bug in tulip_rx? corrected patch 2

From: Wolfgang Walter (wolfgang.walter@stusta.mhn.de)
Date: Thu Nov 25 1999 - 13:53:56 EST


Hi,

another version of my patch. My previous one generally works but has a
problem when we get a lot of packets while we drop packets. This is because
I did not return a work_done>0 in this case.

Another thing I changed is to always call tulip_rx() in the interrupt. The
reason is that (especially in "dropping mode") we switch off interrupts and
wait for a timer interrupt. If such a timer interrupt occurs, I'm not sure
that always a RD or a RU interrupt is generated. Of course one could change
that to call it when a timer-interrupt occurs. I can't see any performance
difference so (sending as many 64byte sized packets as possible via 10Base-T
from the machine without receiving actually something).

Can this be a problem with 100Base-T? Can't test it here. Would appreciate if
someone with a 100MBit card could test that.

Another possibilty would be to check the card for suspend mode.

Wolfgang Walter

--- 2.2.14pre4/drivers/net/tulip.c Fri Nov 5 18:02:35 1999
+++ 2.2.14pre4-m/drivers/net/tulip.c Thu Nov 25 19:45:47 1999
@@ -509,6 +509,7 @@
         int interrupt; /* In-interrupt flag. */
         unsigned int cur_rx, cur_tx; /* The next free ring entry */
         unsigned int dirty_rx, dirty_tx; /* The ring entries to be free()ed. */
+ unsigned int nr_skbs_rx; /* number of skbs */
         unsigned int tx_full:1; /* The Tx queue is full. */
         unsigned int full_duplex:1; /* Full-duplex operation requested. */
         unsigned int full_duplex_lock:1;
@@ -2484,6 +2485,7 @@
         tp->tx_full = 0;
         tp->cur_rx = tp->cur_tx = 0;
         tp->dirty_rx = tp->dirty_tx = 0;
+ tp->nr_skbs_rx = 0;
 
         for (i = 0; i < RX_RING_SIZE; i++) {
                 tp->rx_ring[i].status = 0x00000000;
@@ -2503,6 +2505,7 @@
                 tp->rx_skbuff[i] = skb;
                 if (skb == NULL)
                         break;
+ tp->nr_skbs_rx++;
                 skb->dev = dev; /* Mark as being used by this device. */
                 tp->rx_ring[i].status = cpu_to_le32(DescOwned); /* Owned by Tulip chip */
                 tp->rx_ring[i].buffer1 = virt_to_le32desc(skb->tail);
@@ -2595,6 +2598,9 @@
         dev->interrupt = 1;
 #endif
 
+ /* to be sure we restart receiving */
+ tulip_rx(dev);
+
         do {
                 csr5 = inl(ioaddr + CSR5);
                 /* Acknowledge all of the current interrupt sources ASAP. */
@@ -2797,7 +2803,7 @@
 #endif
                         /* Check if the packet is long enough to accept without copying
                            to a minimally-sized skbuff. */
- if (pkt_len < rx_copybreak
+ if ((pkt_len < rx_copybreak || tp->nr_skbs_rx < 2)
                                 && (skb = dev_alloc_skb(pkt_len + 2)) != NULL) {
                                 skb->dev = dev;
                                 skb_reserve(skb, 2); /* 16 byte align the IP header */
@@ -2809,9 +2815,10 @@
                                            pkt_len);
 #endif
                                 work_done++;
- } else { /* Pass up the skb already on the Rx ring. */
+ } else if (tp->nr_skbs_rx > 1) { /* Pass up the skb already on the Rx ring. */
                                 char *temp = skb_put(skb = tp->rx_skbuff[entry], pkt_len);
                                 tp->rx_skbuff[entry] = NULL;
+ tp->nr_skbs_rx--;
 #ifndef final_version
                                 if (le32desc_to_virt(tp->rx_ring[entry].buffer1) != temp)
                                         printk(KERN_ERR "%s: Internal fault: The skbuff addresses "
@@ -2820,14 +2827,24 @@
                                                    le32desc_to_virt(tp->rx_ring[entry].buffer1),
                                                    skb->head, temp);
 #endif
+ } else {
+ /* we have only one skb; we must keep it: drop the packet */
+ tp->stats.rx_dropped++;
+ skb = NULL;
+ /* Make this expensive: we do not want to be called immediately again
+ * the situation only gets after this interrupt handler finished
+ */
+ work_done++;
                         }
- skb->protocol = eth_type_trans(skb, dev);
- netif_rx(skb);
- dev->last_rx = jiffies;
- tp->stats.rx_packets++;
+ if (skb) {
+ skb->protocol = eth_type_trans(skb, dev);
+ netif_rx(skb);
+ dev->last_rx = jiffies;
+ tp->stats.rx_packets++;
 #if LINUX_VERSION_CODE > 0x20127
- tp->stats.rx_bytes += pkt_len;
+ tp->stats.rx_bytes += pkt_len;
 #endif
+ }
                 }
                 entry = (++tp->cur_rx) % RX_RING_SIZE;
         }
@@ -2840,11 +2857,55 @@
                         skb = tp->rx_skbuff[entry] = dev_alloc_skb(PKT_BUF_SZ);
                         if (skb == NULL)
                                 break;
+ tp->nr_skbs_rx++;
                         skb->dev = dev; /* Mark as being used by this device. */
                         tp->rx_ring[entry].buffer1 = virt_to_le32desc(skb->tail);
                         work_done++;
                 }
                 tp->rx_ring[entry].status = cpu_to_le32(DescOwned);
+ }
+
+ /*
+ * We must catch the situation:
+ * the card run out of RX-buffers when this interrupt was triggered (but we have a skb available)
+ *
+ * This is the case, if
+ * tp->nr_skbs_rx > 0
+ * and
+ * all buffers are dirty
+ * <=> tp->dirty_rx + RX_RING_SIZE == tp->cur_rx
+ * <=> tp->cur_rx has no skb associated
+ *
+ * Why?
+ * =>
+ * If at this stage all buffers are dirty this means that
+ * tp->dirty_rx + RX_RING_SIZE == tp->cur_rx
+ * must hold. This means that the above refill did not change tp->dirty_rx at all
+ * which means that the associated skb must be null. As this is the same in the ring as
+ * tp->cur_rx represents, there is no skb associated with tp->cur_rx.
+ *
+ * <=
+ * If tp->cur_rx has no skb associated the rx-loop must be terminated with
+ * rx_work_limit<0 (tp->rx_ring[entry].status & cpu_to_le32(DescOwned) can't be
+ * true if no skb is associated). This means that
+ * tp->dirty_rx + RX_RING_SIZE == tp->cur_rx
+ * holds which means that all buffers are dirty
+ *
+ */
+ entry = tp->cur_rx % RX_RING_SIZE;
+ if (tp->nr_skbs_rx > 0 && tp->rx_skbuff[entry] == NULL) {
+ int i;
+ /* search the one free buffer */
+ for (i = 0; i < RX_RING_SIZE; i++) {
+ if (tp->rx_skbuff[i] != NULL) {
+ tp->rx_skbuff[entry] = tp->rx_skbuff[i];
+ tp->rx_ring[entry].buffer1 = tp->rx_ring[i].buffer1;
+ tp->rx_skbuff[i] = NULL;
+ tp->rx_ring[entry].status = cpu_to_le32(DescOwned);
+ tp->dirty_rx++;
+ break;
+ }
+ }
         }
 
         return work_done;



This archive was generated by hypermail 2b29 : Wed Jan 12 2000 - 12:00:16 EST