]> git.ozlabs.org Git - ppp.git/blobdiff - linux/ppp.c
update for 2.3.11
[ppp.git] / linux / ppp.c
index af329c8d93d073d2af0e476495129bf5428b4a00..0fa98fd1eebffd00101716061106ed3f8a0f342a 100644 (file)
@@ -1,8 +1,20 @@
-/*
-   PPP for Linux
-
-   $Id: ppp.c,v 1.3 1994/12/08 02:03:55 paulus Exp $
-*/
+/*  PPP for Linux
+ *
+ *  Michael Callahan <callahan@maths.ox.ac.uk>
+ *  Al Longyear <longyear@netcom.com>
+ *  Extensively rewritten by Paul Mackerras <paulus@cs.anu.edu.au>
+ *
+ *  ==FILEVERSION 990910==
+ *
+ *  NOTE TO MAINTAINERS:
+ *     If you modify this file at all, please set the number above to the
+ *     date of the modification as YYMMDD (year month day).
+ *     ppp.c is shipped with a PPP distribution as well as with the kernel;
+ *     if everyone increases the FILEVERSION number above, then scripts
+ *     can do the right thing when deciding whether to install a new ppp.c
+ *     file.  Don't change the format of that line otherwise, so the
+ *     installation script can recognize it.
+ */
 
 /*
    Sources:
 
    OPTIMIZE_FLAG_TIME - Number of jiffies to force sending of leading flag
                        character. This is normally set to ((HZ * 3) / 2).
-                       This is 1.5 seconds. If not defined then the leading
+                       This is 1.5 seconds. If zero then the leading
                        flag is always sent.
 
    CHECK_CHARACTERS   - Enable the checking on all received characters for
                        8 data bits, no parity. This adds a small amount of
                        processing for each received character.
-                       
-   NEW_SKBUFF        - Use NET3.020 sk_buff's
 */
 
-/* #define NEW_SKBUFF */
-#define OPTIMIZE_FLAG_TIME  ((HZ * 3)/2)       /* */
+#define OPTIMIZE_FLAG_TIME     ((HZ * 3)/2)
+#define CHECK_CHARACTERS       1
 
+#define PPP_MAX_RCV_QLEN       32      /* max # frames we queue up for pppd */
+
+/* $Id: ppp.c,v 1.33 1999/12/23 01:48:45 paulus Exp $ */
+
+#include <linux/version.h>
+#include <linux/config.h>
+#include <linux/module.h>
 #include <linux/kernel.h>
 #include <linux/sched.h>
 #include <linux/types.h>
 #include <linux/fcntl.h>
 #include <linux/interrupt.h>
 #include <linux/ptrace.h>
+
+/* a macro to generate linux version number codes */
+#define VERSION(major,minor,patch) (((((major)<<8)+(minor))<<8)+(patch))
+
+#if LINUX_VERSION_CODE < VERSION(2,1,14)
 #include <linux/ioport.h>
+#endif
+
+#if LINUX_VERSION_CODE >= VERSION(2,1,23)
+#include <linux/poll.h>
+#endif
+
 #include <linux/in.h>
 #include <linux/malloc.h>
 #include <linux/tty.h>
 #include <linux/signal.h>      /* used in new tty drivers */
 #include <asm/system.h>
 #include <asm/bitops.h>
-#include <asm/segment.h>
-#include <net/if.h>
-#include <net/if_arp.h>
-#include <net/if_route.h>
+#include <linux/if.h>
 #include <linux/if_ether.h>
 #include <linux/netdevice.h>
 #include <linux/skbuff.h>
 #include <linux/inet.h>
 #include <linux/ioctl.h>
+#include <linux/ip.h>
+#include <linux/tcp.h>
+#include <linux/if_arp.h>
+#include <net/slhc_vj.h>
+
+#define fcstab ppp_crc16_table         /* Name of the table in the kernel */
+#include <linux/ppp_defs.h>
+
+#include <linux/socket.h>
+#include <linux/if_ppp.h>
+#include <linux/if_pppvar.h>
+#include <linux/ppp-comp.h>
+
+#ifdef CONFIG_KMOD
+#include <linux/kmod.h>
+#endif
+#ifdef CONFIG_KERNELD
+#include <linux/kerneld.h>
+#endif
 
-#ifdef NEW_SKBUFF
-#include <linux/netprotocol.h>
+#undef PPP_VERSION
+#define PPP_VERSION    "2.3.11"
+
+#if LINUX_VERSION_CODE >= VERSION(2,1,4)
+
+#if LINUX_VERSION_CODE >= VERSION(2,1,5)
+#include <asm/uaccess.h>
 #else
-#define skb_data(skb)  ((skb)->data)
-typedef struct sk_buff sk_buff;
+#include <asm/segment.h>
 #endif
 
-#include <ip.h>
-#include <tcp.h>
-#include <linux/if_arp.h>
-#include "slhc.h"
-#include <net/ppp_defs.h>
-#include <linux/socket.h>
-#include <net/if_ppp.h>
-#include <net/if_pppvar.h>
+#define GET_USER       get_user
+#define PUT_USER       put_user
+#define COPY_FROM_USER copy_from_user
+#define COPY_TO_USER   copy_to_user
+
+#else  /* 2.0.x and 2.1.x before 2.1.4 */
+
+#define GET_USER(val, src)     \
+       (verify_area(VERIFY_READ, src, sizeof(*src))? -EFAULT: \
+        ((val) = get_user(src), 0))
+#define PUT_USER(val, dst)     \
+       (verify_area(VERIFY_WRITE, dst, sizeof(*dst))? -EFAULT: \
+        (put_user(val, dst), 0))
+#define COPY_FROM_USER(dst, src, size) \
+       (verify_area(VERIFY_READ, src, size)? -EFAULT: \
+        (memcpy_fromfs(dst, src, size), 0))
+#define COPY_TO_USER(dst, src, size)   \
+       (verify_area(VERIFY_WRITE, dst, size)? -EFAULT: \
+        (memcpy_tofs(dst, src, size), 0))
+
+#endif /* < 2.1.4 */
+
+#if LINUX_VERSION_CODE < VERSION(2,1,37)
+#define test_and_set_bit(nr, addr)     set_bit(nr, addr)
+#endif
+
+#if LINUX_VERSION_CODE < VERSION(2,1,25)
+#define net_device_stats       enet_statistics
+#endif
 
-#ifndef PPP_IPX
-#define PPP_IPX 0x2b  /* IPX protocol over PPP */
+#if LINUX_VERSION_CODE < VERSION(2,1,57)
+#define signal_pending(tsk)    ((tsk)->signal & ~(tsk)->blocked)
+#endif
+
+#if LINUX_VERSION_CODE < VERSION(2,1,60)
+typedef int            rw_ret_t;
+typedef unsigned int   rw_count_t;
+#else
+typedef ssize_t                rw_ret_t;
+typedef size_t         rw_count_t;
+#endif
+
+#if LINUX_VERSION_CODE < VERSION(2,1,86)
+#define KFREE_SKB(s)   dev_kfree_skb((s), FREE_WRITE)
+#else
+#define KFREE_SKB(s)   kfree_skb(s)
+#endif
+
+#if LINUX_VERSION_CODE < VERSION(2,1,15)
+#define LIBERATE_SKB(s)        ((s)->free = 1)
+#else
+#define LIBERATE_SKB(s)        do { } while (0)
+#endif
+
+#if LINUX_VERSION_CODE < VERSION(2,1,95)
+#define SUSER()                suser()
+#else
+#define SUSER()                capable(CAP_NET_ADMIN)
+#endif
+
+#if LINUX_VERSION_CODE < VERSION(2,2,0)
+#define wmb()          mb()
 #endif
 
 /*
  * Local functions
  */
 
-static void ppp_init_ctrl_blk (register struct ppp *);
-static void ppp_kick_tty (struct ppp *, struct ppp_buffer *bfr);
-static int ppp_doframe (struct ppp *);
-static int ppp_do_ip (struct ppp *, unsigned short, u_char *, int);
-static int ppp_us_queue (struct ppp *, unsigned short, u_char *, int);
+static int ppp_register_compressor (struct compressor *cp);
+static void ppp_unregister_compressor (struct compressor *cp);
+
+static void ppp_async_init(struct ppp *ppp);
+static void ppp_async_release(struct ppp *ppp);
+static int ppp_tty_sync_push(struct ppp *ppp);
+static int ppp_tty_push(struct ppp *ppp);
+static int ppp_async_encode(struct ppp *ppp);
+static int ppp_async_send(struct ppp *, struct sk_buff *);
+static int ppp_sync_send(struct ppp *, struct sk_buff *);
+static void ppp_tty_flush_output(struct ppp *);
+
+static int ppp_ioctl(struct ppp *, unsigned int, unsigned long);
+static int ppp_set_compression (struct ppp *ppp, struct ppp_option_data *odp);
+static void ppp_proto_ccp(struct ppp *ppp, __u8 *dp, int len, int rcvd);
+static void ppp_ccp_closed(struct ppp *ppp);
+static int ppp_receive_frame(struct ppp *, struct sk_buff *);
+static void ppp_receive_error(struct ppp *ppp);
+static void ppp_output_wakeup(struct ppp *ppp);
+static void ppp_send_ctrl(struct ppp *ppp, struct sk_buff *skb);
+static void ppp_send_frame(struct ppp *ppp, struct sk_buff *skb);
+static void ppp_send_frames(struct ppp *ppp);
+static struct sk_buff *ppp_vj_compress(struct ppp *ppp, struct sk_buff *skb);
+
+static struct ppp *ppp_find (int pid_value);
 static struct ppp *ppp_alloc (void);
-static void ppp_print_buffer (const u_char *, u_char *, int, int);
-extern inline void ppp_stuff_char (struct ppp *ppp,
-                                  register struct ppp_buffer *buf,
-                                  register u_char chr);
-extern inline int lock_buffer (register struct ppp_buffer *buf);
+static void ppp_generic_init(struct ppp *ppp);
+static void ppp_release(struct ppp *ppp);
+static void ppp_print_buffer (const char *, const __u8 *, int);
+static struct compressor *find_compressor (int type);
 
-#define ins_char(pbuf,c) (buf_base(pbuf) [(pbuf)->count++] = (u_char)(c))
+#ifndef OPTIMIZE_FLAG_TIME
+#define OPTIMIZE_FLAG_TIME     0
+#endif
 
 /*
- * The "main" procedure to the ppp device
+ * Parameters which may be changed via insmod.
  */
 
-int ppp_init (struct device *);
+static int  flag_time = OPTIMIZE_FLAG_TIME;
+#if LINUX_VERSION_CODE >= VERSION(2,1,19) 
+MODULE_PARM(flag_time, "i");
+#endif
+
+#define CHECK_PPP_MAGIC(ppp)   do { \
+       if (ppp->magic != PPP_MAGIC) { \
+               printk(ppp_magic_warn, ppp, __FILE__, __LINE__); \
+       } \
+} while (0)
+#define CHECK_PPP(a)   do { \
+       CHECK_PPP_MAGIC(ppp); \
+       if (!ppp->inuse) { \
+               printk(ppp_warning, __LINE__); \
+               return a; \
+       } \
+} while (0)
+#define CHECK_PPP_VOID() do { \
+       CHECK_PPP_MAGIC(ppp); \
+       if (!ppp->inuse) { \
+               printk(ppp_warning, __LINE__); \
+               return; \
+       } \
+} while (0)
+
+#define tty2ppp(tty)   ((struct ppp *) ((tty)->disc_data))
+#define dev2ppp(dev)   ((struct ppp *) ((dev)->priv))
+#define ppp2tty(ppp)   ((ppp)->tty)
+#define ppp2dev(ppp)   (&(ppp)->dev)
+
+static struct ppp *ppp_list = NULL;
+static struct ppp *ppp_last = NULL;
+
+/* Define these strings only once for all macro invocations */
+static char ppp_warning[] = KERN_WARNING "PPP: ALERT! not INUSE! %d\n";
+static char ppp_magic_warn[] = KERN_WARNING "bad magic for ppp %p at %s:%d\n";
 
-/*
- * Network device driver callback routines
- */
+static char szVersion[]                = PPP_VERSION;
 
-static int ppp_dev_open (struct device *);
-static int ppp_dev_ioctl (struct device *dev, struct ifreq *ifr, int cmd);
-static int ppp_dev_close (struct device *);
-static int ppp_dev_xmit (sk_buff *, struct device *);
-static struct enet_statistics *ppp_dev_stats (struct device *);
-
-#ifdef NEW_SKBUFF
-static int ppp_dev_input (struct protocol *self, struct protocol *lower,
-                         sk_buff *skb, void *saddr, void *daddr);
-static int ppp_dev_output (struct protocol *self, sk_buff *skb, int type,
-                          int subid, void *saddr, void *daddr, void *opt);
-static int ppp_dev_getkey(int protocol, int subid, unsigned char *key);
+#if LINUX_VERSION_CODE < VERSION(2,1,18)
+static struct symbol_table ppp_syms = {
+#include <linux/symtab_begin.h>
+       X(ppp_register_compressor),
+       X(ppp_unregister_compressor),
+#include <linux/symtab_end.h>
+};
 #else
-static int ppp_dev_header (u_char *, struct device *, unsigned short,
-                          void *, void *, unsigned, sk_buff *);
-static int ppp_dev_rebuild (void *, struct device *, unsigned long,
-                           sk_buff *);
-static unsigned short ppp_dev_type (sk_buff *, struct device *);
+EXPORT_SYMBOL(ppp_register_compressor);
+EXPORT_SYMBOL(ppp_unregister_compressor);
 #endif
 
+/*************************************************************
+ * LINE DISCIPLINE SUPPORT
+ *    The following code implements the PPP line discipline
+ *    and supports using PPP on an async serial line.
+ *************************************************************/
+
+#define in_xmap(ppp,c) (ppp->xmit_async_map[(c) >> 5] & (1 << ((c) & 0x1f)))
+#define in_rmap(ppp,c) ((((unsigned int) (__u8) (c)) < 0x20) && \
+                       ppp->recv_async_map & (1 << (c)))
+
 /*
  * TTY callbacks
  */
 
-static int ppp_tty_read (struct tty_struct *, struct file *, u_char *,
-                        unsigned int);
-static int ppp_tty_write (struct tty_struct *, struct file *, u_char *,
-                         unsigned int);
-static int ppp_tty_ioctl (struct tty_struct *, struct file *, unsigned int,
-                         unsigned long);
-static int ppp_tty_select (struct tty_struct *tty, struct inode *inode,
-                     struct file *filp, int sel_type, select_table * wait);
+static rw_ret_t ppp_tty_read(struct tty_struct *, struct file *, __u8 *,
+                            rw_count_t);
+static rw_ret_t ppp_tty_write(struct tty_struct *, struct file *, const __u8 *,
+                             rw_count_t);
+static int ppp_tty_ioctl(struct tty_struct *, struct file *, unsigned int,
+                        unsigned long);
+#if LINUX_VERSION_CODE < VERSION(2,1,23)
+static int ppp_tty_select(struct tty_struct *tty, struct inode *inode,
+                       struct file *filp, int sel_type, select_table * wait);
+#else
+static unsigned int ppp_tty_poll(struct tty_struct *tty, struct file *filp,
+                                poll_table * wait);
+#endif
 static int ppp_tty_open (struct tty_struct *);
 static void ppp_tty_close (struct tty_struct *);
 static int ppp_tty_room (struct tty_struct *tty);
-static void ppp_tty_receive (struct tty_struct *tty, u_char * cp,
+static void ppp_tty_receive (struct tty_struct *tty, const __u8 * cp,
                             char *fp, int count);
 static void ppp_tty_wakeup (struct tty_struct *tty);
 
-
-#define PRINTK(p) printk p ;
-#define ASSERT(p) if (!p) PRINTK ((KERN_CRIT "assertion failed: " # p))
-#define PRINTKN(n,p) {if (ppp_debug >= n) PRINTK (p)}
-#define CHECK_PPP(a)  if (!ppp->inuse) { PRINTK ((ppp_warning, __LINE__)) return a;}
-#define CHECK_PPP_VOID()  if (!ppp->inuse) { PRINTK ((ppp_warning, __LINE__)) return;}
-
-#define in_xmap(ppp,c) (ppp->xmit_async_map[(c) >> 5] & (1 << ((c) & 0x1f)))
-#define in_rmap(ppp,c) ((((unsigned int) (u_char) (c)) < 0x20) && \
-                       ppp->recv_async_map & (1 << (c)))
-
-#define bset(p,b)      ((p)[(b) >> 5] |= (1 << ((b) & 0x1f)))
-
-/* Buffer types */
-#define BUFFER_TYPE_DEV_RD    0  /* ppp? read buffer      */
-#define BUFFER_TYPE_TTY_WR    1  /* tty? write buffer     */
-#define BUFFER_TYPE_DEV_WR    2  /* ppp? write buffer     */
-#define BUFFER_TYPE_TTY_RD    3  /* tty? read buffer      */
-#define BUFFER_TYPE_VJ        4  /* vj compression buffer */
-
-/* Define this string only once for all macro envocations */
-static char ppp_warning[] = KERN_WARNING "PPP: ALERT! not INUSE! %d\n";
-
-static int first_time           = 1;
-static char szVersion[]         = PPP_VERSION;
-static int ppp_debug            = 5;
-static int ppp_debug_netpackets = 0;
-static struct tty_ldisc ppp_ldisc;
-static struct ppp       ppp_ctrl   [PPP_NRUNIT];
-#ifdef NEW_SKBUFF
-struct protocol proto_ppp;
-#endif
-
-/* FCS table from RFC1331 */
-
-static unsigned short fcstab[256] =
+__u16 ppp_crc16_table[256] =
 {
        0x0000, 0x1189, 0x2312, 0x329b, 0x4624, 0x57ad, 0x6536, 0x74bf,
        0x8c48, 0x9dc1, 0xaf5a, 0xbed3, 0xca6c, 0xdbe5, 0xe97e, 0xf8f7,
@@ -217,652 +341,998 @@ static unsigned short fcstab[256] =
        0xf78f, 0xe606, 0xd49d, 0xc514, 0xb1ab, 0xa022, 0x92b9, 0x8330,
        0x7bc7, 0x6a4e, 0x58d5, 0x495c, 0x3de3, 0x2c6a, 0x1ef1, 0x0f78
 };
+#if LINUX_VERSION_CODE >= VERSION(2,1,18)
+EXPORT_SYMBOL(ppp_crc16_table);
+#endif
 
-/*************************************************************
- * INITIALIZATION
- *************************************************************/
-
-/* called at boot time for each ppp device */
-
-int
-ppp_init (struct device *dev)
+#ifdef CHECK_CHARACTERS
+static __u32 paritytab[8] =
 {
-       struct ppp *ppp;
-       int i;
-
-       ppp = &ppp_ctrl[dev->base_addr];
-
-       if (first_time) {
-               first_time = 0;
-
-               printk (KERN_INFO "PPP: version %s (%d channels)"
-#ifdef NEW_SKBUFF
-                       " NEW_SKBUFF"
+       0x96696996, 0x69969669, 0x69969669, 0x96696996,
+       0x69969669, 0x96696996, 0x96696996, 0x69969669
+};
 #endif
-                       "\n", szVersion, PPP_NRUNIT);
-
-               printk (KERN_INFO
-                       "TCP compression code copyright 1989 Regents of the "
-                       "University of California\n");
-
-               (void) memset (&ppp_ldisc, 0, sizeof (ppp_ldisc));
-               ppp_ldisc.magic         = TTY_LDISC_MAGIC;
-               ppp_ldisc.open          = ppp_tty_open;
-               ppp_ldisc.close         = ppp_tty_close;
-               ppp_ldisc.read          = ppp_tty_read;
-               ppp_ldisc.write         = ppp_tty_write;
-               ppp_ldisc.ioctl         = ppp_tty_ioctl;
-               ppp_ldisc.select        = ppp_tty_select;
-               ppp_ldisc.receive_room  = ppp_tty_room;
-               ppp_ldisc.receive_buf   = ppp_tty_receive;
-               ppp_ldisc.write_wakeup  = ppp_tty_wakeup;
-
-               i = tty_register_ldisc (N_PPP, &ppp_ldisc);
-               if (i == 0) {
-                       printk (KERN_INFO "PPP line discipline registered.\n");
-               } else {
-                       printk (KERN_ERR "error registering line discipline: %d\n", i);
-               }
 
-#ifdef NEW_SKBUFF  
-               memset (&proto_ppp, 0, sizeof (proto_ppp));
+/*
+ * This procedure is called at initialization time to register
+ * the PPP line discipline.
+ */
+static int
+ppp_first_time(void)
+{
+       static struct tty_ldisc ppp_ldisc;
+       int    status;
 
-               proto_ppp.name          = "PPP";
-               proto_ppp.output        = ppp_dev_output;
-               proto_ppp.input         = ppp_dev_input;
-               proto_ppp.bh_input      = ppp_dev_input;
-               proto_ppp.control_event = default_protocol_control;
-               proto_ppp.get_binding   = ppp_dev_getkey;
+       printk(KERN_INFO
+              "PPP: version %s (demand dialling)"
+              "\n", szVersion);
 
-               protocol_register(&proto_ppp);
+#ifndef MODULE /* slhc module logic has its own copyright announcement */
+       printk(KERN_INFO
+              "TCP compression code copyright 1989 Regents of the "
+              "University of California\n");
 #endif
 
-       }
-       /* initialize PPP control block */
-       ppp_init_ctrl_blk (ppp);
-       ppp->inuse = 0;
-       ppp->line  = dev->base_addr;
-       ppp->tty   = NULL;
-       ppp->dev   = dev;
-
-       /* clear statistics */
-       memset (&ppp->p, '\0', sizeof (struct ppp_stats));
-
-#ifdef NEW_SKBUFF  
-       dev->default_protocol = &proto_ppp;     /* Our protocol layer is PPP */
+       /*
+        * Register the tty discipline
+        */
+       (void) memset (&ppp_ldisc, 0, sizeof (ppp_ldisc));
+       ppp_ldisc.magic         = TTY_LDISC_MAGIC;
+#if LINUX_VERSION_CODE >= VERSION(2,1,28)
+       ppp_ldisc.name          = "ppp";
+#endif
+       ppp_ldisc.open          = ppp_tty_open;
+       ppp_ldisc.close         = ppp_tty_close;
+       ppp_ldisc.read          = ppp_tty_read;
+       ppp_ldisc.write         = ppp_tty_write;
+       ppp_ldisc.ioctl         = ppp_tty_ioctl;
+#if LINUX_VERSION_CODE < VERSION(2,1,23)
+       ppp_ldisc.select        = ppp_tty_select;
 #else
-       dev->hard_header      = ppp_dev_header;
-       dev->type_trans       = ppp_dev_type;
-       dev->rebuild_header   = ppp_dev_rebuild;
-       dev->hard_header_len  = 0;
+       ppp_ldisc.poll          = ppp_tty_poll;
 #endif
+       ppp_ldisc.receive_room  = ppp_tty_room;
+       ppp_ldisc.receive_buf   = ppp_tty_receive;
+       ppp_ldisc.write_wakeup  = ppp_tty_wakeup;
+
+       status = tty_register_ldisc (N_PPP, &ppp_ldisc);
+       if (status == 0)
+               printk(KERN_INFO "PPP line discipline registered.\n");
+       else
+               printk(KERN_ERR "error registering line discipline: %d\n",
+                      status);
+       return status;
+}
 
-       /* device INFO */
-       dev->mtu              = PPP_MTU;
-       dev->hard_start_xmit  = ppp_dev_xmit;
-       dev->open             = ppp_dev_open;
-       dev->stop             = ppp_dev_close;
-       dev->get_stats        = ppp_dev_stats;
-       dev->do_ioctl         = ppp_dev_ioctl;
-       dev->addr_len         = 0;
-       dev->type             = ARPHRD_PPP;
-
-       for (i = 0; i < DEV_NUMBUFFS; i++) {
-               skb_queue_head_init (&dev->buffs[i]);
-       }
 
-       /* New-style flags */
-       dev->flags      = IFF_POINTOPOINT;
-       dev->family     = AF_INET;
-       dev->pa_addr    = 0;
-       dev->pa_brdaddr = 0;
-       dev->pa_mask    = 0;
-       dev->pa_alen    = sizeof (unsigned long);
+#ifndef MODULE
+/*
+ * Called at boot time if the PPP driver is compiled into the kernel.
+ */
+int
+ppp_init(struct device *dev)
+{
+       static int first_time = 1;
+       int    answer = 0;
 
-       return 0;
+       if (first_time) {
+               first_time = 0;
+               answer     = ppp_first_time();
+#if LINUX_VERSION_CODE < VERSION(2,1,18)
+               if (answer == 0)
+                       (void) register_symtab(&ppp_syms);
+#endif
+       }
+       if (answer == 0)
+               answer = -ENODEV;
+       return answer;
 }
+#endif
 
 /*
- * Local procedure to initialize the ppp structure
+ * Initialize the async-specific parts of the ppp structure.
  */
-
 static void
-ppp_init_ctrl_blk (register struct ppp *ppp)
+ppp_async_init(struct ppp *ppp)
 {
-       ppp->magic  = PPP_MAGIC;
-       ppp->toss   = 0xE0;
        ppp->escape = 0;
-
-       ppp->flags  = 0;
-       ppp->mtu    = PPP_MTU;
-       ppp->mru    = PPP_MRU;
+       ppp->toss   = 0xE0;
+       ppp->tty_pushing = 0;
 
        memset (ppp->xmit_async_map, 0, sizeof (ppp->xmit_async_map));
        ppp->xmit_async_map[0] = 0xffffffff;
        ppp->xmit_async_map[3] = 0x60000000;
-       ppp->recv_async_map    = 0x00000000;
-
-       ppp->rbuf       = NULL;
-       ppp->wbuf       = NULL;
-       ppp->ubuf       = NULL;
-       ppp->cbuf       = NULL;
-       ppp->slcomp     = NULL;
-       ppp->read_wait  = NULL;
-       ppp->write_wait = NULL;
-
-#ifdef OPTIMIZE_FLAG_TIME   /* ensure flag will always be sent first time */
-       ppp->last_xmit = jiffies - OPTIMIZE_FLAG_TIME;
-#else
-       ppp->last_xmit = 0;
-#endif
-
-       /* clear statistics */
-       memset (&ppp->p, '\0', sizeof (struct ppp_stats));
-
-       /* Reset the demand dial information */
-       ppp->ddinfo.ip_sjiffies  =
-       ppp->ddinfo.ip_rjiffies  =
-       ppp->ddinfo.nip_sjiffies =
-       ppp->ddinfo.nip_rjiffies = jiffies;
-}
+       ppp->recv_async_map    = 0xffffffff;
 
-/*
- * Routine to allocate a buffer for later use by the driver.
- */
+       ppp->tpkt = NULL;
+       ppp->tfcs = PPP_INITFCS;
+       ppp->optr = ppp->obuf;
+       ppp->olim = ppp->obuf;
 
-static struct ppp_buffer *
-ppp_alloc_buf (int size, int type)
-{
-       struct ppp_buffer *buf;
+       ppp->rpkt = NULL;
+       ppp->rfcs = PPP_INITFCS;
 
-       buf = (struct ppp_buffer *) kmalloc (size + sizeof (struct ppp_buffer),
-                                            GFP_ATOMIC);
+       ppp->tty  = NULL;
+       ppp->backup_tty = NULL;
 
-       if (buf != NULL) {
-               buf->size   = size - 1; /* Mask for the buffer size */
-               buf->type   = type;
-               buf->locked = 0;
-               buf->count  = 0;
-               buf->head   = 0;
-               buf->tail   = 0;
-               buf->fcs    = PPP_INITFCS;
-       }
-       return (buf);
+       ppp->bytes_sent = 0;
+       ppp->bytes_rcvd = 0;
 }
 
 /*
- * Routine to release the allocated buffer.
+ * Clean up the async-specific parts of the ppp structure.
  */
-
 static void
-ppp_free_buf (struct ppp_buffer *ptr)
-{
-       if (ptr != NULL) {
-               kfree (ptr);
-       }
-}
-
-/*
- * Lock the indicated transmit buffer
- */
-
-extern inline int
-lock_buffer (register struct ppp_buffer *buf)
+ppp_async_release(struct ppp *ppp)
 {
-       register int state;
-       int flags;
-/*
- * Save the current state and if free then set it to the "busy" state
- */
-       save_flags (flags);
-       cli ();
-       state = buf->locked;
-       if (state == 0) {
-               buf->locked = 2;
-       }
-/*
- * Restore the flags and return the previous state. 0 implies success.
- */
-       restore_flags (flags);
-       return (state);
+       struct sk_buff *skb;
+
+       if ((skb = ppp->rpkt) != NULL)
+               KFREE_SKB(skb);
+       ppp->rpkt = NULL;
+       if ((skb = ppp->tpkt) != NULL)
+               KFREE_SKB(skb);
+       ppp->tpkt = NULL;
 }
 
 /*
- * MTU has been changed by the IP layer. Unfortunately we are not told
- * about this, but we spot it ourselves and fix things up. We could be
- * in an upcall from the tty driver, or in an ip packet queue.
+ * TTY callback.
+ *
+ * Called when the tty discipline is switched to PPP.
  */
 
 static int
-ppp_changedmtu (struct ppp *ppp, int new_mtu, int new_mru)
+ppp_tty_open (struct tty_struct *tty)
 {
-       struct device *dev;
-
-       struct ppp_buffer *new_rbuf;
-       struct ppp_buffer *new_wbuf;
-       struct ppp_buffer *new_cbuf;
-       struct ppp_buffer *new_tbuf;
-
-       struct ppp_buffer *old_rbuf;
-       struct ppp_buffer *old_wbuf;
-       struct ppp_buffer *old_cbuf;
-       struct ppp_buffer *old_tbuf;
+       struct ppp *ppp;
 
-       int mtu, mru;
-/*
- *  Allocate the buffer from the kernel for the data
- */
-       dev = ppp->dev;
-       mru = new_mru;
-       mtu = (new_mtu * 2) + 20;
+       /*
+        * Allocate a ppp structure to use.
+        */
+       tty->disc_data = NULL;
+       ppp = ppp_find(current->pid);
+       if (ppp != NULL) {
+               /*
+                * If we are taking over a ppp unit which is currently
+                * connected to a loopback pty, there's not much to do.
+                */
+               CHECK_PPP(-EINVAL);
 
-       /* RFC 1331, section 7.2 says the minimum value is 1500 bytes */
-       if (mru < PPP_MRU) {
-               mru = PPP_MRU;
-       }
-       mru += 10;
+       } else {
+               ppp = ppp_alloc();
+               if (ppp == NULL) {
+                       printk(KERN_ERR "ppp_alloc failed\n");
+                       return -ENFILE;
+               }
 
-       PRINTKN (2, (KERN_INFO "ppp: channel %s mtu = %d, mru = %d\n",
-                    dev->name, new_mtu, new_mru));
+               /*
+                * Initialize the control block
+                */
+               ppp_generic_init(ppp);
+               ppp_async_init(ppp);
 
-       new_wbuf = ppp_alloc_buf (mtu + 4, BUFFER_TYPE_DEV_WR);
-       new_tbuf = ppp_alloc_buf ((PPP_MTU * 2) + 24, BUFFER_TYPE_TTY_WR);
-       new_rbuf = ppp_alloc_buf (mru + 84, BUFFER_TYPE_DEV_RD);
-       new_cbuf = ppp_alloc_buf (mru + 4, BUFFER_TYPE_VJ);
-/*
- *  If the buffers failed to allocate then complain and release the partial
- *  allocations.
- */
-       if (new_wbuf == NULL || new_tbuf == NULL ||
-           new_rbuf == NULL || new_cbuf == NULL) {
-               PRINTKN (2,(KERN_ERR "ppp: failed to allocate new buffers\n"));
-               ppp_free_buf (new_wbuf);
-               ppp_free_buf (new_tbuf);
-               ppp_free_buf (new_rbuf);
-               ppp_free_buf (new_cbuf);
-               return 0;
+               MOD_INC_USE_COUNT;
        }
-/*
- *  Update the pointers to the new buffer structures.
- */
-       cli ();
-       old_wbuf = ppp->wbuf;
-       old_rbuf = ppp->rbuf;
-       old_cbuf = ppp->cbuf;
-       old_tbuf = ppp->tbuf;
-
-       ppp->wbuf = new_wbuf;
-       ppp->rbuf = new_rbuf;
-       ppp->cbuf = new_cbuf;
-       ppp->tbuf = new_tbuf;
-
-       ppp->rbuf->size -= 80;  /* reserve space for vj header expansion */
-
-       dev->mem_start  = (unsigned long) buf_base (new_wbuf);
-       dev->mem_end    = (unsigned long) (dev->mem_start + mtu);
-       dev->rmem_start = (unsigned long) buf_base (new_rbuf);
-       dev->rmem_end   = (unsigned long) (dev->rmem_start + mru);
-/*
- *  Update the parameters for the new buffer sizes
- */
-       ppp->toss = 0xE0;       /* To ignore characters until new FLAG */
-       ppp->escape = 0;        /* No pending escape character */
 
-       dev->mtu   =
-       ppp->mtu   = new_mtu;
-       ppp->mru   = new_mru;
-
-       ppp->s1buf = NULL;
-       ppp->s2buf = NULL;
-       ppp->xbuf  = NULL;
+       tty->disc_data = ppp;
+       ppp->tty       = tty;
 
-       ppp->tty->flags &= ~TTY_DO_WRITE_WAKEUP;
-       ppp->flags      &= ~SC_XMIT_BUSY;
+       /*
+        * Flush any pending characters in the driver
+        */
+       if (tty->driver.flush_buffer)
+               tty->driver.flush_buffer (tty);
 
-       sti ();
-/*
- *  Release old buffer pointers
- */
-       ppp_free_buf (old_rbuf);
-       ppp_free_buf (old_wbuf);
-       ppp_free_buf (old_cbuf);
-       ppp_free_buf (old_tbuf);
-       return 1;
+       return ppp->line;
 }
 
 /*
- * Called to release all of the information in the current PPP structure.
+ * TTY callback.
  *
- * It is called when the ppp device goes down or if it is unable to go
- * up.
+ * Called when the line discipline is changed to something
+ * else, the tty is closed, or the tty detects a hangup.
  */
 
 static void
-ppp_release (struct ppp *ppp)
+ppp_tty_close (struct tty_struct *tty)
 {
-       if (ppp->tty != NULL && ppp->tty->disc_data == ppp) {
-               ppp->tty->disc_data = NULL;     /* Break the tty->ppp link */
-       }
-       if (ppp->dev) {
-               ppp->dev->flags &= ~IFF_UP;     /* down the device */
-               ppp->dev->flags |= IFF_POINTOPOINT;
-       }
-       ppp_free_buf (ppp->rbuf);
-       ppp_free_buf (ppp->wbuf);
-       ppp_free_buf (ppp->cbuf);
-       ppp_free_buf (ppp->ubuf);
-       ppp_free_buf (ppp->tbuf);
-
-       ppp->rbuf  =
-       ppp->wbuf  =
-       ppp->cbuf  =
-       ppp->tbuf  =
-       ppp->xbuf  =
-       ppp->s1buf =
-       ppp->s2buf =
-       ppp->ubuf  = NULL;
+       struct ppp *ppp = tty2ppp(tty);
 
-       if (ppp->slcomp) {
-               slhc_free (ppp->slcomp);
-               ppp->slcomp = NULL;
+       if (ppp == NULL)
+               return;
+       tty->disc_data = NULL;
+       if (ppp->magic != PPP_MAGIC) {
+               printk(KERN_WARNING "ppp_tty_close: bogus\n");
+               return;
+       }
+       if (!ppp->inuse) {
+               printk(KERN_WARNING "ppp_tty_close: not inuse\n");
+               ppp->tty = ppp->backup_tty = 0;
+               return;
+       }
+       if (tty == ppp->backup_tty)
+               ppp->backup_tty = 0;
+       if (tty != ppp->tty)
+               return;
+       if (ppp->backup_tty) {
+               ppp->tty = ppp->backup_tty;
+               if (ppp_tty_push(ppp))
+                       ppp_output_wakeup(ppp);
+               wake_up_interruptible(&ppp->read_wait);
+       } else {
+               ppp->tty = 0;
+               ppp->sc_xfer = 0;
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO "ppp: channel %s closing.\n",
+                              ppp2dev(ppp)->name);
+
+               ppp_async_release(ppp);
+               ppp_release(ppp);
+               MOD_DEC_USE_COUNT;
        }
-       ppp->inuse = 0;
-       ppp->tty = NULL;
 }
 
 /*
- * Device callback.
- *
- * Called when the PPP device goes down in response to an ifconfig request.
+ * Read a PPP frame from the rcv_q list,
+ * waiting if necessary
  */
-
-static void
-ppp_tty_close (struct tty_struct *tty)
+static rw_ret_t
+ppp_tty_read(struct tty_struct *tty, struct file *file, __u8 * buf,
+            rw_count_t nr)
 {
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
+       struct ppp *ppp = tty2ppp (tty);
+       struct sk_buff *skb;
+       rw_ret_t len, err;
+
+       /*
+        * Validate the pointers
+        */
+       if (!ppp)
+               return -EIO;
+       CHECK_PPP(-ENXIO);
+
+       /*
+        * Before we attempt to write the frame to the user, ensure that the
+        * user has access to the pages for the total buffer length.
+        */
+       err = verify_area(VERIFY_WRITE, buf, nr);
+       if (err != 0)
+               return (err);
+
+       /*
+        * Wait for a frame to arrive if necessary.
+        * We increment the module use count so that the module
+        * can't go away while we're sleeping.
+        */
+       MOD_INC_USE_COUNT;
+       skb = NULL;
+       for (;;) {
+               ppp = tty2ppp(tty);
+               err = 0;
+               if (!ppp || ppp->magic != PPP_MAGIC || !ppp->inuse
+                   || tty != ppp->tty)
+                       break;
 
-       if (ppp == NULL || ppp->magic != PPP_MAGIC) {
-               PRINTKN (1,
-                    (KERN_WARNING "ppp: trying to close unopened tty!\n"));
-       } else {
-               CHECK_PPP_VOID ();
-               PRINTKN (2,
-                 (KERN_INFO "ppp: channel %s closing.\n", ppp->dev->name));
-               ppp_release (ppp);
+               skb = skb_dequeue(&ppp->rcv_q);
+               if (skb != 0)
+                       break;
+
+               /*
+                * If no frame is available, return -EAGAIN or wait.
+                */
+               err = -EAGAIN;
+               if (file->f_flags & O_NONBLOCK)
+                       break;
+
+               interruptible_sleep_on(&ppp->read_wait);
+               err = -EINTR;
+               if (signal_pending(current))
+                       break;
        }
+       MOD_DEC_USE_COUNT;
+       if (skb == 0)
+               return err;
+
+       /*
+        * Ensure that the frame will fit within the caller's buffer.
+        * If not, just discard the frame.
+        */
+       len = skb->len;
+       if (len > nr) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_DEBUG
+                              "ppp: read of %lu bytes too small for %ld "
+                              "frame\n", (unsigned long) nr, (long) len);
+               ppp->stats.ppp_ierrors++;
+               err = -EOVERFLOW;
+               goto out;
+       }
+
+       /*
+        * Copy the received data from the buffer to the caller's area.
+        */
+       err = len;
+       if (COPY_TO_USER(buf, skb->data, len))
+               err = -EFAULT;
+
+out:
+       KFREE_SKB(skb);
+       return err;
 }
 
 /*
- * TTY callback.
- *
- * Called when the tty dicipline is switched to PPP.
+ * Writing to a tty in ppp line discipline sends a PPP frame.
+ * Used by pppd to send control packets (LCP, etc.).
  */
-
-static int
-ppp_tty_open (struct tty_struct *tty)
+static rw_ret_t
+ppp_tty_write(struct tty_struct *tty, struct file *file, const __u8 * data,
+             rw_count_t count)
 {
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
-/*
- * There should not be an existing table for this slot.
- */
-       if (ppp) {
-               PRINTKN (1, (KERN_ERR
-                     "ppp_tty_open: gack! tty already associated to %s!\n",
-                            ppp->magic == PPP_MAGIC ? ppp->dev->name
-                            : "unknown"));
-               return -EEXIST;
-       }
-/*
- * Allocate the structure from the system
- */
-       ppp = ppp_alloc ();
-       if (ppp == NULL) {
-               PRINTKN (1, (KERN_ERR
-                         "ppp_tty_open: couldn't allocate ppp channel\n"));
-               return -ENFILE;
-       }
-/*
- * Initialize the control block
- */
-       ppp_init_ctrl_blk (ppp);
-       ppp->tty       = tty;
-       tty->disc_data = ppp;
-/*
- * Flush any pending characters in the driver and dicipline.
- */
-       if (tty->ldisc.flush_buffer) {
-               tty->ldisc.flush_buffer (tty);
-       }
+       struct ppp *ppp = tty2ppp (tty);
+       __u8 *new_data;
+       struct sk_buff *skb;
+
+       /*
+        * Verify the pointers.
+        */
+       if (!ppp)
+               return -EIO;
 
-       if (tty->driver.flush_buffer) {
-               tty->driver.flush_buffer (tty);
-       }
-/*
- * Allocate space for the default VJ header compression slots (16)
- */
-       ppp->slcomp = slhc_init (16, 16);
-       if (ppp->slcomp == NULL) {
-               PRINTKN (1, (KERN_ERR
-                     "ppp_tty_open: no space for compression buffers!\n"));
-               ppp_release (ppp);
-               return -ENOMEM;
+       if (ppp->magic != PPP_MAGIC)
+               return -EIO;
+
+       CHECK_PPP(-ENXIO);
+
+       /*
+        * Ensure that the caller does not wish to send too much.
+        */
+       if (count > PPP_MTU + PPP_HDRLEN) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_WARNING
+                              "ppp_tty_write: truncating user packet "
+                              "from %lu to mtu %d\n", (unsigned long) count,
+                              PPP_MTU + PPP_HDRLEN);
+               count = PPP_MTU + PPP_HDRLEN;
        }
-/*
- * Allocate space for the MTU and MRU buffers
- */
-       if (ppp_changedmtu (ppp, ppp->dev->mtu, ppp->mru) == 0) {
-               ppp_release (ppp);
-               return -ENOMEM;
+
+       /*
+        * Allocate a buffer for the data and fetch it from the user space.
+        */
+       skb = alloc_skb(count, GFP_KERNEL);
+       if (skb == NULL) {
+               printk(KERN_ERR "ppp_tty_write: no memory\n");
+               return 0;
        }
-/*
- * Allocate space for a user level buffer
- */
-       ppp->ubuf = ppp_alloc_buf (RBUFSIZE, BUFFER_TYPE_TTY_RD);
-       if (ppp->ubuf == NULL) {
-               PRINTKN (1, (KERN_ERR
-                      "ppp_tty_open: no space for user receive buffer\n"));
-               ppp_release (ppp);
-               return -ENOMEM;
+       LIBERATE_SKB(skb);
+       new_data = skb_put(skb, count);
+
+       /*
+        * Retrieve the user's buffer
+        */
+       if (COPY_FROM_USER(new_data, data, count)) {
+               KFREE_SKB(skb);
+               return -EFAULT;
        }
 
-       PRINTKN (2, (KERN_INFO "ppp: channel %s open\n", ppp->dev->name));
-       return (ppp->line);
+       /*
+        * Send the frame
+        */
+       ppp_send_ctrl(ppp, skb);
+
+       return (rw_ret_t) count;
 }
 
 /*
- * Local function to send the next portion of the buffer.
- *
- * Called by the tty driver's tty_wakeup function should it be entered
- * because the partial buffer was transmitted.
- *
- * Called by kick_tty to send the initial portion of the buffer.
- *
- * Completion processing of the buffer transmission is handled here.
+ * Process the IOCTL call for the tty device.
+ * Only the ioctls that relate to using ppp on async serial lines
+ * are processed here; the rest are handled by ppp_ioctl.
  */
-
-static void
-ppp_tty_wakeup_code (struct ppp *ppp, struct tty_struct *tty,
-                    struct ppp_buffer *xbuf)
+static int
+ppp_tty_ioctl (struct tty_struct *tty, struct file * file,
+               unsigned int param2, unsigned long param3)
 {
-       register int count, actual;
-/*
- * Prevent re-entrancy by ensuring that this routine is called only once.
- */
-       cli ();
-       if (ppp->flags & SC_XMIT_BUSY) {
-               sti ();
-               return;
-       }
-       ppp->flags |= SC_XMIT_BUSY;
-       sti ();
-/*
- * Send the next block of data to the modem
- */
-       count = xbuf->count - xbuf->tail;
-       actual = tty->driver.write (tty, 0,
-                                   buf_base (xbuf) + xbuf->tail, count);
-/*
- * Terminate transmission of any block which may have an error.
- * This could occur should the carrier drop.
- */
-       if (actual < 0) {
-               ppp->p.ppp_oerrors++;
-               actual = count;
-       } else {
-               ppp->bytes_sent += actual;
-       }
-/*
- * If the buffer has been transmitted then clear the indicators.
- */
-       xbuf->tail += actual;
-       if (actual == count) {
-               xbuf = NULL;
-               ppp->flags &= ~SC_XMIT_BUSY;
-/*
- * Complete the transmisson on the current buffer.
- */
-               xbuf = ppp->xbuf;
-               if (xbuf != NULL) {
-                       tty->flags  &= ~TTY_DO_WRITE_WAKEUP;
-                       xbuf->locked = 0;
-                       ppp->xbuf    = NULL;
-/*
- * If the completed buffer came from the device write, then complete the
- * transmission block.
- */
-                       if (ppp->dev->flags & IFF_UP) {
-                               ppp->dev->tbusy = 0;
-                               mark_bh (NET_BH);
-                               dev_tint (ppp->dev);
-                       }
-/*
- * Wake up the transmission queue for all completion events.
- */
-                       wake_up_interruptible (&ppp->write_wait);
-/*
- * Look at the priorities. Choose a daemon write over the device driver.
- */
-                       xbuf = ppp->s1buf;
-                       ppp->s1buf = NULL;
-                       if (xbuf == NULL) {
-                               xbuf = ppp->s2buf;
-                               ppp->s2buf = NULL;
-                       }
-/*
- * If there is a pending buffer then transmit it now.
- */
-                       if (xbuf != NULL) {
-                               ppp->flags &= ~SC_XMIT_BUSY;
-                               ppp_kick_tty (ppp, xbuf);
-                       }
+       struct ppp *ppp = tty2ppp (tty);
+       register int temp_i = 0;
+       int error = -EFAULT;
+
+       /*
+        * Verify the status of the PPP device.
+        */
+       if (!ppp || ppp->magic != PPP_MAGIC || !ppp->inuse)
+               return -ENXIO;
+
+       /*
+        * The user must have an euid of root to do these requests.
+        */
+       if (!SUSER())
+               return -EPERM;
+
+       switch (param2) {
+       case PPPIOCGASYNCMAP:
+               /*
+                * Retrieve the transmit async map
+                */
+               if (PUT_USER(ppp->xmit_async_map[0], (int *) param3))
+                       break;
+               error = 0;
+               break;
+
+       case PPPIOCSASYNCMAP:
+               /*
+                * Set the transmit async map
+                */
+               if (GET_USER(temp_i, (int *) param3))
+                       break;
+               ppp->xmit_async_map[0] = temp_i;
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO
+                              "ppp_tty_ioctl: set xmit asyncmap %x\n",
+                              ppp->xmit_async_map[0]);
+               error = 0;
+               break;
+
+       case PPPIOCSRASYNCMAP:
+               /*
+                * Set the receive async map
+                */
+               if (GET_USER(temp_i, (int *) param3))
+                       break;
+               ppp->recv_async_map = temp_i;
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO
+                              "ppp_tty_ioctl: set rcv asyncmap %x\n",
+                              ppp->recv_async_map);
+               error = 0;
+               break;
+
+       case PPPIOCGXASYNCMAP:
+               /*
+                * Get the map of characters to be escaped on transmission.
+                */
+               if (COPY_TO_USER((void *) param3, ppp->xmit_async_map,
+                                sizeof (ppp->xmit_async_map)))
+                       break;
+               error = 0;
+               break;
+
+       case PPPIOCSXASYNCMAP:
+               /*
+                * Set the map of characters to be escaped on transmission.
+                */
+               {
+                       __u32 temp_tbl[8];
+
+                       if (COPY_FROM_USER(temp_tbl, (void *) param3,
+                                          sizeof (temp_tbl)))
+                               break;
+
+                       temp_tbl[1]  =  0x00000000;
+                       temp_tbl[2] &= ~0x40000000;
+                       temp_tbl[3] |=  0x60000000;
+
+                       memcpy(ppp->xmit_async_map, temp_tbl,
+                              sizeof (ppp->xmit_async_map));
+
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_INFO
+                                      "ppp_tty_ioctl: set xasyncmap\n");
+                       error = 0;
+               }
+               break;
+
+       case PPPIOCXFERUNIT:
+               /*
+                * Set up this PPP unit to be used next time this
+                * process sets a tty to PPP line discipline.
+                */
+               ppp->backup_tty = tty;
+               ppp->sc_xfer = current->pid;
+               error = 0;
+               break;
+
+       case TCGETS:
+       case TCGETA:
+               /*
+                * Allow users to read, but not set, the serial port parameters
+                */
+               error = n_tty_ioctl (tty, file, param2, param3);
+               break;
+
+       case TCFLSH:
+               /*
+                * Flush our buffers, then call the generic code to
+                * flush the serial port's buffer.
+                */
+               if (param3 == TCIFLUSH || param3 == TCIOFLUSH) {
+                       struct sk_buff *skb;
+                       while ((skb = skb_dequeue(&ppp->rcv_q)) != NULL)
+                               KFREE_SKB(skb);
+               }
+               if (param3 == TCIOFLUSH || param3 == TCOFLUSH)
+                       ppp_tty_flush_output(ppp);
+               error = n_tty_ioctl (tty, file, param2, param3);
+               break;
+
+       case FIONREAD:
+               /*
+                * Returns how many bytes are available for a read().
+                */
+               {
+                       unsigned long flags;
+                       struct sk_buff *skb;
+                       int count = 0;
+
+                       save_flags(flags);
+                       cli();
+                       skb = skb_peek(&ppp->rcv_q);
+                       if (skb != 0)
+                               count = skb->len;
+                       restore_flags(flags);
+                       if (PUT_USER(count, (int *) param3))
+                               break;
+                       error = 0;
                }
+               break;
+
+       default:
+               /*
+                *  All other ioctl() events will come here.
+                */
+               error = ppp_ioctl(ppp, param2, param3);
+               break;
        }
+       return error;
+}
+
 /*
- * Clear the re-entry flag
+ * TTY callback.
+ *
+ * Process the select() or poll() statement for the PPP device.
  */
-       ppp->flags &= ~SC_XMIT_BUSY;
+
+#if LINUX_VERSION_CODE < VERSION(2,1,23)
+static int
+ppp_tty_select(struct tty_struct *tty, struct inode *inode,
+              struct file *filp, int sel_type, select_table * wait)
+{
+       struct ppp *ppp = tty2ppp(tty);
+       int result = 1;
+
+       /*
+        * Verify the status of the PPP device.
+        */
+       if (!ppp || tty != ppp->tty)
+               return -EBADF;
+
+       CHECK_PPP(-EBADF);
+
+       switch (sel_type) {
+       case SEL_IN:
+               /* The fd is readable if the receive queue isn't empty. */
+               if (skb_peek(&ppp->rcv_q) != NULL)
+                       break;
+               /* fall through */
+       case SEL_EX:
+               /* Check for exceptions or read errors. */
+               /* Is this a pty link and the remote disconnected? */
+               if (tty->flags & (1 << TTY_OTHER_CLOSED))
+                       break;
+
+               /* Is this a local link and the modem disconnected? */
+               if (tty_hung_up_p (filp))
+                       break;
+
+               select_wait(&ppp->read_wait, wait);
+               result = 0;
+               break;
+
+       case SEL_OUT:
+               /* The fd is always writable. */
+               break;
+       }
+       return result;
+}
+
+#else  /* 2.1.23 or later */
+
+static unsigned int
+ppp_tty_poll(struct tty_struct *tty, struct file *filp, poll_table * wait)
+{
+       struct ppp *ppp = tty2ppp(tty);
+       unsigned int mask = 0;
+
+       if (ppp && ppp->magic == PPP_MAGIC && tty == ppp->tty) {
+               CHECK_PPP(0);
+
+               poll_wait(filp, &ppp->read_wait, wait);
+
+               if (skb_peek(&ppp->rcv_q) != NULL)
+                       mask |= POLLIN | POLLRDNORM;
+               if (tty->flags & (1 << TTY_OTHER_CLOSED)
+                   || tty_hung_up_p(filp))
+                       mask |= POLLHUP;
+               mask |= POLLOUT | POLLWRNORM;
+       }
+       return mask;
 }
+#endif /* >= 2.1.23 */
 
 /*
  * This function is called by the tty driver when the transmit buffer has
  * additional space. It is used by the ppp code to continue to transmit
  * the current buffer should the buffer have been partially sent.
- *
- * In addition, it is used to send the first part of the buffer since the
- * logic and the inter-locking would be identical.
  */
-
 static void
 ppp_tty_wakeup (struct tty_struct *tty)
 {
-       struct ppp_buffer *xbuf;
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
+       struct ppp *ppp = tty2ppp (tty);
 
-       if (!ppp || ppp->magic != PPP_MAGIC) {
-               PRINTKN (1, (KERN_ERR "PPP: write_wakeup called but couldn't "
-                            "find PPP struct.\n"));
+       tty->flags &= ~(1 << TTY_DO_WRITE_WAKEUP);
+       if (!ppp)
                return;
-       }
+       CHECK_PPP_VOID();
+       if (tty != ppp->tty)
+               return;
+
+       if (ppp_tty_push(ppp))
+               ppp_output_wakeup(ppp);
+}
+
 /*
- * Ensure that there is a transmission pending. Clear the re-entry flag if
- * there is no pending buffer. Otherwise, send the buffer.
+ * Send a packet to the peer over a synchronous tty line.
+ * All encoding and FCS are handled by hardware.
+ * Addr/Ctrl and Protocol field compression implemented.
+ * Returns -1 iff the packet could not be accepted at present,
+ * 0 if the packet was accepted but we can't accept another yet, or
+ * 1 if we can accept another packet immediately.
+ * If this procedure returns 0, ppp_output_wakeup will be called
+ * exactly once.
  */
-       xbuf = ppp->xbuf;
-       if (xbuf == NULL) {
-               tty->flags &= ~(1 << TTY_DO_WRITE_WAKEUP);
-       } else {
-               ppp_tty_wakeup_code (ppp, tty, xbuf);
-       }
+static int
+ppp_sync_send(struct ppp *ppp, struct sk_buff *skb)
+{
+       unsigned char *data;
+       int islcp;
+       
+       CHECK_PPP(0);
+
+       if (ppp->tpkt != NULL)
+               return -1;
+       ppp->tpkt = skb;
+
+       data = ppp->tpkt->data;
+       
+       /*
+        * LCP packets with code values between 1 (configure-reqest)
+        * and 7 (code-reject) must be sent as though no options
+        * had been negotiated.
+        */
+       islcp = PPP_PROTOCOL(data) == PPP_LCP
+               && 1 <= data[PPP_HDRLEN] && data[PPP_HDRLEN] <= 7;
+
+       /* only reset idle time for data packets */
+       if (PPP_PROTOCOL(data) < 0x8000)
+               ppp->last_xmit = jiffies;
+       ++ppp->stats.ppp_opackets;
+       ppp->stats.ppp_ooctects += ppp->tpkt->len;
+
+       if ( !(data[2]) && (ppp->flags & SC_COMP_PROT) ) {
+               /* compress protocol field */
+               data[2] = data[1];
+               data[1] = data[0];
+               skb_pull(ppp->tpkt,1);
+               data = ppp->tpkt->data;
+       }
+       
+       /*
+        * Do address/control compression
+        */
+       if ((ppp->flags & SC_COMP_AC) && !islcp
+           && PPP_ADDRESS(data) == PPP_ALLSTATIONS
+           && PPP_CONTROL(data) == PPP_UI) {
+               /* strip addr and control field */
+               skb_pull(ppp->tpkt,2);
+       }
+
+       return ppp_tty_sync_push(ppp);
 }
 
 /*
- * This function is called to transmit a buffer to the rmeote. The buffer
- * is placed on the pending queue if there is presently a buffer being
- * sent or it is transmitted with the aid of ppp_tty_wakeup.
+ * Push a synchronous frame out to the tty.
+ * Returns 1 if frame accepted (or discarded), 0 otherwise.
  */
-
-static void
-ppp_kick_tty (struct ppp *ppp, struct ppp_buffer *xbuf)
+static int
+ppp_tty_sync_push(struct ppp *ppp)
 {
-       register int flags;
+       int sent;
+       struct tty_struct *tty = ppp2tty(ppp);
+       unsigned long flags;
+               
+       CHECK_PPP(0);
+
+       if (ppp->tpkt == NULL)
+               return 0;
+               
+       /* prevent reentrancy with tty_pushing flag */          
+       save_flags(flags);
+       cli();
+       if (ppp->tty_pushing) {
+               /* record wakeup attempt so we don't lose */
+               /* a wakeup call while doing push processing */
+               ppp->woke_up=1;
+               restore_flags(flags);
+               return 0;
+       }
+       ppp->tty_pushing = 1;
+       restore_flags(flags);
+       
+       if (tty == NULL || tty->disc_data != (void *) ppp)
+               goto flush;
+               
+       for(;;){
+               ppp->woke_up=0;
+               
+               /* Note: Sync driver accepts complete frame or nothing */
+               tty->flags |= (1 << TTY_DO_WRITE_WAKEUP);
+               sent = tty->driver.write(tty, 0, ppp->tpkt->data, ppp->tpkt->len);
+               if (sent < 0) {
+                       /* write error (possible loss of CD) */
+                       /* record error and discard current packet */
+                       ppp->stats.ppp_oerrors++;
+                       break;
+               }
+               ppp->stats.ppp_obytes += sent;
+               if (sent < ppp->tpkt->len) {
+                       /* driver unable to accept frame just yet */
+                       save_flags(flags);
+                       cli();
+                       if (ppp->woke_up) {
+                               /* wake up called while processing */
+                               /* try to send the frame again */
+                               restore_flags(flags);
+                               continue;
+                       }
+                       /* wait for wakeup callback to try send again */
+                       ppp->tty_pushing = 0;
+                       restore_flags(flags);
+                       return 0;
+               }
+               break;
+       }
+flush: 
+       /* done with current packet (sent or discarded) */
+       KFREE_SKB(ppp->tpkt);
+       ppp->tpkt = 0;
+       ppp->tty_pushing = 0;
+       return 1;
+}
+
 /*
- * Hold interrupts.
+ * Send a packet to the peer over an async tty line.
+ * Returns -1 iff the packet could not be accepted at present,
+ * 0 if the packet was accepted but we can't accept another yet, or
+ * 1 if we can accept another packet immediately.
+ * If this procedure returns 0, ppp_output_wakeup will be called
+ * exactly once.
  */
-       save_flags (flags);
-       cli ();
+static int
+ppp_async_send(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+
+       ppp_tty_push(ppp);
+
+       if (ppp->tpkt != NULL)
+               return -1;
+       ppp->tpkt = skb;
+       ppp->tpkt_pos = 0;
+
+       return ppp_tty_push(ppp);
+}
+
 /*
- * Control the flags which are best performed with the interrupts masked.
+ * Push as much data as possible out to the tty.
+ * Returns 1 if we finished encoding the current frame, 0 otherwise.
  */
-       xbuf->locked     = 1;
-       xbuf->tail       = 0;
+static int
+ppp_tty_push(struct ppp *ppp)
+{
+       int avail, sent, done = 0;
+       struct tty_struct *tty = ppp2tty(ppp);
+       
+       if (ppp->flags & SC_SYNC) 
+               return ppp_tty_sync_push(ppp);
+
+       CHECK_PPP(0);
+       if (ppp->tty_pushing) {
+               ppp->woke_up = 1;
+               return 0;
+       }
+       if (tty == NULL || tty->disc_data != (void *) ppp)
+               goto flush;
+       while (ppp->optr < ppp->olim || ppp->tpkt != 0) {
+               ppp->tty_pushing = 1;
+               mb();
+               ppp->woke_up = 0;
+               avail = ppp->olim - ppp->optr;
+               if (avail > 0) {
+                       tty->flags |= (1 << TTY_DO_WRITE_WAKEUP);
+                       sent = tty->driver.write(tty, 0, ppp->optr, avail);
+                       if (sent < 0)
+                               goto flush;     /* error, e.g. loss of CD */
+                       ppp->stats.ppp_obytes += sent;
+                       ppp->optr += sent;
+                       if (sent < avail) {
+                               wmb();
+                               ppp->tty_pushing = 0;
+                               mb();
+                               if (ppp->woke_up)
+                                       continue;
+                               return done;
+                       }
+               }
+               if (ppp->tpkt != 0)
+                       done = ppp_async_encode(ppp);
+               wmb();
+               ppp->tty_pushing = 0;
+       }
+       return done;
+
+flush:
+       ppp->tty_pushing = 1;
+       mb();
+       ppp->stats.ppp_oerrors++;
+       if (ppp->tpkt != 0) {
+               KFREE_SKB(ppp->tpkt);
+               ppp->tpkt = 0;
+               done = 1;
+       }
+       ppp->optr = ppp->olim;
+       wmb();
+       ppp->tty_pushing = 0;
+       return done;
+}
+
 /*
- * If the transmitter is busy then place the buffer on the appropriate
- * priority queue.
+ * Procedure to encode the data for async serial transmission.
+ * Does octet stuffing (escaping) and address/control
+ * and protocol compression.
+ * Assumes ppp->opkt != 0 on entry.
+ * Returns 1 if we finished the current frame, 0 otherwise.
  */
-       if (ppp->xbuf != NULL) {
-               if (xbuf->type == BUFFER_TYPE_TTY_WR) {
-                       ppp->s1buf = xbuf;
-               } else {
-                       ppp->s2buf = xbuf;
+static int
+ppp_async_encode(struct ppp *ppp)
+{
+       int fcs, i, count, c;
+       unsigned char *buf, *buflim;
+       unsigned char *data;
+       int islcp;
+
+       CHECK_PPP(0);
+
+       buf = ppp->obuf;
+       ppp->olim = buf;
+       ppp->optr = buf;
+       i = ppp->tpkt_pos;
+       data = ppp->tpkt->data;
+       count = ppp->tpkt->len;
+       fcs = ppp->tfcs;
+
+       /*
+        * LCP packets with code values between 1 (configure-reqest)
+        * and 7 (code-reject) must be sent as though no options
+        * had been negotiated.
+        */
+       islcp = PPP_PROTOCOL(data) == PPP_LCP
+               && 1 <= data[PPP_HDRLEN] && data[PPP_HDRLEN] <= 7;
+
+       if (i == 0) {
+               /*
+                * Start of a new packet - insert the leading FLAG
+                * character if necessary.
+                */
+               if (islcp || flag_time == 0
+                   || jiffies - ppp->last_xmit >= flag_time)
+                       *buf++ = PPP_FLAG;
+               /* only reset idle time for data packets */
+               if (PPP_PROTOCOL(data) < 0x8000)
+                       ppp->last_xmit = jiffies;
+               fcs = PPP_INITFCS;
+               ++ppp->stats.ppp_opackets;
+               ppp->stats.ppp_ooctects += count;
+
+               /*
+                * Do address/control compression
+                */
+               if ((ppp->flags & SC_COMP_AC) != 0 && !islcp
+                   && PPP_ADDRESS(data) == PPP_ALLSTATIONS
+                   && PPP_CONTROL(data) == PPP_UI)
+                       i += 2;
+       }
+
+       /*
+        * Once we put in the last byte, we need to put in the FCS
+        * and closing flag, so make sure there is at least 7 bytes
+        * of free space in the output buffer.
+        */
+       buflim = buf + OBUFSIZE - 6;
+       while (i < count && buf < buflim) {
+               c = data[i++];
+               if (i == 3 && c == 0 && (ppp->flags & SC_COMP_PROT))
+                       continue;       /* compress protocol field */
+               fcs = PPP_FCS(fcs, c);
+               if (in_xmap(ppp, c) || (islcp && c < 0x20)) {
+                       *buf++ = PPP_ESCAPE;
+                       c ^= 0x20;
                }
-               restore_flags (flags);
-               return;
+               *buf++ = c;
        }
-/*
- * If the transmitter is not busy then this is the highest priority frame
- */
-       ppp->flags      &= ~SC_XMIT_BUSY;
-       ppp->tty->flags |= (1 << TTY_DO_WRITE_WAKEUP);
-       ppp->xbuf        = xbuf;
-       restore_flags (flags);
-/*
- * Do the "tty wakeup_code" to actually send this buffer.
- */
-       ppp_tty_wakeup_code (ppp, ppp->tty, xbuf);
-}
 
-/*************************************************************
- * TTY INPUT
- *    The following functions handle input that arrives from
- *    the TTY. It recognizes PPP frames and either hands them
- *    to the network layer or queues them for delivery to a
- *    user process reading this TTY.
- *************************************************************/
+       if (i == count) {
+               /*
+                * We have finished the packet.  Add the FCS and flag.
+                */
+               fcs = ~fcs;
+               c = fcs & 0xff;
+               if (in_xmap(ppp, c) || (islcp && c < 0x20)) {
+                       *buf++ = PPP_ESCAPE;
+                       c ^= 0x20;
+               }
+               *buf++ = c;
+               c = (fcs >> 8) & 0xff;
+               if (in_xmap(ppp, c) || (islcp && c < 0x20)) {
+                       *buf++ = PPP_ESCAPE;
+                       c ^= 0x20;
+               }
+               *buf++ = c;
+               *buf++ = PPP_FLAG;
+               ppp->olim = buf;
 
-#ifdef CHECK_CHARACTERS
-static unsigned paritytab[8] =
+               KFREE_SKB(ppp->tpkt);
+               ppp->tpkt = 0;
+               return 1;
+       }
+
+       /*
+        * Remember where we are up to in this packet.
+        */
+       ppp->olim = buf;
+       ppp->tpkt_pos = i;
+       ppp->tfcs = fcs;
+       return 0;
+}
+
+/*
+ * Flush output from our internal buffers.
+ * Called for the TCFLSH ioctl.
+ */
+static void
+ppp_tty_flush_output(struct ppp *ppp)
 {
-       0x96696996, 0x69969669, 0x69969669, 0x96696996,
-       0x69969669, 0x96696996, 0x96696996, 0x69969669
-};
-#endif
+       struct sk_buff *skb;
+       int done = 0;
+
+       while ((skb = skb_dequeue(&ppp->xmt_q)) != NULL)
+               KFREE_SKB(skb);
+       ppp->tty_pushing = 1;
+       mb();
+       ppp->optr = ppp->olim;
+       if (ppp->tpkt != NULL) {
+               KFREE_SKB(ppp->tpkt);
+               ppp->tpkt = 0;
+               done = 1;
+       }
+       wmb();
+       ppp->tty_pushing = 0;
+       if (done)
+               ppp_output_wakeup(ppp);
+}
 
 /*
  * Callback function from tty driver. Return the amount of space left
  * in the receiver's buffer to decide if remote transmitter is to be
  * throttled.
  */
-
 static int
 ppp_tty_room (struct tty_struct *tty)
 {
@@ -872,1014 +1342,362 @@ ppp_tty_room (struct tty_struct *tty)
 /*
  * Callback function when data is available at the tty driver.
  */
-
 static void
-ppp_tty_receive (struct tty_struct *tty, u_char * data, char *flags, int count)
+ppp_tty_receive (struct tty_struct *tty, const __u8 * data,
+                char *flags, int count)
 {
-       register struct ppp *ppp = (struct ppp *) tty->disc_data;
-       register struct ppp_buffer *buf = ppp->rbuf;
-       u_char chr;
-/*
- * Verify the table pointer and ensure that the line is still in PPP dicipline.
- */
-       if (!ppp || ppp->magic != PPP_MAGIC) {
-               PRINTKN (1, ("PPP: handler called but couldn't find "
-                            "PPP struct.\n"));
+       register struct ppp *ppp = tty2ppp (tty);
+       struct sk_buff *skb;
+       int chr, flg;
+       unsigned char *p;
+
+       if (ppp != 0)
+               CHECK_PPP_VOID();
+       /*
+        * This can happen if stuff comes in on the backup tty.
+        */
+       if (ppp == 0 || tty != ppp->tty)
+               return;
+       /*
+        * Verify the table pointer and ensure that the line is
+        * still in PPP discipline.
+        */
+       if (ppp->magic != PPP_MAGIC) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_DEBUG
+                              "PPP: tty_receive called but couldn't find "
+                              "PPP struct.\n");
                return;
        }
-       CHECK_PPP_VOID ();
-/*
- * Print the buffer if desired
- */
-       if (ppp_debug >= 5) {
-               ppp_print_buffer ("receive buffer", data, count, KERNEL_DS);
+       /*
+        * Print the buffer if desired
+        */
+       if (ppp->flags & SC_LOG_RAWIN)
+               ppp_print_buffer ("receive buffer", data, count);
+
+       ppp->stats.ppp_ibytes += count;
+       skb = ppp->rpkt;
+       
+       if ( ppp->flags & SC_SYNC ) {
+               /* synchronous mode */
+               
+               if (ppp->toss==0xE0) {
+                       /* this is the 1st frame, reset vj comp */
+                       ppp_receive_error(ppp);
+                       ppp->toss = 0;
+               }
+               
+               /*
+                * Allocate an skbuff for frame.
+                * The 128 is room for VJ header expansion.
+                */
+               
+               if (skb == NULL)
+                       skb = dev_alloc_skb(ppp->mru + 128 + PPP_HDRLEN);
+                       
+               if (skb == NULL) {
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "couldn't "
+                                      "alloc skb for recv\n");
+               } else {
+                       LIBERATE_SKB(skb);
+                       /*
+                        * Decompress A/C and protocol compression here.
+                        */
+                       p = skb_put(skb, 2);
+                       p[0] = PPP_ALLSTATIONS;
+                       p[1] = PPP_UI;
+                       if (*data == PPP_ALLSTATIONS) {
+                               data += 2;
+                               count -= 2;
+                       }
+                       if ((*data & 1) != 0) {
+                               p = skb_put(skb, 1);
+                               p[0] = 0;
+                       }
+
+                       /* copy frame to socket buffer */
+                       p = skb_put(skb, count);
+                       memcpy(p,data,count);
+                       
+                       /*
+                        * Check if we've overflowed the MRU
+                        */
+                       if (skb->len >= ppp->mru + PPP_HDRLEN + 2
+                           || skb_tailroom(skb) <= 0) {
+                               ++ppp->estats.rx_length_errors;
+                               if (ppp->flags & SC_DEBUG)
+                                       printk(KERN_DEBUG "rcv frame too long: "
+                                              "len=%d mru=%d hroom=%d troom=%d\n",
+                                              skb->len, ppp->mru, skb_headroom(skb),
+                                              skb_tailroom(skb));
+                       } else {
+                               if (!ppp_receive_frame(ppp, skb)) {
+                                       KFREE_SKB(skb);
+                                       ppp_receive_error(ppp);
+                               }
+                       }
+               
+                       /* Reset for the next frame */
+                       skb = NULL;
+               }
+               ppp->rpkt = skb;
+               return;
        }
-/*
- * Collect the character and error condition for the character. Set the toss
- * flag for the first character error.
- */
+       
        while (count-- > 0) {
-               ppp->bytes_rcvd++;
+               /*
+                * Collect the character and error condition for the character.
+                * Set the toss flag for the first character error.
+                */
                chr = *data++;
                if (flags) {
-                       if (*flags && ppp->toss == 0) {
-                               ppp->toss = *flags;
+                       flg = *flags++;
+                       if (flg) {
+                               if (ppp->toss == 0)
+                                       ppp->toss = flg;
+                               switch (flg) {
+                               case TTY_OVERRUN:
+                                       ++ppp->estats.rx_fifo_errors;
+                                       break;
+                               case TTY_FRAME:
+                               case TTY_BREAK:
+                                       ++ppp->estats.rx_frame_errors;
+                                       break;
+                               }
+                               continue;
                        }
-                       ++flags;
                }
-/*
- * Set the flags for 8 data bits and no parity.
- *
- * Actually, it sets the flags for d7 being 0/1 and parity being even/odd
- * so that the normal processing would have all flags set at the end of the
- * session. A missing flag bit would denote an error condition.
- */
+
+               /*
+                * Set the flags for d7 being 0/1 and parity being
+                * even/odd so that the normal processing would have
+                * all flags set at the end of the session.  A
+                * missing flag bit indicates an error condition.
+                */
+
 #ifdef CHECK_CHARACTERS
-               if (chr & 0x80) {
+               if (chr & 0x80)
                        ppp->flags |= SC_RCV_B7_1;
-               } else {
+               else
                        ppp->flags |= SC_RCV_B7_0;
-               }
 
-               if (paritytab[chr >> 5] & (1 << (chr & 0x1F))) {
+               if (paritytab[chr >> 5] & (1 << (chr & 0x1F)))
                        ppp->flags |= SC_RCV_ODDP;
-               } else {
+               else
                        ppp->flags |= SC_RCV_EVNP;
-               }
 #endif
-/*
- * Branch on the character. Process the escape character. The sequence ESC ESC
- * is defined to be ESC.
- */
-               switch (chr) {
-               case PPP_ESCAPE: /* PPP_ESCAPE: invert bit in next character */
-                       ppp->escape = PPP_TRANS;
-                       break;
-/*
- * FLAG. This is the end of the block. If the block terminated by ESC FLAG,
- * then the block is to be ignored. In addition, characters before the very
- * first FLAG are also tossed by this procedure.
- */
-               case PPP_FLAG:  /* PPP_FLAG: end of frame */
-                       ppp->p.ppp_ibytes = ppp->bytes_rcvd;
-                       if (ppp->escape) {
+
+               if (chr == PPP_FLAG) {
+                       /*
+                        * FLAG. This is the end of the block. If the block
+                        * ends with ESC FLAG, then the block is to be ignored.
+                        */
+                       if (ppp->escape)
                                ppp->toss |= 0x80;
+                       /*
+                        * Process the frame if it was received correctly.
+                        * If there was an error, let the VJ decompressor know.
+                        * There are 4 cases here:
+                        * skb != NULL, toss != 0: error in frame
+                        * skb != NULL, toss == 0: frame ok
+                        * skb == NULL, toss != 0: very first frame,
+                        *      error on 1st char, or alloc_skb failed
+                        * skb == NULL, toss == 0: empty frame (~~)
+                        */
+                       if (ppp->toss || !ppp_receive_frame(ppp, skb)) {
+                               if (ppp->toss && (ppp->flags & SC_DEBUG))
+                                       printk(KERN_DEBUG
+                                              "ppp: tossing frame (%x)\n",
+                                              ppp->toss);
+                               if (skb != NULL)
+                                       KFREE_SKB(skb);
+                               if (!(ppp->toss == 0xE0 || ppp->toss == 0x80))
+                                       ++ppp->stats.ppp_ierrors;
+                               ppp_receive_error(ppp);
                        }
-/*
- * Process frames which are not to be ignored. If the processing failed,
- * then clean up the VJ tables.
- */
-                       if ((ppp->toss & 0x80) != 0 ||
-                           ppp_doframe (ppp) == 0) {
-                               slhc_toss (ppp->slcomp);
-                       }
-/*
- * Reset all indicators for the new frame to follow.
- */
-                       buf->count  = 0;
-                       buf->fcs    = PPP_INITFCS;
+                       /*
+                        * Reset for the next frame.
+                        */
+                       skb = NULL;
+                       ppp->rfcs = PPP_INITFCS;
                        ppp->escape = 0;
-                       ppp->toss   = 0;
-                       break;
-/*
- * All other characters in the data come here. If the character is in the
- * recieve mask then ignore the character.
- */
-               default:
-                       if (in_rmap (ppp, chr)) {
-                               break;
-                       }
-/*
- * Adjust the character and if the frame is to be discarded then simply
- * ignore the character until the ending FLAG is received.
- */
-                       chr ^= ppp->escape;
+                       ppp->toss = 0;
+                       continue;
+               }
+
+               /* If we're tossing, look no further. */
+               if (ppp->toss != 0)
+                       continue;
+
+               /* If this is a control char to be ignored, do so */
+               if (in_rmap(ppp, chr))
+                       continue;
+
+               /*
+                * Modify the next character if preceded by escape.
+                * The escape character (0x7d) could be an escaped
+                * 0x5d, if it follows an escape :-)
+                */
+               if (ppp->escape) {
+                       chr ^= PPP_TRANS;
                        ppp->escape = 0;
+               } else if (chr == PPP_ESCAPE) {
+                       ppp->escape = PPP_TRANS;
+                       continue;
+               }
 
-                       if (ppp->toss != 0) {
-                               break;
+               /*
+                * Allocate an skbuff on the first character received.
+                * The 128 is room for VJ header expansion and FCS.
+                */
+               if (skb == NULL) {
+                       skb = dev_alloc_skb(ppp->mru + 128 + PPP_HDRLEN);
+                       if (skb == NULL) {
+                               if (ppp->flags & SC_DEBUG)
+                                       printk(KERN_DEBUG "couldn't "
+                                              "alloc skb for recv\n");
+                               ppp->toss = 1;
+                               continue;
                        }
-/*
- * If the count sent is within reason then store the character, bump the
- * count, and update the FCS for the character.
- */
-                       if (buf->count < buf->size) {
-                               buf_base (buf)[buf->count++] = chr;
-                               buf->fcs = PPP_FCS (buf->fcs, chr);
-                               break;
-                       }
-/*
- * The peer sent too much data. Set the flags to discard the current frame
- * and wait for the re-synchronization FLAG to be sent.
- */
-                       ppp->p.ppp_ierrors++;
-                       ppp->toss |= 0xC0;
-                       break;
+                       LIBERATE_SKB(skb);
                }
-       }
-}
 
-/* on entry, a received frame is in ppp->rbuf.bufr
-   check it and dispose as appropriate */
-
-static int
-ppp_doframe (struct ppp *ppp)
-{
-       u_short proto;
-       u_char *data = buf_base (ppp->rbuf);
-       int count    = ppp->rbuf->count;
-/*
- * If there is a pending error from the receiver then log it and discard
- * the damaged frame.
- */
-       if (ppp->toss) {
-               PRINTKN (1, (KERN_WARNING
-                            "ppp_toss: tossing frame, reason = %d\n",
-                            ppp->toss));
-               ppp->p.ppp_ierrors++;
-               return 0;
-       }
-/*
- * An empty frame is ignored. This occurs if the FLAG sequence precedes and
- * follows each frame.
- */
-       if (count == 0) {
-               return 1;
-       }
-/*
- * Print the received data.
- */
-       if (ppp_debug >= 3) {
-               ppp_print_buffer ("receive frame", data, count, KERNEL_DS);
-       }
-/*
- * Generate an error if the frame is too small.
- */
-       if (count < 4) {
-               PRINTKN (1, (KERN_WARNING
-                            "ppp: got runt ppp frame, %d chars\n", count));
-               ppp->p.ppp_ierrors++;
-               return 1;
-       }
-/*
- * Verify the CRC of the frame and discard the CRC characters from the
- * end of the buffer.
- */
-       if (ppp->rbuf->fcs != PPP_GOODFCS) {
-               PRINTKN (1, (KERN_WARNING
-                            "ppp: frame with bad fcs, excess = %x\n",
-                            ppp->rbuf->fcs ^ PPP_GOODFCS));
-               ppp->p.ppp_ierrors++;
-               return 0;
-       }
-       count -= 2;             /* ignore the fcs characters */
-/*
- * Ignore the leading ADDRESS and CONTROL fields in the frame.
- */
-       if ((data[0] == PPP_ALLSTATIONS) && (data[1] == PPP_UI)) {
-               data  += 2;
-               count -= 2;
-       }
-
-       proto = (u_short) * data++;     /* PROTO compressed */
-       if (proto & 1) {
-               count--;
-       } else {
-               proto = (proto << 8) | (u_short) * data++;
-               count -= 2;
-       }
-
-       /* Send the frame to the network if the ppp device is up */
-       if (ppp->dev->flags & IFF_UP) {
-               if (ppp_do_ip (ppp, proto, data, count)) {
-                       ppp->ddinfo.ip_rjiffies = jiffies;
-                       return 1;
-               }
-       }
-
-       /* If we got here, it has to go to a user process doing a read,
-          so queue it. */
-       if (ppp_us_queue (ppp, proto, data, count)) {
-               ppp->ddinfo.nip_rjiffies = jiffies;
-               return 1;
-       }
-
-       /* couldn't cope. */
-       PRINTKN (1, (KERN_WARNING
-            "ppp: dropping packet on the floor: nobody could take it.\n"));
-       ppp->p.ppp_ierrors++;
-       return 1;
-}
-
-/* Examine packet at C, attempt to pass up to net layer.
-   PROTO is the protocol field from the PPP frame.
-   Return 1 if could handle it, 0 otherwise.  */
-
-static int
-ppp_do_ip (struct ppp *ppp, unsigned short proto, u_char * data, int count)
-{
-       sk_buff *skb;
-/*
- * Log the IP information
- */
-       PRINTKN (4, (KERN_DEBUG "ppp_do_ip: proto %x len %d first byte %x\n",
-                    (int) proto, count, data[0]));
-
-       if (ppp_debug_netpackets) {
-               PRINTK ((KERN_DEBUG "%s <-- proto %x len %d\n", ppp->dev->name,
-                        (int) proto, count));
-       }
-/*
- * If this is uncompressed IP data then receive the data
- */
-       switch (proto) {
-       case PPP_IP:
-               break;
-/*
- * For now, reject the IPX frames. Return 1 to indicate that it has been
- * processed so that it is simply discarded.
- */
-       case PPP_IPX:
-               return 1;
-/*
- * Process compressed IP frame. If the remote told us to reject frames then
- * do so now. Otherwise ensure that there is space in the buffer.
- */
-       case PPP_VJC_COMP:
-               if (ppp->flags & SC_REJ_COMP_TCP) {
-                       return 1;
-               }
-/*
- * Uncompress the header. We now can _guarantee_ that there is room.
- */
-               count = slhc_uncompress (ppp->slcomp, data, count);
-               if (count <= 0) {
-                       ppp->p.ppp_ierrors++;
-                       PRINTKN (1, (KERN_NOTICE
-                                    "ppp: error in VJ decompression\n"));
-                       return 1;
+               /*
+                * Decompress A/C and protocol compression here.
+                */
+               if (skb->len == 0 && chr != PPP_ALLSTATIONS) {
+                       p = skb_put(skb, 2);
+                       p[0] = PPP_ALLSTATIONS;
+                       p[1] = PPP_UI;
                }
-               proto = PPP_IP;
-               break;
-/*
- * Process uncompressed IP frame
- */
-       case PPP_VJC_UNCOMP:
-               if ((ppp->flags & SC_REJ_COMP_TCP) == 0) {
-                       if (slhc_remember (ppp->slcomp,
-                                          data, count) <= 0) {
-                               ppp->p.ppp_ierrors++;
-                               PRINTKN (1, (KERN_NOTICE
-                                         "ppp: error in VJ memorizing\n"));
-                               return 1;
-                       }
+               if (skb->len == 2 && (chr & 1) != 0) {
+                       p = skb_put(skb, 1);
+                       p[0] = 0;
                }
-               proto = PPP_IP;
-               break;
-/*
- * The frame is not a valid IP frame. Ignore it.
- */
-       default:
-               return 0;
-       }
-/*
- * If debugging net packets then print the information. Process the IP
- * frames first.
- */
-       if (ppp_debug_netpackets && proto == PPP_IP) {
-               struct iphdr *iph = (struct iphdr *) data;
-               PRINTK ((KERN_INFO
-                       "%s <--   src %lx dst %lx len %d\n",
-                       ppp->dev->name,
-                       iph->saddr,
-                       iph->daddr,
-                       count));
-       }
-/*
- * Generate a skb buffer for the new frame.
- */
-       skb = alloc_skb (count, GFP_ATOMIC);
-       if (skb == NULL) {
-               PRINTK ((KERN_ERR
-                        "ppp_do_ip: packet dropped on %s (no memory)!\n",
-                        ppp->dev->name));
-       }
-/*
- * Move the received data from the input buffer to the skb buffer.
- */
-       else {
 
-               skb->len = count;       /* Store the length */
-               skb->dev = ppp->dev;    /* We are the device */
-               memcpy ((u_char *) skb_data(skb), data, count); /* move data */
-/*
- * Tag the frame and kick it to the proper receive routine
- */
-               skb->free = 1;
-               netif_rx (skb); /* Receive the buffer */
-       }
-       return 1;
-}
-
-/* stuff packet at BUF, length LEN, into the us_rbuff buffer
-   prepend PROTO information */
-
-static int
-ppp_us_queue (struct ppp *ppp, unsigned short proto, u_char * data, int len)
-{
-       int totlen;
-       register int current_idx;
-/*
- * The total length includes the protocol data.
- * Lock the user information buffer.
- */
-       if (set_bit (0, &ppp->ubuf->locked)) {
-               PRINTKN (1, (KERN_NOTICE "ppp_us_queue: can't get lock\n"));
-               return 0;
-       }
-       current_idx = ppp->ubuf->head;
-
-#define PUTC(c)                                                \
-{                                                      \
-    buf_base (ppp->ubuf) [current_idx++] = (u_char) (c);\
-    current_idx &= ppp->ubuf->size;                    \
-    if (current_idx == ppp->ubuf->tail)        {               \
-           goto failure;                               \
-    }                                                  \
-}
-
-/*
- * Insert the buffer length (not counted), the protocol, and the data
- */
-       totlen = len + 2;
-       PUTC (totlen >> 8);
-       PUTC (totlen);
-
-       PUTC (proto >> 8);
-       PUTC (proto);
-
-       while (len-- > 0) {
-               PUTC (*data++);
-       }
-#undef PUTC
-/*
- * The frame is complete. Update the head pointer and wakeup the pppd
- * process.
- */
-       ppp->ubuf->head = current_idx;
+               /*
+                * Check if we've overflowed the MRU
+                */
+               if (skb->len >= ppp->mru + PPP_HDRLEN + 2
+                   || skb_tailroom(skb) <= 0) {
+                       ++ppp->estats.rx_length_errors;
+                       ppp->toss = 0xC0;
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "rcv frame too long: "
+                                      "len=%d mru=%d hroom=%d troom=%d\n",
+                                      skb->len, ppp->mru, skb_headroom(skb),
+                                      skb_tailroom(skb));
+                       continue;
+               }
 
-       clear_bit (0, &ppp->ubuf->locked);       /* Unlock the buffer header */
-       wake_up_interruptible (&ppp->read_wait); /* select() processing */
-       if (ppp->tty->fasync != NULL) {
-               kill_fasync (ppp->tty->fasync, SIGIO);  /* SIGIO processing */
+               /*
+                * Store the character and update the FCS.
+                */
+               p = skb_put(skb, 1);
+               *p = chr;
+               ppp->rfcs = PPP_FCS(ppp->rfcs, chr);
        }
-
-       PRINTKN (3, (KERN_INFO "ppp: successfully queued %d bytes\n", totlen));
-       return 1;
-/*
- * The buffer is full. Unlock the header and return the failure condition.
- */
-      failure:
-       clear_bit (0, &ppp->ubuf->locked);
-       PRINTKN (1, (KERN_NOTICE "ppp_us_queue: ran out of buffer space.\n"));
-       return 0;
+       ppp->rpkt = skb;
 }
 
 /*************************************************************
- * LINE DISCIPLINE SUPPORT
- *    The following functions form support user programs
- *    which read and write data on a TTY with the PPP line
- *    discipline.  Reading is done from a circular queue,
- *    filled by the lower TTY levels.
+ * PPP NETWORK INTERFACE SUPPORT
+ *     The following code implements the PPP network
+ *     interface device and handles those parts of
+ *     the PPP processing which are independent of the
+ *     type of hardware link being used, including
+ *     VJ and packet compression.
  *************************************************************/
 
-/* read a PPP frame from the us_rbuff circular buffer,
-   waiting if necessary
-*/
-
-static int
-ppp_tty_read (struct tty_struct *tty, struct file *file, u_char * buf,
-             unsigned int nr)
-{
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
-       u_char c;
-       int len, indx;
-
-#define GETC(c)                                                \
-{                                                      \
-    c = buf_base (ppp->ubuf) [ppp->ubuf->tail++];      \
-    ppp->ubuf->tail &= ppp->ubuf->size;                        \
-}
-
-/*
- * Validate the pointer to the PPP structure
- */
-       if (!ppp || ppp->magic != PPP_MAGIC) {
-               PRINTKN (1, (KERN_ERR
-                            "ppp_tty_read: cannnot find ppp channel\n"));
-               return -EIO;
-       }
-       CHECK_PPP (-ENXIO);
-
-       PRINTKN (4, (KERN_DEBUG "ppp_tty_read: called %x num %u\n",
-                    (unsigned int) buf,
-                    nr));
 /*
- * Acquire the read lock.
- */
-       for (;;) {
-               if (set_bit (0, &ppp->ubuf->locked) != 0) {
-                       PRINTKN (3, (KERN_DEBUG
-                                    "ppp_tty_read: sleeping(ubuf)\n"));
-
-                       current->timeout = 0;
-                       current->state = TASK_INTERRUPTIBLE;
-                       schedule ();
-
-                       if (current->signal & ~current->blocked) {
-                               return -EINTR;
-                       }
-                       continue;
-               }
-/*
- * Fetch the length of the buffer from the first two bytes.
- */
-               if (ppp->ubuf->head == ppp->ubuf->tail) {
-                       len = 0;
-               } else {
-                       GETC (c);
-                       len = c << 8;
-                       GETC (c);
-                       len += c;
-               }
-/*
- * If there is no length then wait for the data to arrive.
- */
-               if (len == 0) {
-                       /* no data */
-                       clear_bit (0, &ppp->ubuf->locked);
-                       if (file->f_flags & O_NONBLOCK) {
-                               PRINTKN (4, (KERN_DEBUG
-                                 "ppp_tty_read: no data (EWOULDBLOCK)\n"));
-                               return -EWOULDBLOCK;
-                       }
-                       current->timeout = 0;
-                       PRINTKN (3, (KERN_DEBUG
-                                    "ppp_tty_read: sleeping(read_wait)\n"));
-                       interruptible_sleep_on (&ppp->read_wait);
-                       if (current->signal & ~current->blocked) {
-                               return -EINTR;
-                       }
-                       continue;
-               }
-/*
- * Reset the time of the last read operation.
- */
-               ppp->ddinfo.nip_rjiffies = jiffies;
-               PRINTKN (4, (KERN_DEBUG "ppp_tty_read: len = %d\n", len));
-/*
- * Ensure that the frame will fit within the caller's buffer. If not, then
- * discard the frame from the input buffer and return an error to the caller.
- */
-               if (len + 2 > nr) {
-                       /* Can't copy it, update us_rbuff_head */
-                       PRINTKN (1, (KERN_DEBUG
-                          "ppp: read of %u bytes too small for %d frame\n",
-                                    nr, len + 2));
-                       ppp->ubuf->tail += len;
-                       ppp->ubuf->tail &= ppp->ubuf->size;
-                       clear_bit (0, &ppp->ubuf->locked);
-                       ppp->p.ppp_ierrors++;
-                       return -EOVERFLOW;
-               }
-/*
- * Fake the insertion of the ADDRESS and CONTROL information because these
- * were not saved in the buffer.
- */
-               put_fs_byte (PPP_ALLSTATIONS, buf++);
-               put_fs_byte (PPP_UI,          buf++);
-               indx = len;
-/*
- * Copy the received data from the buffer to the caller's area.
- */
-               while (indx-- > 0) {
-                       GETC (c);
-                       put_fs_byte (c, buf++);
-               }
-/*
- * Release the lock and return the character count in the buffer area.
+ * Network device driver callback routines
  */
-               clear_bit (0, &ppp->ubuf->locked);
-               len += 2; /* Account for ADDRESS and CONTROL bytes */
-               PRINTKN (3,
-               (KERN_DEBUG "ppp_tty_read: passing %d bytes up\n", len));
-               return len;
-       }
-#undef GETC
-}
 
-/* stuff a character into the transmit buffer, using PPP's way of escaping
-   special characters.
-   also, update fcs to take account of new character */
-
-extern inline void
-ppp_stuff_char (struct ppp *ppp, register struct ppp_buffer *buf,
-               register u_char chr)
-{
-/*
- * The buffer should not be full.
- */
-       if ((buf->count < 0) || (buf->count > 3000)) {
-               PRINTK ((KERN_DEBUG "ppp_stuff_char: %x %d\n",
-                        (unsigned int) buf->count,
-                        (unsigned int) buf->count))
-       }
-/*
- * Update the FCS and if the character needs to be escaped, do it.
- */
-       buf->fcs = PPP_FCS (buf->fcs, chr);
-       if (in_xmap (ppp, chr)) {
-               chr ^= PPP_TRANS;
-               ins_char (buf, PPP_ESCAPE);
-       }
-/*
- * Add the character to the buffer.
- */
-       ins_char (buf, chr);
-}
+static int ppp_init_dev(struct device *dev);
+static int ppp_dev_open(struct device *);
+static int ppp_dev_ioctl(struct device *dev, struct ifreq *ifr, int cmd);
+static int ppp_dev_close(struct device *);
+static int ppp_dev_xmit(struct sk_buff *, struct device *);
+static struct net_device_stats *ppp_dev_stats (struct device *);
 
-/*
- * write a frame with NR chars from BUF to TTY
- * we have to put the FCS field on ourselves
- */
+#if LINUX_VERSION_CODE < VERSION(2,1,15)
+static int ppp_dev_header(struct sk_buff *, struct device *, __u16,
+                         void *, void *, unsigned int);
+static int ppp_dev_rebuild(void *eth, struct device *dev,
+                          unsigned long raddr, struct sk_buff *skb);
+#endif
 
-static int
-ppp_tty_write (struct tty_struct *tty, struct file *file, u_char * buf,
-              unsigned int count)
-{
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
-       int indx;
-       unsigned short write_fcs;
-/*
- * Verify the pointer to the PPP data and that the tty is still in PPP mode.
- */
-       if (!ppp || ppp->magic != PPP_MAGIC) {
-               PRINTKN (1,(KERN_ERR "ppp_tty_write: cannot find ppp unit\n"));
-               return -EIO;
-       }
-       CHECK_PPP (-ENXIO);
-/*
- * Detech a change in the transfer size
- */
-       if (ppp->mtu != ppp->dev->mtu) {    /* Someone has been ifconfigging */
-               ppp_changedmtu (ppp,
-                               ppp->dev->mtu,
-                               ppp->mru);
-       }
 /*
- * Ensure that the caller does not wish to send too much.
+ * Information for the protocol decoder
  */
-       if (count > PPP_MTU) {
-               PRINTKN (1, (KERN_WARNING
-               "ppp_tty_write: truncating user packet from %u to mtu %d\n",
-                            count, PPP_MTU));
-               count = PPP_MTU;
-       }
-/*
- * Print the buffer
- */
-       if (ppp_debug >= 3) {
-               ppp_print_buffer ("write frame", buf, count, USER_DS);
-       }
-/*
- * lock this PPP unit so we will be the only writer;
- * sleep if necessary
- */
-       while (lock_buffer (ppp->tbuf) != 0) {
-               current->timeout = 0;
-               PRINTKN (3, (KERN_DEBUG "ppp_tty_write: sleeping\n"));
-               interruptible_sleep_on (&ppp->write_wait);
-               if (current->signal & ~current->blocked) {
-                       return -EINTR;
-               }
-       }
-/*
- * OK, locked. Add the leading FLAG character to the buffer.
- */
-       PRINTKN (4, (KERN_DEBUG "ppp_tty_write: acquired write lock\n"));
-       ppp->tbuf->count = 0;
 
-#ifdef OPTIMIZE_FLAG_TIME
-       if (jiffies - ppp->last_xmit > OPTIMIZE_FLAG_TIME) {
-               ins_char (ppp->tbuf, PPP_FLAG);
-       }
-       ppp->last_xmit = jiffies;
-#else
-       ins_char (ppp->tbuf, PPP_FLAG);
-#endif
-/*
- * Add the data for the frame to the buffer.
- */
-       ppp->tbuf->fcs = PPP_INITFCS;
-       indx = count;
-       while (indx-- > 0) {
-               register char chr = get_fs_byte (buf++);
-               ppp_stuff_char (ppp, ppp->tbuf, chr);
-       }
-/*
- * Add the trailing CRC and the final flag character
- */
-       write_fcs = ppp->tbuf->fcs ^ 0xFFFF;
-       ppp_stuff_char (ppp, ppp->tbuf, write_fcs);
-       ppp_stuff_char (ppp, ppp->tbuf, write_fcs >> 8);
+typedef int (*pfn_proto)  (struct ppp *, struct sk_buff *);
 
-       PRINTKN (4, (KERN_DEBUG "ppp_tty_write: fcs is %hx\n", write_fcs));
-/*
- * Add the trailing FLAG character
- */
-       ins_char (ppp->tbuf, PPP_FLAG);
-/*
- * Update the time and print the data to the debug log.
- */
-       ppp->ddinfo.nip_sjiffies = jiffies;
+typedef struct ppp_proto_struct {
+       int             proto;
+       pfn_proto       func;
+} ppp_proto_type;
 
-       if (ppp_debug >= 6) {
-               ppp_print_buffer ("xmit buffer",
-                                 buf_base (ppp->tbuf),
-                                 ppp->tbuf->count,
-                                 KERNEL_DS);
-       } else {
-               PRINTKN (4, (KERN_DEBUG
-                   "ppp_tty_write: writing %d chars\n", ppp->tbuf->count));
-       }
-/*
- * Start the transmitter and the request is complete.
- */
-       ppp->p.ppp_obytes += ppp->tbuf->count;
-       ++ppp->p.ppp_opackets;
+static int rcv_proto_ip                (struct ppp *, struct sk_buff *);
+static int rcv_proto_ipv6      (struct ppp *, struct sk_buff *);
+static int rcv_proto_ipx       (struct ppp *, struct sk_buff *);
+static int rcv_proto_at                (struct ppp *, struct sk_buff *);
+static int rcv_proto_vjc_comp  (struct ppp *, struct sk_buff *);
+static int rcv_proto_vjc_uncomp (struct ppp *, struct sk_buff *);
+static int rcv_proto_ccp       (struct ppp *, struct sk_buff *);
+static int rcv_proto_unknown   (struct ppp *, struct sk_buff *);
 
-       ppp_kick_tty (ppp, ppp->tbuf);
-       return ((int) count);
-}
+static
+ppp_proto_type proto_list[] = {
+       { PPP_IP,         rcv_proto_ip         },
+       { PPP_IPV6,       rcv_proto_ipv6       },
+       { PPP_IPX,        rcv_proto_ipx        },
+       { PPP_AT,         rcv_proto_at         },
+       { PPP_VJC_COMP,   rcv_proto_vjc_comp   },
+       { PPP_VJC_UNCOMP, rcv_proto_vjc_uncomp },
+       { PPP_CCP,        rcv_proto_ccp        },
+       { 0,              rcv_proto_unknown    }  /* !!! MUST BE LAST !!! */
+};
 
 /*
- * Process the IOCTL event for the tty device.
+ * Called when the PPP network interface device is actually created.
  */
-
 static int
-ppp_tty_ioctl (struct tty_struct *tty, struct file *file, unsigned int param2,
-              unsigned long param3)
+ppp_init_dev (struct device *dev)
 {
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
-       register int temp_i = 0;
-       int error;
-/*
- * Verify the status of the PPP device.
- */
-       if (!ppp || ppp->magic != PPP_MAGIC) {
-               PRINTK ((KERN_ERR
-                        "ppp_tty_ioctl: can't find PPP block from tty!\n"));
-               return -EBADF;
-       }
-       CHECK_PPP (-ENXIO);
-/*
- * The user must have an euid of root to do these requests.
- */
-       if (!suser ()) {
-               return -EPERM;
-       }
-/*
- * Set the MRU value
- */
-       switch (param2) {
-       case PPPIOCSMRU:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       PRINTKN (3, (KERN_INFO
-                                "ppp_tty_ioctl: set mru to %x\n", temp_i));
-                       temp_i = (int) get_fs_long (param3);
-                       if (ppp->mru != temp_i) {
-                               ppp_changedmtu (ppp, ppp->dev->mtu, temp_i);
-                       }
-               }
-               break;
-/*
- * Fetch the flags
- */
-       case PPPIOCGFLAGS:
-               error = verify_area (VERIFY_WRITE, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       temp_i = (ppp->flags & SC_MASK);
-#ifndef CHECK_CHARACTERS /* Don't generate errors if we don't check chars. */
-                       temp_i |= SC_RCV_B7_1 | SC_RCV_B7_0 |
-                                 SC_RCV_ODDP | SC_RCV_EVNP;
+       dev->hard_header_len  = PPP_HDRLEN;
+#if LINUX_VERSION_CODE < VERSION(2,1,15)
+       dev->hard_header      = ppp_dev_header;
+       dev->rebuild_header   = ppp_dev_rebuild;
 #endif
-                       put_fs_long ((long) temp_i, param3);
-                       PRINTKN (3, (KERN_DEBUG
-                           "ppp_tty_ioctl: get flags: addr %lx flags %x\n",
-                                    param3, temp_i));
-               }
-               break;
-/*
- * Set the flags for the various options
- */
-       case PPPIOCSFLAGS:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       temp_i = (int) get_fs_long (param3);
-                       ppp->flags ^= ((ppp->flags ^ temp_i) & SC_MASK);
-                       PRINTKN (3, (KERN_INFO
-                              "ppp_tty_ioctl: set flags to %x\n", temp_i));
-               }
-               break;
-/*
- * Retrieve the transmit async map
- */
-       case PPPIOCGASYNCMAP:
-               error = verify_area (VERIFY_WRITE, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       put_fs_long (ppp->xmit_async_map[0], param3);
-                       PRINTKN (3, (KERN_INFO
-                       "ppp_tty_ioctl: get asyncmap: addr %lx asyncmap %lx\n",
-                                    param3, ppp->xmit_async_map[0]));
-               }
-               break;
-/*
- * Set the transmit async map
- */
-       case PPPIOCSASYNCMAP:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       ppp->xmit_async_map[0] = get_fs_long (param3);
-                       PRINTKN (3, (KERN_INFO
-                                    "ppp_tty_ioctl: set xmit asyncmap %lx\n",
-                                    ppp->xmit_async_map[0]));
-               }
-               break;
-/*
- * Set the receive async map
- */
-       case PPPIOCSRASYNCMAP:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       ppp->recv_async_map = get_fs_long (param3);
-                       PRINTKN (3, (KERN_INFO
-                                    "ppp_tty_ioctl: set rcv asyncmap %lx\n",
-                                    ppp->recv_async_map));
-               }
-               break;
-/*
- * Obtain the unit number for this device.
- */
-       case PPPIOCGUNIT:
-               error = verify_area (VERIFY_WRITE, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       put_fs_long (ppp->dev->base_addr, param3);
-                       PRINTKN (3,
-                                (KERN_INFO "ppp_tty_ioctl: get unit: %d",
-                                 ppp->dev->base_addr));
-               }
-               break;
-/*
- * Set the debug level
- */
-       case PPPIOCSDEBUG:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       ppp_debug = (int) get_fs_long (param3);
-                       ppp_debug_netpackets = (ppp_debug & 0xff00) >> 8;
-                       ppp_debug &= 0xff;
-                       PRINTKN (1, (KERN_INFO
-                       "ppp_tty_ioctl: set debug level %d, netpacket %d\n",
-                                    ppp_debug, ppp_debug_netpackets));
-               }
-               break;
-/*
- * Get the debug level
- */
-       case PPPIOCGDEBUG:
-               error = verify_area (VERIFY_WRITE, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       put_fs_long ((long) (ppp_debug |
-                                           (ppp_debug_netpackets << 8)),
-                                    param3);
-
-                       PRINTKN (3, (KERN_INFO
-                                    "ppp_tty_ioctl: get debug level %d\n",
-                                 ppp_debug | (ppp_debug_netpackets << 8)));
-               }
-               break;
-/*
- * Get the times since the last send/receive frame operation
- */
-       case PPPIOCGTIME:
-               error = verify_area (VERIFY_WRITE, (void *) param3,
-                                    sizeof (struct ppp_ddinfo));
-               if (error == 0) {
-                       struct ppp_ddinfo cur_ddinfo;
-                       unsigned long cur_jiffies = jiffies;
-
-                       /* change absolute times to relative times. */
-                       cur_ddinfo.ip_sjiffies = cur_jiffies - ppp->ddinfo.ip_sjiffies;
-                       cur_ddinfo.ip_rjiffies = cur_jiffies - ppp->ddinfo.ip_rjiffies;
-                       cur_ddinfo.nip_sjiffies = cur_jiffies - ppp->ddinfo.nip_sjiffies;
-                       cur_ddinfo.nip_rjiffies = cur_jiffies - ppp->ddinfo.nip_rjiffies;
-
-                       memcpy_tofs ((void *) param3, &cur_ddinfo,
-                                    sizeof (struct ppp_ddinfo));
-                       PRINTKN (3, (KERN_INFO
-                                "ppp_tty_ioctl: read demand dial info\n"));
-               }
-               break;
-/*
- * Retrieve the extended async map
- */
-       case PPPIOCGXASYNCMAP:
-               error = verify_area (VERIFY_WRITE,
-                                    (void *) param3,
-                                    sizeof (ppp->xmit_async_map));
-               if (error == 0) {
-                       memcpy_tofs ((void *) param3,
-                                    ppp->xmit_async_map,
-                                    sizeof (ppp->xmit_async_map));
-                       PRINTKN (3, (KERN_INFO
-                                "ppp_tty_ioctl: get xasyncmap: addr %lx\n",
-                                    param3));
-               }
-               break;
-/*
- * Set the async extended map
- */
-       case PPPIOCSXASYNCMAP:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (ppp->xmit_async_map));
-               if (error == 0) {
-                       unsigned long temp_tbl[8];
-
-                       memcpy_fromfs (temp_tbl, (void *) param3,
-                                      sizeof (ppp->xmit_async_map));
-                       temp_tbl[1]  = 0x00000000;
-                       temp_tbl[2] &= ~0x40000000;
-                       temp_tbl[3] |= 0x60000000;
-
-                       if ((temp_tbl[2] & temp_tbl[3]) != 0 ||
-                           (temp_tbl[4] & temp_tbl[5]) != 0 ||
-                           (temp_tbl[6] & temp_tbl[7]) != 0) {
-                               error = -EINVAL;
-                       } else {
-                               memcpy (ppp->xmit_async_map, temp_tbl,
-                                       sizeof (ppp->xmit_async_map));
-                               PRINTKN (3, (KERN_INFO
-                                        "ppp_tty_ioctl: set xasyncmap\n"));
-                       }
-               }
-               break;
-/*
- * Set the maximum VJ header compression slot number.
- */
-       case PPPIOCSMAXCID:
-               error = verify_area (VERIFY_READ, (void *) param3,
-                                    sizeof (temp_i));
-               if (error == 0) {
-                       temp_i = (int) get_fs_long (param3) + 1;
-                       PRINTKN (3, (KERN_INFO
-                                    "ppp_tty_ioctl: set maxcid to %d\n",
-                                    temp_i));
-                       if (ppp->slcomp != NULL) {
-                               slhc_free (ppp->slcomp);
-                       }
-                       ppp->slcomp = slhc_init (temp_i, temp_i);
-
-                       if (ppp->slcomp == NULL) {
-                               PRINTKN (1, (KERN_ERR
-                               "ppp: no space for compression buffers!\n"));
-                               ppp_release (ppp);
-                               error = -ENOMEM;
-                       }
-               }
-               break;
-/*
- * Allow users to read, but not set, the serial port parameters
- */
-       case TCGETS:
-       case TCGETA:
-               error = n_tty_ioctl (tty, file, param2, param3);
-               break;
-/*
- *  All other ioctl() events will come here.
- */
-       default:
-               PRINTKN (1, (KERN_ERR
-                            "ppp_tty_ioctl: invalid ioctl: %x, addr %lx\n",
-                            param2,
-                            param3));
-
-               error = -ENOIOCTLCMD;
-               break;
-       }
-       return error;
-}
-
-/*
- * TTY callback.
- *
- * Process the select() statement for the PPP device.
- */
 
-static int
-ppp_tty_select (struct tty_struct *tty, struct inode *inode,
-               struct file *filp, int sel_type, select_table * wait)
-{
-       struct ppp *ppp = (struct ppp *) tty->disc_data;
-       int result = 1;
-/*
- * Verify the status of the PPP device.
- */
-       if (!ppp || ppp->magic != PPP_MAGIC) {
-               PRINTK ((KERN_ERR
-                      "ppp_tty_select: can't find PPP block from tty!\n"));
-               return -EBADF;
-       }
-       CHECK_PPP (0);
-/*
- * Branch on the type of select mode. A read request must lock the user
- * buffer area.
- */
-       switch (sel_type) {
-       case SEL_IN:
-               if (set_bit (0, &ppp->ubuf->locked) == 0) {
-                       /* Test for the presence of data in the queue */
-                       if (ppp->ubuf->head != ppp->ubuf->tail) {
-                               clear_bit (0, &ppp->ubuf->locked);
-                               break;
-                       }
-                       clear_bit (0, &ppp->ubuf->locked);
-               }               /* fall through */
-               /*
- * Exceptions or read errors.
- */
-       case SEL_EX:
-               /* Is this a pty link and the remote disconnected? */
-               if (tty->flags & (1 << TTY_SLAVE_CLOSED)) {
-                       break;
-               }
-               /* Is this a local link and the modem disconnected? */
-               if (tty_hung_up_p (filp)) {
-                       break;
-               }
-               select_wait (&ppp->read_wait, wait);
-               result = 0;
-               break;
-/*
- * Write mode. A write is allowed if there is no current transmission.
- */
-       case SEL_OUT:
-               if (ppp->tbuf->locked != 0) {
-                       select_wait (&ppp->write_wait, wait);
-                       result = 0;
-               }
-               break;
+       /* device INFO */
+       dev->mtu              = PPP_MTU;
+       dev->hard_start_xmit  = ppp_dev_xmit;
+       dev->open             = ppp_dev_open;
+       dev->stop             = ppp_dev_close;
+       dev->get_stats        = ppp_dev_stats;
+       dev->do_ioctl         = ppp_dev_ioctl;
+       dev->addr_len         = 0;
+       dev->tx_queue_len     = 10;
+       dev->type             = ARPHRD_PPP;
+
+#if LINUX_VERSION_CODE < VERSION(2,1,20)
+       {
+               int    indx;
+
+               for (indx = 0; indx < DEV_NUMBUFFS; indx++)
+                       skb_queue_head_init (&dev->buffs[indx]);
        }
+#else
+       dev_init_buffers(dev);
+#endif
 
-       return result;
-}
+       dev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
 
-/*************************************************************
- * NETWORK OUTPUT
- *    This routine accepts requests from the network layer
- *    and attempts to deliver the packets.
- *    It also includes various routines we are compelled to
- *    have to make the network layer work (arp, etc...).
- *************************************************************/
+       return 0;
+}
 
 /*
  * Callback from the network layer when the device goes up.
@@ -1888,22 +1706,15 @@ ppp_tty_select (struct tty_struct *tty, struct inode *inode,
 static int
 ppp_dev_open (struct device *dev)
 {
-       struct ppp *ppp = &ppp_ctrl[dev->base_addr];
+       struct ppp *ppp = dev2ppp(dev);
 
-       /* reset POINTOPOINT every time, since dev_close zaps it! */
-       dev->flags |= IFF_POINTOPOINT;
-
-       if (ppp->tty == NULL) {
-               PRINTKN (1,
-               (KERN_ERR "ppp: %s not connected to a TTY! can't go open!\n",
-                dev->name));
+       if (!ppp->inuse || ppp2tty(ppp) == NULL) {
+               printk(KERN_ERR "ppp: %s not active\n", dev->name);
                return -ENXIO;
        }
 
-       PRINTKN (2, (KERN_INFO "ppp: channel %s going up for IP packets!\n",
-                    dev->name));
+       MOD_INC_USE_COUNT;
 
-       CHECK_PPP (-ENXIO);
        return 0;
 }
 
@@ -1914,499 +1725,1647 @@ ppp_dev_open (struct device *dev)
 static int
 ppp_dev_close (struct device *dev)
 {
-       struct ppp *ppp = &ppp_ctrl[dev->base_addr];
+       struct ppp *ppp = dev2ppp (dev);
+
+       CHECK_PPP_MAGIC(ppp);
+
+       MOD_DEC_USE_COUNT;
 
-       if (ppp->tty == NULL) {
-               PRINTKN (1,
-               (KERN_ERR "ppp: %s not connected to a TTY! can't go down!\n",
-                dev->name));
-               return -ENXIO;
-       }
-/*
- * We don't do anything about the device going down. It is not important
- * for us.
- */
-       PRINTKN (2, (KERN_INFO "ppp: channel %s going down for IP packets!\n",
-                    dev->name));
-       CHECK_PPP (-ENXIO);
        return 0;
 }
 
-/*
- * IOCTL operation to read the version of the driver.
- */
-
-static int
-ppp_dev_ioctl_version (struct ppp *ppp, struct ifreq *ifr)
+static inline void
+get_vj_stats(struct vjstat *vj, struct slcompress *slc)
 {
-        int error;
-       int len;
-       char *result;
-/*
- * Must have write access to the buffer.
- */
-       result = (char *) ifr->ifr_ifru.ifru_data;
-       len    = strlen (szVersion) + 1;
-       error  = verify_area (VERIFY_WRITE, result, len);
-/*
- * Move the version data
- */
-       if (error == 0)
-               memcpy_tofs (result, szVersion, len);
-
-       return error;
+       vj->vjs_packets    = slc->sls_o_compressed + slc->sls_o_uncompressed;
+       vj->vjs_compressed = slc->sls_o_compressed;
+       vj->vjs_searches   = slc->sls_o_searches;
+       vj->vjs_misses     = slc->sls_o_misses;
+       vj->vjs_errorin    = slc->sls_i_error;
+       vj->vjs_tossed     = slc->sls_i_tossed;
+       vj->vjs_uncompressedin = slc->sls_i_uncompressed;
+       vj->vjs_compressedin   = slc->sls_i_compressed;
 }
 
 /*
- * IOCTL to read the statistics for the pppstats program.
+ * Callback from the network layer to process the sockioctl functions.
  */
-
 static int
-ppp_dev_ioctl_stats (struct ppp *ppp, struct ifreq *ifr)
+ppp_dev_ioctl (struct device *dev, struct ifreq *ifr, int cmd)
 {
-       struct ppp_stats *result, temp;
-       int    error;
-/*
- * Must have write access to the buffer.
- */
-       result = (struct ppp_stats *) ifr->ifr_ifru.ifru_data;
-       error = verify_area (VERIFY_WRITE,
-                            result,
-                            sizeof (temp));
-/*
- * Supply the information for the caller. First move the version data
- * then move the ppp stats; and finally the vj stats.
- */
-       if (error == 0) {
-               memset (&temp, 0, sizeof(temp));
-               memcpy (&temp.p, &ppp->p, sizeof (struct pppstat));
-/*
- * Header Compression statistics
- */
-               if (ppp->slcomp != NULL) {
-                       temp.vj.vjs_packets    = ppp->slcomp->sls_o_nontcp +
-                                                ppp->slcomp->sls_o_tcp;
-                       temp.vj.vjs_compressed = ppp->slcomp->sls_o_compressed;
-                       temp.vj.vjs_searches   = ppp->slcomp->sls_o_searches;
-                       temp.vj.vjs_misses     = ppp->slcomp->sls_o_misses;
-                       temp.vj.vjs_errorin    = ppp->slcomp->sls_i_error;
-                       temp.vj.vjs_tossed     = ppp->slcomp->sls_i_tossed;
-                       temp.vj.vjs_uncompressedin = ppp->slcomp->sls_i_uncompressed;
-                       temp.vj.vjs_compressedin   = ppp->slcomp->sls_i_compressed;
-               }
-/*
- * Frame data compression statistics
- */
-#ifdef PPP_COMPRESS
-               if (ppp->sc_xc_state != NULL)
-                       (*ppp->sc_xcomp->comp_stat) (ppp->sc_xc_state,
-                                                    &temp.c);
+       struct ppp *ppp = dev2ppp(dev);
+       int nb;
+       union {
+               struct ppp_stats stats;
+               struct ppp_comp_stats cstats;
+               char vers[32];
+       } u;
+
+       CHECK_PPP_MAGIC(ppp);
+
+       memset(&u, 0, sizeof(u));
+       switch (cmd) {
+       case SIOCGPPPSTATS:
+               u.stats.p = ppp->stats;
+               if (ppp->slcomp != NULL)
+                       get_vj_stats(&u.stats.vj, ppp->slcomp);
+               nb = sizeof(u.stats);
+               break;
 
+       case SIOCGPPPCSTATS:
+               if (ppp->sc_xc_state != NULL)
+                       (*ppp->sc_xcomp->comp_stat)
+                               (ppp->sc_xc_state, &u.cstats.c);
                if (ppp->sc_rc_state != NULL)
-                       (*ppp->sc_rcomp->decomp_stat) (ppp->sc_rc_state,
-                                                      &temp.d);
-#endif /* PPP_COMPRESS */
+                       (*ppp->sc_rcomp->decomp_stat)
+                               (ppp->sc_rc_state, &u.cstats.d);
+               nb = sizeof(u.cstats);
+               break;
 
-/*
- * Move the data to the caller's buffer
- */
-               memcpy_tofs (result, &temp, sizeof (temp));
+       case SIOCGPPPVER:
+               strcpy(u.vers, szVersion);
+               nb = strlen(u.vers) + 1;
+               break;
+
+       default:
+               return -EINVAL;
        }
-       return error;
+
+       if (COPY_TO_USER((void *) ifr->ifr_ifru.ifru_data, &u, nb))
+               return -EFAULT;
+       return 0;
 }
 
 /*
- * Callback from the network layer to process the sockioctl functions.
+ * Process the generic PPP ioctls, i.e. those which are not specific
+ * to any particular type of hardware link.
  */
-
 static int
-ppp_dev_ioctl (struct device *dev, struct ifreq *ifr, int cmd)
+ppp_ioctl(struct ppp *ppp, unsigned int param2, unsigned long param3)
 {
-       struct ppp *ppp = &ppp_ctrl[dev->base_addr];
-       int error;
-/*
- * Process the requests
- */
-       switch (cmd) {
-       case SIOCGPPPSTATS:
-               error = ppp_dev_ioctl_stats (ppp, ifr);
+       register int temp_i = 0, oldflags;
+       int error = -EFAULT;
+       unsigned long flags;
+       struct ppp_idle cur_ddinfo;
+       struct npioctl npi;
+
+       CHECK_PPP(-ENXIO);
+
+       /*
+        * The user must have an euid of root to do these requests.
+        */
+       if (!SUSER())
+               return -EPERM;
+
+       switch (param2) {
+       case PPPIOCSMRU:
+               /*
+                * Set the MRU value
+                */
+               if (GET_USER(temp_i, (int *) param3))
+                       break;
+               if (temp_i < PPP_MRU)
+                       temp_i = PPP_MRU;
+               ppp->mru = temp_i;
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO
+                              "ppp_ioctl: set mru to %x\n", temp_i);
+               error = 0;
                break;
 
-       case SIOCGPPPVER:
-               error = ppp_dev_ioctl_version (ppp, ifr);
+       case PPPIOCGFLAGS:
+               /*
+                * Fetch the current flags
+                */
+               temp_i = ppp->flags & SC_MASK;
+#ifndef CHECK_CHARACTERS /* Don't generate errors if we don't check chars. */
+               temp_i |= SC_RCV_B7_1 | SC_RCV_B7_0 |
+                         SC_RCV_ODDP | SC_RCV_EVNP;
+#endif
+               if (PUT_USER(temp_i, (int *) param3))
+                       break;
+               error = 0;
                break;
 
-       default:
+       case PPPIOCSFLAGS:
+               /*
+                * Set the flags for the various options
+                */
+               if (GET_USER(temp_i, (int *) param3))
+                       break;
+
+               if (ppp->flags & ~temp_i & SC_CCP_OPEN)
+                       ppp_ccp_closed(ppp);
+
+               save_flags(flags);
+               cli();
+               oldflags = ppp->flags;
+               temp_i = (temp_i & SC_MASK) | (oldflags & ~SC_MASK);
+               ppp->flags = temp_i;
+               restore_flags(flags);
+
+               if ((oldflags | temp_i) & SC_DEBUG)
+                       printk(KERN_INFO
+                              "ppp_ioctl: set flags to %x\n", temp_i);
+               error = 0;
+               break;
+
+       case PPPIOCSCOMPRESS:
+               /*
+                * Set the compression mode
+                */
+               error = ppp_set_compression
+                       (ppp, (struct ppp_option_data *) param3);
+               break;
+
+       case PPPIOCGUNIT:
+               /*
+                * Obtain the unit number for this device.
+                */
+               if (PUT_USER(ppp->line, (int *) param3))
+                       break;
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO
+                              "ppp_ioctl: get unit: %d\n", ppp->line);
+               error = 0;
+               break;
+
+       case PPPIOCSDEBUG:
+               /*
+                * Set the debug level
+                */
+               if (GET_USER(temp_i, (int *) param3))
+                       break;
+               temp_i = (temp_i & 0x1F) << 16;
+
+               if ((ppp->flags | temp_i) & SC_DEBUG)
+                       printk(KERN_INFO
+                              "ppp_ioctl: set dbg flags to %x\n", temp_i);
+
+               save_flags(flags);
+               cli();
+               ppp->flags = (ppp->flags & ~0x1F0000) | temp_i;
+               restore_flags(flags);
+               error = 0;
+               break;
+
+       case PPPIOCGDEBUG:
+               /*
+                * Get the debug level
+                */
+               temp_i = (ppp->flags >> 16) & 0x1F;
+               if (PUT_USER(temp_i, (int *) param3))
+                       break;
+               error = 0;
+               break;
+
+       case PPPIOCGIDLE:
+               /*
+                * Get the times since the last send/receive frame operation
+                */
+               /* change absolute times to relative times. */
+               cur_ddinfo.xmit_idle = (jiffies - ppp->last_xmit) / HZ;
+               cur_ddinfo.recv_idle = (jiffies - ppp->last_recv) / HZ;
+               if (COPY_TO_USER((void *) param3, &cur_ddinfo,
+                                sizeof (cur_ddinfo)))
+                       break;
+               error = 0;
+               break;
+
+       case PPPIOCSMAXCID:
+               /*
+                * Set the maximum VJ header compression slot number.
+                */
+               if (GET_USER(temp_i, (int *) param3))
+                       break;
                error = -EINVAL;
+               if (temp_i < 2 || temp_i > 255)
+                       break;
+               ++temp_i;
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO "ppp_ioctl: set maxcid to %d\n",
+                              temp_i);
+               if (ppp->slcomp != NULL)
+                       slhc_free(ppp->slcomp);
+               ppp->slcomp = slhc_init(16, temp_i);
+
+               error = -ENOMEM;
+               if (ppp->slcomp == NULL) {
+                       printk(KERN_ERR "ppp: no memory for VJ compression\n");
+                       break;
+               }
+               error = 0;
+               break;
+
+       case PPPIOCGNPMODE:
+       case PPPIOCSNPMODE:
+               if (COPY_FROM_USER(&npi, (void *) param3, sizeof(npi)))
+                       break;
+
+               switch (npi.protocol) {
+               case PPP_IPV6:
+                       npi.protocol = NP_IPV6;
+                       break;
+               case PPP_IP:
+                       npi.protocol = NP_IP;
+                       break;
+               case PPP_IPX:
+                       npi.protocol = NP_IPX;
+                       break;
+               case PPP_AT:
+                       npi.protocol = NP_AT;
+                       break;
+               default:
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "pppioc[gs]npmode: "
+                                      "invalid proto %d\n", npi.protocol);
+                       error = -EINVAL;
+                       goto out;
+               }
+
+               if (param2 == PPPIOCGNPMODE) {
+                       npi.mode = ppp->sc_npmode[npi.protocol];
+                       if (COPY_TO_USER((void *) param3, &npi, sizeof(npi)))
+                               break;
+               } else {
+                       ppp->sc_npmode[npi.protocol] = npi.mode;
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "ppp: set np %d to %d\n",
+                                      npi.protocol, npi.mode);
+                       mark_bh(NET_BH);
+               }
+               error = 0;
+               break;
+
+       default:
+               /*
+                *  All other ioctl() events will come here.
+                */
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_ERR
+                              "ppp_ioctl: invalid ioctl: %x, addr %lx\n",
+                              param2, param3);
+
+               error = -ENOIOCTLCMD;
                break;
        }
+out:
        return error;
 }
 
 /*
- * Send a frame to the remote.
+ * Process the set-compression ioctl.
  */
-
-int
-ppp_dev_xmit (sk_buff *skb, struct device *dev)
+static int
+ppp_set_compression (struct ppp *ppp, struct ppp_option_data *odp)
 {
-       struct tty_struct *tty;
-       struct ppp *ppp;
-       u_char *data;
-       unsigned short proto;
-       int len;
-       unsigned short write_fcs;
-/*
- * just a little sanity check.
- */
-       if (skb == NULL) {
-               PRINTKN (3, (KERN_WARNING "ppp_dev_xmit: null packet!\n"));
-               return 0;
+       struct compressor *cp;
+       int error, nb;
+       unsigned long flags;
+       __u8 *ptr;
+       __u8 ccp_option[CCP_MAX_OPTION_LENGTH];
+       struct ppp_option_data data;
+
+       /*
+        * Fetch the compression parameters
+        */
+       error = -EFAULT;
+       if (COPY_FROM_USER(&data, odp, sizeof (data)))
+               goto out;
+
+       nb  = data.length;
+       ptr = data.ptr;
+       if ((unsigned) nb >= CCP_MAX_OPTION_LENGTH)
+               nb = CCP_MAX_OPTION_LENGTH;
+
+       if (COPY_FROM_USER(ccp_option, ptr, nb))
+               goto out;
+
+       error = -EINVAL;
+       if (ccp_option[1] < 2)  /* preliminary check on the length byte */
+               goto out;
+
+       save_flags(flags);
+       cli();
+       ppp->flags &= ~(data.transmit? SC_COMP_RUN: SC_DECOMP_RUN);
+       restore_flags(flags);
+
+       cp = find_compressor (ccp_option[0]);
+#if defined(CONFIG_KMOD) || defined(CONFIG_KERNELD)
+       if (cp == NULL) {
+               char modname[32];
+               sprintf(modname, "ppp-compress-%d", ccp_option[0]);
+               request_module(modname);
+               cp = find_compressor(ccp_option[0]);
+       }
+#endif /* CONFIG_KMOD */
+
+       if (cp == NULL) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_DEBUG
+                              "%s: no compressor for [%x %x %x], %x\n",
+                              ppp->name, ccp_option[0], ccp_option[1],
+                              ccp_option[2], nb);
+               goto out;               /* compressor not loaded */
+       }
+
+       /*
+        * Found a handler for the protocol - try to allocate
+        * a compressor or decompressor.
+        */
+       error = 0;
+       if (data.transmit) {
+               if (ppp->sc_xc_state != NULL)
+                       (*ppp->sc_xcomp->comp_free)(ppp->sc_xc_state);
+               ppp->sc_xc_state = NULL;
+
+               ppp->sc_xcomp    = cp;
+               ppp->sc_xc_state = cp->comp_alloc(ccp_option, nb);
+               if (ppp->sc_xc_state == NULL) {
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "%s: comp_alloc failed\n",
+                                      ppp->name);
+                       error = -ENOBUFS;
+               }
+       } else {
+               if (ppp->sc_rc_state != NULL)
+                       (*ppp->sc_rcomp->decomp_free)(ppp->sc_rc_state);
+               ppp->sc_rc_state = NULL;
+
+               ppp->sc_rcomp    = cp;
+               ppp->sc_rc_state = cp->decomp_alloc(ccp_option, nb);
+               if (ppp->sc_rc_state == NULL) {
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "%s: decomp_alloc failed\n",
+                                      ppp->name);
+                       error = -ENOBUFS;
+               }
        }
+out:
+       return error;
+}
+
 /*
- * Fetch the poitners to the data
+ * Handle a CCP packet.
+ *
+ * The CCP packet is passed along to the pppd process just like any
+ * other PPP frame. The difference is that some processing needs to be
+ * immediate or the compressors will become confused on the peer.
  */
-       ppp   = &ppp_ctrl[dev->base_addr];
-       tty   = ppp->tty;
-       data  = (u_char *) (&skb[1]);
-       len   = skb->len;
-       proto = PPP_IP;
 
-       PRINTKN (4, (KERN_DEBUG "ppp_dev_xmit [%s]: skb %lX busy %d\n",
-                    dev->name,
-                    (unsigned long int) skb, ppp->wbuf->locked));
+static void ppp_proto_ccp(struct ppp *ppp, __u8 *dp, int len, int rcvd)
+{
+       int slen    = CCP_LENGTH(dp);
+       __u8 *opt = dp   + CCP_HDRLEN;
+       int opt_len = slen - CCP_HDRLEN;
+       unsigned long flags;
 
-       CHECK_PPP (0);
-/*
- * Validate the tty interface
- */
-       do {
-               if (tty == NULL) {
-                       PRINTKN (1,
-                       (KERN_ERR "ppp_dev_xmit: %s not connected to a TTY!\n",
-                                 dev->name));
-                       break;
+       if (slen > len)
+               return;
+
+       if (ppp->flags & SC_DEBUG)
+               printk(KERN_DEBUG "ppp_proto_ccp rcvd=%d code=%x flags=%x\n",
+                      rcvd, CCP_CODE(dp), ppp->flags);
+       save_flags(flags);
+       switch (CCP_CODE(dp)) {
+       case CCP_CONFREQ:
+       case CCP_TERMREQ:
+       case CCP_TERMACK:
+               /*
+                * CCP must be going down - disable compression
+                */
+               if (ppp->flags & SC_CCP_UP) {
+                       cli();
+                       ppp->flags &= ~(SC_CCP_UP   |
+                                       SC_COMP_RUN |
+                                       SC_DECOMP_RUN);
                }
-/*
- * Ensure that the PPP device is still up
- */
-               if (!(dev->flags & IFF_UP)) {
-                       PRINTKN (1, (KERN_WARNING
-                               "ppp_dev_xmit: packet sent on interface %s,"
-                               " which is down for IP\n",
-                               dev->name));
+               break;
+
+       case CCP_CONFACK:
+               if ((ppp->flags & SC_CCP_OPEN) == 0)
+                       break;
+               if (ppp->flags & SC_CCP_UP)
+                       break;
+               if (slen < (CCP_HDRLEN + CCP_OPT_MINLEN))
+                       break;
+               if (slen < (CCP_OPT_LENGTH (opt) + CCP_HDRLEN))
+                       break;
+               if (!rcvd) {
+                       /*
+                        * we're agreeing to send compressed packets.
+                        */
+                       if (ppp->sc_xc_state == NULL)
+                               break;
+
+                       if ((*ppp->sc_xcomp->comp_init)
+                           (ppp->sc_xc_state,
+                            opt, opt_len,
+                            ppp->line, 0, ppp->flags & SC_DEBUG)) {
+                               if (ppp->flags & SC_DEBUG)
+                                       printk(KERN_DEBUG "%s: comp running\n",
+                                              ppp->name);
+                               cli();
+                               ppp->flags |= SC_COMP_RUN;
+                       }
                        break;
                }
-/*
- * Detect a change in the transfer size
- */
-               if (ppp->mtu != ppp->dev->mtu) {
-                       ppp_changedmtu (ppp,
-                                       ppp->dev->mtu,
-                                       ppp->mru);
+
+               /*
+                * peer is agreeing to send compressed packets.
+                */
+               if (ppp->sc_rc_state == NULL)
+                       break;
+
+               if ((*ppp->sc_rcomp->decomp_init)
+                   (ppp->sc_rc_state,
+                    opt, opt_len,
+                    ppp->line, 0, ppp->mru, ppp->flags & SC_DEBUG)) {
+                       if (ppp->flags & SC_DEBUG)
+                               printk(KERN_DEBUG "%s: decomp running\n",
+                                      ppp->name);
+                       cli();
+                       ppp->flags |= SC_DECOMP_RUN;
+                       ppp->flags &= ~(SC_DC_ERROR | SC_DC_FERROR);
                }
-/*
- * Fetch the length from the IP header.
- */
-               if (len < sizeof (struct iphdr)) {
-                       PRINTKN (0, (KERN_ERR
-                           "ppp_dev_xmit: given runt packet, ignoring\n"));
+               break;
+
+       case CCP_RESETACK:
+               /*
+                * CCP Reset-ack resets compressors and decompressors
+                * as it passes through.
+                */
+               if ((ppp->flags & SC_CCP_UP) == 0)
                        break;
+
+               if (!rcvd) {
+                       if (ppp->sc_xc_state && (ppp->flags & SC_COMP_RUN)) {
+                               (*ppp->sc_xcomp->comp_reset)(ppp->sc_xc_state);
+                               if (ppp->flags & SC_DEBUG)
+                                       printk(KERN_DEBUG "%s: comp reset\n",
+                                              ppp->name);
+                       }
+               } else {
+                       if (ppp->sc_rc_state && (ppp->flags & SC_DECOMP_RUN)) {
+                             (*ppp->sc_rcomp->decomp_reset)(ppp->sc_rc_state);
+                             if (ppp->flags & SC_DEBUG)
+                                       printk(KERN_DEBUG "%s: decomp reset\n",
+                                              ppp->name);
+                             cli();
+                             ppp->flags &= ~SC_DC_ERROR;
+                       }
                }
-               len = ntohs (((struct iphdr *) skb_data(skb))->tot_len);
+               break;
+       }
+       restore_flags(flags);
+}
+
 /*
- * Acquire the lock on the transmission buffer. If the buffer was busy then
- * mark the device as busy and return "failure to send, try back later" error.
+ * CCP is down; free (de)compressor state if necessary.
  */
-               if (lock_buffer (ppp->wbuf) != 0) {
-                       dev->tbusy = 1;
-                       return 1;
-               }
+
+static void
+ppp_ccp_closed(struct ppp *ppp)
+{
+       unsigned long flags;
+
+       save_flags(flags);
+       cli();
+       ppp->flags &= ~(SC_CCP_OPEN | SC_CCP_UP | SC_COMP_RUN | SC_DECOMP_RUN);
+       restore_flags(flags);
+       if (ppp->flags & SC_DEBUG)
+               printk(KERN_DEBUG "%s: ccp closed\n", ppp->name);
+       if (ppp->sc_xc_state) {
+               (*ppp->sc_xcomp->comp_free) (ppp->sc_xc_state);
+               ppp->sc_xc_state = NULL;
+       }
+
+       if (ppp->sc_rc_state) {
+               (*ppp->sc_rcomp->decomp_free) (ppp->sc_rc_state);
+               ppp->sc_rc_state = NULL;
+       }
+}
+
+/*************************************************************
+ * RECEIVE-SIDE ROUTINES
+ *************************************************************/
+
 /*
- * At this point, the buffer will be transmitted. There is no other exit.
- *
- * Try to compress the header.
+ * On entry, a received frame is in skb.
+ * Check it and dispose as appropriate.
  */
-               if (ppp->flags & SC_COMP_TCP) {
-                       /* last 0 argument says don't compress connection ID */
-                       len = slhc_compress (ppp->slcomp, data, len,
-                                            buf_base (ppp->cbuf),
-                                            &data, 0);
-
-                       if (data[0] & SL_TYPE_COMPRESSED_TCP) {
-                               proto = PPP_VJC_COMP;
+static int
+ppp_receive_frame(struct ppp *ppp, struct sk_buff *skb)
+{
+       __u8    *data;
+       int     count;
+       int     proto;
+       int     new_count;
+       struct sk_buff *new_skb;
+       ppp_proto_type  *proto_ptr;
+
+       /*
+        * An empty frame is ignored. This occurs if the FLAG sequence
+        * precedes and follows each frame.
+        */
+       if (skb == NULL)
+               return 1;
+       if (skb->len == 0) {
+               KFREE_SKB(skb);
+               return 1;
+       }
+       data = skb->data;
+       count = skb->len;
+
+       /*
+        * Generate an error if the frame is too small.
+        */
+       if (count < PPP_HDRLEN + 2) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_DEBUG
+                              "ppp: got runt ppp frame, %d chars\n", count);
+               ++ppp->estats.rx_length_errors;
+               return 0;
+       }
+
+       if ( !(ppp->flags & SC_SYNC) ) { 
+               /*
+                * Verify the FCS of the frame and discard the FCS characters
+                * from the end of the buffer.
+                */
+               if (ppp->rfcs != PPP_GOODFCS) {
+                       if (ppp->flags & SC_DEBUG) {
+                               printk(KERN_DEBUG
+                                      "ppp: frame with bad fcs, length = %d\n",
+                                      count);
+                               ppp_print_buffer("bad frame", data, count);
+                       }
+                       ++ppp->estats.rx_crc_errors;
+                       return 0;
+               }
+               count -= 2;             /* ignore the fcs characters */
+               skb_trim(skb, count);
+       }
+       
+       /*
+        * Process the active decompressor.
+        */
+       if (ppp->sc_rc_state != NULL &&
+           (ppp->flags & SC_DECOMP_RUN) &&
+           ((ppp->flags & (SC_DC_FERROR | SC_DC_ERROR)) == 0)) {
+               if (PPP_PROTOCOL(data) == PPP_COMP) {
+                       /*
+                        * If the frame is compressed then decompress it.
+                        */
+                       new_skb = dev_alloc_skb(ppp->mru + 128 + PPP_HDRLEN);
+                       if (new_skb == NULL) {
+                               printk(KERN_ERR "ppp_recv_frame: no memory\n");
+                               new_count = DECOMP_ERROR;
+                       } else {
+                               LIBERATE_SKB(new_skb);
+                               new_count = (*ppp->sc_rcomp->decompress)
+                                       (ppp->sc_rc_state, data, count,
+                                        new_skb->data, ppp->mru + PPP_HDRLEN);
+                       }
+                       if (new_count > 0) {
+                               /* Frame was decompressed OK */
+                               KFREE_SKB(skb);
+                               skb = new_skb;
+                               count = new_count;
+                               data = skb_put(skb, count);
+
                        } else {
-                               if (data[0] >= SL_TYPE_UNCOMPRESSED_TCP) {
-                                       proto   = PPP_VJC_UNCOMP;
-                                       data[0] = (data[0] & 0x0f) | 0x40;
+                               /*
+                                * On a decompression error, we pass the
+                                * compressed frame up to pppd as an
+                                * error indication.
+                                */
+                               if (ppp->flags & SC_DEBUG)
+                                       printk(KERN_INFO "%s: decomp err %d\n",
+                                              ppp->name, new_count);
+                               if (new_skb != 0)
+                                       KFREE_SKB(new_skb);
+                               if (ppp->slcomp != 0)
+                                       slhc_toss(ppp->slcomp);
+                               ++ppp->stats.ppp_ierrors;
+                               if (new_count == DECOMP_FATALERROR) {
+                                       ppp->flags |= SC_DC_FERROR;
+                               } else {
+                                       ppp->flags |= SC_DC_ERROR;
                                }
                        }
-               }
 
-               if (ppp_debug_netpackets) {
-                       struct iphdr *iph = (struct iphdr *) skb_data(skb);
-                       PRINTK ((KERN_DEBUG "%s ==> proto %x len %d src %x "
-                                "dst %x proto %d\n",
-                       dev->name, (int) proto, (int) len, (int) iph->saddr,
-                                (int) iph->daddr, (int) iph->protocol))
+
+               } else {
+                       /*
+                        * The frame is not compressed. Pass it to the
+                        * decompression code so it can update its
+                        * dictionary if necessary.
+                        */
+                       (*ppp->sc_rcomp->incomp)(ppp->sc_rc_state,
+                                                data, count);
                }
+       }
+       else if (PPP_PROTOCOL(data) == PPP_COMP && (ppp->flags & SC_DEBUG))
+               printk(KERN_INFO "%s: not decomp, rc_state=%p flags=%x\n",
+                      ppp->name, ppp->sc_rc_state, ppp->flags);
+
+       /*
+        * Count the frame and print it
+        */
+       ++ppp->stats.ppp_ipackets;
+       ppp->stats.ppp_ioctects += count;
+       if (ppp->flags & SC_LOG_INPKT)
+               ppp_print_buffer ("receive frame", data, count);
+
+       /*
+        * Find the procedure to handle this protocol.
+        * The last one is marked as protocol 0 which is the 'catch-all'
+        * to feed it to the pppd daemon.
+        */
+       proto = PPP_PROTOCOL(data);
+       proto_ptr = proto_list;
+       while (proto_ptr->proto != 0 && proto_ptr->proto != proto)
+               ++proto_ptr;
+
+       /*
+        * Update the appropriate statistic counter.
+        */
+       if (!(*proto_ptr->func)(ppp, skb)) {
+               KFREE_SKB(skb);
+               ++ppp->stats.ppp_discards;
+       }
+
+       return 1;
+}
+
 /*
- * Insert the leading FLAG character
+ * An input error has been detected, so we need to inform
+ * the VJ decompressor.
  */
-               ppp->wbuf->count = 0;
+static void
+ppp_receive_error(struct ppp *ppp)
+{
+       CHECK_PPP_VOID();
 
-#ifdef OPTIMIZE_FLAG_TIME
-               if (jiffies - ppp->last_xmit > OPTIMIZE_FLAG_TIME) {
-                       ins_char (ppp->wbuf, PPP_FLAG);
-               }
-               ppp->last_xmit = jiffies;
-#else
-               ins_char (ppp->wbuf, PPP_FLAG);
-#endif
+       if (ppp->slcomp != 0)
+               slhc_toss(ppp->slcomp);
+}
+
+/*
+ * Put the input frame into the networking system for the indicated protocol
+ */
+static int
+ppp_rcv_rx(struct ppp *ppp, __u16 proto, struct sk_buff *skb)
+{
+
+       /*
+        * Fill in a few fields of the skb and give it to netif_rx().
+        */
+       skb->dev      = ppp2dev(ppp);   /* We are the device */
+       skb->protocol = htons(proto);
+       skb_pull(skb, PPP_HDRLEN);      /* pull off ppp header */
+       skb->mac.raw   = skb->data;
+       ppp->last_recv = jiffies;
+       netif_rx (skb);
+       return 1;
+}
+
+/*
+ * Process the receipt of an IP frame
+ */
+static int
+rcv_proto_ip(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+       if ((ppp2dev(ppp)->flags & IFF_UP) && (skb->len > 0)
+           && ppp->sc_npmode[NP_IP] == NPMODE_PASS)
+               return ppp_rcv_rx(ppp, ETH_P_IP, skb);
+       return 0;
+}
+
+/*
+ * Process the receipt of an IPv6 frame
+ */
+static int
+rcv_proto_ipv6(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+       if ((ppp2dev(ppp)->flags & IFF_UP) && (skb->len > 0)
+           && ppp->sc_npmode[NP_IPV6] == NPMODE_PASS)
+               return ppp_rcv_rx(ppp, ETH_P_IPV6, skb);
+       return 0;
+}
 
-               ppp->wbuf->fcs = PPP_INITFCS;
 /*
- * Insert the address and control data
+ * Process the receipt of an IPX frame
  */
-               if (!(ppp->flags & SC_COMP_AC)) {
-                       ppp_stuff_char (ppp, ppp->wbuf, PPP_ALLSTATIONS);
-                       ppp_stuff_char (ppp, ppp->wbuf, PPP_UI);
-               }
-/*
- * Insert the protocol.
- */
-               if (!(ppp->flags & SC_COMP_PROT) || (proto & 0xff00)) {
-                       ppp_stuff_char (ppp, ppp->wbuf, proto >> 8);
-               }
-               ppp_stuff_char (ppp, ppp->wbuf, proto);
+static int
+rcv_proto_ipx(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+       if (((ppp2dev(ppp)->flags & IFF_UP) != 0) && (skb->len > 0)
+           && ppp->sc_npmode[NP_IPX] == NPMODE_PASS)
+               return ppp_rcv_rx(ppp, ETH_P_IPX, skb);
+       return 0;
+}
+
 /*
- * Insert the data
+ * Process the receipt of an Appletalk frame
  */
-               while (len-- > 0) {
-                       ppp_stuff_char (ppp, ppp->wbuf, *data++);
-               }
+static int
+rcv_proto_at(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+       if ((ppp2dev(ppp)->flags & IFF_UP) && (skb->len > 0)
+           && ppp->sc_npmode[NP_AT] == NPMODE_PASS)
+               return ppp_rcv_rx(ppp, ETH_P_PPPTALK, skb);
+       return 0;
+}
+
 /*
- * Add the trailing CRC and the final flag character
+ * Process the receipt of an VJ Compressed frame
  */
-               write_fcs = ppp->wbuf->fcs ^ 0xFFFF;
-               ppp_stuff_char (ppp, ppp->wbuf, write_fcs);
-               ppp_stuff_char (ppp, ppp->wbuf, write_fcs >> 8);
+static int
+rcv_proto_vjc_comp(struct ppp *ppp, struct sk_buff *skb)
+{
+       int new_count;
+
+       CHECK_PPP(0);
+       if ((ppp->flags & SC_REJ_COMP_TCP) || ppp->slcomp == NULL)
+               return 0;
+       new_count = slhc_uncompress(ppp->slcomp, skb->data + PPP_HDRLEN,
+                                   skb->len - PPP_HDRLEN);
+       if (new_count <= 0) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_NOTICE
+                              "ppp: error in VJ decompression\n");
+               return 0;
+       }
+       new_count += PPP_HDRLEN;
+       if (new_count > skb->len)
+               skb_put(skb, new_count - skb->len);
+       else
+               skb_trim(skb, new_count);
+       return rcv_proto_ip(ppp, skb);
+}
 
-               PRINTKN (4,
-                     (KERN_DEBUG "ppp_dev_xmit: fcs is %hx\n", write_fcs));
 /*
- * Add the trailing flag character
+ * Process the receipt of an VJ Un-compressed frame
  */
-               ins_char (ppp->wbuf, PPP_FLAG);
+static int
+rcv_proto_vjc_uncomp(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+       if ((ppp->flags & SC_REJ_COMP_TCP) || ppp->slcomp == NULL)
+               return 0;
+       if (slhc_remember(ppp->slcomp, skb->data + PPP_HDRLEN,
+                         skb->len - PPP_HDRLEN) <= 0) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_NOTICE "ppp: error in VJ memorizing\n");
+               return 0;
+       }
+       return rcv_proto_ip(ppp, skb);
+}
+
+static int
+rcv_proto_ccp(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+       ppp_proto_ccp (ppp, skb->data + PPP_HDRLEN, skb->len - PPP_HDRLEN, 1);
+       return rcv_proto_unknown(ppp, skb);
+}
+
 /*
- * Update the times for the transmission.
+ * Receive all unclassified protocols.
  */
-               ppp->ddinfo.ip_sjiffies = jiffies;
+static int
+rcv_proto_unknown(struct ppp *ppp, struct sk_buff *skb)
+{
+       CHECK_PPP(0);
+
+       /*
+        * Limit queue length by dropping old frames.
+        */
+       skb_queue_tail(&ppp->rcv_q, skb);
+       while (ppp->rcv_q.qlen > PPP_MAX_RCV_QLEN) {
+               struct sk_buff *skb = skb_dequeue(&ppp->rcv_q);
+               if (skb)
+                       KFREE_SKB(skb);
+       }
+
+       wake_up_interruptible (&ppp->read_wait);
+       if (ppp->tty->fasync != NULL)
+               kill_fasync (ppp->tty->fasync, SIGIO);
+
+       return 1;
+}
+
+/*************************************************************
+ * TRANSMIT-SIDE ROUTINES
+ *************************************************************/
+
+/* local function to store a value into the LQR frame */
+extern inline __u8 * store_long (register __u8 *p, register int value) {
+       *p++ = (__u8) (value >> 24);
+       *p++ = (__u8) (value >> 16);
+       *p++ = (__u8) (value >>  8);
+       *p++ = (__u8) value;
+       return p;
+}
+
 /*
- * Print the buffer
+ * Compress and send an frame to the peer.
+ * Should be called with xmit_busy == 1, having been set by the caller.
+ * That is, we use xmit_busy as a lock to prevent reentry of this
+ * procedure.
  */
-               if (ppp_debug >= 6) {
-                       ppp_print_buffer ("xmit buffer", buf_base (ppp->wbuf),
-                                         ppp->wbuf->count, KERNEL_DS);
+static void
+ppp_send_frame(struct ppp *ppp, struct sk_buff *skb)
+{
+       int     proto;
+       __u8    *data;
+       int     count;
+       __u8    *p;
+       int     ret;
+
+       CHECK_PPP_VOID();
+       data = skb->data;
+       count = skb->len;
+
+       /* dump the buffer */
+       if (ppp->flags & SC_LOG_OUTPKT)
+               ppp_print_buffer ("write frame", data, count);
+
+       /*
+        * Handle various types of protocol-specific compression
+        * and other processing, including:
+        * - VJ TCP header compression
+        * - updating LQR packets
+        * - updating CCP state on CCP packets
+        */
+       proto = PPP_PROTOCOL(data);
+       switch (proto) {
+       case PPP_IP:
+               if ((ppp->flags & SC_COMP_TCP) && ppp->slcomp != NULL)
+                       skb = ppp_vj_compress(ppp, skb);
+               break;
+
+       case PPP_LQR:
+               /*
+                * Update the LQR frame with the current MIB information.
+                * This way the information is accurate and up-to-date.
+                */
+               if (count < 48)
+                       break;
+               p = data + 40;  /* Point to last two items. */
+               p = store_long(p, ppp->stats.ppp_opackets + 1);
+               p = store_long(p, ppp->stats.ppp_ooctects + count);
+               ++ppp->stats.ppp_olqrs;
+               break;
+
+       case PPP_CCP:
+               /*
+                * Outbound compression control frames
+                */
+               ppp_proto_ccp(ppp, data + PPP_HDRLEN, count - PPP_HDRLEN, 0);
+               break;
+       }
+       data = skb->data;
+       count = skb->len;
+
+       /*
+        * Compress the whole frame if possible.
+        */
+       if (((ppp->flags & SC_COMP_RUN) != 0)   &&
+           (ppp->sc_xc_state != (void *) 0)    &&
+           (proto != PPP_LCP)                  &&
+           (proto != PPP_CCP)) {
+               struct sk_buff *new_skb;
+               int new_count;
+
+               /* Allocate an skb for the compressed frame. */
+               new_skb = alloc_skb(ppp->mtu + PPP_HDRLEN, GFP_ATOMIC);
+               if (new_skb == NULL) {
+                       printk(KERN_ERR "ppp_send_frame: no memory\n");
+                       KFREE_SKB(skb);
+                       ppp->xmit_busy = 0;
+                       return;
+               }
+               LIBERATE_SKB(new_skb);
+
+               /* Compress the frame. */
+               new_count = (*ppp->sc_xcomp->compress)
+                       (ppp->sc_xc_state, data, new_skb->data,
+                        count, ppp->mtu + PPP_HDRLEN);
+
+               /* Did it compress? */
+               if (new_count > 0 && (ppp->flags & SC_CCP_UP)) {
+                       skb_put(new_skb, new_count);
+                       KFREE_SKB(skb);
+                       skb = new_skb;
                } else {
-                       PRINTKN (4, (KERN_DEBUG
-                                    "ppp_dev_xmit: writing %d chars\n",
-                                    ppp->wbuf->count));
+                       /*
+                        * The frame could not be compressed, or it could not
+                        * be sent in compressed form because CCP is down.
+                        */
+                       KFREE_SKB(new_skb);
                }
-/*
- * Send the block to the tty driver.
- */
-               ppp->p.ppp_obytes += ppp->wbuf->count;
-               ++ppp->p.ppp_opackets;
-               ppp_kick_tty (ppp, ppp->wbuf);
        }
-       while (0);
+
+       /*
+        * Send the frame
+        */
+       if ( ppp->flags & SC_SYNC ) 
+               ret = ppp_sync_send(ppp, skb);
+       else
+               ret = ppp_async_send(ppp, skb);
+       if (ret > 0) {
+               /* we can release the lock */
+               ppp->xmit_busy = 0;
+       } else if (ret < 0) {
+               /* can't happen, since the caller got the xmit_busy lock */
+               printk(KERN_ERR "ppp: ppp_async_send didn't accept pkt\n");
+       }
+}
+
 /*
- * This is the end of the transmission. Release the buffer.
+ * Apply VJ TCP header compression to a packet.
  */
-       dev_kfree_skb (skb, FREE_WRITE);
-       return 0;
+static struct sk_buff *
+ppp_vj_compress(struct ppp *ppp, struct sk_buff *skb)
+{
+       __u8 *orig_data, *data;
+       struct sk_buff *new_skb;
+       int len, proto;
+
+       new_skb = alloc_skb(skb->len, GFP_ATOMIC);
+       if (new_skb == NULL) {
+               printk(KERN_ERR "ppp: no memory for vj compression\n");
+               return skb;
+       }
+       LIBERATE_SKB(new_skb);
+
+       orig_data = data = skb->data + PPP_HDRLEN;
+       len = slhc_compress(ppp->slcomp, data, skb->len - PPP_HDRLEN,
+                           new_skb->data + PPP_HDRLEN, &data,
+                           (ppp->flags & SC_NO_TCP_CCID) == 0);
+
+       if (data == orig_data) {
+               /* Couldn't compress the data */
+               KFREE_SKB(new_skb);
+               return skb;
+       }
+
+       /* The data has been changed */
+       if (data[0] & SL_TYPE_COMPRESSED_TCP) {
+               proto = PPP_VJC_COMP;
+               data[0] ^= SL_TYPE_COMPRESSED_TCP;
+       } else {
+               if (data[0] >= SL_TYPE_UNCOMPRESSED_TCP)
+                       proto = PPP_VJC_UNCOMP;
+               else
+                       proto = PPP_IP;
+               data[0] = orig_data[0];
+       }
+
+       data = skb_put(new_skb, len + PPP_HDRLEN);
+       data[0] = PPP_ALLSTATIONS;
+       data[1] = PPP_UI;
+       data[2] = 0;
+       data[3] = proto;
+
+       KFREE_SKB(skb);
+       return new_skb;
 }
 
-static struct enet_statistics *
-ppp_dev_stats (struct device *dev)
+static inline void
+ppp_send_frames(struct ppp *ppp)
 {
-       struct ppp *ppp = &ppp_ctrl[dev->base_addr];
-       static struct enet_statistics ppp_stats;
-
-       ppp_stats.rx_packets          = ppp->p.ppp_ipackets;
-       ppp_stats.rx_errors           = ppp->p.ppp_ierrors;
-       ppp_stats.rx_dropped          = ppp->p.ppp_ierrors;
-       ppp_stats.rx_fifo_errors      = 0;
-       ppp_stats.rx_length_errors    = 0;
-       ppp_stats.rx_over_errors      = 0;
-       ppp_stats.rx_crc_errors       = 0;
-       ppp_stats.rx_frame_errors     = 0;
-       ppp_stats.tx_packets          = ppp->p.ppp_opackets;
-       ppp_stats.tx_errors           = ppp->p.ppp_oerrors;
-       ppp_stats.tx_dropped          = 0;
-       ppp_stats.tx_fifo_errors      = 0;
-       ppp_stats.collisions          = 0;
-       ppp_stats.tx_carrier_errors   = 0;
-       ppp_stats.tx_aborted_errors   = 0;
-       ppp_stats.tx_window_errors    = 0;
-       ppp_stats.tx_heartbeat_errors = 0;
-
-       PRINTKN (3, (KERN_INFO "ppp_dev_stats called"));
-       return &ppp_stats;
+       struct sk_buff *skb;
+
+       while (!test_and_set_bit(0, &ppp->xmit_busy)) {
+               skb = skb_dequeue(&ppp->xmt_q);
+               if (skb == NULL) {
+                       ppp->xmit_busy = 0;
+                       break;
+               }
+               ppp_send_frame(ppp, skb);
+       }
+       if (!ppp->xmit_busy && ppp->dev.tbusy) {
+               ppp->dev.tbusy = 0;
+               mark_bh(NET_BH);
+       }
 }
 
-#ifdef NEW_SKBUFF
 /*
- *     The PPP protocol is currently pure IP (no IPX yet). This defines
- *      the protocol layer which is blank since the driver does all the
- *      cooking.
+ * Called from the hardware (tty) layer when it can accept
+ * another packet.
  */
-
-static int ppp_dev_input (struct protocol *self, struct protocol *lower,
-                         sk_buff *skb, void *saddr, void *daddr)
+static void
+ppp_output_wakeup(struct ppp *ppp)
 {
-       return protocol_pass_demultiplex(self, NULL, skb, NULL, NULL);
+       CHECK_PPP_VOID();
+
+       if (!ppp->xmit_busy) {
+               printk(KERN_ERR "ppp_output_wakeup called but xmit_busy==0\n");
+               return;
+       }
+       ppp->xmit_busy = 0;
+       ppp_send_frames(ppp);
 }
 
-static int ppp_dev_output (struct protocol *self, sk_buff *skb, int type,
-                          int subid, void *saddr, void *daddr, void *opt)
+/*
+ * Send a control frame (from pppd).
+ */
+static void
+ppp_send_ctrl(struct ppp *ppp, struct sk_buff *skb)
 {
-       if(skb->dev==NULL)
-       {
-               printk("ppp_dev_output: No device.\n");
-               kfree_skb(skb, FREE_WRITE);
-               return -1;
-       }
-       dev_queue_xmit(skb, skb->dev, skb->priority);
-       return 0;
+       CHECK_PPP_VOID();
+
+       /*
+        * Put the packet on the queue, then send as many as we can.
+        */
+       skb_queue_tail(&ppp->xmt_q, skb);
+       ppp_send_frames(ppp);
 }
 
-static int ppp_dev_getkey(int protocol, int subid, unsigned char *key)
+
+/*************************************************************
+ * NETWORK OUTPUT
+ *    This routine accepts requests from the network layer
+ *    and attempts to deliver the packets.
+ *************************************************************/
+/*
+ * Send a frame to the peer.
+ * Returns 1 iff the frame was not accepted.
+ */
+static int
+ppp_dev_xmit(struct sk_buff *skb, struct device *dev)
 {
-       switch (protocol)
-       {
-       case ETH_P_IP:
+       struct ppp *ppp = dev2ppp(dev);
+       struct tty_struct *tty = ppp2tty(ppp);
+       enum NPmode npmode;
+       int proto;
+       unsigned char *hdr;
+
+       /* just a little sanity check. */
+       if (skb == NULL)
+               return 0;
+       if (skb->data == NULL) {
+               KFREE_SKB(skb);
+               return 0;
+       }
+
+       /*
+        * Avoid timing problem should tty hangup while data is
+        * queued to be sent.
+        */
+       if (!ppp->inuse) {
+               KFREE_SKB(skb);
+               return 0;
+       }
+
+       /*
+        * Validate the tty interface
+        */
+       if (tty == NULL) {
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_ERR
+                              "ppp_dev_xmit: %s not connected to a TTY!\n",
+                              dev->name);
+               KFREE_SKB(skb);
                return 0;
+       }
 
+       /*
+        * Work out the appropriate network-protocol mode for this packet.
+        */
+       npmode = NPMODE_PASS;   /* default */
+       switch (ntohs(skb->protocol)) {
+       case ETH_P_IP:
+               proto = PPP_IP;
+               npmode = ppp->sc_npmode[NP_IP];
+               break;
+       case ETH_P_IPV6:
+               proto = PPP_IPV6;
+               npmode = ppp->sc_npmode[NP_IPV6];
+               break;
+       case ETH_P_IPX:
+               proto = PPP_IPX;
+               npmode = ppp->sc_npmode[NP_IPX];
+               break;
+       case ETH_P_PPPTALK:
+       case ETH_P_ATALK:
+               proto = PPP_AT;
+               npmode = ppp->sc_npmode[NP_AT];
+               break;
        default:
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_INFO "%s: packet for unknown proto %x\n",
+                              ppp->name, ntohs(skb->protocol));
+               KFREE_SKB(skb);
+               return 0;
+       }
+
+       /*
+        * Drop, accept or reject the packet depending on the mode.
+        */
+       switch (npmode) {
+       case NPMODE_PASS:
                break;
+
+       case NPMODE_QUEUE:
+               /*
+                * We may not send the packet now, so drop it.
+                * XXX It would be nice to be able to return it to the
+                * network system to be queued and retransmitted later.
+                */
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_DEBUG "%s: returning frame\n", ppp->name);
+               KFREE_SKB(skb);
+               return 0;
+
+       case NPMODE_ERROR:
+       case NPMODE_DROP:
+               if (ppp->flags & SC_DEBUG)
+                       printk(KERN_DEBUG
+                              "ppp_dev_xmit: dropping (npmode = %d) on %s\n",
+                              npmode, ppp->name);
+               KFREE_SKB(skb);
+               return 0;
        }
 
-       return -EAFNOSUPPORT;
+       /*
+        * The dev->tbusy field acts as a lock to allow only
+        * one packet to be processed at a time.  If we can't
+        * get the lock, try again later.
+        * We deliberately queue as little as possible inside
+        * the ppp driver in order to minimize the latency
+        * for high-priority packets.
+        */
+       if (test_and_set_bit(0, &ppp->xmit_busy)) {
+               dev->tbusy = 1; /* can't take it now */
+               return 1;
+       }
+       dev->tbusy = 0;
+
+       /*
+        * Put the 4-byte PPP header on the packet.
+        * If there isn't room for it, we have to copy the packet.
+        */
+       if (skb_headroom(skb) < PPP_HDRLEN) {
+               struct sk_buff *new_skb;
+
+               new_skb = alloc_skb(skb->len + PPP_HDRLEN, GFP_ATOMIC);
+               if (new_skb == NULL) {
+                       printk(KERN_ERR "%s: skb hdr alloc failed\n",
+                              ppp->name);
+                       KFREE_SKB(skb);
+                       ppp->xmit_busy = 0;
+                       ppp_send_frames(ppp);
+                       return 0;
+               }
+               LIBERATE_SKB(new_skb);
+               skb_reserve(new_skb, PPP_HDRLEN);
+               memcpy(skb_put(new_skb, skb->len), skb->data, skb->len);
+               KFREE_SKB(skb);
+               skb = new_skb;
+       }
+
+       hdr = skb_push(skb, PPP_HDRLEN);
+       hdr[0] = PPP_ALLSTATIONS;
+       hdr[1] = PPP_UI;
+       hdr[2] = proto >> 8;
+       hdr[3] = proto;
+
+       ppp_send_frame(ppp, skb);
+       if (!ppp->xmit_busy)
+               ppp_send_frames(ppp);
+       return 0;
 }
 
-#else
-
+#if LINUX_VERSION_CODE < VERSION(2,1,15)
 /*
- * Called to enquire about the type of the frame in the buffer. Return
- * ETH_P_IP for an IP frame, ETH_P_IPX for an IPX frame.
+ * Null hard_header and header_rebuild routines.
  */
-
-static unsigned short
-ppp_dev_type (sk_buff *skb, struct device *dev)
+static int ppp_dev_header(struct sk_buff *skb, struct device *dev,
+                         unsigned short type, void *daddr,
+                         void *saddr, unsigned int len)
 {
-       return (htons (ETH_P_IP));
+       return 0;
 }
 
-static int
-ppp_dev_header (u_char * buff, struct device *dev, unsigned short type,
-               void *daddr, void *saddr, unsigned len, sk_buff *skb)
+static int ppp_dev_rebuild(void *eth, struct device *dev,
+                          unsigned long raddr, struct sk_buff *skb)
 {
-       return (0);
+       return 0;
 }
+#endif /* < 2.1.15 */
 
-static int
-ppp_dev_rebuild (void *buff, struct device *dev, unsigned long raddr,
-                sk_buff *skb)
+/*
+ * Generate the statistic information for the /proc/net/dev listing.
+ */
+static struct net_device_stats *
+ppp_dev_stats (struct device *dev)
 {
-       return (0);
-}
+       struct ppp *ppp = dev2ppp (dev);
+
+       ppp->estats.rx_packets = ppp->stats.ppp_ipackets;
+       ppp->estats.rx_errors  = ppp->stats.ppp_ierrors;
+       ppp->estats.tx_packets = ppp->stats.ppp_opackets;
+       ppp->estats.tx_errors  = ppp->stats.ppp_oerrors;
+#if LINUX_VERSION_CODE >= VERSION(2,1,25)
+       ppp->estats.rx_bytes   = ppp->stats.ppp_ibytes;
+       ppp->estats.tx_bytes   = ppp->stats.ppp_obytes;
 #endif
 
+       return &ppp->estats;
+}
+
 /*************************************************************
  * UTILITIES
  *    Miscellany called by various functions above.
  *************************************************************/
 
-/* allocate a PPP channel */
+/* Locate the previous instance of the PPP channel */
+static struct ppp *
+ppp_find(int pid_value)
+{
+       struct ppp      *ppp;
+
+       /* try to find the device which this pid is already using */
+       for (ppp = ppp_list; ppp != 0; ppp = ppp->next) {
+               if (ppp->inuse && ppp->sc_xfer == pid_value) {
+                       ppp->sc_xfer = 0;
+                       break;
+               }
+       }
+       return ppp;
+}
+
+/* allocate or create a PPP channel */
 static struct ppp *
-ppp_alloc (void)
+ppp_alloc(void)
 {
-       int i;
-       for (i = 0; i < PPP_NRUNIT; i++) {
-               if (!set_bit (0, &ppp_ctrl[i].inuse)) {
-                       return &ppp_ctrl[i];
+       int             if_num;
+       int             status;
+       struct device   *dev;
+       struct ppp      *ppp;
+
+       /* try to find an free device */
+       for (ppp = ppp_list; ppp != 0; ppp = ppp->next) {
+               if (!test_and_set_bit(0, &ppp->inuse)) {
+                       dev = ppp2dev(ppp);
+                       if (dev->flags & IFF_UP) {
+                               clear_bit(0, &ppp->inuse);
+                               continue;
+                       }
+                       /* Reregister device */
+                       unregister_netdev(dev);
+                       if (register_netdev(dev) == 0)
+                               return ppp;
+                       printk(KERN_DEBUG "could not reregister ppp device\n");
+                       /* leave inuse set in this case */
                }
        }
-       return NULL;
+
+       /*
+        * There are no available units, so make a new one.
+        */
+       ppp = (struct ppp *) kmalloc(sizeof(struct ppp), GFP_KERNEL);
+       if (ppp == 0) {
+               printk(KERN_ERR "ppp: struct ppp allocation failed\n");
+               return 0;
+       }
+       memset(ppp, 0, sizeof(*ppp));
+
+       /* initialize channel control data */
+       ppp->magic = PPP_MAGIC;
+       ppp->next = NULL;
+       ppp->inuse = 1;
+       ppp->read_wait = NULL;
+
+       /*
+        * Make up a suitable name for this device
+        */
+       dev = ppp2dev(ppp);
+       dev->name = ppp->name;
+#if LINUX_VERSION_CODE < VERSION(2,1,31)
+       if_num = (ppp_list == 0)? 0: ppp_last->line + 1;
+       sprintf(ppp->name, "ppp%d", if_num);
+#else
+       if_num = dev_alloc_name(dev, "ppp%d");
+#endif
+       if (if_num < 0) {
+               printk(KERN_ERR "ppp: dev_alloc_name failed (%d)\n", if_num);
+               kfree(ppp);
+               return 0;
+       }
+       ppp->line = if_num;
+       ppp->slcomp = NULL;
+
+       dev->next = NULL;
+       dev->init = ppp_init_dev;
+       dev->name = ppp->name;
+       dev->priv = (void *) ppp;
+
+       /* register device so that we can be ifconfig'd */
+       /* ppp_init_dev() will be called as a side-effect */
+       status = register_netdev (dev);
+       if (status == 0) {
+               printk(KERN_INFO "registered device %s\n", dev->name);
+       } else {
+               printk(KERN_ERR
+                      "ppp_alloc - register_netdev(%s) = %d failure.\n",
+                      dev->name, status);
+               kfree(ppp);
+               ppp = NULL;
+       }
+
+       /* link this unit into our list */
+       if (ppp_list == 0)
+               ppp_list = ppp;
+       else
+               ppp_last->next = ppp;
+       ppp_last = ppp;
+
+       return ppp;
 }
 
 /*
- * Utility procedures to print a buffer in hex/ascii
+ * Initialize the generic parts of the ppp structure.
+ */
+static void
+ppp_generic_init(struct ppp *ppp)
+{
+       int indx;
+
+       ppp->flags  = 0;
+       ppp->mtu    = PPP_MTU;
+       ppp->mru    = PPP_MRU;
+
+       skb_queue_head_init(&ppp->xmt_q);
+       skb_queue_head_init(&ppp->rcv_q);
+
+       ppp->last_xmit  = jiffies;
+       ppp->last_recv  = jiffies;
+       ppp->xmit_busy  = 0;
+
+       /* clear statistics */
+       memset(&ppp->stats, 0, sizeof (struct pppstat));
+       memset(&ppp->estats, 0, sizeof(struct net_device_stats));
+
+       /* PPP compression data */
+       ppp->sc_xc_state = NULL;
+       ppp->sc_rc_state = NULL;
+
+       for (indx = 0; indx < NUM_NP; ++indx)
+               ppp->sc_npmode[indx] = NPMODE_PASS;
+}
+
+/*
+ * Called to clean up the generic parts of the ppp structure.
  */
+static void
+ppp_release(struct ppp *ppp)
+{
+       struct sk_buff *skb;
+
+       CHECK_PPP_MAGIC(ppp);
+
+       if (ppp->flags & SC_DEBUG)
+               printk(KERN_DEBUG "%s released\n", ppp->name);
 
+       ppp_ccp_closed(ppp);
+
+        /* Ensure that the pppd process is not hanging on select()/poll() */
+        wake_up_interruptible(&ppp->read_wait);
+
+       if (ppp->slcomp) {
+               slhc_free(ppp->slcomp);
+               ppp->slcomp = NULL;
+       }
+
+       while ((skb = skb_dequeue(&ppp->rcv_q)) != NULL)
+               KFREE_SKB(skb);
+       while ((skb = skb_dequeue(&ppp->xmt_q)) != NULL)
+               KFREE_SKB(skb);
+
+       ppp->inuse = 0;
+       if (ppp->dev.tbusy) {
+               ppp->dev.tbusy = 0;
+               mark_bh(NET_BH);
+       }
+}
+
+/*
+ * Utility procedures to print a buffer in hex/ascii
+ */
 static void
-ppp_print_hex (register u_char * out, u_char * in, int count)
+ppp_print_hex (register __u8 * out, const __u8 * in, int count)
 {
-       register u_char next_ch;
+       register __u8 next_ch;
        static char hex[] = "0123456789ABCDEF";
 
        while (count-- > 0) {
-               next_ch = (u_char) get_fs_byte (in);
+               next_ch = *in++;
                *out++ = hex[(next_ch >> 4) & 0x0F];
                *out++ = hex[next_ch & 0x0F];
                ++out;
-               ++in;
        }
 }
 
 static void
-ppp_print_char (register u_char * out, u_char * in, int count)
+ppp_print_char (register __u8 * out, const __u8 * in, int count)
 {
-       register u_char next_ch;
+       register __u8 next_ch;
 
        while (count-- > 0) {
-               next_ch = (u_char) get_fs_byte (in);
+               next_ch = *in++;
 
-               if (next_ch < 0x20 || next_ch > 0x7e) {
+               if (next_ch < 0x20 || next_ch > 0x7e)
                        *out++ = '.';
-               else {
+               else {
                        *out++ = next_ch;
-                       if (next_ch == '%') { /* printk/syslogd has a bug !! */
+                       if (next_ch == '%')   /* printk/syslogd has a bug !! */
                                *out++ = '%';
-                       }
                }
-               ++in;
        }
        *out = '\0';
 }
 
 static void
-ppp_print_buffer (const u_char * name, u_char * buf, int count, int seg)
+ppp_print_buffer (const char *name, const __u8 *buf, int count)
 {
-       u_char line[44];
-       int old_fs = get_fs ();
+       __u8 line[44];
 
-       set_fs (seg);
+       if (name != NULL)
+               printk(KERN_DEBUG "ppp: %s, count = %d\n", name, count);
 
-       if (name != (u_char *) NULL) {
-               PRINTK ((KERN_DEBUG "ppp: %s, count = %d\n", name, count));
-       }
        while (count > 8) {
-               memset (line, ' ', sizeof (line));
+               memset (line, 32, 44);
                ppp_print_hex (line, buf, 8);
                ppp_print_char (&line[8 * 3], buf, 8);
-               PRINTK ((KERN_DEBUG "%s\n", line));
+               printk(KERN_DEBUG "%s\n", line);
                count -= 8;
                buf += 8;
        }
 
        if (count > 0) {
-               memset (line, ' ', sizeof (line));
+               memset (line, 32, 44);
                ppp_print_hex (line, buf, count);
                ppp_print_char (&line[8 * 3], buf, count);
-               PRINTK ((KERN_DEBUG "%s\n", line));
+               printk(KERN_DEBUG "%s\n", line);
+       }
+}
+
+/*************************************************************
+ * Compressor module interface
+ *************************************************************/
+
+struct compressor_link {
+       struct compressor_link  *next;
+       struct compressor       *comp;
+};
+
+static struct compressor_link *ppp_compressors = (struct compressor_link *) 0;
+
+static struct compressor *find_compressor (int type)
+{
+       struct compressor_link *lnk;
+       unsigned long flags;
+
+       save_flags(flags);
+       cli();
+
+       lnk = ppp_compressors;
+       while (lnk != (struct compressor_link *) 0) {
+               if ((int) (__u8) lnk->comp->compress_proto == type) {
+                       restore_flags(flags);
+                       return lnk->comp;
+               }
+               lnk = lnk->next;
+       }
+
+       restore_flags(flags);
+       return (struct compressor *) 0;
+}
+
+static int ppp_register_compressor (struct compressor *cp)
+{
+       struct compressor_link *new;
+       unsigned long flags;
+
+       new = (struct compressor_link *)
+               kmalloc (sizeof (struct compressor_link), GFP_KERNEL);
+
+       if (new == (struct compressor_link *) 0)
+               return 1;
+
+       save_flags(flags);
+       cli();
+
+       if (find_compressor (cp->compress_proto)) {
+               restore_flags(flags);
+               kfree (new);
+               return 0;
+       }
+
+       new->next       = ppp_compressors;
+       new->comp       = cp;
+       ppp_compressors = new;
+
+       restore_flags(flags);
+       return 0;
+}
+
+static void ppp_unregister_compressor (struct compressor *cp)
+{
+       struct compressor_link *prev = (struct compressor_link *) 0;
+       struct compressor_link *lnk;
+       unsigned long flags;
+
+       save_flags(flags);
+       cli();
+
+       lnk  = ppp_compressors;
+       while (lnk != (struct compressor_link *) 0) {
+               if (lnk->comp == cp) {
+                       if (prev)
+                               prev->next = lnk->next;
+                       else
+                               ppp_compressors = lnk->next;
+                       kfree (lnk);
+                       break;
+               }
+               prev = lnk;
+               lnk  = lnk->next;
+       }
+       restore_flags(flags);
+}
+
+/*************************************************************
+ * Module support routines
+ *************************************************************/
+
+#ifdef MODULE
+int
+init_module(void)
+{
+       int status;
+
+       /* register our line disciplines */
+       status = ppp_first_time();
+       if (status != 0)
+               printk(KERN_INFO "PPP: ppp_init() failure %d\n", status);
+#if LINUX_VERSION_CODE < VERSION(2,1,18)
+       else
+               (void) register_symtab (&ppp_syms);
+#endif
+
+       return status;
+}
+
+void
+cleanup_module(void)
+{
+       int status;
+       struct ppp *ppp, *next_ppp;
+       int busy = 0;
+
+       /*
+        * Ensure that the devices are not in operation.
+        */
+       for (ppp = ppp_list; ppp != 0; ppp = ppp->next) {
+               CHECK_PPP_MAGIC(ppp);
+               if (ppp->inuse || (ppp->dev.flags & IFF_UP))
+                       ++busy;
+       }
+       if (busy)
+               printk(KERN_CRIT "PPP: removing despite %d units in use!\n",
+                      busy);
+
+       /*
+        * Release the tty registration of the line discipline so that
+        * ttys can no longer be put into PPP line discipline.
+        */
+       status = tty_register_ldisc (N_PPP, NULL);
+       if (status != 0)
+               printk(KERN_ERR
+                      "PPP: Unable to unregister ppp line discipline "
+                      "(err = %d)\n", status);
+       else
+               printk(KERN_INFO
+                      "PPP: ppp line discipline successfully unregistered\n");
+
+       /*
+        * De-register the devices so that there is no problem with them
+        */
+       for (ppp = ppp_list; ppp != 0; ppp = next_ppp) {
+               next_ppp = ppp->next;
+               unregister_netdev(&ppp->dev);
+               kfree (ppp);
        }
-       set_fs (old_fs);
 }
+#endif