af_x25.c 40.6 KB
Newer Older
Linus Torvalds's avatar
Linus Torvalds committed
1
2
3
4
5
/*
 *	X.25 Packet Layer release 002
 *
 *	This is ALPHA test software. This code may break your machine,
 *	randomly fail to work with new releases, misbehave and/or generally
6
 *	screw up. It might even work.
Linus Torvalds's avatar
Linus Torvalds committed
7
8
9
10
11
12
13
14
15
16
17
18
19
20
 *
 *	This code REQUIRES 2.1.15 or higher
 *
 *	This module:
 *		This module is free software; you can redistribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 *	History
 *	X.25 001	Jonathan Naylor	Started coding.
 *	X.25 002	Jonathan Naylor	Centralised disconnect handling.
 *					New timer architecture.
 *	2000-03-11	Henner Eisen	MSG_EOR handling more POSIX compliant.
21
22
 *	2000-03-22	Daniela Squassoni Allowed disabling/enabling of
 *					  facilities negotiation and increased
Linus Torvalds's avatar
Linus Torvalds committed
23
24
 *					  the throughput upper limit.
 *	2000-08-27	Arnaldo C. Melo s/suser/capable/ + micro cleanups
25
 *	2000-09-04	Henner Eisen	Set sock->state in x25_accept().
Linus Torvalds's avatar
Linus Torvalds committed
26
27
28
29
30
31
 *					Fixed x25_output() related skb leakage.
 *	2000-10-02	Henner Eisen	Made x25_kick() single threaded per socket.
 *	2000-10-27	Henner Eisen    MSG_DONTWAIT for fragment allocation.
 *	2000-11-14	Henner Eisen    Closing datalink from NETDEV_GOING_DOWN
 *	2002-10-06	Arnaldo C. Melo Get rid of cli/sti, move proc stuff to
 *					x25_proc.c, using seq_file
32
33
 *	2005-04-02	Shaun Pereira	Selective sub address matching
 *					with call user data
34
35
 *	2005-04-15	Shaun Pereira	Fast select with no restriction on
 *					response
Linus Torvalds's avatar
Linus Torvalds committed
36
37
 */

38
39
#define pr_fmt(fmt) "X25: " fmt

Linus Torvalds's avatar
Linus Torvalds committed
40
#include <linux/module.h>
41
#include <linux/capability.h>
Linus Torvalds's avatar
Linus Torvalds committed
42
43
44
45
46
47
48
49
50
#include <linux/errno.h>
#include <linux/kernel.h>
#include <linux/sched.h>
#include <linux/timer.h>
#include <linux/string.h>
#include <linux/net.h>
#include <linux/netdevice.h>
#include <linux/if_arp.h>
#include <linux/skbuff.h>
51
#include <linux/slab.h>
Linus Torvalds's avatar
Linus Torvalds committed
52
#include <net/sock.h>
53
#include <net/tcp_states.h>
Linus Torvalds's avatar
Linus Torvalds committed
54
55
56
57
58
#include <asm/uaccess.h>
#include <linux/fcntl.h>
#include <linux/termios.h>	/* For TIOCINQ/OUTQ */
#include <linux/notifier.h>
#include <linux/init.h>
59
#include <linux/compat.h>
60
#include <linux/ctype.h>
61

Linus Torvalds's avatar
Linus Torvalds committed
62
#include <net/x25.h>
63
#include <net/compat.h>
Linus Torvalds's avatar
Linus Torvalds committed
64
65
66
67
68
69

int sysctl_x25_restart_request_timeout = X25_DEFAULT_T20;
int sysctl_x25_call_request_timeout    = X25_DEFAULT_T21;
int sysctl_x25_reset_request_timeout   = X25_DEFAULT_T22;
int sysctl_x25_clear_request_timeout   = X25_DEFAULT_T23;
int sysctl_x25_ack_holdback_timeout    = X25_DEFAULT_T2;
70
int sysctl_x25_forward                 = 0;
Linus Torvalds's avatar
Linus Torvalds committed
71
72
73
74

HLIST_HEAD(x25_list);
DEFINE_RWLOCK(x25_list_lock);

75
static const struct proto_ops x25_proto_ops;
Linus Torvalds's avatar
Linus Torvalds committed
76
77
78

static struct x25_address null_x25_address = {"               "};

79
80
81
82
83
84
85
86
#ifdef CONFIG_COMPAT
struct compat_x25_subscrip_struct {
	char device[200-sizeof(compat_ulong_t)];
	compat_ulong_t global_facil_mask;
	compat_uint_t extended;
};
#endif

87
88
89
90
91
92
93
94
95

int x25_parse_address_block(struct sk_buff *skb,
		struct x25_address *called_addr,
		struct x25_address *calling_addr)
{
	unsigned char len;
	int needed;
	int rc;

96
	if (!pskb_may_pull(skb, 1)) {
97
98
99
100
101
102
		/* packet has no address block */
		rc = 0;
		goto empty;
	}

	len = *skb->data;
103
	needed = 1 + ((len >> 4) + (len & 0x0f) + 1) / 2;
104

105
	if (!pskb_may_pull(skb, needed)) {
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
		/* packet is too short to hold the addresses it claims
		   to hold */
		rc = -1;
		goto empty;
	}

	return x25_addr_ntoa(skb->data, called_addr, calling_addr);

empty:
	*called_addr->x25_addr = 0;
	*calling_addr->x25_addr = 0;

	return rc;
}


Linus Torvalds's avatar
Linus Torvalds committed
122
123
124
int x25_addr_ntoa(unsigned char *p, struct x25_address *called_addr,
		  struct x25_address *calling_addr)
{
125
	unsigned int called_len, calling_len;
Linus Torvalds's avatar
Linus Torvalds committed
126
	char *called, *calling;
127
	unsigned int i;
Linus Torvalds's avatar
Linus Torvalds committed
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215

	called_len  = (*p >> 0) & 0x0F;
	calling_len = (*p >> 4) & 0x0F;

	called  = called_addr->x25_addr;
	calling = calling_addr->x25_addr;
	p++;

	for (i = 0; i < (called_len + calling_len); i++) {
		if (i < called_len) {
			if (i % 2 != 0) {
				*called++ = ((*p >> 0) & 0x0F) + '0';
				p++;
			} else {
				*called++ = ((*p >> 4) & 0x0F) + '0';
			}
		} else {
			if (i % 2 != 0) {
				*calling++ = ((*p >> 0) & 0x0F) + '0';
				p++;
			} else {
				*calling++ = ((*p >> 4) & 0x0F) + '0';
			}
		}
	}

	*called = *calling = '\0';

	return 1 + (called_len + calling_len + 1) / 2;
}

int x25_addr_aton(unsigned char *p, struct x25_address *called_addr,
		  struct x25_address *calling_addr)
{
	unsigned int called_len, calling_len;
	char *called, *calling;
	int i;

	called  = called_addr->x25_addr;
	calling = calling_addr->x25_addr;

	called_len  = strlen(called);
	calling_len = strlen(calling);

	*p++ = (calling_len << 4) | (called_len << 0);

	for (i = 0; i < (called_len + calling_len); i++) {
		if (i < called_len) {
			if (i % 2 != 0) {
				*p |= (*called++ - '0') << 0;
				p++;
			} else {
				*p = 0x00;
				*p |= (*called++ - '0') << 4;
			}
		} else {
			if (i % 2 != 0) {
				*p |= (*calling++ - '0') << 0;
				p++;
			} else {
				*p = 0x00;
				*p |= (*calling++ - '0') << 4;
			}
		}
	}

	return 1 + (called_len + calling_len + 1) / 2;
}

/*
 *	Socket removal during an interrupt is now safe.
 */
static void x25_remove_socket(struct sock *sk)
{
	write_lock_bh(&x25_list_lock);
	sk_del_node_init(sk);
	write_unlock_bh(&x25_list_lock);
}

/*
 *	Kill all bound sockets on a dropped device.
 */
static void x25_kill_by_device(struct net_device *dev)
{
	struct sock *s;

	write_lock_bh(&x25_list_lock);

216
	sk_for_each(s, &x25_list)
Linus Torvalds's avatar
Linus Torvalds committed
217
218
219
220
221
222
223
224
225
226
227
228
		if (x25_sk(s)->neighbour && x25_sk(s)->neighbour->dev == dev)
			x25_disconnect(s, ENETUNREACH, 0, 0);

	write_unlock_bh(&x25_list_lock);
}

/*
 *	Handle device status changes.
 */
static int x25_device_event(struct notifier_block *this, unsigned long event,
			    void *ptr)
{
229
	struct net_device *dev = netdev_notifier_info_to_dev(ptr);
Linus Torvalds's avatar
Linus Torvalds committed
230
231
	struct x25_neigh *nb;

232
	if (!net_eq(dev_net(dev), &init_net))
233
234
		return NOTIFY_DONE;

Linus Torvalds's avatar
Linus Torvalds committed
235
	if (dev->type == ARPHRD_X25
Igor Maravić's avatar
Igor Maravić committed
236
#if IS_ENABLED(CONFIG_LLC)
Linus Torvalds's avatar
Linus Torvalds committed
237
238
239
240
	 || dev->type == ARPHRD_ETHER
#endif
	 ) {
		switch (event) {
Joe Perches's avatar
Joe Perches committed
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
		case NETDEV_UP:
			x25_link_device_up(dev);
			break;
		case NETDEV_GOING_DOWN:
			nb = x25_get_neigh(dev);
			if (nb) {
				x25_terminate_link(nb);
				x25_neigh_put(nb);
			}
			break;
		case NETDEV_DOWN:
			x25_kill_by_device(dev);
			x25_route_device_down(dev);
			x25_link_device_down(dev);
			break;
Linus Torvalds's avatar
Linus Torvalds committed
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
		}
	}

	return NOTIFY_DONE;
}

/*
 *	Add a socket to the bound sockets list.
 */
static void x25_insert_socket(struct sock *sk)
{
	write_lock_bh(&x25_list_lock);
	sk_add_node(sk, &x25_list);
	write_unlock_bh(&x25_list_lock);
}

/*
 *	Find a socket that wants to accept the Call Request we just
 *	received. Check the full list for an address/cud match.
 *	If no cuds match return the next_best thing, an address match.
 *	Note: if a listening socket has cud set it must only get calls
 *	with matching cud.
 */
279
280
static struct sock *x25_find_listener(struct x25_address *addr,
					struct sk_buff *skb)
Linus Torvalds's avatar
Linus Torvalds committed
281
282
283
284
285
286
287
{
	struct sock *s;
	struct sock *next_best;

	read_lock_bh(&x25_list_lock);
	next_best = NULL;

288
	sk_for_each(s, &x25_list)
Linus Torvalds's avatar
Linus Torvalds committed
289
		if ((!strcmp(addr->x25_addr,
290
			x25_sk(s)->source_addr.x25_addr) ||
291
				!strcmp(x25_sk(s)->source_addr.x25_addr,
292
293
					null_x25_address.x25_addr)) &&
					s->sk_state == TCP_LISTEN) {
Linus Torvalds's avatar
Linus Torvalds committed
294
295
296
297
			/*
			 * Found a listening socket, now check the incoming
			 * call user data vs this sockets call user data
			 */
298
299
			if (x25_sk(s)->cudmatchlength > 0 &&
				skb->len >= x25_sk(s)->cudmatchlength) {
300
301
				if((memcmp(x25_sk(s)->calluserdata.cuddata,
					skb->data,
302
303
304
305
306
					x25_sk(s)->cudmatchlength)) == 0) {
					sock_hold(s);
					goto found;
				 }
			} else
Linus Torvalds's avatar
Linus Torvalds committed
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
				next_best = s;
		}
	if (next_best) {
		s = next_best;
		sock_hold(s);
		goto found;
	}
	s = NULL;
found:
	read_unlock_bh(&x25_list_lock);
	return s;
}

/*
 *	Find a connected X.25 socket given my LCI and neighbour.
 */
static struct sock *__x25_find_socket(unsigned int lci, struct x25_neigh *nb)
{
	struct sock *s;

327
	sk_for_each(s, &x25_list)
Linus Torvalds's avatar
Linus Torvalds committed
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
		if (x25_sk(s)->lci == lci && x25_sk(s)->neighbour == nb) {
			sock_hold(s);
			goto found;
		}
	s = NULL;
found:
	return s;
}

struct sock *x25_find_socket(unsigned int lci, struct x25_neigh *nb)
{
	struct sock *s;

	read_lock_bh(&x25_list_lock);
	s = __x25_find_socket(lci, nb);
	read_unlock_bh(&x25_list_lock);
	return s;
}

/*
 *	Find a unique LCI for a given device.
 */
static unsigned int x25_new_lci(struct x25_neigh *nb)
{
	unsigned int lci = 1;
	struct sock *sk;

355
	while ((sk = x25_find_socket(lci, nb)) != NULL) {
Linus Torvalds's avatar
Linus Torvalds committed
356
357
358
359
360
		sock_put(sk);
		if (++lci == 4096) {
			lci = 0;
			break;
		}
361
		cond_resched();
Linus Torvalds's avatar
Linus Torvalds committed
362
363
364
365
366
367
368
369
	}

	return lci;
}

/*
 *	Deferred destroy.
 */
370
static void __x25_destroy_socket(struct sock *);
Linus Torvalds's avatar
Linus Torvalds committed
371
372
373
374
375
376

/*
 *	handler for deferred kills.
 */
static void x25_destroy_timer(unsigned long data)
{
377
	x25_destroy_socket_from_timer((struct sock *)data);
Linus Torvalds's avatar
Linus Torvalds committed
378
379
380
381
382
383
384
385
386
}

/*
 *	This is called from user mode and the timers. Thus it protects itself
 *	against interrupt users but doesn't worry about being called during
 *	work. Once it is removed from the queue no interrupt or bottom half
 *	will touch it and we are (fairly 8-) ) safe.
 *	Not static as it's used by the timer
 */
387
static void __x25_destroy_socket(struct sock *sk)
Linus Torvalds's avatar
Linus Torvalds committed
388
389
390
391
392
393
394
395
396
397
398
399
400
401
{
	struct sk_buff *skb;

	x25_stop_heartbeat(sk);
	x25_stop_timer(sk);

	x25_remove_socket(sk);
	x25_clear_queues(sk);		/* Flush the queues */

	while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
		if (skb->sk != sk) {		/* A pending connection */
			/*
			 * Queue the unaccepted socket for death
			 */
402
			skb->sk->sk_state = TCP_LISTEN;
Linus Torvalds's avatar
Linus Torvalds committed
403
404
405
406
407
408
409
410
			sock_set_flag(skb->sk, SOCK_DEAD);
			x25_start_heartbeat(skb->sk);
			x25_sk(skb->sk)->state = X25_STATE_0;
		}

		kfree_skb(skb);
	}

411
	if (sk_has_allocations(sk)) {
Linus Torvalds's avatar
Linus Torvalds committed
412
413
414
415
416
417
418
419
420
		/* Defer: outstanding buffers */
		sk->sk_timer.expires  = jiffies + 10 * HZ;
		sk->sk_timer.function = x25_destroy_timer;
		sk->sk_timer.data = (unsigned long)sk;
		add_timer(&sk->sk_timer);
	} else {
		/* drop last reference so sock_put will free */
		__sock_put(sk);
	}
421
}
Linus Torvalds's avatar
Linus Torvalds committed
422

423
424
425
426
427
428
429
430
431
void x25_destroy_socket_from_timer(struct sock *sk)
{
	sock_hold(sk);
	bh_lock_sock(sk);
	__x25_destroy_socket(sk);
	bh_unlock_sock(sk);
	sock_put(sk);
}

Linus Torvalds's avatar
Linus Torvalds committed
432
433
434
435
436
437
/*
 *	Handling for system calls applied via the various interfaces to a
 *	X.25 socket object.
 */

static int x25_setsockopt(struct socket *sock, int level, int optname,
438
			  char __user *optval, unsigned int optlen)
Linus Torvalds's avatar
Linus Torvalds committed
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
{
	int opt;
	struct sock *sk = sock->sk;
	int rc = -ENOPROTOOPT;

	if (level != SOL_X25 || optname != X25_QBITINCL)
		goto out;

	rc = -EINVAL;
	if (optlen < sizeof(int))
		goto out;

	rc = -EFAULT;
	if (get_user(opt, (int __user *)optval))
		goto out;

455
456
457
458
	if (opt)
		set_bit(X25_Q_BIT_FLAG, &x25_sk(sk)->flags);
	else
		clear_bit(X25_Q_BIT_FLAG, &x25_sk(sk)->flags);
Linus Torvalds's avatar
Linus Torvalds committed
459
460
461
462
463
464
465
466
467
468
	rc = 0;
out:
	return rc;
}

static int x25_getsockopt(struct socket *sock, int level, int optname,
			  char __user *optval, int __user *optlen)
{
	struct sock *sk = sock->sk;
	int val, len, rc = -ENOPROTOOPT;
469

Linus Torvalds's avatar
Linus Torvalds committed
470
471
472
473
474
475
476
477
478
479
480
481
	if (level != SOL_X25 || optname != X25_QBITINCL)
		goto out;

	rc = -EFAULT;
	if (get_user(len, optlen))
		goto out;

	len = min_t(unsigned int, len, sizeof(int));

	rc = -EINVAL;
	if (len < 0)
		goto out;
482

Linus Torvalds's avatar
Linus Torvalds committed
483
484
485
486
	rc = -EFAULT;
	if (put_user(len, optlen))
		goto out;

487
	val = test_bit(X25_Q_BIT_FLAG, &x25_sk(sk)->flags);
Linus Torvalds's avatar
Linus Torvalds committed
488
489
490
491
492
493
494
495
496
497
	rc = copy_to_user(optval, &val, len) ? -EFAULT : 0;
out:
	return rc;
}

static int x25_listen(struct socket *sock, int backlog)
{
	struct sock *sk = sock->sk;
	int rc = -EOPNOTSUPP;

andrew hendry's avatar
andrew hendry committed
498
	lock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
499
500
501
502
503
504
	if (sk->sk_state != TCP_LISTEN) {
		memset(&x25_sk(sk)->dest_addr, 0, X25_ADDR_LEN);
		sk->sk_max_ack_backlog = backlog;
		sk->sk_state           = TCP_LISTEN;
		rc = 0;
	}
andrew hendry's avatar
andrew hendry committed
505
	release_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
506
507
508
509
510
511
512
513
514
515

	return rc;
}

static struct proto x25_proto = {
	.name	  = "X25",
	.owner	  = THIS_MODULE,
	.obj_size = sizeof(struct x25_sock),
};

516
static struct sock *x25_alloc_socket(struct net *net, int kern)
Linus Torvalds's avatar
Linus Torvalds committed
517
518
{
	struct x25_sock *x25;
519
	struct sock *sk = sk_alloc(net, AF_X25, GFP_ATOMIC, &x25_proto, kern);
Linus Torvalds's avatar
Linus Torvalds committed
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534

	if (!sk)
		goto out;

	sock_init_data(NULL, sk);

	x25 = x25_sk(sk);
	skb_queue_head_init(&x25->ack_queue);
	skb_queue_head_init(&x25->fragment_queue);
	skb_queue_head_init(&x25->interrupt_in_queue);
	skb_queue_head_init(&x25->interrupt_out_queue);
out:
	return sk;
}

535
536
static int x25_create(struct net *net, struct socket *sock, int protocol,
		      int kern)
Linus Torvalds's avatar
Linus Torvalds committed
537
538
539
{
	struct sock *sk;
	struct x25_sock *x25;
540
	int rc = -EAFNOSUPPORT;
Linus Torvalds's avatar
Linus Torvalds committed
541

542
	if (!net_eq(net, &init_net))
543
544
545
546
547
		goto out;

	rc = -ESOCKTNOSUPPORT;
	if (sock->type != SOCK_SEQPACKET)
		goto out;
548

549
550
	rc = -EINVAL;
	if (protocol)
Linus Torvalds's avatar
Linus Torvalds committed
551
552
		goto out;

553
	rc = -ENOBUFS;
554
	if ((sk = x25_alloc_socket(net, kern)) == NULL)
Linus Torvalds's avatar
Linus Torvalds committed
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
		goto out;

	x25 = x25_sk(sk);

	sock_init_data(sock, sk);

	x25_init_timers(sk);

	sock->ops    = &x25_proto_ops;
	sk->sk_protocol = protocol;
	sk->sk_backlog_rcv = x25_backlog_rcv;

	x25->t21   = sysctl_x25_call_request_timeout;
	x25->t22   = sysctl_x25_reset_request_timeout;
	x25->t23   = sysctl_x25_clear_request_timeout;
	x25->t2    = sysctl_x25_ack_holdback_timeout;
	x25->state = X25_STATE_0;
572
	x25->cudmatchlength = 0;
573
	set_bit(X25_ACCPT_APPRV_FLAG, &x25->flags);	/* normally no cud  */
574
							/* on call accept   */
Linus Torvalds's avatar
Linus Torvalds committed
575
576
577
578
579

	x25->facilities.winsize_in  = X25_DEFAULT_WINDOW_SIZE;
	x25->facilities.winsize_out = X25_DEFAULT_WINDOW_SIZE;
	x25->facilities.pacsize_in  = X25_DEFAULT_PACKET_SIZE;
	x25->facilities.pacsize_out = X25_DEFAULT_PACKET_SIZE;
580
581
	x25->facilities.throughput  = 0;	/* by default don't negotiate
						   throughput */
Linus Torvalds's avatar
Linus Torvalds committed
582
	x25->facilities.reverse     = X25_DEFAULT_REVERSE;
583
584
585
586
587
588
	x25->dte_facilities.calling_len = 0;
	x25->dte_facilities.called_len = 0;
	memset(x25->dte_facilities.called_ae, '\0',
			sizeof(x25->dte_facilities.called_ae));
	memset(x25->dte_facilities.calling_ae, '\0',
			sizeof(x25->dte_facilities.calling_ae));
589

Linus Torvalds's avatar
Linus Torvalds committed
590
591
592
593
594
595
596
597
598
599
600
601
602
	rc = 0;
out:
	return rc;
}

static struct sock *x25_make_new(struct sock *osk)
{
	struct sock *sk = NULL;
	struct x25_sock *x25, *ox25;

	if (osk->sk_type != SOCK_SEQPACKET)
		goto out;

603
	if ((sk = x25_alloc_socket(sock_net(osk), 0)) == NULL)
Linus Torvalds's avatar
Linus Torvalds committed
604
605
606
607
608
609
610
611
612
613
614
		goto out;

	x25 = x25_sk(sk);

	sk->sk_type        = osk->sk_type;
	sk->sk_priority    = osk->sk_priority;
	sk->sk_protocol    = osk->sk_protocol;
	sk->sk_rcvbuf      = osk->sk_rcvbuf;
	sk->sk_sndbuf      = osk->sk_sndbuf;
	sk->sk_state       = TCP_ESTABLISHED;
	sk->sk_backlog_rcv = osk->sk_backlog_rcv;
615
	sock_copy_flags(sk, osk);
Linus Torvalds's avatar
Linus Torvalds committed
616
617
618
619
620
621

	ox25 = x25_sk(osk);
	x25->t21        = ox25->t21;
	x25->t22        = ox25->t22;
	x25->t23        = ox25->t23;
	x25->t2         = ox25->t2;
622
	x25->flags	= ox25->flags;
Linus Torvalds's avatar
Linus Torvalds committed
623
	x25->facilities = ox25->facilities;
624
	x25->dte_facilities = ox25->dte_facilities;
625
	x25->cudmatchlength = ox25->cudmatchlength;
Linus Torvalds's avatar
Linus Torvalds committed
626

627
	clear_bit(X25_INTERRUPT_FLAG, &x25->flags);
Linus Torvalds's avatar
Linus Torvalds committed
628
629
630
631
632
633
634
635
636
637
638
	x25_init_timers(sk);
out:
	return sk;
}

static int x25_release(struct socket *sock)
{
	struct sock *sk = sock->sk;
	struct x25_sock *x25;

	if (!sk)
Arnd Bergmann's avatar
Arnd Bergmann committed
639
		return 0;
Linus Torvalds's avatar
Linus Torvalds committed
640
641
642

	x25 = x25_sk(sk);

Arnd Bergmann's avatar
Arnd Bergmann committed
643
644
	sock_hold(sk);
	lock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
645
646
647
648
649
	switch (x25->state) {

		case X25_STATE_0:
		case X25_STATE_2:
			x25_disconnect(sk, 0, 0, 0);
Arnd Bergmann's avatar
Arnd Bergmann committed
650
			__x25_destroy_socket(sk);
Linus Torvalds's avatar
Linus Torvalds committed
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
			goto out;

		case X25_STATE_1:
		case X25_STATE_3:
		case X25_STATE_4:
			x25_clear_queues(sk);
			x25_write_internal(sk, X25_CLEAR_REQUEST);
			x25_start_t23timer(sk);
			x25->state = X25_STATE_2;
			sk->sk_state	= TCP_CLOSE;
			sk->sk_shutdown	|= SEND_SHUTDOWN;
			sk->sk_state_change(sk);
			sock_set_flag(sk, SOCK_DEAD);
			sock_set_flag(sk, SOCK_DESTROY);
			break;
	}

668
	sock_orphan(sk);
Linus Torvalds's avatar
Linus Torvalds committed
669
out:
Arnd Bergmann's avatar
Arnd Bergmann committed
670
671
	release_sock(sk);
	sock_put(sk);
Linus Torvalds's avatar
Linus Torvalds committed
672
673
674
675
676
677
678
	return 0;
}

static int x25_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
{
	struct sock *sk = sock->sk;
	struct sockaddr_x25 *addr = (struct sockaddr_x25 *)uaddr;
679
	int len, i, rc = 0;
Linus Torvalds's avatar
Linus Torvalds committed
680

681
	if (addr_len != sizeof(struct sockaddr_x25) ||
682
683
684
685
	    addr->sx25_family != AF_X25) {
		rc = -EINVAL;
		goto out;
	}
Linus Torvalds's avatar
Linus Torvalds committed
686

687
688
689
690
691
692
693
694
695
	/* check for the null_x25_address */
	if (strcmp(addr->sx25_addr.x25_addr, null_x25_address.x25_addr)) {

		len = strlen(addr->sx25_addr.x25_addr);
		for (i = 0; i < len; i++) {
			if (!isdigit(addr->sx25_addr.x25_addr[i])) {
				rc = -EINVAL;
				goto out;
			}
696
697
698
		}
	}

andrew hendry's avatar
andrew hendry committed
699
	lock_sock(sk);
700
701
702
703
704
705
706
	if (sock_flag(sk, SOCK_ZAPPED)) {
		x25_sk(sk)->source_addr = addr->sx25_addr;
		x25_insert_socket(sk);
		sock_reset_flag(sk, SOCK_ZAPPED);
	} else {
		rc = -EINVAL;
	}
andrew hendry's avatar
andrew hendry committed
707
	release_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
708
	SOCK_DEBUG(sk, "x25_bind: socket is bound\n");
709
710
out:
	return rc;
Linus Torvalds's avatar
Linus Torvalds committed
711
712
713
714
715
}

static int x25_wait_for_connection_establishment(struct sock *sk)
{
	DECLARE_WAITQUEUE(wait, current);
716
	int rc;
Linus Torvalds's avatar
Linus Torvalds committed
717

Eric Dumazet's avatar
Eric Dumazet committed
718
	add_wait_queue_exclusive(sk_sleep(sk), &wait);
Linus Torvalds's avatar
Linus Torvalds committed
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
	for (;;) {
		__set_current_state(TASK_INTERRUPTIBLE);
		rc = -ERESTARTSYS;
		if (signal_pending(current))
			break;
		rc = sock_error(sk);
		if (rc) {
			sk->sk_socket->state = SS_UNCONNECTED;
			break;
		}
		rc = 0;
		if (sk->sk_state != TCP_ESTABLISHED) {
			release_sock(sk);
			schedule();
			lock_sock(sk);
		} else
			break;
	}
	__set_current_state(TASK_RUNNING);
Eric Dumazet's avatar
Eric Dumazet committed
738
	remove_wait_queue(sk_sleep(sk), &wait);
Linus Torvalds's avatar
Linus Torvalds committed
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
	return rc;
}

static int x25_connect(struct socket *sock, struct sockaddr *uaddr,
		       int addr_len, int flags)
{
	struct sock *sk = sock->sk;
	struct x25_sock *x25 = x25_sk(sk);
	struct sockaddr_x25 *addr = (struct sockaddr_x25 *)uaddr;
	struct x25_route *rt;
	int rc = 0;

	lock_sock(sk);
	if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
		sock->state = SS_CONNECTED;
		goto out; /* Connect completed during a ERESTARTSYS event */
	}

	rc = -ECONNREFUSED;
	if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
		sock->state = SS_UNCONNECTED;
		goto out;
	}

	rc = -EISCONN;	/* No reconnect on a seqpacket socket */
	if (sk->sk_state == TCP_ESTABLISHED)
		goto out;

767
768
769
770
	rc = -EALREADY;	/* Do nothing if call is already in progress */
	if (sk->sk_state == TCP_SYN_SENT)
		goto out;

771
	sk->sk_state   = TCP_CLOSE;
Linus Torvalds's avatar
Linus Torvalds committed
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
	sock->state = SS_UNCONNECTED;

	rc = -EINVAL;
	if (addr_len != sizeof(struct sockaddr_x25) ||
	    addr->sx25_family != AF_X25)
		goto out;

	rc = -ENETUNREACH;
	rt = x25_get_route(&addr->sx25_addr);
	if (!rt)
		goto out;

	x25->neighbour = x25_get_neigh(rt->dev);
	if (!x25->neighbour)
		goto out_put_route;

	x25_limit_facilities(&x25->facilities, x25->neighbour);

	x25->lci = x25_new_lci(x25->neighbour);
	if (!x25->lci)
		goto out_put_neigh;

	rc = -EINVAL;
	if (sock_flag(sk, SOCK_ZAPPED)) /* Must bind first - autobinding does not work */
		goto out_put_neigh;

	if (!strcmp(x25->source_addr.x25_addr, null_x25_address.x25_addr))
		memset(&x25->source_addr, '\0', X25_ADDR_LEN);

	x25->dest_addr = addr->sx25_addr;

	/* Move to connecting socket, start sending Connect Requests */
	sock->state   = SS_CONNECTING;
	sk->sk_state  = TCP_SYN_SENT;

	x25->state = X25_STATE_1;

	x25_write_internal(sk, X25_CALL_REQUEST);

	x25_start_heartbeat(sk);
	x25_start_t21timer(sk);

	/* Now the loop */
	rc = -EINPROGRESS;
	if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK))
817
		goto out;
Linus Torvalds's avatar
Linus Torvalds committed
818
819
820
821
822
823
824
825

	rc = x25_wait_for_connection_establishment(sk);
	if (rc)
		goto out_put_neigh;

	sock->state = SS_CONNECTED;
	rc = 0;
out_put_neigh:
826
827
	if (rc) {
		read_lock_bh(&x25_list_lock);
Linus Torvalds's avatar
Linus Torvalds committed
828
		x25_neigh_put(x25->neighbour);
829
830
		x25->neighbour = NULL;
		read_unlock_bh(&x25_list_lock);
831
		x25->state = X25_STATE_0;
832
	}
Linus Torvalds's avatar
Linus Torvalds committed
833
834
835
836
837
838
839
out_put_route:
	x25_route_put(rt);
out:
	release_sock(sk);
	return rc;
}

840
static int x25_wait_for_data(struct sock *sk, long timeout)
Linus Torvalds's avatar
Linus Torvalds committed
841
842
843
844
{
	DECLARE_WAITQUEUE(wait, current);
	int rc = 0;

Eric Dumazet's avatar
Eric Dumazet committed
845
	add_wait_queue_exclusive(sk_sleep(sk), &wait);
Linus Torvalds's avatar
Linus Torvalds committed
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
	for (;;) {
		__set_current_state(TASK_INTERRUPTIBLE);
		if (sk->sk_shutdown & RCV_SHUTDOWN)
			break;
		rc = -ERESTARTSYS;
		if (signal_pending(current))
			break;
		rc = -EAGAIN;
		if (!timeout)
			break;
		rc = 0;
		if (skb_queue_empty(&sk->sk_receive_queue)) {
			release_sock(sk);
			timeout = schedule_timeout(timeout);
			lock_sock(sk);
		} else
			break;
	}
	__set_current_state(TASK_RUNNING);
Eric Dumazet's avatar
Eric Dumazet committed
865
	remove_wait_queue(sk_sleep(sk), &wait);
Linus Torvalds's avatar
Linus Torvalds committed
866
867
	return rc;
}
868

Linus Torvalds's avatar
Linus Torvalds committed
869
870
871
872
873
874
875
static int x25_accept(struct socket *sock, struct socket *newsock, int flags)
{
	struct sock *sk = sock->sk;
	struct sock *newsk;
	struct sk_buff *skb;
	int rc = -EINVAL;

Andrew Hendry's avatar
Andrew Hendry committed
876
	if (!sk)
Linus Torvalds's avatar
Linus Torvalds committed
877
878
879
880
881
882
883
		goto out;

	rc = -EOPNOTSUPP;
	if (sk->sk_type != SOCK_SEQPACKET)
		goto out;

	lock_sock(sk);
Andrew Hendry's avatar
Andrew Hendry committed
884
885
886
887
	rc = -EINVAL;
	if (sk->sk_state != TCP_LISTEN)
		goto out2;

Linus Torvalds's avatar
Linus Torvalds committed
888
889
890
891
892
893
894
895
	rc = x25_wait_for_data(sk, sk->sk_rcvtimeo);
	if (rc)
		goto out2;
	skb = skb_dequeue(&sk->sk_receive_queue);
	rc = -EINVAL;
	if (!skb->sk)
		goto out2;
	newsk		 = skb->sk;
896
	sock_graft(newsk, newsock);
Linus Torvalds's avatar
Linus Torvalds committed
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915

	/* Now attach up the new socket */
	skb->sk = NULL;
	kfree_skb(skb);
	sk->sk_ack_backlog--;
	newsock->state = SS_CONNECTED;
	rc = 0;
out2:
	release_sock(sk);
out:
	return rc;
}

static int x25_getname(struct socket *sock, struct sockaddr *uaddr,
		       int *uaddr_len, int peer)
{
	struct sockaddr_x25 *sx25 = (struct sockaddr_x25 *)uaddr;
	struct sock *sk = sock->sk;
	struct x25_sock *x25 = x25_sk(sk);
916
	int rc = 0;
Linus Torvalds's avatar
Linus Torvalds committed
917
918

	if (peer) {
919
920
921
922
		if (sk->sk_state != TCP_ESTABLISHED) {
			rc = -ENOTCONN;
			goto out;
		}
Linus Torvalds's avatar
Linus Torvalds committed
923
924
925
926
927
928
929
		sx25->sx25_addr = x25->dest_addr;
	} else
		sx25->sx25_addr = x25->source_addr;

	sx25->sx25_family = AF_X25;
	*uaddr_len = sizeof(*sx25);

930
931
932
933
out:
	return rc;
}

Linus Torvalds's avatar
Linus Torvalds committed
934
935
936
937
938
939
940
941
int x25_rx_call_request(struct sk_buff *skb, struct x25_neigh *nb,
			unsigned int lci)
{
	struct sock *sk;
	struct sock *make;
	struct x25_sock *makex25;
	struct x25_address source_addr, dest_addr;
	struct x25_facilities facilities;
942
	struct x25_dte_facilities dte_facilities;
Andrew Hendry's avatar
Andrew Hendry committed
943
	int len, addr_len, rc;
Linus Torvalds's avatar
Linus Torvalds committed
944
945
946
947
948
949
950
951
952

	/*
	 *	Remove the LCI and frame type.
	 */
	skb_pull(skb, X25_STD_MIN_LEN);

	/*
	 *	Extract the X.25 addresses and convert them to ASCII strings,
	 *	and remove them.
953
954
	 *
	 *	Address block is mandatory in call request packets
Linus Torvalds's avatar
Linus Torvalds committed
955
	 */
956
957
958
	addr_len = x25_parse_address_block(skb, &source_addr, &dest_addr);
	if (addr_len <= 0)
		goto out_clear_request;
Andrew Hendry's avatar
Andrew Hendry committed
959
	skb_pull(skb, addr_len);
Linus Torvalds's avatar
Linus Torvalds committed
960
961
962
963
964

	/*
	 *	Get the length of the facilities, skip past them for the moment
	 *	get the call user data because this is needed to determine
	 *	the correct listener
965
966
	 *
	 *	Facilities length is mandatory in call request packets
Linus Torvalds's avatar
Linus Torvalds committed
967
	 */
968
	if (!pskb_may_pull(skb, 1))
969
		goto out_clear_request;
Linus Torvalds's avatar
Linus Torvalds committed
970
	len = skb->data[0] + 1;
971
	if (!pskb_may_pull(skb, len))
972
		goto out_clear_request;
Linus Torvalds's avatar
Linus Torvalds committed
973
974
	skb_pull(skb,len);

975
976
977
978
979
980
	/*
	 *	Ensure that the amount of call user data is valid.
	 */
	if (skb->len > X25_MAX_CUD_LEN)
		goto out_clear_request;

981
982
983
984
985
986
987
	/*
	 *	Get all the call user data so it can be used in
	 *	x25_find_listener and skb_copy_from_linear_data up ahead.
	 */
	if (!pskb_may_pull(skb, skb->len))
		goto out_clear_request;

Linus Torvalds's avatar
Linus Torvalds committed
988
989
990
	/*
	 *	Find a listener for the particular address/cud pair.
	 */
991
992
	sk = x25_find_listener(&source_addr,skb);
	skb_push(skb,len);
Linus Torvalds's avatar
Linus Torvalds committed
993

Andrew Hendry's avatar
Andrew Hendry committed
994
995
996
997
	if (sk != NULL && sk_acceptq_is_full(sk)) {
		goto out_sock_put;
	}

Linus Torvalds's avatar
Linus Torvalds committed
998
	/*
Andrew Hendry's avatar
Andrew Hendry committed
999
1000
	 *	We dont have any listeners for this incoming call.
	 *	Try forwarding it.
Linus Torvalds's avatar
Linus Torvalds committed
1001
	 */
Andrew Hendry's avatar
Andrew Hendry committed
1002
1003
	if (sk == NULL) {
		skb_push(skb, addr_len + X25_STD_MIN_LEN);
1004
1005
		if (sysctl_x25_forward &&
				x25_forward_call(&dest_addr, nb, skb, lci) > 0)
Andrew Hendry's avatar
Andrew Hendry committed
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
		{
			/* Call was forwarded, dont process it any more */
			kfree_skb(skb);
			rc = 1;
			goto out;
		} else {
			/* No listeners, can't forward, clear the call */
			goto out_clear_request;
		}
	}
Linus Torvalds's avatar
Linus Torvalds committed
1016
1017
1018
1019

	/*
	 *	Try to reach a compromise on the requested facilities.
	 */
1020
1021
	len = x25_negotiate_facilities(skb, sk, &facilities, &dte_facilities);
	if (len == -1)
Linus Torvalds's avatar
Linus Torvalds committed
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
		goto out_sock_put;

	/*
	 * current neighbour/link might impose additional limits
	 * on certain facilties
	 */

	x25_limit_facilities(&facilities, nb);

	/*
	 *	Try to create a new socket.
	 */
	make = x25_make_new(sk);
	if (!make)
		goto out_sock_put;

	/*
	 *	Remove the facilities
	 */
	skb_pull(skb, len);

	skb->sk     = make;
	make->sk_state = TCP_ESTABLISHED;

	makex25 = x25_sk(make);
	makex25->lci           = lci;
	makex25->dest_addr     = dest_addr;
	makex25->source_addr   = source_addr;
	makex25->neighbour     = nb;
	makex25->facilities    = facilities;
1052
	makex25->dte_facilities= dte_facilities;
Linus Torvalds's avatar
Linus Torvalds committed
1053
	makex25->vc_facil_mask = x25_sk(sk)->vc_facil_mask;
1054
1055
	/* ensure no reverse facil on accept */
	makex25->vc_facil_mask &= ~X25_MASK_REVERSE;
1056
1057
	/* ensure no calling address extension on accept */
	makex25->vc_facil_mask &= ~X25_MASK_CALLING_AE;
1058
	makex25->cudmatchlength = x25_sk(sk)->cudmatchlength;
Linus Torvalds's avatar
Linus Torvalds committed
1059

1060
1061
	/* Normally all calls are accepted immediately */
	if (test_bit(X25_ACCPT_APPRV_FLAG, &makex25->flags)) {
1062
1063
1064
		x25_write_internal(make, X25_CALL_ACCEPTED);
		makex25->state = X25_STATE_3;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1065

1066
1067
1068
	/*
	 *	Incoming Call User Data.
	 */
1069
1070
	skb_copy_from_linear_data(skb, makex25->calluserdata.cuddata, skb->len);
	makex25->calluserdata.cudlength = skb->len;
1071

Linus Torvalds's avatar
Linus Torvalds committed
1072
1073
1074
1075
1076
1077
1078
1079
1080
	sk->sk_ack_backlog++;

	x25_insert_socket(make);

	skb_queue_head(&sk->sk_receive_queue, skb);

	x25_start_heartbeat(make);

	if (!sock_flag(sk, SOCK_DEAD))
1081
		sk->sk_data_ready(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
	rc = 1;
	sock_put(sk);
out:
	return rc;
out_sock_put:
	sock_put(sk);
out_clear_request:
	rc = 0;
	x25_transmit_clear_request(nb, lci, 0x01);
	goto out;
}

1094
static int x25_sendmsg(struct socket *sock, struct msghdr *msg, size_t len)
Linus Torvalds's avatar
Linus Torvalds committed
1095
1096
1097
{
	struct sock *sk = sock->sk;
	struct x25_sock *x25 = x25_sk(sk);
1098
	DECLARE_SOCKADDR(struct sockaddr_x25 *, usx25, msg->msg_name);
Linus Torvalds's avatar
Linus Torvalds committed
1099
1100
1101
1102
1103
1104
1105
	struct sockaddr_x25 sx25;
	struct sk_buff *skb;
	unsigned char *asmptr;
	int noblock = msg->msg_flags & MSG_DONTWAIT;
	size_t size;
	int qbit = 0, rc = -EINVAL;

Arnd Bergmann's avatar
Arnd Bergmann committed
1106
	lock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
	if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_OOB|MSG_EOR|MSG_CMSG_COMPAT))
		goto out;

	/* we currently don't support segmented records at the user interface */
	if (!(msg->msg_flags & (MSG_EOR|MSG_OOB)))
		goto out;

	rc = -EADDRNOTAVAIL;
	if (sock_flag(sk, SOCK_ZAPPED))
		goto out;

	rc = -EPIPE;
	if (sk->sk_shutdown & SEND_SHUTDOWN) {
		send_sig(SIGPIPE, current, 0);
		goto out;
	}

	rc = -ENETUNREACH;
	if (!x25->neighbour)
		goto out;

	if (usx25) {
		rc = -EINVAL;
		if (msg->msg_namelen < sizeof(sx25))
			goto out;
		memcpy(&sx25, usx25, sizeof(sx25));
		rc = -EISCONN;
		if (strcmp(x25->dest_addr.x25_addr, sx25.sx25_addr.x25_addr))
			goto out;
		rc = -EINVAL;
		if (sx25.sx25_family != AF_X25)
			goto out;
	} else {
		/*
		 *	FIXME 1003.1g - if the socket is like this because
		 *	it has become closed (not started closed) we ought
		 *	to SIGPIPE, EPIPE;
		 */
		rc = -ENOTCONN;
		if (sk->sk_state != TCP_ESTABLISHED)
			goto out;

		sx25.sx25_family = AF_X25;
		sx25.sx25_addr   = x25->dest_addr;
	}

1153
1154
1155
1156
1157
1158
	/* Sanity check the packet size */
	if (len > 65535) {
		rc = -EMSGSIZE;
		goto out;
	}

Linus Torvalds's avatar
Linus Torvalds committed
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
	SOCK_DEBUG(sk, "x25_sendmsg: sendto: Addresses built.\n");

	/* Build a packet */
	SOCK_DEBUG(sk, "x25_sendmsg: sendto: building packet.\n");

	if ((msg->msg_flags & MSG_OOB) && len > 32)
		len = 32;

	size = len + X25_MAX_L2_LEN + X25_EXT_MIN_LEN;

Arnd Bergmann's avatar
Arnd Bergmann committed
1169
	release_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1170
	skb = sock_alloc_send_skb(sk, size, noblock, &rc);
Arnd Bergmann's avatar
Arnd Bergmann committed
1171
	lock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
	if (!skb)
		goto out;
	X25_SKB_CB(skb)->flags = msg->msg_flags;

	skb_reserve(skb, X25_MAX_L2_LEN + X25_EXT_MIN_LEN);

	/*
	 *	Put the data on the end
	 */
	SOCK_DEBUG(sk, "x25_sendmsg: Copying user data\n");

1183
1184
	skb_reset_transport_header(skb);
	skb_put(skb, len);
Linus Torvalds's avatar
Linus Torvalds committed
1185

Al Viro's avatar
Al Viro committed
1186
	rc = memcpy_from_msg(skb_transport_header(skb), msg, len);
Linus Torvalds's avatar
Linus Torvalds committed
1187
1188
1189
1190
1191
1192
1193
	if (rc)
		goto out_kfree_skb;

	/*
	 *	If the Q BIT Include socket option is in force, the first
	 *	byte of the user data is the logical value of the Q Bit.
	 */
1194
	if (test_bit(X25_Q_BIT_FLAG, &x25->flags)) {
1195
1196
1197
		if (!pskb_may_pull(skb, 1))
			goto out_kfree_skb;

Linus Torvalds's avatar
Linus Torvalds committed
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
		qbit = skb->data[0];
		skb_pull(skb, 1);
	}

	/*
	 *	Push down the X.25 header
	 */
	SOCK_DEBUG(sk, "x25_sendmsg: Building X.25 Header.\n");

	if (msg->msg_flags & MSG_OOB) {
		if (x25->neighbour->extended) {
			asmptr    = skb_push(skb, X25_STD_MIN_LEN);
			*asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_EXTSEQ;
			*asmptr++ = (x25->lci >> 0) & 0xFF;
			*asmptr++ = X25_INTERRUPT;
		} else {
			asmptr    = skb_push(skb, X25_STD_MIN_LEN);
			*asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_STDSEQ;
			*asmptr++ = (x25->lci >> 0) & 0xFF;
			*asmptr++ = X25_INTERRUPT;
		}
	} else {
		if (x25->neighbour->extended) {
			/* Build an Extended X.25 header */
			asmptr    = skb_push(skb, X25_EXT_MIN_LEN);
			*asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_EXTSEQ;
			*asmptr++ = (x25->lci >> 0) & 0xFF;
			*asmptr++ = X25_DATA;
			*asmptr++ = X25_DATA;
		} else {
			/* Build an Standard X.25 header */
			asmptr    = skb_push(skb, X25_STD_MIN_LEN);
			*asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_STDSEQ;
			*asmptr++ = (x25->lci >> 0) & 0xFF;
			*asmptr++ = X25_DATA;
		}

		if (qbit)
			skb->data[0] |= X25_Q_BIT;
	}

	SOCK_DEBUG(sk, "x25_sendmsg: Built header.\n");
	SOCK_DEBUG(sk, "x25_sendmsg: Transmitting buffer\n");

	rc = -ENOTCONN;
	if (sk->sk_state != TCP_ESTABLISHED)
		goto out_kfree_skb;

	if (msg->msg_flags & MSG_OOB)
		skb_queue_tail(&x25->interrupt_out_queue, skb);
	else {
1249
1250
1251
		rc = x25_output(sk, skb);
		len = rc;
		if (rc < 0)
Linus Torvalds's avatar
Linus Torvalds committed
1252
			kfree_skb(skb);
1253
		else if (test_bit(X25_Q_BIT_FLAG, &x25->flags))
Linus Torvalds's avatar
Linus Torvalds committed
1254
1255
1256
1257
1258
1259
			len++;
	}

	x25_kick(sk);
	rc = len;
out:
Arnd Bergmann's avatar
Arnd Bergmann committed
1260
	release_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1261
1262
1263
1264
1265
1266
1267
	return rc;
out_kfree_skb:
	kfree_skb(skb);
	goto out;
}


1268
static int x25_recvmsg(struct socket *sock, struct msghdr *msg, size_t size,
Linus Torvalds's avatar
Linus Torvalds committed
1269
1270
1271
1272
		       int flags)
{
	struct sock *sk = sock->sk;
	struct x25_sock *x25 = x25_sk(sk);
1273
	DECLARE_SOCKADDR(struct sockaddr_x25 *, sx25, msg->msg_name);
Linus Torvalds's avatar
Linus Torvalds committed
1274
	size_t copied;
1275
	int qbit, header_len;
Linus Torvalds's avatar
Linus Torvalds committed
1276
1277
1278
1279
	struct sk_buff *skb;
	unsigned char *asmptr;
	int rc = -ENOTCONN;

Arnd Bergmann's avatar
Arnd Bergmann committed
1280
	lock_sock(sk);
1281
1282
1283
1284
1285
1286
1287

	if (x25->neighbour == NULL)
		goto out;

	header_len = x25->neighbour->extended ?
		X25_EXT_MIN_LEN : X25_STD_MIN_LEN;

Linus Torvalds's avatar
Linus Torvalds committed
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
	/*
	 * This works for seqpacket too. The receiver has ordered the queue for
	 * us! We do one quick check first though
	 */
	if (sk->sk_state != TCP_ESTABLISHED)
		goto out;

	if (flags & MSG_OOB) {
		rc = -EINVAL;
		if (sock_flag(sk, SOCK_URGINLINE) ||
		    !skb_peek(&x25->interrupt_in_queue))
			goto out;

		skb = skb_dequeue(&x25->interrupt_in_queue);

1303
1304
1305
		if (!pskb_may_pull(skb, X25_STD_MIN_LEN))
			goto out_free_dgram;

Linus Torvalds's avatar
Linus Torvalds committed
1306
1307
1308
1309
1310
		skb_pull(skb, X25_STD_MIN_LEN);

		/*
		 *	No Q bit information on Interrupt data.
		 */
1311
		if (test_bit(X25_Q_BIT_FLAG, &x25->flags)) {
Linus Torvalds's avatar
Linus Torvalds committed
1312
1313
1314
1315
1316
1317
1318
			asmptr  = skb_push(skb, 1);
			*asmptr = 0x00;
		}

		msg->msg_flags |= MSG_OOB;
	} else {
		/* Now we can treat all alike */
Arnd Bergmann's avatar
Arnd Bergmann committed
1319
		release_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1320
1321
		skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
					flags & MSG_DONTWAIT, &rc);
Arnd Bergmann's avatar
Arnd Bergmann committed
1322
		lock_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1323
1324
1325
		if (!skb)
			goto out;

1326
1327
1328
		if (!pskb_may_pull(skb, header_len))
			goto out_free_dgram;

Linus Torvalds's avatar
Linus Torvalds committed
1329
1330
		qbit = (skb->data[0] & X25_Q_BIT) == X25_Q_BIT;

1331
		skb_pull(skb, header_len);
Linus Torvalds's avatar
Linus Torvalds committed
1332

1333
		if (test_bit(X25_Q_BIT_FLAG, &x25->flags)) {
Linus Torvalds's avatar
Linus Torvalds committed
1334
1335
1336
1337
1338
			asmptr  = skb_push(skb, 1);
			*asmptr = qbit;
		}
	}

1339
	skb_reset_transport_header(skb);
Linus Torvalds's avatar
Linus Torvalds committed
1340
1341
1342
1343
1344
1345
1346
	copied = skb->len;

	if (copied > size) {
		copied = size;
		msg->msg_flags |= MSG_TRUNC;
	}

1347
	/* Currently, each datagram always contains a complete record */
Linus Torvalds's avatar
Linus Torvalds committed
1348
1349
	msg->msg_flags |= MSG_EOR;

1350
	rc = skb_copy_datagram_msg(skb, 0, msg, copied);
Linus Torvalds's avatar
Linus Torvalds committed
1351
1352
1353
1354
1355
1356
	if (rc)
		goto out_free_dgram;

	if (sx25) {
		sx25->sx25_family = AF_X25;
		sx25->sx25_addr   = x25->dest_addr;
1357
		msg->msg_namelen = sizeof(*sx25);
Linus Torvalds's avatar
Linus Torvalds committed
1358
1359
1360
1361
1362
1363
1364
	}

	x25_check_rbuf(sk);
	rc = copied;
out_free_dgram:
	skb_free_datagram(sk, skb);
out:
Arnd Bergmann's avatar
Arnd Bergmann committed
1365
	release_sock(sk);
Linus Torvalds's avatar
Linus Torvalds committed
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
	return rc;
}


static int x25_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
{
	struct sock *sk = sock->sk;
	struct x25_sock *x25 = x25_sk(sk);
	void __user *argp = (void __user *)arg;
	int rc;

	switch (cmd) {
Joe Perches's avatar
Joe Perches committed
1378
1379
1380
1381
1382
1383
1384
1385
1386
	case TIOCOUTQ: {
		int amount;

		amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
		if (amount < 0)
			amount = 0;
		rc = put_user(amount, (unsigned int __user *)argp);
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1387

Joe Perches's avatar
Joe Perches committed
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
	case TIOCINQ: {
		struct sk_buff *skb;
		int amount = 0;
		/*
		 * These two are safe on a single CPU system as
		 * only user tasks fiddle here
		 */
		lock_sock(sk);
		if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
			amount = skb->len;
		release_sock(sk);
		rc = put_user(amount, (unsigned int __user *)argp);
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1402

Joe Perches's avatar
Joe Perches committed
1403
1404
1405
1406
	case SIOCGSTAMP:
		rc = -EINVAL;
		if (sk)
			rc = sock_get_timestamp(sk,
1407
						(struct timeval __user *)argp);
Joe Perches's avatar
Joe Perches committed
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
		break;
	case SIOCGSTAMPNS:
		rc = -EINVAL;
		if (sk)
			rc = sock_get_timestampns(sk,
					(struct timespec __user *)argp);
		break;
	case SIOCGIFADDR:
	case SIOCSIFADDR:
	case SIOCGIFDSTADDR:
	case SIOCSIFDSTADDR:
	case SIOCGIFBRDADDR:
	case SIOCSIFBRDADDR:
	case SIOCGIFNETMASK:
	case SIOCSIFNETMASK:
	case SIOCGIFMETRIC:
	case SIOCSIFMETRIC:
		rc = -EINVAL;
		break;
	case SIOCADDRT:
	case SIOCDELRT:
		rc = -EPERM;
		if (!capable(CAP_NET_ADMIN))
Linus Torvalds's avatar
Linus Torvalds committed
1431
			break;
Joe Perches's avatar
Joe Perches committed
1432
1433
1434
1435
1436
1437
1438
1439
		rc = x25_route_ioctl(cmd, argp);
		break;
	case SIOCX25GSUBSCRIP:
		rc = x25_subscr_ioctl(cmd, argp);
		break;
	case SIOCX25SSUBSCRIP:
		rc = -EPERM;
		if (!capable(CAP_NET_ADMIN))
Linus Torvalds's avatar
Linus Torvalds committed
1440
			break;
Joe Perches's avatar
Joe Perches committed
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
		rc = x25_subscr_ioctl(cmd, argp);
		break;
	case SIOCX25GFACILITIES: {
		lock_sock(sk);
		rc = copy_to_user(argp, &x25->facilities,
				  sizeof(x25->facilities))
			? -EFAULT : 0;
		release_sock(sk);
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1451

Joe Perches's avatar
Joe Perches committed
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
	case SIOCX25SFACILITIES: {
		struct x25_facilities facilities;
		rc = -EFAULT;
		if (copy_from_user(&facilities, argp, sizeof(facilities)))
			break;
		rc = -EINVAL;
		lock_sock(sk);
		if (sk->sk_state != TCP_LISTEN &&
		    sk->sk_state != TCP_CLOSE)
			goto out_fac_release;
		if (facilities.pacsize_in < X25_PS16 ||
		    facilities.pacsize_in > X25_PS4096)
			goto out_fac_release;
		if (facilities.pacsize_out < X25_PS16 ||
		    facilities.pacsize_out > X25_PS4096)
			goto out_fac_release;
		if (facilities.winsize_in < 1 ||
		    facilities.winsize_in > 127)
			goto out_fac_release;
		if (facilities.throughput) {
			int out = facilities.throughput & 0xf0;
			int in  = facilities.throughput & 0x0f;
			if (!out)
				facilities.throughput |=
					X25_DEFAULT_THROUGHPUT << 4;
			else if (out < 0x30 || out > 0xD0)
1478
				goto out_fac_release;
Joe Perches's avatar
Joe Perches committed
1479
1480
1481
1482
			if (!in)
				facilities.throughput |=
					X25_DEFAULT_THROUGHPUT;
			else if (in < 0x03 || in > 0x0D)
1483
				goto out_fac_release;
1484
		}
Joe Perches's avatar
Joe Perches committed
1485
1486
1487
1488
1489
1490
1491
1492
1493
		if (facilities.reverse &&
		    (facilities.reverse & 0x81) != 0x81)
			goto out_fac_release;
		x25->facilities = facilities;
		rc = 0;
out_fac_release:
		release_sock(sk);
		break;
	}
1494

Joe Perches's avatar
Joe Perches committed
1495
1496
1497
1498
1499
1500
	case SIOCX25GDTEFACILITIES: {
		lock_sock(sk);
		rc = copy_to_user(argp, &x25->dte_facilities,
				  sizeof(x25->dte_facilities));
		release_sock(sk);
		if (rc)
1501
			rc = -EFAULT;
Joe Perches's avatar
Joe Perches committed
1502
1503
		break;
	}
1504

Joe Perches's avatar
Joe Perches committed
1505
1506
1507
1508
	case SIOCX25SDTEFACILITIES: {
		struct x25_dte_facilities dtefacs;
		rc = -EFAULT;
		if (copy_from_user(&dtefacs, argp, sizeof(dtefacs)))
Linus Torvalds's avatar
Linus Torvalds committed
1509
			break;
Joe Perches's avatar
Joe Perches committed
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
		rc = -EINVAL;
		lock_sock(sk);
		if (sk->sk_state != TCP_LISTEN &&
		    sk->sk_state != TCP_CLOSE)
			goto out_dtefac_release;
		if (dtefacs.calling_len > X25_MAX_AE_LEN)
			goto out_dtefac_release;
		if (dtefacs.called_len > X25_MAX_AE_LEN)
			goto out_dtefac_release;
		x25->dte_facilities = dtefacs;
		rc = 0;
out_dtefac_release:
		release_sock(sk);
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1525

Joe Perches's avatar
Joe Perches committed
1526
1527
1528
1529
1530
1531
1532
1533
	case SIOCX25GCALLUSERDATA: {
		lock_sock(sk);
		rc = copy_to_user(argp, &x25->calluserdata,
				  sizeof(x25->calluserdata))
			? -EFAULT : 0;
		release_sock(sk);
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1534

Joe Perches's avatar
Joe Perches committed
1535
1536
	case SIOCX25SCALLUSERDATA: {
		struct x25_calluserdata calluserdata;
Linus Torvalds's avatar
Linus Torvalds committed
1537

Joe Perches's avatar
Joe Perches committed
1538
1539
		rc = -EFAULT;
		if (copy_from_user(&calluserdata, argp, sizeof(calluserdata)))
Linus Torvalds's avatar
Linus Torvalds committed
1540
			break;
Joe Perches's avatar
Joe Perches committed
1541
1542
1543
1544
1545
1546
1547
1548
1549
		rc = -EINVAL;
		if (calluserdata.cudlength > X25_MAX_CUD_LEN)
			break;
		lock_sock(sk);
		x25->calluserdata = calluserdata;
		release_sock(sk);
		rc = 0;
		break;
	}
Linus Torvalds's avatar
Linus Torvalds committed
1550

Joe Perches's avatar
Joe Perches committed
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
	case SIOCX25GCAUSEDIAG: {
		lock_sock(sk);
		rc = copy_to_user(argp, &x25->causediag, sizeof(x25->causediag))
			? -EFAULT : 0;
		release_sock(sk);
		break;
	}

	case SIOCX25SCAUSEDIAG: {
		struct x25_causediag causediag;
		rc = -EFAULT;
		if (copy_from_user(&causediag, argp, sizeof(causediag)))
1563
			break;
Joe Perches's avatar
Joe Perches committed
1564
1565
1566
1567
1568
		lock_sock(sk);
		x25->causediag = causediag;
		release_sock(sk);
		rc = 0;
		break;
1569

Joe Perches's avatar
Joe Perches committed
1570
	}
1571

Joe Perches's avatar
Joe Perches committed
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
	case SIOCX25SCUDMATCHLEN: {
		struct x25_subaddr sub_addr;
		rc = -EINVAL;
		lock_sock(sk);
		if(sk->sk_state != TCP_CLOSE)
			goto out_cud_release;
		rc = -EFAULT;
		if (copy_from_user(&sub_addr, argp,
				   sizeof(sub_addr)))
			goto out_cud_release;
		rc = -EINVAL;
		if (sub_addr.cudmatchlength > X25_MAX_CUD_LEN)
			goto out_cud_release;
		x25->cudmatchlength = sub_addr.cudmatchlength;
		rc = 0;
1587
out_cud_release:
Joe Perches's avatar
Joe Perches committed
1588
1589
1590
		release_sock(sk);
		break;
	}
1591

Joe Perches's avatar
Joe Perches committed
1592
1593
1594
	case SIOCX25CALLACCPTAPPRV: {
		rc = -EINVAL;
		lock_sock(sk);
1595
1596
1597
1598
		if (sk->sk_state == TCP_CLOSE) {
			clear_bit(X25_ACCPT_APPRV_FLAG, &x25->flags);
			rc = 0;
		}
Joe Perches's avatar
Joe Perches committed
1599
1600
1601
		release_sock(sk);
		break;
	}