]> Git Repo - linux.git/blame - net/netrom/af_netrom.c
projects / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[NET]: Fix socket bitop damage
[linux.git] / net / netrom / af_netrom.c
CommitLineData
1da177e4
LT		 1/*
2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License as published by
4 * the Free Software Foundation; either version 2 of the License, or
5 * (at your option) any later version.
6 *
7 * Copyright Jonathan Naylor G4KLX ([email protected])
8 * Copyright Alan Cox GW4PTS ([email protected])
9 * Copyright Darryl Miles G7LED ([email protected])
10 */
11#include <linux/config.h>
12#include <linux/module.h>
13#include <linux/moduleparam.h>
14#include <linux/errno.h>
15#include <linux/types.h>
16#include <linux/socket.h>
17#include <linux/in.h>
18#include <linux/kernel.h>
19#include <linux/sched.h>
20#include <linux/timer.h>
21#include <linux/string.h>
22#include <linux/sockios.h>
23#include <linux/net.h>
24#include <linux/stat.h>
25#include <net/ax25.h>
26#include <linux/inet.h>
27#include <linux/netdevice.h>
28#include <linux/if_arp.h>
29#include <linux/skbuff.h>
30#include <net/sock.h>
31#include <asm/uaccess.h>
32#include <asm/system.h>
33#include <linux/fcntl.h>
34#include <linux/termios.h> /* For TIOCINQ/OUTQ */
35#include <linux/mm.h>
36#include <linux/interrupt.h>
37#include <linux/notifier.h>
38#include <net/netrom.h>
39#include <linux/proc_fs.h>
40#include <linux/seq_file.h>
41#include <net/ip.h>
42#include <net/tcp.h>
43#include <net/arp.h>
44#include <linux/init.h>
45
46static int nr_ndevs = 4;
47
48int sysctl_netrom_default_path_quality = NR_DEFAULT_QUAL;
49int sysctl_netrom_obsolescence_count_initialiser = NR_DEFAULT_OBS;
50int sysctl_netrom_network_ttl_initialiser = NR_DEFAULT_TTL;
51int sysctl_netrom_transport_timeout = NR_DEFAULT_T1;
52int sysctl_netrom_transport_maximum_tries = NR_DEFAULT_N2;
53int sysctl_netrom_transport_acknowledge_delay = NR_DEFAULT_T2;
54int sysctl_netrom_transport_busy_delay = NR_DEFAULT_T4;
55int sysctl_netrom_transport_requested_window_size = NR_DEFAULT_WINDOW;
56int sysctl_netrom_transport_no_activity_timeout = NR_DEFAULT_IDLE;
57int sysctl_netrom_routing_control = NR_DEFAULT_ROUTING;
58int sysctl_netrom_link_fails_count = NR_DEFAULT_FAILS;
59
60static unsigned short circuit = 0x101;
61
62static HLIST_HEAD(nr_list);
63static DEFINE_SPINLOCK(nr_list_lock);
64
65static struct proto_ops nr_proto_ops;
66
67/*
68 * Socket removal during an interrupt is now safe.
69 */
70static void nr_remove_socket(struct sock *sk)
71{
72 spin_lock_bh(&nr_list_lock);
73 sk_del_node_init(sk);
74 spin_unlock_bh(&nr_list_lock);
75}
76
77/*
78 * Kill all bound sockets on a dropped device.
79 */
80static void nr_kill_by_device(struct net_device *dev)
81{
82 struct sock *s;
83 struct hlist_node *node;
84
85 spin_lock_bh(&nr_list_lock);
86 sk_for_each(s, node, &nr_list)
87 if (nr_sk(s)->device == dev)
88 nr_disconnect(s, ENETUNREACH);
89 spin_unlock_bh(&nr_list_lock);
90}
91
92/*
93 * Handle device status changes.
94 */
95static int nr_device_event(struct notifier_block *this, unsigned long event, void *ptr)
96{
97 struct net_device *dev = (struct net_device *)ptr;
98
99 if (event != NETDEV_DOWN)
100 return NOTIFY_DONE;
101
102 nr_kill_by_device(dev);
103 nr_rt_device_down(dev);
104
105 return NOTIFY_DONE;
106}
107
108/*
109 * Add a socket to the bound sockets list.
110 */
111static void nr_insert_socket(struct sock *sk)
112{
113 spin_lock_bh(&nr_list_lock);
114 sk_add_node(sk, &nr_list);
115 spin_unlock_bh(&nr_list_lock);
116}
117
118/*
119 * Find a socket that wants to accept the Connect Request we just
120 * received.
121 */
122static struct sock *nr_find_listener(ax25_address *addr)
123{
124 struct sock *s;
125 struct hlist_node *node;
126
127 spin_lock_bh(&nr_list_lock);
128 sk_for_each(s, node, &nr_list)
129 if (!ax25cmp(&nr_sk(s)->source_addr, addr) &&
130 s->sk_state == TCP_LISTEN) {
131 bh_lock_sock(s);
132 goto found;
133 }
134 s = NULL;
135found:
136 spin_unlock_bh(&nr_list_lock);
137 return s;
138}
139
140/*
141 * Find a connected NET/ROM socket given my circuit IDs.
142 */
143static struct sock *nr_find_socket(unsigned char index, unsigned char id)
144{
145 struct sock *s;
146 struct hlist_node *node;
147
148 spin_lock_bh(&nr_list_lock);
149 sk_for_each(s, node, &nr_list) {
150 struct nr_sock *nr = nr_sk(s);
151
152 if (nr->my_index == index && nr->my_id == id) {
153 bh_lock_sock(s);
154 goto found;
155 }
156 }
157 s = NULL;
158found:
159 spin_unlock_bh(&nr_list_lock);
160 return s;
161}
162
163/*
164 * Find a connected NET/ROM socket given their circuit IDs.
165 */
166static struct sock *nr_find_peer(unsigned char index, unsigned char id,
167 ax25_address *dest)
168{
169 struct sock *s;
170 struct hlist_node *node;
171
172 spin_lock_bh(&nr_list_lock);
173 sk_for_each(s, node, &nr_list) {
174 struct nr_sock *nr = nr_sk(s);
175
176 if (nr->your_index == index && nr->your_id == id &&
177 !ax25cmp(&nr->dest_addr, dest)) {
178 bh_lock_sock(s);
179 goto found;
180 }
181 }
182 s = NULL;
183found:
184 spin_unlock_bh(&nr_list_lock);
185 return s;
186}
187
188/*
189 * Find next free circuit ID.
190 */
191static unsigned short nr_find_next_circuit(void)
192{
193 unsigned short id = circuit;
194 unsigned char i, j;
195 struct sock *sk;
196
197 for (;;) {
198 i = id / 256;
199 j = id % 256;
200
201 if (i != 0 && j != 0) {
202 if ((sk=nr_find_socket(i, j)) == NULL)
203 break;
204 bh_unlock_sock(sk);
205 }
206
207 id++;
208 }
209
210 return id;
211}
212
213/*
214 * Deferred destroy.
215 */
216void nr_destroy_socket(struct sock *);
217
218/*
219 * Handler for deferred kills.
220 */
221static void nr_destroy_timer(unsigned long data)
222{
223 struct sock *sk=(struct sock *)data;
224 bh_lock_sock(sk);
225 sock_hold(sk);
226 nr_destroy_socket(sk);
227 bh_unlock_sock(sk);
228 sock_put(sk);
229}
230
231/*
232 * This is called from user mode and the timers. Thus it protects itself
233 * against interrupt users but doesn't worry about being called during
234 * work. Once it is removed from the queue no interrupt or bottom half
235 * will touch it and we are (fairly 8-) ) safe.
236 */
237void nr_destroy_socket(struct sock *sk)
238{
239 struct sk_buff *skb;
240
241 nr_remove_socket(sk);
242
243 nr_stop_heartbeat(sk);
244 nr_stop_t1timer(sk);
245 nr_stop_t2timer(sk);
246 nr_stop_t4timer(sk);
247 nr_stop_idletimer(sk);
248
249 nr_clear_queues(sk); /* Flush the queues */
250
251 while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
252 if (skb->sk != sk) { /* A pending connection */
253 /* Queue the unaccepted socket for death */
254 sock_set_flag(skb->sk, SOCK_DEAD);
255 nr_start_heartbeat(skb->sk);
256 nr_sk(skb->sk)->state = NR_STATE_0;
257 }
258
259 kfree_skb(skb);
260 }
261
262 if (atomic_read(&sk->sk_wmem_alloc) ||
263 atomic_read(&sk->sk_rmem_alloc)) {
264 /* Defer: outstanding buffers */
265 sk->sk_timer.function = nr_destroy_timer;
266 sk->sk_timer.expires = jiffies + 2 * HZ;
267 add_timer(&sk->sk_timer);
268 } else
269 sock_put(sk);
270}
271
272/*
273 * Handling for system calls applied via the various interfaces to a
274 * NET/ROM socket object.
275 */
276
277static int nr_setsockopt(struct socket *sock, int level, int optname,
278 char __user *optval, int optlen)
279{
280 struct sock *sk = sock->sk;
281 struct nr_sock *nr = nr_sk(sk);
282 int opt;
283
284 if (level != SOL_NETROM)
285 return -ENOPROTOOPT;
286
287 if (optlen < sizeof(int))
288 return -EINVAL;
289
290 if (get_user(opt, (int __user *)optval))
291 return -EFAULT;
292
293 switch (optname) {
294 case NETROM_T1:
295 if (opt < 1)
296 return -EINVAL;
297 nr->t1 = opt * HZ;
298 return 0;
299
300 case NETROM_T2:
301 if (opt < 1)
302 return -EINVAL;
303 nr->t2 = opt * HZ;
304 return 0;
305
306 case NETROM_N2:
307 if (opt < 1 || opt > 31)
308 return -EINVAL;
309 nr->n2 = opt;
310 return 0;
311
312 case NETROM_T4:
313 if (opt < 1)
314 return -EINVAL;
315 nr->t4 = opt * HZ;
316 return 0;
317
318 case NETROM_IDLE:
319 if (opt < 0)
320 return -EINVAL;
321 nr->idle = opt * 60 * HZ;
322 return 0;
323
324 default:
325 return -ENOPROTOOPT;
326 }
327}
328
329static int nr_getsockopt(struct socket *sock, int level, int optname,
330 char __user *optval, int __user *optlen)
331{
332 struct sock *sk = sock->sk;
333 struct nr_sock *nr = nr_sk(sk);
334 int val = 0;
335 int len;
336
337 if (level != SOL_NETROM)
338 return -ENOPROTOOPT;
339
340 if (get_user(len, optlen))
341 return -EFAULT;
342
343 if (len < 0)
344 return -EINVAL;
345
346 switch (optname) {
347 case NETROM_T1:
348 val = nr->t1 / HZ;
349 break;
350
351 case NETROM_T2:
352 val = nr->t2 / HZ;
353 break;
354
355 case NETROM_N2:
356 val = nr->n2;
357 break;
358
359 case NETROM_T4:
360 val = nr->t4 / HZ;
361 break;
362
363 case NETROM_IDLE:
364 val = nr->idle / (60 * HZ);
365 break;
366
367 default:
368 return -ENOPROTOOPT;
369 }
370
371 len = min_t(unsigned int, len, sizeof(int));
372
373 if (put_user(len, optlen))
374 return -EFAULT;
375
376 return copy_to_user(optval, &val, len) ? -EFAULT : 0;
377}
378
379static int nr_listen(struct socket *sock, int backlog)
380{
381 struct sock *sk = sock->sk;
382
383 lock_sock(sk);
384 if (sk->sk_state != TCP_LISTEN) {
385 memset(&nr_sk(sk)->user_addr, 0, AX25_ADDR_LEN);
386 sk->sk_max_ack_backlog = backlog;
387 sk->sk_state = TCP_LISTEN;
388 release_sock(sk);
389 return 0;
390 }
391 release_sock(sk);
392
393 return -EOPNOTSUPP;
394}
395
396static struct proto nr_proto = {
397 .name = "NETROM",
398 .owner = THIS_MODULE,
399 .obj_size = sizeof(struct nr_sock),
400};
401
402static int nr_create(struct socket *sock, int protocol)
403{
404 struct sock *sk;
405 struct nr_sock *nr;
406
407 if (sock->type != SOCK_SEQPACKET || protocol != 0)
408 return -ESOCKTNOSUPPORT;
409
410 if ((sk = sk_alloc(PF_NETROM, GFP_ATOMIC, &nr_proto, 1)) == NULL)
411 return -ENOMEM;
412
413 nr = nr_sk(sk);
414
415 sock_init_data(sock, sk);
416
417 sock->ops = &nr_proto_ops;
418 sk->sk_protocol = protocol;
419
420 skb_queue_head_init(&nr->ack_queue);
421 skb_queue_head_init(&nr->reseq_queue);
422 skb_queue_head_init(&nr->frag_queue);
423
424 nr_init_timers(sk);
425
426 nr->t1 = sysctl_netrom_transport_timeout;
427 nr->t2 = sysctl_netrom_transport_acknowledge_delay;
428 nr->n2 = sysctl_netrom_transport_maximum_tries;
429 nr->t4 = sysctl_netrom_transport_busy_delay;
430 nr->idle = sysctl_netrom_transport_no_activity_timeout;
431 nr->window = sysctl_netrom_transport_requested_window_size;
432
433 nr->bpqext = 1;
434 nr->state = NR_STATE_0;
435
436 return 0;
437}
438
439static struct sock *nr_make_new(struct sock *osk)
440{
441 struct sock *sk;
442 struct nr_sock *nr, *onr;
443
444 if (osk->sk_type != SOCK_SEQPACKET)
445 return NULL;
446
447 if ((sk = sk_alloc(PF_NETROM, GFP_ATOMIC, osk->sk_prot, 1)) == NULL)
448 return NULL;
449
450 nr = nr_sk(sk);
451
452 sock_init_data(NULL, sk);
453
454 sk->sk_type = osk->sk_type;
455 sk->sk_socket = osk->sk_socket;
456 sk->sk_priority = osk->sk_priority;
457 sk->sk_protocol = osk->sk_protocol;
458 sk->sk_rcvbuf = osk->sk_rcvbuf;
459 sk->sk_sndbuf = osk->sk_sndbuf;
460 sk->sk_state = TCP_ESTABLISHED;
461 sk->sk_sleep = osk->sk_sleep;
53b924b3 462 sock_copy_flags(sk, osk);
1da177e4
LT		 463
464 skb_queue_head_init(&nr->ack_queue);
465 skb_queue_head_init(&nr->reseq_queue);
466 skb_queue_head_init(&nr->frag_queue);
467
468 nr_init_timers(sk);
469
470 onr = nr_sk(osk);
471
472 nr->t1 = onr->t1;
473 nr->t2 = onr->t2;
474 nr->n2 = onr->n2;
475 nr->t4 = onr->t4;
476 nr->idle = onr->idle;
477 nr->window = onr->window;
478
479 nr->device = onr->device;
480 nr->bpqext = onr->bpqext;
481
482 return sk;
483}
484
485static int nr_release(struct socket *sock)
486{
487 struct sock *sk = sock->sk;
488 struct nr_sock *nr;
489
490 if (sk == NULL) return 0;
491
492 sock_hold(sk);
493 lock_sock(sk);
494 nr = nr_sk(sk);
495
496 switch (nr->state) {
497 case NR_STATE_0:
498 case NR_STATE_1:
499 case NR_STATE_2:
500 nr_disconnect(sk, 0);
501 nr_destroy_socket(sk);
502 break;
503
504 case NR_STATE_3:
505 nr_clear_queues(sk);
506 nr->n2count = 0;
507 nr_write_internal(sk, NR_DISCREQ);
508 nr_start_t1timer(sk);
509 nr_stop_t2timer(sk);
510 nr_stop_t4timer(sk);
511 nr_stop_idletimer(sk);
512 nr->state = NR_STATE_2;
513 sk->sk_state = TCP_CLOSE;
514 sk->sk_shutdown |= SEND_SHUTDOWN;
515 sk->sk_state_change(sk);
516 sock_orphan(sk);
517 sock_set_flag(sk, SOCK_DESTROY);
518 sk->sk_socket = NULL;
519 break;
520
521 default:
522 sk->sk_socket = NULL;
523 break;
524 }
525
526 sock->sk = NULL;
527 release_sock(sk);
528 sock_put(sk);
529
530 return 0;
531}
532
533static int nr_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
534{
535 struct sock *sk = sock->sk;
536 struct nr_sock *nr = nr_sk(sk);
537 struct full_sockaddr_ax25 *addr = (struct full_sockaddr_ax25 *)uaddr;
538 struct net_device *dev;
539 ax25_address *user, *source;
540
541 lock_sock(sk);
542 if (!sock_flag(sk, SOCK_ZAPPED)) {
543 release_sock(sk);
544 return -EINVAL;
545 }
546 if (addr_len < sizeof(struct sockaddr_ax25) || addr_len > sizeof(struct full_sockaddr_ax25)) {
547 release_sock(sk);
548 return -EINVAL;
549 }
550 if (addr_len < (addr->fsa_ax25.sax25_ndigis * sizeof(ax25_address) + sizeof(struct sockaddr_ax25))) {
551 release_sock(sk);
552 return -EINVAL;
553 }
554 if (addr->fsa_ax25.sax25_family != AF_NETROM) {
555 release_sock(sk);
556 return -EINVAL;
557 }
558 if ((dev = nr_dev_get(&addr->fsa_ax25.sax25_call)) == NULL) {
559 SOCK_DEBUG(sk, "NET/ROM: bind failed: invalid node callsign\n");
560 release_sock(sk);
561 return -EADDRNOTAVAIL;
562 }
563
564 /*
565 * Only the super user can set an arbitrary user callsign.
566 */
567 if (addr->fsa_ax25.sax25_ndigis == 1) {
568 if (!capable(CAP_NET_BIND_SERVICE)) {
569 dev_put(dev);
570 release_sock(sk);
571 return -EACCES;
572 }
573 nr->user_addr = addr->fsa_digipeater[0];
574 nr->source_addr = addr->fsa_ax25.sax25_call;
575 } else {
576 source = &addr->fsa_ax25.sax25_call;
577
578 if ((user = ax25_findbyuid(current->euid)) == NULL) {
579 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE)) {
580 release_sock(sk);
581 dev_put(dev);
582 return -EPERM;
583 }
584 user = source;
585 }
586
587 nr->user_addr = *user;
588 nr->source_addr = *source;
589 }
590
591 nr->device = dev;
592 nr_insert_socket(sk);
593
594 sock_reset_flag(sk, SOCK_ZAPPED);
595 dev_put(dev);
596 release_sock(sk);
597 SOCK_DEBUG(sk, "NET/ROM: socket is bound\n");
598 return 0;
599}
600
601static int nr_connect(struct socket *sock, struct sockaddr *uaddr,
602 int addr_len, int flags)
603{
604 struct sock *sk = sock->sk;
605 struct nr_sock *nr = nr_sk(sk);
606 struct sockaddr_ax25 *addr = (struct sockaddr_ax25 *)uaddr;
607 ax25_address *user, *source = NULL;
608 struct net_device *dev;
609
610 lock_sock(sk);
611 if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
612 sock->state = SS_CONNECTED;
613 release_sock(sk);
614 return 0; /* Connect completed during a ERESTARTSYS event */
615 }
616
617 if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
618 sock->state = SS_UNCONNECTED;
619 release_sock(sk);
620 return -ECONNREFUSED;
621 }
622
623 if (sk->sk_state == TCP_ESTABLISHED) {
624 release_sock(sk);
625 return -EISCONN; /* No reconnect on a seqpacket socket */
626 }
627
628 sk->sk_state = TCP_CLOSE;
629 sock->state = SS_UNCONNECTED;
630
631 if (addr_len != sizeof(struct sockaddr_ax25) && addr_len != sizeof(struct full_sockaddr_ax25)) {
632 release_sock(sk);
633 return -EINVAL;
634 }
635 if (addr->sax25_family != AF_NETROM) {
636 release_sock(sk);
637 return -EINVAL;
638 }
639 if (sock_flag(sk, SOCK_ZAPPED)) { /* Must bind first - autobinding in this may or may not work */
640 sock_reset_flag(sk, SOCK_ZAPPED);
641
642 if ((dev = nr_dev_first()) == NULL) {
643 release_sock(sk);
644 return -ENETUNREACH;
645 }
646 source = (ax25_address *)dev->dev_addr;
647
648 if ((user = ax25_findbyuid(current->euid)) == NULL) {
649 if (ax25_uid_policy && !capable(CAP_NET_ADMIN)) {
650 dev_put(dev);
651 release_sock(sk);
652 return -EPERM;
653 }
654 user = source;
655 }
656
657 nr->user_addr = *user;
658 nr->source_addr = *source;
659 nr->device = dev;
660
661 dev_put(dev);
662 nr_insert_socket(sk); /* Finish the bind */
663 }
664
665 nr->dest_addr = addr->sax25_call;
666
667 release_sock(sk);
668 circuit = nr_find_next_circuit();
669 lock_sock(sk);
670
671 nr->my_index = circuit / 256;
672 nr->my_id = circuit % 256;
673
674 circuit++;
675
676 /* Move to connecting socket, start sending Connect Requests */
677 sock->state = SS_CONNECTING;
678 sk->sk_state = TCP_SYN_SENT;
679
680 nr_establish_data_link(sk);
681
682 nr->state = NR_STATE_1;
683
684 nr_start_heartbeat(sk);
685
686 /* Now the loop */
687 if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
688 release_sock(sk);
689 return -EINPROGRESS;
690 }
691
692 /*
693 * A Connect Ack with Choke or timeout or failed routing will go to
694 * closed.
695 */
696 if (sk->sk_state == TCP_SYN_SENT) {
697 struct task_struct *tsk = current;
698 DECLARE_WAITQUEUE(wait, tsk);
699
700 add_wait_queue(sk->sk_sleep, &wait);
701 for (;;) {
702 set_current_state(TASK_INTERRUPTIBLE);
703 if (sk->sk_state != TCP_SYN_SENT)
704 break;
705 release_sock(sk);
706 if (!signal_pending(tsk)) {
707 schedule();
708 lock_sock(sk);
709 continue;
710 }
711 current->state = TASK_RUNNING;
712 remove_wait_queue(sk->sk_sleep, &wait);
713 return -ERESTARTSYS;
714 }
715 current->state = TASK_RUNNING;
716 remove_wait_queue(sk->sk_sleep, &wait);
717 }
718
719 if (sk->sk_state != TCP_ESTABLISHED) {
720 sock->state = SS_UNCONNECTED;
721 release_sock(sk);
722 return sock_error(sk); /* Always set at this point */
723 }
724
725 sock->state = SS_CONNECTED;
726 release_sock(sk);
727
728 return 0;
729}
730
731static int nr_accept(struct socket *sock, struct socket *newsock, int flags)
732{
733 struct task_struct *tsk = current;
734 DECLARE_WAITQUEUE(wait, tsk);
735 struct sk_buff *skb;
736 struct sock *newsk;
737 struct sock *sk;
738 int err = 0;
739
740 if ((sk = sock->sk) == NULL)
741 return -EINVAL;
742
743 lock_sock(sk);
744 if (sk->sk_type != SOCK_SEQPACKET) {
745 err = -EOPNOTSUPP;
746 goto out;
747 }
748
749 if (sk->sk_state != TCP_LISTEN) {
750 err = -EINVAL;
751 goto out;
752 }
753
754 /*
755 * The write queue this time is holding sockets ready to use
756 * hooked into the SABM we saved
757 */
758 add_wait_queue(sk->sk_sleep, &wait);
759 for (;;) {
760 skb = skb_dequeue(&sk->sk_receive_queue);
761 if (skb)
762 break;
763
764 current->state = TASK_INTERRUPTIBLE;
765 release_sock(sk);
766 if (flags & O_NONBLOCK) {
767 current->state = TASK_RUNNING;
768 remove_wait_queue(sk->sk_sleep, &wait);
769 return -EWOULDBLOCK;
770 }
771 if (!signal_pending(tsk)) {
772 schedule();
773 lock_sock(sk);
774 continue;
775 }
776 current->state = TASK_RUNNING;
777 remove_wait_queue(sk->sk_sleep, &wait);
778 return -ERESTARTSYS;
779 }
780 current->state = TASK_RUNNING;
781 remove_wait_queue(sk->sk_sleep, &wait);
782
783 newsk = skb->sk;
784 newsk->sk_socket = newsock;
785 newsk->sk_sleep = &newsock->wait;
786
787 /* Now attach up the new socket */
788 kfree_skb(skb);
789 sk->sk_ack_backlog--;
790 newsock->sk = newsk;
791
792out:
793 release_sock(sk);
794 return err;
795}
796
797static int nr_getname(struct socket *sock, struct sockaddr *uaddr,
798 int *uaddr_len, int peer)
799{
800 struct full_sockaddr_ax25 *sax = (struct full_sockaddr_ax25 *)uaddr;
801 struct sock *sk = sock->sk;
802 struct nr_sock *nr = nr_sk(sk);
803
804 lock_sock(sk);
805 if (peer != 0) {
806 if (sk->sk_state != TCP_ESTABLISHED) {
807 release_sock(sk);
808 return -ENOTCONN;
809 }
810 sax->fsa_ax25.sax25_family = AF_NETROM;
811 sax->fsa_ax25.sax25_ndigis = 1;
812 sax->fsa_ax25.sax25_call = nr->user_addr;
813 sax->fsa_digipeater[0] = nr->dest_addr;
814 *uaddr_len = sizeof(struct full_sockaddr_ax25);
815 } else {
816 sax->fsa_ax25.sax25_family = AF_NETROM;
817 sax->fsa_ax25.sax25_ndigis = 0;
818 sax->fsa_ax25.sax25_call = nr->source_addr;
819 *uaddr_len = sizeof(struct sockaddr_ax25);
820 }
821 release_sock(sk);
822
823 return 0;
824}
825
826int nr_rx_frame(struct sk_buff *skb, struct net_device *dev)
827{
828 struct sock *sk;
829 struct sock *make;
830 struct nr_sock *nr_make;
831 ax25_address *src, *dest, *user;
832 unsigned short circuit_index, circuit_id;
833 unsigned short peer_circuit_index, peer_circuit_id;
834 unsigned short frametype, flags, window, timeout;
835 int ret;
836
837 skb->sk = NULL; /* Initially we don't know who it's for */
838
839 /*
840 * skb->data points to the netrom frame start
841 */
842
843 src = (ax25_address *)(skb->data + 0);
844 dest = (ax25_address *)(skb->data + 7);
845
846 circuit_index = skb->data[15];
847 circuit_id = skb->data[16];
848 peer_circuit_index = skb->data[17];
849 peer_circuit_id = skb->data[18];
850 frametype = skb->data[19] & 0x0F;
851 flags = skb->data[19] & 0xF0;
852
853#ifdef CONFIG_INET
854 /*
855 * Check for an incoming IP over NET/ROM frame.
856 */
857 if (frametype == NR_PROTOEXT && circuit_index == NR_PROTO_IP && circuit_id == NR_PROTO_IP) {
858 skb_pull(skb, NR_NETWORK_LEN + NR_TRANSPORT_LEN);
859 skb->h.raw = skb->data;
860
861 return nr_rx_ip(skb, dev);
862 }
863#endif
864
865 /*
866 * Find an existing socket connection, based on circuit ID, if it's
867 * a Connect Request base it on their circuit ID.
868 *
869 * Circuit ID 0/0 is not valid but it could still be a "reset" for a
870 * circuit that no longer exists at the other end ...
871 */
872
873 sk = NULL;
874
875 if (circuit_index == 0 && circuit_id == 0) {
876 if (frametype == NR_CONNACK && flags == NR_CHOKE_FLAG)
877 sk = nr_find_peer(peer_circuit_index, peer_circuit_id, src);
878 } else {
879 if (frametype == NR_CONNREQ)
880 sk = nr_find_peer(circuit_index, circuit_id, src);
881 else
882 sk = nr_find_socket(circuit_index, circuit_id);
883 }
884
885 if (sk != NULL) {
886 skb->h.raw = skb->data;
887
888 if (frametype == NR_CONNACK && skb->len == 22)
889 nr_sk(sk)->bpqext = 1;
890 else
891 nr_sk(sk)->bpqext = 0;
892
893 ret = nr_process_rx_frame(sk, skb);
894 bh_unlock_sock(sk);
895 return ret;
896 }
897
898 /*
899 * Now it should be a CONNREQ.
900 */
901 if (frametype != NR_CONNREQ) {
902 /*
903 * Here it would be nice to be able to send a reset but
904 * NET/ROM doesn't have one. The following hack would
905 * have been a way to extend the protocol but apparently
906 * it kills BPQ boxes... :-(
907 */
908#if 0
909 /*
910 * Never reply to a CONNACK/CHOKE.
911 */
912 if (frametype != NR_CONNACK || flags != NR_CHOKE_FLAG)
913 nr_transmit_refusal(skb, 1);
914#endif
915 return 0;
916 }
917
918 sk = nr_find_listener(dest);
919
920 user = (ax25_address *)(skb->data + 21);
921
922 if (sk == NULL || sk_acceptq_is_full(sk) ||
923 (make = nr_make_new(sk)) == NULL) {
924 nr_transmit_refusal(skb, 0);
925 if (sk)
926 bh_unlock_sock(sk);
927 return 0;
928 }
929
930 window = skb->data[20];
931
932 skb->sk = make;
933 make->sk_state = TCP_ESTABLISHED;
934
935 /* Fill in his circuit details */
936 nr_make = nr_sk(make);
937 nr_make->source_addr = *dest;
938 nr_make->dest_addr = *src;
939 nr_make->user_addr = *user;
940
941 nr_make->your_index = circuit_index;
942 nr_make->your_id = circuit_id;
943
944 bh_unlock_sock(sk);
945 circuit = nr_find_next_circuit();
946 bh_lock_sock(sk);
947
948 nr_make->my_index = circuit / 256;
949 nr_make->my_id = circuit % 256;
950
951 circuit++;
952
953 /* Window negotiation */
954 if (window < nr_make->window)
955 nr_make->window = window;
956
957 /* L4 timeout negotiation */
958 if (skb->len == 37) {
959 timeout = skb->data[36] * 256 + skb->data[35];
960 if (timeout * HZ < nr_make->t1)
961 nr_make->t1 = timeout * HZ;
962 nr_make->bpqext = 1;
963 } else {
964 nr_make->bpqext = 0;
965 }
966
967 nr_write_internal(make, NR_CONNACK);
968
969 nr_make->condition = 0x00;
970 nr_make->vs = 0;
971 nr_make->va = 0;
972 nr_make->vr = 0;
973 nr_make->vl = 0;
974 nr_make->state = NR_STATE_3;
975 sk->sk_ack_backlog++;
976
977 nr_insert_socket(make);
978
979 skb_queue_head(&sk->sk_receive_queue, skb);
980
981 nr_start_heartbeat(make);
982 nr_start_idletimer(make);
983
984 if (!sock_flag(sk, SOCK_DEAD))
985 sk->sk_data_ready(sk, skb->len);
986
987 bh_unlock_sock(sk);
988 return 1;
989}
990
991static int nr_sendmsg(struct kiocb *iocb, struct socket *sock,
992 struct msghdr *msg, size_t len)
993{
994 struct sock *sk = sock->sk;
995 struct nr_sock *nr = nr_sk(sk);
996 struct sockaddr_ax25 *usax = (struct sockaddr_ax25 *)msg->msg_name;
997 int err;
998 struct sockaddr_ax25 sax;
999 struct sk_buff *skb;
1000 unsigned char *asmptr;
1001 int size;
1002
1003 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1004 return -EINVAL;
1005
1006 lock_sock(sk);
1007 if (sock_flag(sk, SOCK_ZAPPED)) {
1008 err = -EADDRNOTAVAIL;
1009 goto out;
1010 }
1011
1012 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1013 send_sig(SIGPIPE, current, 0);
1014 err = -EPIPE;
1015 goto out;
1016 }
1017
1018 if (nr->device == NULL) {
1019 err = -ENETUNREACH;
1020 goto out;
1021 }
1022
1023 if (usax) {
1024 if (msg->msg_namelen < sizeof(sax)) {
1025 err = -EINVAL;
1026 goto out;
1027 }
1028 sax = *usax;
1029 if (ax25cmp(&nr->dest_addr, &sax.sax25_call) != 0) {
1030 err = -EISCONN;
1031 goto out;
1032 }
1033 if (sax.sax25_family != AF_NETROM) {
1034 err = -EINVAL;
1035 goto out;
1036 }
1037 } else {
1038 if (sk->sk_state != TCP_ESTABLISHED) {
1039 err = -ENOTCONN;
1040 goto out;
1041 }
1042 sax.sax25_family = AF_NETROM;
1043 sax.sax25_call = nr->dest_addr;
1044 }
1045
1046 SOCK_DEBUG(sk, "NET/ROM: sendto: Addresses built.\n");
1047
1048 /* Build a packet */
1049 SOCK_DEBUG(sk, "NET/ROM: sendto: building packet.\n");
1050 size = len + NR_NETWORK_LEN + NR_TRANSPORT_LEN;
1051
1052 if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1053 goto out;
1054
1055 skb_reserve(skb, size - len);
1056
1057 /*
1058 * Push down the NET/ROM header
1059 */
1060
1061 asmptr = skb_push(skb, NR_TRANSPORT_LEN);
1062 SOCK_DEBUG(sk, "Building NET/ROM Header.\n");
1063
1064 /* Build a NET/ROM Transport header */
1065
1066 *asmptr++ = nr->your_index;
1067 *asmptr++ = nr->your_id;
1068 *asmptr++ = 0; /* To be filled in later */
1069 *asmptr++ = 0; /* Ditto */
1070 *asmptr++ = NR_INFO;
1071 SOCK_DEBUG(sk, "Built header.\n");
1072
1073 /*
1074 * Put the data on the end
1075 */
1076
1077 skb->h.raw = skb_put(skb, len);
1078
1079 asmptr = skb->h.raw;
1080 SOCK_DEBUG(sk, "NET/ROM: Appending user data\n");
1081
1082 /* User data follows immediately after the NET/ROM transport header */
1083 if (memcpy_fromiovec(asmptr, msg->msg_iov, len)) {
1084 kfree_skb(skb);
1085 err = -EFAULT;
1086 goto out;
1087 }
1088
1089 SOCK_DEBUG(sk, "NET/ROM: Transmitting buffer\n");
1090
1091 if (sk->sk_state != TCP_ESTABLISHED) {
1092 kfree_skb(skb);
1093 err = -ENOTCONN;
1094 goto out;
1095 }
1096
1097 nr_output(sk, skb); /* Shove it onto the queue */
1098
1099 err = len;
1100out:
1101 release_sock(sk);
1102 return err;
1103}
1104
1105static int nr_recvmsg(struct kiocb *iocb, struct socket *sock,
1106 struct msghdr *msg, size_t size, int flags)
1107{
1108 struct sock *sk = sock->sk;
1109 struct sockaddr_ax25 *sax = (struct sockaddr_ax25 *)msg->msg_name;
1110 size_t copied;
1111 struct sk_buff *skb;
1112 int er;
1113
1114 /*
1115 * This works for seqpacket too. The receiver has ordered the queue for
1116 * us! We do one quick check first though
1117 */
1118
1119 lock_sock(sk);
1120 if (sk->sk_state != TCP_ESTABLISHED) {
1121 release_sock(sk);
1122 return -ENOTCONN;
1123 }
1124
1125 /* Now we can treat all alike */
1126 if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL) {
1127 release_sock(sk);
1128 return er;
1129 }
1130
1131 skb->h.raw = skb->data;
1132 copied = skb->len;
1133
1134 if (copied > size) {
1135 copied = size;
1136 msg->msg_flags |= MSG_TRUNC;
1137 }
1138
1139 skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1140
1141 if (sax != NULL) {
1142 sax->sax25_family = AF_NETROM;
1143 memcpy(sax->sax25_call.ax25_call, skb->data + 7, AX25_ADDR_LEN);
1144 }
1145
1146 msg->msg_namelen = sizeof(*sax);
1147
1148 skb_free_datagram(sk, skb);
1149
1150 release_sock(sk);
1151 return copied;
1152}
1153
1154
1155static int nr_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1156{
1157 struct sock *sk = sock->sk;
1158 void __user *argp = (void __user *)arg;
1159 int ret;
1160
1161 lock_sock(sk);
1162 switch (cmd) {
1163 case TIOCOUTQ: {
1164 long amount;
1165 amount = sk->sk_sndbuf - atomic_read(&sk->sk_wmem_alloc);
1166 if (amount < 0)
1167 amount = 0;
1168 release_sock(sk);
1169 return put_user(amount, (int __user *)argp);
1170 }
1171
1172 case TIOCINQ: {
1173 struct sk_buff *skb;
1174 long amount = 0L;
1175 /* These two are safe on a single CPU system as only user tasks fiddle here */
1176 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1177 amount = skb->len;
1178 release_sock(sk);
1179 return put_user(amount, (int __user *)argp);
1180 }
1181
1182 case SIOCGSTAMP:
1183 ret = -EINVAL;
1184 if (sk != NULL)
1185 ret = sock_get_timestamp(sk, argp);
1186 release_sock(sk);
1187 return ret;
1188
1189 case SIOCGIFADDR:
1190 case SIOCSIFADDR:
1191 case SIOCGIFDSTADDR:
1192 case SIOCSIFDSTADDR:
1193 case SIOCGIFBRDADDR:
1194 case SIOCSIFBRDADDR:
1195 case SIOCGIFNETMASK:
1196 case SIOCSIFNETMASK:
1197 case SIOCGIFMETRIC:
1198 case SIOCSIFMETRIC:
1199 release_sock(sk);
1200 return -EINVAL;
1201
1202 case SIOCADDRT:
1203 case SIOCDELRT:
1204 case SIOCNRDECOBS:
1205 release_sock(sk);
1206 if (!capable(CAP_NET_ADMIN)) return -EPERM;
1207 return nr_rt_ioctl(cmd, argp);
1208
1209 default:
1210 release_sock(sk);
1211 return dev_ioctl(cmd, argp);
1212 }
1213 release_sock(sk);
1214
1215 return 0;
1216}
1217
1218#ifdef CONFIG_PROC_FS
1219
1220static void *nr_info_start(struct seq_file *seq, loff_t *pos)
1221{
1222 struct sock *s;
1223 struct hlist_node *node;
1224 int i = 1;
1225
1226 spin_lock_bh(&nr_list_lock);
1227 if (*pos == 0)
1228 return SEQ_START_TOKEN;
1229
1230 sk_for_each(s, node, &nr_list) {
1231 if (i == *pos)
1232 return s;
1233 ++i;
1234 }
1235 return NULL;
1236}
1237
1238static void *nr_info_next(struct seq_file *seq, void *v, loff_t *pos)
1239{
1240 ++*pos;
1241
1242 return (v == SEQ_START_TOKEN) ? sk_head(&nr_list)
1243 : sk_next((struct sock *)v);
1244}
1245
1246static void nr_info_stop(struct seq_file *seq, void *v)
1247{
1248 spin_unlock_bh(&nr_list_lock);
1249}
1250
1251static int nr_info_show(struct seq_file *seq, void *v)
1252{
1253 struct sock *s = v;
1254 struct net_device *dev;
1255 struct nr_sock *nr;
1256 const char *devname;
1257
1258 if (v == SEQ_START_TOKEN)
1259 seq_puts(seq,
1260"user_addr dest_node src_node dev my your st vs vr va t1 t2 t4 idle n2 wnd Snd-Q Rcv-Q inode\n");
1261
1262 else {
1263
1264 bh_lock_sock(s);
1265 nr = nr_sk(s);
1266
1267 if ((dev = nr->device) == NULL)
1268 devname = "???";
1269 else
1270 devname = dev->name;
1271
1272 seq_printf(seq, "%-9s ", ax2asc(&nr->user_addr));
1273 seq_printf(seq, "%-9s ", ax2asc(&nr->dest_addr));
1274 seq_printf(seq,
1275"%-9s %-3s %02X/%02X %02X/%02X %2d %3d %3d %3d %3lu/%03lu %2lu/%02lu %3lu/%03lu %3lu/%03lu %2d/%02d %3d %5d %5d %ld\n",
1276 ax2asc(&nr->source_addr),
1277 devname,
1278 nr->my_index,
1279 nr->my_id,
1280 nr->your_index,
1281 nr->your_id,
1282 nr->state,
1283 nr->vs,
1284 nr->vr,
1285 nr->va,
1286 ax25_display_timer(&nr->t1timer) / HZ,
1287 nr->t1 / HZ,
1288 ax25_display_timer(&nr->t2timer) / HZ,
1289 nr->t2 / HZ,
1290 ax25_display_timer(&nr->t4timer) / HZ,
1291 nr->t4 / HZ,
1292 ax25_display_timer(&nr->idletimer) / (60 * HZ),
1293 nr->idle / (60 * HZ),
1294 nr->n2count,
1295 nr->n2,
1296 nr->window,
1297 atomic_read(&s->sk_wmem_alloc),
1298 atomic_read(&s->sk_rmem_alloc),
1299 s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1300
1301 bh_unlock_sock(s);
1302 }
1303 return 0;
1304}
1305
1306static struct seq_operations nr_info_seqops = {
1307 .start = nr_info_start,
1308 .next = nr_info_next,
1309 .stop = nr_info_stop,
1310 .show = nr_info_show,
1311};
1312
1313static int nr_info_open(struct inode *inode, struct file *file)
1314{
1315 return seq_open(file, &nr_info_seqops);
1316}
1317
1318static struct file_operations nr_info_fops = {
1319 .owner = THIS_MODULE,
1320 .open = nr_info_open,
1321 .read = seq_read,
1322 .llseek = seq_lseek,
1323 .release = seq_release,
1324};
1325#endif /* CONFIG_PROC_FS */
1326
1327static struct net_proto_family nr_family_ops = {
1328 .family = PF_NETROM,
1329 .create = nr_create,
1330 .owner = THIS_MODULE,
1331};
1332
1333static struct proto_ops nr_proto_ops = {
1334 .family = PF_NETROM,
1335 .owner = THIS_MODULE,
1336 .release = nr_release,
1337 .bind = nr_bind,
1338 .connect = nr_connect,
1339 .socketpair = sock_no_socketpair,
1340 .accept = nr_accept,
1341 .getname = nr_getname,
1342 .poll = datagram_poll,
1343 .ioctl = nr_ioctl,
1344 .listen = nr_listen,
1345 .shutdown = sock_no_shutdown,
1346 .setsockopt = nr_setsockopt,
1347 .getsockopt = nr_getsockopt,
1348 .sendmsg = nr_sendmsg,
1349 .recvmsg = nr_recvmsg,
1350 .mmap = sock_no_mmap,
1351 .sendpage = sock_no_sendpage,
1352};
1353
1354static struct notifier_block nr_dev_notifier = {
1355 .notifier_call = nr_device_event,
1356};
1357
1358static struct net_device **dev_nr;
1359
1360static char banner[] __initdata = KERN_INFO "G4KLX NET/ROM for Linux. Version 0.7 for AX25.037 Linux 2.4\n";
1361
1362static int __init nr_proto_init(void)
1363{
1364 int i;
1365 int rc = proto_register(&nr_proto, 0);
1366
1367 if (rc != 0)
1368 goto out;
1369
1370 if (nr_ndevs > 0x7fffffff/sizeof(struct net_device *)) {
1371 printk(KERN_ERR "NET/ROM: nr_proto_init - nr_ndevs parameter to large\n");
1372 return -1;
1373 }
1374
1375 dev_nr = kmalloc(nr_ndevs * sizeof(struct net_device *), GFP_KERNEL);
1376 if (dev_nr == NULL) {
1377 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device array\n");
1378 return -1;
1379 }
1380
1381 memset(dev_nr, 0x00, nr_ndevs * sizeof(struct net_device *));
1382
1383 for (i = 0; i < nr_ndevs; i++) {
1384 char name[IFNAMSIZ];
1385 struct net_device *dev;
1386
1387 sprintf(name, "nr%d", i);
1388 dev = alloc_netdev(sizeof(struct net_device_stats), name,
1389 nr_setup);
1390 if (!dev) {
1391 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device structure\n");
1392 goto fail;
1393 }
1394
1395 dev->base_addr = i;
1396 if (register_netdev(dev)) {
1397 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register network device\n");
1398 free_netdev(dev);
1399 goto fail;
1400 }
1401 dev_nr[i] = dev;
1402 }
1403
1404 if (sock_register(&nr_family_ops)) {
1405 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register socket family\n");
1406 goto fail;
1407 }
1408
1409 register_netdevice_notifier(&nr_dev_notifier);
1410 printk(banner);
1411
1412 ax25_protocol_register(AX25_P_NETROM, nr_route_frame);
1413 ax25_linkfail_register(nr_link_failed);
1414
1415#ifdef CONFIG_SYSCTL
1416 nr_register_sysctl();
1417#endif
1418
1419 nr_loopback_init();
1420
1421 proc_net_fops_create("nr", S_IRUGO, &nr_info_fops);
1422 proc_net_fops_create("nr_neigh", S_IRUGO, &nr_neigh_fops);
1423 proc_net_fops_create("nr_nodes", S_IRUGO, &nr_nodes_fops);
1424out:
1425 return rc;
1426fail:
1427 while (--i >= 0) {
1428 unregister_netdev(dev_nr[i]);
1429 free_netdev(dev_nr[i]);
1430 }
1431 kfree(dev_nr);
1432 proto_unregister(&nr_proto);
1433 rc = -1;
1434 goto out;
1435}
1436
1437module_init(nr_proto_init);
1438
1439module_param(nr_ndevs, int, 0);
1440MODULE_PARM_DESC(nr_ndevs, "number of NET/ROM devices");
1441
1442MODULE_AUTHOR("Jonathan Naylor G4KLX <[email protected]>");
1443MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol");
1444MODULE_LICENSE("GPL");
1445MODULE_ALIAS_NETPROTO(PF_NETROM);
1446
1447static void __exit nr_exit(void)
1448{
1449 int i;
1450
1451 proc_net_remove("nr");
1452 proc_net_remove("nr_neigh");
1453 proc_net_remove("nr_nodes");
1454 nr_loopback_clear();
1455
1456 nr_rt_free();
1457
1458#ifdef CONFIG_SYSCTL
1459 nr_unregister_sysctl();
1460#endif
1461
1462 ax25_linkfail_release(nr_link_failed);
1463 ax25_protocol_release(AX25_P_NETROM);
1464
1465 unregister_netdevice_notifier(&nr_dev_notifier);
1466
1467 sock_unregister(PF_NETROM);
1468
1469 for (i = 0; i < nr_ndevs; i++) {
1470 struct net_device *dev = dev_nr[i];
1471 if (dev) {
1472 unregister_netdev(dev);
1473 free_netdev(dev);
1474 }
1475 }
1476
1477 kfree(dev_nr);
1478 proto_unregister(&nr_proto);
1479}
1480module_exit(nr_exit);
Empty description
This page took 0.264411 seconds and 4 git commands to generate.