rose: Add length checks to CALL_REQUEST parsing
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / net / rose / af_rose.c
CommitLineData
1da177e4
LT
1/*
2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License as published by
4 * the Free Software Foundation; either version 2 of the License, or
5 * (at your option) any later version.
6 *
7 * Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
8 * Copyright (C) Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
9 * Copyright (C) Terry Dawson VK2KTJ (terry@animats.net)
10 * Copyright (C) Tomi Manninen OH2BNS (oh2bns@sral.fi)
11 */
4fc268d2 12
4fc268d2 13#include <linux/capability.h>
1da177e4
LT
14#include <linux/module.h>
15#include <linux/moduleparam.h>
16#include <linux/init.h>
17#include <linux/errno.h>
18#include <linux/types.h>
19#include <linux/socket.h>
20#include <linux/in.h>
5a0e3ad6 21#include <linux/slab.h>
1da177e4
LT
22#include <linux/kernel.h>
23#include <linux/sched.h>
24#include <linux/spinlock.h>
25#include <linux/timer.h>
26#include <linux/string.h>
27#include <linux/sockios.h>
28#include <linux/net.h>
29#include <linux/stat.h>
457c4cbc 30#include <net/net_namespace.h>
1da177e4
LT
31#include <net/ax25.h>
32#include <linux/inet.h>
33#include <linux/netdevice.h>
34#include <linux/if_arp.h>
35#include <linux/skbuff.h>
36#include <net/sock.h>
37#include <asm/system.h>
38#include <asm/uaccess.h>
39#include <linux/fcntl.h>
40#include <linux/termios.h>
41#include <linux/mm.h>
42#include <linux/interrupt.h>
43#include <linux/notifier.h>
44#include <net/rose.h>
45#include <linux/proc_fs.h>
46#include <linux/seq_file.h>
c752f073 47#include <net/tcp_states.h>
1da177e4
LT
48#include <net/ip.h>
49#include <net/arp.h>
50
51static int rose_ndevs = 10;
52
53int sysctl_rose_restart_request_timeout = ROSE_DEFAULT_T0;
54int sysctl_rose_call_request_timeout = ROSE_DEFAULT_T1;
55int sysctl_rose_reset_request_timeout = ROSE_DEFAULT_T2;
56int sysctl_rose_clear_request_timeout = ROSE_DEFAULT_T3;
57int sysctl_rose_no_activity_timeout = ROSE_DEFAULT_IDLE;
58int sysctl_rose_ack_hold_back_timeout = ROSE_DEFAULT_HB;
59int sysctl_rose_routing_control = ROSE_DEFAULT_ROUTING;
60int sysctl_rose_link_fail_timeout = ROSE_DEFAULT_FAIL_TIMEOUT;
61int sysctl_rose_maximum_vcs = ROSE_DEFAULT_MAXVC;
62int sysctl_rose_window_size = ROSE_DEFAULT_WINDOW_SIZE;
63
64static HLIST_HEAD(rose_list);
65static DEFINE_SPINLOCK(rose_list_lock);
66
5708e868 67static const struct proto_ops rose_proto_ops;
1da177e4
LT
68
69ax25_address rose_callsign;
70
b1d21ca8
RB
71/*
72 * ROSE network devices are virtual network devices encapsulating ROSE
73 * frames into AX.25 which will be sent through an AX.25 device, so form a
74 * special "super class" of normal net devices; split their locks off into a
75 * separate class since they always nest.
76 */
77static struct lock_class_key rose_netdev_xmit_lock_key;
cf508b12 78static struct lock_class_key rose_netdev_addr_lock_key;
b1d21ca8 79
e8a0464c
DM
80static void rose_set_lockdep_one(struct net_device *dev,
81 struct netdev_queue *txq,
82 void *_unused)
c773e847
DM
83{
84 lockdep_set_class(&txq->_xmit_lock, &rose_netdev_xmit_lock_key);
85}
86
87static void rose_set_lockdep_key(struct net_device *dev)
88{
cf508b12 89 lockdep_set_class(&dev->addr_list_lock, &rose_netdev_addr_lock_key);
e8a0464c 90 netdev_for_each_tx_queue(dev, rose_set_lockdep_one, NULL);
c773e847
DM
91}
92
1da177e4
LT
93/*
94 * Convert a ROSE address into text.
95 */
dcf777f6 96char *rose2asc(char *buf, const rose_address *addr)
1da177e4 97{
1da177e4
LT
98 if (addr->rose_addr[0] == 0x00 && addr->rose_addr[1] == 0x00 &&
99 addr->rose_addr[2] == 0x00 && addr->rose_addr[3] == 0x00 &&
100 addr->rose_addr[4] == 0x00) {
dcf777f6 101 strcpy(buf, "*");
1da177e4 102 } else {
dcf777f6 103 sprintf(buf, "%02X%02X%02X%02X%02X", addr->rose_addr[0] & 0xFF,
1da177e4
LT
104 addr->rose_addr[1] & 0xFF,
105 addr->rose_addr[2] & 0xFF,
106 addr->rose_addr[3] & 0xFF,
107 addr->rose_addr[4] & 0xFF);
108 }
109
dcf777f6 110 return buf;
1da177e4
LT
111}
112
113/*
114 * Compare two ROSE addresses, 0 == equal.
115 */
116int rosecmp(rose_address *addr1, rose_address *addr2)
117{
118 int i;
119
120 for (i = 0; i < 5; i++)
121 if (addr1->rose_addr[i] != addr2->rose_addr[i])
122 return 1;
123
124 return 0;
125}
126
127/*
128 * Compare two ROSE addresses for only mask digits, 0 == equal.
129 */
130int rosecmpm(rose_address *addr1, rose_address *addr2, unsigned short mask)
131{
95b7d924 132 unsigned int i, j;
1da177e4
LT
133
134 if (mask > 10)
135 return 1;
136
137 for (i = 0; i < mask; i++) {
138 j = i / 2;
139
140 if ((i % 2) != 0) {
141 if ((addr1->rose_addr[j] & 0x0F) != (addr2->rose_addr[j] & 0x0F))
142 return 1;
143 } else {
144 if ((addr1->rose_addr[j] & 0xF0) != (addr2->rose_addr[j] & 0xF0))
145 return 1;
146 }
147 }
148
149 return 0;
150}
151
152/*
153 * Socket removal during an interrupt is now safe.
154 */
155static void rose_remove_socket(struct sock *sk)
156{
157 spin_lock_bh(&rose_list_lock);
158 sk_del_node_init(sk);
159 spin_unlock_bh(&rose_list_lock);
160}
161
162/*
163 * Kill all bound sockets on a broken link layer connection to a
164 * particular neighbour.
165 */
166void rose_kill_by_neigh(struct rose_neigh *neigh)
167{
168 struct sock *s;
169 struct hlist_node *node;
170
171 spin_lock_bh(&rose_list_lock);
172 sk_for_each(s, node, &rose_list) {
173 struct rose_sock *rose = rose_sk(s);
174
175 if (rose->neighbour == neigh) {
176 rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
177 rose->neighbour->use--;
178 rose->neighbour = NULL;
179 }
180 }
181 spin_unlock_bh(&rose_list_lock);
182}
183
184/*
185 * Kill all bound sockets on a dropped device.
186 */
187static void rose_kill_by_device(struct net_device *dev)
188{
189 struct sock *s;
190 struct hlist_node *node;
191
192 spin_lock_bh(&rose_list_lock);
193 sk_for_each(s, node, &rose_list) {
194 struct rose_sock *rose = rose_sk(s);
195
196 if (rose->device == dev) {
197 rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
198 rose->neighbour->use--;
199 rose->device = NULL;
200 }
201 }
202 spin_unlock_bh(&rose_list_lock);
203}
204
205/*
206 * Handle device status changes.
207 */
208static int rose_device_event(struct notifier_block *this, unsigned long event,
209 void *ptr)
210{
211 struct net_device *dev = (struct net_device *)ptr;
212
721499e8 213 if (!net_eq(dev_net(dev), &init_net))
e9dc8653
EB
214 return NOTIFY_DONE;
215
1da177e4
LT
216 if (event != NETDEV_DOWN)
217 return NOTIFY_DONE;
218
219 switch (dev->type) {
220 case ARPHRD_ROSE:
221 rose_kill_by_device(dev);
222 break;
223 case ARPHRD_AX25:
224 rose_link_device_down(dev);
225 rose_rt_device_down(dev);
226 break;
227 }
228
229 return NOTIFY_DONE;
230}
231
232/*
233 * Add a socket to the bound sockets list.
234 */
235static void rose_insert_socket(struct sock *sk)
236{
237
238 spin_lock_bh(&rose_list_lock);
239 sk_add_node(sk, &rose_list);
240 spin_unlock_bh(&rose_list_lock);
241}
242
243/*
244 * Find a socket that wants to accept the Call Request we just
245 * received.
246 */
247static struct sock *rose_find_listener(rose_address *addr, ax25_address *call)
248{
249 struct sock *s;
250 struct hlist_node *node;
251
252 spin_lock_bh(&rose_list_lock);
253 sk_for_each(s, node, &rose_list) {
254 struct rose_sock *rose = rose_sk(s);
255
256 if (!rosecmp(&rose->source_addr, addr) &&
257 !ax25cmp(&rose->source_call, call) &&
258 !rose->source_ndigis && s->sk_state == TCP_LISTEN)
259 goto found;
260 }
261
262 sk_for_each(s, node, &rose_list) {
263 struct rose_sock *rose = rose_sk(s);
264
265 if (!rosecmp(&rose->source_addr, addr) &&
266 !ax25cmp(&rose->source_call, &null_ax25_address) &&
267 s->sk_state == TCP_LISTEN)
268 goto found;
269 }
270 s = NULL;
271found:
272 spin_unlock_bh(&rose_list_lock);
273 return s;
274}
275
276/*
277 * Find a connected ROSE socket given my LCI and device.
278 */
279struct sock *rose_find_socket(unsigned int lci, struct rose_neigh *neigh)
280{
281 struct sock *s;
282 struct hlist_node *node;
283
284 spin_lock_bh(&rose_list_lock);
285 sk_for_each(s, node, &rose_list) {
286 struct rose_sock *rose = rose_sk(s);
287
288 if (rose->lci == lci && rose->neighbour == neigh)
289 goto found;
290 }
291 s = NULL;
292found:
293 spin_unlock_bh(&rose_list_lock);
294 return s;
295}
296
297/*
298 * Find a unique LCI for a given device.
299 */
300unsigned int rose_new_lci(struct rose_neigh *neigh)
301{
302 int lci;
303
304 if (neigh->dce_mode) {
305 for (lci = 1; lci <= sysctl_rose_maximum_vcs; lci++)
306 if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
307 return lci;
308 } else {
309 for (lci = sysctl_rose_maximum_vcs; lci > 0; lci--)
310 if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
311 return lci;
312 }
313
314 return 0;
315}
316
317/*
318 * Deferred destroy.
319 */
320void rose_destroy_socket(struct sock *);
321
322/*
323 * Handler for deferred kills.
324 */
325static void rose_destroy_timer(unsigned long data)
326{
327 rose_destroy_socket((struct sock *)data);
328}
329
330/*
331 * This is called from user mode and the timers. Thus it protects itself
332 * against interrupt users but doesn't worry about being called during
333 * work. Once it is removed from the queue no interrupt or bottom half
334 * will touch it and we are (fairly 8-) ) safe.
335 */
336void rose_destroy_socket(struct sock *sk)
337{
338 struct sk_buff *skb;
339
340 rose_remove_socket(sk);
341 rose_stop_heartbeat(sk);
342 rose_stop_idletimer(sk);
343 rose_stop_timer(sk);
344
345 rose_clear_queues(sk); /* Flush the queues */
346
347 while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
348 if (skb->sk != sk) { /* A pending connection */
349 /* Queue the unaccepted socket for death */
350 sock_set_flag(skb->sk, SOCK_DEAD);
351 rose_start_heartbeat(skb->sk);
352 rose_sk(skb->sk)->state = ROSE_STATE_0;
353 }
354
355 kfree_skb(skb);
356 }
357
c564039f 358 if (sk_has_allocations(sk)) {
1da177e4 359 /* Defer: outstanding buffers */
b24b8a24
PE
360 setup_timer(&sk->sk_timer, rose_destroy_timer,
361 (unsigned long)sk);
1da177e4 362 sk->sk_timer.expires = jiffies + 10 * HZ;
1da177e4
LT
363 add_timer(&sk->sk_timer);
364 } else
365 sock_put(sk);
366}
367
368/*
369 * Handling for system calls applied via the various interfaces to a
370 * ROSE socket object.
371 */
372
373static int rose_setsockopt(struct socket *sock, int level, int optname,
b7058842 374 char __user *optval, unsigned int optlen)
1da177e4
LT
375{
376 struct sock *sk = sock->sk;
377 struct rose_sock *rose = rose_sk(sk);
378 int opt;
379
380 if (level != SOL_ROSE)
381 return -ENOPROTOOPT;
382
383 if (optlen < sizeof(int))
384 return -EINVAL;
385
386 if (get_user(opt, (int __user *)optval))
387 return -EFAULT;
388
389 switch (optname) {
390 case ROSE_DEFER:
391 rose->defer = opt ? 1 : 0;
392 return 0;
393
394 case ROSE_T1:
395 if (opt < 1)
396 return -EINVAL;
397 rose->t1 = opt * HZ;
398 return 0;
399
400 case ROSE_T2:
401 if (opt < 1)
402 return -EINVAL;
403 rose->t2 = opt * HZ;
404 return 0;
405
406 case ROSE_T3:
407 if (opt < 1)
408 return -EINVAL;
409 rose->t3 = opt * HZ;
410 return 0;
411
412 case ROSE_HOLDBACK:
413 if (opt < 1)
414 return -EINVAL;
415 rose->hb = opt * HZ;
416 return 0;
417
418 case ROSE_IDLE:
419 if (opt < 0)
420 return -EINVAL;
421 rose->idle = opt * 60 * HZ;
422 return 0;
423
424 case ROSE_QBITINCL:
425 rose->qbitincl = opt ? 1 : 0;
426 return 0;
427
428 default:
429 return -ENOPROTOOPT;
430 }
431}
432
433static int rose_getsockopt(struct socket *sock, int level, int optname,
434 char __user *optval, int __user *optlen)
435{
436 struct sock *sk = sock->sk;
437 struct rose_sock *rose = rose_sk(sk);
438 int val = 0;
439 int len;
440
441 if (level != SOL_ROSE)
442 return -ENOPROTOOPT;
443
444 if (get_user(len, optlen))
445 return -EFAULT;
446
447 if (len < 0)
448 return -EINVAL;
449
450 switch (optname) {
451 case ROSE_DEFER:
452 val = rose->defer;
453 break;
454
455 case ROSE_T1:
456 val = rose->t1 / HZ;
457 break;
458
459 case ROSE_T2:
460 val = rose->t2 / HZ;
461 break;
462
463 case ROSE_T3:
464 val = rose->t3 / HZ;
465 break;
466
467 case ROSE_HOLDBACK:
468 val = rose->hb / HZ;
469 break;
470
471 case ROSE_IDLE:
472 val = rose->idle / (60 * HZ);
473 break;
474
475 case ROSE_QBITINCL:
476 val = rose->qbitincl;
477 break;
478
479 default:
480 return -ENOPROTOOPT;
481 }
482
483 len = min_t(unsigned int, len, sizeof(int));
484
485 if (put_user(len, optlen))
486 return -EFAULT;
487
488 return copy_to_user(optval, &val, len) ? -EFAULT : 0;
489}
490
491static int rose_listen(struct socket *sock, int backlog)
492{
493 struct sock *sk = sock->sk;
494
495 if (sk->sk_state != TCP_LISTEN) {
496 struct rose_sock *rose = rose_sk(sk);
497
498 rose->dest_ndigis = 0;
499 memset(&rose->dest_addr, 0, ROSE_ADDR_LEN);
500 memset(&rose->dest_call, 0, AX25_ADDR_LEN);
501 memset(rose->dest_digis, 0, AX25_ADDR_LEN * ROSE_MAX_DIGIS);
502 sk->sk_max_ack_backlog = backlog;
503 sk->sk_state = TCP_LISTEN;
504 return 0;
505 }
506
507 return -EOPNOTSUPP;
508}
509
510static struct proto rose_proto = {
511 .name = "ROSE",
512 .owner = THIS_MODULE,
513 .obj_size = sizeof(struct rose_sock),
514};
515
3f378b68
EP
516static int rose_create(struct net *net, struct socket *sock, int protocol,
517 int kern)
1da177e4
LT
518{
519 struct sock *sk;
520 struct rose_sock *rose;
521
09ad9bc7 522 if (!net_eq(net, &init_net))
1b8d7ae4
EB
523 return -EAFNOSUPPORT;
524
1da177e4
LT
525 if (sock->type != SOCK_SEQPACKET || protocol != 0)
526 return -ESOCKTNOSUPPORT;
527
6257ff21
PE
528 sk = sk_alloc(net, PF_ROSE, GFP_ATOMIC, &rose_proto);
529 if (sk == NULL)
1da177e4
LT
530 return -ENOMEM;
531
532 rose = rose_sk(sk);
533
534 sock_init_data(sock, sk);
535
536 skb_queue_head_init(&rose->ack_queue);
537#ifdef M_BIT
538 skb_queue_head_init(&rose->frag_queue);
539 rose->fraglen = 0;
540#endif
541
542 sock->ops = &rose_proto_ops;
543 sk->sk_protocol = protocol;
544
545 init_timer(&rose->timer);
546 init_timer(&rose->idletimer);
547
82e84249
RB
548 rose->t1 = msecs_to_jiffies(sysctl_rose_call_request_timeout);
549 rose->t2 = msecs_to_jiffies(sysctl_rose_reset_request_timeout);
550 rose->t3 = msecs_to_jiffies(sysctl_rose_clear_request_timeout);
551 rose->hb = msecs_to_jiffies(sysctl_rose_ack_hold_back_timeout);
552 rose->idle = msecs_to_jiffies(sysctl_rose_no_activity_timeout);
1da177e4
LT
553
554 rose->state = ROSE_STATE_0;
555
556 return 0;
557}
558
559static struct sock *rose_make_new(struct sock *osk)
560{
561 struct sock *sk;
562 struct rose_sock *rose, *orose;
563
564 if (osk->sk_type != SOCK_SEQPACKET)
565 return NULL;
566
3b1e0a65 567 sk = sk_alloc(sock_net(osk), PF_ROSE, GFP_ATOMIC, &rose_proto);
6257ff21 568 if (sk == NULL)
1da177e4
LT
569 return NULL;
570
571 rose = rose_sk(sk);
572
573 sock_init_data(NULL, sk);
574
575 skb_queue_head_init(&rose->ack_queue);
576#ifdef M_BIT
577 skb_queue_head_init(&rose->frag_queue);
578 rose->fraglen = 0;
579#endif
580
581 sk->sk_type = osk->sk_type;
1da177e4
LT
582 sk->sk_priority = osk->sk_priority;
583 sk->sk_protocol = osk->sk_protocol;
584 sk->sk_rcvbuf = osk->sk_rcvbuf;
585 sk->sk_sndbuf = osk->sk_sndbuf;
586 sk->sk_state = TCP_ESTABLISHED;
53b924b3 587 sock_copy_flags(sk, osk);
1da177e4
LT
588
589 init_timer(&rose->timer);
590 init_timer(&rose->idletimer);
591
592 orose = rose_sk(osk);
593 rose->t1 = orose->t1;
594 rose->t2 = orose->t2;
595 rose->t3 = orose->t3;
596 rose->hb = orose->hb;
597 rose->idle = orose->idle;
598 rose->defer = orose->defer;
599 rose->device = orose->device;
600 rose->qbitincl = orose->qbitincl;
601
602 return sk;
603}
604
605static int rose_release(struct socket *sock)
606{
607 struct sock *sk = sock->sk;
608 struct rose_sock *rose;
609
610 if (sk == NULL) return 0;
611
4965291a
JP
612 sock_hold(sk);
613 sock_orphan(sk);
614 lock_sock(sk);
1da177e4
LT
615 rose = rose_sk(sk);
616
617 switch (rose->state) {
618 case ROSE_STATE_0:
4965291a 619 release_sock(sk);
1da177e4 620 rose_disconnect(sk, 0, -1, -1);
4965291a 621 lock_sock(sk);
1da177e4
LT
622 rose_destroy_socket(sk);
623 break;
624
625 case ROSE_STATE_2:
626 rose->neighbour->use--;
4965291a 627 release_sock(sk);
1da177e4 628 rose_disconnect(sk, 0, -1, -1);
4965291a 629 lock_sock(sk);
1da177e4
LT
630 rose_destroy_socket(sk);
631 break;
632
633 case ROSE_STATE_1:
634 case ROSE_STATE_3:
635 case ROSE_STATE_4:
636 case ROSE_STATE_5:
637 rose_clear_queues(sk);
638 rose_stop_idletimer(sk);
639 rose_write_internal(sk, ROSE_CLEAR_REQUEST);
640 rose_start_t3timer(sk);
641 rose->state = ROSE_STATE_2;
642 sk->sk_state = TCP_CLOSE;
643 sk->sk_shutdown |= SEND_SHUTDOWN;
644 sk->sk_state_change(sk);
645 sock_set_flag(sk, SOCK_DEAD);
646 sock_set_flag(sk, SOCK_DESTROY);
647 break;
648
649 default:
650 break;
651 }
652
653 sock->sk = NULL;
4965291a
JP
654 release_sock(sk);
655 sock_put(sk);
1da177e4
LT
656
657 return 0;
658}
659
660static int rose_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
661{
662 struct sock *sk = sock->sk;
663 struct rose_sock *rose = rose_sk(sk);
664 struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
665 struct net_device *dev;
01d7dd0e
RB
666 ax25_address *source;
667 ax25_uid_assoc *user;
1da177e4
LT
668 int n;
669
670 if (!sock_flag(sk, SOCK_ZAPPED))
671 return -EINVAL;
672
673 if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
674 return -EINVAL;
675
676 if (addr->srose_family != AF_ROSE)
677 return -EINVAL;
678
679 if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
680 return -EINVAL;
681
9828e6e6 682 if ((unsigned int) addr->srose_ndigis > ROSE_MAX_DIGIS)
1da177e4
LT
683 return -EINVAL;
684
685 if ((dev = rose_dev_get(&addr->srose_addr)) == NULL) {
686 SOCK_DEBUG(sk, "ROSE: bind failed: invalid address\n");
687 return -EADDRNOTAVAIL;
688 }
689
690 source = &addr->srose_call;
691
c2a2b8d3 692 user = ax25_findbyuid(current_euid());
01d7dd0e
RB
693 if (user) {
694 rose->source_call = user->call;
695 ax25_uid_put(user);
696 } else {
1da177e4
LT
697 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE))
698 return -EACCES;
01d7dd0e 699 rose->source_call = *source;
1da177e4
LT
700 }
701
702 rose->source_addr = addr->srose_addr;
1da177e4
LT
703 rose->device = dev;
704 rose->source_ndigis = addr->srose_ndigis;
705
706 if (addr_len == sizeof(struct full_sockaddr_rose)) {
707 struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
708 for (n = 0 ; n < addr->srose_ndigis ; n++)
709 rose->source_digis[n] = full_addr->srose_digis[n];
710 } else {
711 if (rose->source_ndigis == 1) {
712 rose->source_digis[0] = addr->srose_digi;
713 }
714 }
715
716 rose_insert_socket(sk);
717
718 sock_reset_flag(sk, SOCK_ZAPPED);
719 SOCK_DEBUG(sk, "ROSE: socket is bound\n");
720 return 0;
721}
722
723static int rose_connect(struct socket *sock, struct sockaddr *uaddr, int addr_len, int flags)
724{
725 struct sock *sk = sock->sk;
726 struct rose_sock *rose = rose_sk(sk);
727 struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
728 unsigned char cause, diagnostic;
1da177e4 729 struct net_device *dev;
01d7dd0e 730 ax25_uid_assoc *user;
2536b94a 731 int n, err = 0;
1da177e4
LT
732
733 if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
734 return -EINVAL;
735
736 if (addr->srose_family != AF_ROSE)
737 return -EINVAL;
738
739 if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
740 return -EINVAL;
741
9828e6e6 742 if ((unsigned int) addr->srose_ndigis > ROSE_MAX_DIGIS)
1da177e4
LT
743 return -EINVAL;
744
745 /* Source + Destination digis should not exceed ROSE_MAX_DIGIS */
746 if ((rose->source_ndigis + addr->srose_ndigis) > ROSE_MAX_DIGIS)
747 return -EINVAL;
748
2536b94a
RB
749 lock_sock(sk);
750
751 if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
752 /* Connect completed during a ERESTARTSYS event */
753 sock->state = SS_CONNECTED;
754 goto out_release;
755 }
756
757 if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
758 sock->state = SS_UNCONNECTED;
759 err = -ECONNREFUSED;
760 goto out_release;
761 }
762
763 if (sk->sk_state == TCP_ESTABLISHED) {
764 /* No reconnect on a seqpacket socket */
765 err = -EISCONN;
766 goto out_release;
767 }
768
769 sk->sk_state = TCP_CLOSE;
770 sock->state = SS_UNCONNECTED;
771
1da177e4 772 rose->neighbour = rose_get_neigh(&addr->srose_addr, &cause,
fe2c802a 773 &diagnostic, 0);
43837b1e
BP
774 if (!rose->neighbour) {
775 err = -ENETUNREACH;
776 goto out_release;
777 }
1da177e4
LT
778
779 rose->lci = rose_new_lci(rose->neighbour);
2536b94a
RB
780 if (!rose->lci) {
781 err = -ENETUNREACH;
782 goto out_release;
783 }
1da177e4
LT
784
785 if (sock_flag(sk, SOCK_ZAPPED)) { /* Must bind first - autobinding in this may or may not work */
786 sock_reset_flag(sk, SOCK_ZAPPED);
787
2536b94a
RB
788 if ((dev = rose_dev_first()) == NULL) {
789 err = -ENETUNREACH;
790 goto out_release;
791 }
1da177e4 792
c2a2b8d3 793 user = ax25_findbyuid(current_euid());
2536b94a
RB
794 if (!user) {
795 err = -EINVAL;
796 goto out_release;
797 }
1da177e4
LT
798
799 memcpy(&rose->source_addr, dev->dev_addr, ROSE_ADDR_LEN);
01d7dd0e 800 rose->source_call = user->call;
1da177e4 801 rose->device = dev;
01d7dd0e 802 ax25_uid_put(user);
1da177e4
LT
803
804 rose_insert_socket(sk); /* Finish the bind */
805 }
1da177e4
LT
806 rose->dest_addr = addr->srose_addr;
807 rose->dest_call = addr->srose_call;
808 rose->rand = ((long)rose & 0xFFFF) + rose->lci;
809 rose->dest_ndigis = addr->srose_ndigis;
810
811 if (addr_len == sizeof(struct full_sockaddr_rose)) {
812 struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
813 for (n = 0 ; n < addr->srose_ndigis ; n++)
814 rose->dest_digis[n] = full_addr->srose_digis[n];
815 } else {
816 if (rose->dest_ndigis == 1) {
817 rose->dest_digis[0] = addr->srose_digi;
818 }
819 }
820
821 /* Move to connecting socket, start sending Connect Requests */
822 sock->state = SS_CONNECTING;
823 sk->sk_state = TCP_SYN_SENT;
824
825 rose->state = ROSE_STATE_1;
826
827 rose->neighbour->use++;
828
829 rose_write_internal(sk, ROSE_CALL_REQUEST);
830 rose_start_heartbeat(sk);
831 rose_start_t1timer(sk);
832
833 /* Now the loop */
2536b94a
RB
834 if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
835 err = -EINPROGRESS;
836 goto out_release;
837 }
1da177e4
LT
838
839 /*
840 * A Connect Ack with Choke or timeout or failed routing will go to
841 * closed.
842 */
843 if (sk->sk_state == TCP_SYN_SENT) {
75606dc6 844 DEFINE_WAIT(wait);
1da177e4 845
1da177e4 846 for (;;) {
aa395145 847 prepare_to_wait(sk_sleep(sk), &wait,
6140efb5 848 TASK_INTERRUPTIBLE);
1da177e4
LT
849 if (sk->sk_state != TCP_SYN_SENT)
850 break;
75606dc6
RB
851 if (!signal_pending(current)) {
852 release_sock(sk);
1da177e4 853 schedule();
2536b94a 854 lock_sock(sk);
1da177e4
LT
855 continue;
856 }
75606dc6
RB
857 err = -ERESTARTSYS;
858 break;
1da177e4 859 }
aa395145 860 finish_wait(sk_sleep(sk), &wait);
75606dc6
RB
861
862 if (err)
863 goto out_release;
1da177e4
LT
864 }
865
866 if (sk->sk_state != TCP_ESTABLISHED) {
867 sock->state = SS_UNCONNECTED;
2536b94a
RB
868 err = sock_error(sk); /* Always set at this point */
869 goto out_release;
1da177e4
LT
870 }
871
872 sock->state = SS_CONNECTED;
873
2536b94a
RB
874out_release:
875 release_sock(sk);
876
877 return err;
1da177e4
LT
878}
879
880static int rose_accept(struct socket *sock, struct socket *newsock, int flags)
881{
1da177e4
LT
882 struct sk_buff *skb;
883 struct sock *newsk;
75606dc6 884 DEFINE_WAIT(wait);
1da177e4
LT
885 struct sock *sk;
886 int err = 0;
887
888 if ((sk = sock->sk) == NULL)
889 return -EINVAL;
890
891 lock_sock(sk);
892 if (sk->sk_type != SOCK_SEQPACKET) {
893 err = -EOPNOTSUPP;
75606dc6 894 goto out_release;
1da177e4
LT
895 }
896
897 if (sk->sk_state != TCP_LISTEN) {
898 err = -EINVAL;
75606dc6 899 goto out_release;
1da177e4
LT
900 }
901
902 /*
903 * The write queue this time is holding sockets ready to use
904 * hooked into the SABM we saved
905 */
1da177e4 906 for (;;) {
aa395145 907 prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
75606dc6 908
1da177e4
LT
909 skb = skb_dequeue(&sk->sk_receive_queue);
910 if (skb)
911 break;
912
1da177e4 913 if (flags & O_NONBLOCK) {
75606dc6
RB
914 err = -EWOULDBLOCK;
915 break;
1da177e4 916 }
75606dc6
RB
917 if (!signal_pending(current)) {
918 release_sock(sk);
1da177e4
LT
919 schedule();
920 lock_sock(sk);
921 continue;
922 }
75606dc6
RB
923 err = -ERESTARTSYS;
924 break;
1da177e4 925 }
aa395145 926 finish_wait(sk_sleep(sk), &wait);
75606dc6
RB
927 if (err)
928 goto out_release;
1da177e4
LT
929
930 newsk = skb->sk;
44ccff1f 931 sock_graft(newsk, newsock);
1da177e4
LT
932
933 /* Now attach up the new socket */
934 skb->sk = NULL;
935 kfree_skb(skb);
936 sk->sk_ack_backlog--;
1da177e4 937
75606dc6 938out_release:
1da177e4
LT
939 release_sock(sk);
940
941 return err;
942}
943
944static int rose_getname(struct socket *sock, struct sockaddr *uaddr,
945 int *uaddr_len, int peer)
946{
947 struct full_sockaddr_rose *srose = (struct full_sockaddr_rose *)uaddr;
948 struct sock *sk = sock->sk;
949 struct rose_sock *rose = rose_sk(sk);
950 int n;
951
17ac2e9c 952 memset(srose, 0, sizeof(*srose));
1da177e4
LT
953 if (peer != 0) {
954 if (sk->sk_state != TCP_ESTABLISHED)
955 return -ENOTCONN;
956 srose->srose_family = AF_ROSE;
957 srose->srose_addr = rose->dest_addr;
958 srose->srose_call = rose->dest_call;
959 srose->srose_ndigis = rose->dest_ndigis;
960 for (n = 0; n < rose->dest_ndigis; n++)
961 srose->srose_digis[n] = rose->dest_digis[n];
962 } else {
963 srose->srose_family = AF_ROSE;
964 srose->srose_addr = rose->source_addr;
965 srose->srose_call = rose->source_call;
966 srose->srose_ndigis = rose->source_ndigis;
967 for (n = 0; n < rose->source_ndigis; n++)
968 srose->srose_digis[n] = rose->source_digis[n];
969 }
970
971 *uaddr_len = sizeof(struct full_sockaddr_rose);
972 return 0;
973}
974
975int rose_rx_call_request(struct sk_buff *skb, struct net_device *dev, struct rose_neigh *neigh, unsigned int lci)
976{
977 struct sock *sk;
978 struct sock *make;
979 struct rose_sock *make_rose;
980 struct rose_facilities_struct facilities;
e0bccd31 981 int n;
1da177e4
LT
982
983 skb->sk = NULL; /* Initially we don't know who it's for */
984
985 /*
986 * skb->data points to the rose frame start
987 */
988 memset(&facilities, 0x00, sizeof(struct rose_facilities_struct));
989
e0bccd31
BH
990 if (!rose_parse_facilities(skb->data + ROSE_CALL_REQ_FACILITIES_OFF,
991 skb->len - ROSE_CALL_REQ_FACILITIES_OFF,
992 &facilities)) {
1da177e4
LT
993 rose_transmit_clear_request(neigh, lci, ROSE_INVALID_FACILITY, 76);
994 return 0;
995 }
996
997 sk = rose_find_listener(&facilities.source_addr, &facilities.source_call);
998
999 /*
1000 * We can't accept the Call Request.
1001 */
1002 if (sk == NULL || sk_acceptq_is_full(sk) ||
1003 (make = rose_make_new(sk)) == NULL) {
1004 rose_transmit_clear_request(neigh, lci, ROSE_NETWORK_CONGESTION, 120);
1005 return 0;
1006 }
1007
1008 skb->sk = make;
1009 make->sk_state = TCP_ESTABLISHED;
1010 make_rose = rose_sk(make);
1011
1012 make_rose->lci = lci;
1013 make_rose->dest_addr = facilities.dest_addr;
1014 make_rose->dest_call = facilities.dest_call;
1015 make_rose->dest_ndigis = facilities.dest_ndigis;
1016 for (n = 0 ; n < facilities.dest_ndigis ; n++)
1017 make_rose->dest_digis[n] = facilities.dest_digis[n];
1018 make_rose->source_addr = facilities.source_addr;
1019 make_rose->source_call = facilities.source_call;
1020 make_rose->source_ndigis = facilities.source_ndigis;
1021 for (n = 0 ; n < facilities.source_ndigis ; n++)
1022 make_rose->source_digis[n]= facilities.source_digis[n];
1023 make_rose->neighbour = neigh;
1024 make_rose->device = dev;
1025 make_rose->facilities = facilities;
1026
1027 make_rose->neighbour->use++;
1028
1029 if (rose_sk(sk)->defer) {
1030 make_rose->state = ROSE_STATE_5;
1031 } else {
1032 rose_write_internal(make, ROSE_CALL_ACCEPTED);
1033 make_rose->state = ROSE_STATE_3;
1034 rose_start_idletimer(make);
1035 }
1036
1037 make_rose->condition = 0x00;
1038 make_rose->vs = 0;
1039 make_rose->va = 0;
1040 make_rose->vr = 0;
1041 make_rose->vl = 0;
1042 sk->sk_ack_backlog++;
1043
1044 rose_insert_socket(make);
1045
1046 skb_queue_head(&sk->sk_receive_queue, skb);
1047
1048 rose_start_heartbeat(make);
1049
1050 if (!sock_flag(sk, SOCK_DEAD))
1051 sk->sk_data_ready(sk, skb->len);
1052
1053 return 1;
1054}
1055
1056static int rose_sendmsg(struct kiocb *iocb, struct socket *sock,
1057 struct msghdr *msg, size_t len)
1058{
1059 struct sock *sk = sock->sk;
1060 struct rose_sock *rose = rose_sk(sk);
1061 struct sockaddr_rose *usrose = (struct sockaddr_rose *)msg->msg_name;
1062 int err;
1063 struct full_sockaddr_rose srose;
1064 struct sk_buff *skb;
1065 unsigned char *asmptr;
1066 int n, size, qbit = 0;
1067
1068 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1069 return -EINVAL;
1070
1071 if (sock_flag(sk, SOCK_ZAPPED))
1072 return -EADDRNOTAVAIL;
1073
1074 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1075 send_sig(SIGPIPE, current, 0);
1076 return -EPIPE;
1077 }
1078
1079 if (rose->neighbour == NULL || rose->device == NULL)
1080 return -ENETUNREACH;
1081
1082 if (usrose != NULL) {
1083 if (msg->msg_namelen != sizeof(struct sockaddr_rose) && msg->msg_namelen != sizeof(struct full_sockaddr_rose))
1084 return -EINVAL;
1085 memset(&srose, 0, sizeof(struct full_sockaddr_rose));
1086 memcpy(&srose, usrose, msg->msg_namelen);
1087 if (rosecmp(&rose->dest_addr, &srose.srose_addr) != 0 ||
1088 ax25cmp(&rose->dest_call, &srose.srose_call) != 0)
1089 return -EISCONN;
1090 if (srose.srose_ndigis != rose->dest_ndigis)
1091 return -EISCONN;
1092 if (srose.srose_ndigis == rose->dest_ndigis) {
1093 for (n = 0 ; n < srose.srose_ndigis ; n++)
1094 if (ax25cmp(&rose->dest_digis[n],
1095 &srose.srose_digis[n]))
1096 return -EISCONN;
1097 }
1098 if (srose.srose_family != AF_ROSE)
1099 return -EINVAL;
1100 } else {
1101 if (sk->sk_state != TCP_ESTABLISHED)
1102 return -ENOTCONN;
1103
1104 srose.srose_family = AF_ROSE;
1105 srose.srose_addr = rose->dest_addr;
1106 srose.srose_call = rose->dest_call;
1107 srose.srose_ndigis = rose->dest_ndigis;
1108 for (n = 0 ; n < rose->dest_ndigis ; n++)
1109 srose.srose_digis[n] = rose->dest_digis[n];
1110 }
1111
1112 SOCK_DEBUG(sk, "ROSE: sendto: Addresses built.\n");
1113
1114 /* Build a packet */
1115 SOCK_DEBUG(sk, "ROSE: sendto: building packet.\n");
83e0bbcb
AC
1116 /* Sanity check the packet size */
1117 if (len > 65535)
1118 return -EMSGSIZE;
1119
1da177e4
LT
1120 size = len + AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN;
1121
1122 if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1123 return err;
1124
1125 skb_reserve(skb, AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN);
1126
1127 /*
1128 * Put the data on the end
1129 */
1130 SOCK_DEBUG(sk, "ROSE: Appending user data\n");
1131
eeeb0374
ACM
1132 skb_reset_transport_header(skb);
1133 skb_put(skb, len);
1da177e4 1134
eeeb0374 1135 err = memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len);
1da177e4
LT
1136 if (err) {
1137 kfree_skb(skb);
1138 return err;
1139 }
1140
1141 /*
1142 * If the Q BIT Include socket option is in force, the first
1143 * byte of the user data is the logical value of the Q Bit.
1144 */
1145 if (rose->qbitincl) {
1146 qbit = skb->data[0];
1147 skb_pull(skb, 1);
1148 }
1149
1150 /*
1151 * Push down the ROSE header
1152 */
1153 asmptr = skb_push(skb, ROSE_MIN_LEN);
1154
1155 SOCK_DEBUG(sk, "ROSE: Building Network Header.\n");
1156
1157 /* Build a ROSE Network header */
1158 asmptr[0] = ((rose->lci >> 8) & 0x0F) | ROSE_GFI;
1159 asmptr[1] = (rose->lci >> 0) & 0xFF;
1160 asmptr[2] = ROSE_DATA;
1161
1162 if (qbit)
1163 asmptr[0] |= ROSE_Q_BIT;
1164
1165 SOCK_DEBUG(sk, "ROSE: Built header.\n");
1166
1167 SOCK_DEBUG(sk, "ROSE: Transmitting buffer\n");
1168
1169 if (sk->sk_state != TCP_ESTABLISHED) {
1170 kfree_skb(skb);
1171 return -ENOTCONN;
1172 }
1173
1174#ifdef M_BIT
1175#define ROSE_PACLEN (256-ROSE_MIN_LEN)
1176 if (skb->len - ROSE_MIN_LEN > ROSE_PACLEN) {
1177 unsigned char header[ROSE_MIN_LEN];
1178 struct sk_buff *skbn;
1179 int frontlen;
1180 int lg;
1181
1182 /* Save a copy of the Header */
d626f62b 1183 skb_copy_from_linear_data(skb, header, ROSE_MIN_LEN);
1da177e4
LT
1184 skb_pull(skb, ROSE_MIN_LEN);
1185
1186 frontlen = skb_headroom(skb);
1187
1188 while (skb->len > 0) {
1189 if ((skbn = sock_alloc_send_skb(sk, frontlen + ROSE_PACLEN, 0, &err)) == NULL) {
1190 kfree_skb(skb);
1191 return err;
1192 }
1193
1194 skbn->sk = sk;
1195 skbn->free = 1;
1196 skbn->arp = 1;
1197
1198 skb_reserve(skbn, frontlen);
1199
1200 lg = (ROSE_PACLEN > skb->len) ? skb->len : ROSE_PACLEN;
1201
1202 /* Copy the user data */
d626f62b 1203 skb_copy_from_linear_data(skb, skb_put(skbn, lg), lg);
1da177e4
LT
1204 skb_pull(skb, lg);
1205
1206 /* Duplicate the Header */
1207 skb_push(skbn, ROSE_MIN_LEN);
27d7ff46 1208 skb_copy_to_linear_data(skbn, header, ROSE_MIN_LEN);
1da177e4
LT
1209
1210 if (skb->len > 0)
1211 skbn->data[2] |= M_BIT;
1212
1213 skb_queue_tail(&sk->sk_write_queue, skbn); /* Throw it on the queue */
1214 }
1215
1216 skb->free = 1;
1217 kfree_skb(skb);
1218 } else {
1219 skb_queue_tail(&sk->sk_write_queue, skb); /* Throw it on the queue */
1220 }
1221#else
1222 skb_queue_tail(&sk->sk_write_queue, skb); /* Shove it onto the queue */
1223#endif
1224
1225 rose_kick(sk);
1226
1227 return len;
1228}
1229
1230
1231static int rose_recvmsg(struct kiocb *iocb, struct socket *sock,
1232 struct msghdr *msg, size_t size, int flags)
1233{
1234 struct sock *sk = sock->sk;
1235 struct rose_sock *rose = rose_sk(sk);
1236 struct sockaddr_rose *srose = (struct sockaddr_rose *)msg->msg_name;
1237 size_t copied;
1238 unsigned char *asmptr;
1239 struct sk_buff *skb;
1240 int n, er, qbit;
1241
1242 /*
1243 * This works for seqpacket too. The receiver has ordered the queue for
1244 * us! We do one quick check first though
1245 */
1246 if (sk->sk_state != TCP_ESTABLISHED)
1247 return -ENOTCONN;
1248
1249 /* Now we can treat all alike */
1250 if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL)
1251 return er;
1252
1253 qbit = (skb->data[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
1254
1255 skb_pull(skb, ROSE_MIN_LEN);
1256
1257 if (rose->qbitincl) {
1258 asmptr = skb_push(skb, 1);
1259 *asmptr = qbit;
1260 }
1261
badff6d0 1262 skb_reset_transport_header(skb);
1da177e4
LT
1263 copied = skb->len;
1264
1265 if (copied > size) {
1266 copied = size;
1267 msg->msg_flags |= MSG_TRUNC;
1268 }
1269
1270 skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1271
1272 if (srose != NULL) {
1273 srose->srose_family = AF_ROSE;
1274 srose->srose_addr = rose->dest_addr;
1275 srose->srose_call = rose->dest_call;
1276 srose->srose_ndigis = rose->dest_ndigis;
1277 if (msg->msg_namelen >= sizeof(struct full_sockaddr_rose)) {
1278 struct full_sockaddr_rose *full_srose = (struct full_sockaddr_rose *)msg->msg_name;
1279 for (n = 0 ; n < rose->dest_ndigis ; n++)
1280 full_srose->srose_digis[n] = rose->dest_digis[n];
1281 msg->msg_namelen = sizeof(struct full_sockaddr_rose);
1282 } else {
1283 if (rose->dest_ndigis >= 1) {
1284 srose->srose_ndigis = 1;
1285 srose->srose_digi = rose->dest_digis[0];
1286 }
1287 msg->msg_namelen = sizeof(struct sockaddr_rose);
1288 }
1289 }
1290
1291 skb_free_datagram(sk, skb);
1292
1293 return copied;
1294}
1295
1296
1297static int rose_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1298{
1299 struct sock *sk = sock->sk;
1300 struct rose_sock *rose = rose_sk(sk);
1301 void __user *argp = (void __user *)arg;
1302
1303 switch (cmd) {
1304 case TIOCOUTQ: {
1305 long amount;
31e6d363
ED
1306
1307 amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1da177e4
LT
1308 if (amount < 0)
1309 amount = 0;
20b7d10a 1310 return put_user(amount, (unsigned int __user *) argp);
1da177e4
LT
1311 }
1312
1313 case TIOCINQ: {
1314 struct sk_buff *skb;
1315 long amount = 0L;
1316 /* These two are safe on a single CPU system as only user tasks fiddle here */
1317 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1318 amount = skb->len;
20b7d10a 1319 return put_user(amount, (unsigned int __user *) argp);
1da177e4
LT
1320 }
1321
1322 case SIOCGSTAMP:
20b7d10a 1323 return sock_get_timestamp(sk, (struct timeval __user *) argp);
1da177e4 1324
ae40eb1e
ED
1325 case SIOCGSTAMPNS:
1326 return sock_get_timestampns(sk, (struct timespec __user *) argp);
1327
1da177e4
LT
1328 case SIOCGIFADDR:
1329 case SIOCSIFADDR:
1330 case SIOCGIFDSTADDR:
1331 case SIOCSIFDSTADDR:
1332 case SIOCGIFBRDADDR:
1333 case SIOCSIFBRDADDR:
1334 case SIOCGIFNETMASK:
1335 case SIOCSIFNETMASK:
1336 case SIOCGIFMETRIC:
1337 case SIOCSIFMETRIC:
1338 return -EINVAL;
1339
1340 case SIOCADDRT:
1341 case SIOCDELRT:
1342 case SIOCRSCLRRT:
1343 if (!capable(CAP_NET_ADMIN))
1344 return -EPERM;
1345 return rose_rt_ioctl(cmd, argp);
1346
1347 case SIOCRSGCAUSE: {
1348 struct rose_cause_struct rose_cause;
1349 rose_cause.cause = rose->cause;
1350 rose_cause.diagnostic = rose->diagnostic;
1351 return copy_to_user(argp, &rose_cause, sizeof(struct rose_cause_struct)) ? -EFAULT : 0;
1352 }
1353
1354 case SIOCRSSCAUSE: {
1355 struct rose_cause_struct rose_cause;
1356 if (copy_from_user(&rose_cause, argp, sizeof(struct rose_cause_struct)))
1357 return -EFAULT;
1358 rose->cause = rose_cause.cause;
1359 rose->diagnostic = rose_cause.diagnostic;
1360 return 0;
1361 }
1362
1363 case SIOCRSSL2CALL:
1364 if (!capable(CAP_NET_ADMIN)) return -EPERM;
1365 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1366 ax25_listen_release(&rose_callsign, NULL);
1367 if (copy_from_user(&rose_callsign, argp, sizeof(ax25_address)))
1368 return -EFAULT;
1369 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
81dcd169
RB
1370 return ax25_listen_register(&rose_callsign, NULL);
1371
1da177e4
LT
1372 return 0;
1373
1374 case SIOCRSGL2CALL:
1375 return copy_to_user(argp, &rose_callsign, sizeof(ax25_address)) ? -EFAULT : 0;
1376
1377 case SIOCRSACCEPT:
1378 if (rose->state == ROSE_STATE_5) {
1379 rose_write_internal(sk, ROSE_CALL_ACCEPTED);
1380 rose_start_idletimer(sk);
1381 rose->condition = 0x00;
1382 rose->vs = 0;
1383 rose->va = 0;
1384 rose->vr = 0;
1385 rose->vl = 0;
1386 rose->state = ROSE_STATE_3;
1387 }
1388 return 0;
1389
1390 default:
b5e5fa5e 1391 return -ENOIOCTLCMD;
1da177e4
LT
1392 }
1393
1394 return 0;
1395}
1396
1397#ifdef CONFIG_PROC_FS
1398static void *rose_info_start(struct seq_file *seq, loff_t *pos)
95b7d924 1399 __acquires(rose_list_lock)
1da177e4 1400{
1da177e4 1401 spin_lock_bh(&rose_list_lock);
b999748a 1402 return seq_hlist_start_head(&rose_list, *pos);
1da177e4
LT
1403}
1404
1405static void *rose_info_next(struct seq_file *seq, void *v, loff_t *pos)
1406{
b999748a 1407 return seq_hlist_next(v, &rose_list, pos);
1da177e4 1408}
3dcf7c5e 1409
1da177e4 1410static void rose_info_stop(struct seq_file *seq, void *v)
95b7d924 1411 __releases(rose_list_lock)
1da177e4
LT
1412{
1413 spin_unlock_bh(&rose_list_lock);
1414}
1415
1416static int rose_info_show(struct seq_file *seq, void *v)
1417{
dcf777f6 1418 char buf[11], rsbuf[11];
f75268cd 1419
1da177e4 1420 if (v == SEQ_START_TOKEN)
3dcf7c5e 1421 seq_puts(seq,
1da177e4
LT
1422 "dest_addr dest_call src_addr src_call dev lci neigh st vs vr va t t1 t2 t3 hb idle Snd-Q Rcv-Q inode\n");
1423
1424 else {
b999748a 1425 struct sock *s = sk_entry(v);
1da177e4
LT
1426 struct rose_sock *rose = rose_sk(s);
1427 const char *devname, *callsign;
1428 const struct net_device *dev = rose->device;
1429
1430 if (!dev)
1431 devname = "???";
1432 else
1433 devname = dev->name;
3dcf7c5e 1434
1da177e4 1435 seq_printf(seq, "%-10s %-9s ",
dcf777f6
RB
1436 rose2asc(rsbuf, &rose->dest_addr),
1437 ax2asc(buf, &rose->dest_call));
1da177e4
LT
1438
1439 if (ax25cmp(&rose->source_call, &null_ax25_address) == 0)
1440 callsign = "??????-?";
1441 else
f75268cd 1442 callsign = ax2asc(buf, &rose->source_call);
1da177e4
LT
1443
1444 seq_printf(seq,
1445 "%-10s %-9s %-5s %3.3X %05d %d %d %d %d %3lu %3lu %3lu %3lu %3lu %3lu/%03lu %5d %5d %ld\n",
dcf777f6 1446 rose2asc(rsbuf, &rose->source_addr),
1da177e4
LT
1447 callsign,
1448 devname,
1449 rose->lci & 0x0FFF,
1450 (rose->neighbour) ? rose->neighbour->number : 0,
1451 rose->state,
1452 rose->vs,
1453 rose->vr,
1454 rose->va,
1455 ax25_display_timer(&rose->timer) / HZ,
1456 rose->t1 / HZ,
1457 rose->t2 / HZ,
1458 rose->t3 / HZ,
1459 rose->hb / HZ,
1460 ax25_display_timer(&rose->idletimer) / (60 * HZ),
1461 rose->idle / (60 * HZ),
31e6d363
ED
1462 sk_wmem_alloc_get(s),
1463 sk_rmem_alloc_get(s),
1da177e4
LT
1464 s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1465 }
1466
1467 return 0;
1468}
1469
56b3d975 1470static const struct seq_operations rose_info_seqops = {
1da177e4
LT
1471 .start = rose_info_start,
1472 .next = rose_info_next,
1473 .stop = rose_info_stop,
1474 .show = rose_info_show,
1475};
1476
1477static int rose_info_open(struct inode *inode, struct file *file)
1478{
1479 return seq_open(file, &rose_info_seqops);
1480}
1481
da7071d7 1482static const struct file_operations rose_info_fops = {
1da177e4
LT
1483 .owner = THIS_MODULE,
1484 .open = rose_info_open,
1485 .read = seq_read,
1486 .llseek = seq_lseek,
1487 .release = seq_release,
1488};
1489#endif /* CONFIG_PROC_FS */
1490
ec1b4cf7 1491static const struct net_proto_family rose_family_ops = {
1da177e4
LT
1492 .family = PF_ROSE,
1493 .create = rose_create,
1494 .owner = THIS_MODULE,
1495};
1496
5708e868 1497static const struct proto_ops rose_proto_ops = {
1da177e4
LT
1498 .family = PF_ROSE,
1499 .owner = THIS_MODULE,
1500 .release = rose_release,
1501 .bind = rose_bind,
1502 .connect = rose_connect,
1503 .socketpair = sock_no_socketpair,
1504 .accept = rose_accept,
1505 .getname = rose_getname,
1506 .poll = datagram_poll,
1507 .ioctl = rose_ioctl,
1508 .listen = rose_listen,
1509 .shutdown = sock_no_shutdown,
1510 .setsockopt = rose_setsockopt,
1511 .getsockopt = rose_getsockopt,
1512 .sendmsg = rose_sendmsg,
1513 .recvmsg = rose_recvmsg,
1514 .mmap = sock_no_mmap,
1515 .sendpage = sock_no_sendpage,
1516};
1517
1518static struct notifier_block rose_dev_notifier = {
1519 .notifier_call = rose_device_event,
1520};
1521
1522static struct net_device **dev_rose;
1523
8d5cf596
RB
1524static struct ax25_protocol rose_pid = {
1525 .pid = AX25_P_ROSE,
1526 .func = rose_route_frame
1527};
1528
a4282717
RB
1529static struct ax25_linkfail rose_linkfail_notifier = {
1530 .func = rose_link_failed
1531};
1532
1da177e4
LT
1533static int __init rose_proto_init(void)
1534{
1535 int i;
a83cd2cc 1536 int rc;
1da177e4 1537
a83cd2cc
AD
1538 if (rose_ndevs > 0x7FFFFFFF/sizeof(struct net_device *)) {
1539 printk(KERN_ERR "ROSE: rose_proto_init - rose_ndevs parameter to large\n");
1540 rc = -EINVAL;
1541 goto out;
1542 }
1543
1544 rc = proto_register(&rose_proto, 0);
1da177e4
LT
1545 if (rc != 0)
1546 goto out;
1547
1548 rose_callsign = null_ax25_address;
1549
1b30dd35 1550 dev_rose = kzalloc(rose_ndevs * sizeof(struct net_device *), GFP_KERNEL);
1da177e4
LT
1551 if (dev_rose == NULL) {
1552 printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate device structure\n");
a83cd2cc
AD
1553 rc = -ENOMEM;
1554 goto out_proto_unregister;
1da177e4
LT
1555 }
1556
1da177e4
LT
1557 for (i = 0; i < rose_ndevs; i++) {
1558 struct net_device *dev;
1559 char name[IFNAMSIZ];
1560
1561 sprintf(name, "rose%d", i);
d289d120 1562 dev = alloc_netdev(0, name, rose_setup);
1da177e4
LT
1563 if (!dev) {
1564 printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate memory\n");
70ff3b66 1565 rc = -ENOMEM;
1da177e4
LT
1566 goto fail;
1567 }
70ff3b66
AD
1568 rc = register_netdev(dev);
1569 if (rc) {
520d1b83 1570 printk(KERN_ERR "ROSE: netdevice registration failed\n");
1da177e4
LT
1571 free_netdev(dev);
1572 goto fail;
1573 }
c773e847 1574 rose_set_lockdep_key(dev);
1da177e4
LT
1575 dev_rose[i] = dev;
1576 }
1577
1578 sock_register(&rose_family_ops);
1579 register_netdevice_notifier(&rose_dev_notifier);
1da177e4 1580
8d5cf596 1581 ax25_register_pid(&rose_pid);
a4282717 1582 ax25_linkfail_register(&rose_linkfail_notifier);
1da177e4
LT
1583
1584#ifdef CONFIG_SYSCTL
1585 rose_register_sysctl();
1586#endif
1587 rose_loopback_init();
1588
1589 rose_add_loopback_neigh();
1590
457c4cbc
EB
1591 proc_net_fops_create(&init_net, "rose", S_IRUGO, &rose_info_fops);
1592 proc_net_fops_create(&init_net, "rose_neigh", S_IRUGO, &rose_neigh_fops);
1593 proc_net_fops_create(&init_net, "rose_nodes", S_IRUGO, &rose_nodes_fops);
1594 proc_net_fops_create(&init_net, "rose_routes", S_IRUGO, &rose_routes_fops);
1da177e4
LT
1595out:
1596 return rc;
1597fail:
1598 while (--i >= 0) {
1599 unregister_netdev(dev_rose[i]);
1600 free_netdev(dev_rose[i]);
1601 }
1602 kfree(dev_rose);
a83cd2cc 1603out_proto_unregister:
1da177e4 1604 proto_unregister(&rose_proto);
70ff3b66 1605 goto out;
1da177e4
LT
1606}
1607module_init(rose_proto_init);
1608
1609module_param(rose_ndevs, int, 0);
1610MODULE_PARM_DESC(rose_ndevs, "number of ROSE devices");
1611
1612MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1613MODULE_DESCRIPTION("The amateur radio ROSE network layer protocol");
1614MODULE_LICENSE("GPL");
1615MODULE_ALIAS_NETPROTO(PF_ROSE);
1616
1617static void __exit rose_exit(void)
1618{
1619 int i;
1620
457c4cbc
EB
1621 proc_net_remove(&init_net, "rose");
1622 proc_net_remove(&init_net, "rose_neigh");
1623 proc_net_remove(&init_net, "rose_nodes");
1624 proc_net_remove(&init_net, "rose_routes");
1da177e4
LT
1625 rose_loopback_clear();
1626
1627 rose_rt_free();
1628
1629 ax25_protocol_release(AX25_P_ROSE);
a4282717 1630 ax25_linkfail_release(&rose_linkfail_notifier);
1da177e4
LT
1631
1632 if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1633 ax25_listen_release(&rose_callsign, NULL);
1634
1635#ifdef CONFIG_SYSCTL
1636 rose_unregister_sysctl();
1637#endif
1638 unregister_netdevice_notifier(&rose_dev_notifier);
1639
1640 sock_unregister(PF_ROSE);
1641
1642 for (i = 0; i < rose_ndevs; i++) {
1643 struct net_device *dev = dev_rose[i];
1644
1645 if (dev) {
1646 unregister_netdev(dev);
1647 free_netdev(dev);
1648 }
1649 }
1650
1651 kfree(dev_rose);
1652 proto_unregister(&rose_proto);
1653}
1654
1655module_exit(rose_exit);