Merge tag 'net-next-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextgrafted

Pull networking updates from Jakub Kicinski:
 "Core:

   - Add dedicated kmem_cache for typical/small skb->head, avoid having
     to access struct page at kfree time, and improve memory use.

   - Introduce sysctl to set default RPS configuration for new netdevs.

   - Define Netlink protocol specification format which can be used to
     describe messages used by each family and auto-generate parsers.
     Add tools for generating kernel data structures and uAPI headers.

   - Expose all net/core sysctls inside netns.

   - Remove 4s sleep in netpoll if carrier is instantly detected on
     boot.

   - Add configurable limit of MDB entries per port, and port-vlan.

   - Continue populating drop reasons throughout the stack.

   - Retire a handful of legacy Qdiscs and classifiers.

  Protocols:

   - Support IPv4 big TCP (TSO frames larger than 64kB).

   - Add IP_LOCAL_PORT_RANGE socket option, to control local port range
     on socket by socket basis.

   - Track and report in procfs number of MPTCP sockets used.

   - Support mixing IPv4 and IPv6 flows in the in-kernel MPTCP path
     manager.

   - IPv6: don't check net.ipv6.route.max_size and rely on garbage
     collection to free memory (similarly to IPv4).

   - Support Penultimate Segment Pop (PSP) flavor in SRv6 (RFC8986).

   - ICMP: add per-rate limit counters.

   - Add support for user scanning requests in ieee802154.

   - Remove static WEP support.

   - Support minimal Wi-Fi 7 Extremely High Throughput (EHT) rate
     reporting.

   - WiFi 7 EHT channel puncturing support (client & AP).

  BPF:

   - Add a rbtree data structure following the "next-gen data structure"
     precedent set by recently added linked list, that is, by using
     kfunc + kptr instead of adding a new BPF map type.

   - Expose XDP hints via kfuncs with initial support for RX hash and
     timestamp metadata.

   - Add BPF_F_NO_TUNNEL_KEY extension to bpf_skb_set_tunnel_key to
     better support decap on GRE tunnel devices not operating in collect
     metadata.

   - Improve x86 JIT's codegen for PROBE_MEM runtime error checks.

   - Remove the need for trace_printk_lock for bpf_trace_printk and
     bpf_trace_vprintk helpers.

   - Extend libbpf's bpf_tracing.h support for tracing arguments of
     kprobes/uprobes and syscall as a special case.

   - Significantly reduce the search time for module symbols by
     livepatch and BPF.

   - Enable cpumasks to be used as kptrs, which is useful for tracing
     programs tracking which tasks end up running on which CPUs in
     different time intervals.

   - Add support for BPF trampoline on s390x and riscv64.

   - Add capability to export the XDP features supported by the NIC.

   - Add __bpf_kfunc tag for marking kernel functions as kfuncs.

   - Add cgroup.memory=nobpf kernel parameter option to disable BPF
     memory accounting for container environments.

  Netfilter:

   - Remove the CLUSTERIP target. It has been marked as obsolete for
     years, and we still have WARN splats wrt races of the out-of-band
     /proc interface installed by this target.

   - Add 'destroy' commands to nf_tables. They are identical to the
     existing 'delete' commands, but do not return an error if the
     referenced object (set, chain, rule...) did not exist.

  Driver API:

   - Improve cpumask_local_spread() locality to help NICs set the right
     IRQ affinity on AMD platforms.

   - Separate C22 and C45 MDIO bus transactions more clearly.

   - Introduce new DCB table to control DSCP rewrite on egress.

   - Support configuration of Physical Layer Collision Avoidance (PLCA)
     Reconciliation Sublayer (RS) (802.3cg-2019). Modern version of
     shared medium Ethernet.

   - Support for MAC Merge layer (IEEE 802.3-2018 clause 99). Allowing
     preemption of low priority frames by high priority frames.

   - Add support for controlling MACSec offload using netlink SET.

   - Rework devlink instance refcounts to allow registration and
     de-registration under the instance lock. Split the code into
     multiple files, drop some of the unnecessarily granular locks and
     factor out common parts of netlink operation handling.

   - Add TX frame aggregation parameters (for USB drivers).

   - Add a new attr TCA_EXT_WARN_MSG to report TC (offload) warning
     messages with notifications for debug.

   - Allow offloading of UDP NEW connections via act_ct.

   - Add support for per action HW stats in TC.

   - Support hardware miss to TC action (continue processing in SW from
     a specific point in the action chain).

   - Warn if old Wireless Extension user space interface is used with
     modern cfg80211/mac80211 drivers. Do not support Wireless
     Extensions for Wi-Fi 7 devices at all. Everyone should switch to
     using nl80211 interface instead.

   - Improve the CAN bit timing configuration. Use extack to return
     error messages directly to user space, update the SJW handling,
     including the definition of a new default value that will benefit
     CAN-FD controllers, by increasing their oscillator tolerance.

  New hardware / drivers:

   - Ethernet:
      - nVidia BlueField-3 support (control traffic driver)
      - Ethernet support for imx93 SoCs
      - Motorcomm yt8531 gigabit Ethernet PHY
      - onsemi NCN26000 10BASE-T1S PHY (with support for PLCA)
      - Microchip LAN8841 PHY (incl. cable diagnostics and PTP)
      - Amlogic gxl MDIO mux

   - WiFi:
      - RealTek RTL8188EU (rtl8xxxu)
      - Qualcomm Wi-Fi 7 devices (ath12k)

   - CAN:
      - Renesas R-Car V4H

  Drivers:

   - Bluetooth:
      - Set Per Platform Antenna Gain (PPAG) for Intel controllers.

   - Ethernet NICs:
      - Intel (1G, igc):
         - support TSN / Qbv / packet scheduling features of i226 model
      - Intel (100G, ice):
         - use GNSS subsystem instead of TTY
         - multi-buffer XDP support
         - extend support for GPIO pins to E823 devices
      - nVidia/Mellanox:
         - update the shared buffer configuration on PFC commands
         - implement PTP adjphase function for HW offset control
         - TC support for Geneve and GRE with VF tunnel offload
         - more efficient crypto key management method
         - multi-port eswitch support
      - Netronome/Corigine:
         - add DCB IEEE support
         - support IPsec offloading for NFP3800
      - Freescale/NXP (enetc):
         - support XDP_REDIRECT for XDP non-linear buffers
         - improve reconfig, avoid link flap and waiting for idle
         - support MAC Merge layer
      - Other NICs:
         - sfc/ef100: add basic devlink support for ef100
         - ionic: rx_push mode operation (writing descriptors via MMIO)
         - bnxt: use the auxiliary bus abstraction for RDMA
         - r8169: disable ASPM and reset bus in case of tx timeout
         - cpsw: support QSGMII mode for J721e CPSW9G
         - cpts: support pulse-per-second output
         - ngbe: add an mdio bus driver
         - usbnet: optimize usbnet_bh() by avoiding unnecessary queuing
         - r8152: handle devices with FW with NCM support
         - amd-xgbe: support 10Mbps, 2.5GbE speeds and rx-adaptation
         - virtio-net: support multi buffer XDP
         - virtio/vsock: replace virtio_vsock_pkt with sk_buff
         - tsnep: XDP support

   - Ethernet high-speed switches:
      - nVidia/Mellanox (mlxsw):
         - add support for latency TLV (in FW control messages)
      - Microchip (sparx5):
         - separate explicit and implicit traffic forwarding rules, make
           the implicit rules always active
         - add support for egress DSCP rewrite
         - IS0 VCAP support (Ingress Classification)
         - IS2 VCAP filters (protos, L3 addrs, L4 ports, flags, ToS
           etc.)
         - ES2 VCAP support (Egress Access Control)
         - support for Per-Stream Filtering and Policing (802.1Q,
           8.6.5.1)

   - Ethernet embedded switches:
      - Marvell (mv88e6xxx):
         - add MAB (port auth) offload support
         - enable PTP receive for mv88e6390
      - NXP (ocelot):
         - support MAC Merge layer
         - support for the the vsc7512 internal copper phys
      - Microchip:
         - lan9303: convert to PHYLINK
         - lan966x: support TC flower filter statistics
         - lan937x: PTP support for KSZ9563/KSZ8563 and LAN937x
         - lan937x: support Credit Based Shaper configuration
         - ksz9477: support Energy Efficient Ethernet
      - other:
         - qca8k: convert to regmap read/write API, use bulk operations
         - rswitch: Improve TX timestamp accuracy

   - Intel WiFi (iwlwifi):
      - EHT (Wi-Fi 7) rate reporting
      - STEP equalizer support: transfer some STEP (connection to radio
        on platforms with integrated wifi) related parameters from the
        BIOS to the firmware.

   - Qualcomm 802.11ax WiFi (ath11k):
      - IPQ5018 support
      - Fine Timing Measurement (FTM) responder role support
      - channel 177 support

   - MediaTek WiFi (mt76):
      - per-PHY LED support
      - mt7996: EHT (Wi-Fi 7) support
      - Wireless Ethernet Dispatch (WED) reset support
      - switch to using page pool allocator

   - RealTek WiFi (rtw89):
      - support new version of Bluetooth co-existance

   - Mobile:
      - rmnet: support TX aggregation"

* tag 'net-next-6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next: (1872 commits)
  page_pool: add a comment explaining the fragment counter usage
  net: ethtool: fix __ethtool_dev_mm_supported() implementation
  ethtool: pse-pd: Fix double word in comments
  xsk: add linux/vmalloc.h to xsk.c
  sefltests: netdevsim: wait for devlink instance after netns removal
  selftest: fib_tests: Always cleanup before exit
  net/mlx5e: Align IPsec ASO result memory to be as required by hardware
  net/mlx5e: TC, Set CT miss to the specific ct action instance
  net/mlx5e: Rename CHAIN_TO_REG to MAPPED_OBJ_TO_REG
  net/mlx5: Refactor tc miss handling to a single function
  net/mlx5: Kconfig: Make tc offload depend on tc skb extension
  net/sched: flower: Support hardware miss to tc action
  net/sched: flower: Move filter handle initialization earlier
  net/sched: cls_api: Support hardware miss to tc action
  net/sched: Rename user cookie and act cookie
  sfc: fix builds without CONFIG_RTC_LIB
  sfc: clean up some inconsistent indentings
  net/mlx4_en: Introduce flexible array to silence overflow warning
  net: lan966x: Fix possible deadlock inside PTP
  net/ulp: Remove redundant ->clone() test in inet_clone_ulp().
  ...

1 files changed, 1179 insertions, 0 deletions

diff --git a/drivers/net/sb1000.c b/drivers/net/sb1000.c
new file mode 100644
index 000000000..c3f802057
--- /dev/null
+++ b/drivers/net/sb1000.c
@@ -0,0 +1,1179 @@
+// SPDX-License-Identifier: GPL-2.0-or-later
+/* sb1000.c: A General Instruments SB1000 driver for linux. */
+/*
+	Written 1998 by Franco Venturi.
+
+	Copyright 1998 by Franco Venturi.
+	Copyright 1994,1995 by Donald Becker.
+	Copyright 1993 United States Government as represented by the
+	Director, National Security Agency.
+
+	This driver is for the General Instruments SB1000 (internal SURFboard)
+
+	The author may be reached as fventuri@mediaone.net
+
+
+	Changes:
+
+	981115 Steven Hirsch <shirsch@adelphia.net>
+
+	Linus changed the timer interface.  Should work on all recent
+	development kernels.
+
+	980608 Steven Hirsch <shirsch@adelphia.net>
+
+	Small changes to make it work with 2.1.x kernels. Hopefully,
+	nothing major will change before official release of Linux 2.2.
+
+	Merged with 2.2 - Alan Cox
+*/
+
+static char version[] = "sb1000.c:v1.1.2 6/01/98 (fventuri@mediaone.net)\n";
+
+#include <linux/module.h>
+#include <linux/kernel.h>
+#include <linux/sched.h>
+#include <linux/string.h>
+#include <linux/interrupt.h>
+#include <linux/errno.h>
+#include <linux/if_cablemodem.h> /* for SIOGCM/SIOSCM stuff */
+#include <linux/in.h>
+#include <linux/ioport.h>
+#include <linux/netdevice.h>
+#include <linux/if_arp.h>
+#include <linux/skbuff.h>
+#include <linux/delay.h>	/* for udelay() */
+#include <linux/etherdevice.h>
+#include <linux/pnp.h>
+#include <linux/init.h>
+#include <linux/bitops.h>
+#include <linux/gfp.h>
+
+#include <asm/io.h>
+#include <asm/processor.h>
+#include <linux/uaccess.h>
+
+#ifdef SB1000_DEBUG
+static int sb1000_debug = SB1000_DEBUG;
+#else
+static const int sb1000_debug = 1;
+#endif
+
+static const int SB1000_IO_EXTENT = 8;
+/* SB1000 Maximum Receive Unit */
+static const int SB1000_MRU = 1500; /* octects */
+
+#define NPIDS 4
+struct sb1000_private {
+	struct sk_buff *rx_skb[NPIDS];
+	short rx_dlen[NPIDS];
+	unsigned int rx_frames;
+	short rx_error_count;
+	short rx_error_dpc_count;
+	unsigned char rx_session_id[NPIDS];
+	unsigned char rx_frame_id[NPIDS];
+	unsigned char rx_pkt_type[NPIDS];
+};
+
+/* prototypes for Linux interface */
+extern int sb1000_probe(struct net_device *dev);
+static int sb1000_open(struct net_device *dev);
+static int sb1000_siocdevprivate(struct net_device *dev, struct ifreq *ifr,
+				 void __user *data, int cmd);
+static netdev_tx_t sb1000_start_xmit(struct sk_buff *skb,
+				     struct net_device *dev);
+static irqreturn_t sb1000_interrupt(int irq, void *dev_id);
+static int sb1000_close(struct net_device *dev);
+
+
+/* SB1000 hardware routines to be used during open/configuration phases */
+static int card_wait_for_busy_clear(const int ioaddr[],
+	const char* name);
+static int card_wait_for_ready(const int ioaddr[], const char* name,
+	unsigned char in[]);
+static int card_send_command(const int ioaddr[], const char* name,
+	const unsigned char out[], unsigned char in[]);
+
+/* SB1000 hardware routines to be used during frame rx interrupt */
+static int sb1000_wait_for_ready(const int ioaddr[], const char* name);
+static int sb1000_wait_for_ready_clear(const int ioaddr[],
+	const char* name);
+static void sb1000_send_command(const int ioaddr[], const char* name,
+	const unsigned char out[]);
+static void sb1000_read_status(const int ioaddr[], unsigned char in[]);
+static void sb1000_issue_read_command(const int ioaddr[],
+	const char* name);
+
+/* SB1000 commands for open/configuration */
+static int sb1000_reset(const int ioaddr[], const char* name);
+static int sb1000_check_CRC(const int ioaddr[], const char* name);
+static inline int sb1000_start_get_set_command(const int ioaddr[],
+	const char* name);
+static int sb1000_end_get_set_command(const int ioaddr[],
+	const char* name);
+static int sb1000_activate(const int ioaddr[], const char* name);
+static int sb1000_get_firmware_version(const int ioaddr[],
+	const char* name, unsigned char version[], int do_end);
+static int sb1000_get_frequency(const int ioaddr[], const char* name,
+	int* frequency);
+static int sb1000_set_frequency(const int ioaddr[], const char* name,
+	int frequency);
+static int sb1000_get_PIDs(const int ioaddr[], const char* name,
+	short PID[]);
+static int sb1000_set_PIDs(const int ioaddr[], const char* name,
+	const short PID[]);
+
+/* SB1000 commands for frame rx interrupt */
+static int sb1000_rx(struct net_device *dev);
+static void sb1000_error_dpc(struct net_device *dev);
+
+static const struct pnp_device_id sb1000_pnp_ids[] = {
+	{ "GIC1000", 0 },
+	{ "", 0 }
+};
+MODULE_DEVICE_TABLE(pnp, sb1000_pnp_ids);
+
+static const struct net_device_ops sb1000_netdev_ops = {
+	.ndo_open		= sb1000_open,
+	.ndo_start_xmit		= sb1000_start_xmit,
+	.ndo_siocdevprivate	= sb1000_siocdevprivate,
+	.ndo_stop		= sb1000_close,
+	.ndo_set_mac_address 	= eth_mac_addr,
+	.ndo_validate_addr	= eth_validate_addr,
+};
+
+static int
+sb1000_probe_one(struct pnp_dev *pdev, const struct pnp_device_id *id)
+{
+	struct net_device *dev;
+	unsigned short ioaddr[2], irq;
+	unsigned int serial_number;
+	int error = -ENODEV;
+	u8 addr[ETH_ALEN];
+
+	if (pnp_device_attach(pdev) < 0)
+		return -ENODEV;
+	if (pnp_activate_dev(pdev) < 0)
+		goto out_detach;
+
+	if (!pnp_port_valid(pdev, 0) || !pnp_port_valid(pdev, 1))
+		goto out_disable;
+	if (!pnp_irq_valid(pdev, 0))
+		goto out_disable;
+
+	serial_number = pdev->card->serial;
+
+	ioaddr[0] = pnp_port_start(pdev, 0);
+	ioaddr[1] = pnp_port_start(pdev, 0);
+
+	irq = pnp_irq(pdev, 0);
+
+	if (!request_region(ioaddr[0], 16, "sb1000"))
+		goto out_disable;
+	if (!request_region(ioaddr[1], 16, "sb1000"))
+		goto out_release_region0;
+
+	dev = alloc_etherdev(sizeof(struct sb1000_private));
+	if (!dev) {
+		error = -ENOMEM;
+		goto out_release_regions;
+	}
+
+
+	dev->base_addr = ioaddr[0];
+	/* mem_start holds the second I/O address */
+	dev->mem_start = ioaddr[1];
+	dev->irq = irq;
+
+	if (sb1000_debug > 0)
+		printk(KERN_NOTICE "%s: sb1000 at (%#3.3lx,%#3.3lx), "
+			"S/N %#8.8x, IRQ %d.\n", dev->name, dev->base_addr,
+			dev->mem_start, serial_number, dev->irq);
+
+	/*
+	 * The SB1000 is an rx-only cable modem device.  The uplink is a modem
+	 * and we do not want to arp on it.
+	 */
+	dev->flags = IFF_POINTOPOINT|IFF_NOARP;
+
+	SET_NETDEV_DEV(dev, &pdev->dev);
+
+	if (sb1000_debug > 0)
+		printk(KERN_NOTICE "%s", version);
+
+	dev->netdev_ops	= &sb1000_netdev_ops;
+
+	/* hardware address is 0:0:serial_number */
+	addr[0] = 0;
+	addr[1] = 0;
+	addr[2]	= serial_number >> 24 & 0xff;
+	addr[3]	= serial_number >> 16 & 0xff;
+	addr[4]	= serial_number >>  8 & 0xff;
+	addr[5]	= serial_number >>  0 & 0xff;
+	eth_hw_addr_set(dev, addr);
+
+	pnp_set_drvdata(pdev, dev);
+
+	error = register_netdev(dev);
+	if (error)
+		goto out_free_netdev;
+	return 0;
+
+ out_free_netdev:
+	free_netdev(dev);
+ out_release_regions:
+	release_region(ioaddr[1], 16);
+ out_release_region0:
+	release_region(ioaddr[0], 16);
+ out_disable:
+	pnp_disable_dev(pdev);
+ out_detach:
+	pnp_device_detach(pdev);
+	return error;
+}
+
+static void
+sb1000_remove_one(struct pnp_dev *pdev)
+{
+	struct net_device *dev = pnp_get_drvdata(pdev);
+
+	unregister_netdev(dev);
+	release_region(dev->base_addr, 16);
+	release_region(dev->mem_start, 16);
+	free_netdev(dev);
+}
+
+static struct pnp_driver sb1000_driver = {
+	.name		= "sb1000",
+	.id_table	= sb1000_pnp_ids,
+	.probe		= sb1000_probe_one,
+	.remove		= sb1000_remove_one,
+};
+
+
+/*
+ * SB1000 hardware routines to be used during open/configuration phases
+ */
+
+static const int TimeOutJiffies = (875 * HZ) / 100;
+
+/* Card Wait For Busy Clear (cannot be used during an interrupt) */
+static int
+card_wait_for_busy_clear(const int ioaddr[], const char* name)
+{
+	unsigned char a;
+	unsigned long timeout;
+
+	a = inb(ioaddr[0] + 7);
+	timeout = jiffies + TimeOutJiffies;
+	while (a & 0x80 || a & 0x40) {
+		/* a little sleep */
+		yield();
+
+		a = inb(ioaddr[0] + 7);
+		if (time_after_eq(jiffies, timeout)) {
+			printk(KERN_WARNING "%s: card_wait_for_busy_clear timeout\n",
+				name);
+			return -ETIME;
+		}
+	}
+
+	return 0;
+}
+
+/* Card Wait For Ready (cannot be used during an interrupt) */
+static int
+card_wait_for_ready(const int ioaddr[], const char* name, unsigned char in[])
+{
+	unsigned char a;
+	unsigned long timeout;
+
+	a = inb(ioaddr[1] + 6);
+	timeout = jiffies + TimeOutJiffies;
+	while (a & 0x80 || !(a & 0x40)) {
+		/* a little sleep */
+		yield();
+
+		a = inb(ioaddr[1] + 6);
+		if (time_after_eq(jiffies, timeout)) {
+			printk(KERN_WARNING "%s: card_wait_for_ready timeout\n",
+				name);
+			return -ETIME;
+		}
+	}
+
+	in[1] = inb(ioaddr[0] + 1);
+	in[2] = inb(ioaddr[0] + 2);
+	in[3] = inb(ioaddr[0] + 3);
+	in[4] = inb(ioaddr[0] + 4);
+	in[0] = inb(ioaddr[0] + 5);
+	in[6] = inb(ioaddr[0] + 6);
+	in[5] = inb(ioaddr[1] + 6);
+	return 0;
+}
+
+/* Card Send Command (cannot be used during an interrupt) */
+static int
+card_send_command(const int ioaddr[], const char* name,
+	const unsigned char out[], unsigned char in[])
+{
+	int status;
+
+	if ((status = card_wait_for_busy_clear(ioaddr, name)))
+		return status;
+	outb(0xa0, ioaddr[0] + 6);
+	outb(out[2], ioaddr[0] + 1);
+	outb(out[3], ioaddr[0] + 2);
+	outb(out[4], ioaddr[0] + 3);
+	outb(out[5], ioaddr[0] + 4);
+	outb(out[1], ioaddr[0] + 5);
+	outb(0xa0, ioaddr[0] + 6);
+	outb(out[0], ioaddr[0] + 7);
+	if (out[0] != 0x20 && out[0] != 0x30) {
+		if ((status = card_wait_for_ready(ioaddr, name, in)))
+			return status;
+		inb(ioaddr[0] + 7);
+		if (sb1000_debug > 3)
+			printk(KERN_DEBUG "%s: card_send_command "
+				"out: %02x%02x%02x%02x%02x%02x  "
+				"in: %02x%02x%02x%02x%02x%02x%02x\n", name,
+				out[0], out[1], out[2], out[3], out[4], out[5],
+				in[0], in[1], in[2], in[3], in[4], in[5], in[6]);
+	} else {
+		if (sb1000_debug > 3)
+			printk(KERN_DEBUG "%s: card_send_command "
+				"out: %02x%02x%02x%02x%02x%02x\n", name,
+				out[0], out[1], out[2], out[3], out[4], out[5]);
+	}
+
+	if (out[1] != 0x1b) {
+		if (out[0] >= 0x80 && in[0] != (out[1] | 0x80))
+			return -EIO;
+	}
+	return 0;
+}
+
+
+/*
+ * SB1000 hardware routines to be used during frame rx interrupt
+ */
+static const int Sb1000TimeOutJiffies = 7 * HZ;
+
+/* Card Wait For Ready (to be used during frame rx) */
+static int
+sb1000_wait_for_ready(const int ioaddr[], const char* name)
+{
+	unsigned long timeout;
+
+	timeout = jiffies + Sb1000TimeOutJiffies;
+	while (inb(ioaddr[1] + 6) & 0x80) {
+		if (time_after_eq(jiffies, timeout)) {
+			printk(KERN_WARNING "%s: sb1000_wait_for_ready timeout\n",
+				name);
+			return -ETIME;
+		}
+	}
+	timeout = jiffies + Sb1000TimeOutJiffies;
+	while (!(inb(ioaddr[1] + 6) & 0x40)) {
+		if (time_after_eq(jiffies, timeout)) {
+			printk(KERN_WARNING "%s: sb1000_wait_for_ready timeout\n",
+				name);
+			return -ETIME;
+		}
+	}
+	inb(ioaddr[0] + 7);
+	return 0;
+}
+
+/* Card Wait For Ready Clear (to be used during frame rx) */
+static int
+sb1000_wait_for_ready_clear(const int ioaddr[], const char* name)
+{
+	unsigned long timeout;
+
+	timeout = jiffies + Sb1000TimeOutJiffies;
+	while (inb(ioaddr[1] + 6) & 0x80) {
+		if (time_after_eq(jiffies, timeout)) {
+			printk(KERN_WARNING "%s: sb1000_wait_for_ready_clear timeout\n",
+				name);
+			return -ETIME;
+		}
+	}
+	timeout = jiffies + Sb1000TimeOutJiffies;
+	while (inb(ioaddr[1] + 6) & 0x40) {
+		if (time_after_eq(jiffies, timeout)) {
+			printk(KERN_WARNING "%s: sb1000_wait_for_ready_clear timeout\n",
+				name);
+			return -ETIME;
+		}
+	}
+	return 0;
+}
+
+/* Card Send Command (to be used during frame rx) */
+static void
+sb1000_send_command(const int ioaddr[], const char* name,
+	const unsigned char out[])
+{
+	outb(out[2], ioaddr[0] + 1);
+	outb(out[3], ioaddr[0] + 2);
+	outb(out[4], ioaddr[0] + 3);
+	outb(out[5], ioaddr[0] + 4);
+	outb(out[1], ioaddr[0] + 5);
+	outb(out[0], ioaddr[0] + 7);
+	if (sb1000_debug > 3)
+		printk(KERN_DEBUG "%s: sb1000_send_command out: %02x%02x%02x%02x"
+			"%02x%02x\n", name, out[0], out[1], out[2], out[3], out[4], out[5]);
+}
+
+/* Card Read Status (to be used during frame rx) */
+static void
+sb1000_read_status(const int ioaddr[], unsigned char in[])
+{
+	in[1] = inb(ioaddr[0] + 1);
+	in[2] = inb(ioaddr[0] + 2);
+	in[3] = inb(ioaddr[0] + 3);
+	in[4] = inb(ioaddr[0] + 4);
+	in[0] = inb(ioaddr[0] + 5);
+}
+
+/* Issue Read Command (to be used during frame rx) */
+static void
+sb1000_issue_read_command(const int ioaddr[], const char* name)
+{
+	static const unsigned char Command0[6] = {0x20, 0x00, 0x00, 0x01, 0x00, 0x00};
+
+	sb1000_wait_for_ready_clear(ioaddr, name);
+	outb(0xa0, ioaddr[0] + 6);
+	sb1000_send_command(ioaddr, name, Command0);
+}
+
+
+/*
+ * SB1000 commands for open/configuration
+ */
+/* reset SB1000 card */
+static int
+sb1000_reset(const int ioaddr[], const char* name)
+{
+	static const unsigned char Command0[6] = {0x80, 0x16, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int port, status;
+
+	port = ioaddr[1] + 6;
+	outb(0x4, port);
+	inb(port);
+	udelay(1000);
+	outb(0x0, port);
+	inb(port);
+	ssleep(1);
+	outb(0x4, port);
+	inb(port);
+	udelay(1000);
+	outb(0x0, port);
+	inb(port);
+	udelay(0);
+
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+	if (st[3] != 0xf0)
+		return -EIO;
+	return 0;
+}
+
+/* check SB1000 firmware CRC */
+static int
+sb1000_check_CRC(const int ioaddr[], const char* name)
+{
+	static const unsigned char Command0[6] = {0x80, 0x1f, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int status;
+
+	/* check CRC */
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+	if (st[1] != st[3] || st[2] != st[4])
+		return -EIO;
+	return 0;
+}
+
+static inline int
+sb1000_start_get_set_command(const int ioaddr[], const char* name)
+{
+	static const unsigned char Command0[6] = {0x80, 0x1b, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+
+	return card_send_command(ioaddr, name, Command0, st);
+}
+
+static int
+sb1000_end_get_set_command(const int ioaddr[], const char* name)
+{
+	static const unsigned char Command0[6] = {0x80, 0x1b, 0x02, 0x00, 0x00, 0x00};
+	static const unsigned char Command1[6] = {0x20, 0x00, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int status;
+
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+	return card_send_command(ioaddr, name, Command1, st);
+}
+
+static int
+sb1000_activate(const int ioaddr[], const char* name)
+{
+	static const unsigned char Command0[6] = {0x80, 0x11, 0x00, 0x00, 0x00, 0x00};
+	static const unsigned char Command1[6] = {0x80, 0x16, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int status;
+
+	ssleep(1);
+	status = card_send_command(ioaddr, name, Command0, st);
+	if (status)
+		return status;
+	status = card_send_command(ioaddr, name, Command1, st);
+	if (status)
+		return status;
+	if (st[3] != 0xf1) {
+		status = sb1000_start_get_set_command(ioaddr, name);
+		if (status)
+			return status;
+		return -EIO;
+	}
+	udelay(1000);
+	return sb1000_start_get_set_command(ioaddr, name);
+}
+
+/* get SB1000 firmware version */
+static int
+sb1000_get_firmware_version(const int ioaddr[], const char* name,
+	unsigned char version[], int do_end)
+{
+	static const unsigned char Command0[6] = {0x80, 0x23, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int status;
+
+	if ((status = sb1000_start_get_set_command(ioaddr, name)))
+		return status;
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+	if (st[0] != 0xa3)
+		return -EIO;
+	version[0] = st[1];
+	version[1] = st[2];
+	if (do_end)
+		return sb1000_end_get_set_command(ioaddr, name);
+	else
+		return 0;
+}
+
+/* get SB1000 frequency */
+static int
+sb1000_get_frequency(const int ioaddr[], const char* name, int* frequency)
+{
+	static const unsigned char Command0[6] = {0x80, 0x44, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int status;
+
+	udelay(1000);
+	if ((status = sb1000_start_get_set_command(ioaddr, name)))
+		return status;
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+	*frequency = ((st[1] << 8 | st[2]) << 8 | st[3]) << 8 | st[4];
+	return sb1000_end_get_set_command(ioaddr, name);
+}
+
+/* set SB1000 frequency */
+static int
+sb1000_set_frequency(const int ioaddr[], const char* name, int frequency)
+{
+	unsigned char st[7];
+	int status;
+	unsigned char Command0[6] = {0x80, 0x29, 0x00, 0x00, 0x00, 0x00};
+
+	const int FrequencyLowerLimit = 57000;
+	const int FrequencyUpperLimit = 804000;
+
+	if (frequency < FrequencyLowerLimit || frequency > FrequencyUpperLimit) {
+		printk(KERN_ERR "%s: frequency chosen (%d kHz) is not in the range "
+			"[%d,%d] kHz\n", name, frequency, FrequencyLowerLimit,
+			FrequencyUpperLimit);
+		return -EINVAL;
+	}
+	udelay(1000);
+	if ((status = sb1000_start_get_set_command(ioaddr, name)))
+		return status;
+	Command0[5] = frequency & 0xff;
+	frequency >>= 8;
+	Command0[4] = frequency & 0xff;
+	frequency >>= 8;
+	Command0[3] = frequency & 0xff;
+	frequency >>= 8;
+	Command0[2] = frequency & 0xff;
+	return card_send_command(ioaddr, name, Command0, st);
+}
+
+/* get SB1000 PIDs */
+static int
+sb1000_get_PIDs(const int ioaddr[], const char* name, short PID[])
+{
+	static const unsigned char Command0[6] = {0x80, 0x40, 0x00, 0x00, 0x00, 0x00};
+	static const unsigned char Command1[6] = {0x80, 0x41, 0x00, 0x00, 0x00, 0x00};
+	static const unsigned char Command2[6] = {0x80, 0x42, 0x00, 0x00, 0x00, 0x00};
+	static const unsigned char Command3[6] = {0x80, 0x43, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	int status;
+
+	udelay(1000);
+	if ((status = sb1000_start_get_set_command(ioaddr, name)))
+		return status;
+
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+	PID[0] = st[1] << 8 | st[2];
+
+	if ((status = card_send_command(ioaddr, name, Command1, st)))
+		return status;
+	PID[1] = st[1] << 8 | st[2];
+
+	if ((status = card_send_command(ioaddr, name, Command2, st)))
+		return status;
+	PID[2] = st[1] << 8 | st[2];
+
+	if ((status = card_send_command(ioaddr, name, Command3, st)))
+		return status;
+	PID[3] = st[1] << 8 | st[2];
+
+	return sb1000_end_get_set_command(ioaddr, name);
+}
+
+/* set SB1000 PIDs */
+static int
+sb1000_set_PIDs(const int ioaddr[], const char* name, const short PID[])
+{
+	static const unsigned char Command4[6] = {0x80, 0x2e, 0x00, 0x00, 0x00, 0x00};
+
+	unsigned char st[7];
+	short p;
+	int status;
+	unsigned char Command0[6] = {0x80, 0x31, 0x00, 0x00, 0x00, 0x00};
+	unsigned char Command1[6] = {0x80, 0x32, 0x00, 0x00, 0x00, 0x00};
+	unsigned char Command2[6] = {0x80, 0x33, 0x00, 0x00, 0x00, 0x00};
+	unsigned char Command3[6] = {0x80, 0x34, 0x00, 0x00, 0x00, 0x00};
+
+	udelay(1000);
+	if ((status = sb1000_start_get_set_command(ioaddr, name)))
+		return status;
+
+	p = PID[0];
+	Command0[3] = p & 0xff;
+	p >>= 8;
+	Command0[2] = p & 0xff;
+	if ((status = card_send_command(ioaddr, name, Command0, st)))
+		return status;
+
+	p = PID[1];
+	Command1[3] = p & 0xff;
+	p >>= 8;
+	Command1[2] = p & 0xff;
+	if ((status = card_send_command(ioaddr, name, Command1, st)))
+		return status;
+
+	p = PID[2];
+	Command2[3] = p & 0xff;
+	p >>= 8;
+	Command2[2] = p & 0xff;
+	if ((status = card_send_command(ioaddr, name, Command2, st)))
+		return status;
+
+	p = PID[3];
+	Command3[3] = p & 0xff;
+	p >>= 8;
+	Command3[2] = p & 0xff;
+	if ((status = card_send_command(ioaddr, name, Command3, st)))
+		return status;
+
+	if ((status = card_send_command(ioaddr, name, Command4, st)))
+		return status;
+	return sb1000_end_get_set_command(ioaddr, name);
+}
+
+
+static void
+sb1000_print_status_buffer(const char* name, unsigned char st[],
+	unsigned char buffer[], int size)
+{
+	int i, j, k;
+
+	printk(KERN_DEBUG "%s: status: %02x %02x\n", name, st[0], st[1]);
+	if (buffer[24] == 0x08 && buffer[25] == 0x00 && buffer[26] == 0x45) {
+		printk(KERN_DEBUG "%s: length: %d protocol: %d from: %d.%d.%d.%d:%d "
+			"to %d.%d.%d.%d:%d\n", name, buffer[28] << 8 | buffer[29],
+			buffer[35], buffer[38], buffer[39], buffer[40], buffer[41],
+            buffer[46] << 8 | buffer[47],
+			buffer[42], buffer[43], buffer[44], buffer[45],
+            buffer[48] << 8 | buffer[49]);
+	} else {
+		for (i = 0, k = 0; i < (size + 7) / 8; i++) {
+			printk(KERN_DEBUG "%s: %s", name, i ? "       " : "buffer:");
+			for (j = 0; j < 8 && k < size; j++, k++)
+				printk(" %02x", buffer[k]);
+			printk("\n");
+		}
+	}
+}
+
+/*
+ * SB1000 commands for frame rx interrupt
+ */
+/* receive a single frame and assemble datagram
+ * (this is the heart of the interrupt routine)
+ */
+static int
+sb1000_rx(struct net_device *dev)
+{
+
+#define FRAMESIZE 184
+	unsigned char st[2], buffer[FRAMESIZE], session_id, frame_id;
+	short dlen;
+	int ioaddr, ns;
+	unsigned int skbsize;
+	struct sk_buff *skb;
+	struct sb1000_private *lp = netdev_priv(dev);
+	struct net_device_stats *stats = &dev->stats;
+
+	/* SB1000 frame constants */
+	const int FrameSize = FRAMESIZE;
+	const int NewDatagramHeaderSkip = 8;
+	const int NewDatagramHeaderSize = NewDatagramHeaderSkip + 18;
+	const int NewDatagramDataSize = FrameSize - NewDatagramHeaderSize;
+	const int ContDatagramHeaderSkip = 7;
+	const int ContDatagramHeaderSize = ContDatagramHeaderSkip + 1;
+	const int ContDatagramDataSize = FrameSize - ContDatagramHeaderSize;
+	const int TrailerSize = 4;
+
+	ioaddr = dev->base_addr;
+
+	insw(ioaddr, (unsigned short*) st, 1);
+#ifdef XXXDEBUG
+printk("cm0: received: %02x %02x\n", st[0], st[1]);
+#endif /* XXXDEBUG */
+	lp->rx_frames++;
+
+	/* decide if it is a good or bad frame */
+	for (ns = 0; ns < NPIDS; ns++) {
+		session_id = lp->rx_session_id[ns];
+		frame_id = lp->rx_frame_id[ns];
+		if (st[0] == session_id) {
+			if (st[1] == frame_id || (!frame_id && (st[1] & 0xf0) == 0x30)) {
+				goto good_frame;
+			} else if ((st[1] & 0xf0) == 0x30 && (st[0] & 0x40)) {
+				goto skipped_frame;
+			} else {
+				goto bad_frame;
+			}
+		} else if (st[0] == (session_id | 0x40)) {
+			if ((st[1] & 0xf0) == 0x30) {
+				goto skipped_frame;
+			} else {
+				goto bad_frame;
+			}
+		}
+	}
+	goto bad_frame;
+
+skipped_frame:
+	stats->rx_frame_errors++;
+	skb = lp->rx_skb[ns];
+	if (sb1000_debug > 1)
+		printk(KERN_WARNING "%s: missing frame(s): got %02x %02x "
+			"expecting %02x %02x\n", dev->name, st[0], st[1],
+			skb ? session_id : session_id | 0x40, frame_id);
+	if (skb) {
+		dev_kfree_skb(skb);
+		skb = NULL;
+	}
+
+good_frame:
+	lp->rx_frame_id[ns] = 0x30 | ((st[1] + 1) & 0x0f);
+	/* new datagram */
+	if (st[0] & 0x40) {
+		/* get data length */
+		insw(ioaddr, buffer, NewDatagramHeaderSize / 2);
+#ifdef XXXDEBUG
+printk("cm0: IP identification: %02x%02x  fragment offset: %02x%02x\n", buffer[30], buffer[31], buffer[32], buffer[33]);
+#endif /* XXXDEBUG */
+		if (buffer[0] != NewDatagramHeaderSkip) {
+			if (sb1000_debug > 1)
+				printk(KERN_WARNING "%s: new datagram header skip error: "
+					"got %02x expecting %02x\n", dev->name, buffer[0],
+					NewDatagramHeaderSkip);
+			stats->rx_length_errors++;
+			insw(ioaddr, buffer, NewDatagramDataSize / 2);
+			goto bad_frame_next;
+		}
+		dlen = ((buffer[NewDatagramHeaderSkip + 3] & 0x0f) << 8 |
+			buffer[NewDatagramHeaderSkip + 4]) - 17;
+		if (dlen > SB1000_MRU) {
+			if (sb1000_debug > 1)
+				printk(KERN_WARNING "%s: datagram length (%d) greater "
+					"than MRU (%d)\n", dev->name, dlen, SB1000_MRU);
+			stats->rx_length_errors++;
+			insw(ioaddr, buffer, NewDatagramDataSize / 2);
+			goto bad_frame_next;
+		}
+		lp->rx_dlen[ns] = dlen;
+		/* compute size to allocate for datagram */
+		skbsize = dlen + FrameSize;
+		if ((skb = alloc_skb(skbsize, GFP_ATOMIC)) == NULL) {
+			if (sb1000_debug > 1)
+				printk(KERN_WARNING "%s: can't allocate %d bytes long "
+					"skbuff\n", dev->name, skbsize);
+			stats->rx_dropped++;
+			insw(ioaddr, buffer, NewDatagramDataSize / 2);
+			goto dropped_frame;
+		}
+		skb->dev = dev;
+		skb_reset_mac_header(skb);
+		skb->protocol = (unsigned short) buffer[NewDatagramHeaderSkip + 16];
+		insw(ioaddr, skb_put(skb, NewDatagramDataSize),
+			NewDatagramDataSize / 2);
+		lp->rx_skb[ns] = skb;
+	} else {
+		/* continuation of previous datagram */
+		insw(ioaddr, buffer, ContDatagramHeaderSize / 2);
+		if (buffer[0] != ContDatagramHeaderSkip) {
+			if (sb1000_debug > 1)
+				printk(KERN_WARNING "%s: cont datagram header skip error: "
+					"got %02x expecting %02x\n", dev->name, buffer[0],
+					ContDatagramHeaderSkip);
+			stats->rx_length_errors++;
+			insw(ioaddr, buffer, ContDatagramDataSize / 2);
+			goto bad_frame_next;
+		}
+		skb = lp->rx_skb[ns];
+		insw(ioaddr, skb_put(skb, ContDatagramDataSize),
+			ContDatagramDataSize / 2);
+		dlen = lp->rx_dlen[ns];
+	}
+	if (skb->len < dlen + TrailerSize) {
+		lp->rx_session_id[ns] &= ~0x40;
+		return 0;
+	}
+
+	/* datagram completed: send to upper level */
+	skb_trim(skb, dlen);
+	__netif_rx(skb);
+	stats->rx_bytes+=dlen;
+	stats->rx_packets++;
+	lp->rx_skb[ns] = NULL;
+	lp->rx_session_id[ns] |= 0x40;
+	return 0;
+
+bad_frame:
+	insw(ioaddr, buffer, FrameSize / 2);
+	if (sb1000_debug > 1)
+		printk(KERN_WARNING "%s: frame error: got %02x %02x\n",
+			dev->name, st[0], st[1]);
+	stats->rx_frame_errors++;
+bad_frame_next:
+	if (sb1000_debug > 2)
+		sb1000_print_status_buffer(dev->name, st, buffer, FrameSize);
+dropped_frame:
+	stats->rx_errors++;
+	if (ns < NPIDS) {
+		if ((skb = lp->rx_skb[ns])) {
+			dev_kfree_skb(skb);
+			lp->rx_skb[ns] = NULL;
+		}
+		lp->rx_session_id[ns] |= 0x40;
+	}
+	return -1;
+}
+
+static void
+sb1000_error_dpc(struct net_device *dev)
+{
+	static const unsigned char Command0[6] = {0x80, 0x26, 0x00, 0x00, 0x00, 0x00};
+
+	char *name;
+	unsigned char st[5];
+	int ioaddr[2];
+	struct sb1000_private *lp = netdev_priv(dev);
+	const int ErrorDpcCounterInitialize = 200;
+
+	ioaddr[0] = dev->base_addr;
+	/* mem_start holds the second I/O address */
+	ioaddr[1] = dev->mem_start;
+	name = dev->name;
+
+	sb1000_wait_for_ready_clear(ioaddr, name);
+	sb1000_send_command(ioaddr, name, Command0);
+	sb1000_wait_for_ready(ioaddr, name);
+	sb1000_read_status(ioaddr, st);
+	if (st[1] & 0x10)
+		lp->rx_error_dpc_count = ErrorDpcCounterInitialize;
+}
+
+
+/*
+ * Linux interface functions
+ */
+static int
+sb1000_open(struct net_device *dev)
+{
+	char *name;
+	int ioaddr[2], status;
+	struct sb1000_private *lp = netdev_priv(dev);
+	const unsigned short FirmwareVersion[] = {0x01, 0x01};
+
+	ioaddr[0] = dev->base_addr;
+	/* mem_start holds the second I/O address */
+	ioaddr[1] = dev->mem_start;
+	name = dev->name;
+
+	/* initialize sb1000 */
+	if ((status = sb1000_reset(ioaddr, name)))
+		return status;
+	ssleep(1);
+	if ((status = sb1000_check_CRC(ioaddr, name)))
+		return status;
+
+	/* initialize private data before board can catch interrupts */
+	lp->rx_skb[0] = NULL;
+	lp->rx_skb[1] = NULL;
+	lp->rx_skb[2] = NULL;
+	lp->rx_skb[3] = NULL;
+	lp->rx_dlen[0] = 0;
+	lp->rx_dlen[1] = 0;
+	lp->rx_dlen[2] = 0;
+	lp->rx_dlen[3] = 0;
+	lp->rx_frames = 0;
+	lp->rx_error_count = 0;
+	lp->rx_error_dpc_count = 0;
+	lp->rx_session_id[0] = 0x50;
+	lp->rx_session_id[1] = 0x48;
+	lp->rx_session_id[2] = 0x44;
+	lp->rx_session_id[3] = 0x42;
+	lp->rx_frame_id[0] = 0;
+	lp->rx_frame_id[1] = 0;
+	lp->rx_frame_id[2] = 0;
+	lp->rx_frame_id[3] = 0;
+	if (request_irq(dev->irq, sb1000_interrupt, 0, "sb1000", dev)) {
+		return -EAGAIN;
+	}
+
+	if (sb1000_debug > 2)
+		printk(KERN_DEBUG "%s: Opening, IRQ %d\n", name, dev->irq);
+
+	/* Activate board and check firmware version */
+	udelay(1000);
+	if ((status = sb1000_activate(ioaddr, name)))
+		return status;
+	udelay(0);
+	if ((status = sb1000_get_firmware_version(ioaddr, name, version, 0)))
+		return status;
+	if (version[0] != FirmwareVersion[0] || version[1] != FirmwareVersion[1])
+		printk(KERN_WARNING "%s: found firmware version %x.%02x "
+			"(should be %x.%02x)\n", name, version[0], version[1],
+			FirmwareVersion[0], FirmwareVersion[1]);
+
+
+	netif_start_queue(dev);
+	return 0;					/* Always succeed */
+}
+
+static int sb1000_siocdevprivate(struct net_device *dev, struct ifreq *ifr,
+				 void __user *data, int cmd)
+{
+	char* name;
+	unsigned char version[2];
+	short PID[4];
+	int ioaddr[2], status, frequency;
+	unsigned int stats[5];
+	struct sb1000_private *lp = netdev_priv(dev);
+
+	if (!(dev && dev->flags & IFF_UP))
+		return -ENODEV;
+
+	ioaddr[0] = dev->base_addr;
+	/* mem_start holds the second I/O address */
+	ioaddr[1] = dev->mem_start;
+	name = dev->name;
+
+	switch (cmd) {
+	case SIOCGCMSTATS:		/* get statistics */
+		stats[0] = dev->stats.rx_bytes;
+		stats[1] = lp->rx_frames;
+		stats[2] = dev->stats.rx_packets;
+		stats[3] = dev->stats.rx_errors;
+		stats[4] = dev->stats.rx_dropped;
+		if (copy_to_user(data, stats, sizeof(stats)))
+			return -EFAULT;
+		status = 0;
+		break;
+
+	case SIOCGCMFIRMWARE:		/* get firmware version */
+		if ((status = sb1000_get_firmware_version(ioaddr, name, version, 1)))
+			return status;
+		if (copy_to_user(data, version, sizeof(version)))
+			return -EFAULT;
+		break;
+
+	case SIOCGCMFREQUENCY:		/* get frequency */
+		if ((status = sb1000_get_frequency(ioaddr, name, &frequency)))
+			return status;
+		if (put_user(frequency, (int __user *)data))
+			return -EFAULT;
+		break;
+
+	case SIOCSCMFREQUENCY:		/* set frequency */
+		if (!capable(CAP_NET_ADMIN))
+			return -EPERM;
+		if (get_user(frequency, (int __user *)data))
+			return -EFAULT;
+		if ((status = sb1000_set_frequency(ioaddr, name, frequency)))
+			return status;
+		break;
+
+	case SIOCGCMPIDS:			/* get PIDs */
+		if ((status = sb1000_get_PIDs(ioaddr, name, PID)))
+			return status;
+		if (copy_to_user(data, PID, sizeof(PID)))
+			return -EFAULT;
+		break;
+
+	case SIOCSCMPIDS:			/* set PIDs */
+		if (!capable(CAP_NET_ADMIN))
+			return -EPERM;
+		if (copy_from_user(PID, data, sizeof(PID)))
+			return -EFAULT;
+		if ((status = sb1000_set_PIDs(ioaddr, name, PID)))
+			return status;
+		/* set session_id, frame_id and pkt_type too */
+		lp->rx_session_id[0] = 0x50 | (PID[0] & 0x0f);
+		lp->rx_session_id[1] = 0x48;
+		lp->rx_session_id[2] = 0x44;
+		lp->rx_session_id[3] = 0x42;
+		lp->rx_frame_id[0] = 0;
+		lp->rx_frame_id[1] = 0;
+		lp->rx_frame_id[2] = 0;
+		lp->rx_frame_id[3] = 0;
+		break;
+
+	default:
+		status = -EINVAL;
+		break;
+	}
+	return status;
+}
+
+/* transmit function: do nothing since SB1000 can't send anything out */
+static netdev_tx_t
+sb1000_start_xmit(struct sk_buff *skb, struct net_device *dev)
+{
+	printk(KERN_WARNING "%s: trying to transmit!!!\n", dev->name);
+	/* sb1000 can't xmit datagrams */
+	dev_kfree_skb(skb);
+	return NETDEV_TX_OK;
+}
+
+/* SB1000 interrupt handler. */
+static irqreturn_t sb1000_interrupt(int irq, void *dev_id)
+{
+	static const unsigned char Command0[6] = {0x80, 0x2c, 0x00, 0x00, 0x00, 0x00};
+	static const unsigned char Command1[6] = {0x80, 0x2e, 0x00, 0x00, 0x00, 0x00};
+
+	char *name;
+	unsigned char st;
+	int ioaddr[2];
+	struct net_device *dev = dev_id;
+	struct sb1000_private *lp = netdev_priv(dev);
+
+	const int MaxRxErrorCount = 6;
+
+	ioaddr[0] = dev->base_addr;
+	/* mem_start holds the second I/O address */
+	ioaddr[1] = dev->mem_start;
+	name = dev->name;
+
+	/* is it a good interrupt? */
+	st = inb(ioaddr[1] + 6);
+	if (!(st & 0x08 && st & 0x20)) {
+		return IRQ_NONE;
+	}
+
+	if (sb1000_debug > 3)
+		printk(KERN_DEBUG "%s: entering interrupt\n", dev->name);
+
+	st = inb(ioaddr[0] + 7);
+	if (sb1000_rx(dev))
+		lp->rx_error_count++;
+#ifdef SB1000_DELAY
+	udelay(SB1000_DELAY);
+#endif /* SB1000_DELAY */
+	sb1000_issue_read_command(ioaddr, name);
+	if (st & 0x01) {
+		sb1000_error_dpc(dev);
+		sb1000_issue_read_command(ioaddr, name);
+	}
+	if (lp->rx_error_dpc_count && !(--lp->rx_error_dpc_count)) {
+		sb1000_wait_for_ready_clear(ioaddr, name);
+		sb1000_send_command(ioaddr, name, Command0);
+		sb1000_wait_for_ready(ioaddr, name);
+		sb1000_issue_read_command(ioaddr, name);
+	}
+	if (lp->rx_error_count >= MaxRxErrorCount) {
+		sb1000_wait_for_ready_clear(ioaddr, name);
+		sb1000_send_command(ioaddr, name, Command1);
+		sb1000_wait_for_ready(ioaddr, name);
+		sb1000_issue_read_command(ioaddr, name);
+		lp->rx_error_count = 0;
+	}
+
+	return IRQ_HANDLED;
+}
+
+static int sb1000_close(struct net_device *dev)
+{
+	int i;
+	int ioaddr[2];
+	struct sb1000_private *lp = netdev_priv(dev);
+
+	if (sb1000_debug > 2)
+		printk(KERN_DEBUG "%s: Shutting down sb1000.\n", dev->name);
+
+	netif_stop_queue(dev);
+
+	ioaddr[0] = dev->base_addr;
+	/* mem_start holds the second I/O address */
+	ioaddr[1] = dev->mem_start;
+
+	free_irq(dev->irq, dev);
+	/* If we don't do this, we can't re-insmod it later. */
+	release_region(ioaddr[1], SB1000_IO_EXTENT);
+	release_region(ioaddr[0], SB1000_IO_EXTENT);
+
+	/* free rx_skb's if needed */
+	for (i=0; i<4; i++) {
+		if (lp->rx_skb[i]) {
+			dev_kfree_skb(lp->rx_skb[i]);
+		}
+	}
+	return 0;
+}
+
+MODULE_AUTHOR("Franco Venturi <fventuri@mediaone.net>");
+MODULE_DESCRIPTION("General Instruments SB1000 driver");
+MODULE_LICENSE("GPL");
+
+module_pnp_driver(sb1000_driver);