On Wed, 2021-09-22 at 20:11 +0000, Sam Bingner wrote: > Sorry I didn't have time to research this further to prove it was a > regression - but there is now somebody else who has done so and created a > patch. I thought it might be good to give a link to it to you guys. It > caused problems on all iOS versions AFAIK. The patch and discussion is > available at: > > https://github.com/openwrt/openwrt/pull/4084 Hi Sam, sorry for the delay. I've read the thread above and the patch. Unfortunately we don't have documentation on how the driver is supposed to work and how the iPhone part behave, everything was reverse engineered at the time and the people who did it seem long gone. As far as I understand it, when we experienced the “first” bug, it was noted that reducing the (TX) buffer size by 2 helped, and thus the patch changing IPHETH_BUF_SIZE to 1514 was committed, reducing both RX and TX buffer size. During my testings I never experienced the subsequent bug (the ipheth_rcvbulk_callback: urb status: -75) but maybe I never received 1500b packets (it's a bit strange but maybe). Maybe the right fix would be to split IPHETH_BUF_SIZE to IPHETH_{RX,TX}_BUF_SIZE? Something like: diff --git a/drivers/net/usb/ipheth.c b/drivers/net/usb/ipheth.c index 57d94b18ef33..005d2e31d97c 100644 --- a/drivers/net/usb/ipheth.c +++ b/drivers/net/usb/ipheth.c @@ -60,7 +60,9 @@ #define IPHETH_USBINTF_PROTO 1 #define IPHETH_BUF_SIZE 1514 -#define IPHETH_IP_ALIGN 2 /* padding at front of URB */ +#define IPHETH_IP_ALIGN 2 /* padding at front of URB on RX path */ +#define IPHETH_TX_BUF_SIZE IPHETH_BUF_SIZE +#define IPHETH_RX_BUF_SIZE IPHETH_BUF_SIZE + IPHETH_IP_ALIGN #define IPHETH_TX_TIMEOUT (5 * HZ) #define IPHETH_INTFNUM 2 @@ -116,12 +118,12 @@ static int ipheth_alloc_urbs(struct ipheth_device *iphone) if (rx_urb == NULL) goto free_tx_urb; - tx_buf = usb_alloc_coherent(iphone->udev, IPHETH_BUF_SIZE, + tx_buf = usb_alloc_coherent(iphone->udev, IPHETH_TX_BUF_SIZE, GFP_KERNEL, &tx_urb->transfer_dma); if (tx_buf == NULL) goto free_rx_urb; - rx_buf = usb_alloc_coherent(iphone->udev, IPHETH_BUF_SIZE, + rx_buf = usb_alloc_coherent(iphone->udev, IPHETH_RX_BUF_SIZE, GFP_KERNEL, &rx_urb->transfer_dma); if (rx_buf == NULL) goto free_tx_buf; @@ -134,7 +136,7 @@ static int ipheth_alloc_urbs(struct ipheth_device *iphone) return 0; free_tx_buf: - usb_free_coherent(iphone->udev, IPHETH_BUF_SIZE, tx_buf, + usb_free_coherent(iphone->udev, IPHETH_TX_BUF_SIZE, tx_buf, tx_urb->transfer_dma); free_rx_urb: usb_free_urb(rx_urb); @@ -146,9 +148,9 @@ static int ipheth_alloc_urbs(struct ipheth_device *iphone) static void ipheth_free_urbs(struct ipheth_device *iphone) { - usb_free_coherent(iphone->udev, IPHETH_BUF_SIZE, iphone->rx_buf, + usb_free_coherent(iphone->udev, IPHETH_RX_BUF_SIZE, iphone->rx_buf, iphone->rx_urb->transfer_dma); - usb_free_coherent(iphone->udev, IPHETH_BUF_SIZE, iphone->tx_buf, + usb_free_coherent(iphone->udev, IPHETH_TX_BUF_SIZE, iphone->tx_buf, iphone->tx_urb->transfer_dma); usb_free_urb(iphone->rx_urb); usb_free_urb(iphone->tx_urb); @@ -317,7 +319,7 @@ static int ipheth_rx_submit(struct ipheth_device *dev, gfp_t mem_flags) usb_fill_bulk_urb(dev->rx_urb, udev, usb_rcvbulkpipe(udev, dev->bulk_in), - dev->rx_buf, IPHETH_BUF_SIZE, + dev->rx_buf, IPHETH_RX_BUF_SIZE, ipheth_rcvbulk_callback, dev); dev->rx_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP; @@ -381,7 +383,7 @@ static netdev_tx_t ipheth_tx(struct sk_buff *skb, struct net_device *net) int retval; /* Paranoid */ - if (skb->len > IPHETH_BUF_SIZE) { + if (skb->len > IPHETH_TX_BUF_SIZE) { WARN(1, "%s: skb too large: %d bytes\n", __func__, skb->len); dev->net->stats.tx_dropped++; dev_kfree_skb_any(skb); @@ -389,12 +391,12 @@ static netdev_tx_t ipheth_tx(struct sk_buff *skb, struct net_device *net) } memcpy(dev->tx_buf, skb->data, skb->len); - if (skb->len < IPHETH_BUF_SIZE) - memset(dev->tx_buf + skb->len, 0, IPHETH_BUF_SIZE - skb- >len); + if (skb->len < IPHETH_TX_BUF_SIZE) + memset(dev->tx_buf + skb->len, 0, IPHETH_TX_BUF_SIZE - skb- >len); usb_fill_bulk_urb(dev->tx_urb, udev, usb_sndbulkpipe(udev, dev->bulk_out), - dev->tx_buf, IPHETH_BUF_SIZE, + dev->tx_buf, IPHETH_TX_BUF_SIZE, ipheth_sndbulk_callback, dev); dev->tx_urb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP; -- Yves-Alexis
