RDMA/nes: Use more concise list_for_each_entry()
[safe/jmp/linux-2.6] / drivers / infiniband / hw / nes / nes_cm.c
1 /*
2  * Copyright (c) 2006 - 2008 NetEffect, Inc. All rights reserved.
3  *
4  * This software is available to you under a choice of one of two
5  * licenses.  You may choose to be licensed under the terms of the GNU
6  * General Public License (GPL) Version 2, available from the file
7  * COPYING in the main directory of this source tree, or the
8  * OpenIB.org BSD license below:
9  *
10  *     Redistribution and use in source and binary forms, with or
11  *     without modification, are permitted provided that the following
12  *     conditions are met:
13  *
14  *      - Redistributions of source code must retain the above
15  *        copyright notice, this list of conditions and the following
16  *        disclaimer.
17  *
18  *      - Redistributions in binary form must reproduce the above
19  *        copyright notice, this list of conditions and the following
20  *        disclaimer in the documentation and/or other materials
21  *        provided with the distribution.
22  *
23  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
27  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
28  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
29  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
30  * SOFTWARE.
31  *
32  */
33
34
35 #define TCPOPT_TIMESTAMP 8
36
37 #include <asm/atomic.h>
38 #include <linux/skbuff.h>
39 #include <linux/ip.h>
40 #include <linux/tcp.h>
41 #include <linux/init.h>
42 #include <linux/if_arp.h>
43 #include <linux/if_vlan.h>
44 #include <linux/notifier.h>
45 #include <linux/net.h>
46 #include <linux/types.h>
47 #include <linux/timer.h>
48 #include <linux/time.h>
49 #include <linux/delay.h>
50 #include <linux/etherdevice.h>
51 #include <linux/netdevice.h>
52 #include <linux/random.h>
53 #include <linux/list.h>
54 #include <linux/threads.h>
55
56 #include <net/neighbour.h>
57 #include <net/route.h>
58 #include <net/ip_fib.h>
59
60 #include "nes.h"
61
62 u32 cm_packets_sent;
63 u32 cm_packets_bounced;
64 u32 cm_packets_dropped;
65 u32 cm_packets_retrans;
66 u32 cm_packets_created;
67 u32 cm_packets_received;
68 u32 cm_listens_created;
69 u32 cm_listens_destroyed;
70 u32 cm_backlog_drops;
71 atomic_t cm_loopbacks;
72 atomic_t cm_nodes_created;
73 atomic_t cm_nodes_destroyed;
74 atomic_t cm_accel_dropped_pkts;
75 atomic_t cm_resets_recvd;
76
77 static inline int mini_cm_accelerated(struct nes_cm_core *, struct nes_cm_node *);
78 static struct nes_cm_listener *mini_cm_listen(struct nes_cm_core *,
79                 struct nes_vnic *, struct nes_cm_info *);
80 static int add_ref_cm_node(struct nes_cm_node *);
81 static int rem_ref_cm_node(struct nes_cm_core *, struct nes_cm_node *);
82 static int mini_cm_del_listen(struct nes_cm_core *, struct nes_cm_listener *);
83 static struct sk_buff *form_cm_frame(struct sk_buff *, struct nes_cm_node *,
84                                      void *, u32, void *, u32, u8);
85 static struct sk_buff *get_free_pkt(struct nes_cm_node *cm_node);
86
87 static struct nes_cm_node *mini_cm_connect(struct nes_cm_core *,
88                                            struct nes_vnic *,
89                                            struct ietf_mpa_frame *,
90                                            struct nes_cm_info *);
91 static int mini_cm_accept(struct nes_cm_core *, struct ietf_mpa_frame *,
92                           struct nes_cm_node *);
93 static int mini_cm_reject(struct nes_cm_core *, struct ietf_mpa_frame *,
94                           struct nes_cm_node *);
95 static int mini_cm_close(struct nes_cm_core *, struct nes_cm_node *);
96 static int mini_cm_recv_pkt(struct nes_cm_core *, struct nes_vnic *,
97                             struct sk_buff *);
98 static int mini_cm_dealloc_core(struct nes_cm_core *);
99 static int mini_cm_get(struct nes_cm_core *);
100 static int mini_cm_set(struct nes_cm_core *, u32, u32);
101 static int nes_cm_disconn_true(struct nes_qp *);
102 static int nes_cm_post_event(struct nes_cm_event *event);
103 static int nes_disconnect(struct nes_qp *nesqp, int abrupt);
104 static void nes_disconnect_worker(struct work_struct *work);
105 static int send_ack(struct nes_cm_node *cm_node);
106 static int send_fin(struct nes_cm_node *cm_node, struct sk_buff *skb);
107
108 /* External CM API Interface */
109 /* instance of function pointers for client API */
110 /* set address of this instance to cm_core->cm_ops at cm_core alloc */
111 static struct nes_cm_ops nes_cm_api = {
112         mini_cm_accelerated,
113         mini_cm_listen,
114         mini_cm_del_listen,
115         mini_cm_connect,
116         mini_cm_close,
117         mini_cm_accept,
118         mini_cm_reject,
119         mini_cm_recv_pkt,
120         mini_cm_dealloc_core,
121         mini_cm_get,
122         mini_cm_set
123 };
124
125 static struct nes_cm_core *g_cm_core;
126
127 atomic_t cm_connects;
128 atomic_t cm_accepts;
129 atomic_t cm_disconnects;
130 atomic_t cm_closes;
131 atomic_t cm_connecteds;
132 atomic_t cm_connect_reqs;
133 atomic_t cm_rejects;
134
135
136 /**
137  * create_event
138  */
139 static struct nes_cm_event *create_event(struct nes_cm_node *cm_node,
140                 enum nes_cm_event_type type)
141 {
142         struct nes_cm_event *event;
143
144         if (!cm_node->cm_id)
145                 return NULL;
146
147         /* allocate an empty event */
148         event = kzalloc(sizeof(*event), GFP_ATOMIC);
149
150         if (!event)
151                 return NULL;
152
153         event->type = type;
154         event->cm_node = cm_node;
155         event->cm_info.rem_addr = cm_node->rem_addr;
156         event->cm_info.loc_addr = cm_node->loc_addr;
157         event->cm_info.rem_port = cm_node->rem_port;
158         event->cm_info.loc_port = cm_node->loc_port;
159         event->cm_info.cm_id = cm_node->cm_id;
160
161         nes_debug(NES_DBG_CM, "Created event=%p, type=%u, dst_addr=%08x[%x],"
162                         " src_addr=%08x[%x]\n",
163                         event, type,
164                         event->cm_info.loc_addr, event->cm_info.loc_port,
165                         event->cm_info.rem_addr, event->cm_info.rem_port);
166
167         nes_cm_post_event(event);
168         return event;
169 }
170
171
172 /**
173  * send_mpa_request
174  */
175 static int send_mpa_request(struct nes_cm_node *cm_node)
176 {
177         struct sk_buff *skb;
178         int ret;
179
180         skb = get_free_pkt(cm_node);
181         if (!skb) {
182                 nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
183                 return -1;
184         }
185
186         /* send an MPA Request frame */
187         form_cm_frame(skb, cm_node, NULL, 0, &cm_node->mpa_frame,
188                         cm_node->mpa_frame_size, SET_ACK);
189
190         ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);
191         if (ret < 0) {
192                 return ret;
193         }
194
195         return 0;
196 }
197
198
199 /**
200  * recv_mpa - process a received TCP pkt, we are expecting an
201  * IETF MPA frame
202  */
203 static int parse_mpa(struct nes_cm_node *cm_node, u8 *buffer, u32 len)
204 {
205         struct ietf_mpa_frame *mpa_frame;
206
207         /* assume req frame is in tcp data payload */
208         if (len < sizeof(struct ietf_mpa_frame)) {
209                 nes_debug(NES_DBG_CM, "The received ietf buffer was too small (%x)\n", len);
210                 return -1;
211         }
212
213         mpa_frame = (struct ietf_mpa_frame *)buffer;
214         cm_node->mpa_frame_size = ntohs(mpa_frame->priv_data_len);
215
216         if (cm_node->mpa_frame_size + sizeof(struct ietf_mpa_frame) != len) {
217                 nes_debug(NES_DBG_CM, "The received ietf buffer was not right"
218                                 " complete (%x + %x != %x)\n",
219                                 cm_node->mpa_frame_size, (u32)sizeof(struct ietf_mpa_frame), len);
220                 return -1;
221         }
222
223         /* copy entire MPA frame to our cm_node's frame */
224         memcpy(cm_node->mpa_frame_buf, buffer + sizeof(struct ietf_mpa_frame),
225                         cm_node->mpa_frame_size);
226
227         return 0;
228 }
229
230
231 /**
232  * handle_exception_pkt - process an exception packet.
233  * We have been in a TSA state, and we have now received SW
234  * TCP/IP traffic should be a FIN request or IP pkt with options
235  */
236 static int handle_exception_pkt(struct nes_cm_node *cm_node, struct sk_buff *skb)
237 {
238         int ret = 0;
239         struct tcphdr *tcph = tcp_hdr(skb);
240
241         /* first check to see if this a FIN pkt */
242         if (tcph->fin) {
243                 /* we need to ACK the FIN request */
244                 send_ack(cm_node);
245
246                 /* check which side we are (client/server) and set next state accordingly */
247                 if (cm_node->tcp_cntxt.client)
248                         cm_node->state = NES_CM_STATE_CLOSING;
249                 else {
250                         /* we are the server side */
251                         cm_node->state = NES_CM_STATE_CLOSE_WAIT;
252                         /* since this is a self contained CM we don't wait for */
253                         /* an APP to close us, just send final FIN immediately */
254                         ret = send_fin(cm_node, NULL);
255                         cm_node->state = NES_CM_STATE_LAST_ACK;
256                 }
257         } else {
258                 ret = -EINVAL;
259         }
260
261         return ret;
262 }
263
264
265 /**
266  * form_cm_frame - get a free packet and build empty frame Use
267  * node info to build.
268  */
269 static struct sk_buff *form_cm_frame(struct sk_buff *skb, struct nes_cm_node *cm_node,
270                                      void *options, u32 optionsize, void *data,
271                                      u32 datasize, u8 flags)
272 {
273         struct tcphdr *tcph;
274         struct iphdr *iph;
275         struct ethhdr *ethh;
276         u8 *buf;
277         u16 packetsize = sizeof(*iph);
278
279         packetsize += sizeof(*tcph);
280         packetsize +=  optionsize + datasize;
281
282         memset(skb->data, 0x00, ETH_HLEN + sizeof(*iph) + sizeof(*tcph));
283
284         skb->len = 0;
285         buf = skb_put(skb, packetsize + ETH_HLEN);
286
287         ethh = (struct ethhdr *) buf;
288         buf += ETH_HLEN;
289
290         iph = (struct iphdr *)buf;
291         buf += sizeof(*iph);
292         tcph = (struct tcphdr *)buf;
293         skb_reset_mac_header(skb);
294         skb_set_network_header(skb, ETH_HLEN);
295         skb_set_transport_header(skb, ETH_HLEN+sizeof(*iph));
296         buf += sizeof(*tcph);
297
298         skb->ip_summed = CHECKSUM_PARTIAL;
299         skb->protocol = htons(0x800);
300         skb->data_len = 0;
301         skb->mac_len = ETH_HLEN;
302
303         memcpy(ethh->h_dest, cm_node->rem_mac, ETH_ALEN);
304         memcpy(ethh->h_source, cm_node->loc_mac, ETH_ALEN);
305         ethh->h_proto = htons(0x0800);
306
307         iph->version = IPVERSION;
308         iph->ihl = 5;           /* 5 * 4Byte words, IP headr len */
309         iph->tos = 0;
310         iph->tot_len = htons(packetsize);
311         iph->id = htons(++cm_node->tcp_cntxt.loc_id);
312
313         iph->frag_off = htons(0x4000);
314         iph->ttl = 0x40;
315         iph->protocol = 0x06;   /* IPPROTO_TCP */
316
317         iph->saddr = htonl(cm_node->loc_addr);
318         iph->daddr = htonl(cm_node->rem_addr);
319
320         tcph->source = htons(cm_node->loc_port);
321         tcph->dest = htons(cm_node->rem_port);
322         tcph->seq = htonl(cm_node->tcp_cntxt.loc_seq_num);
323
324         if (flags & SET_ACK) {
325                 cm_node->tcp_cntxt.loc_ack_num = cm_node->tcp_cntxt.rcv_nxt;
326                 tcph->ack_seq = htonl(cm_node->tcp_cntxt.loc_ack_num);
327                 tcph->ack = 1;
328         } else
329                 tcph->ack_seq = 0;
330
331         if (flags & SET_SYN) {
332                 cm_node->tcp_cntxt.loc_seq_num++;
333                 tcph->syn = 1;
334         } else
335                 cm_node->tcp_cntxt.loc_seq_num += datasize;     /* data (no headers) */
336
337         if (flags & SET_FIN)
338                 tcph->fin = 1;
339
340         if (flags & SET_RST)
341                 tcph->rst = 1;
342
343         tcph->doff = (u16)((sizeof(*tcph) + optionsize + 3) >> 2);
344         tcph->window = htons(cm_node->tcp_cntxt.rcv_wnd);
345         tcph->urg_ptr = 0;
346         if (optionsize)
347                 memcpy(buf, options, optionsize);
348         buf += optionsize;
349         if (datasize)
350                 memcpy(buf, data, datasize);
351
352         skb_shinfo(skb)->nr_frags = 0;
353         cm_packets_created++;
354
355         return skb;
356 }
357
358
359 /**
360  * print_core - dump a cm core
361  */
362 static void print_core(struct nes_cm_core *core)
363 {
364         nes_debug(NES_DBG_CM, "---------------------------------------------\n");
365         nes_debug(NES_DBG_CM, "CM Core  -- (core = %p )\n", core);
366         if (!core)
367                 return;
368         nes_debug(NES_DBG_CM, "---------------------------------------------\n");
369
370         nes_debug(NES_DBG_CM, "State         : %u \n",  core->state);
371
372         nes_debug(NES_DBG_CM, "Tx Free cnt   : %u \n", skb_queue_len(&core->tx_free_list));
373         nes_debug(NES_DBG_CM, "Listen Nodes  : %u \n", atomic_read(&core->listen_node_cnt));
374         nes_debug(NES_DBG_CM, "Active Nodes  : %u \n", atomic_read(&core->node_cnt));
375
376         nes_debug(NES_DBG_CM, "core          : %p \n", core);
377
378         nes_debug(NES_DBG_CM, "-------------- end core ---------------\n");
379 }
380
381
382 /**
383  * schedule_nes_timer
384  * note - cm_node needs to be protected before calling this. Encase in:
385  *                      rem_ref_cm_node(cm_core, cm_node);add_ref_cm_node(cm_node);
386  */
387 int schedule_nes_timer(struct nes_cm_node *cm_node, struct sk_buff *skb,
388                 enum nes_timer_type type, int send_retrans,
389                 int close_when_complete)
390 {
391         unsigned long  flags;
392         struct nes_cm_core *cm_core;
393         struct nes_timer_entry *new_send;
394         int ret = 0;
395         u32 was_timer_set;
396
397         if (!cm_node)
398                 return -EINVAL;
399         new_send = kzalloc(sizeof(*new_send), GFP_ATOMIC);
400         if (!new_send)
401                 return -1;
402
403         /* new_send->timetosend = currenttime */
404         new_send->retrycount = NES_DEFAULT_RETRYS;
405         new_send->retranscount = NES_DEFAULT_RETRANS;
406         new_send->skb = skb;
407         new_send->timetosend = jiffies;
408         new_send->type = type;
409         new_send->netdev = cm_node->netdev;
410         new_send->send_retrans = send_retrans;
411         new_send->close_when_complete = close_when_complete;
412
413         if (type == NES_TIMER_TYPE_CLOSE) {
414                 new_send->timetosend += (HZ/2); /* TODO: decide on the correct value here */
415                 spin_lock_irqsave(&cm_node->recv_list_lock, flags);
416                 list_add_tail(&new_send->list, &cm_node->recv_list);
417                 spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
418         }
419
420         if (type == NES_TIMER_TYPE_SEND) {
421                 new_send->seq_num = ntohl(tcp_hdr(skb)->seq);
422                 atomic_inc(&new_send->skb->users);
423
424                 ret = nes_nic_cm_xmit(new_send->skb, cm_node->netdev);
425                 if (ret != NETDEV_TX_OK) {
426                         nes_debug(NES_DBG_CM, "Error sending packet %p (jiffies = %lu)\n",
427                                         new_send, jiffies);
428                         atomic_dec(&new_send->skb->users);
429                         new_send->timetosend = jiffies;
430                 } else {
431                         cm_packets_sent++;
432                         if (!send_retrans) {
433                                 if (close_when_complete)
434                                         rem_ref_cm_node(cm_node->cm_core, cm_node);
435                                 dev_kfree_skb_any(new_send->skb);
436                                 kfree(new_send);
437                                 return ret;
438                         }
439                         new_send->timetosend = jiffies + NES_RETRY_TIMEOUT;
440                 }
441                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
442                 list_add_tail(&new_send->list, &cm_node->retrans_list);
443                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
444         }
445         if (type == NES_TIMER_TYPE_RECV) {
446                 new_send->seq_num = ntohl(tcp_hdr(skb)->seq);
447                 new_send->timetosend = jiffies;
448                 spin_lock_irqsave(&cm_node->recv_list_lock, flags);
449                 list_add_tail(&new_send->list, &cm_node->recv_list);
450                 spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
451         }
452         cm_core = cm_node->cm_core;
453
454         was_timer_set = timer_pending(&cm_core->tcp_timer);
455
456         if (!was_timer_set) {
457                 cm_core->tcp_timer.expires = new_send->timetosend;
458                 add_timer(&cm_core->tcp_timer);
459         }
460
461         return ret;
462 }
463
464
465 /**
466  * nes_cm_timer_tick
467  */
468 static void nes_cm_timer_tick(unsigned long pass)
469 {
470         unsigned long flags, qplockflags;
471         unsigned long nexttimeout = jiffies + NES_LONG_TIME;
472         struct iw_cm_id *cm_id;
473         struct nes_cm_node *cm_node;
474         struct nes_timer_entry *send_entry, *recv_entry;
475         struct list_head *list_core, *list_core_temp;
476         struct list_head *list_node, *list_node_temp;
477         struct nes_cm_core *cm_core = g_cm_core;
478         struct nes_qp *nesqp;
479         struct sk_buff *skb;
480         u32 settimer = 0;
481         int ret = NETDEV_TX_OK;
482         int    node_done;
483
484         spin_lock_irqsave(&cm_core->ht_lock, flags);
485
486         list_for_each_safe(list_node, list_core_temp, &cm_core->connected_nodes) {
487                 cm_node = container_of(list_node, struct nes_cm_node, list);
488                 add_ref_cm_node(cm_node);
489                 spin_unlock_irqrestore(&cm_core->ht_lock, flags);
490                 spin_lock_irqsave(&cm_node->recv_list_lock, flags);
491                 list_for_each_safe(list_core, list_node_temp, &cm_node->recv_list) {
492                         recv_entry = container_of(list_core, struct nes_timer_entry, list);
493                         if ((time_after(recv_entry->timetosend, jiffies)) &&
494                                         (recv_entry->type == NES_TIMER_TYPE_CLOSE)) {
495                                 if (nexttimeout > recv_entry->timetosend || !settimer) {
496                                         nexttimeout = recv_entry->timetosend;
497                                         settimer = 1;
498                                 }
499                                 continue;
500                         }
501                         list_del(&recv_entry->list);
502                         cm_id = cm_node->cm_id;
503                         spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
504                         if (recv_entry->type == NES_TIMER_TYPE_CLOSE) {
505                                 nesqp = (struct nes_qp *)recv_entry->skb;
506                                 spin_lock_irqsave(&nesqp->lock, qplockflags);
507                                 if (nesqp->cm_id) {
508                                         nes_debug(NES_DBG_CM, "QP%u: cm_id = %p, refcount = %d: "
509                                                         "****** HIT A NES_TIMER_TYPE_CLOSE"
510                                                         " with something to do!!! ******\n",
511                                                         nesqp->hwqp.qp_id, cm_id,
512                                                         atomic_read(&nesqp->refcount));
513                                         nesqp->hw_tcp_state = NES_AEQE_TCP_STATE_CLOSED;
514                                         nesqp->last_aeq = NES_AEQE_AEID_RESET_SENT;
515                                         nesqp->ibqp_state = IB_QPS_ERR;
516                                         spin_unlock_irqrestore(&nesqp->lock, qplockflags);
517                                         nes_cm_disconn(nesqp);
518                                 } else {
519                                         spin_unlock_irqrestore(&nesqp->lock, qplockflags);
520                                         nes_debug(NES_DBG_CM, "QP%u: cm_id = %p, refcount = %d:"
521                                                         " ****** HIT A NES_TIMER_TYPE_CLOSE"
522                                                         " with nothing to do!!! ******\n",
523                                                         nesqp->hwqp.qp_id, cm_id,
524                                                         atomic_read(&nesqp->refcount));
525                                         nes_rem_ref(&nesqp->ibqp);
526                                 }
527                                 if (cm_id)
528                                         cm_id->rem_ref(cm_id);
529                         }
530                         kfree(recv_entry);
531                         spin_lock_irqsave(&cm_node->recv_list_lock, flags);
532                 }
533                 spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
534
535                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
536                 node_done = 0;
537                 list_for_each_safe(list_core, list_node_temp, &cm_node->retrans_list) {
538                         if (node_done) {
539                                 break;
540                         }
541                         send_entry = container_of(list_core, struct nes_timer_entry, list);
542                         if (time_after(send_entry->timetosend, jiffies)) {
543                                 if (cm_node->state != NES_CM_STATE_TSA) {
544                                         if ((nexttimeout > send_entry->timetosend) || !settimer) {
545                                                 nexttimeout = send_entry->timetosend;
546                                                 settimer = 1;
547                                         }
548                                         node_done = 1;
549                                         continue;
550                                 } else {
551                                         list_del(&send_entry->list);
552                                         skb = send_entry->skb;
553                                         spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
554                                         dev_kfree_skb_any(skb);
555                                         kfree(send_entry);
556                                         spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
557                                         continue;
558                                 }
559                         }
560                         if (send_entry->type == NES_TIMER_NODE_CLEANUP) {
561                                 list_del(&send_entry->list);
562                                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
563                                 kfree(send_entry);
564                                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
565                                 continue;
566                         }
567                         if ((send_entry->seq_num < cm_node->tcp_cntxt.rem_ack_num) ||
568                                         (cm_node->state == NES_CM_STATE_TSA) ||
569                                         (cm_node->state == NES_CM_STATE_CLOSED)) {
570                                 skb = send_entry->skb;
571                                 list_del(&send_entry->list);
572                                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
573                                 kfree(send_entry);
574                                 dev_kfree_skb_any(skb);
575                                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
576                                 continue;
577                         }
578
579                         if (!send_entry->retranscount || !send_entry->retrycount) {
580                                 cm_packets_dropped++;
581                                 skb = send_entry->skb;
582                                 list_del(&send_entry->list);
583                                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
584                                 dev_kfree_skb_any(skb);
585                                 kfree(send_entry);
586                                 if (cm_node->state == NES_CM_STATE_SYN_RCVD) {
587                                         /* this node never even generated an indication up to the cm */
588                                         rem_ref_cm_node(cm_core, cm_node);
589                                 } else {
590                                         cm_node->state = NES_CM_STATE_CLOSED;
591                                         create_event(cm_node, NES_CM_EVENT_ABORTED);
592                                 }
593                                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
594                                 continue;
595                         }
596                         /* this seems like the correct place, but leave send entry unprotected */
597                         // spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
598                         atomic_inc(&send_entry->skb->users);
599                         cm_packets_retrans++;
600                         nes_debug(NES_DBG_CM, "Retransmitting send_entry %p for node %p,"
601                                         " jiffies = %lu, time to send =  %lu, retranscount = %u, "
602                                         "send_entry->seq_num = 0x%08X, cm_node->tcp_cntxt.rem_ack_num = 0x%08X\n",
603                                         send_entry, cm_node, jiffies, send_entry->timetosend, send_entry->retranscount,
604                                         send_entry->seq_num, cm_node->tcp_cntxt.rem_ack_num);
605
606                         spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
607                         ret = nes_nic_cm_xmit(send_entry->skb, cm_node->netdev);
608                         if (ret != NETDEV_TX_OK) {
609                                 cm_packets_bounced++;
610                                 atomic_dec(&send_entry->skb->users);
611                                 send_entry->retrycount--;
612                                 nexttimeout = jiffies + NES_SHORT_TIME;
613                                 settimer = 1;
614                                 node_done = 1;
615                                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
616                                 continue;
617                         } else {
618                                 cm_packets_sent++;
619                         }
620                         spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
621                         list_del(&send_entry->list);
622                         nes_debug(NES_DBG_CM, "Packet Sent: retrans count = %u, retry count = %u.\n",
623                                         send_entry->retranscount, send_entry->retrycount);
624                         if (send_entry->send_retrans) {
625                                 send_entry->retranscount--;
626                                 send_entry->timetosend = jiffies + NES_RETRY_TIMEOUT;
627                                 if (nexttimeout > send_entry->timetosend || !settimer) {
628                                         nexttimeout = send_entry->timetosend;
629                                         settimer = 1;
630                                 }
631                                 list_add(&send_entry->list, &cm_node->retrans_list);
632                                 continue;
633                         } else {
634                                 int close_when_complete;
635                                 skb = send_entry->skb;
636                                 close_when_complete = send_entry->close_when_complete;
637                                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
638                                 if (close_when_complete) {
639                                         BUG_ON(atomic_read(&cm_node->ref_count) == 1);
640                                         rem_ref_cm_node(cm_core, cm_node);
641                                 }
642                                 dev_kfree_skb_any(skb);
643                                 kfree(send_entry);
644                                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
645                                 continue;
646                         }
647                 }
648                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
649
650                 rem_ref_cm_node(cm_core, cm_node);
651
652                 spin_lock_irqsave(&cm_core->ht_lock, flags);
653                 if (ret != NETDEV_TX_OK)
654                         break;
655         }
656         spin_unlock_irqrestore(&cm_core->ht_lock, flags);
657
658         if (settimer) {
659                 if (!timer_pending(&cm_core->tcp_timer)) {
660                         cm_core->tcp_timer.expires  = nexttimeout;
661                         add_timer(&cm_core->tcp_timer);
662                 }
663         }
664 }
665
666
667 /**
668  * send_syn
669  */
670 static int send_syn(struct nes_cm_node *cm_node, u32 sendack)
671 {
672         int ret;
673         int flags = SET_SYN;
674         struct sk_buff *skb;
675         char optionsbuffer[sizeof(struct option_mss) +
676                         sizeof(struct option_windowscale) +
677                         sizeof(struct option_base) + 1];
678
679         int optionssize = 0;
680         /* Sending MSS option */
681         union all_known_options *options;
682
683         if (!cm_node)
684                 return -EINVAL;
685
686         options = (union all_known_options *)&optionsbuffer[optionssize];
687         options->as_mss.optionnum = OPTION_NUMBER_MSS;
688         options->as_mss.length = sizeof(struct option_mss);
689         options->as_mss.mss = htons(cm_node->tcp_cntxt.mss);
690         optionssize += sizeof(struct option_mss);
691
692         options = (union all_known_options *)&optionsbuffer[optionssize];
693         options->as_windowscale.optionnum = OPTION_NUMBER_WINDOW_SCALE;
694         options->as_windowscale.length = sizeof(struct option_windowscale);
695         options->as_windowscale.shiftcount = cm_node->tcp_cntxt.rcv_wscale;
696         optionssize += sizeof(struct option_windowscale);
697
698         if (sendack && !(NES_DRV_OPT_SUPRESS_OPTION_BC & nes_drv_opt)
699                         ) {
700                 options = (union all_known_options *)&optionsbuffer[optionssize];
701                 options->as_base.optionnum = OPTION_NUMBER_WRITE0;
702                 options->as_base.length = sizeof(struct option_base);
703                 optionssize += sizeof(struct option_base);
704                 /* we need the size to be a multiple of 4 */
705                 options = (union all_known_options *)&optionsbuffer[optionssize];
706                 options->as_end = 1;
707                 optionssize += 1;
708                 options = (union all_known_options *)&optionsbuffer[optionssize];
709                 options->as_end = 1;
710                 optionssize += 1;
711         }
712
713         options = (union all_known_options *)&optionsbuffer[optionssize];
714         options->as_end = OPTION_NUMBER_END;
715         optionssize += 1;
716
717         skb = get_free_pkt(cm_node);
718         if (!skb) {
719                 nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
720                 return -1;
721         }
722
723         if (sendack)
724                 flags |= SET_ACK;
725
726         form_cm_frame(skb, cm_node, optionsbuffer, optionssize, NULL, 0, flags);
727         ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);
728
729         return ret;
730 }
731
732
733 /**
734  * send_reset
735  */
736 static int send_reset(struct nes_cm_node *cm_node)
737 {
738         int ret;
739         struct sk_buff *skb = get_free_pkt(cm_node);
740         int flags = SET_RST | SET_ACK;
741
742         if (!skb) {
743                 nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
744                 return -1;
745         }
746
747         add_ref_cm_node(cm_node);
748         form_cm_frame(skb, cm_node, NULL, 0, NULL, 0, flags);
749         ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 0, 1);
750
751         return ret;
752 }
753
754
755 /**
756  * send_ack
757  */
758 static int send_ack(struct nes_cm_node *cm_node)
759 {
760         int ret;
761         struct sk_buff *skb = get_free_pkt(cm_node);
762
763         if (!skb) {
764                 nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
765                 return -1;
766         }
767
768         form_cm_frame(skb, cm_node, NULL, 0, NULL, 0, SET_ACK);
769         ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 0, 0);
770
771         return ret;
772 }
773
774
775 /**
776  * send_fin
777  */
778 static int send_fin(struct nes_cm_node *cm_node, struct sk_buff *skb)
779 {
780         int ret;
781
782         /* if we didn't get a frame get one */
783         if (!skb)
784                 skb = get_free_pkt(cm_node);
785
786         if (!skb) {
787                 nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
788                 return -1;
789         }
790
791         form_cm_frame(skb, cm_node, NULL, 0, NULL, 0, SET_ACK | SET_FIN);
792         ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);
793
794         return ret;
795 }
796
797
798 /**
799  * get_free_pkt
800  */
801 static struct sk_buff *get_free_pkt(struct nes_cm_node *cm_node)
802 {
803         struct sk_buff *skb, *new_skb;
804
805         /* check to see if we need to repopulate the free tx pkt queue */
806         if (skb_queue_len(&cm_node->cm_core->tx_free_list) < NES_CM_FREE_PKT_LO_WATERMARK) {
807                 while (skb_queue_len(&cm_node->cm_core->tx_free_list) <
808                                 cm_node->cm_core->free_tx_pkt_max) {
809                         /* replace the frame we took, we won't get it back */
810                         new_skb = dev_alloc_skb(cm_node->cm_core->mtu);
811                         BUG_ON(!new_skb);
812                         /* add a replacement frame to the free tx list head */
813                         skb_queue_head(&cm_node->cm_core->tx_free_list, new_skb);
814                 }
815         }
816
817         skb = skb_dequeue(&cm_node->cm_core->tx_free_list);
818
819         return skb;
820 }
821
822
823 /**
824  * make_hashkey - generate hash key from node tuple
825  */
826 static inline int make_hashkey(u16 loc_port, nes_addr_t loc_addr, u16 rem_port,
827                 nes_addr_t rem_addr)
828 {
829         u32 hashkey = 0;
830
831         hashkey = loc_addr + rem_addr + loc_port + rem_port;
832         hashkey = (hashkey % NES_CM_HASHTABLE_SIZE);
833
834         return hashkey;
835 }
836
837
838 /**
839  * find_node - find a cm node that matches the reference cm node
840  */
841 static struct nes_cm_node *find_node(struct nes_cm_core *cm_core,
842                 u16 rem_port, nes_addr_t rem_addr, u16 loc_port, nes_addr_t loc_addr)
843 {
844         unsigned long flags;
845         u32 hashkey;
846         struct list_head *hte;
847         struct nes_cm_node *cm_node;
848
849         /* make a hash index key for this packet */
850         hashkey = make_hashkey(loc_port, loc_addr, rem_port, rem_addr);
851
852         /* get a handle on the hte */
853         hte = &cm_core->connected_nodes;
854
855         nes_debug(NES_DBG_CM, "Searching for an owner node:%x:%x from core %p->%p\n",
856                         loc_addr, loc_port, cm_core, hte);
857
858         /* walk list and find cm_node associated with this session ID */
859         spin_lock_irqsave(&cm_core->ht_lock, flags);
860         list_for_each_entry(cm_node, hte, list) {
861                 /* compare quad, return node handle if a match */
862                 nes_debug(NES_DBG_CM, "finding node %x:%x =? %x:%x ^ %x:%x =? %x:%x\n",
863                                 cm_node->loc_addr, cm_node->loc_port,
864                                 loc_addr, loc_port,
865                                 cm_node->rem_addr, cm_node->rem_port,
866                                 rem_addr, rem_port);
867                 if ((cm_node->loc_addr == loc_addr) && (cm_node->loc_port == loc_port) &&
868                                 (cm_node->rem_addr == rem_addr) && (cm_node->rem_port == rem_port)) {
869                         add_ref_cm_node(cm_node);
870                         spin_unlock_irqrestore(&cm_core->ht_lock, flags);
871                         return cm_node;
872                 }
873         }
874         spin_unlock_irqrestore(&cm_core->ht_lock, flags);
875
876         /* no owner node */
877         return NULL;
878 }
879
880
881 /**
882  * find_listener - find a cm node listening on this addr-port pair
883  */
884 static struct nes_cm_listener *find_listener(struct nes_cm_core *cm_core,
885                 nes_addr_t dst_addr, u16 dst_port, enum nes_cm_listener_state listener_state)
886 {
887         unsigned long flags;
888         struct nes_cm_listener *listen_node;
889
890         /* walk list and find cm_node associated with this session ID */
891         spin_lock_irqsave(&cm_core->listen_list_lock, flags);
892         list_for_each_entry(listen_node, &cm_core->listen_list.list, list) {
893                 /* compare node pair, return node handle if a match */
894                 if (((listen_node->loc_addr == dst_addr) ||
895                                 listen_node->loc_addr == 0x00000000) &&
896                                 (listen_node->loc_port == dst_port) &&
897                                 (listener_state & listen_node->listener_state)) {
898                         atomic_inc(&listen_node->ref_count);
899                         spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
900                         return listen_node;
901                 }
902         }
903         spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
904
905         nes_debug(NES_DBG_CM, "Unable to find listener- %x:%x\n",
906                         dst_addr, dst_port);
907
908         /* no listener */
909         return NULL;
910 }
911
912
913 /**
914  * add_hte_node - add a cm node to the hash table
915  */
916 static int add_hte_node(struct nes_cm_core *cm_core, struct nes_cm_node *cm_node)
917 {
918         unsigned long flags;
919         u32 hashkey;
920         struct list_head *hte;
921
922         if (!cm_node || !cm_core)
923                 return -EINVAL;
924
925         nes_debug(NES_DBG_CM, "Adding Node to Active Connection HT\n");
926
927         /* first, make an index into our hash table */
928         hashkey = make_hashkey(cm_node->loc_port, cm_node->loc_addr,
929                         cm_node->rem_port, cm_node->rem_addr);
930         cm_node->hashkey = hashkey;
931
932         spin_lock_irqsave(&cm_core->ht_lock, flags);
933
934         /* get a handle on the hash table element (list head for this slot) */
935         hte = &cm_core->connected_nodes;
936         list_add_tail(&cm_node->list, hte);
937         atomic_inc(&cm_core->ht_node_cnt);
938
939         spin_unlock_irqrestore(&cm_core->ht_lock, flags);
940
941         return 0;
942 }
943
944
945 /**
946  * mini_cm_dec_refcnt_listen
947  */
948 static int mini_cm_dec_refcnt_listen(struct nes_cm_core *cm_core,
949                 struct nes_cm_listener *listener, int free_hanging_nodes)
950 {
951         int ret = 1;
952         unsigned long flags;
953         spin_lock_irqsave(&cm_core->listen_list_lock, flags);
954         if (!atomic_dec_return(&listener->ref_count)) {
955                 list_del(&listener->list);
956
957                 /* decrement our listen node count */
958                 atomic_dec(&cm_core->listen_node_cnt);
959
960                 spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
961
962                 if (listener->nesvnic) {
963                         nes_manage_apbvt(listener->nesvnic, listener->loc_port,
964                                         PCI_FUNC(listener->nesvnic->nesdev->pcidev->devfn), NES_MANAGE_APBVT_DEL);
965                 }
966
967                 nes_debug(NES_DBG_CM, "destroying listener (%p)\n", listener);
968
969                 kfree(listener);
970                 listener = NULL;
971                 ret = 0;
972                 cm_listens_destroyed++;
973         } else {
974                 spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
975         }
976         if (listener) {
977                 if (atomic_read(&listener->pend_accepts_cnt) > 0)
978                         nes_debug(NES_DBG_CM, "destroying listener (%p)"
979                                         " with non-zero pending accepts=%u\n",
980                                         listener, atomic_read(&listener->pend_accepts_cnt));
981         }
982
983         return ret;
984 }
985
986
987 /**
988  * mini_cm_del_listen
989  */
990 static int mini_cm_del_listen(struct nes_cm_core *cm_core,
991                 struct nes_cm_listener *listener)
992 {
993         listener->listener_state = NES_CM_LISTENER_PASSIVE_STATE;
994         listener->cm_id = NULL; /* going to be destroyed pretty soon */
995         return mini_cm_dec_refcnt_listen(cm_core, listener, 1);
996 }
997
998
999 /**
1000  * mini_cm_accelerated
1001  */
1002 static inline int mini_cm_accelerated(struct nes_cm_core *cm_core,
1003                 struct nes_cm_node *cm_node)
1004 {
1005         u32 was_timer_set;
1006         cm_node->accelerated = 1;
1007
1008         if (cm_node->accept_pend) {
1009                 BUG_ON(!cm_node->listener);
1010                 atomic_dec(&cm_node->listener->pend_accepts_cnt);
1011                 BUG_ON(atomic_read(&cm_node->listener->pend_accepts_cnt) < 0);
1012         }
1013
1014         was_timer_set = timer_pending(&cm_core->tcp_timer);
1015         if (!was_timer_set) {
1016                 cm_core->tcp_timer.expires = jiffies + NES_SHORT_TIME;
1017                 add_timer(&cm_core->tcp_timer);
1018         }
1019
1020         return 0;
1021 }
1022
1023
1024 /**
1025  * nes_addr_send_arp
1026  */
1027 static void nes_addr_send_arp(u32 dst_ip)
1028 {
1029         struct rtable *rt;
1030         struct flowi fl;
1031
1032         memset(&fl, 0, sizeof fl);
1033         fl.nl_u.ip4_u.daddr = htonl(dst_ip);
1034         if (ip_route_output_key(&init_net, &rt, &fl)) {
1035                 printk("%s: ip_route_output_key failed for 0x%08X\n",
1036                                 __func__, dst_ip);
1037                 return;
1038         }
1039
1040         neigh_event_send(rt->u.dst.neighbour, NULL);
1041         ip_rt_put(rt);
1042 }
1043
1044
1045 /**
1046  * make_cm_node - create a new instance of a cm node
1047  */
1048 static struct nes_cm_node *make_cm_node(struct nes_cm_core *cm_core,
1049                 struct nes_vnic *nesvnic, struct nes_cm_info *cm_info,
1050                 struct nes_cm_listener *listener)
1051 {
1052         struct nes_cm_node *cm_node;
1053         struct timespec ts;
1054         int arpindex = 0;
1055         struct nes_device *nesdev;
1056         struct nes_adapter *nesadapter;
1057
1058         /* create an hte and cm_node for this instance */
1059         cm_node = kzalloc(sizeof(*cm_node), GFP_ATOMIC);
1060         if (!cm_node)
1061                 return NULL;
1062
1063         /* set our node specific transport info */
1064         cm_node->loc_addr = cm_info->loc_addr;
1065         cm_node->rem_addr = cm_info->rem_addr;
1066         cm_node->loc_port = cm_info->loc_port;
1067         cm_node->rem_port = cm_info->rem_port;
1068         cm_node->send_write0 = send_first;
1069         nes_debug(NES_DBG_CM, "Make node addresses : loc = %x:%x, rem = %x:%x\n",
1070                         cm_node->loc_addr, cm_node->loc_port, cm_node->rem_addr, cm_node->rem_port);
1071         cm_node->listener = listener;
1072         cm_node->netdev = nesvnic->netdev;
1073         cm_node->cm_id = cm_info->cm_id;
1074         memcpy(cm_node->loc_mac, nesvnic->netdev->dev_addr, ETH_ALEN);
1075
1076         nes_debug(NES_DBG_CM, "listener=%p, cm_id=%p\n",
1077                         cm_node->listener, cm_node->cm_id);
1078
1079         INIT_LIST_HEAD(&cm_node->retrans_list);
1080         spin_lock_init(&cm_node->retrans_list_lock);
1081         INIT_LIST_HEAD(&cm_node->recv_list);
1082         spin_lock_init(&cm_node->recv_list_lock);
1083
1084         cm_node->loopbackpartner = NULL;
1085         atomic_set(&cm_node->ref_count, 1);
1086         /* associate our parent CM core */
1087         cm_node->cm_core = cm_core;
1088         cm_node->tcp_cntxt.loc_id = NES_CM_DEF_LOCAL_ID;
1089         cm_node->tcp_cntxt.rcv_wscale = NES_CM_DEFAULT_RCV_WND_SCALE;
1090         cm_node->tcp_cntxt.rcv_wnd = NES_CM_DEFAULT_RCV_WND_SCALED >>
1091                         NES_CM_DEFAULT_RCV_WND_SCALE;
1092         ts = current_kernel_time();
1093         cm_node->tcp_cntxt.loc_seq_num = htonl(ts.tv_nsec);
1094         cm_node->tcp_cntxt.mss = nesvnic->max_frame_size - sizeof(struct iphdr) -
1095                         sizeof(struct tcphdr) - ETH_HLEN - VLAN_HLEN;
1096         cm_node->tcp_cntxt.rcv_nxt = 0;
1097         /* get a unique session ID , add thread_id to an upcounter to handle race */
1098         atomic_inc(&cm_core->node_cnt);
1099         cm_node->conn_type = cm_info->conn_type;
1100         cm_node->apbvt_set = 0;
1101         cm_node->accept_pend = 0;
1102
1103         cm_node->nesvnic = nesvnic;
1104         /* get some device handles, for arp lookup */
1105         nesdev = nesvnic->nesdev;
1106         nesadapter = nesdev->nesadapter;
1107
1108         cm_node->loopbackpartner = NULL;
1109         /* get the mac addr for the remote node */
1110         arpindex = nes_arp_table(nesdev, cm_node->rem_addr, NULL, NES_ARP_RESOLVE);
1111         if (arpindex < 0) {
1112                 kfree(cm_node);
1113                 nes_addr_send_arp(cm_info->rem_addr);
1114                 return NULL;
1115         }
1116
1117         /* copy the mac addr to node context */
1118         memcpy(cm_node->rem_mac, nesadapter->arp_table[arpindex].mac_addr, ETH_ALEN);
1119         nes_debug(NES_DBG_CM, "Remote mac addr from arp table:%02x,"
1120                         " %02x, %02x, %02x, %02x, %02x\n",
1121                         cm_node->rem_mac[0], cm_node->rem_mac[1],
1122                         cm_node->rem_mac[2], cm_node->rem_mac[3],
1123                         cm_node->rem_mac[4], cm_node->rem_mac[5]);
1124
1125         add_hte_node(cm_core, cm_node);
1126         atomic_inc(&cm_nodes_created);
1127
1128         return cm_node;
1129 }
1130
1131
1132 /**
1133  * add_ref_cm_node - destroy an instance of a cm node
1134  */
1135 static int add_ref_cm_node(struct nes_cm_node *cm_node)
1136 {
1137         atomic_inc(&cm_node->ref_count);
1138         return 0;
1139 }
1140
1141
1142 /**
1143  * rem_ref_cm_node - destroy an instance of a cm node
1144  */
1145 static int rem_ref_cm_node(struct nes_cm_core *cm_core,
1146                 struct nes_cm_node *cm_node)
1147 {
1148         unsigned long flags, qplockflags;
1149         struct nes_timer_entry *send_entry;
1150         struct nes_timer_entry *recv_entry;
1151         struct iw_cm_id *cm_id;
1152         struct list_head *list_core, *list_node_temp;
1153         struct nes_qp *nesqp;
1154
1155         if (!cm_node)
1156                 return -EINVAL;
1157
1158         spin_lock_irqsave(&cm_node->cm_core->ht_lock, flags);
1159         if (atomic_dec_return(&cm_node->ref_count)) {
1160                 spin_unlock_irqrestore(&cm_node->cm_core->ht_lock, flags);
1161                 return 0;
1162         }
1163         list_del(&cm_node->list);
1164         atomic_dec(&cm_core->ht_node_cnt);
1165         spin_unlock_irqrestore(&cm_node->cm_core->ht_lock, flags);
1166
1167         /* if the node is destroyed before connection was accelerated */
1168         if (!cm_node->accelerated && cm_node->accept_pend) {
1169                 BUG_ON(!cm_node->listener);
1170                 atomic_dec(&cm_node->listener->pend_accepts_cnt);
1171                 BUG_ON(atomic_read(&cm_node->listener->pend_accepts_cnt) < 0);
1172         }
1173
1174         spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
1175         list_for_each_safe(list_core, list_node_temp, &cm_node->retrans_list) {
1176                 send_entry = container_of(list_core, struct nes_timer_entry, list);
1177                 list_del(&send_entry->list);
1178                 spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
1179                 dev_kfree_skb_any(send_entry->skb);
1180                 kfree(send_entry);
1181                 spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
1182                 continue;
1183         }
1184         spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
1185
1186         spin_lock_irqsave(&cm_node->recv_list_lock, flags);
1187         list_for_each_safe(list_core, list_node_temp, &cm_node->recv_list) {
1188                 recv_entry = container_of(list_core, struct nes_timer_entry, list);
1189                 list_del(&recv_entry->list);
1190                 cm_id = cm_node->cm_id;
1191                 spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
1192                 if (recv_entry->type == NES_TIMER_TYPE_CLOSE) {
1193                         nesqp = (struct nes_qp *)recv_entry->skb;
1194                         spin_lock_irqsave(&nesqp->lock, qplockflags);
1195                         if (nesqp->cm_id) {
1196                                 nes_debug(NES_DBG_CM, "QP%u: cm_id = %p: ****** HIT A NES_TIMER_TYPE_CLOSE"
1197                                                 " with something to do!!! ******\n",
1198                                                 nesqp->hwqp.qp_id, cm_id);
1199                                 nesqp->hw_tcp_state = NES_AEQE_TCP_STATE_CLOSED;
1200                                 nesqp->last_aeq = NES_AEQE_AEID_RESET_SENT;
1201                                 nesqp->ibqp_state = IB_QPS_ERR;
1202                                 spin_unlock_irqrestore(&nesqp->lock, qplockflags);
1203                                 nes_cm_disconn(nesqp);
1204                         } else {
1205                                 spin_unlock_irqrestore(&nesqp->lock, qplockflags);
1206                                 nes_debug(NES_DBG_CM, "QP%u: cm_id = %p: ****** HIT A NES_TIMER_TYPE_CLOSE"
1207                                                 " with nothing to do!!! ******\n",
1208                                                 nesqp->hwqp.qp_id, cm_id);
1209                                 nes_rem_ref(&nesqp->ibqp);
1210                         }
1211                         cm_id->rem_ref(cm_id);
1212                 } else if (recv_entry->type == NES_TIMER_TYPE_RECV) {
1213                         dev_kfree_skb_any(recv_entry->skb);
1214                 }
1215                 kfree(recv_entry);
1216                 spin_lock_irqsave(&cm_node->recv_list_lock, flags);
1217         }
1218         spin_unlock_irqrestore(&cm_node->recv_list_lock, flags);
1219
1220         if (cm_node->listener) {
1221                 mini_cm_dec_refcnt_listen(cm_core, cm_node->listener, 0);
1222         } else {
1223                 if (cm_node->apbvt_set && cm_node->nesvnic) {
1224                         nes_manage_apbvt(cm_node->nesvnic, cm_node->loc_port,
1225                                         PCI_FUNC(cm_node->nesvnic->nesdev->pcidev->devfn),
1226                                         NES_MANAGE_APBVT_DEL);
1227                 }
1228         }
1229
1230         kfree(cm_node);
1231         atomic_dec(&cm_core->node_cnt);
1232         atomic_inc(&cm_nodes_destroyed);
1233
1234         return 0;
1235 }
1236
1237
1238 /**
1239  * process_options
1240  */
1241 static int process_options(struct nes_cm_node *cm_node, u8 *optionsloc, u32 optionsize, u32 syn_packet)
1242 {
1243         u32 tmp;
1244         u32 offset = 0;
1245         union all_known_options *all_options;
1246         char got_mss_option = 0;
1247
1248         while (offset < optionsize) {
1249                 all_options = (union all_known_options *)(optionsloc + offset);
1250                 switch (all_options->as_base.optionnum) {
1251                         case OPTION_NUMBER_END:
1252                                 offset = optionsize;
1253                                 break;
1254                         case OPTION_NUMBER_NONE:
1255                                 offset += 1;
1256                                 continue;
1257                         case OPTION_NUMBER_MSS:
1258                                 nes_debug(NES_DBG_CM, "%s: MSS Length: %d Offset: %d Size: %d\n",
1259                                                 __func__,
1260                                                 all_options->as_mss.length, offset, optionsize);
1261                                 got_mss_option = 1;
1262                                 if (all_options->as_mss.length != 4) {
1263                                         return 1;
1264                                 } else {
1265                                         tmp = ntohs(all_options->as_mss.mss);
1266                                         if (tmp > 0 && tmp < cm_node->tcp_cntxt.mss)
1267                                                 cm_node->tcp_cntxt.mss = tmp;
1268                                 }
1269                                 break;
1270                         case OPTION_NUMBER_WINDOW_SCALE:
1271                                 cm_node->tcp_cntxt.snd_wscale = all_options->as_windowscale.shiftcount;
1272                                 break;
1273                         case OPTION_NUMBER_WRITE0:
1274                                 cm_node->send_write0 = 1;
1275                                 break;
1276                         default:
1277                                 nes_debug(NES_DBG_CM, "TCP Option not understood: %x\n",
1278                                                 all_options->as_base.optionnum);
1279                                 break;
1280                 }
1281                 offset += all_options->as_base.length;
1282         }
1283         if ((!got_mss_option) && (syn_packet))
1284                 cm_node->tcp_cntxt.mss = NES_CM_DEFAULT_MSS;
1285         return 0;
1286 }
1287
1288
1289 /**
1290  * process_packet
1291  */
1292 static int process_packet(struct nes_cm_node *cm_node, struct sk_buff *skb,
1293                           struct nes_cm_core *cm_core)
1294 {
1295         int optionsize;
1296         int datasize;
1297         int ret = 0;
1298         struct tcphdr *tcph = tcp_hdr(skb);
1299         u32 inc_sequence;
1300         if (cm_node->state == NES_CM_STATE_SYN_SENT && tcph->syn) {
1301                 inc_sequence = ntohl(tcph->seq);
1302                 cm_node->tcp_cntxt.rcv_nxt = inc_sequence;
1303         }
1304
1305         if ((!tcph) || (cm_node->state == NES_CM_STATE_TSA)) {
1306                 BUG_ON(!tcph);
1307                 atomic_inc(&cm_accel_dropped_pkts);
1308                 return -1;
1309         }
1310
1311         if (tcph->rst) {
1312                 atomic_inc(&cm_resets_recvd);
1313                 nes_debug(NES_DBG_CM, "Received Reset, cm_node = %p, state = %u. refcnt=%d\n",
1314                                 cm_node, cm_node->state, atomic_read(&cm_node->ref_count));
1315                 switch (cm_node->state) {
1316                         case NES_CM_STATE_LISTENING:
1317                                 rem_ref_cm_node(cm_core, cm_node);
1318                                 break;
1319                         case NES_CM_STATE_TSA:
1320                         case NES_CM_STATE_CLOSED:
1321                                 break;
1322                         case NES_CM_STATE_SYN_RCVD:
1323                                         nes_debug(NES_DBG_CM, "Received a reset for local 0x%08X:%04X,"
1324                                                         " remote 0x%08X:%04X, node state = %u\n",
1325                                                         cm_node->loc_addr, cm_node->loc_port,
1326                                                         cm_node->rem_addr, cm_node->rem_port,
1327                                                         cm_node->state);
1328                                 rem_ref_cm_node(cm_core, cm_node);
1329                                 break;
1330                         case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
1331                         case NES_CM_STATE_ESTABLISHED:
1332                         case NES_CM_STATE_MPAREQ_SENT:
1333                         default:
1334                                         nes_debug(NES_DBG_CM, "Received a reset for local 0x%08X:%04X,"
1335                                                         " remote 0x%08X:%04X, node state = %u refcnt=%d\n",
1336                                                         cm_node->loc_addr, cm_node->loc_port,
1337                                                         cm_node->rem_addr, cm_node->rem_port,
1338                                                         cm_node->state, atomic_read(&cm_node->ref_count));
1339                                 // create event
1340                                 cm_node->state = NES_CM_STATE_CLOSED;
1341
1342                                 create_event(cm_node, NES_CM_EVENT_ABORTED);
1343                                 break;
1344
1345                 }
1346                 return -1;
1347         }
1348
1349         optionsize = (tcph->doff << 2) - sizeof(struct tcphdr);
1350
1351         skb_pull(skb, ip_hdr(skb)->ihl << 2);
1352         skb_pull(skb, tcph->doff << 2);
1353
1354         datasize = skb->len;
1355         inc_sequence = ntohl(tcph->seq);
1356         nes_debug(NES_DBG_CM, "datasize = %u, sequence = 0x%08X, ack_seq = 0x%08X,"
1357                         " rcv_nxt = 0x%08X Flags: %s %s.\n",
1358                         datasize, inc_sequence, ntohl(tcph->ack_seq),
1359                         cm_node->tcp_cntxt.rcv_nxt, (tcph->syn ? "SYN":""),
1360                         (tcph->ack ? "ACK":""));
1361
1362         if (!tcph->syn && (inc_sequence != cm_node->tcp_cntxt.rcv_nxt)
1363                 ) {
1364                 nes_debug(NES_DBG_CM, "dropping packet, datasize = %u, sequence = 0x%08X,"
1365                                 " ack_seq = 0x%08X, rcv_nxt = 0x%08X Flags: %s.\n",
1366                                 datasize, inc_sequence, ntohl(tcph->ack_seq),
1367                                 cm_node->tcp_cntxt.rcv_nxt, (tcph->ack ? "ACK":""));
1368                 if (cm_node->state == NES_CM_STATE_LISTENING) {
1369                         rem_ref_cm_node(cm_core, cm_node);
1370                 }
1371                 return -1;
1372         }
1373
1374                 cm_node->tcp_cntxt.rcv_nxt = inc_sequence + datasize;
1375
1376
1377         if (optionsize) {
1378                 u8 *optionsloc = (u8 *)&tcph[1];
1379                 if (process_options(cm_node, optionsloc, optionsize, (u32)tcph->syn)) {
1380                         nes_debug(NES_DBG_CM, "%s: Node %p, Sending RESET\n", __func__, cm_node);
1381                         send_reset(cm_node);
1382                         if (cm_node->state != NES_CM_STATE_SYN_SENT)
1383                         rem_ref_cm_node(cm_core, cm_node);
1384                         return 0;
1385                 }
1386         } else if (tcph->syn)
1387                 cm_node->tcp_cntxt.mss = NES_CM_DEFAULT_MSS;
1388
1389         cm_node->tcp_cntxt.snd_wnd = ntohs(tcph->window) <<
1390                         cm_node->tcp_cntxt.snd_wscale;
1391
1392         if (cm_node->tcp_cntxt.snd_wnd > cm_node->tcp_cntxt.max_snd_wnd) {
1393                 cm_node->tcp_cntxt.max_snd_wnd = cm_node->tcp_cntxt.snd_wnd;
1394         }
1395
1396         if (tcph->ack) {
1397                 cm_node->tcp_cntxt.rem_ack_num = ntohl(tcph->ack_seq);
1398                 switch (cm_node->state) {
1399                         case NES_CM_STATE_SYN_RCVD:
1400                         case NES_CM_STATE_SYN_SENT:
1401                                 /* read and stash current sequence number */
1402                                 if (cm_node->tcp_cntxt.rem_ack_num != cm_node->tcp_cntxt.loc_seq_num) {
1403                                         nes_debug(NES_DBG_CM, "ERROR - cm_node->tcp_cntxt.rem_ack_num !="
1404                                                         " cm_node->tcp_cntxt.loc_seq_num\n");
1405                                         send_reset(cm_node);
1406                                         return 0;
1407                                 }
1408                                 if (cm_node->state == NES_CM_STATE_SYN_SENT)
1409                                         cm_node->state = NES_CM_STATE_ONE_SIDE_ESTABLISHED;
1410                                 else {
1411                                                 cm_node->state = NES_CM_STATE_ESTABLISHED;
1412                                 }
1413                                 break;
1414                         case NES_CM_STATE_LAST_ACK:
1415                                 cm_node->state = NES_CM_STATE_CLOSED;
1416                                 break;
1417                         case NES_CM_STATE_FIN_WAIT1:
1418                                 cm_node->state = NES_CM_STATE_FIN_WAIT2;
1419                                 break;
1420                         case NES_CM_STATE_CLOSING:
1421                                 cm_node->state = NES_CM_STATE_TIME_WAIT;
1422                                 /* need to schedule this to happen in 2MSL timeouts */
1423                                 cm_node->state = NES_CM_STATE_CLOSED;
1424                                 break;
1425                         case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
1426                         case NES_CM_STATE_ESTABLISHED:
1427                         case NES_CM_STATE_MPAREQ_SENT:
1428                         case NES_CM_STATE_CLOSE_WAIT:
1429                         case NES_CM_STATE_TIME_WAIT:
1430                         case NES_CM_STATE_CLOSED:
1431                                 break;
1432                         case NES_CM_STATE_LISTENING:
1433                                 nes_debug(NES_DBG_CM, "Received an ACK on a listening port (SYN %d)\n", tcph->syn);
1434                                 cm_node->tcp_cntxt.loc_seq_num = ntohl(tcph->ack_seq);
1435                                 send_reset(cm_node);
1436                                 /* send_reset bumps refcount, this should have been a new node */
1437                                 rem_ref_cm_node(cm_core, cm_node);
1438                                 return -1;
1439                                 break;
1440                         case NES_CM_STATE_TSA:
1441                                 nes_debug(NES_DBG_CM, "Received a packet with the ack bit set while in TSA state\n");
1442                                 break;
1443                         case NES_CM_STATE_UNKNOWN:
1444                         case NES_CM_STATE_INITED:
1445                         case NES_CM_STATE_ACCEPTING:
1446                         case NES_CM_STATE_FIN_WAIT2:
1447                         default:
1448                                 nes_debug(NES_DBG_CM, "Received ack from unknown state: %x\n",
1449                                                 cm_node->state);
1450                                 send_reset(cm_node);
1451                                 break;
1452                 }
1453         }
1454
1455         if (tcph->syn) {
1456                 if (cm_node->state == NES_CM_STATE_LISTENING) {
1457                         /* do not exceed backlog */
1458                         atomic_inc(&cm_node->listener->pend_accepts_cnt);
1459                         if (atomic_read(&cm_node->listener->pend_accepts_cnt) >
1460                                         cm_node->listener->backlog) {
1461                                 nes_debug(NES_DBG_CM, "drop syn due to backlog pressure \n");
1462                                 cm_backlog_drops++;
1463                                 atomic_dec(&cm_node->listener->pend_accepts_cnt);
1464                                 rem_ref_cm_node(cm_core, cm_node);
1465                                 return 0;
1466                         }
1467                         cm_node->accept_pend = 1;
1468
1469                 }
1470                 if (datasize == 0)
1471                         cm_node->tcp_cntxt.rcv_nxt ++;
1472
1473                 if (cm_node->state == NES_CM_STATE_LISTENING) {
1474                         cm_node->state = NES_CM_STATE_SYN_RCVD;
1475                         send_syn(cm_node, 1);
1476                 }
1477                 if (cm_node->state == NES_CM_STATE_ONE_SIDE_ESTABLISHED) {
1478                         cm_node->state = NES_CM_STATE_ESTABLISHED;
1479                         /* send final handshake ACK */
1480                         ret = send_ack(cm_node);
1481                         if (ret < 0)
1482                                 return ret;
1483
1484                                 cm_node->state = NES_CM_STATE_MPAREQ_SENT;
1485                                 ret = send_mpa_request(cm_node);
1486                                 if (ret < 0)
1487                                         return ret;
1488                 }
1489         }
1490
1491         if (tcph->fin) {
1492                 cm_node->tcp_cntxt.rcv_nxt++;
1493                 switch (cm_node->state) {
1494                         case NES_CM_STATE_SYN_RCVD:
1495                         case NES_CM_STATE_SYN_SENT:
1496                         case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
1497                         case NES_CM_STATE_ESTABLISHED:
1498                         case NES_CM_STATE_ACCEPTING:
1499                         case NES_CM_STATE_MPAREQ_SENT:
1500                                 cm_node->state = NES_CM_STATE_CLOSE_WAIT;
1501                                 cm_node->state = NES_CM_STATE_LAST_ACK;
1502                                 ret = send_fin(cm_node, NULL);
1503                                 break;
1504                         case NES_CM_STATE_FIN_WAIT1:
1505                                 cm_node->state = NES_CM_STATE_CLOSING;
1506                                 ret = send_ack(cm_node);
1507                                 break;
1508                         case NES_CM_STATE_FIN_WAIT2:
1509                                 cm_node->state = NES_CM_STATE_TIME_WAIT;
1510                                 cm_node->tcp_cntxt.loc_seq_num ++;
1511                                 ret = send_ack(cm_node);
1512                                 /* need to schedule this to happen in 2MSL timeouts */
1513                                 cm_node->state = NES_CM_STATE_CLOSED;
1514                                 break;
1515                         case NES_CM_STATE_CLOSE_WAIT:
1516                         case NES_CM_STATE_LAST_ACK:
1517                         case NES_CM_STATE_CLOSING:
1518                         case NES_CM_STATE_TSA:
1519                         default:
1520                                 nes_debug(NES_DBG_CM, "Received a fin while in %x state\n",
1521                                                 cm_node->state);
1522                                 ret = -EINVAL;
1523                                 break;
1524                 }
1525         }
1526
1527         if (datasize) {
1528                 u8 *dataloc = skb->data;
1529                 /* figure out what state we are in and handle transition to next state */
1530                 switch (cm_node->state) {
1531                         case NES_CM_STATE_LISTENING:
1532                         case NES_CM_STATE_SYN_RCVD:
1533                         case NES_CM_STATE_SYN_SENT:
1534                         case NES_CM_STATE_FIN_WAIT1:
1535                         case NES_CM_STATE_FIN_WAIT2:
1536                         case NES_CM_STATE_CLOSE_WAIT:
1537                         case NES_CM_STATE_LAST_ACK:
1538                         case NES_CM_STATE_CLOSING:
1539                                 break;
1540                         case  NES_CM_STATE_MPAREQ_SENT:
1541                                 /* recv the mpa res frame, ret=frame len (incl priv data) */
1542                                 ret = parse_mpa(cm_node, dataloc, datasize);
1543                                 if (ret < 0)
1544                                         break;
1545                                 /* set the req frame payload len in skb */
1546                                 /* we are done handling this state, set node to a TSA state */
1547                                 cm_node->state = NES_CM_STATE_TSA;
1548                                 send_ack(cm_node);
1549                                 create_event(cm_node, NES_CM_EVENT_CONNECTED);
1550                                 break;
1551
1552                         case  NES_CM_STATE_ESTABLISHED:
1553                                 /* we are expecting an MPA req frame */
1554                                 ret = parse_mpa(cm_node, dataloc, datasize);
1555                                 if (ret < 0) {
1556                                         break;
1557                                 }
1558                                 cm_node->state = NES_CM_STATE_TSA;
1559                                 send_ack(cm_node);
1560                                 /* we got a valid MPA request, create an event */
1561                                 create_event(cm_node, NES_CM_EVENT_MPA_REQ);
1562                                 break;
1563                         case  NES_CM_STATE_TSA:
1564                                 handle_exception_pkt(cm_node, skb);
1565                                 break;
1566                         case NES_CM_STATE_UNKNOWN:
1567                         case NES_CM_STATE_INITED:
1568                         default:
1569                                 ret = -1;
1570                 }
1571         }
1572
1573         return ret;
1574 }
1575
1576
1577 /**
1578  * mini_cm_listen - create a listen node with params
1579  */
1580 static struct nes_cm_listener *mini_cm_listen(struct nes_cm_core *cm_core,
1581                 struct nes_vnic *nesvnic, struct nes_cm_info *cm_info)
1582 {
1583         struct nes_cm_listener *listener;
1584         unsigned long flags;
1585
1586         nes_debug(NES_DBG_CM, "Search for 0x%08x : 0x%04x\n",
1587                 cm_info->loc_addr, cm_info->loc_port);
1588
1589         /* cannot have multiple matching listeners */
1590         listener = find_listener(cm_core, htonl(cm_info->loc_addr),
1591                         htons(cm_info->loc_port), NES_CM_LISTENER_EITHER_STATE);
1592         if (listener && listener->listener_state == NES_CM_LISTENER_ACTIVE_STATE) {
1593                 /* find automatically incs ref count ??? */
1594                 atomic_dec(&listener->ref_count);
1595                 nes_debug(NES_DBG_CM, "Not creating listener since it already exists\n");
1596                 return NULL;
1597         }
1598
1599         if (!listener) {
1600                 /* create a CM listen node (1/2 node to compare incoming traffic to) */
1601                 listener = kzalloc(sizeof(*listener), GFP_ATOMIC);
1602                 if (!listener) {
1603                         nes_debug(NES_DBG_CM, "Not creating listener memory allocation failed\n");
1604                         return NULL;
1605                 }
1606
1607                 memset(listener, 0, sizeof(struct nes_cm_listener));
1608                 listener->loc_addr = htonl(cm_info->loc_addr);
1609                 listener->loc_port = htons(cm_info->loc_port);
1610                 listener->reused_node = 0;
1611
1612                 atomic_set(&listener->ref_count, 1);
1613         }
1614         /* pasive case */
1615         /* find already inc'ed the ref count */
1616         else {
1617                 listener->reused_node = 1;
1618         }
1619
1620         listener->cm_id = cm_info->cm_id;
1621         atomic_set(&listener->pend_accepts_cnt, 0);
1622         listener->cm_core = cm_core;
1623         listener->nesvnic = nesvnic;
1624         atomic_inc(&cm_core->node_cnt);
1625
1626         listener->conn_type = cm_info->conn_type;
1627         listener->backlog = cm_info->backlog;
1628         listener->listener_state = NES_CM_LISTENER_ACTIVE_STATE;
1629
1630         if (!listener->reused_node) {
1631                 spin_lock_irqsave(&cm_core->listen_list_lock, flags);
1632                 list_add(&listener->list, &cm_core->listen_list.list);
1633                 spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
1634                 atomic_inc(&cm_core->listen_node_cnt);
1635         }
1636
1637         nes_debug(NES_DBG_CM, "Api - listen(): addr=0x%08X, port=0x%04x,"
1638                         " listener = %p, backlog = %d, cm_id = %p.\n",
1639                         cm_info->loc_addr, cm_info->loc_port,
1640                         listener, listener->backlog, listener->cm_id);
1641
1642         return listener;
1643 }
1644
1645
1646 /**
1647  * mini_cm_connect - make a connection node with params
1648  */
1649 static struct nes_cm_node *mini_cm_connect(struct nes_cm_core *cm_core,
1650                                            struct nes_vnic *nesvnic,
1651                                            struct ietf_mpa_frame *mpa_frame,
1652                                            struct nes_cm_info *cm_info)
1653 {
1654         int ret = 0;
1655         struct nes_cm_node *cm_node;
1656         struct nes_cm_listener *loopbackremotelistener;
1657         struct nes_cm_node *loopbackremotenode;
1658         struct nes_cm_info loopback_cm_info;
1659
1660         u16 mpa_frame_size = sizeof(struct ietf_mpa_frame) +
1661                         ntohs(mpa_frame->priv_data_len);
1662
1663         cm_info->loc_addr = htonl(cm_info->loc_addr);
1664         cm_info->rem_addr = htonl(cm_info->rem_addr);
1665         cm_info->loc_port = htons(cm_info->loc_port);
1666         cm_info->rem_port = htons(cm_info->rem_port);
1667
1668         /* create a CM connection node */
1669         cm_node = make_cm_node(cm_core, nesvnic, cm_info, NULL);
1670         if (!cm_node)
1671                 return NULL;
1672
1673         // set our node side to client (active) side
1674         cm_node->tcp_cntxt.client = 1;
1675         cm_node->tcp_cntxt.rcv_wscale = NES_CM_DEFAULT_RCV_WND_SCALE;
1676
1677         if (cm_info->loc_addr == cm_info->rem_addr) {
1678                 loopbackremotelistener = find_listener(cm_core, cm_node->rem_addr,
1679                                 cm_node->rem_port, NES_CM_LISTENER_ACTIVE_STATE);
1680                 if (loopbackremotelistener == NULL) {
1681                         create_event(cm_node, NES_CM_EVENT_ABORTED);
1682                 } else {
1683                         atomic_inc(&cm_loopbacks);
1684                         loopback_cm_info = *cm_info;
1685                         loopback_cm_info.loc_port = cm_info->rem_port;
1686                         loopback_cm_info.rem_port = cm_info->loc_port;
1687                         loopback_cm_info.cm_id = loopbackremotelistener->cm_id;
1688                         loopbackremotenode = make_cm_node(cm_core, nesvnic, &loopback_cm_info,
1689                                         loopbackremotelistener);
1690                         loopbackremotenode->loopbackpartner = cm_node;
1691                         loopbackremotenode->tcp_cntxt.rcv_wscale = NES_CM_DEFAULT_RCV_WND_SCALE;
1692                         cm_node->loopbackpartner = loopbackremotenode;
1693                         memcpy(loopbackremotenode->mpa_frame_buf, &mpa_frame->priv_data,
1694                                         mpa_frame_size);
1695                         loopbackremotenode->mpa_frame_size = mpa_frame_size -
1696                                         sizeof(struct ietf_mpa_frame);
1697
1698                         // we are done handling this state, set node to a TSA state
1699                         cm_node->state = NES_CM_STATE_TSA;
1700                         cm_node->tcp_cntxt.rcv_nxt = loopbackremotenode->tcp_cntxt.loc_seq_num;
1701                         loopbackremotenode->tcp_cntxt.rcv_nxt = cm_node->tcp_cntxt.loc_seq_num;
1702                         cm_node->tcp_cntxt.max_snd_wnd = loopbackremotenode->tcp_cntxt.rcv_wnd;
1703                         loopbackremotenode->tcp_cntxt.max_snd_wnd = cm_node->tcp_cntxt.rcv_wnd;
1704                         cm_node->tcp_cntxt.snd_wnd = loopbackremotenode->tcp_cntxt.rcv_wnd;
1705                         loopbackremotenode->tcp_cntxt.snd_wnd = cm_node->tcp_cntxt.rcv_wnd;
1706                         cm_node->tcp_cntxt.snd_wscale = loopbackremotenode->tcp_cntxt.rcv_wscale;
1707                         loopbackremotenode->tcp_cntxt.snd_wscale = cm_node->tcp_cntxt.rcv_wscale;
1708
1709                         create_event(loopbackremotenode, NES_CM_EVENT_MPA_REQ);
1710                 }
1711                 return cm_node;
1712         }
1713
1714         /* set our node side to client (active) side */
1715         cm_node->tcp_cntxt.client = 1;
1716         /* init our MPA frame ptr */
1717         memcpy(&cm_node->mpa_frame, mpa_frame, mpa_frame_size);
1718         cm_node->mpa_frame_size = mpa_frame_size;
1719
1720         /* send a syn and goto syn sent state */
1721         cm_node->state = NES_CM_STATE_SYN_SENT;
1722         ret = send_syn(cm_node, 0);
1723
1724         nes_debug(NES_DBG_CM, "Api - connect(): dest addr=0x%08X, port=0x%04x,"
1725                         " cm_node=%p, cm_id = %p.\n",
1726                         cm_node->rem_addr, cm_node->rem_port, cm_node, cm_node->cm_id);
1727
1728         return cm_node;
1729 }
1730
1731
1732 /**
1733  * mini_cm_accept - accept a connection
1734  * This function is never called
1735  */
1736 static int mini_cm_accept(struct nes_cm_core *cm_core, struct ietf_mpa_frame *mpa_frame,
1737                           struct nes_cm_node *cm_node)
1738 {
1739         return 0;
1740 }
1741
1742
1743 /**
1744  * mini_cm_reject - reject and teardown a connection
1745  */
1746 static int mini_cm_reject(struct nes_cm_core *cm_core,
1747                           struct ietf_mpa_frame *mpa_frame,
1748                           struct nes_cm_node *cm_node)
1749 {
1750         int ret = 0;
1751         struct sk_buff *skb;
1752         u16 mpa_frame_size = sizeof(struct ietf_mpa_frame) +
1753                         ntohs(mpa_frame->priv_data_len);
1754
1755         skb = get_free_pkt(cm_node);
1756         if (!skb) {
1757                 nes_debug(NES_DBG_CM, "Failed to get a Free pkt\n");
1758                 return -1;
1759         }
1760
1761         /* send an MPA Request frame */
1762         form_cm_frame(skb, cm_node, NULL, 0, mpa_frame, mpa_frame_size, SET_ACK | SET_FIN);
1763         ret = schedule_nes_timer(cm_node, skb, NES_TIMER_TYPE_SEND, 1, 0);
1764
1765         cm_node->state = NES_CM_STATE_CLOSED;
1766         ret = send_fin(cm_node, NULL);
1767
1768         if (ret < 0) {
1769                 printk(KERN_INFO PFX "failed to send MPA Reply (reject)\n");
1770                 return ret;
1771         }
1772
1773         return ret;
1774 }
1775
1776
1777 /**
1778  * mini_cm_close
1779  */
1780 static int mini_cm_close(struct nes_cm_core *cm_core, struct nes_cm_node *cm_node)
1781 {
1782         int ret = 0;
1783
1784         if (!cm_core || !cm_node)
1785                 return -EINVAL;
1786
1787         switch (cm_node->state) {
1788                 /* if passed in node is null, create a reference key node for node search */
1789                 /* check if we found an owner node for this pkt */
1790                 case NES_CM_STATE_SYN_RCVD:
1791                 case NES_CM_STATE_SYN_SENT:
1792                 case NES_CM_STATE_ONE_SIDE_ESTABLISHED:
1793                 case NES_CM_STATE_ESTABLISHED:
1794                 case NES_CM_STATE_ACCEPTING:
1795                 case NES_CM_STATE_MPAREQ_SENT:
1796                         cm_node->state = NES_CM_STATE_FIN_WAIT1;
1797                         send_fin(cm_node, NULL);
1798                         break;
1799                 case NES_CM_STATE_CLOSE_WAIT:
1800                         cm_node->state = NES_CM_STATE_LAST_ACK;
1801                         send_fin(cm_node, NULL);
1802                         break;
1803                 case NES_CM_STATE_FIN_WAIT1:
1804                 case NES_CM_STATE_FIN_WAIT2:
1805                 case NES_CM_STATE_LAST_ACK:
1806                 case NES_CM_STATE_TIME_WAIT:
1807                 case NES_CM_STATE_CLOSING:
1808                         ret = -1;
1809                         break;
1810                 case NES_CM_STATE_LISTENING:
1811                 case NES_CM_STATE_UNKNOWN:
1812                 case NES_CM_STATE_INITED:
1813                 case NES_CM_STATE_CLOSED:
1814                 case NES_CM_STATE_TSA:
1815                         ret = rem_ref_cm_node(cm_core, cm_node);
1816                         break;
1817         }
1818         cm_node->cm_id = NULL;
1819         return ret;
1820 }
1821
1822
1823 /**
1824  * recv_pkt - recv an ETHERNET packet, and process it through CM
1825  * node state machine
1826  */
1827 static int mini_cm_recv_pkt(struct nes_cm_core *cm_core, struct nes_vnic *nesvnic,
1828                             struct sk_buff *skb)
1829 {
1830         struct nes_cm_node *cm_node = NULL;
1831         struct nes_cm_listener *listener = NULL;
1832         struct iphdr *iph;
1833         struct tcphdr *tcph;
1834         struct nes_cm_info nfo;
1835         int ret = 0;
1836
1837         if (!skb || skb->len < sizeof(struct iphdr) + sizeof(struct tcphdr)) {
1838                 ret = -EINVAL;
1839                 goto out;
1840         }
1841
1842         iph = (struct iphdr *)skb->data;
1843         tcph = (struct tcphdr *)(skb->data + sizeof(struct iphdr));
1844         skb_reset_network_header(skb);
1845         skb_set_transport_header(skb, sizeof(*tcph));
1846         skb->len = ntohs(iph->tot_len);
1847
1848         nfo.loc_addr = ntohl(iph->daddr);
1849         nfo.loc_port = ntohs(tcph->dest);
1850         nfo.rem_addr = ntohl(iph->saddr);
1851         nfo.rem_port = ntohs(tcph->source);
1852
1853         nes_debug(NES_DBG_CM, "Received packet: dest=0x%08X:0x%04X src=0x%08X:0x%04X\n",
1854                         iph->daddr, tcph->dest, iph->saddr, tcph->source);
1855
1856         /* note: this call is going to increment cm_node ref count */
1857         cm_node = find_node(cm_core,
1858                         nfo.rem_port, nfo.rem_addr,
1859                         nfo.loc_port, nfo.loc_addr);
1860
1861         if (!cm_node) {
1862                 listener = find_listener(cm_core, nfo.loc_addr, nfo.loc_port,
1863                                 NES_CM_LISTENER_ACTIVE_STATE);
1864                 if (listener) {
1865                         nfo.cm_id = listener->cm_id;
1866                         nfo.conn_type = listener->conn_type;
1867                 } else {
1868                         nfo.cm_id = NULL;
1869                         nfo.conn_type = 0;
1870                 }
1871
1872                 cm_node = make_cm_node(cm_core, nesvnic, &nfo, listener);
1873                 if (!cm_node) {
1874                         nes_debug(NES_DBG_CM, "Unable to allocate node\n");
1875                         if (listener) {
1876                                 nes_debug(NES_DBG_CM, "unable to allocate node and decrementing listener refcount\n");
1877                                 atomic_dec(&listener->ref_count);
1878                         }
1879                         ret = -1;
1880                         goto out;
1881                 }
1882                 if (!listener) {
1883                         nes_debug(NES_DBG_CM, "Packet found for unknown port %x refcnt=%d\n",
1884                                         nfo.loc_port, atomic_read(&cm_node->ref_count));
1885                         if (!tcph->rst) {
1886                                 nes_debug(NES_DBG_CM, "Packet found for unknown port=%d"
1887                                                 " rem_port=%d refcnt=%d\n",
1888                                                 nfo.loc_port, nfo.rem_port, atomic_read(&cm_node->ref_count));
1889
1890                                 cm_node->tcp_cntxt.rcv_nxt = ntohl(tcph->seq);
1891                                 cm_node->tcp_cntxt.loc_seq_num = ntohl(tcph->ack_seq);
1892                                 send_reset(cm_node);
1893                         }
1894                         rem_ref_cm_node(cm_core, cm_node);
1895                         ret = -1;
1896                         goto out;
1897                 }
1898                 add_ref_cm_node(cm_node);
1899                 cm_node->state = NES_CM_STATE_LISTENING;
1900         }
1901
1902         nes_debug(NES_DBG_CM, "Processing Packet for node %p, data = (%p):\n",
1903                         cm_node, skb->data);
1904         process_packet(cm_node, skb, cm_core);
1905
1906         rem_ref_cm_node(cm_core, cm_node);
1907         out:
1908         if (skb)
1909                 dev_kfree_skb_any(skb);
1910         return ret;
1911 }
1912
1913
1914 /**
1915  * nes_cm_alloc_core - allocate a top level instance of a cm core
1916  */
1917 static struct nes_cm_core *nes_cm_alloc_core(void)
1918 {
1919         int i;
1920
1921         struct nes_cm_core *cm_core;
1922         struct sk_buff *skb = NULL;
1923
1924         /* setup the CM core */
1925         /* alloc top level core control structure */
1926         cm_core = kzalloc(sizeof(*cm_core), GFP_KERNEL);
1927         if (!cm_core)
1928                 return NULL;
1929
1930         INIT_LIST_HEAD(&cm_core->connected_nodes);
1931         init_timer(&cm_core->tcp_timer);
1932         cm_core->tcp_timer.function = nes_cm_timer_tick;
1933
1934         cm_core->mtu   = NES_CM_DEFAULT_MTU;
1935         cm_core->state = NES_CM_STATE_INITED;
1936         cm_core->free_tx_pkt_max = NES_CM_DEFAULT_FREE_PKTS;
1937
1938         atomic_set(&cm_core->events_posted, 0);
1939
1940         /* init the packet lists */
1941         skb_queue_head_init(&cm_core->tx_free_list);
1942
1943         for (i = 0; i < NES_CM_DEFAULT_FRAME_CNT; i++) {
1944                 skb = dev_alloc_skb(cm_core->mtu);
1945                 if (!skb) {
1946                         kfree(cm_core);
1947                         return NULL;
1948                 }
1949                 /* add 'raw' skb to free frame list */
1950                 skb_queue_head(&cm_core->tx_free_list, skb);
1951         }
1952
1953         cm_core->api = &nes_cm_api;
1954
1955         spin_lock_init(&cm_core->ht_lock);
1956         spin_lock_init(&cm_core->listen_list_lock);
1957
1958         INIT_LIST_HEAD(&cm_core->listen_list.list);
1959
1960         nes_debug(NES_DBG_CM, "Init CM Core completed -- cm_core=%p\n", cm_core);
1961
1962         nes_debug(NES_DBG_CM, "Enable QUEUE EVENTS\n");
1963         cm_core->event_wq = create_singlethread_workqueue("nesewq");
1964         cm_core->post_event = nes_cm_post_event;
1965         nes_debug(NES_DBG_CM, "Enable QUEUE DISCONNECTS\n");
1966         cm_core->disconn_wq = create_singlethread_workqueue("nesdwq");
1967
1968         print_core(cm_core);
1969         return cm_core;
1970 }
1971
1972
1973 /**
1974  * mini_cm_dealloc_core - deallocate a top level instance of a cm core
1975  */
1976 static int mini_cm_dealloc_core(struct nes_cm_core *cm_core)
1977 {
1978         nes_debug(NES_DBG_CM, "De-Alloc CM Core (%p)\n", cm_core);
1979
1980         if (!cm_core)
1981                 return -EINVAL;
1982
1983         barrier();
1984
1985         if (timer_pending(&cm_core->tcp_timer)) {
1986                 del_timer(&cm_core->tcp_timer);
1987         }
1988
1989         destroy_workqueue(cm_core->event_wq);
1990         destroy_workqueue(cm_core->disconn_wq);
1991         nes_debug(NES_DBG_CM, "\n");
1992         kfree(cm_core);
1993
1994         return 0;
1995 }
1996
1997
1998 /**
1999  * mini_cm_get
2000  */
2001 static int mini_cm_get(struct nes_cm_core *cm_core)
2002 {
2003         return cm_core->state;
2004 }
2005
2006
2007 /**
2008  * mini_cm_set
2009  */
2010 static int mini_cm_set(struct nes_cm_core *cm_core, u32 type, u32 value)
2011 {
2012         int ret = 0;
2013
2014         switch (type) {
2015                 case NES_CM_SET_PKT_SIZE:
2016                         cm_core->mtu = value;
2017                         break;
2018                 case NES_CM_SET_FREE_PKT_Q_SIZE:
2019                         cm_core->free_tx_pkt_max = value;
2020                         break;
2021                 default:
2022                         /* unknown set option */
2023                         ret = -EINVAL;
2024         }
2025
2026         return ret;
2027 }
2028
2029
2030 /**
2031  * nes_cm_init_tsa_conn setup HW; MPA frames must be
2032  * successfully exchanged when this is called
2033  */
2034 static int nes_cm_init_tsa_conn(struct nes_qp *nesqp, struct nes_cm_node *cm_node)
2035 {
2036         int ret = 0;
2037
2038         if (!nesqp)
2039                 return -EINVAL;
2040
2041         nesqp->nesqp_context->misc |= cpu_to_le32(NES_QPCONTEXT_MISC_IPV4 |
2042                         NES_QPCONTEXT_MISC_NO_NAGLE | NES_QPCONTEXT_MISC_DO_NOT_FRAG |
2043                         NES_QPCONTEXT_MISC_DROS);
2044
2045         if (cm_node->tcp_cntxt.snd_wscale || cm_node->tcp_cntxt.rcv_wscale)
2046                 nesqp->nesqp_context->misc |= cpu_to_le32(NES_QPCONTEXT_MISC_WSCALE);
2047
2048         nesqp->nesqp_context->misc2 |= cpu_to_le32(64 << NES_QPCONTEXT_MISC2_TTL_SHIFT);
2049
2050         nesqp->nesqp_context->mss |= cpu_to_le32(((u32)cm_node->tcp_cntxt.mss) << 16);
2051
2052         nesqp->nesqp_context->tcp_state_flow_label |= cpu_to_le32(
2053                         (u32)NES_QPCONTEXT_TCPSTATE_EST << NES_QPCONTEXT_TCPFLOW_TCP_STATE_SHIFT);
2054
2055         nesqp->nesqp_context->pd_index_wscale |= cpu_to_le32(
2056                         (cm_node->tcp_cntxt.snd_wscale << NES_QPCONTEXT_PDWSCALE_SND_WSCALE_SHIFT) &
2057                         NES_QPCONTEXT_PDWSCALE_SND_WSCALE_MASK);
2058
2059         nesqp->nesqp_context->pd_index_wscale |= cpu_to_le32(
2060                         (cm_node->tcp_cntxt.rcv_wscale << NES_QPCONTEXT_PDWSCALE_RCV_WSCALE_SHIFT) &
2061                         NES_QPCONTEXT_PDWSCALE_RCV_WSCALE_MASK);
2062
2063         nesqp->nesqp_context->keepalive = cpu_to_le32(0x80);
2064         nesqp->nesqp_context->ts_recent = 0;
2065         nesqp->nesqp_context->ts_age = 0;
2066         nesqp->nesqp_context->snd_nxt = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
2067         nesqp->nesqp_context->snd_wnd = cpu_to_le32(cm_node->tcp_cntxt.snd_wnd);
2068         nesqp->nesqp_context->rcv_nxt = cpu_to_le32(cm_node->tcp_cntxt.rcv_nxt);
2069         nesqp->nesqp_context->rcv_wnd = cpu_to_le32(cm_node->tcp_cntxt.rcv_wnd <<
2070                         cm_node->tcp_cntxt.rcv_wscale);
2071         nesqp->nesqp_context->snd_max = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
2072         nesqp->nesqp_context->snd_una = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
2073         nesqp->nesqp_context->srtt = 0;
2074         nesqp->nesqp_context->rttvar = cpu_to_le32(0x6);
2075         nesqp->nesqp_context->ssthresh = cpu_to_le32(0x3FFFC000);
2076         nesqp->nesqp_context->cwnd = cpu_to_le32(2*cm_node->tcp_cntxt.mss);
2077         nesqp->nesqp_context->snd_wl1 = cpu_to_le32(cm_node->tcp_cntxt.rcv_nxt);
2078         nesqp->nesqp_context->snd_wl2 = cpu_to_le32(cm_node->tcp_cntxt.loc_seq_num);
2079         nesqp->nesqp_context->max_snd_wnd = cpu_to_le32(cm_node->tcp_cntxt.max_snd_wnd);
2080
2081         nes_debug(NES_DBG_CM, "QP%u: rcv_nxt = 0x%08X, snd_nxt = 0x%08X,"
2082                         " Setting MSS to %u, PDWscale = 0x%08X, rcv_wnd = %u, context misc = 0x%08X.\n",
2083                         nesqp->hwqp.qp_id, le32_to_cpu(nesqp->nesqp_context->rcv_nxt),
2084                         le32_to_cpu(nesqp->nesqp_context->snd_nxt),
2085                         cm_node->tcp_cntxt.mss, le32_to_cpu(nesqp->nesqp_context->pd_index_wscale),
2086                         le32_to_cpu(nesqp->nesqp_context->rcv_wnd),
2087                         le32_to_cpu(nesqp->nesqp_context->misc));
2088         nes_debug(NES_DBG_CM, "  snd_wnd  = 0x%08X.\n", le32_to_cpu(nesqp->nesqp_context->snd_wnd));
2089         nes_debug(NES_DBG_CM, "  snd_cwnd = 0x%08X.\n", le32_to_cpu(nesqp->nesqp_context->cwnd));
2090         nes_debug(NES_DBG_CM, "  max_swnd = 0x%08X.\n", le32_to_cpu(nesqp->nesqp_context->max_snd_wnd));
2091
2092         nes_debug(NES_DBG_CM, "Change cm_node state to TSA\n");
2093         cm_node->state = NES_CM_STATE_TSA;
2094
2095         return ret;
2096 }
2097
2098
2099 /**
2100  * nes_cm_disconn
2101  */
2102 int nes_cm_disconn(struct nes_qp *nesqp)
2103 {
2104         unsigned long flags;
2105
2106         spin_lock_irqsave(&nesqp->lock, flags);
2107         if (nesqp->disconn_pending == 0) {
2108                 nesqp->disconn_pending++;
2109                 spin_unlock_irqrestore(&nesqp->lock, flags);
2110                 /* nes_add_ref(&nesqp->ibqp); */
2111                 /* init our disconnect work element, to */
2112                 INIT_WORK(&nesqp->disconn_work, nes_disconnect_worker);
2113
2114                 queue_work(g_cm_core->disconn_wq, &nesqp->disconn_work);
2115         } else {
2116                 spin_unlock_irqrestore(&nesqp->lock, flags);
2117                 nes_rem_ref(&nesqp->ibqp);
2118         }
2119
2120         return 0;
2121 }
2122
2123
2124 /**
2125  * nes_disconnect_worker
2126  */
2127 static void nes_disconnect_worker(struct work_struct *work)
2128 {
2129         struct nes_qp *nesqp = container_of(work, struct nes_qp, disconn_work);
2130
2131         nes_debug(NES_DBG_CM, "processing AEQE id 0x%04X for QP%u.\n",
2132                         nesqp->last_aeq, nesqp->hwqp.qp_id);
2133         nes_cm_disconn_true(nesqp);
2134 }
2135
2136
2137 /**
2138  * nes_cm_disconn_true
2139  */
2140 static int nes_cm_disconn_true(struct nes_qp *nesqp)
2141 {
2142         unsigned long flags;
2143         int ret = 0;
2144         struct iw_cm_id *cm_id;
2145         struct iw_cm_event cm_event;
2146         struct nes_vnic *nesvnic;
2147         u16 last_ae;
2148         u8 original_hw_tcp_state;
2149         u8 original_ibqp_state;
2150         u8 issued_disconnect_reset = 0;
2151
2152         if (!nesqp) {
2153                 nes_debug(NES_DBG_CM, "disconnect_worker nesqp is NULL\n");
2154                 return -1;
2155         }
2156
2157         spin_lock_irqsave(&nesqp->lock, flags);
2158         cm_id = nesqp->cm_id;
2159         /* make sure we havent already closed this connection */
2160         if (!cm_id) {
2161                 nes_debug(NES_DBG_CM, "QP%u disconnect_worker cmid is NULL\n",
2162                                 nesqp->hwqp.qp_id);
2163                 spin_unlock_irqrestore(&nesqp->lock, flags);
2164                 nes_rem_ref(&nesqp->ibqp);
2165                 return -1;
2166         }
2167
2168         nesvnic = to_nesvnic(nesqp->ibqp.device);
2169         nes_debug(NES_DBG_CM, "Disconnecting QP%u\n", nesqp->hwqp.qp_id);
2170
2171         original_hw_tcp_state = nesqp->hw_tcp_state;
2172         original_ibqp_state   = nesqp->ibqp_state;
2173         last_ae = nesqp->last_aeq;
2174
2175
2176         nes_debug(NES_DBG_CM, "set ibqp_state=%u\n", nesqp->ibqp_state);
2177
2178         if ((nesqp->cm_id) && (cm_id->event_handler)) {
2179                 if ((original_hw_tcp_state == NES_AEQE_TCP_STATE_CLOSE_WAIT) ||
2180                                 ((original_ibqp_state == IB_QPS_RTS) &&
2181                                 (last_ae == NES_AEQE_AEID_LLP_CONNECTION_RESET))) {
2182                         atomic_inc(&cm_disconnects);
2183                         cm_event.event = IW_CM_EVENT_DISCONNECT;
2184                         if (last_ae == NES_AEQE_AEID_LLP_CONNECTION_RESET) {
2185                                 issued_disconnect_reset = 1;
2186                                 cm_event.status = IW_CM_EVENT_STATUS_RESET;
2187                                 nes_debug(NES_DBG_CM, "Generating a CM Disconnect Event (status reset) for "
2188                                                 " QP%u, cm_id = %p. \n",
2189                                                 nesqp->hwqp.qp_id, cm_id);
2190                         } else {
2191                                 cm_event.status = IW_CM_EVENT_STATUS_OK;
2192                         }
2193
2194                         cm_event.local_addr = cm_id->local_addr;
2195                         cm_event.remote_addr = cm_id->remote_addr;
2196                         cm_event.private_data = NULL;
2197                         cm_event.private_data_len = 0;
2198
2199                         nes_debug(NES_DBG_CM, "Generating a CM Disconnect Event for "
2200                                         " QP%u, SQ Head = %u, SQ Tail = %u. cm_id = %p, refcount = %u.\n",
2201                                         nesqp->hwqp.qp_id,
2202                                         nesqp->hwqp.sq_head, nesqp->hwqp.sq_tail, cm_id,
2203                                         atomic_read(&nesqp->refcount));
2204
2205                         spin_unlock_irqrestore(&nesqp->lock, flags);
2206                         ret = cm_id->event_handler(cm_id, &cm_event);
2207                         if (ret)
2208                                 nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
2209                         spin_lock_irqsave(&nesqp->lock, flags);
2210                 }
2211
2212                 nesqp->disconn_pending = 0;
2213                 /* There might have been another AE while the lock was released */
2214                 original_hw_tcp_state = nesqp->hw_tcp_state;
2215                 original_ibqp_state   = nesqp->ibqp_state;
2216                 last_ae = nesqp->last_aeq;
2217
2218                 if ((issued_disconnect_reset == 0) && (nesqp->cm_id) &&
2219                                 ((original_hw_tcp_state == NES_AEQE_TCP_STATE_CLOSED) ||
2220                                  (original_hw_tcp_state == NES_AEQE_TCP_STATE_TIME_WAIT) ||
2221                                  (last_ae == NES_AEQE_AEID_RDMAP_ROE_BAD_LLP_CLOSE) ||
2222                                  (last_ae == NES_AEQE_AEID_LLP_CONNECTION_RESET))) {
2223                         atomic_inc(&cm_closes);
2224                         nesqp->cm_id = NULL;
2225                         nesqp->in_disconnect = 0;
2226                         spin_unlock_irqrestore(&nesqp->lock, flags);
2227                         nes_disconnect(nesqp, 1);
2228
2229                         cm_id->provider_data = nesqp;
2230                         /* Send up the close complete event */
2231                         cm_event.event = IW_CM_EVENT_CLOSE;
2232                         cm_event.status = IW_CM_EVENT_STATUS_OK;
2233                         cm_event.provider_data = cm_id->provider_data;
2234                         cm_event.local_addr = cm_id->local_addr;
2235                         cm_event.remote_addr = cm_id->remote_addr;
2236                         cm_event.private_data = NULL;
2237                         cm_event.private_data_len = 0;
2238
2239                         ret = cm_id->event_handler(cm_id, &cm_event);
2240                         if (ret) {
2241                                 nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
2242                         }
2243
2244                         cm_id->rem_ref(cm_id);
2245
2246                         spin_lock_irqsave(&nesqp->lock, flags);
2247                         if (nesqp->flush_issued == 0) {
2248                                 nesqp->flush_issued = 1;
2249                                 spin_unlock_irqrestore(&nesqp->lock, flags);
2250                                 flush_wqes(nesvnic->nesdev, nesqp, NES_CQP_FLUSH_RQ, 1);
2251                         } else {
2252                                 spin_unlock_irqrestore(&nesqp->lock, flags);
2253                         }
2254
2255                         /* This reference is from either ModifyQP or the AE processing,
2256                                         there is still a race here with modifyqp */
2257                         nes_rem_ref(&nesqp->ibqp);
2258
2259                 } else {
2260                         cm_id = nesqp->cm_id;
2261                         spin_unlock_irqrestore(&nesqp->lock, flags);
2262                         /* check to see if the inbound reset beat the outbound reset */
2263                         if ((!cm_id) && (last_ae==NES_AEQE_AEID_RESET_SENT)) {
2264                                 nes_debug(NES_DBG_CM, "QP%u: Decing refcount due to inbound reset"
2265                                                 " beating the outbound reset.\n",
2266                                                 nesqp->hwqp.qp_id);
2267                                 nes_rem_ref(&nesqp->ibqp);
2268                         }
2269                 }
2270         } else {
2271                 nesqp->disconn_pending = 0;
2272                 spin_unlock_irqrestore(&nesqp->lock, flags);
2273         }
2274         nes_rem_ref(&nesqp->ibqp);
2275
2276         return 0;
2277 }
2278
2279
2280 /**
2281  * nes_disconnect
2282  */
2283 static int nes_disconnect(struct nes_qp *nesqp, int abrupt)
2284 {
2285         int ret = 0;
2286         struct nes_vnic *nesvnic;
2287         struct nes_device *nesdev;
2288
2289         nesvnic = to_nesvnic(nesqp->ibqp.device);
2290         if (!nesvnic)
2291                 return -EINVAL;
2292
2293         nesdev = nesvnic->nesdev;
2294
2295         nes_debug(NES_DBG_CM, "netdev refcnt = %u.\n",
2296                         atomic_read(&nesvnic->netdev->refcnt));
2297
2298         if (nesqp->active_conn) {
2299
2300                 /* indicate this connection is NOT active */
2301                 nesqp->active_conn = 0;
2302         } else {
2303                 /* Need to free the Last Streaming Mode Message */
2304                 if (nesqp->ietf_frame) {
2305                         pci_free_consistent(nesdev->pcidev,
2306                                         nesqp->private_data_len+sizeof(struct ietf_mpa_frame),
2307                                         nesqp->ietf_frame, nesqp->ietf_frame_pbase);
2308                 }
2309         }
2310
2311         /* close the CM node down if it is still active */
2312         if (nesqp->cm_node) {
2313                 nes_debug(NES_DBG_CM, "Call close API\n");
2314
2315                 g_cm_core->api->close(g_cm_core, nesqp->cm_node);
2316                 nesqp->cm_node = NULL;
2317         }
2318
2319         return ret;
2320 }
2321
2322
2323 /**
2324  * nes_accept
2325  */
2326 int nes_accept(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
2327 {
2328         u64 u64temp;
2329         struct ib_qp *ibqp;
2330         struct nes_qp *nesqp;
2331         struct nes_vnic *nesvnic;
2332         struct nes_device *nesdev;
2333         struct nes_cm_node *cm_node;
2334         struct nes_adapter *adapter;
2335         struct ib_qp_attr attr;
2336         struct iw_cm_event cm_event;
2337         struct nes_hw_qp_wqe *wqe;
2338         struct nes_v4_quad nes_quad;
2339         u32 crc_value;
2340         int ret;
2341
2342         ibqp = nes_get_qp(cm_id->device, conn_param->qpn);
2343         if (!ibqp)
2344                 return -EINVAL;
2345
2346         /* get all our handles */
2347         nesqp = to_nesqp(ibqp);
2348         nesvnic = to_nesvnic(nesqp->ibqp.device);
2349         nesdev = nesvnic->nesdev;
2350         adapter = nesdev->nesadapter;
2351
2352         nes_debug(NES_DBG_CM, "nesvnic=%p, netdev=%p, %s\n",
2353                         nesvnic, nesvnic->netdev, nesvnic->netdev->name);
2354
2355         /* since this is from a listen, we were able to put node handle into cm_id */
2356         cm_node = (struct nes_cm_node *)cm_id->provider_data;
2357
2358         /* associate the node with the QP */
2359         nesqp->cm_node = (void *)cm_node;
2360
2361         nes_debug(NES_DBG_CM, "QP%u, cm_node=%p, jiffies = %lu\n",
2362                         nesqp->hwqp.qp_id, cm_node, jiffies);
2363         atomic_inc(&cm_accepts);
2364
2365         nes_debug(NES_DBG_CM, "netdev refcnt = %u.\n",
2366                         atomic_read(&nesvnic->netdev->refcnt));
2367
2368                 /* allocate the ietf frame and space for private data */
2369                 nesqp->ietf_frame = pci_alloc_consistent(nesdev->pcidev,
2370                                 sizeof(struct ietf_mpa_frame) + conn_param->private_data_len,
2371                                 &nesqp->ietf_frame_pbase);
2372
2373                 if (!nesqp->ietf_frame) {
2374                         nes_debug(NES_DBG_CM, "Unable to allocate memory for private data\n");
2375                         return -ENOMEM;
2376                 }
2377
2378
2379                 /* setup the MPA frame */
2380                 nesqp->private_data_len = conn_param->private_data_len;
2381                 memcpy(nesqp->ietf_frame->key, IEFT_MPA_KEY_REP, IETF_MPA_KEY_SIZE);
2382
2383                 memcpy(nesqp->ietf_frame->priv_data, conn_param->private_data,
2384                                 conn_param->private_data_len);
2385
2386                 nesqp->ietf_frame->priv_data_len = cpu_to_be16(conn_param->private_data_len);
2387                 nesqp->ietf_frame->rev = mpa_version;
2388                 nesqp->ietf_frame->flags = IETF_MPA_FLAGS_CRC;
2389
2390                 /* setup our first outgoing iWarp send WQE (the IETF frame response) */
2391                 wqe = &nesqp->hwqp.sq_vbase[0];
2392
2393                 if (cm_id->remote_addr.sin_addr.s_addr != cm_id->local_addr.sin_addr.s_addr) {
2394                         u64temp = (unsigned long)nesqp;
2395                         u64temp |= NES_SW_CONTEXT_ALIGN>>1;
2396                         set_wqe_64bit_value(wqe->wqe_words, NES_IWARP_SQ_WQE_COMP_CTX_LOW_IDX,
2397                                             u64temp);
2398                         wqe->wqe_words[NES_IWARP_SQ_WQE_MISC_IDX] =
2399                                         cpu_to_le32(NES_IWARP_SQ_WQE_STREAMING | NES_IWARP_SQ_WQE_WRPDU);
2400                         wqe->wqe_words[NES_IWARP_SQ_WQE_TOTAL_PAYLOAD_IDX] =
2401                                         cpu_to_le32(conn_param->private_data_len + sizeof(struct ietf_mpa_frame));
2402                         wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_LOW_IDX] =
2403                                         cpu_to_le32((u32)nesqp->ietf_frame_pbase);
2404                         wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_HIGH_IDX] =
2405                                         cpu_to_le32((u32)((u64)nesqp->ietf_frame_pbase >> 32));
2406                         wqe->wqe_words[NES_IWARP_SQ_WQE_LENGTH0_IDX] =
2407                                         cpu_to_le32(conn_param->private_data_len + sizeof(struct ietf_mpa_frame));
2408                         wqe->wqe_words[NES_IWARP_SQ_WQE_STAG0_IDX] = 0;
2409
2410                         nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32(
2411                                         NES_QPCONTEXT_ORDIRD_LSMM_PRESENT | NES_QPCONTEXT_ORDIRD_WRPDU);
2412                 } else {
2413                         nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32((NES_QPCONTEXT_ORDIRD_LSMM_PRESENT |
2414                                         NES_QPCONTEXT_ORDIRD_WRPDU | NES_QPCONTEXT_ORDIRD_ALSMM));
2415                 }
2416                 nesqp->skip_lsmm = 1;
2417
2418
2419         /* Cache the cm_id in the qp */
2420         nesqp->cm_id = cm_id;
2421         cm_node->cm_id = cm_id;
2422
2423         /*  nesqp->cm_node = (void *)cm_id->provider_data; */
2424         cm_id->provider_data = nesqp;
2425         nesqp->active_conn   = 0;
2426
2427         nes_cm_init_tsa_conn(nesqp, cm_node);
2428
2429         nesqp->nesqp_context->tcpPorts[0] = cpu_to_le16(ntohs(cm_id->local_addr.sin_port));
2430         nesqp->nesqp_context->tcpPorts[1] = cpu_to_le16(ntohs(cm_id->remote_addr.sin_port));
2431         nesqp->nesqp_context->ip0 = cpu_to_le32(ntohl(cm_id->remote_addr.sin_addr.s_addr));
2432
2433         nesqp->nesqp_context->misc2 |= cpu_to_le32(
2434                         (u32)PCI_FUNC(nesdev->pcidev->devfn) << NES_QPCONTEXT_MISC2_SRC_IP_SHIFT);
2435
2436         nesqp->nesqp_context->arp_index_vlan |= cpu_to_le32(
2437                         nes_arp_table(nesdev, le32_to_cpu(nesqp->nesqp_context->ip0), NULL,
2438                         NES_ARP_RESOLVE) << 16);
2439
2440         nesqp->nesqp_context->ts_val_delta = cpu_to_le32(
2441                         jiffies - nes_read_indexed(nesdev, NES_IDX_TCP_NOW));
2442
2443         nesqp->nesqp_context->ird_index = cpu_to_le32(nesqp->hwqp.qp_id);
2444
2445         nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32(
2446                         ((u32)1 << NES_QPCONTEXT_ORDIRD_IWARP_MODE_SHIFT));
2447         nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32((u32)conn_param->ord);
2448
2449         memset(&nes_quad, 0, sizeof(nes_quad));
2450         nes_quad.DstIpAdrIndex = cpu_to_le32((u32)PCI_FUNC(nesdev->pcidev->devfn) << 24);
2451         nes_quad.SrcIpadr      = cm_id->remote_addr.sin_addr.s_addr;
2452         nes_quad.TcpPorts[0]   = cm_id->remote_addr.sin_port;
2453         nes_quad.TcpPorts[1]   = cm_id->local_addr.sin_port;
2454
2455         /* Produce hash key */
2456         crc_value = get_crc_value(&nes_quad);
2457         nesqp->hte_index = cpu_to_be32(crc_value ^ 0xffffffff);
2458         nes_debug(NES_DBG_CM, "HTE Index = 0x%08X, CRC = 0x%08X\n",
2459                         nesqp->hte_index, nesqp->hte_index & adapter->hte_index_mask);
2460
2461         nesqp->hte_index &= adapter->hte_index_mask;
2462         nesqp->nesqp_context->hte_index = cpu_to_le32(nesqp->hte_index);
2463
2464         cm_node->cm_core->api->accelerated(cm_node->cm_core, cm_node);
2465
2466         nes_debug(NES_DBG_CM, "QP%u, Destination IP = 0x%08X:0x%04X, local = 0x%08X:0x%04X,"
2467                         " rcv_nxt=0x%08X, snd_nxt=0x%08X, mpa + private data length=%zu.\n",
2468                         nesqp->hwqp.qp_id,
2469                         ntohl(cm_id->remote_addr.sin_addr.s_addr),
2470                         ntohs(cm_id->remote_addr.sin_port),
2471                         ntohl(cm_id->local_addr.sin_addr.s_addr),
2472                         ntohs(cm_id->local_addr.sin_port),
2473                         le32_to_cpu(nesqp->nesqp_context->rcv_nxt),
2474                         le32_to_cpu(nesqp->nesqp_context->snd_nxt),
2475                         conn_param->private_data_len+sizeof(struct ietf_mpa_frame));
2476
2477         attr.qp_state = IB_QPS_RTS;
2478         nes_modify_qp(&nesqp->ibqp, &attr, IB_QP_STATE, NULL);
2479
2480         /* notify OF layer that accept event was successfull */
2481         cm_id->add_ref(cm_id);
2482
2483         cm_event.event = IW_CM_EVENT_ESTABLISHED;
2484         cm_event.status = IW_CM_EVENT_STATUS_ACCEPTED;
2485         cm_event.provider_data = (void *)nesqp;
2486         cm_event.local_addr = cm_id->local_addr;
2487         cm_event.remote_addr = cm_id->remote_addr;
2488         cm_event.private_data = NULL;
2489         cm_event.private_data_len = 0;
2490         ret = cm_id->event_handler(cm_id, &cm_event);
2491         if (cm_node->loopbackpartner) {
2492                 cm_node->loopbackpartner->mpa_frame_size = nesqp->private_data_len;
2493                 /* copy entire MPA frame to our cm_node's frame */
2494                 memcpy(cm_node->loopbackpartner->mpa_frame_buf, nesqp->ietf_frame->priv_data,
2495                            nesqp->private_data_len);
2496                 create_event(cm_node->loopbackpartner, NES_CM_EVENT_CONNECTED);
2497         }
2498         if (ret)
2499                 printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
2500                                 __func__, __LINE__, ret);
2501
2502         return 0;
2503 }
2504
2505
2506 /**
2507  * nes_reject
2508  */
2509 int nes_reject(struct iw_cm_id *cm_id, const void *pdata, u8 pdata_len)
2510 {
2511         struct nes_cm_node *cm_node;
2512         struct nes_cm_core *cm_core;
2513
2514         atomic_inc(&cm_rejects);
2515         cm_node = (struct nes_cm_node *) cm_id->provider_data;
2516         cm_core = cm_node->cm_core;
2517         cm_node->mpa_frame_size = sizeof(struct ietf_mpa_frame) + pdata_len;
2518
2519         strcpy(&cm_node->mpa_frame.key[0], IEFT_MPA_KEY_REP);
2520         memcpy(&cm_node->mpa_frame.priv_data, pdata, pdata_len);
2521
2522         cm_node->mpa_frame.priv_data_len = cpu_to_be16(pdata_len);
2523         cm_node->mpa_frame.rev = mpa_version;
2524         cm_node->mpa_frame.flags = IETF_MPA_FLAGS_CRC | IETF_MPA_FLAGS_REJECT;
2525
2526         cm_core->api->reject(cm_core, &cm_node->mpa_frame, cm_node);
2527
2528         return 0;
2529 }
2530
2531
2532 /**
2533  * nes_connect
2534  * setup and launch cm connect node
2535  */
2536 int nes_connect(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
2537 {
2538         struct ib_qp *ibqp;
2539         struct nes_qp *nesqp;
2540         struct nes_vnic *nesvnic;
2541         struct nes_device *nesdev;
2542         struct nes_cm_node *cm_node;
2543         struct nes_cm_info cm_info;
2544
2545         ibqp = nes_get_qp(cm_id->device, conn_param->qpn);
2546         if (!ibqp)
2547                 return -EINVAL;
2548         nesqp = to_nesqp(ibqp);
2549         if (!nesqp)
2550                 return -EINVAL;
2551         nesvnic = to_nesvnic(nesqp->ibqp.device);
2552         if (!nesvnic)
2553                 return -EINVAL;
2554         nesdev  = nesvnic->nesdev;
2555         if (!nesdev)
2556                 return -EINVAL;
2557
2558         atomic_inc(&cm_connects);
2559
2560         nesqp->ietf_frame = kzalloc(sizeof(struct ietf_mpa_frame) +
2561                         conn_param->private_data_len, GFP_KERNEL);
2562         if (!nesqp->ietf_frame)
2563                 return -ENOMEM;
2564
2565         /* set qp as having an active connection */
2566         nesqp->active_conn = 1;
2567
2568         nes_debug(NES_DBG_CM, "QP%u, Destination IP = 0x%08X:0x%04X, local = 0x%08X:0x%04X.\n",
2569                         nesqp->hwqp.qp_id,
2570                         ntohl(cm_id->remote_addr.sin_addr.s_addr),
2571                         ntohs(cm_id->remote_addr.sin_port),
2572                         ntohl(cm_id->local_addr.sin_addr.s_addr),
2573                         ntohs(cm_id->local_addr.sin_port));
2574
2575         /* cache the cm_id in the qp */
2576         nesqp->cm_id = cm_id;
2577
2578         cm_id->provider_data = nesqp;
2579
2580         /* copy the private data */
2581         if (conn_param->private_data_len) {
2582                 memcpy(nesqp->ietf_frame->priv_data, conn_param->private_data,
2583                                 conn_param->private_data_len);
2584         }
2585
2586         nesqp->private_data_len = conn_param->private_data_len;
2587         nesqp->nesqp_context->ird_ord_sizes |= cpu_to_le32((u32)conn_param->ord);
2588         nes_debug(NES_DBG_CM, "requested ord = 0x%08X.\n", (u32)conn_param->ord);
2589         nes_debug(NES_DBG_CM, "mpa private data len =%u\n", conn_param->private_data_len);
2590
2591         strcpy(&nesqp->ietf_frame->key[0], IEFT_MPA_KEY_REQ);
2592         nesqp->ietf_frame->flags = IETF_MPA_FLAGS_CRC;
2593         nesqp->ietf_frame->rev = IETF_MPA_VERSION;
2594         nesqp->ietf_frame->priv_data_len = htons(conn_param->private_data_len);
2595
2596         if (cm_id->local_addr.sin_addr.s_addr != cm_id->remote_addr.sin_addr.s_addr)
2597                 nes_manage_apbvt(nesvnic, ntohs(cm_id->local_addr.sin_port),
2598                                 PCI_FUNC(nesdev->pcidev->devfn), NES_MANAGE_APBVT_ADD);
2599
2600         /* set up the connection params for the node */
2601         cm_info.loc_addr = (cm_id->local_addr.sin_addr.s_addr);
2602         cm_info.loc_port = (cm_id->local_addr.sin_port);
2603         cm_info.rem_addr = (cm_id->remote_addr.sin_addr.s_addr);
2604         cm_info.rem_port = (cm_id->remote_addr.sin_port);
2605         cm_info.cm_id = cm_id;
2606         cm_info.conn_type = NES_CM_IWARP_CONN_TYPE;
2607
2608         cm_id->add_ref(cm_id);
2609         nes_add_ref(&nesqp->ibqp);
2610
2611         /* create a connect CM node connection */
2612         cm_node = g_cm_core->api->connect(g_cm_core, nesvnic, nesqp->ietf_frame, &cm_info);
2613         if (!cm_node) {
2614                 if (cm_id->local_addr.sin_addr.s_addr != cm_id->remote_addr.sin_addr.s_addr)
2615                         nes_manage_apbvt(nesvnic, ntohs(cm_id->local_addr.sin_port),
2616                                         PCI_FUNC(nesdev->pcidev->devfn), NES_MANAGE_APBVT_DEL);
2617                 nes_rem_ref(&nesqp->ibqp);
2618                 kfree(nesqp->ietf_frame);
2619                 nesqp->ietf_frame = NULL;
2620                 cm_id->rem_ref(cm_id);
2621                 return -ENOMEM;
2622         }
2623
2624         cm_node->apbvt_set = 1;
2625         nesqp->cm_node = cm_node;
2626
2627         return 0;
2628 }
2629
2630
2631 /**
2632  * nes_create_listen
2633  */
2634 int nes_create_listen(struct iw_cm_id *cm_id, int backlog)
2635 {
2636         struct nes_vnic *nesvnic;
2637         struct nes_cm_listener *cm_node;
2638         struct nes_cm_info cm_info;
2639         struct nes_adapter *adapter;
2640         int err;
2641
2642
2643         nes_debug(NES_DBG_CM, "cm_id = %p, local port = 0x%04X.\n",
2644                         cm_id, ntohs(cm_id->local_addr.sin_port));
2645
2646         nesvnic = to_nesvnic(cm_id->device);
2647         if (!nesvnic)
2648                 return -EINVAL;
2649         adapter = nesvnic->nesdev->nesadapter;
2650         nes_debug(NES_DBG_CM, "nesvnic=%p, netdev=%p, %s\n",
2651                         nesvnic, nesvnic->netdev, nesvnic->netdev->name);
2652
2653         nes_debug(NES_DBG_CM, "nesvnic->local_ipaddr=0x%08x, sin_addr.s_addr=0x%08x\n",
2654                         nesvnic->local_ipaddr, cm_id->local_addr.sin_addr.s_addr);
2655
2656         /* setup listen params in our api call struct */
2657         cm_info.loc_addr = nesvnic->local_ipaddr;
2658         cm_info.loc_port = cm_id->local_addr.sin_port;
2659         cm_info.backlog = backlog;
2660         cm_info.cm_id = cm_id;
2661
2662         cm_info.conn_type = NES_CM_IWARP_CONN_TYPE;
2663
2664
2665         cm_node = g_cm_core->api->listen(g_cm_core, nesvnic, &cm_info);
2666         if (!cm_node) {
2667                 printk("%s[%u] Error returned from listen API call\n",
2668                                 __func__, __LINE__);
2669                 return -ENOMEM;
2670         }
2671
2672         cm_id->provider_data = cm_node;
2673
2674         if (!cm_node->reused_node) {
2675                 err = nes_manage_apbvt(nesvnic, ntohs(cm_id->local_addr.sin_port),
2676                                 PCI_FUNC(nesvnic->nesdev->pcidev->devfn), NES_MANAGE_APBVT_ADD);
2677                 if (err) {
2678                         printk("nes_manage_apbvt call returned %d.\n", err);
2679                         g_cm_core->api->stop_listener(g_cm_core, (void *)cm_node);
2680                         return err;
2681                 }
2682                 cm_listens_created++;
2683         }
2684
2685         cm_id->add_ref(cm_id);
2686         cm_id->provider_data = (void *)cm_node;
2687
2688
2689         return 0;
2690 }
2691
2692
2693 /**
2694  * nes_destroy_listen
2695  */
2696 int nes_destroy_listen(struct iw_cm_id *cm_id)
2697 {
2698         if (cm_id->provider_data)
2699                 g_cm_core->api->stop_listener(g_cm_core, cm_id->provider_data);
2700         else
2701                 nes_debug(NES_DBG_CM, "cm_id->provider_data was NULL\n");
2702
2703         cm_id->rem_ref(cm_id);
2704
2705         return 0;
2706 }
2707
2708
2709 /**
2710  * nes_cm_recv
2711  */
2712 int nes_cm_recv(struct sk_buff *skb, struct net_device *netdevice)
2713 {
2714         cm_packets_received++;
2715         if ((g_cm_core) && (g_cm_core->api)) {
2716                 g_cm_core->api->recv_pkt(g_cm_core, netdev_priv(netdevice), skb);
2717         } else {
2718                 nes_debug(NES_DBG_CM, "Unable to process packet for CM,"
2719                                 " cm is not setup properly.\n");
2720         }
2721
2722         return 0;
2723 }
2724
2725
2726 /**
2727  * nes_cm_start
2728  * Start and init a cm core module
2729  */
2730 int nes_cm_start(void)
2731 {
2732         nes_debug(NES_DBG_CM, "\n");
2733         /* create the primary CM core, pass this handle to subsequent core inits */
2734         g_cm_core = nes_cm_alloc_core();
2735         if (g_cm_core) {
2736                 return 0;
2737         } else {
2738                 return -ENOMEM;
2739         }
2740 }
2741
2742
2743 /**
2744  * nes_cm_stop
2745  * stop and dealloc all cm core instances
2746  */
2747 int nes_cm_stop(void)
2748 {
2749         g_cm_core->api->destroy_cm_core(g_cm_core);
2750         return 0;
2751 }
2752
2753
2754 /**
2755  * cm_event_connected
2756  * handle a connected event, setup QPs and HW
2757  */
2758 static void cm_event_connected(struct nes_cm_event *event)
2759 {
2760         u64 u64temp;
2761         struct nes_qp *nesqp;
2762         struct nes_vnic *nesvnic;
2763         struct nes_device *nesdev;
2764         struct nes_cm_node *cm_node;
2765         struct nes_adapter *nesadapter;
2766         struct ib_qp_attr attr;
2767         struct iw_cm_id *cm_id;
2768         struct iw_cm_event cm_event;
2769         struct nes_hw_qp_wqe *wqe;
2770         struct nes_v4_quad nes_quad;
2771         u32 crc_value;
2772         int ret;
2773
2774         /* get all our handles */
2775         cm_node = event->cm_node;
2776         cm_id = cm_node->cm_id;
2777         nes_debug(NES_DBG_CM, "cm_event_connected - %p - cm_id = %p\n", cm_node, cm_id);
2778         nesqp = (struct nes_qp *)cm_id->provider_data;
2779         nesvnic = to_nesvnic(nesqp->ibqp.device);
2780         nesdev = nesvnic->nesdev;
2781         nesadapter = nesdev->nesadapter;
2782
2783         if (nesqp->destroyed) {
2784                 return;
2785         }
2786         atomic_inc(&cm_connecteds);
2787         nes_debug(NES_DBG_CM, "QP%u attempting to connect to  0x%08X:0x%04X on"
2788                         " local port 0x%04X. jiffies = %lu.\n",
2789                         nesqp->hwqp.qp_id,
2790                         ntohl(cm_id->remote_addr.sin_addr.s_addr),
2791                         ntohs(cm_id->remote_addr.sin_port),
2792                         ntohs(cm_id->local_addr.sin_port),
2793                         jiffies);
2794
2795         nes_cm_init_tsa_conn(nesqp, cm_node);
2796
2797         /* set the QP tsa context */
2798         nesqp->nesqp_context->tcpPorts[0] = cpu_to_le16(ntohs(cm_id->local_addr.sin_port));
2799         nesqp->nesqp_context->tcpPorts[1] = cpu_to_le16(ntohs(cm_id->remote_addr.sin_port));
2800         nesqp->nesqp_context->ip0 = cpu_to_le32(ntohl(cm_id->remote_addr.sin_addr.s_addr));
2801
2802         nesqp->nesqp_context->misc2 |= cpu_to_le32(
2803                         (u32)PCI_FUNC(nesdev->pcidev->devfn) << NES_QPCONTEXT_MISC2_SRC_IP_SHIFT);
2804         nesqp->nesqp_context->arp_index_vlan |= cpu_to_le32(
2805                         nes_arp_table(nesdev, le32_to_cpu(nesqp->nesqp_context->ip0),
2806                         NULL, NES_ARP_RESOLVE) << 16);
2807         nesqp->nesqp_context->ts_val_delta = cpu_to_le32(
2808                         jiffies - nes_read_indexed(nesdev, NES_IDX_TCP_NOW));
2809         nesqp->nesqp_context->ird_index = cpu_to_le32(nesqp->hwqp.qp_id);
2810         nesqp->nesqp_context->ird_ord_sizes |=
2811                         cpu_to_le32((u32)1 << NES_QPCONTEXT_ORDIRD_IWARP_MODE_SHIFT);
2812
2813         /* Adjust tail for not having a LSMM */
2814         nesqp->hwqp.sq_tail = 1;
2815
2816 #if defined(NES_SEND_FIRST_WRITE)
2817                 if (cm_node->send_write0) {
2818                         nes_debug(NES_DBG_CM, "Sending first write.\n");
2819                         wqe = &nesqp->hwqp.sq_vbase[0];
2820                         u64temp = (unsigned long)nesqp;
2821                         u64temp |= NES_SW_CONTEXT_ALIGN>>1;
2822                         set_wqe_64bit_value(wqe->wqe_words, NES_IWARP_SQ_WQE_COMP_CTX_LOW_IDX,
2823                                             u64temp);
2824                         wqe->wqe_words[NES_IWARP_SQ_WQE_MISC_IDX] = cpu_to_le32(NES_IWARP_SQ_OP_RDMAW);
2825                         wqe->wqe_words[NES_IWARP_SQ_WQE_TOTAL_PAYLOAD_IDX] = 0;
2826                         wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_LOW_IDX] = 0;
2827                         wqe->wqe_words[NES_IWARP_SQ_WQE_FRAG0_HIGH_IDX] = 0;
2828                         wqe->wqe_words[NES_IWARP_SQ_WQE_LENGTH0_IDX] = 0;
2829                         wqe->wqe_words[NES_IWARP_SQ_WQE_STAG0_IDX] = 0;
2830
2831                         /* use the reserved spot on the WQ for the extra first WQE */
2832                         nesqp->nesqp_context->ird_ord_sizes &= cpu_to_le32(~(NES_QPCONTEXT_ORDIRD_LSMM_PRESENT |
2833                                         NES_QPCONTEXT_ORDIRD_WRPDU | NES_QPCONTEXT_ORDIRD_ALSMM));
2834                         nesqp->skip_lsmm = 1;
2835                         nesqp->hwqp.sq_tail = 0;
2836                         nes_write32(nesdev->regs + NES_WQE_ALLOC,
2837                                         (1 << 24) | 0x00800000 | nesqp->hwqp.qp_id);
2838                 }
2839 #endif
2840
2841         memset(&nes_quad, 0, sizeof(nes_quad));
2842
2843         nes_quad.DstIpAdrIndex = cpu_to_le32((u32)PCI_FUNC(nesdev->pcidev->devfn) << 24);
2844         nes_quad.SrcIpadr = cm_id->remote_addr.sin_addr.s_addr;
2845         nes_quad.TcpPorts[0] = cm_id->remote_addr.sin_port;
2846         nes_quad.TcpPorts[1] = cm_id->local_addr.sin_port;
2847
2848         /* Produce hash key */
2849         crc_value = get_crc_value(&nes_quad);
2850         nesqp->hte_index = cpu_to_be32(crc_value ^ 0xffffffff);
2851         nes_debug(NES_DBG_CM, "HTE Index = 0x%08X, After CRC = 0x%08X\n",
2852                         nesqp->hte_index, nesqp->hte_index & nesadapter->hte_index_mask);
2853
2854         nesqp->hte_index &= nesadapter->hte_index_mask;
2855         nesqp->nesqp_context->hte_index = cpu_to_le32(nesqp->hte_index);
2856
2857         nesqp->ietf_frame = &cm_node->mpa_frame;
2858         nesqp->private_data_len = (u8) cm_node->mpa_frame_size;
2859         cm_node->cm_core->api->accelerated(cm_node->cm_core, cm_node);
2860
2861         /* modify QP state to rts */
2862         attr.qp_state = IB_QPS_RTS;
2863         nes_modify_qp(&nesqp->ibqp, &attr, IB_QP_STATE, NULL);
2864
2865         /* notify OF layer we successfully created the requested connection */
2866         cm_event.event = IW_CM_EVENT_CONNECT_REPLY;
2867         cm_event.status = IW_CM_EVENT_STATUS_ACCEPTED;
2868         cm_event.provider_data = cm_id->provider_data;
2869         cm_event.local_addr.sin_family = AF_INET;
2870         cm_event.local_addr.sin_port = cm_id->local_addr.sin_port;
2871         cm_event.remote_addr = cm_id->remote_addr;
2872
2873                 cm_event.private_data = (void *)event->cm_node->mpa_frame_buf;
2874                 cm_event.private_data_len = (u8) event->cm_node->mpa_frame_size;
2875
2876         cm_event.local_addr.sin_addr.s_addr = event->cm_info.rem_addr;
2877         ret = cm_id->event_handler(cm_id, &cm_event);
2878         nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
2879
2880         if (ret)
2881                 printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
2882                                 __func__, __LINE__, ret);
2883         nes_debug(NES_DBG_CM, "Exiting connect thread for QP%u. jiffies = %lu\n",
2884                         nesqp->hwqp.qp_id, jiffies );
2885
2886         nes_rem_ref(&nesqp->ibqp);
2887
2888         return;
2889 }
2890
2891
2892 /**
2893  * cm_event_connect_error
2894  */
2895 static void cm_event_connect_error(struct nes_cm_event *event)
2896 {
2897         struct nes_qp *nesqp;
2898         struct iw_cm_id *cm_id;
2899         struct iw_cm_event cm_event;
2900         /* struct nes_cm_info cm_info; */
2901         int ret;
2902
2903         if (!event->cm_node)
2904                 return;
2905
2906         cm_id = event->cm_node->cm_id;
2907         if (!cm_id) {
2908                 return;
2909         }
2910
2911         nes_debug(NES_DBG_CM, "cm_node=%p, cm_id=%p\n", event->cm_node, cm_id);
2912         nesqp = cm_id->provider_data;
2913
2914         if (!nesqp) {
2915                 return;
2916         }
2917
2918         /* notify OF layer about this connection error event */
2919         /* cm_id->rem_ref(cm_id); */
2920         nesqp->cm_id = NULL;
2921         cm_id->provider_data = NULL;
2922         cm_event.event = IW_CM_EVENT_CONNECT_REPLY;
2923         cm_event.status = IW_CM_EVENT_STATUS_REJECTED;
2924         cm_event.provider_data = cm_id->provider_data;
2925         cm_event.local_addr = cm_id->local_addr;
2926         cm_event.remote_addr = cm_id->remote_addr;
2927         cm_event.private_data = NULL;
2928         cm_event.private_data_len = 0;
2929
2930         nes_debug(NES_DBG_CM, "call CM_EVENT REJECTED, local_addr=%08x, remove_addr=%08x\n",
2931                         cm_event.local_addr.sin_addr.s_addr, cm_event.remote_addr.sin_addr.s_addr);
2932
2933         ret = cm_id->event_handler(cm_id, &cm_event);
2934         nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
2935         if (ret)
2936                 printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
2937                                 __func__, __LINE__, ret);
2938         nes_rem_ref(&nesqp->ibqp);
2939                 cm_id->rem_ref(cm_id);
2940
2941         return;
2942 }
2943
2944
2945 /**
2946  * cm_event_reset
2947  */
2948 static void cm_event_reset(struct nes_cm_event *event)
2949 {
2950         struct nes_qp *nesqp;
2951         struct iw_cm_id *cm_id;
2952         struct iw_cm_event cm_event;
2953         /* struct nes_cm_info cm_info; */
2954         int ret;
2955
2956         if (!event->cm_node)
2957                 return;
2958
2959         if (!event->cm_node->cm_id)
2960                 return;
2961
2962         cm_id = event->cm_node->cm_id;
2963
2964         nes_debug(NES_DBG_CM, "%p - cm_id = %p\n", event->cm_node, cm_id);
2965         nesqp = cm_id->provider_data;
2966
2967         nesqp->cm_id = NULL;
2968         /* cm_id->provider_data = NULL; */
2969         cm_event.event = IW_CM_EVENT_DISCONNECT;
2970         cm_event.status = IW_CM_EVENT_STATUS_RESET;
2971         cm_event.provider_data = cm_id->provider_data;
2972         cm_event.local_addr = cm_id->local_addr;
2973         cm_event.remote_addr = cm_id->remote_addr;
2974         cm_event.private_data = NULL;
2975         cm_event.private_data_len = 0;
2976
2977         ret = cm_id->event_handler(cm_id, &cm_event);
2978         nes_debug(NES_DBG_CM, "OFA CM event_handler returned, ret=%d\n", ret);
2979
2980
2981         /* notify OF layer about this connection error event */
2982         cm_id->rem_ref(cm_id);
2983
2984         return;
2985 }
2986
2987
2988 /**
2989  * cm_event_mpa_req
2990  */
2991 static void cm_event_mpa_req(struct nes_cm_event *event)
2992 {
2993         struct iw_cm_id   *cm_id;
2994         struct iw_cm_event cm_event;
2995         int ret;
2996         struct nes_cm_node *cm_node;
2997
2998         cm_node = event->cm_node;
2999         if (!cm_node)
3000                 return;
3001         cm_id = cm_node->cm_id;
3002
3003         atomic_inc(&cm_connect_reqs);
3004         nes_debug(NES_DBG_CM, "cm_node = %p - cm_id = %p, jiffies = %lu\n",
3005                         cm_node, cm_id, jiffies);
3006
3007         cm_event.event = IW_CM_EVENT_CONNECT_REQUEST;
3008         cm_event.status = IW_CM_EVENT_STATUS_OK;
3009         cm_event.provider_data = (void *)cm_node;
3010
3011         cm_event.local_addr.sin_family = AF_INET;
3012         cm_event.local_addr.sin_port = htons(event->cm_info.loc_port);
3013         cm_event.local_addr.sin_addr.s_addr = htonl(event->cm_info.loc_addr);
3014
3015         cm_event.remote_addr.sin_family = AF_INET;
3016         cm_event.remote_addr.sin_port = htons(event->cm_info.rem_port);
3017         cm_event.remote_addr.sin_addr.s_addr = htonl(event->cm_info.rem_addr);
3018
3019                 cm_event.private_data                = cm_node->mpa_frame_buf;
3020                 cm_event.private_data_len            = (u8) cm_node->mpa_frame_size;
3021
3022         ret = cm_id->event_handler(cm_id, &cm_event);
3023         if (ret)
3024                 printk("%s[%u] OFA CM event_handler returned, ret=%d\n",
3025                                 __func__, __LINE__, ret);
3026
3027         return;
3028 }
3029
3030
3031 static void nes_cm_event_handler(struct work_struct *);
3032
3033 /**
3034  * nes_cm_post_event
3035  * post an event to the cm event handler
3036  */
3037 static int nes_cm_post_event(struct nes_cm_event *event)
3038 {
3039         atomic_inc(&event->cm_node->cm_core->events_posted);
3040         add_ref_cm_node(event->cm_node);
3041         event->cm_info.cm_id->add_ref(event->cm_info.cm_id);
3042         INIT_WORK(&event->event_work, nes_cm_event_handler);
3043         nes_debug(NES_DBG_CM, "queue_work, event=%p\n", event);
3044
3045         queue_work(event->cm_node->cm_core->event_wq, &event->event_work);
3046
3047         nes_debug(NES_DBG_CM, "Exit\n");
3048         return 0;
3049 }
3050
3051
3052 /**
3053  * nes_cm_event_handler
3054  * worker function to handle cm events
3055  * will free instance of nes_cm_event
3056  */
3057 static void nes_cm_event_handler(struct work_struct *work)
3058 {
3059         struct nes_cm_event *event = container_of(work, struct nes_cm_event, event_work);
3060         struct nes_cm_core *cm_core;
3061
3062         if ((!event) || (!event->cm_node) || (!event->cm_node->cm_core)) {
3063                 return;
3064         }
3065         cm_core = event->cm_node->cm_core;
3066         nes_debug(NES_DBG_CM, "event=%p, event->type=%u, events posted=%u\n",
3067                         event, event->type, atomic_read(&cm_core->events_posted));
3068
3069         switch (event->type) {
3070                 case NES_CM_EVENT_MPA_REQ:
3071                         cm_event_mpa_req(event);
3072                         nes_debug(NES_DBG_CM, "CM Event: MPA REQUEST\n");
3073                         break;
3074                 case NES_CM_EVENT_RESET:
3075                         nes_debug(NES_DBG_CM, "CM Event: RESET\n");
3076                         cm_event_reset(event);
3077                         break;
3078                 case NES_CM_EVENT_CONNECTED:
3079                         if ((!event->cm_node->cm_id) ||
3080                                 (event->cm_node->state != NES_CM_STATE_TSA)) {
3081                                 break;
3082                         }
3083                         cm_event_connected(event);
3084                         nes_debug(NES_DBG_CM, "CM Event: CONNECTED\n");
3085                         break;
3086                 case NES_CM_EVENT_ABORTED:
3087                         if ((!event->cm_node->cm_id) || (event->cm_node->state == NES_CM_STATE_TSA)) {
3088                                 break;
3089                         }
3090                         cm_event_connect_error(event);
3091                         nes_debug(NES_DBG_CM, "CM Event: ABORTED\n");
3092                         break;
3093                 case NES_CM_EVENT_DROPPED_PKT:
3094                         nes_debug(NES_DBG_CM, "CM Event: DROPPED PKT\n");
3095                         break;
3096                 default:
3097                         nes_debug(NES_DBG_CM, "CM Event: UNKNOWN EVENT TYPE\n");
3098                         break;
3099         }
3100
3101         atomic_dec(&cm_core->events_posted);
3102         event->cm_info.cm_id->rem_ref(event->cm_info.cm_id);
3103         rem_ref_cm_node(cm_core, event->cm_node);
3104         kfree(event);
3105
3106         return;
3107 }