purge stale
331  *  entries
332  * @bat_priv: the bat priv with all the soft interface information
333  * @list: list of nc nodes
334  * @lock: nc node list lock
335  * @to_purge: function in charge to decide whether an entry has to be purged or
336  *	      not. This function takes the nc node as argument and has to return
337  *	      a boolean value: true if the entry has to be deleted, false
338  *	      otherwise
339  */
340 static void
341 batadv_nc_purge_orig_nc_nodes(struct batadv_priv *bat_priv,
342 			      struct list_head *list,
343 			      spinlock_t *lock,
344 			      bool (*to_purge)(struct batadv_priv *,
345 					       struct batadv_nc_node *))
346 {
347 	struct batadv_nc_node *nc_node, *nc_node_tmp;
348 
349 	/* For each nc_node in list */
350 	spin_lock_bh(lock);
351 	list_for_each_entry_safe(nc_node, nc_node_tmp, list, list) {
352 		/* if an helper function has been passed as parameter,
353 		 * ask it if the entry has to be purged or not
354 		 */
355 		if (to_purge && !to_purge(bat_priv, nc_node))
356 			continue;
357 
358 		batadv_dbg(BATADV_DBG_NC, bat_priv,
359 			   "Removing nc_node %pM -> %pM\n",
360 			   nc_node->addr, nc_node->orig_node->orig);
361 		list_del_rcu(&nc_node->list);
362 		batadv_nc_node_put(nc_node);
363 	}
364 	spin_unlock_bh(lock);
365 }
366 
367 /**
368  * batadv_nc_purge_orig() - purges all nc node data attached of the given
369  *  originator
370  * @bat_priv: the bat priv with all the soft interface information
371  * @orig_node: orig_node with the nc node entries to be purged
372  * @to_purge: function in charge to decide whether an entry has to be purged or
373  *	      not. This function takes the nc node as argument and has to return
374  *	      a boolean value: true is the entry has to be deleted, false
375  *	      otherwise
376  */
377 void batadv_nc_purge_orig(struct batadv_priv *bat_priv,
378 			  struct batadv_orig_node *orig_node,
379 			  bool (*to_purge)(struct batadv_priv *,
380 					   struct batadv_nc_node *))
381 {
382 	/* Check ingoing nc_node's of this orig_node */
383 	batadv_nc_purge_orig_nc_nodes(bat_priv, &orig_node->in_coding_list,
384 				      &orig_node->in_coding_list_lock,
385 				      to_purge);
386 
387 	/* Check outgoing nc_node's of this orig_node */
388 	batadv_nc_purge_orig_nc_nodes(bat_priv, &orig_node->out_coding_list,
389 				      &orig_node->out_coding_list_lock,
390 				      to_purge);
391 }
392 
393 /**
394  * batadv_nc_purge_orig_hash() - traverse entire originator hash to check if
395  *  they have timed out nc nodes
396  * @bat_priv: the bat priv with all the soft interface information
397  */
398 static void batadv_nc_purge_orig_hash(struct batadv_priv *bat_priv)
399 {
400 	struct batadv_hashtable *hash = bat_priv->orig_hash;
401 	struct hlist_head *head;
402 	struct batadv_orig_node *orig_node;
403 	u32 i;
404 
405 	if (!hash)
406 		return;
407 
408 	/* For each orig_node */
409 	for (i = 0; i < hash->size; i++) {
410 		head = &hash->table[i];
411 
412 		rcu_read_lock();
413 		hlist_for_each_entry_rcu(orig_node, head, hash_entry)
414 			batadv_nc_purge_orig(bat_priv, orig_node,
415 					     batadv_nc_to_purge_nc_node);
416 		rcu_read_unlock();
417 	}
418 }
419 
420 /**
421  * batadv_nc_purge_paths() - traverse all nc paths part of the hash and remove
422  *  unused ones
423  * @bat_priv: the bat priv with all the soft interface information
424  * @hash: hash table containing the nc paths to check
425  * @to_purge: function in charge to decide whether an entry has to be purged or
426  *	      not. This function takes the nc node as argument and has to return
427  *	      a boolean value: true is the entry has to be deleted, false
428  *	      otherwise
429  */
430 static void batadv_nc_purge_paths(struct batadv_priv *bat_priv,
431 				  struct batadv_hashtable *hash,
432 				  bool (*to_purge)(struct batadv_priv *,
433 						   struct batadv_nc_path *))
434 {
435 	struct hlist_head *head;
436 	struct hlist_node *node_tmp;
437 	struct batadv_nc_path *nc_path;
438 	spinlock_t *lock; /* Protects lists in hash */
439 	u32 i;
440 
441 	for (i = 0; i < hash->size; i++) {
442 		head = &hash->table[i];
443 		lock = &hash->list_locks[i];
444 
445 		/* For each nc_path in this bin */
446 		spin_lock_bh(lock);
447 		hlist_for_each_entry_safe(nc_path, node_tmp, head, hash_entry) {
448 			/* if an helper function has been passed as parameter,
449 			 * ask it if the entry has to be purged or not
450 			 */
451 			if (to_purge && !to_purge(bat_priv, nc_path))
452 				continue;
453 
454 			/* purging an non-empty nc_path should never happen, but
455 			 * is observed under high CPU load. Delay the purging
456 			 * until next iteration to allow the packet_list to be
457 			 * emptied first.
458 			 */
459 			if (!unlikely(list_empty(&nc_path->packet_list))) {
460 				net_ratelimited_function(printk,
461 							 KERN_WARNING
462 							 "Skipping free of non-empty nc_path (%pM -> %pM)!\n",
463 							 nc_path->prev_hop,
464 							 nc_path->next_hop);
465 				continue;
466 			}
467 
468 			/* nc_path is unused, so remove it */
469 			batadv_dbg(BATADV_DBG_NC, bat_priv,
470 				   "Remove nc_path %pM -> %pM\n",
471 				   nc_path->prev_hop, nc_path->next_hop);
472 			hlist_del_rcu(&nc_path->hash_entry);
473 			batadv_nc_path_put(nc_path);
474 		}
475 		spin_unlock_bh(lock);
476 	}
477 }
478 
479 /**
480  * batadv_nc_hash_key_gen() - computes the nc_path hash key
481  * @key: buffer to hold the final hash key
482  * @src: source ethernet mac address going into the hash key
483  * @dst: destination ethernet mac address going into the hash key
484  */
485 static void batadv_nc_hash_key_gen(struct batadv_nc_path *key, const char *src,
486 				   const char *dst)
487 {
488 	memcpy(key->prev_hop, src, sizeof(key->prev_hop));
489 	memcpy(key->next_hop, dst, sizeof(key->next_hop));
490 }
491 
492 /**
493  * batadv_nc_hash_choose() - compute the hash value for an nc path
494  * @data: data to hash
495  * @size: size of the hash table
496  *
497  * Return: the selected index in the hash table for the given data.
498  */
499 static u32 batadv_nc_hash_choose(const void *data, u32 size)
500 {
501 	const struct batadv_nc_path *nc_path = data;
502 	u32 hash = 0;
503 
504 	hash = jhash(&nc_path->prev_hop, sizeof(nc_path->prev_hop), hash);
505 	hash = jhash(&nc_path->next_hop, sizeof(nc_path->next_hop), hash);
506 
507 	return hash % size;
508 }
509 
510 /**
511  * batadv_nc_hash_compare() - comparing function used in the network coding hash
512  *  tables
513  * @node: node in the local table
514  * @data2: second object to compare the node to
515  *
516  * Return: true if the two entry are the same, false otherwise
517  */
518 static bool batadv_nc_hash_compare(const struct hlist_node *node,
519 				   const void *data2)
520 {
521 	const struct batadv_nc_path *nc_path1, *nc_path2;
522 
523 	nc_path1 = container_of(node, struct batadv_nc_path, hash_entry);
524 	nc_path2 = data2;
525 
526 	/* Return 1 if the two keys are identical */
527 	if (!batadv_compare_eth(nc_path1->prev_hop, nc_path2->prev_hop))
528 		return false;
529 
530 	if (!batadv_compare_eth(nc_path1->next_hop, nc_path2->next_hop))
531 		return false;
532 
533 	return true;
534 }
535 
536 /**
537  * batadv_nc_hash_find() - search for an existing nc path and return it
538  * @hash: hash table containing the nc path
539  * @data: search key
540  *
541  * Return: the nc_path if found, NULL otherwise.
542  */
543 static struct batadv_nc_path *
544 batadv_nc_hash_find(struct batadv_hashtable *hash,
545 		    void *data)
546 {
547 	struct hlist_head *head;
548 	struct batadv_nc_path *nc_path, *nc_path_tmp = NULL;
549 	int index;
550 
551 	if (!hash)
552 		return NULL;
553 
554 	index = batadv_nc_hash_choose(data, hash->size);
555 	head = &hash->table[index];
556 
557 	rcu_read_lock();
558 	hlist_for_each_entry_rcu(nc_path, head, hash_entry) {
559 		if (!batadv_nc_hash_compare(&nc_path->hash_entry, data))
560 			continue;
561 
562 		if (!kref_get_unless_zero(&nc_path->refcount))
563 			continue;
564 
565 		nc_path_tmp = nc_path;
566 		break;
567 	}
568 	rcu_read_unlock();
569 
570 	return nc_path_tmp;
571 }
572 
573 /**
574  * batadv_nc_send_packet() - send non-coded packet and free nc_packet struct
575  * @nc_packet: the nc packet to send
576  */
577 static void batadv_nc_send_packet(struct batadv_nc_packet *nc_packet)
578 {
579 	batadv_send_unicast_skb(nc_packet->skb, nc_packet->neigh_node);
580 	nc_packet->skb = NULL;
581 	batadv_nc_packet_free(nc_packet, false);
582 }
583 
584 /**
585  * batadv_nc_sniffed_purge() - Checks timestamp of given sniffed nc_packet.
586  * @bat_priv: the bat priv with all the soft interface information
587  * @nc_path: the nc path the packet belongs to
588  * @nc_packet: the nc packet to be checked
589  *
590  * Checks whether the given sniffed (overheard) nc_packet has hit its buffering
591  * timeout. If so, the packet is no longer kept and the entry deleted from the
592  * queue. Has to be called with the appropriate locks.
593  *
594  * Return: false as soon as the entry in the fifo queue has not been timed out
595  * yet and true otherwise.
596  */
597 static bool batadv_nc_sniffed_purge(struct batadv_priv *bat_priv,
598 				    struct batadv_nc_path *nc_path,
599 				    struct batadv_nc_packet *nc_packet)
600 {
601 	unsigned long timeout = bat_priv->nc.max_buffer_time;
602 	bool res = false;
603 
604 	lockdep_assert_held(&nc_path->packet_list_lock);
605 
606 	/* Packets are added to tail, so the remaining packets did not time
607 	 * out and we can stop processing the current queue
608 	 */
609 	if (atomic_read(&bat_priv->mesh_state) == BATADV_MESH_ACTIVE &&
610 	    !batadv_has_timed_out(nc_packet->timestamp, timeout))
611 		goto out;
612 
613 	/* purge nc packet */
614 	list_del(&nc_packet->list);
615 	batadv_nc_packet_free(nc_packet, true);
616 
617 	res = true;
618 
619 out:
620 	return res;
621 }
622 
623 /**
624  * batadv_nc_fwd_flush() - Checks the timestamp of the given nc packet.
625  * @bat_priv: the bat priv with all the soft interface information
626  * @nc_path: the nc path the packet belongs to
627  * @nc_packet: the nc packet to be checked
628  *
629  * Checks whether the given nc packet has hit its forward timeout. If so, the
630  * packet is no longer delayed, immediately sent and the entry deleted from the
631  * queue. Has to be called with the appropriate locks.
632  *
633  * Return: false as soon as the entry in the fifo queue has not been timed out
634  * yet and true otherwise.
635  */
636 static bool batadv_nc_fwd_flush(struct batadv_priv *bat_priv,
637 				struct batadv_nc_path *nc_path,
638 				struct batadv_nc_packet *nc_packet)
639 {
640 	unsigned long timeout = bat_priv->nc.max_fwd_delay;
641 
642 	lockdep_assert_held(&nc_path->packet_list_lock);
643 
644 	/* Packets are added to tail, so the remaining packets did not time
645 	 * out and we can stop processing the current queue
646 	 */
647 	if (atomic_read(&bat_priv->mesh_state) == BATADV_MESH_ACTIVE &&
648 	    !batadv_has_timed_out(nc_packet->timestamp, timeout))
649 		return false;
650 
651 	/* Send packet */
652 	batadv_inc_counter(bat_priv, BATADV_CNT_FORWARD);
653 	batadv_add_counter(bat_priv, BATADV_CNT_FORWARD_BYTES,
654 			   nc_packet->skb->len + ETH_HLEN);
655 	list_del(&nc_packet->list);
656 	batadv_nc_send_packet(nc_packet);
657 
658 	return true;
659 }
660 
661 /**
662  * batadv_nc_process_nc_paths() - traverse given nc packet pool and free timed
663  *  out nc packets
664  * @bat_priv: the bat priv with all the soft interface information
665  * @hash: to be processed hash table
666  * @process_fn: Function called to process given nc packet. Should return true
667  *	        to encourage this function to proceed with the next packet.
668  *	        Otherwise the rest of the current queue is skipped.
669  */
670 static void
671 batadv_nc_process_nc_paths(struct batadv_priv *bat_priv,
672 			   struct batadv_hashtable *hash,
673 			   bool (*process_fn)(struct batadv_priv *,
674 					      struct batadv_nc_path *,
675 					      struct batadv_nc_packet *))
676 {
677 	struct hlist_head *head;
678 	struct batadv_nc_packet *nc_packet, *nc_packet_tmp;
679 	struct batadv_nc_path *nc_path;
680 	bool ret;
681 	int i;
682 
683 	if (!hash)
684 		return;
685 
686 	/* Loop hash table bins */
687 	for (i = 0; i < hash->size; i++) {
688 		head = &hash->table[i];
689 
690 		/* Loop coding paths */
691 		rcu_read_lock();
692 		hlist_for_each_entry_rcu(nc_path, head, hash_entry) {
693 			/* Loop packets */
694 			spin_lock_bh(&nc_path->packet_list_lock);
695 			list_for_each_entry_safe(nc_packet, nc_packet_tmp,
696 						 &nc_path->packet_list, list) {
697 				ret = process_fn(bat_priv, nc_path, nc_packet);
698 				if (!ret)
699 					break;
700 			}
701 			spin_unlock_bh(&nc_path->packet_list_lock);
702 		}
703 		rcu_read_unlock();
704 	}
705 }
706 
707 /**
708  * batadv_nc_worker() - periodic task for housekeeping related to network
709  *  coding
710  * @work: kernel work struct
711  */
712 static void batadv_nc_worker(struct work_struct *work)
713 {
714 	struct delayed_work *delayed_work;
715 	struct batadv_priv_nc *priv_nc;
716 	struct batadv_priv *bat_priv;
717 	unsigned long timeout;
718 
719 	delayed_work = to_delayed_work(work);
720 	priv_nc = container_of(delayed_work, struct batadv_priv_nc, work);
721 	bat_priv = container_of(priv_nc, struct batadv_priv, nc);
722 
723 	batadv_nc_purge_orig_hash(bat_priv);
724 	batadv_nc_purge_paths(bat_priv, bat_priv->nc.coding_hash,
725 			      batadv_nc_to_purge_nc_path_coding);
726 	batadv_nc_purge_paths(bat_priv, bat_priv->nc.decoding_hash,
727 			      batadv_nc_to_purge_nc_path_decoding);
728 
729 	timeout = bat_priv->nc.max_fwd_delay;
730 
731 	if (batadv_has_timed_out(bat_priv->nc.timestamp_fwd_flush, timeout)) {
732 		batadv_nc_process_nc_paths(bat_priv, bat_priv->nc.coding_hash,
733 					   batadv_nc_fwd_flush);
734 		bat_priv->nc.timestamp_fwd_flush = jiffies;
735 	}
736 
737 	if (batadv_has_timed_out(bat_priv->nc.timestamp_sniffed_purge,
738 				 bat_priv->nc.max_buffer_time)) {
739 		batadv_nc_process_nc_paths(bat_priv, bat_priv->nc.decoding_hash,
740 					   batadv_nc_sniffed_purge);
741 		bat_priv->nc.timestamp_sniffed_purge = jiffies;
742 	}
743 
744 	/* Schedule a new check */
745 	batadv_nc_start_timer(bat_priv);
746 }
747 
748 /**
749  * batadv_can_nc_with_orig() - checks whether the given orig node is suitable
750  *  for coding or not
751  * @bat_priv: the bat priv with all the soft interface information
752  * @orig_node: neighboring orig node which may be used as nc candidate
753  * @ogm_packet: incoming ogm packet also used for the checks
754  *
755  * Return: true if:
756  *  1) The OGM must have the most recent sequence number.
757  *  2) The TTL must be decremented by one and only one.
758  *  3) The OGM must be received from the first hop from orig_node.
759  *  4) The TQ value of the OGM must be above bat_priv->nc.min_tq.
760  */
761 static bool batadv_can_nc_with_orig(struct batadv_priv *bat_priv,
762 				    struct batadv_orig_node *orig_node,
763 				    struct batadv_ogm_packet *ogm_packet)
764 {
765 	struct batadv_orig_ifinfo *orig_ifinfo;
766 	u32 last_real_seqno;
767 	u8 last_ttl;
768 
769 	orig_ifinfo = batadv_orig_ifinfo_get(orig_node, BATADV_IF_DEFAULT);
770 	if (!orig_ifinfo)
771 		return false;
772 
773 	last_ttl = orig_ifinfo->last_ttl;
774 	last_real_seqno = orig_ifinfo->last_real_seqno;
775 	batadv_orig_ifinfo_put(orig_ifinfo);
776 
777 	if (last_real_seqno != ntohl(ogm_packet->seqno))
778 		return false;
779 	if (last_ttl != ogm_packet->ttl + 1)
780 		return false;
781 	if (!batadv_compare_eth(ogm_packet->orig, ogm_packet->prev_sender))
782 		return false;
783 	if (ogm_packet->tq < bat_priv->nc.min_tq)
784 		return false;
785 
786 	return true;
787 }
788 
789 /**
790  * batadv_nc_find_nc_node() - search for an existing nc node and return it
791  * @orig_node: orig node originating the ogm packet
792  * @orig_neigh_node: neighboring orig node from which we received the ogm packet
793  *  (can be equal to orig_node)
794  * @in_coding: traverse incoming or outgoing network coding list
795  *
796  * Return: the nc_node if found, NULL otherwise.
797  */
798 static struct batadv_nc_node *
799 batadv_nc_find_nc_node(struct batadv_orig_node *orig_node,
800 		       struct batadv_orig_node *orig_neigh_node,
801 		       bool in_coding)
802 {
803 	struct batadv_nc_node *nc_node, *nc_node_out = NULL;
804 	struct list_head *list;
805 
806 	if (in_coding)
807 		list = &orig_neigh_node->in_coding_list;
808 	else
809 		list = &orig_neigh_node->out_coding_list;
810 
811 	/* Traverse list of nc_nodes to orig_node */
812 	rcu_read_lock();
813 	list_for_each_entry_rcu(nc_node, list, list) {
814 		if (!batadv_compare_eth(nc_node->addr, orig_node->orig))
815 			continue;
816 
817 		if (!kref_get_unless_zero(&nc_node->refcount))
818 			continue;
819 
820 		/* Found a match */
821 		nc_node_out = nc_node;
822 		break;
823 	}
824 	rcu_read_unlock();
825 
826 	return nc_node_out;
827 }
828 
829 /**
830  * batadv_nc_get_nc_node() - retrieves an nc node or creates the entry if it was
831  *  not found
832  * @bat_priv: the bat priv with all the soft interface information
833  * @orig_node: orig node originating the ogm packet
834  * @orig_neigh_node: neighboring orig node from which we received the ogm packet
835  *  (can be equal to orig_node)
836  * @in_coding: traverse incoming or outgoing network coding list
837  *
838  * Return: the nc_node if found or created, NULL in case of an error.
839  */
840 static struct batadv_nc_node *
841 batadv_nc_get_nc_node(struct batadv_priv *bat_priv,
842 		      struct batadv_orig_node *orig_node,
843 		      struct batadv_orig_node *orig_neigh_node,
844 		      bool in_coding)
845 {
846 	struct batadv_nc_node *nc_node;
847 	spinlock_t *lock; /* Used to lock list selected by "int in_coding" */
848 	struct list_head *list;
849 
850 	/* Select ingoing or outgoing coding node */
851 	if (in_coding) {
852 		lock = &orig_neigh_node->in_coding_list_lock;
853 		list = &orig_neigh_node->in_coding_list;
854 	} else {
855 		lock = &orig_neigh_node->out_coding_list_lock;
856 		list = &orig_neigh_node->out_coding_list;
857 	}
858 
859 	spin_lock_bh(lock);
860 
861 	/* Check if nc_node is already added */
862 	nc_node = batadv_nc_find_nc_node(orig_node, orig_neigh_node, in_coding);
863 
864 	/* Node found */
865 	if (nc_node)
866 		goto unlock;
867 
868 	nc_node = kzalloc(sizeof(*nc_node), GFP_ATOMIC);
869 	if (!nc_node)
870 		goto unlock;
871 
872 	/* Initialize nc_node */
873 	INIT_LIST_HEAD(&nc_node->list);
874 	kref_init(&nc_node->refcount);
875 	ether_addr_copy(nc_node->addr, orig_node->orig);
876 	kref_get(&orig_neigh_node->refcount);
877 	nc_node->orig_node = orig_neigh_node;
878 
879 	batadv_dbg(BATADV_DBG_NC, bat_priv, "Adding nc_node %pM -> %pM\n",
880 		   nc_node->addr, nc_node->orig_node->orig);
881 
882 	/* Add nc_node to orig_node */
883 	kref_get(&nc_node->refcount);
884 	list_add_tail_rcu(&nc_node->list, list);
885 
886 unlock:
887 	spin_unlock_bh(lock);
888 
889 	return nc_node;
890 }
891 
892 /**
893  * batadv_nc_update_nc_node() - updates stored incoming and outgoing nc node
894  *  structs (best called on incoming OGMs)
895  * @bat_priv: the bat priv with all the soft interface information
896  * @orig_node: orig node originating the ogm packet
897  * @orig_neigh_node: neighboring orig node from which we received the ogm packet
898  *  (can be equal to orig_node)
899  * @ogm_packet: incoming ogm packet
900  * @is_single_hop_neigh: orig_node is a single hop neighbor
901  */
902 void batadv_nc_update_nc_node(struct batadv_priv *bat_priv,
903 			      struct batadv_orig_node *orig_node,
904 			      struct batadv_orig_node *orig_neigh_node,
905 			      struct batadv_ogm_packet *ogm_packet,
906 			      int is_single_hop_neigh)
907 {
908 	struct batadv_nc_node *in_nc_node = NULL;
909 	struct batadv_nc_node *out_nc_node = NULL;
910 
911 	/* Check if network coding is enabled */
912 	if (!atomic_read(&bat_priv->network_coding))
913 		goto out;
914 
915 	/* check if orig node is network coding enabled */
916 	if (!test_bit(BATADV_ORIG_CAPA_HAS_NC, &orig_node->capabilities))
917 		goto out;
918 
919 	/* accept ogms from 'good' neighbors and single hop neighbors */
920 	if (!batadv_can_nc_with_orig(bat_priv, orig_node, ogm_packet) &&
921 	    !is_single_hop_neigh)
922 		goto out;
923 
924 	/* Add orig_node as in_nc_node on hop */
925 	in_nc_node = batadv_nc_get_nc_node(bat_priv, orig_node,
926 					   orig_neigh_node, true);
927 	if (!in_nc_node)
928 		goto out;
929 
930 	in_nc_node->last_seen = jiffies;
931 
932 	/* Add hop as out_nc_node on orig_node */
933 	out_nc_node = batadv_nc_get_nc_node(bat_priv, orig_neigh_node,
934 					    orig_node, false);
935 	if (!out_nc_node)
936 		goto out;
937 
938 	out_nc_node->last_seen = jiffies;
939 
940 out:
941 	batadv_nc_node_put(in_nc_node);
942 	batadv_nc_node_put(out_nc_node);
943 }
944 
945 /**
946  * batadv_nc_get_path() - get existing nc_path or allocate a new one
947  * @bat_priv: the bat priv with all the soft interface information
948  * @hash: hash table containing the nc path
949  * @src: ethernet source address - first half of the nc path search key
950  * @dst: ethernet destination address - second half of the nc path search key
951  *
952  * Return: pointer to nc_path if the path was found or created, returns NULL
953  * on error.
954  */
955 static struct batadv_nc_path *batadv_nc_get_path(struct batadv_priv *bat_priv,
956 						 struct batadv_hashtable *hash,
957 						 u8 *src,
958 						 u8 *dst)
959 {
960 	int hash_added;
961 	struct batadv_nc_path *nc_path, nc_path_key;
962 
963 	batadv_nc_hash_key_gen(&nc_path_key, src, dst);
964 
965 	/* Search for existing nc_path */
966 	nc_path = batadv_nc_hash_find(hash, (void *)&nc_path_key);
967 
968 	if (nc_path) {
969 		/* Set timestamp to delay removal of nc_path */
970 		nc_path->last_valid = jiffies;
971 		return nc_path;
972 	}
973 
974 	/* No existing nc_path was found; create a new */
975 	nc_path = kzalloc(sizeof(*nc_path), GFP_ATOMIC);
976 
977 	if (!nc_path)
978 		return NULL;
979 
980 	/* Initialize nc_path */
981 	INIT_LIST_HEAD(&nc_path->packet_list);
982 	spin_lock_init(&nc_path->packet_list_lock);
983 	kref_init(&nc_path->refcount);
984 	nc_path->last_valid = jiffies;
985 	ether_addr_copy(nc_path->next_hop, dst);
986 	ether_addr_copy(nc_path->prev_hop, src);
987 
988 	batadv_dbg(BATADV_DBG_NC, bat_priv, "Adding nc_path %pM -> %pM\n",
989 		   nc_path->prev_hop,
990 		   nc_path->next_hop);
991 
992 	/* Add nc_path to hash table */
993 	kref_get(&nc_path->refcount);
994 	hash_added = batadv_hash_add(hash, batadv_nc_hash_compare,
995 				     batadv_nc_hash_choose, &nc_path_key,
996 				     &nc_path->hash_entry);
997 
998 	if (hash_added < 0) {
999 		kfree(nc_path);
1000 		return NULL;
1001 	}
1002 
1003 	return nc_path;
1004 }
1005 
1006 /**
1007  * batadv_nc_random_weight_tq() - scale the receivers TQ-value to avoid unfair
1008  *  selection of a receiver with slightly lower TQ than the other
1009  * @tq: to be weighted tq value
1010  *
1011  * Return: scaled tq value
1012  */
1013 static u8 batadv_nc_random_weight_tq(u8 tq)
1014 {
1015 	/* randomize the estimated packet loss (max TQ - estimated TQ) */
1016 	u8 rand_tq = prandom_u32_max(BATADV_TQ_MAX_VALUE + 1 - tq);
1017 
1018 	/* convert to (randomized) estimated tq again */
1019 	return BATADV_TQ_MAX_VALUE - rand_tq;
1020 }
1021 
1022 /**
1023  * batadv_nc_memxor() - XOR destination with source
1024  * @dst: byte array to XOR into
1025  * @src: byte array to XOR from
1026  * @len: length of destination array
1027  */
1028 static void batadv_nc_memxor(char *dst, const char *src, unsigned int len)
1029 {
1030 	unsigned int i;
1031 
1032 	for (i = 0; i < len; ++i)
1033 		dst[i] ^= src[i];
1034 }
1035 
1036 /**
1037  * batadv_nc_code_packets() - code a received unicast_packet with an nc packet
1038  *  into a coded_packet and send it
1039  * @bat_priv: the bat priv with all the soft interface information
1040  * @skb: data skb to forward
1041  * @ethhdr: pointer to the ethernet header inside the skb
1042  * @nc_packet: structure containing the packet to the skb can be coded with
1043  * @neigh_node: next hop to forward packet to
1044  *
1045  * Return: true if both packets are consumed, false otherwise.
1046  */
1047 static bool batadv_nc_code_packets(struct batadv_priv *bat_priv,
1048 				   struct sk_buff *skb,
1049 				   struct ethhdr *ethhdr,
1050 				   struct batadv_nc_packet *nc_packet,
1051 				   struct batadv_neigh_node *neigh_node)
1052 {
1053 	u8 tq_weighted_neigh, tq_weighted_coding, tq_tmp;
1054 	struct sk_buff *skb_dest, *skb_src;
1055 	struct batadv_unicast_packet *packet1;
1056 	struct batadv_unicast_packet *packet2;
1057 	struct batadv_coded_packet *coded_packet;
1058 	struct batadv_neigh_node *neigh_tmp, *router_neigh, *first_dest;
1059 	struct batadv_neigh_node *router_coding = NULL, *second_dest;
1060 	struct batadv_neigh_ifinfo *router_neigh_ifinfo = NULL;
1061 	struct batadv_neigh_ifinfo *router_coding_ifinfo = NULL;
1062 	u8 *first_source, *second_source;
1063 	__be32 packet_id1, packet_id2;
1064 	size_t count;
1065 	bool res = false;
1066 	int coding_len;
1067 	int unicast_size = sizeof(*packet1);
1068 	int coded_size = sizeof(*coded_packet);
1069 	int header_add = coded_size - unicast_size;
1070 
1071 	/* TODO: do we need to consider the outgoing interface for
1072 	 * coded packets?
1073 	 */
1074 	router_neigh = batadv_orig_router_get(neigh_node->orig_node,
1075 					      BATADV_IF_DEFAULT);
1076 	if (!router_neigh)
1077 		goto out;
1078 
1079 	router_neigh_ifinfo = batadv_neigh_ifinfo_get(router_neigh,
1080 						      BATADV_IF_DEFAULT);
1081 	if (!router_neigh_ifinfo)
1082 		goto out;
1083 
1084 	neigh_tmp = nc_packet->neigh_node;
1085 	router_coding = batadv_orig_router_get(neigh_tmp->orig_node,
1086 					       BATADV_IF_DEFAULT);
1087 	if (!router_coding)
1088 		goto out;
1089 
1090 	router_coding_ifinfo = batadv_neigh_ifinfo_get(router_coding,
1091 						       BATADV_IF_DEFAULT);
1092 	if (!router_coding_ifinfo)
1093 		goto out;
1094 
1095 	tq_tmp = router_neigh_ifinfo->bat_iv.tq_avg;
1096 	tq_weighted_neigh = batadv_nc_random_weight_tq(tq_tmp);
1097 	tq_tmp = router_coding_ifinfo->bat_iv.tq_avg;
1098 	tq_weighted_coding = batadv_nc_random_weight_tq(tq_tmp);
1099 
1100 	/* Select one destination for the MAC-header dst-field based on
1101 	 * weighted TQ-values.
1102 	 */
1103 	if (tq_weighted_neigh >= tq_weighted_coding) {
1104 		/* Destination from nc_packet is selected for MAC-header */
1105 		first_dest = nc_packet->neigh_node;
1106 		first_source = nc_packet->nc_path->prev_hop;
1107 		second_dest = neigh_node;
1108 		second_source = ethhdr->h_source;
1109 		packet1 = (struct batadv_unicast_packet *)nc_packet->skb->data;
1110 		packet2 = (struct batadv_unicast_packet *)skb->data;
1111 		packet_id1 = nc_packet->packet_id;
1112 		packet_id2 = batadv_skb_crc32(skb,
1113 					      skb->data + sizeof(*packet2));
1114 	} else {
1115 		/* Destination for skb is selected for MAC-header */
1116 		first_dest = neigh_node;
1117 		first_source = ethhdr->h_source;
1118 		second_dest = nc_packet->neigh_node;
1119 		second_source = nc_packet->nc_path->prev_hop;
1120 		packet1 = (struct batadv_unicast_packet *)skb->data;
1121 		packet2 = (struct batadv_unicast_packet *)nc_packet->skb->data;
1122 		packet_id1 = batadv_skb_crc32(skb,
1123 					      skb->data + sizeof(*packet1));
1124 		packet_id2 = nc_packet->packet_id;
1125 	}
1126 
1127 	/* Instead of zero padding the smallest data buffer, we
1128 	 * code into the largest.
1129 	 */
1130 	if (skb->len <= nc_packet->skb->len) {
1131 		skb_dest = nc_packet->skb;
1132 		skb_src = skb;
1133 	} else {
1134 		skb_dest = skb;
1135 		skb_src = nc_packet->skb;
1136 	}
1137 
1138 	/* coding_len is used when decoding the packet shorter packet */
1139 	coding_len = skb_src->len - unicast_size;
1140 
1141 	if (skb_linearize(skb_dest) < 0 || skb_linearize(skb_src) < 0)
1142 		goto out;
1143 
1144 	skb_push(skb_dest, header_add);
1145 
1146 	coded_packet = (struct batadv_coded_packet *)skb_dest->data;
1147 	skb_reset_mac_header(skb_dest);
1148 
1149 	coded_packet->packet_type = BATADV_CODED;
1150 	coded_packet->version = BATADV_COMPAT_VERSION;
1151 	coded_packet->ttl = packet1->ttl;
1152 
1153 	/* Info about first unicast packet */
1154 	ether_addr_copy(coded_packet->first_source, first_source);
1155 	ether_addr_copy(coded_packet->first_orig_dest, packet1->dest);
1156 	coded_packet->first_crc = packet_id1;
1157 	coded_packet->first_ttvn = packet1->ttvn;
1158 
1159 	/* Info about second unicast packet */
1160 	ether_addr_copy(coded_packet->second_dest, second_dest->addr);
1161 	ether_addr_copy(coded_packet->second_source, second_source);
1162 	ether_addr_copy(coded_packet->second_orig_dest, packet2->dest);
1163 	coded_packet->second_crc = packet_id2;
1164 	coded_packet->second_ttl = packet2->ttl;
1165 	coded_packet->second_ttvn = packet2->ttvn;
1166 	coded_packet->coded_len = htons(coding_len);
1167 
1168 	/* This is where the magic happens: Code skb_src into skb_dest */
1169 	batadv_nc_memxor(skb_dest->data + coded_size,
1170 			 skb_src->data + unicast_size, coding_len);
1171 
1172 	/* Update counters accordingly */
1173 	if (BATADV_SKB_CB(skb_src)->decoded &&
1174 	    BATADV_SKB_CB(skb_dest)->decoded) {
1175 		/* Both packets are recoded */
1176 		count = skb_src->len + ETH_HLEN;
1177 		count += skb_dest->len + ETH_HLEN;
1178 		batadv_add_counter(bat_priv, BATADV_CNT_NC_RECODE, 2);
1179 		batadv_add_counter(bat_priv, BATADV_CNT_NC_RECODE_BYTES, count);
1180 	} else if (!BATADV_SKB_CB(skb_src)->decoded &&
1181 		   !BATADV_SKB_CB(skb_dest)->decoded) {
1182 		/* Both packets are newly coded */
1183 		count = skb_src->len + ETH_HLEN;
1184 		count += skb_dest->len + ETH_HLEN;
1185 		batadv_add_counter(bat_priv, BATADV_CNT_NC_CODE, 2);
1186 		batadv_add_counter(bat_priv, BATADV_CNT_NC_CODE_BYTES, count);
1187 	} else if (BATADV_SKB_CB(skb_src)->decoded &&
1188 		   !BATADV_SKB_CB(skb_dest)->decoded) {
1189 		/* skb_src recoded and skb_dest is newly coded */
1190 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_RECODE);
1191 		batadv_add_counter(bat_priv, BATADV_CNT_NC_RECODE_BYTES,
1192 				   skb_src->len + ETH_HLEN);
1193 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_CODE);
1194 		batadv_add_counter(bat_priv, BATADV_CNT_NC_CODE_BYTES,
1195 				   skb_dest->len + ETH_HLEN);
1196 	} else if (!BATADV_SKB_CB(skb_src)->decoded &&
1197 		   BATADV_SKB_CB(skb_dest)->decoded) {
1198 		/* skb_src is newly coded and skb_dest is recoded */
1199 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_CODE);
1200 		batadv_add_counter(bat_priv, BATADV_CNT_NC_CODE_BYTES,
1201 				   skb_src->len + ETH_HLEN);
1202 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_RECODE);
1203 		batadv_add_counter(bat_priv, BATADV_CNT_NC_RECODE_BYTES,
1204 				   skb_dest->len + ETH_HLEN);
1205 	}
1206 
1207 	/* skb_src is now coded into skb_dest, so free it */
1208 	consume_skb(skb_src);
1209 
1210 	/* avoid duplicate free of skb from nc_packet */
1211 	nc_packet->skb = NULL;
1212 	batadv_nc_packet_free(nc_packet, false);
1213 
1214 	/* Send the coded packet and return true */
1215 	batadv_send_unicast_skb(skb_dest, first_dest);
1216 	res = true;
1217 out:
1218 	batadv_neigh_node_put(router_neigh);
1219 	batadv_neigh_node_put(router_coding);
1220 	batadv_neigh_ifinfo_put(router_neigh_ifinfo);
1221 	batadv_neigh_ifinfo_put(router_coding_ifinfo);
1222 	return res;
1223 }
1224 
1225 /**
1226  * batadv_nc_skb_coding_possible() - true if a decoded skb is available at dst.
1227  * @skb: data skb to forward
1228  * @dst: destination mac address of the other skb to code with
1229  * @src: source mac address of skb
1230  *
1231  * Whenever we network code a packet we have to check whether we received it in
1232  * a network coded form. If so, we may not be able to use it for coding because
1233  * some neighbors may also have received (overheard) the packet in the network
1234  * coded form without being able to decode it. It is hard to know which of the
1235  * neighboring nodes was able to decode the packet, therefore we can only
1236  * re-code the packet if the source of the previous encoded packet is involved.
1237  * Since the source encoded the packet we can be certain it has all necessary
1238  * decode information.
1239  *
1240  * Return: true if coding of a decoded packet is allowed.
1241  */
1242 static bool batadv_nc_skb_coding_possible(struct sk_buff *skb, u8 *dst, u8 *src)
1243 {
1244 	if (BATADV_SKB_CB(skb)->decoded && !batadv_compare_eth(dst, src))
1245 		return false;
1246 	return true;
1247 }
1248 
1249 /**
1250  * batadv_nc_path_search() - Find the coding path matching in_nc_node and
1251  *  out_nc_node to retrieve a buffered packet that can be used for coding.
1252  * @bat_priv: the bat priv with all the soft interface information
1253  * @in_nc_node: pointer to skb next hop's neighbor nc node
1254  * @out_nc_node: pointer to skb source's neighbor nc node
1255  * @skb: data skb to forward
1256  * @eth_dst: next hop mac address of skb
1257  *
1258  * Return: true if coding of a decoded skb is allowed.
1259  */
1260 static struct batadv_nc_packet *
1261 batadv_nc_path_search(struct batadv_priv *bat_priv,
1262 		      struct batadv_nc_node *in_nc_node,
1263 		      struct batadv_nc_node *out_nc_node,
1264 		      struct sk_buff *skb,
1265 		      u8 *eth_dst)
1266 {
1267 	struct batadv_nc_path *nc_path, nc_path_key;
1268 	struct batadv_nc_packet *nc_packet_out = NULL;
1269 	struct batadv_nc_packet *nc_packet, *nc_packet_tmp;
1270 	struct batadv_hashtable *hash = bat_priv->nc.coding_hash;
1271 	int idx;
1272 
1273 	if (!hash)
1274 		return NULL;
1275 
1276 	/* Create almost path key */
1277 	batadv_nc_hash_key_gen(&nc_path_key, in_nc_node->addr,
1278 			       out_nc_node->addr);
1279 	idx = batadv_nc_hash_choose(&nc_path_key, hash->size);
1280 
1281 	/* Check for coding opportunities in this nc_path */
1282 	rcu_read_lock();
1283 	hlist_for_each_entry_rcu(nc_path, &hash->table[idx], hash_entry) {
1284 		if (!batadv_compare_eth(nc_path->prev_hop, in_nc_node->addr))
1285 			continue;
1286 
1287 		if (!batadv_compare_eth(nc_path->next_hop, out_nc_node->addr))
1288 			continue;
1289 
1290 		spin_lock_bh(&nc_path->packet_list_lock);
1291 		if (list_empty(&nc_path->packet_list)) {
1292 			spin_unlock_bh(&nc_path->packet_list_lock);
1293 			continue;
1294 		}
1295 
1296 		list_for_each_entry_safe(nc_packet, nc_packet_tmp,
1297 					 &nc_path->packet_list, list) {
1298 			if (!batadv_nc_skb_coding_possible(nc_packet->skb,
1299 							   eth_dst,
1300 							   in_nc_node->addr))
1301 				continue;
1302 
1303 			/* Coding opportunity is found! */
1304 			list_del(&nc_packet->list);
1305 			nc_packet_out = nc_packet;
1306 			break;
1307 		}
1308 
1309 		spin_unlock_bh(&nc_path->packet_list_lock);
1310 		break;
1311 	}
1312 	rcu_read_unlock();
1313 
1314 	return nc_packet_out;
1315 }
1316 
1317 /**
1318  * batadv_nc_skb_src_search() - Loops through the list of neighboring nodes of
1319  *  the skb's sender (may be equal to the originator).
1320  * @bat_priv: the bat priv with all the soft interface information
1321  * @skb: data skb to forward
1322  * @eth_dst: next hop mac address of skb
1323  * @eth_src: source mac address of skb
1324  * @in_nc_node: pointer to skb next hop's neighbor nc node
1325  *
1326  * Return: an nc packet if a suitable coding packet was found, NULL otherwise.
1327  */
1328 static struct batadv_nc_packet *
1329 batadv_nc_skb_src_search(struct batadv_priv *bat_priv,
1330 			 struct sk_buff *skb,
1331 			 u8 *eth_dst,
1332 			 u8 *eth_src,
1333 			 struct batadv_nc_node *in_nc_node)
1334 {
1335 	struct batadv_orig_node *orig_node;
1336 	struct batadv_nc_node *out_nc_node;
1337 	struct batadv_nc_packet *nc_packet = NULL;
1338 
1339 	orig_node = batadv_orig_hash_find(bat_priv, eth_src);
1340 	if (!orig_node)
1341 		return NULL;
1342 
1343 	rcu_read_lock();
1344 	list_for_each_entry_rcu(out_nc_node,
1345 				&orig_node->out_coding_list, list) {
1346 		/* Check if the skb is decoded and if recoding is possible */
1347 		if (!batadv_nc_skb_coding_possible(skb,
1348 						   out_nc_node->addr, eth_src))
1349 			continue;
1350 
1351 		/* Search for an opportunity in this nc_path */
1352 		nc_packet = batadv_nc_path_search(bat_priv, in_nc_node,
1353 						  out_nc_node, skb, eth_dst);
1354 		if (nc_packet)
1355 			break;
1356 	}
1357 	rcu_read_unlock();
1358 
1359 	batadv_orig_node_put(orig_node);
1360 	return nc_packet;
1361 }
1362 
1363 /**
1364  * batadv_nc_skb_store_before_coding() - set the ethernet src and dst of the
1365  *  unicast skb before it is stored for use in later decoding
1366  * @bat_priv: the bat priv with all the soft interface information
1367  * @skb: data skb to store
1368  * @eth_dst_new: new destination mac address of skb
1369  */
1370 static void batadv_nc_skb_store_before_coding(struct batadv_priv *bat_priv,
1371 					      struct sk_buff *skb,
1372 					      u8 *eth_dst_new)
1373 {
1374 	struct ethhdr *ethhdr;
1375 
1376 	/* Copy skb header to change the mac header */
1377 	skb = pskb_copy_for_clone(skb, GFP_ATOMIC);
1378 	if (!skb)
1379 		return;
1380 
1381 	/* Set the mac header as if we actually sent the packet uncoded */
1382 	ethhdr = eth_hdr(skb);
1383 	ether_addr_copy(ethhdr->h_source, ethhdr->h_dest);
1384 	ether_addr_copy(ethhdr->h_dest, eth_dst_new);
1385 
1386 	/* Set data pointer to MAC header to mimic packets from our tx path */
1387 	skb_push(skb, ETH_HLEN);
1388 
1389 	/* Add the packet to the decoding packet pool */
1390 	batadv_nc_skb_store_for_decoding(bat_priv, skb);
1391 
1392 	/* batadv_nc_skb_store_for_decoding() clones the skb, so we must free
1393 	 * our ref
1394 	 */
1395 	consume_skb(skb);
1396 }
1397 
1398 /**
1399  * batadv_nc_skb_dst_search() - Loops through list of neighboring nodes to dst.
1400  * @skb: data skb to forward
1401  * @neigh_node: next hop to forward packet to
1402  * @ethhdr: pointer to the ethernet header inside the skb
1403  *
1404  * Loops through the list of neighboring nodes the next hop has a good
1405  * connection to (receives OGMs with a sufficient quality). We need to find a
1406  * neighbor of our next hop that potentially sent a packet which our next hop
1407  * also received (overheard) and has stored for later decoding.
1408  *
1409  * Return: true if the skb was consumed (encoded packet sent) or false otherwise
1410  */
1411 static bool batadv_nc_skb_dst_search(struct sk_buff *skb,
1412 				     struct batadv_neigh_node *neigh_node,
1413 				     struct ethhdr *ethhdr)
1414 {
1415 	struct net_device *netdev = neigh_node->if_incoming->soft_iface;
1416 	struct batadv_priv *bat_priv = netdev_priv(netdev);
1417 	struct batadv_orig_node *orig_node = neigh_node->orig_node;
1418 	struct batadv_nc_node *nc_node;
1419 	struct batadv_nc_packet *nc_packet = NULL;
1420 
1421 	rcu_read_lock();
1422 	list_for_each_entry_rcu(nc_node, &orig_node->in_coding_list, list) {
1423 		/* Search for coding opportunity with this in_nc_node */
1424 		nc_packet = batadv_nc_skb_src_search(bat_priv, skb,
1425 						     neigh_node->addr,
1426 						     ethhdr->h_source, nc_node);
1427 
1428 		/* Opportunity was found, so stop searching */
1429 		if (nc_packet)
1430 			break;
1431 	}
1432 	rcu_read_unlock();
1433 
1434 	if (!nc_packet)
1435 		return false;
1436 
1437 	/* Save packets for later decoding */
1438 	batadv_nc_skb_store_before_coding(bat_priv, skb,
1439 					  neigh_node->addr);
1440 	batadv_nc_skb_store_before_coding(bat_priv, nc_packet->skb,
1441 					  nc_packet->neigh_node->addr);
1442 
1443 	/* Code and send packets */
1444 	if (batadv_nc_code_packets(bat_priv, skb, ethhdr, nc_packet,
1445 				   neigh_node))
1446 		return true;
1447 
1448 	/* out of mem ? Coding failed - we have to free the buffered packet
1449 	 * to avoid memleaks. The skb passed as argument will be dealt with
1450 	 * by the calling function.
1451 	 */
1452 	batadv_nc_send_packet(nc_packet);
1453 	return false;
1454 }
1455 
1456 /**
1457  * batadv_nc_skb_add_to_path() - buffer skb for later encoding / decoding
1458  * @skb: skb to add to path
1459  * @nc_path: path to add skb to
1460  * @neigh_node: next hop to forward packet to
1461  * @packet_id: checksum to identify packet
1462  *
1463  * Return: true if the packet was buffered or false in case of an error.
1464  */
1465 static bool batadv_nc_skb_add_to_path(struct sk_buff *skb,
1466 				      struct batadv_nc_path *nc_path,
1467 				      struct batadv_neigh_node *neigh_node,
1468 				      __be32 packet_id)
1469 {
1470 	struct batadv_nc_packet *nc_packet;
1471 
1472 	nc_packet = kzalloc(sizeof(*nc_packet), GFP_ATOMIC);
1473 	if (!nc_packet)
1474 		return false;
1475 
1476 	/* Initialize nc_packet */
1477 	nc_packet->timestamp = jiffies;
1478 	nc_packet->packet_id = packet_id;
1479 	nc_packet->skb = skb;
1480 	nc_packet->neigh_node = neigh_node;
1481 	nc_packet->nc_path = nc_path;
1482 
1483 	/* Add coding packet to list */
1484 	spin_lock_bh(&nc_path->packet_list_lock);
1485 	list_add_tail(&nc_packet->list, &nc_path->packet_list);
1486 	spin_unlock_bh(&nc_path->packet_list_lock);
1487 
1488 	return true;
1489 }
1490 
1491 /**
1492  * batadv_nc_skb_forward() - try to code a packet or add it to the coding packet
1493  *  buffer
1494  * @skb: data skb to forward
1495  * @neigh_node: next hop to forward packet to
1496  *
1497  * Return: true if the skb was consumed (encoded packet sent) or false otherwise
1498  */
1499 bool batadv_nc_skb_forward(struct sk_buff *skb,
1500 			   struct batadv_neigh_node *neigh_node)
1501 {
1502 	const struct net_device *netdev = neigh_node->if_incoming->soft_iface;
1503 	struct batadv_priv *bat_priv = netdev_priv(netdev);
1504 	struct batadv_unicast_packet *packet;
1505 	struct batadv_nc_path *nc_path;
1506 	struct ethhdr *ethhdr = eth_hdr(skb);
1507 	__be32 packet_id;
1508 	u8 *payload;
1509 
1510 	/* Check if network coding is enabled */
1511 	if (!atomic_read(&bat_priv->network_coding))
1512 		goto out;
1513 
1514 	/* We only handle unicast packets */
1515 	payload = skb_network_header(skb);
1516 	packet = (struct batadv_unicast_packet *)payload;
1517 	if (packet->packet_type != BATADV_UNICAST)
1518 		goto out;
1519 
1520 	/* Try to find a coding opportunity and send the skb if one is found */
1521 	if (batadv_nc_skb_dst_search(skb, neigh_node, ethhdr))
1522 		return true;
1523 
1524 	/* Find or create a nc_path for this src-dst pair */
1525 	nc_path = batadv_nc_get_path(bat_priv,
1526 				     bat_priv->nc.coding_hash,
1527 				     ethhdr->h_source,
1528 				     neigh_node->addr);
1529 
1530 	if (!nc_path)
1531 		goto out;
1532 
1533 	/* Add skb to nc_path */
1534 	packet_id = batadv_skb_crc32(skb, payload + sizeof(*packet));
1535 	if (!batadv_nc_skb_add_to_path(skb, nc_path, neigh_node, packet_id))
1536 		goto free_nc_path;
1537 
1538 	/* Packet is consumed */
1539 	return true;
1540 
1541 free_nc_path:
1542 	batadv_nc_path_put(nc_path);
1543 out:
1544 	/* Packet is not consumed */
1545 	return false;
1546 }
1547 
1548 /**
1549  * batadv_nc_skb_store_for_decoding() - save a clone of the skb which can be
1550  *  used when decoding coded packets
1551  * @bat_priv: the bat priv with all the soft interface information
1552  * @skb: data skb to store
1553  */
1554 void batadv_nc_skb_store_for_decoding(struct batadv_priv *bat_priv,
1555 				      struct sk_buff *skb)
1556 {
1557 	struct batadv_unicast_packet *packet;
1558 	struct batadv_nc_path *nc_path;
1559 	struct ethhdr *ethhdr = eth_hdr(skb);
1560 	__be32 packet_id;
1561 	u8 *payload;
1562 
1563 	/* Check if network coding is enabled */
1564 	if (!atomic_read(&bat_priv->network_coding))
1565 		goto out;
1566 
1567 	/* Check for supported packet type */
1568 	payload = skb_network_header(skb);
1569 	packet = (struct batadv_unicast_packet *)payload;
1570 	if (packet->packet_type != BATADV_UNICAST)
1571 		goto out;
1572 
1573 	/* Find existing nc_path or create a new */
1574 	nc_path = batadv_nc_get_path(bat_priv,
1575 				     bat_priv->nc.decoding_hash,
1576 				     ethhdr->h_source,
1577 				     ethhdr->h_dest);
1578 
1579 	if (!nc_path)
1580 		goto out;
1581 
1582 	/* Clone skb and adjust skb->data to point at batman header */
1583 	skb = skb_clone(skb, GFP_ATOMIC);
1584 	if (unlikely(!skb))
1585 		goto free_nc_path;
1586 
1587 	if (unlikely(!pskb_may_pull(skb, ETH_HLEN)))
1588 		goto free_skb;
1589 
1590 	if (unlikely(!skb_pull_rcsum(skb, ETH_HLEN)))
1591 		goto free_skb;
1592 
1593 	/* Add skb to nc_path */
1594 	packet_id = batadv_skb_crc32(skb, payload + sizeof(*packet));
1595 	if (!batadv_nc_skb_add_to_path(skb, nc_path, NULL, packet_id))
1596 		goto free_skb;
1597 
1598 	batadv_inc_counter(bat_priv, BATADV_CNT_NC_BUFFER);
1599 	return;
1600 
1601 free_skb:
1602 	kfree_skb(skb);
1603 free_nc_path:
1604 	batadv_nc_path_put(nc_path);
1605 out:
1606 	return;
1607 }
1608 
1609 /**
1610  * batadv_nc_skb_store_sniffed_unicast() - check if a received unicast packet
1611  *  should be saved in the decoding buffer and, if so, store it there
1612  * @bat_priv: the bat priv with all the soft interface information
1613  * @skb: unicast skb to store
1614  */
1615 void batadv_nc_skb_store_sniffed_unicast(struct batadv_priv *bat_priv,
1616 					 struct sk_buff *skb)
1617 {
1618 	struct ethhdr *ethhdr = eth_hdr(skb);
1619 
1620 	if (batadv_is_my_mac(bat_priv, ethhdr->h_dest))
1621 		return;
1622 
1623 	/* Set data pointer to MAC header to mimic packets from our tx path */
1624 	skb_push(skb, ETH_HLEN);
1625 
1626 	batadv_nc_skb_store_for_decoding(bat_priv, skb);
1627 }
1628 
1629 /**
1630  * batadv_nc_skb_decode_packet() - decode given skb using the decode data stored
1631  *  in nc_packet
1632  * @bat_priv: the bat priv with all the soft interface information
1633  * @skb: unicast skb to decode
1634  * @nc_packet: decode data needed to decode the skb
1635  *
1636  * Return: pointer to decoded unicast packet if the packet was decoded or NULL
1637  * in case of an error.
1638  */
1639 static struct batadv_unicast_packet *
1640 batadv_nc_skb_decode_packet(struct batadv_priv *bat_priv, struct sk_buff *skb,
1641 			    struct batadv_nc_packet *nc_packet)
1642 {
1643 	const int h_size = sizeof(struct batadv_unicast_packet);
1644 	const int h_diff = sizeof(struct batadv_coded_packet) - h_size;
1645 	struct batadv_unicast_packet *unicast_packet;
1646 	struct batadv_coded_packet coded_packet_tmp;
1647 	struct ethhdr *ethhdr, ethhdr_tmp;
1648 	u8 *orig_dest, ttl, ttvn;
1649 	unsigned int coding_len;
1650 	int err;
1651 
1652 	/* Save headers temporarily */
1653 	memcpy(&coded_packet_tmp, skb->data, sizeof(coded_packet_tmp));
1654 	memcpy(&ethhdr_tmp, skb_mac_header(skb), sizeof(ethhdr_tmp));
1655 
1656 	if (skb_cow(skb, 0) < 0)
1657 		return NULL;
1658 
1659 	if (unlikely(!skb_pull_rcsum(skb, h_diff)))
1660 		return NULL;
1661 
1662 	/* Data points to batman header, so set mac header 14 bytes before
1663 	 * and network to data
1664 	 */
1665 	skb_set_mac_header(skb, -ETH_HLEN);
1666 	skb_reset_network_header(skb);
1667 
1668 	/* Reconstruct original mac header */
1669 	ethhdr = eth_hdr(skb);
1670 	*ethhdr = ethhdr_tmp;
1671 
1672 	/* Select the correct unicast header information based on the location
1673 	 * of our mac address in the coded_packet header
1674 	 */
1675 	if (batadv_is_my_mac(bat_priv, coded_packet_tmp.second_dest)) {
1676 		/* If we are the second destination the packet was overheard,
1677 		 * so the Ethernet address must be copied to h_dest and
1678 		 * pkt_type changed from PACKET_OTHERHOST to PACKET_HOST
1679 		 */
1680 		ether_addr_copy(ethhdr->h_dest, coded_packet_tmp.second_dest);
1681 		skb->pkt_type = PACKET_HOST;
1682 
1683 		orig_dest = coded_packet_tmp.second_orig_dest;
1684 		ttl = coded_packet_tmp.second_ttl;
1685 		ttvn = coded_packet_tmp.second_ttvn;
1686 	} else {
1687 		orig_dest = coded_packet_tmp.first_orig_dest;
1688 		ttl = coded_packet_tmp.ttl;
1689 		ttvn = coded_packet_tmp.first_ttvn;
1690 	}
1691 
1692 	coding_len = ntohs(coded_packet_tmp.coded_len);
1693 
1694 	if (coding_len > skb->len)
1695 		return NULL;
1696 
1697 	/* Here the magic is reversed:
1698 	 *   extract the missing packet from the received coded packet
1699 	 */
1700 	batadv_nc_memxor(skb->data + h_size,
1701 			 nc_packet->skb->data + h_size,
1702 			 coding_len);
1703 
1704 	/* Resize decoded skb if decoded with larger packet */
1705 	if (nc_packet->skb->len > coding_len + h_size) {
1706 		err = pskb_trim_rcsum(skb, coding_len + h_size);
1707 		if (err)
1708 			return NULL;
1709 	}
1710 
1711 	/* Create decoded unicast packet */
1712 	unicast_packet = (struct batadv_unicast_packet *)skb->data;
1713 	unicast_packet->packet_type = BATADV_UNICAST;
1714 	unicast_packet->version = BATADV_COMPAT_VERSION;
1715 	unicast_packet->ttl = ttl;
1716 	ether_addr_copy(unicast_packet->dest, orig_dest);
1717 	unicast_packet->ttvn = ttvn;
1718 
1719 	batadv_nc_packet_free(nc_packet, false);
1720 	return unicast_packet;
1721 }
1722 
1723 /**
1724  * batadv_nc_find_decoding_packet() - search through buffered decoding data to
1725  *  find the data needed to decode the coded packet
1726  * @bat_priv: the bat priv with all the soft interface information
1727  * @ethhdr: pointer to the ethernet header inside the coded packet
1728  * @coded: coded packet we try to find decode data for
1729  *
1730  * Return: pointer to nc packet if the needed data was found or NULL otherwise.
1731  */
1732 static struct batadv_nc_packet *
1733 batadv_nc_find_decoding_packet(struct batadv_priv *bat_priv,
1734 			       struct ethhdr *ethhdr,
1735 			       struct batadv_coded_packet *coded)
1736 {
1737 	struct batadv_hashtable *hash = bat_priv->nc.decoding_hash;
1738 	struct batadv_nc_packet *tmp_nc_packet, *nc_packet = NULL;
1739 	struct batadv_nc_path *nc_path, nc_path_key;
1740 	u8 *dest, *source;
1741 	__be32 packet_id;
1742 	int index;
1743 
1744 	if (!hash)
1745 		return NULL;
1746 
1747 	/* Select the correct packet id based on the location of our mac-addr */
1748 	dest = ethhdr->h_source;
1749 	if (!batadv_is_my_mac(bat_priv, coded->second_dest)) {
1750 		source = coded->second_source;
1751 		packet_id = coded->second_crc;
1752 	} else {
1753 		source = coded->first_source;
1754 		packet_id = coded->first_crc;
1755 	}
1756 
1757 	batadv_nc_hash_key_gen(&nc_path_key, source, dest);
1758 	index = batadv_nc_hash_choose(&nc_path_key, hash->size);
1759 
1760 	/* Search for matching coding path */
1761 	rcu_read_lock();
1762 	hlist_for_each_entry_rcu(nc_path, &hash->table[index], hash_entry) {
1763 		/* Find matching nc_packet */
1764 		spin_lock_bh(&nc_path->packet_list_lock);
1765 		list_for_each_entry(tmp_nc_packet,
1766 				    &nc_path->packet_list, list) {
1767 			if (packet_id == tmp_nc_packet->packet_id) {
1768 				list_del(&tmp_nc_packet->list);
1769 
1770 				nc_packet = tmp_nc_packet;
1771 				break;
1772 			}
1773 		}
1774 		spin_unlock_bh(&nc_path->packet_list_lock);
1775 
1776 		if (nc_packet)
1777 			break;
1778 	}
1779 	rcu_read_unlock();
1780 
1781 	if (!nc_packet)
1782 		batadv_dbg(BATADV_DBG_NC, bat_priv,
1783 			   "No decoding packet found for %u\n", packet_id);
1784 
1785 	return nc_packet;
1786 }
1787 
1788 /**
1789  * batadv_nc_recv_coded_packet() - try to decode coded packet and enqueue the
1790  *  resulting unicast packet
1791  * @skb: incoming coded packet
1792  * @recv_if: pointer to interface this packet was received on
1793  *
1794  * Return: NET_RX_SUCCESS if the packet has been consumed or NET_RX_DROP
1795  * otherwise.
1796  */
1797 static int batadv_nc_recv_coded_packet(struct sk_buff *skb,
1798 				       struct batadv_hard_iface *recv_if)
1799 {
1800 	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
1801 	struct batadv_unicast_packet *unicast_packet;
1802 	struct batadv_coded_packet *coded_packet;
1803 	struct batadv_nc_packet *nc_packet;
1804 	struct ethhdr *ethhdr;
1805 	int hdr_size = sizeof(*coded_packet);
1806 
1807 	/* Check if network coding is enabled */
1808 	if (!atomic_read(&bat_priv->network_coding))
1809 		goto free_skb;
1810 
1811 	/* Make sure we can access (and remove) header */
1812 	if (unlikely(!pskb_may_pull(skb, hdr_size)))
1813 		goto free_skb;
1814 
1815 	coded_packet = (struct batadv_coded_packet *)skb->data;
1816 	ethhdr = eth_hdr(skb);
1817 
1818 	/* Verify frame is destined for us */
1819 	if (!batadv_is_my_mac(bat_priv, ethhdr->h_dest) &&
1820 	    !batadv_is_my_mac(bat_priv, coded_packet->second_dest))
1821 		goto free_skb;
1822 
1823 	/* Update stat counter */
1824 	if (batadv_is_my_mac(bat_priv, coded_packet->second_dest))
1825 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_SNIFFED);
1826 
1827 	nc_packet = batadv_nc_find_decoding_packet(bat_priv, ethhdr,
1828 						   coded_packet);
1829 	if (!nc_packet) {
1830 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_DECODE_FAILED);
1831 		goto free_skb;
1832 	}
1833 
1834 	/* Make skb's linear, because decoding accesses the entire buffer */
1835 	if (skb_linearize(skb) < 0)
1836 		goto free_nc_packet;
1837 
1838 	if (skb_linearize(nc_packet->skb) < 0)
1839 		goto free_nc_packet;
1840 
1841 	/* Decode the packet */
1842 	unicast_packet = batadv_nc_skb_decode_packet(bat_priv, skb, nc_packet);
1843 	if (!unicast_packet) {
1844 		batadv_inc_counter(bat_priv, BATADV_CNT_NC_DECODE_FAILED);
1845 		goto free_nc_packet;
1846 	}
1847 
1848 	/* Mark packet as decoded to do correct recoding when forwarding */
1849 	BATADV_SKB_CB(skb)->decoded = true;
1850 	batadv_inc_counter(bat_priv, BATADV_CNT_NC_DECODE);
1851 	batadv_add_counter(bat_priv, BATADV_CNT_NC_DECODE_BYTES,
1852 			   skb->len + ETH_HLEN);
1853 	return batadv_recv_unicast_packet(skb, recv_if);
1854 
1855 free_nc_packet:
1856 	batadv_nc_packet_free(nc_packet, true);
1857 free_skb:
1858 	kfree_skb(skb);
1859 
1860 	return NET_RX_DROP;
1861 }
1862 
1863 /**
1864  * batadv_nc_mesh_free() - clean up network coding memory
1865  * @bat_priv: the bat priv with all the soft interface information
1866  */
1867 void batadv_nc_mesh_free(struct batadv_priv *bat_priv)
1868 {
1869 	batadv_tvlv_container_unregister(bat_priv, BATADV_TVLV_NC, 1);
1870 	batadv_tvlv_handler_unregister(bat_priv, BATADV_TVLV_NC, 1);
1871 	cancel_delayed_work_sync(&bat_priv->nc.work);
1872 
1873 	batadv_nc_purge_paths(bat_priv, bat_priv->nc.coding_hash, NULL);
1874 	batadv_hash_destroy(bat_priv->nc.coding_hash);
1875 	batadv_nc_purge_paths(bat_priv, bat_priv->nc.decoding_hash, NULL);
1876 	batadv_hash_destroy(bat_priv->nc.decoding_hash);
1877 }
1878