[linux.git] / net / rose / rose_subr.c

/*
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * Copyright (C) Jonathan Naylor G4KLX ([email protected])
 */
#include <linux/errno.h>
#include <linux/types.h>
#include <linux/socket.h>
#include <linux/in.h>
#include <linux/kernel.h>
#include <linux/timer.h>
#include <linux/string.h>
#include <linux/sockios.h>
#include <linux/net.h>
#include <linux/slab.h>
#include <net/ax25.h>
#include <linux/inet.h>
#include <linux/netdevice.h>
#include <linux/skbuff.h>
#include <net/sock.h>
#include <net/tcp_states.h>
#include <linux/fcntl.h>
#include <linux/mm.h>
#include <linux/interrupt.h>
#include <net/rose.h>

static int rose_create_facilities(unsigned char *buffer, struct rose_sock *rose);

/*
 *	This routine purges all of the queues of frames.
 */
void rose_clear_queues(struct sock *sk)
{
	skb_queue_purge(&sk->sk_write_queue);
	skb_queue_purge(&rose_sk(sk)->ack_queue);
}

/*
 * This routine purges the input queue of those frames that have been
 * acknowledged. This replaces the boxes labelled "V(a) <- N(r)" on the
 * SDL diagram.
 */
void rose_frames_acked(struct sock *sk, unsigned short nr)
{
	struct sk_buff *skb;
	struct rose_sock *rose = rose_sk(sk);

	/*
	 * Remove all the ack-ed frames from the ack queue.
	 */
	if (rose->va != nr) {
		while (skb_peek(&rose->ack_queue) != NULL && rose->va != nr) {
			skb = skb_dequeue(&rose->ack_queue);
			kfree_skb(skb);
			rose->va = (rose->va + 1) % ROSE_MODULUS;
		}
	}
}

void rose_requeue_frames(struct sock *sk)
{
	struct sk_buff *skb, *skb_prev = NULL;

	/*
	 * Requeue all the un-ack-ed frames on the output queue to be picked
	 * up by rose_kick. This arrangement handles the possibility of an
	 * empty output queue.
	 */
	while ((skb = skb_dequeue(&rose_sk(sk)->ack_queue)) != NULL) {
		if (skb_prev == NULL)
			skb_queue_head(&sk->sk_write_queue, skb);
		else
			skb_append(skb_prev, skb, &sk->sk_write_queue);
		skb_prev = skb;
	}
}

/*
 *	Validate that the value of nr is between va and vs. Return true or
 *	false for testing.
 */
int rose_validate_nr(struct sock *sk, unsigned short nr)
{
	struct rose_sock *rose = rose_sk(sk);
	unsigned short vc = rose->va;

	while (vc != rose->vs) {
		if (nr == vc) return 1;
		vc = (vc + 1) % ROSE_MODULUS;
	}

	return nr == rose->vs;
}

/*
 *  This routine is called when the packet layer internally generates a
 *  control frame.
 */
void rose_write_internal(struct sock *sk, int frametype)
{
	struct rose_sock *rose = rose_sk(sk);
	struct sk_buff *skb;
	unsigned char  *dptr;
	unsigned char  lci1, lci2;
	char buffer[100];
	int len, faclen = 0;

	len = AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN + 1;

	switch (frametype) {
	case ROSE_CALL_REQUEST:
		len   += 1 + ROSE_ADDR_LEN + ROSE_ADDR_LEN;
		faclen = rose_create_facilities(buffer, rose);
		len   += faclen;
		break;
	case ROSE_CALL_ACCEPTED:
	case ROSE_CLEAR_REQUEST:
	case ROSE_RESET_REQUEST:
		len   += 2;
		break;
	}

	if ((skb = alloc_skb(len, GFP_ATOMIC)) == NULL)
		return;

	/*
	 *	Space for AX.25 header and PID.
	 */
	skb_reserve(skb, AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + 1);

	dptr = skb_put(skb, skb_tailroom(skb));

	lci1 = (rose->lci >> 8) & 0x0F;
	lci2 = (rose->lci >> 0) & 0xFF;

	switch (frametype) {
	case ROSE_CALL_REQUEST:
		*dptr++ = ROSE_GFI | lci1;
		*dptr++ = lci2;
		*dptr++ = frametype;
		*dptr++ = ROSE_CALL_REQ_ADDR_LEN_VAL;
		memcpy(dptr, &rose->dest_addr,  ROSE_ADDR_LEN);
		dptr   += ROSE_ADDR_LEN;
		memcpy(dptr, &rose->source_addr, ROSE_ADDR_LEN);
		dptr   += ROSE_ADDR_LEN;
		memcpy(dptr, buffer, faclen);
		dptr   += faclen;
		break;

	case ROSE_CALL_ACCEPTED:
		*dptr++ = ROSE_GFI | lci1;
		*dptr++ = lci2;
		*dptr++ = frametype;
		*dptr++ = 0x00;		/* Address length */
		*dptr++ = 0;		/* Facilities length */
		break;

	case ROSE_CLEAR_REQUEST:
		*dptr++ = ROSE_GFI | lci1;
		*dptr++ = lci2;
		*dptr++ = frametype;
		*dptr++ = rose->cause;
		*dptr++ = rose->diagnostic;
		break;

	case ROSE_RESET_REQUEST:
		*dptr++ = ROSE_GFI | lci1;
		*dptr++ = lci2;
		*dptr++ = frametype;
		*dptr++ = ROSE_DTE_ORIGINATED;
		*dptr++ = 0;
		break;

	case ROSE_RR:
	case ROSE_RNR:
		*dptr++ = ROSE_GFI | lci1;
		*dptr++ = lci2;
		*dptr   = frametype;
		*dptr++ |= (rose->vr << 5) & 0xE0;
		break;

	case ROSE_CLEAR_CONFIRMATION:
	case ROSE_RESET_CONFIRMATION:
		*dptr++ = ROSE_GFI | lci1;
		*dptr++ = lci2;
		*dptr++  = frametype;
		break;

	default:
		printk(KERN_ERR "ROSE: rose_write_internal - invalid frametype %02X\n", frametype);
		kfree_skb(skb);
		return;
	}

	rose_transmit_link(skb, rose->neighbour);
}

int rose_decode(struct sk_buff *skb, int *ns, int *nr, int *q, int *d, int *m)
{
	unsigned char *frame;

	frame = skb->data;

	*ns = *nr = *q = *d = *m = 0;

	switch (frame[2]) {
	case ROSE_CALL_REQUEST:
	case ROSE_CALL_ACCEPTED:
	case ROSE_CLEAR_REQUEST:
	case ROSE_CLEAR_CONFIRMATION:
	case ROSE_RESET_REQUEST:
	case ROSE_RESET_CONFIRMATION:
		return frame[2];
	default:
		break;
	}

	if ((frame[2] & 0x1F) == ROSE_RR  ||
	    (frame[2] & 0x1F) == ROSE_RNR) {
		*nr = (frame[2] >> 5) & 0x07;
		return frame[2] & 0x1F;
	}

	if ((frame[2] & 0x01) == ROSE_DATA) {
		*q  = (frame[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
		*d  = (frame[0] & ROSE_D_BIT) == ROSE_D_BIT;
		*m  = (frame[2] & ROSE_M_BIT) == ROSE_M_BIT;
		*nr = (frame[2] >> 5) & 0x07;
		*ns = (frame[2] >> 1) & 0x07;
		return ROSE_DATA;
	}

	return ROSE_ILLEGAL;
}

static int rose_parse_national(unsigned char *p, struct rose_facilities_struct *facilities, int len)
{
	unsigned char *pt;
	unsigned char l, lg, n = 0;
	int fac_national_digis_received = 0;

	do {
		switch (*p & 0xC0) {
		case 0x00:
			if (len < 2)
				return -1;
			p   += 2;
			n   += 2;
			len -= 2;
			break;

		case 0x40:
			if (len < 3)
				return -1;
			if (*p == FAC_NATIONAL_RAND)
				facilities->rand = ((p[1] << 8) & 0xFF00) + ((p[2] << 0) & 0x00FF);
			p   += 3;
			n   += 3;
			len -= 3;
			break;

		case 0x80:
			if (len < 4)
				return -1;
			p   += 4;
			n   += 4;
			len -= 4;
			break;

		case 0xC0:
			if (len < 2)
				return -1;
			l = p[1];
			if (len < 2 + l)
				return -1;
			if (*p == FAC_NATIONAL_DEST_DIGI) {
				if (!fac_national_digis_received) {
					if (l < AX25_ADDR_LEN)
						return -1;
					memcpy(&facilities->source_digis[0], p + 2, AX25_ADDR_LEN);
					facilities->source_ndigis = 1;
				}
			}
			else if (*p == FAC_NATIONAL_SRC_DIGI) {
				if (!fac_national_digis_received) {
					if (l < AX25_ADDR_LEN)
						return -1;
					memcpy(&facilities->dest_digis[0], p + 2, AX25_ADDR_LEN);
					facilities->dest_ndigis = 1;
				}
			}
			else if (*p == FAC_NATIONAL_FAIL_CALL) {
				if (l < AX25_ADDR_LEN)
					return -1;
				memcpy(&facilities->fail_call, p + 2, AX25_ADDR_LEN);
			}
			else if (*p == FAC_NATIONAL_FAIL_ADD) {
				if (l < 1 + ROSE_ADDR_LEN)
					return -1;
				memcpy(&facilities->fail_addr, p + 3, ROSE_ADDR_LEN);
			}
			else if (*p == FAC_NATIONAL_DIGIS) {
				if (l % AX25_ADDR_LEN)
					return -1;
				fac_national_digis_received = 1;
				facilities->source_ndigis = 0;
				facilities->dest_ndigis   = 0;
				for (pt = p + 2, lg = 0 ; lg < l ; pt += AX25_ADDR_LEN, lg += AX25_ADDR_LEN) {
					if (pt[6] & AX25_HBIT) {
						if (facilities->dest_ndigis >= ROSE_MAX_DIGIS)
							return -1;
						memcpy(&facilities->dest_digis[facilities->dest_ndigis++], pt, AX25_ADDR_LEN);
					} else {
						if (facilities->source_ndigis >= ROSE_MAX_DIGIS)
							return -1;
						memcpy(&facilities->source_digis[facilities->source_ndigis++], pt, AX25_ADDR_LEN);
					}
				}
			}
			p   += l + 2;
			n   += l + 2;
			len -= l + 2;
			break;
		}
	} while (*p != 0x00 && len > 0);

	return n;
}

static int rose_parse_ccitt(unsigned char *p, struct rose_facilities_struct *facilities, int len)
{
	unsigned char l, n = 0;
	char callsign[11];

	do {
		switch (*p & 0xC0) {
		case 0x00:
			if (len < 2)
				return -1;
			p   += 2;
			n   += 2;
			len -= 2;
			break;

		case 0x40:
			if (len < 3)
				return -1;
			p   += 3;
			n   += 3;
			len -= 3;
			break;

		case 0x80:
			if (len < 4)
				return -1;
			p   += 4;
			n   += 4;
			len -= 4;
			break;

		case 0xC0:
			if (len < 2)
				return -1;
			l = p[1];

			/* Prevent overflows*/
			if (l < 10 || l > 20)
				return -1;

			if (*p == FAC_CCITT_DEST_NSAP) {
				memcpy(&facilities->source_addr, p + 7, ROSE_ADDR_LEN);
				memcpy(callsign, p + 12,   l - 10);
				callsign[l - 10] = '\0';
				asc2ax(&facilities->source_call, callsign);
			}
			if (*p == FAC_CCITT_SRC_NSAP) {
				memcpy(&facilities->dest_addr, p + 7, ROSE_ADDR_LEN);
				memcpy(callsign, p + 12, l - 10);
				callsign[l - 10] = '\0';
				asc2ax(&facilities->dest_call, callsign);
			}
			p   += l + 2;
			n   += l + 2;
			len -= l + 2;
			break;
		}
	} while (*p != 0x00 && len > 0);

	return n;
}

int rose_parse_facilities(unsigned char *p, unsigned packet_len,
	struct rose_facilities_struct *facilities)
{
	int facilities_len, len;

	facilities_len = *p++;

	if (facilities_len == 0 || (unsigned int)facilities_len > packet_len)
		return 0;

	while (facilities_len >= 3 && *p == 0x00) {
		facilities_len--;
		p++;

		switch (*p) {
		case FAC_NATIONAL:		/* National */
			len = rose_parse_national(p + 1, facilities, facilities_len - 1);
			break;

		case FAC_CCITT:		/* CCITT */
			len = rose_parse_ccitt(p + 1, facilities, facilities_len - 1);
			break;

		default:
			printk(KERN_DEBUG "ROSE: rose_parse_facilities - unknown facilities family %02X\n", *p);
			len = 1;
			break;
		}

		if (len < 0)
			return 0;
		if (WARN_ON(len >= facilities_len))
			return 0;
		facilities_len -= len + 1;
		p += len + 1;
	}

	return facilities_len == 0;
}

static int rose_create_facilities(unsigned char *buffer, struct rose_sock *rose)
{
	unsigned char *p = buffer + 1;
	char *callsign;
	char buf[11];
	int len, nb;

	/* National Facilities */
	if (rose->rand != 0 || rose->source_ndigis == 1 || rose->dest_ndigis == 1) {
		*p++ = 0x00;
		*p++ = FAC_NATIONAL;

		if (rose->rand != 0) {
			*p++ = FAC_NATIONAL_RAND;
			*p++ = (rose->rand >> 8) & 0xFF;
			*p++ = (rose->rand >> 0) & 0xFF;
		}

		/* Sent before older facilities */
		if ((rose->source_ndigis > 0) || (rose->dest_ndigis > 0)) {
			int maxdigi = 0;
			*p++ = FAC_NATIONAL_DIGIS;
			*p++ = AX25_ADDR_LEN * (rose->source_ndigis + rose->dest_ndigis);
			for (nb = 0 ; nb < rose->source_ndigis ; nb++) {
				if (++maxdigi >= ROSE_MAX_DIGIS)
					break;
				memcpy(p, &rose->source_digis[nb], AX25_ADDR_LEN);
				p[6] |= AX25_HBIT;
				p += AX25_ADDR_LEN;
			}
			for (nb = 0 ; nb < rose->dest_ndigis ; nb++) {
				if (++maxdigi >= ROSE_MAX_DIGIS)
					break;
				memcpy(p, &rose->dest_digis[nb], AX25_ADDR_LEN);
				p[6] &= ~AX25_HBIT;
				p += AX25_ADDR_LEN;
			}
		}

		/* For compatibility */
		if (rose->source_ndigis > 0) {
			*p++ = FAC_NATIONAL_SRC_DIGI;
			*p++ = AX25_ADDR_LEN;
			memcpy(p, &rose->source_digis[0], AX25_ADDR_LEN);
			p   += AX25_ADDR_LEN;
		}

		/* For compatibility */
		if (rose->dest_ndigis > 0) {
			*p++ = FAC_NATIONAL_DEST_DIGI;
			*p++ = AX25_ADDR_LEN;
			memcpy(p, &rose->dest_digis[0], AX25_ADDR_LEN);
			p   += AX25_ADDR_LEN;
		}
	}

	*p++ = 0x00;
	*p++ = FAC_CCITT;

	*p++ = FAC_CCITT_DEST_NSAP;

	callsign = ax2asc(buf, &rose->dest_call);

	*p++ = strlen(callsign) + 10;
	*p++ = (strlen(callsign) + 9) * 2;		/* ??? */

	*p++ = 0x47; *p++ = 0x00; *p++ = 0x11;
	*p++ = ROSE_ADDR_LEN * 2;
	memcpy(p, &rose->dest_addr, ROSE_ADDR_LEN);
	p   += ROSE_ADDR_LEN;

	memcpy(p, callsign, strlen(callsign));
	p   += strlen(callsign);

	*p++ = FAC_CCITT_SRC_NSAP;

	callsign = ax2asc(buf, &rose->source_call);

	*p++ = strlen(callsign) + 10;
	*p++ = (strlen(callsign) + 9) * 2;		/* ??? */

	*p++ = 0x47; *p++ = 0x00; *p++ = 0x11;
	*p++ = ROSE_ADDR_LEN * 2;
	memcpy(p, &rose->source_addr, ROSE_ADDR_LEN);
	p   += ROSE_ADDR_LEN;

	memcpy(p, callsign, strlen(callsign));
	p   += strlen(callsign);

	len       = p - buffer;
	buffer[0] = len - 1;

	return len;
}

void rose_disconnect(struct sock *sk, int reason, int cause, int diagnostic)
{
	struct rose_sock *rose = rose_sk(sk);

	rose_stop_timer(sk);
	rose_stop_idletimer(sk);

	rose_clear_queues(sk);

	rose->lci   = 0;
	rose->state = ROSE_STATE_0;

	if (cause != -1)
		rose->cause = cause;

	if (diagnostic != -1)
		rose->diagnostic = diagnostic;

	sk->sk_state     = TCP_CLOSE;
	sk->sk_err       = reason;
	sk->sk_shutdown |= SEND_SHUTDOWN;

	if (!sock_flag(sk, SOCK_DEAD)) {
		sk->sk_state_change(sk);
		sock_set_flag(sk, SOCK_DEAD);
	}
}
Commit	Line	Data
1da177e4 LT	1	/*
	2	* This program is free software; you can redistribute it and/or modify
	3	* it under the terms of the GNU General Public License as published by
	4	* the Free Software Foundation; either version 2 of the License, or
	5	* (at your option) any later version.
	6	*
	7	* Copyright (C) Jonathan Naylor G4KLX ([email protected])
	8	*/
	9	#include <linux/errno.h>
	10	#include <linux/types.h>
	11	#include <linux/socket.h>
	12	#include <linux/in.h>
	13	#include <linux/kernel.h>
1da177e4 LT	14	#include <linux/timer.h>
	15	#include <linux/string.h>
	16	#include <linux/sockios.h>
	17	#include <linux/net.h>
5a0e3ad6	18	#include <linux/slab.h>
1da177e4 LT	19	#include <net/ax25.h>
	20	#include <linux/inet.h>
	21	#include <linux/netdevice.h>
	22	#include <linux/skbuff.h>
	23	#include <net/sock.h>
c752f073	24	#include <net/tcp_states.h>
1da177e4 LT	25	#include <linux/fcntl.h>
	26	#include <linux/mm.h>
	27	#include <linux/interrupt.h>
	28	#include <net/rose.h>
	29
	30	static int rose_create_facilities(unsigned char buffer, struct rose_sock rose);
	31
	32	/*
	33	* This routine purges all of the queues of frames.
	34	*/
	35	void rose_clear_queues(struct sock *sk)
	36	{
	37	skb_queue_purge(&sk->sk_write_queue);
	38	skb_queue_purge(&rose_sk(sk)->ack_queue);
	39	}
	40
	41	/*
	42	* This routine purges the input queue of those frames that have been
	43	* acknowledged. This replaces the boxes labelled "V(a) <- N(r)" on the
	44	* SDL diagram.
	45	*/
	46	void rose_frames_acked(struct sock *sk, unsigned short nr)
	47	{
	48	struct sk_buff *skb;
	49	struct rose_sock *rose = rose_sk(sk);
	50
	51	/*
	52	* Remove all the ack-ed frames from the ack queue.
	53	*/
	54	if (rose->va != nr) {
	55	while (skb_peek(&rose->ack_queue) != NULL && rose->va != nr) {
	56	skb = skb_dequeue(&rose->ack_queue);
	57	kfree_skb(skb);
	58	rose->va = (rose->va + 1) % ROSE_MODULUS;
	59	}
	60	}
	61	}
	62
	63	void rose_requeue_frames(struct sock *sk)
	64	{
	65	struct sk_buff skb, skb_prev = NULL;
	66
	67	/*
	68	* Requeue all the un-ack-ed frames on the output queue to be picked
	69	* up by rose_kick. This arrangement handles the possibility of an
	70	* empty output queue.
	71	*/
	72	while ((skb = skb_dequeue(&rose_sk(sk)->ack_queue)) != NULL) {
	73	if (skb_prev == NULL)
	74	skb_queue_head(&sk->sk_write_queue, skb);
	75	else
8728b834	76	skb_append(skb_prev, skb, &sk->sk_write_queue);
1da177e4 LT	77	skb_prev = skb;
	78	}
	79	}
	80
	81	/*
	82	* Validate that the value of nr is between va and vs. Return true or
	83	* false for testing.
	84	*/
	85	int rose_validate_nr(struct sock *sk, unsigned short nr)
	86	{
	87	struct rose_sock *rose = rose_sk(sk);
	88	unsigned short vc = rose->va;
	89
	90	while (vc != rose->vs) {
	91	if (nr == vc) return 1;
	92	vc = (vc + 1) % ROSE_MODULUS;
	93	}
	94
	95	return nr == rose->vs;
	96	}
	97
	98	/*
	99	* This routine is called when the packet layer internally generates a
	100	* control frame.
	101	*/
	102	void rose_write_internal(struct sock *sk, int frametype)
	103	{
	104	struct rose_sock *rose = rose_sk(sk);
	105	struct sk_buff *skb;
	106	unsigned char *dptr;
	107	unsigned char lci1, lci2;
	108	char buffer[100];
	109	int len, faclen = 0;
	110
	111	len = AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN + 1;
	112
	113	switch (frametype) {
	114	case ROSE_CALL_REQUEST:
	115	len += 1 + ROSE_ADDR_LEN + ROSE_ADDR_LEN;
	116	faclen = rose_create_facilities(buffer, rose);
	117	len += faclen;
	118	break;
	119	case ROSE_CALL_ACCEPTED:
	120	case ROSE_CLEAR_REQUEST:
	121	case ROSE_RESET_REQUEST:
	122	len += 2;
	123	break;
	124	}
	125
	126	if ((skb = alloc_skb(len, GFP_ATOMIC)) == NULL)
	127	return;
	128
	129	/*
	130	* Space for AX.25 header and PID.
	131	*/
	132	skb_reserve(skb, AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + 1);
	133
	134	dptr = skb_put(skb, skb_tailroom(skb));
	135
	136	lci1 = (rose->lci >> 8) & 0x0F;
	137	lci2 = (rose->lci >> 0) & 0xFF;
	138
	139	switch (frametype) {
	140	case ROSE_CALL_REQUEST:
141	*dptr++ = ROSE_GFI \| lci1;
142	*dptr++ = lci2;
143	*dptr++ = frametype;
e0bccd31	144	*dptr++ = ROSE_CALL_REQ_ADDR_LEN_VAL;
1da177e4 LT	145	memcpy(dptr, &rose->dest_addr, ROSE_ADDR_LEN);
	146	dptr += ROSE_ADDR_LEN;
	147	memcpy(dptr, &rose->source_addr, ROSE_ADDR_LEN);
	148	dptr += ROSE_ADDR_LEN;
	149	memcpy(dptr, buffer, faclen);
	150	dptr += faclen;
	151	break;
	152
	153	case ROSE_CALL_ACCEPTED:
	154	*dptr++ = ROSE_GFI \| lci1;
	155	*dptr++ = lci2;
	156	*dptr++ = frametype;
	157	dptr++ = 0x00; / Address length */
	158	dptr++ = 0; / Facilities length */
	159	break;
	160
	161	case ROSE_CLEAR_REQUEST:
	162	*dptr++ = ROSE_GFI \| lci1;
	163	*dptr++ = lci2;
	164	*dptr++ = frametype;
	165	*dptr++ = rose->cause;
	166	*dptr++ = rose->diagnostic;
	167	break;
	168
	169	case ROSE_RESET_REQUEST:
	170	*dptr++ = ROSE_GFI \| lci1;
	171	*dptr++ = lci2;
	172	*dptr++ = frametype;
	173	*dptr++ = ROSE_DTE_ORIGINATED;
	174	*dptr++ = 0;
	175	break;
	176
	177	case ROSE_RR:
	178	case ROSE_RNR:
	179	*dptr++ = ROSE_GFI \| lci1;
	180	*dptr++ = lci2;
	181	*dptr = frametype;
	182	*dptr++ \|= (rose->vr << 5) & 0xE0;
	183	break;
	184
	185	case ROSE_CLEAR_CONFIRMATION:
	186	case ROSE_RESET_CONFIRMATION:
	187	*dptr++ = ROSE_GFI \| lci1;
	188	*dptr++ = lci2;
	189	*dptr++ = frametype;
	190	break;
	191
	192	default:
	193	printk(KERN_ERR "ROSE: rose_write_internal - invalid frametype %02X\n", frametype);
	194	kfree_skb(skb);
	195	return;
	196	}
	197
	198	rose_transmit_link(skb, rose->neighbour);
	199	}
	200
	201	int rose_decode(struct sk_buff skb, int ns, int nr, int q, int d, int m)
	202	{
	203	unsigned char *frame;
	204
	205	frame = skb->data;
	206
	207	ns = nr = q = d = *m = 0;
	208
209	switch (frame[2]) {
210	case ROSE_CALL_REQUEST:
211	case ROSE_CALL_ACCEPTED:
212	case ROSE_CLEAR_REQUEST:
213	case ROSE_CLEAR_CONFIRMATION:
214	case ROSE_RESET_REQUEST:
215	case ROSE_RESET_CONFIRMATION:
216	return frame[2];
217	default:
218	break;
219	}
220
221	if ((frame[2] & 0x1F) == ROSE_RR \|\|
222	(frame[2] & 0x1F) == ROSE_RNR) {
223	*nr = (frame[2] >> 5) & 0x07;
224	return frame[2] & 0x1F;
225	}
226
227	if ((frame[2] & 0x01) == ROSE_DATA) {
228	*q = (frame[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
229	*d = (frame[0] & ROSE_D_BIT) == ROSE_D_BIT;
230	*m = (frame[2] & ROSE_M_BIT) == ROSE_M_BIT;
231	*nr = (frame[2] >> 5) & 0x07;
232	*ns = (frame[2] >> 1) & 0x07;
233	return ROSE_DATA;
234	}
235
236	return ROSE_ILLEGAL;
237	}
238
239	static int rose_parse_national(unsigned char p, struct rose_facilities_struct facilities, int len)
240	{
241	unsigned char *pt;
242	unsigned char l, lg, n = 0;
243	int fac_national_digis_received = 0;
244
245	do {
246	switch (*p & 0xC0) {
247	case 0x00:
e0bccd31 BH	248	if (len < 2)
e0bccd31 BH	249	return -1;
1da177e4 LT	250	p += 2;
	251	n += 2;
	252	len -= 2;
	253	break;
	254
	255	case 0x40:
e0bccd31 BH	256	if (len < 3)
e0bccd31 BH	257	return -1;
1da177e4 LT	258	if (*p == FAC_NATIONAL_RAND)
	259	facilities->rand = ((p[1] << 8) & 0xFF00) + ((p[2] << 0) & 0x00FF);
	260	p += 3;
	261	n += 3;
	262	len -= 3;
	263	break;
	264
	265	case 0x80:
e0bccd31 BH	266	if (len < 4)
e0bccd31 BH	267	return -1;
1da177e4 LT	268	p += 4;
	269	n += 4;
	270	len -= 4;
	271	break;
	272
	273	case 0xC0:
e0bccd31 BH	274	if (len < 2)
e0bccd31 BH	275	return -1;
1da177e4	276	l = p[1];
e0bccd31 BH	277	if (len < 2 + l)
e0bccd31 BH	278	return -1;
1da177e4 LT	279	if (*p == FAC_NATIONAL_DEST_DIGI) {
1da177e4 LT	280	if (!fac_national_digis_received) {
e0bccd31 BH	281	if (l < AX25_ADDR_LEN)
e0bccd31 BH	282	return -1;
1da177e4 LT	283	memcpy(&facilities->source_digis[0], p + 2, AX25_ADDR_LEN);
	284	facilities->source_ndigis = 1;
	285	}
	286	}
	287	else if (*p == FAC_NATIONAL_SRC_DIGI) {
	288	if (!fac_national_digis_received) {
e0bccd31 BH	289	if (l < AX25_ADDR_LEN)
e0bccd31 BH	290	return -1;
1da177e4 LT	291	memcpy(&facilities->dest_digis[0], p + 2, AX25_ADDR_LEN);
	292	facilities->dest_ndigis = 1;
	293	}
	294	}
	295	else if (*p == FAC_NATIONAL_FAIL_CALL) {
e0bccd31 BH	296	if (l < AX25_ADDR_LEN)
e0bccd31 BH	297	return -1;
1da177e4 LT	298	memcpy(&facilities->fail_call, p + 2, AX25_ADDR_LEN);
	299	}
	300	else if (*p == FAC_NATIONAL_FAIL_ADD) {
e0bccd31 BH	301	if (l < 1 + ROSE_ADDR_LEN)
e0bccd31 BH	302	return -1;
1da177e4 LT	303	memcpy(&facilities->fail_addr, p + 3, ROSE_ADDR_LEN);
	304	}
	305	else if (*p == FAC_NATIONAL_DIGIS) {
e0bccd31 BH	306	if (l % AX25_ADDR_LEN)
e0bccd31 BH	307	return -1;
1da177e4 LT	308	fac_national_digis_received = 1;
	309	facilities->source_ndigis = 0;
	310	facilities->dest_ndigis = 0;
	311	for (pt = p + 2, lg = 0 ; lg < l ; pt += AX25_ADDR_LEN, lg += AX25_ADDR_LEN) {
be20250c DR	312	if (pt[6] & AX25_HBIT) {
	313	if (facilities->dest_ndigis >= ROSE_MAX_DIGIS)
	314	return -1;
1da177e4	315	memcpy(&facilities->dest_digis[facilities->dest_ndigis++], pt, AX25_ADDR_LEN);
be20250c DR	316	} else {
	317	if (facilities->source_ndigis >= ROSE_MAX_DIGIS)
	318	return -1;
1da177e4	319	memcpy(&facilities->source_digis[facilities->source_ndigis++], pt, AX25_ADDR_LEN);
be20250c	320	}
1da177e4 LT	321	}
	322	}
	323	p += l + 2;
	324	n += l + 2;
	325	len -= l + 2;
	326	break;
	327	}
	328	} while (*p != 0x00 && len > 0);
	329
	330	return n;
	331	}
	332
	333	static int rose_parse_ccitt(unsigned char p, struct rose_facilities_struct facilities, int len)
	334	{
	335	unsigned char l, n = 0;
	336	char callsign[11];
	337
	338	do {
	339	switch (*p & 0xC0) {
	340	case 0x00:
e0bccd31 BH	341	if (len < 2)
e0bccd31 BH	342	return -1;
1da177e4 LT	343	p += 2;
	344	n += 2;
	345	len -= 2;
	346	break;
	347
	348	case 0x40:
e0bccd31 BH	349	if (len < 3)
e0bccd31 BH	350	return -1;
1da177e4 LT	351	p += 3;
	352	n += 3;
	353	len -= 3;
	354	break;
	355
	356	case 0x80:
e0bccd31 BH	357	if (len < 4)
e0bccd31 BH	358	return -1;
1da177e4 LT	359	p += 4;
	360	n += 4;
	361	len -= 4;
	362	break;
	363
	364	case 0xC0:
e0bccd31 BH	365	if (len < 2)
e0bccd31 BH	366	return -1;
1da177e4	367	l = p[1];
be20250c DR	368
	369	/* Prevent overflows*/
	370	if (l < 10 \|\| l > 20)
	371	return -1;
	372
1da177e4 LT	373	if (*p == FAC_CCITT_DEST_NSAP) {
	374	memcpy(&facilities->source_addr, p + 7, ROSE_ADDR_LEN);
	375	memcpy(callsign, p + 12, l - 10);
	376	callsign[l - 10] = '\0';
baed16a7	377	asc2ax(&facilities->source_call, callsign);
1da177e4 LT	378	}
	379	if (*p == FAC_CCITT_SRC_NSAP) {
	380	memcpy(&facilities->dest_addr, p + 7, ROSE_ADDR_LEN);
	381	memcpy(callsign, p + 12, l - 10);
	382	callsign[l - 10] = '\0';
baed16a7	383	asc2ax(&facilities->dest_call, callsign);
1da177e4 LT	384	}
	385	p += l + 2;
	386	n += l + 2;
	387	len -= l + 2;
	388	break;
	389	}
	390	} while (*p != 0x00 && len > 0);
	391
	392	return n;
	393	}
	394
e0bccd31	395	int rose_parse_facilities(unsigned char *p, unsigned packet_len,
1da177e4 LT	396	struct rose_facilities_struct *facilities)
	397	{
	398	int facilities_len, len;
	399
	400	facilities_len = *p++;
	401
95c96174	402	if (facilities_len == 0 \|\| (unsigned int)facilities_len > packet_len)
1da177e4 LT	403	return 0;
1da177e4 LT	404
e0bccd31 BH	405	while (facilities_len >= 3 && *p == 0x00) {
	406	facilities_len--;
	407	p++;
	408
	409	switch (*p) {
	410	case FAC_NATIONAL: /* National */
	411	len = rose_parse_national(p + 1, facilities, facilities_len - 1);
	412	break;
	413
	414	case FAC_CCITT: /* CCITT */
	415	len = rose_parse_ccitt(p + 1, facilities, facilities_len - 1);
	416	break;
	417
	418	default:
	419	printk(KERN_DEBUG "ROSE: rose_parse_facilities - unknown facilities family %02X\n", *p);
	420	len = 1;
	421	break;
	422	}
	423
	424	if (len < 0)
	425	return 0;
	426	if (WARN_ON(len >= facilities_len))
	427	return 0;
	428	facilities_len -= len + 1;
	429	p += len + 1;
1da177e4 LT	430	}
1da177e4 LT	431
e0bccd31	432	return facilities_len == 0;
1da177e4 LT	433	}
	434
	435	static int rose_create_facilities(unsigned char buffer, struct rose_sock rose)
	436	{
	437	unsigned char *p = buffer + 1;
	438	char *callsign;
f75268cd	439	char buf[11];
1da177e4 LT	440	int len, nb;
	441
	442	/* National Facilities */
	443	if (rose->rand != 0 \|\| rose->source_ndigis == 1 \|\| rose->dest_ndigis == 1) {
	444	*p++ = 0x00;
	445	*p++ = FAC_NATIONAL;
	446
	447	if (rose->rand != 0) {
	448	*p++ = FAC_NATIONAL_RAND;
	449	*p++ = (rose->rand >> 8) & 0xFF;
	450	*p++ = (rose->rand >> 0) & 0xFF;
	451	}
	452
	453	/* Sent before older facilities */
	454	if ((rose->source_ndigis > 0) \|\| (rose->dest_ndigis > 0)) {
	455	int maxdigi = 0;
	456	*p++ = FAC_NATIONAL_DIGIS;
	457	p++ = AX25_ADDR_LEN (rose->source_ndigis + rose->dest_ndigis);
	458	for (nb = 0 ; nb < rose->source_ndigis ; nb++) {
	459	if (++maxdigi >= ROSE_MAX_DIGIS)
	460	break;
	461	memcpy(p, &rose->source_digis[nb], AX25_ADDR_LEN);
	462	p[6] \|= AX25_HBIT;
	463	p += AX25_ADDR_LEN;
	464	}
	465	for (nb = 0 ; nb < rose->dest_ndigis ; nb++) {
	466	if (++maxdigi >= ROSE_MAX_DIGIS)
	467	break;
	468	memcpy(p, &rose->dest_digis[nb], AX25_ADDR_LEN);
	469	p[6] &= ~AX25_HBIT;
	470	p += AX25_ADDR_LEN;
	471	}
	472	}
	473
	474	/* For compatibility */
	475	if (rose->source_ndigis > 0) {
	476	*p++ = FAC_NATIONAL_SRC_DIGI;
	477	*p++ = AX25_ADDR_LEN;
	478	memcpy(p, &rose->source_digis[0], AX25_ADDR_LEN);
	479	p += AX25_ADDR_LEN;
	480	}
	481
	482	/* For compatibility */
	483	if (rose->dest_ndigis > 0) {
	484	*p++ = FAC_NATIONAL_DEST_DIGI;
	485	*p++ = AX25_ADDR_LEN;
	486	memcpy(p, &rose->dest_digis[0], AX25_ADDR_LEN);
	487	p += AX25_ADDR_LEN;
	488	}
	489	}
	490
	491	*p++ = 0x00;
	492	*p++ = FAC_CCITT;
	493
	494	*p++ = FAC_CCITT_DEST_NSAP;
	495
f75268cd	496	callsign = ax2asc(buf, &rose->dest_call);
1da177e4 LT	497
	498	*p++ = strlen(callsign) + 10;
	499	p++ = (strlen(callsign) + 9) 2; /* ??? */
	500
	501	p++ = 0x47; p++ = 0x00; *p++ = 0x11;
	502	p++ = ROSE_ADDR_LEN 2;
	503	memcpy(p, &rose->dest_addr, ROSE_ADDR_LEN);
	504	p += ROSE_ADDR_LEN;
	505
	506	memcpy(p, callsign, strlen(callsign));
	507	p += strlen(callsign);
	508
	509	*p++ = FAC_CCITT_SRC_NSAP;
	510
f75268cd	511	callsign = ax2asc(buf, &rose->source_call);
1da177e4 LT	512
	513	*p++ = strlen(callsign) + 10;
	514	p++ = (strlen(callsign) + 9) 2; /* ??? */
	515
	516	p++ = 0x47; p++ = 0x00; *p++ = 0x11;
	517	p++ = ROSE_ADDR_LEN 2;
	518	memcpy(p, &rose->source_addr, ROSE_ADDR_LEN);
	519	p += ROSE_ADDR_LEN;
	520
	521	memcpy(p, callsign, strlen(callsign));
	522	p += strlen(callsign);
	523
	524	len = p - buffer;
	525	buffer[0] = len - 1;
	526
	527	return len;
	528	}
	529
	530	void rose_disconnect(struct sock *sk, int reason, int cause, int diagnostic)
	531	{
	532	struct rose_sock *rose = rose_sk(sk);
	533
	534	rose_stop_timer(sk);
	535	rose_stop_idletimer(sk);
	536
	537	rose_clear_queues(sk);
	538
	539	rose->lci = 0;
	540	rose->state = ROSE_STATE_0;
	541
	542	if (cause != -1)
	543	rose->cause = cause;
	544
	545	if (diagnostic != -1)
	546	rose->diagnostic = diagnostic;
	547
	548	sk->sk_state = TCP_CLOSE;
	549	sk->sk_err = reason;
	550	sk->sk_shutdown \|= SEND_SHUTDOWN;
	551
	552	if (!sock_flag(sk, SOCK_DEAD)) {
	553	sk->sk_state_change(sk);
	554	sock_set_flag(sk, SOCK_DEAD);
	555	}
	556	}