[NET]: Make socket creation namespace safe.
[deliverable/linux.git] / net / x25 / af_x25.c
CommitLineData
1da177e4
LT
1/*
2 * X.25 Packet Layer release 002
3 *
4 * This is ALPHA test software. This code may break your machine,
5 * randomly fail to work with new releases, misbehave and/or generally
f8e1d201 6 * screw up. It might even work.
1da177e4
LT
7 *
8 * This code REQUIRES 2.1.15 or higher
9 *
10 * This module:
11 * This module is free software; you can redistribute it and/or
12 * modify it under the terms of the GNU General Public License
13 * as published by the Free Software Foundation; either version
14 * 2 of the License, or (at your option) any later version.
15 *
16 * History
17 * X.25 001 Jonathan Naylor Started coding.
18 * X.25 002 Jonathan Naylor Centralised disconnect handling.
19 * New timer architecture.
20 * 2000-03-11 Henner Eisen MSG_EOR handling more POSIX compliant.
f8e1d201
YH
21 * 2000-03-22 Daniela Squassoni Allowed disabling/enabling of
22 * facilities negotiation and increased
1da177e4
LT
23 * the throughput upper limit.
24 * 2000-08-27 Arnaldo C. Melo s/suser/capable/ + micro cleanups
f8e1d201 25 * 2000-09-04 Henner Eisen Set sock->state in x25_accept().
1da177e4
LT
26 * Fixed x25_output() related skb leakage.
27 * 2000-10-02 Henner Eisen Made x25_kick() single threaded per socket.
28 * 2000-10-27 Henner Eisen MSG_DONTWAIT for fragment allocation.
29 * 2000-11-14 Henner Eisen Closing datalink from NETDEV_GOING_DOWN
30 * 2002-10-06 Arnaldo C. Melo Get rid of cli/sti, move proc stuff to
31 * x25_proc.c, using seq_file
cb65d506
SP
32 * 2005-04-02 Shaun Pereira Selective sub address matching
33 * with call user data
ebc3f64b
SP
34 * 2005-04-15 Shaun Pereira Fast select with no restriction on
35 * response
1da177e4
LT
36 */
37
1da177e4 38#include <linux/module.h>
4fc268d2 39#include <linux/capability.h>
1da177e4
LT
40#include <linux/errno.h>
41#include <linux/kernel.h>
42#include <linux/sched.h>
43#include <linux/timer.h>
44#include <linux/string.h>
45#include <linux/net.h>
46#include <linux/netdevice.h>
47#include <linux/if_arp.h>
48#include <linux/skbuff.h>
49#include <net/sock.h>
c752f073 50#include <net/tcp_states.h>
1da177e4
LT
51#include <asm/uaccess.h>
52#include <linux/fcntl.h>
53#include <linux/termios.h> /* For TIOCINQ/OUTQ */
54#include <linux/notifier.h>
55#include <linux/init.h>
1b06e6ba
SP
56#include <linux/compat.h>
57
1da177e4 58#include <net/x25.h>
1b06e6ba 59#include <net/compat.h>
1da177e4
LT
60
61int sysctl_x25_restart_request_timeout = X25_DEFAULT_T20;
62int sysctl_x25_call_request_timeout = X25_DEFAULT_T21;
63int sysctl_x25_reset_request_timeout = X25_DEFAULT_T22;
64int sysctl_x25_clear_request_timeout = X25_DEFAULT_T23;
65int sysctl_x25_ack_holdback_timeout = X25_DEFAULT_T2;
39e21c0d 66int sysctl_x25_forward = 0;
1da177e4
LT
67
68HLIST_HEAD(x25_list);
69DEFINE_RWLOCK(x25_list_lock);
70
90ddc4f0 71static const struct proto_ops x25_proto_ops;
1da177e4
LT
72
73static struct x25_address null_x25_address = {" "};
74
1b06e6ba
SP
75#ifdef CONFIG_COMPAT
76struct compat_x25_subscrip_struct {
77 char device[200-sizeof(compat_ulong_t)];
78 compat_ulong_t global_facil_mask;
79 compat_uint_t extended;
80};
81#endif
82
1da177e4
LT
83int x25_addr_ntoa(unsigned char *p, struct x25_address *called_addr,
84 struct x25_address *calling_addr)
85{
86 int called_len, calling_len;
87 char *called, *calling;
88 int i;
89
90 called_len = (*p >> 0) & 0x0F;
91 calling_len = (*p >> 4) & 0x0F;
92
93 called = called_addr->x25_addr;
94 calling = calling_addr->x25_addr;
95 p++;
96
97 for (i = 0; i < (called_len + calling_len); i++) {
98 if (i < called_len) {
99 if (i % 2 != 0) {
100 *called++ = ((*p >> 0) & 0x0F) + '0';
101 p++;
102 } else {
103 *called++ = ((*p >> 4) & 0x0F) + '0';
104 }
105 } else {
106 if (i % 2 != 0) {
107 *calling++ = ((*p >> 0) & 0x0F) + '0';
108 p++;
109 } else {
110 *calling++ = ((*p >> 4) & 0x0F) + '0';
111 }
112 }
113 }
114
115 *called = *calling = '\0';
116
117 return 1 + (called_len + calling_len + 1) / 2;
118}
119
120int x25_addr_aton(unsigned char *p, struct x25_address *called_addr,
121 struct x25_address *calling_addr)
122{
123 unsigned int called_len, calling_len;
124 char *called, *calling;
125 int i;
126
127 called = called_addr->x25_addr;
128 calling = calling_addr->x25_addr;
129
130 called_len = strlen(called);
131 calling_len = strlen(calling);
132
133 *p++ = (calling_len << 4) | (called_len << 0);
134
135 for (i = 0; i < (called_len + calling_len); i++) {
136 if (i < called_len) {
137 if (i % 2 != 0) {
138 *p |= (*called++ - '0') << 0;
139 p++;
140 } else {
141 *p = 0x00;
142 *p |= (*called++ - '0') << 4;
143 }
144 } else {
145 if (i % 2 != 0) {
146 *p |= (*calling++ - '0') << 0;
147 p++;
148 } else {
149 *p = 0x00;
150 *p |= (*calling++ - '0') << 4;
151 }
152 }
153 }
154
155 return 1 + (called_len + calling_len + 1) / 2;
156}
157
158/*
159 * Socket removal during an interrupt is now safe.
160 */
161static void x25_remove_socket(struct sock *sk)
162{
163 write_lock_bh(&x25_list_lock);
164 sk_del_node_init(sk);
165 write_unlock_bh(&x25_list_lock);
166}
167
168/*
169 * Kill all bound sockets on a dropped device.
170 */
171static void x25_kill_by_device(struct net_device *dev)
172{
173 struct sock *s;
174 struct hlist_node *node;
175
176 write_lock_bh(&x25_list_lock);
177
178 sk_for_each(s, node, &x25_list)
179 if (x25_sk(s)->neighbour && x25_sk(s)->neighbour->dev == dev)
180 x25_disconnect(s, ENETUNREACH, 0, 0);
181
182 write_unlock_bh(&x25_list_lock);
183}
184
185/*
186 * Handle device status changes.
187 */
188static int x25_device_event(struct notifier_block *this, unsigned long event,
189 void *ptr)
190{
191 struct net_device *dev = ptr;
192 struct x25_neigh *nb;
193
194 if (dev->type == ARPHRD_X25
195#if defined(CONFIG_LLC) || defined(CONFIG_LLC_MODULE)
196 || dev->type == ARPHRD_ETHER
197#endif
198 ) {
199 switch (event) {
200 case NETDEV_UP:
201 x25_link_device_up(dev);
202 break;
203 case NETDEV_GOING_DOWN:
204 nb = x25_get_neigh(dev);
205 if (nb) {
206 x25_terminate_link(nb);
207 x25_neigh_put(nb);
208 }
209 break;
210 case NETDEV_DOWN:
211 x25_kill_by_device(dev);
212 x25_route_device_down(dev);
213 x25_link_device_down(dev);
214 break;
215 }
216 }
217
218 return NOTIFY_DONE;
219}
220
221/*
222 * Add a socket to the bound sockets list.
223 */
224static void x25_insert_socket(struct sock *sk)
225{
226 write_lock_bh(&x25_list_lock);
227 sk_add_node(sk, &x25_list);
228 write_unlock_bh(&x25_list_lock);
229}
230
231/*
232 * Find a socket that wants to accept the Call Request we just
233 * received. Check the full list for an address/cud match.
234 * If no cuds match return the next_best thing, an address match.
235 * Note: if a listening socket has cud set it must only get calls
236 * with matching cud.
237 */
cb65d506
SP
238static struct sock *x25_find_listener(struct x25_address *addr,
239 struct sk_buff *skb)
1da177e4
LT
240{
241 struct sock *s;
242 struct sock *next_best;
243 struct hlist_node *node;
244
245 read_lock_bh(&x25_list_lock);
246 next_best = NULL;
247
248 sk_for_each(s, node, &x25_list)
249 if ((!strcmp(addr->x25_addr,
cb65d506
SP
250 x25_sk(s)->source_addr.x25_addr) ||
251 !strcmp(addr->x25_addr,
252 null_x25_address.x25_addr)) &&
253 s->sk_state == TCP_LISTEN) {
1da177e4
LT
254 /*
255 * Found a listening socket, now check the incoming
256 * call user data vs this sockets call user data
257 */
cb65d506 258 if(skb->len > 0 && x25_sk(s)->cudmatchlength > 0) {
f8e1d201
YH
259 if((memcmp(x25_sk(s)->calluserdata.cuddata,
260 skb->data,
cb65d506
SP
261 x25_sk(s)->cudmatchlength)) == 0) {
262 sock_hold(s);
263 goto found;
264 }
265 } else
1da177e4 266 next_best = s;
1da177e4
LT
267 }
268 if (next_best) {
269 s = next_best;
270 sock_hold(s);
271 goto found;
272 }
273 s = NULL;
274found:
275 read_unlock_bh(&x25_list_lock);
276 return s;
277}
278
279/*
280 * Find a connected X.25 socket given my LCI and neighbour.
281 */
282static struct sock *__x25_find_socket(unsigned int lci, struct x25_neigh *nb)
283{
284 struct sock *s;
285 struct hlist_node *node;
286
287 sk_for_each(s, node, &x25_list)
288 if (x25_sk(s)->lci == lci && x25_sk(s)->neighbour == nb) {
289 sock_hold(s);
290 goto found;
291 }
292 s = NULL;
293found:
294 return s;
295}
296
297struct sock *x25_find_socket(unsigned int lci, struct x25_neigh *nb)
298{
299 struct sock *s;
300
301 read_lock_bh(&x25_list_lock);
302 s = __x25_find_socket(lci, nb);
303 read_unlock_bh(&x25_list_lock);
304 return s;
305}
306
307/*
308 * Find a unique LCI for a given device.
309 */
310static unsigned int x25_new_lci(struct x25_neigh *nb)
311{
312 unsigned int lci = 1;
313 struct sock *sk;
314
315 read_lock_bh(&x25_list_lock);
316
317 while ((sk = __x25_find_socket(lci, nb)) != NULL) {
318 sock_put(sk);
319 if (++lci == 4096) {
320 lci = 0;
321 break;
322 }
323 }
324
325 read_unlock_bh(&x25_list_lock);
326 return lci;
327}
328
329/*
330 * Deferred destroy.
331 */
332void x25_destroy_socket(struct sock *);
333
334/*
335 * handler for deferred kills.
336 */
337static void x25_destroy_timer(unsigned long data)
338{
339 x25_destroy_socket((struct sock *)data);
340}
341
342/*
343 * This is called from user mode and the timers. Thus it protects itself
344 * against interrupt users but doesn't worry about being called during
345 * work. Once it is removed from the queue no interrupt or bottom half
346 * will touch it and we are (fairly 8-) ) safe.
347 * Not static as it's used by the timer
348 */
349void x25_destroy_socket(struct sock *sk)
350{
351 struct sk_buff *skb;
352
353 sock_hold(sk);
354 lock_sock(sk);
355 x25_stop_heartbeat(sk);
356 x25_stop_timer(sk);
357
358 x25_remove_socket(sk);
359 x25_clear_queues(sk); /* Flush the queues */
360
361 while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
362 if (skb->sk != sk) { /* A pending connection */
363 /*
364 * Queue the unaccepted socket for death
365 */
366 sock_set_flag(skb->sk, SOCK_DEAD);
367 x25_start_heartbeat(skb->sk);
368 x25_sk(skb->sk)->state = X25_STATE_0;
369 }
370
371 kfree_skb(skb);
372 }
373
374 if (atomic_read(&sk->sk_wmem_alloc) ||
375 atomic_read(&sk->sk_rmem_alloc)) {
376 /* Defer: outstanding buffers */
377 sk->sk_timer.expires = jiffies + 10 * HZ;
378 sk->sk_timer.function = x25_destroy_timer;
379 sk->sk_timer.data = (unsigned long)sk;
380 add_timer(&sk->sk_timer);
381 } else {
382 /* drop last reference so sock_put will free */
383 __sock_put(sk);
384 }
385
386 release_sock(sk);
387 sock_put(sk);
388}
389
390/*
391 * Handling for system calls applied via the various interfaces to a
392 * X.25 socket object.
393 */
394
395static int x25_setsockopt(struct socket *sock, int level, int optname,
396 char __user *optval, int optlen)
397{
398 int opt;
399 struct sock *sk = sock->sk;
400 int rc = -ENOPROTOOPT;
401
402 if (level != SOL_X25 || optname != X25_QBITINCL)
403 goto out;
404
405 rc = -EINVAL;
406 if (optlen < sizeof(int))
407 goto out;
408
409 rc = -EFAULT;
410 if (get_user(opt, (int __user *)optval))
411 goto out;
412
413 x25_sk(sk)->qbitincl = !!opt;
414 rc = 0;
415out:
416 return rc;
417}
418
419static int x25_getsockopt(struct socket *sock, int level, int optname,
420 char __user *optval, int __user *optlen)
421{
422 struct sock *sk = sock->sk;
423 int val, len, rc = -ENOPROTOOPT;
f8e1d201 424
1da177e4
LT
425 if (level != SOL_X25 || optname != X25_QBITINCL)
426 goto out;
427
428 rc = -EFAULT;
429 if (get_user(len, optlen))
430 goto out;
431
432 len = min_t(unsigned int, len, sizeof(int));
433
434 rc = -EINVAL;
435 if (len < 0)
436 goto out;
f8e1d201 437
1da177e4
LT
438 rc = -EFAULT;
439 if (put_user(len, optlen))
440 goto out;
441
442 val = x25_sk(sk)->qbitincl;
443 rc = copy_to_user(optval, &val, len) ? -EFAULT : 0;
444out:
445 return rc;
446}
447
448static int x25_listen(struct socket *sock, int backlog)
449{
450 struct sock *sk = sock->sk;
451 int rc = -EOPNOTSUPP;
452
453 if (sk->sk_state != TCP_LISTEN) {
454 memset(&x25_sk(sk)->dest_addr, 0, X25_ADDR_LEN);
455 sk->sk_max_ack_backlog = backlog;
456 sk->sk_state = TCP_LISTEN;
457 rc = 0;
458 }
459
460 return rc;
461}
462
463static struct proto x25_proto = {
464 .name = "X25",
465 .owner = THIS_MODULE,
466 .obj_size = sizeof(struct x25_sock),
467};
468
1b8d7ae4 469static struct sock *x25_alloc_socket(struct net *net)
1da177e4
LT
470{
471 struct x25_sock *x25;
1b8d7ae4 472 struct sock *sk = sk_alloc(net, AF_X25, GFP_ATOMIC, &x25_proto, 1);
1da177e4
LT
473
474 if (!sk)
475 goto out;
476
477 sock_init_data(NULL, sk);
478
479 x25 = x25_sk(sk);
480 skb_queue_head_init(&x25->ack_queue);
481 skb_queue_head_init(&x25->fragment_queue);
482 skb_queue_head_init(&x25->interrupt_in_queue);
483 skb_queue_head_init(&x25->interrupt_out_queue);
484out:
485 return sk;
486}
487
1b8d7ae4 488static int x25_create(struct net *net, struct socket *sock, int protocol)
1da177e4
LT
489{
490 struct sock *sk;
491 struct x25_sock *x25;
492 int rc = -ESOCKTNOSUPPORT;
493
1b8d7ae4
EB
494 if (net != &init_net)
495 return -EAFNOSUPPORT;
496
1da177e4
LT
497 if (sock->type != SOCK_SEQPACKET || protocol)
498 goto out;
499
500 rc = -ENOMEM;
1b8d7ae4 501 if ((sk = x25_alloc_socket(net)) == NULL)
1da177e4
LT
502 goto out;
503
504 x25 = x25_sk(sk);
505
506 sock_init_data(sock, sk);
507
508 x25_init_timers(sk);
509
510 sock->ops = &x25_proto_ops;
511 sk->sk_protocol = protocol;
512 sk->sk_backlog_rcv = x25_backlog_rcv;
513
514 x25->t21 = sysctl_x25_call_request_timeout;
515 x25->t22 = sysctl_x25_reset_request_timeout;
516 x25->t23 = sysctl_x25_clear_request_timeout;
517 x25->t2 = sysctl_x25_ack_holdback_timeout;
518 x25->state = X25_STATE_0;
cb65d506 519 x25->cudmatchlength = 0;
ebc3f64b
SP
520 x25->accptapprv = X25_DENY_ACCPT_APPRV; /* normally no cud */
521 /* on call accept */
1da177e4
LT
522
523 x25->facilities.winsize_in = X25_DEFAULT_WINDOW_SIZE;
524 x25->facilities.winsize_out = X25_DEFAULT_WINDOW_SIZE;
525 x25->facilities.pacsize_in = X25_DEFAULT_PACKET_SIZE;
526 x25->facilities.pacsize_out = X25_DEFAULT_PACKET_SIZE;
527 x25->facilities.throughput = X25_DEFAULT_THROUGHPUT;
528 x25->facilities.reverse = X25_DEFAULT_REVERSE;
f8e1d201
YH
529 x25->dte_facilities.calling_len = 0;
530 x25->dte_facilities.called_len = 0;
531 memset(x25->dte_facilities.called_ae, '\0',
532 sizeof(x25->dte_facilities.called_ae));
533 memset(x25->dte_facilities.calling_ae, '\0',
534 sizeof(x25->dte_facilities.calling_ae));
a64b7b93 535
1da177e4
LT
536 rc = 0;
537out:
538 return rc;
539}
540
541static struct sock *x25_make_new(struct sock *osk)
542{
543 struct sock *sk = NULL;
544 struct x25_sock *x25, *ox25;
545
546 if (osk->sk_type != SOCK_SEQPACKET)
547 goto out;
548
1b8d7ae4 549 if ((sk = x25_alloc_socket(osk->sk_net)) == NULL)
1da177e4
LT
550 goto out;
551
552 x25 = x25_sk(sk);
553
554 sk->sk_type = osk->sk_type;
555 sk->sk_socket = osk->sk_socket;
556 sk->sk_priority = osk->sk_priority;
557 sk->sk_protocol = osk->sk_protocol;
558 sk->sk_rcvbuf = osk->sk_rcvbuf;
559 sk->sk_sndbuf = osk->sk_sndbuf;
560 sk->sk_state = TCP_ESTABLISHED;
561 sk->sk_sleep = osk->sk_sleep;
562 sk->sk_backlog_rcv = osk->sk_backlog_rcv;
a20a8554 563 sock_copy_flags(sk, osk);
1da177e4
LT
564
565 ox25 = x25_sk(osk);
566 x25->t21 = ox25->t21;
567 x25->t22 = ox25->t22;
568 x25->t23 = ox25->t23;
569 x25->t2 = ox25->t2;
570 x25->facilities = ox25->facilities;
571 x25->qbitincl = ox25->qbitincl;
a64b7b93 572 x25->dte_facilities = ox25->dte_facilities;
cb65d506 573 x25->cudmatchlength = ox25->cudmatchlength;
ebc3f64b 574 x25->accptapprv = ox25->accptapprv;
1da177e4
LT
575
576 x25_init_timers(sk);
577out:
578 return sk;
579}
580
581static int x25_release(struct socket *sock)
582{
583 struct sock *sk = sock->sk;
584 struct x25_sock *x25;
585
586 if (!sk)
587 goto out;
588
589 x25 = x25_sk(sk);
590
591 switch (x25->state) {
592
593 case X25_STATE_0:
594 case X25_STATE_2:
595 x25_disconnect(sk, 0, 0, 0);
596 x25_destroy_socket(sk);
597 goto out;
598
599 case X25_STATE_1:
600 case X25_STATE_3:
601 case X25_STATE_4:
602 x25_clear_queues(sk);
603 x25_write_internal(sk, X25_CLEAR_REQUEST);
604 x25_start_t23timer(sk);
605 x25->state = X25_STATE_2;
606 sk->sk_state = TCP_CLOSE;
607 sk->sk_shutdown |= SEND_SHUTDOWN;
608 sk->sk_state_change(sk);
609 sock_set_flag(sk, SOCK_DEAD);
610 sock_set_flag(sk, SOCK_DESTROY);
611 break;
612 }
613
f8e1d201 614 sock->sk = NULL;
1da177e4
LT
615 sk->sk_socket = NULL; /* Not used, but we should do this */
616out:
617 return 0;
618}
619
620static int x25_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
621{
622 struct sock *sk = sock->sk;
623 struct sockaddr_x25 *addr = (struct sockaddr_x25 *)uaddr;
624
625 if (!sock_flag(sk, SOCK_ZAPPED) ||
626 addr_len != sizeof(struct sockaddr_x25) ||
627 addr->sx25_family != AF_X25)
628 return -EINVAL;
629
630 x25_sk(sk)->source_addr = addr->sx25_addr;
631 x25_insert_socket(sk);
632 sock_reset_flag(sk, SOCK_ZAPPED);
633 SOCK_DEBUG(sk, "x25_bind: socket is bound\n");
634
635 return 0;
636}
637
638static int x25_wait_for_connection_establishment(struct sock *sk)
639{
640 DECLARE_WAITQUEUE(wait, current);
f8e1d201 641 int rc;
1da177e4
LT
642
643 add_wait_queue_exclusive(sk->sk_sleep, &wait);
644 for (;;) {
645 __set_current_state(TASK_INTERRUPTIBLE);
646 rc = -ERESTARTSYS;
647 if (signal_pending(current))
648 break;
649 rc = sock_error(sk);
650 if (rc) {
651 sk->sk_socket->state = SS_UNCONNECTED;
652 break;
653 }
654 rc = 0;
655 if (sk->sk_state != TCP_ESTABLISHED) {
656 release_sock(sk);
657 schedule();
658 lock_sock(sk);
659 } else
660 break;
661 }
662 __set_current_state(TASK_RUNNING);
663 remove_wait_queue(sk->sk_sleep, &wait);
664 return rc;
665}
666
667static int x25_connect(struct socket *sock, struct sockaddr *uaddr,
668 int addr_len, int flags)
669{
670 struct sock *sk = sock->sk;
671 struct x25_sock *x25 = x25_sk(sk);
672 struct sockaddr_x25 *addr = (struct sockaddr_x25 *)uaddr;
673 struct x25_route *rt;
674 int rc = 0;
675
676 lock_sock(sk);
677 if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
678 sock->state = SS_CONNECTED;
679 goto out; /* Connect completed during a ERESTARTSYS event */
680 }
681
682 rc = -ECONNREFUSED;
683 if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
684 sock->state = SS_UNCONNECTED;
685 goto out;
686 }
687
688 rc = -EISCONN; /* No reconnect on a seqpacket socket */
689 if (sk->sk_state == TCP_ESTABLISHED)
690 goto out;
691
f8e1d201 692 sk->sk_state = TCP_CLOSE;
1da177e4
LT
693 sock->state = SS_UNCONNECTED;
694
695 rc = -EINVAL;
696 if (addr_len != sizeof(struct sockaddr_x25) ||
697 addr->sx25_family != AF_X25)
698 goto out;
699
700 rc = -ENETUNREACH;
701 rt = x25_get_route(&addr->sx25_addr);
702 if (!rt)
703 goto out;
704
705 x25->neighbour = x25_get_neigh(rt->dev);
706 if (!x25->neighbour)
707 goto out_put_route;
708
709 x25_limit_facilities(&x25->facilities, x25->neighbour);
710
711 x25->lci = x25_new_lci(x25->neighbour);
712 if (!x25->lci)
713 goto out_put_neigh;
714
715 rc = -EINVAL;
716 if (sock_flag(sk, SOCK_ZAPPED)) /* Must bind first - autobinding does not work */
717 goto out_put_neigh;
718
719 if (!strcmp(x25->source_addr.x25_addr, null_x25_address.x25_addr))
720 memset(&x25->source_addr, '\0', X25_ADDR_LEN);
721
722 x25->dest_addr = addr->sx25_addr;
723
724 /* Move to connecting socket, start sending Connect Requests */
725 sock->state = SS_CONNECTING;
726 sk->sk_state = TCP_SYN_SENT;
727
728 x25->state = X25_STATE_1;
729
730 x25_write_internal(sk, X25_CALL_REQUEST);
731
732 x25_start_heartbeat(sk);
733 x25_start_t21timer(sk);
734
735 /* Now the loop */
736 rc = -EINPROGRESS;
737 if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK))
738 goto out_put_neigh;
739
740 rc = x25_wait_for_connection_establishment(sk);
741 if (rc)
742 goto out_put_neigh;
743
744 sock->state = SS_CONNECTED;
745 rc = 0;
746out_put_neigh:
747 if (rc)
748 x25_neigh_put(x25->neighbour);
749out_put_route:
750 x25_route_put(rt);
751out:
752 release_sock(sk);
753 return rc;
754}
755
bac37ec8 756static int x25_wait_for_data(struct sock *sk, long timeout)
1da177e4
LT
757{
758 DECLARE_WAITQUEUE(wait, current);
759 int rc = 0;
760
761 add_wait_queue_exclusive(sk->sk_sleep, &wait);
762 for (;;) {
763 __set_current_state(TASK_INTERRUPTIBLE);
764 if (sk->sk_shutdown & RCV_SHUTDOWN)
765 break;
766 rc = -ERESTARTSYS;
767 if (signal_pending(current))
768 break;
769 rc = -EAGAIN;
770 if (!timeout)
771 break;
772 rc = 0;
773 if (skb_queue_empty(&sk->sk_receive_queue)) {
774 release_sock(sk);
775 timeout = schedule_timeout(timeout);
776 lock_sock(sk);
777 } else
778 break;
779 }
780 __set_current_state(TASK_RUNNING);
781 remove_wait_queue(sk->sk_sleep, &wait);
782 return rc;
783}
f8e1d201 784
1da177e4
LT
785static int x25_accept(struct socket *sock, struct socket *newsock, int flags)
786{
787 struct sock *sk = sock->sk;
788 struct sock *newsk;
789 struct sk_buff *skb;
790 int rc = -EINVAL;
791
792 if (!sk || sk->sk_state != TCP_LISTEN)
793 goto out;
794
795 rc = -EOPNOTSUPP;
796 if (sk->sk_type != SOCK_SEQPACKET)
797 goto out;
798
799 lock_sock(sk);
800 rc = x25_wait_for_data(sk, sk->sk_rcvtimeo);
801 if (rc)
802 goto out2;
803 skb = skb_dequeue(&sk->sk_receive_queue);
804 rc = -EINVAL;
805 if (!skb->sk)
806 goto out2;
807 newsk = skb->sk;
808 newsk->sk_socket = newsock;
809 newsk->sk_sleep = &newsock->wait;
810
811 /* Now attach up the new socket */
812 skb->sk = NULL;
813 kfree_skb(skb);
814 sk->sk_ack_backlog--;
815 newsock->sk = newsk;
816 newsock->state = SS_CONNECTED;
817 rc = 0;
818out2:
819 release_sock(sk);
820out:
821 return rc;
822}
823
824static int x25_getname(struct socket *sock, struct sockaddr *uaddr,
825 int *uaddr_len, int peer)
826{
827 struct sockaddr_x25 *sx25 = (struct sockaddr_x25 *)uaddr;
828 struct sock *sk = sock->sk;
829 struct x25_sock *x25 = x25_sk(sk);
830
831 if (peer) {
832 if (sk->sk_state != TCP_ESTABLISHED)
833 return -ENOTCONN;
834 sx25->sx25_addr = x25->dest_addr;
835 } else
836 sx25->sx25_addr = x25->source_addr;
837
838 sx25->sx25_family = AF_X25;
839 *uaddr_len = sizeof(*sx25);
840
841 return 0;
842}
f8e1d201 843
1da177e4
LT
844int x25_rx_call_request(struct sk_buff *skb, struct x25_neigh *nb,
845 unsigned int lci)
846{
847 struct sock *sk;
848 struct sock *make;
849 struct x25_sock *makex25;
850 struct x25_address source_addr, dest_addr;
851 struct x25_facilities facilities;
a64b7b93 852 struct x25_dte_facilities dte_facilities;
95a9dc43 853 int len, addr_len, rc;
1da177e4
LT
854
855 /*
856 * Remove the LCI and frame type.
857 */
858 skb_pull(skb, X25_STD_MIN_LEN);
859
860 /*
861 * Extract the X.25 addresses and convert them to ASCII strings,
862 * and remove them.
863 */
95a9dc43
AH
864 addr_len = x25_addr_ntoa(skb->data, &source_addr, &dest_addr);
865 skb_pull(skb, addr_len);
1da177e4
LT
866
867 /*
868 * Get the length of the facilities, skip past them for the moment
869 * get the call user data because this is needed to determine
870 * the correct listener
871 */
872 len = skb->data[0] + 1;
873 skb_pull(skb,len);
874
1da177e4
LT
875 /*
876 * Find a listener for the particular address/cud pair.
877 */
cb65d506
SP
878 sk = x25_find_listener(&source_addr,skb);
879 skb_push(skb,len);
1da177e4 880
95a9dc43
AH
881 if (sk != NULL && sk_acceptq_is_full(sk)) {
882 goto out_sock_put;
883 }
884
1da177e4 885 /*
95a9dc43
AH
886 * We dont have any listeners for this incoming call.
887 * Try forwarding it.
1da177e4 888 */
95a9dc43
AH
889 if (sk == NULL) {
890 skb_push(skb, addr_len + X25_STD_MIN_LEN);
39e21c0d
AH
891 if (sysctl_x25_forward &&
892 x25_forward_call(&dest_addr, nb, skb, lci) > 0)
95a9dc43
AH
893 {
894 /* Call was forwarded, dont process it any more */
895 kfree_skb(skb);
896 rc = 1;
897 goto out;
898 } else {
899 /* No listeners, can't forward, clear the call */
900 goto out_clear_request;
901 }
902 }
1da177e4
LT
903
904 /*
905 * Try to reach a compromise on the requested facilities.
906 */
a64b7b93
SP
907 len = x25_negotiate_facilities(skb, sk, &facilities, &dte_facilities);
908 if (len == -1)
1da177e4
LT
909 goto out_sock_put;
910
911 /*
912 * current neighbour/link might impose additional limits
913 * on certain facilties
914 */
915
916 x25_limit_facilities(&facilities, nb);
917
918 /*
919 * Try to create a new socket.
920 */
921 make = x25_make_new(sk);
922 if (!make)
923 goto out_sock_put;
924
925 /*
926 * Remove the facilities
927 */
928 skb_pull(skb, len);
929
930 skb->sk = make;
931 make->sk_state = TCP_ESTABLISHED;
932
933 makex25 = x25_sk(make);
934 makex25->lci = lci;
935 makex25->dest_addr = dest_addr;
936 makex25->source_addr = source_addr;
937 makex25->neighbour = nb;
938 makex25->facilities = facilities;
a64b7b93 939 makex25->dte_facilities= dte_facilities;
1da177e4 940 makex25->vc_facil_mask = x25_sk(sk)->vc_facil_mask;
cb65d506
SP
941 /* ensure no reverse facil on accept */
942 makex25->vc_facil_mask &= ~X25_MASK_REVERSE;
a64b7b93
SP
943 /* ensure no calling address extension on accept */
944 makex25->vc_facil_mask &= ~X25_MASK_CALLING_AE;
cb65d506 945 makex25->cudmatchlength = x25_sk(sk)->cudmatchlength;
1da177e4 946
ebc3f64b
SP
947 /* Normally all calls are accepted immediatly */
948 if(makex25->accptapprv & X25_DENY_ACCPT_APPRV) {
949 x25_write_internal(make, X25_CALL_ACCEPTED);
950 makex25->state = X25_STATE_3;
951 }
1da177e4 952
cb65d506
SP
953 /*
954 * Incoming Call User Data.
955 */
956 if (skb->len >= 0) {
d626f62b 957 skb_copy_from_linear_data(skb, makex25->calluserdata.cuddata, skb->len);
cb65d506
SP
958 makex25->calluserdata.cudlength = skb->len;
959 }
960
1da177e4
LT
961 sk->sk_ack_backlog++;
962
963 x25_insert_socket(make);
964
965 skb_queue_head(&sk->sk_receive_queue, skb);
966
967 x25_start_heartbeat(make);
968
969 if (!sock_flag(sk, SOCK_DEAD))
970 sk->sk_data_ready(sk, skb->len);
971 rc = 1;
972 sock_put(sk);
973out:
974 return rc;
975out_sock_put:
976 sock_put(sk);
977out_clear_request:
978 rc = 0;
979 x25_transmit_clear_request(nb, lci, 0x01);
980 goto out;
981}
982
983static int x25_sendmsg(struct kiocb *iocb, struct socket *sock,
984 struct msghdr *msg, size_t len)
985{
986 struct sock *sk = sock->sk;
987 struct x25_sock *x25 = x25_sk(sk);
988 struct sockaddr_x25 *usx25 = (struct sockaddr_x25 *)msg->msg_name;
989 struct sockaddr_x25 sx25;
990 struct sk_buff *skb;
991 unsigned char *asmptr;
992 int noblock = msg->msg_flags & MSG_DONTWAIT;
993 size_t size;
994 int qbit = 0, rc = -EINVAL;
995
996 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_OOB|MSG_EOR|MSG_CMSG_COMPAT))
997 goto out;
998
999 /* we currently don't support segmented records at the user interface */
1000 if (!(msg->msg_flags & (MSG_EOR|MSG_OOB)))
1001 goto out;
1002
1003 rc = -EADDRNOTAVAIL;
1004 if (sock_flag(sk, SOCK_ZAPPED))
1005 goto out;
1006
1007 rc = -EPIPE;
1008 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1009 send_sig(SIGPIPE, current, 0);
1010 goto out;
1011 }
1012
1013 rc = -ENETUNREACH;
1014 if (!x25->neighbour)
1015 goto out;
1016
1017 if (usx25) {
1018 rc = -EINVAL;
1019 if (msg->msg_namelen < sizeof(sx25))
1020 goto out;
1021 memcpy(&sx25, usx25, sizeof(sx25));
1022 rc = -EISCONN;
1023 if (strcmp(x25->dest_addr.x25_addr, sx25.sx25_addr.x25_addr))
1024 goto out;
1025 rc = -EINVAL;
1026 if (sx25.sx25_family != AF_X25)
1027 goto out;
1028 } else {
1029 /*
1030 * FIXME 1003.1g - if the socket is like this because
1031 * it has become closed (not started closed) we ought
1032 * to SIGPIPE, EPIPE;
1033 */
1034 rc = -ENOTCONN;
1035 if (sk->sk_state != TCP_ESTABLISHED)
1036 goto out;
1037
1038 sx25.sx25_family = AF_X25;
1039 sx25.sx25_addr = x25->dest_addr;
1040 }
1041
1042 SOCK_DEBUG(sk, "x25_sendmsg: sendto: Addresses built.\n");
1043
1044 /* Build a packet */
1045 SOCK_DEBUG(sk, "x25_sendmsg: sendto: building packet.\n");
1046
1047 if ((msg->msg_flags & MSG_OOB) && len > 32)
1048 len = 32;
1049
1050 size = len + X25_MAX_L2_LEN + X25_EXT_MIN_LEN;
1051
1052 skb = sock_alloc_send_skb(sk, size, noblock, &rc);
1053 if (!skb)
1054 goto out;
1055 X25_SKB_CB(skb)->flags = msg->msg_flags;
1056
1057 skb_reserve(skb, X25_MAX_L2_LEN + X25_EXT_MIN_LEN);
1058
1059 /*
1060 * Put the data on the end
1061 */
1062 SOCK_DEBUG(sk, "x25_sendmsg: Copying user data\n");
1063
eeeb0374
ACM
1064 skb_reset_transport_header(skb);
1065 skb_put(skb, len);
1da177e4 1066
eeeb0374 1067 rc = memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len);
1da177e4
LT
1068 if (rc)
1069 goto out_kfree_skb;
1070
1071 /*
1072 * If the Q BIT Include socket option is in force, the first
1073 * byte of the user data is the logical value of the Q Bit.
1074 */
1075 if (x25->qbitincl) {
1076 qbit = skb->data[0];
1077 skb_pull(skb, 1);
1078 }
1079
1080 /*
1081 * Push down the X.25 header
1082 */
1083 SOCK_DEBUG(sk, "x25_sendmsg: Building X.25 Header.\n");
1084
1085 if (msg->msg_flags & MSG_OOB) {
1086 if (x25->neighbour->extended) {
1087 asmptr = skb_push(skb, X25_STD_MIN_LEN);
1088 *asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_EXTSEQ;
1089 *asmptr++ = (x25->lci >> 0) & 0xFF;
1090 *asmptr++ = X25_INTERRUPT;
1091 } else {
1092 asmptr = skb_push(skb, X25_STD_MIN_LEN);
1093 *asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_STDSEQ;
1094 *asmptr++ = (x25->lci >> 0) & 0xFF;
1095 *asmptr++ = X25_INTERRUPT;
1096 }
1097 } else {
1098 if (x25->neighbour->extended) {
1099 /* Build an Extended X.25 header */
1100 asmptr = skb_push(skb, X25_EXT_MIN_LEN);
1101 *asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_EXTSEQ;
1102 *asmptr++ = (x25->lci >> 0) & 0xFF;
1103 *asmptr++ = X25_DATA;
1104 *asmptr++ = X25_DATA;
1105 } else {
1106 /* Build an Standard X.25 header */
1107 asmptr = skb_push(skb, X25_STD_MIN_LEN);
1108 *asmptr++ = ((x25->lci >> 8) & 0x0F) | X25_GFI_STDSEQ;
1109 *asmptr++ = (x25->lci >> 0) & 0xFF;
1110 *asmptr++ = X25_DATA;
1111 }
1112
1113 if (qbit)
1114 skb->data[0] |= X25_Q_BIT;
1115 }
1116
1117 SOCK_DEBUG(sk, "x25_sendmsg: Built header.\n");
1118 SOCK_DEBUG(sk, "x25_sendmsg: Transmitting buffer\n");
1119
1120 rc = -ENOTCONN;
1121 if (sk->sk_state != TCP_ESTABLISHED)
1122 goto out_kfree_skb;
1123
1124 if (msg->msg_flags & MSG_OOB)
1125 skb_queue_tail(&x25->interrupt_out_queue, skb);
1126 else {
f8e1d201 1127 len = x25_output(sk, skb);
1da177e4
LT
1128 if (len < 0)
1129 kfree_skb(skb);
1130 else if (x25->qbitincl)
1131 len++;
1132 }
1133
1134 /*
1135 * lock_sock() is currently only used to serialize this x25_kick()
1136 * against input-driven x25_kick() calls. It currently only blocks
1137 * incoming packets for this socket and does not protect against
1138 * any other socket state changes and is not called from anywhere
1139 * else. As x25_kick() cannot block and as long as all socket
1140 * operations are BKL-wrapped, we don't need take to care about
1141 * purging the backlog queue in x25_release().
1142 *
1143 * Using lock_sock() to protect all socket operations entirely
1144 * (and making the whole x25 stack SMP aware) unfortunately would
1145 * require major changes to {send,recv}msg and skb allocation methods.
1146 * -> 2.5 ;)
1147 */
1148 lock_sock(sk);
1149 x25_kick(sk);
1150 release_sock(sk);
1151 rc = len;
1152out:
1153 return rc;
1154out_kfree_skb:
1155 kfree_skb(skb);
1156 goto out;
1157}
1158
1159
1160static int x25_recvmsg(struct kiocb *iocb, struct socket *sock,
1161 struct msghdr *msg, size_t size,
1162 int flags)
1163{
1164 struct sock *sk = sock->sk;
1165 struct x25_sock *x25 = x25_sk(sk);
1166 struct sockaddr_x25 *sx25 = (struct sockaddr_x25 *)msg->msg_name;
1167 size_t copied;
1168 int qbit;
1169 struct sk_buff *skb;
1170 unsigned char *asmptr;
1171 int rc = -ENOTCONN;
1172
1173 /*
1174 * This works for seqpacket too. The receiver has ordered the queue for
1175 * us! We do one quick check first though
1176 */
1177 if (sk->sk_state != TCP_ESTABLISHED)
1178 goto out;
1179
1180 if (flags & MSG_OOB) {
1181 rc = -EINVAL;
1182 if (sock_flag(sk, SOCK_URGINLINE) ||
1183 !skb_peek(&x25->interrupt_in_queue))
1184 goto out;
1185
1186 skb = skb_dequeue(&x25->interrupt_in_queue);
1187
1188 skb_pull(skb, X25_STD_MIN_LEN);
1189
1190 /*
1191 * No Q bit information on Interrupt data.
1192 */
1193 if (x25->qbitincl) {
1194 asmptr = skb_push(skb, 1);
1195 *asmptr = 0x00;
1196 }
1197
1198 msg->msg_flags |= MSG_OOB;
1199 } else {
1200 /* Now we can treat all alike */
1201 skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
1202 flags & MSG_DONTWAIT, &rc);
1203 if (!skb)
1204 goto out;
1205
1206 qbit = (skb->data[0] & X25_Q_BIT) == X25_Q_BIT;
1207
1208 skb_pull(skb, x25->neighbour->extended ?
1209 X25_EXT_MIN_LEN : X25_STD_MIN_LEN);
1210
1211 if (x25->qbitincl) {
1212 asmptr = skb_push(skb, 1);
1213 *asmptr = qbit;
1214 }
1215 }
1216
badff6d0 1217 skb_reset_transport_header(skb);
1da177e4
LT
1218 copied = skb->len;
1219
1220 if (copied > size) {
1221 copied = size;
1222 msg->msg_flags |= MSG_TRUNC;
1223 }
1224
f8e1d201 1225 /* Currently, each datagram always contains a complete record */
1da177e4
LT
1226 msg->msg_flags |= MSG_EOR;
1227
1228 rc = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1229 if (rc)
1230 goto out_free_dgram;
1231
1232 if (sx25) {
1233 sx25->sx25_family = AF_X25;
1234 sx25->sx25_addr = x25->dest_addr;
1235 }
1236
1237 msg->msg_namelen = sizeof(struct sockaddr_x25);
1238
1239 lock_sock(sk);
1240 x25_check_rbuf(sk);
1241 release_sock(sk);
1242 rc = copied;
1243out_free_dgram:
1244 skb_free_datagram(sk, skb);
1245out:
1246 return rc;
1247}
1248
1249
1250static int x25_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1251{
1252 struct sock *sk = sock->sk;
1253 struct x25_sock *x25 = x25_sk(sk);
1254 void __user *argp = (void __user *)arg;
1255 int rc;
1256
1257 switch (cmd) {
1258 case TIOCOUTQ: {
1259 int amount = sk->sk_sndbuf -
1260 atomic_read(&sk->sk_wmem_alloc);
1261 if (amount < 0)
1262 amount = 0;
1263 rc = put_user(amount, (unsigned int __user *)argp);
1264 break;
1265 }
1266
1267 case TIOCINQ: {
1268 struct sk_buff *skb;
1269 int amount = 0;
1270 /*
1271 * These two are safe on a single CPU system as
1272 * only user tasks fiddle here
1273 */
1274 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1275 amount = skb->len;
1276 rc = put_user(amount, (unsigned int __user *)argp);
1277 break;
1278 }
1279
1280 case SIOCGSTAMP:
1281 rc = -EINVAL;
1282 if (sk)
f8e1d201
YH
1283 rc = sock_get_timestamp(sk,
1284 (struct timeval __user *)argp);
1da177e4 1285 break;
ae40eb1e
ED
1286 case SIOCGSTAMPNS:
1287 rc = -EINVAL;
1288 if (sk)
1289 rc = sock_get_timestampns(sk,
1290 (struct timespec __user *)argp);
1291 break;
1da177e4
LT
1292 case SIOCGIFADDR:
1293 case SIOCSIFADDR:
1294 case SIOCGIFDSTADDR:
1295 case SIOCSIFDSTADDR:
1296 case SIOCGIFBRDADDR:
1297 case SIOCSIFBRDADDR:
1298 case SIOCGIFNETMASK:
1299 case SIOCSIFNETMASK:
1300 case SIOCGIFMETRIC:
1301 case SIOCSIFMETRIC:
1302 rc = -EINVAL;
1303 break;
1304 case SIOCADDRT:
1305 case SIOCDELRT:
1306 rc = -EPERM;
1307 if (!capable(CAP_NET_ADMIN))
1308 break;
1309 rc = x25_route_ioctl(cmd, argp);
1310 break;
1311 case SIOCX25GSUBSCRIP:
1312 rc = x25_subscr_ioctl(cmd, argp);
1313 break;
1314 case SIOCX25SSUBSCRIP:
1315 rc = -EPERM;
1316 if (!capable(CAP_NET_ADMIN))
1317 break;
1318 rc = x25_subscr_ioctl(cmd, argp);
1319 break;
1320 case SIOCX25GFACILITIES: {
1321 struct x25_facilities fac = x25->facilities;
1322 rc = copy_to_user(argp, &fac,
1323 sizeof(fac)) ? -EFAULT : 0;
1324 break;
1325 }
1326
1327 case SIOCX25SFACILITIES: {
1328 struct x25_facilities facilities;
1329 rc = -EFAULT;
1330 if (copy_from_user(&facilities, argp,
1331 sizeof(facilities)))
1332 break;
1333 rc = -EINVAL;
1334 if (sk->sk_state != TCP_LISTEN &&
1335 sk->sk_state != TCP_CLOSE)
1336 break;
1337 if (facilities.pacsize_in < X25_PS16 ||
1338 facilities.pacsize_in > X25_PS4096)
1339 break;
1340 if (facilities.pacsize_out < X25_PS16 ||
1341 facilities.pacsize_out > X25_PS4096)
1342 break;
1343 if (facilities.winsize_in < 1 ||
1344 facilities.winsize_in > 127)
1345 break;
1346 if (facilities.throughput < 0x03 ||
1347 facilities.throughput > 0xDD)
1348 break;
ebc3f64b
SP
1349 if (facilities.reverse &&
1350 (facilities.reverse | 0x81)!= 0x81)
1da177e4
LT
1351 break;
1352 x25->facilities = facilities;
1353 rc = 0;
1354 break;
1355 }
1356
a64b7b93 1357 case SIOCX25GDTEFACILITIES: {
f8e1d201 1358 rc = copy_to_user(argp, &x25->dte_facilities,
a64b7b93
SP
1359 sizeof(x25->dte_facilities));
1360 if (rc)
1361 rc = -EFAULT;
f8e1d201
YH
1362 break;
1363 }
a64b7b93 1364
f8e1d201
YH
1365 case SIOCX25SDTEFACILITIES: {
1366 struct x25_dte_facilities dtefacs;
1367 rc = -EFAULT;
1368 if (copy_from_user(&dtefacs, argp, sizeof(dtefacs)))
a64b7b93
SP
1369 break;
1370 rc = -EINVAL;
1371 if (sk->sk_state != TCP_LISTEN &&
1372 sk->sk_state != TCP_CLOSE)
1373 break;
1374 if (dtefacs.calling_len > X25_MAX_AE_LEN)
1375 break;
1376 if (dtefacs.calling_ae == NULL)
1377 break;
1378 if (dtefacs.called_len > X25_MAX_AE_LEN)
1379 break;
1380 if (dtefacs.called_ae == NULL)
1381 break;
1382 x25->dte_facilities = dtefacs;
1383 rc = 0;
1384 break;
1385 }
1386
1da177e4
LT
1387 case SIOCX25GCALLUSERDATA: {
1388 struct x25_calluserdata cud = x25->calluserdata;
1389 rc = copy_to_user(argp, &cud,
1390 sizeof(cud)) ? -EFAULT : 0;
1391 break;
1392 }
1393
1394 case SIOCX25SCALLUSERDATA: {
1395 struct x25_calluserdata calluserdata;
1396
1397 rc = -EFAULT;
1398 if (copy_from_user(&calluserdata, argp,
1399 sizeof(calluserdata)))
1400 break;
1401 rc = -EINVAL;
1402 if (calluserdata.cudlength > X25_MAX_CUD_LEN)
1403 break;
1404 x25->calluserdata = calluserdata;
1405 rc = 0;
1406 break;
1407 }
1408
1409 case SIOCX25GCAUSEDIAG: {
1410 struct x25_causediag causediag;
1411 causediag = x25->causediag;
1412 rc = copy_to_user(argp, &causediag,
1413 sizeof(causediag)) ? -EFAULT : 0;
1414 break;
1415 }
1416
cb65d506
SP
1417 case SIOCX25SCUDMATCHLEN: {
1418 struct x25_subaddr sub_addr;
1419 rc = -EINVAL;
1420 if(sk->sk_state != TCP_CLOSE)
1421 break;
1422 rc = -EFAULT;
1423 if (copy_from_user(&sub_addr, argp,
1424 sizeof(sub_addr)))
1425 break;
f8e1d201 1426 rc = -EINVAL;
cb65d506
SP
1427 if(sub_addr.cudmatchlength > X25_MAX_CUD_LEN)
1428 break;
1429 x25->cudmatchlength = sub_addr.cudmatchlength;
1430 rc = 0;
1431 break;
1432 }
1433
ebc3f64b
SP
1434 case SIOCX25CALLACCPTAPPRV: {
1435 rc = -EINVAL;
1436 if (sk->sk_state != TCP_CLOSE)
1437 break;
1438 x25->accptapprv = X25_ALLOW_ACCPT_APPRV;
1439 rc = 0;
1440 break;
1441 }
1442
1443 case SIOCX25SENDCALLACCPT: {
1444 rc = -EINVAL;
1445 if (sk->sk_state != TCP_ESTABLISHED)
1446 break;
1447 if (x25->accptapprv) /* must call accptapprv above */
1448 break;
1449 x25_write_internal(sk, X25_CALL_ACCEPTED);
1450 x25->state = X25_STATE_3;
1451 rc = 0;
1452 break;
1453 }
1454
f8e1d201 1455 default:
b5e5fa5e 1456 rc = -ENOIOCTLCMD;
1da177e4
LT
1457 break;
1458 }
1459
1460 return rc;
1461}
1462
1463static struct net_proto_family x25_family_ops = {
1464 .family = AF_X25,
1465 .create = x25_create,
1466 .owner = THIS_MODULE,
1467};
1468
1b06e6ba
SP
1469#ifdef CONFIG_COMPAT
1470static int compat_x25_subscr_ioctl(unsigned int cmd,
1471 struct compat_x25_subscrip_struct __user *x25_subscr32)
1472{
1473 struct compat_x25_subscrip_struct x25_subscr;
1474 struct x25_neigh *nb;
1475 struct net_device *dev;
1476 int rc = -EINVAL;
1477
1478 rc = -EFAULT;
1479 if (copy_from_user(&x25_subscr, x25_subscr32, sizeof(*x25_subscr32)))
1480 goto out;
1481
1482 rc = -EINVAL;
1483 dev = x25_dev_get(x25_subscr.device);
1484 if (dev == NULL)
1485 goto out;
1486
1487 nb = x25_get_neigh(dev);
1488 if (nb == NULL)
1489 goto out_dev_put;
1490
1491 dev_put(dev);
1492
1493 if (cmd == SIOCX25GSUBSCRIP) {
1494 x25_subscr.extended = nb->extended;
1495 x25_subscr.global_facil_mask = nb->global_facil_mask;
1496 rc = copy_to_user(x25_subscr32, &x25_subscr,
1497 sizeof(*x25_subscr32)) ? -EFAULT : 0;
1498 } else {
1499 rc = -EINVAL;
1500 if (x25_subscr.extended == 0 || x25_subscr.extended == 1) {
1501 rc = 0;
1502 nb->extended = x25_subscr.extended;
1503 nb->global_facil_mask = x25_subscr.global_facil_mask;
1504 }
1505 }
1506 x25_neigh_put(nb);
1507out:
1508 return rc;
1509out_dev_put:
1510 dev_put(dev);
1511 goto out;
1512}
1513
1514static int compat_x25_ioctl(struct socket *sock, unsigned int cmd,
1515 unsigned long arg)
1516{
1517 void __user *argp = compat_ptr(arg);
1518 struct sock *sk = sock->sk;
1519
1520 int rc = -ENOIOCTLCMD;
1521
1522 switch(cmd) {
1523 case TIOCOUTQ:
1524 case TIOCINQ:
1525 rc = x25_ioctl(sock, cmd, (unsigned long)argp);
1526 break;
1527 case SIOCGSTAMP:
1528 rc = -EINVAL;
1529 if (sk)
1530 rc = compat_sock_get_timestamp(sk,
1531 (struct timeval __user*)argp);
1532 break;
ae40eb1e
ED
1533 case SIOCGSTAMPNS:
1534 rc = -EINVAL;
1535 if (sk)
1536 rc = compat_sock_get_timestampns(sk,
1537 (struct timespec __user*)argp);
1538 break;
1b06e6ba
SP
1539 case SIOCGIFADDR:
1540 case SIOCSIFADDR:
1541 case SIOCGIFDSTADDR:
1542 case SIOCSIFDSTADDR:
1543 case SIOCGIFBRDADDR:
1544 case SIOCSIFBRDADDR:
1545 case SIOCGIFNETMASK:
1546 case SIOCSIFNETMASK:
1547 case SIOCGIFMETRIC:
1548 case SIOCSIFMETRIC:
1549 rc = -EINVAL;
1550 break;
1551 case SIOCADDRT:
1552 case SIOCDELRT:
1553 rc = -EPERM;
1554 if (!capable(CAP_NET_ADMIN))
1555 break;
1556 rc = x25_route_ioctl(cmd, argp);
1557 break;
1558 case SIOCX25GSUBSCRIP:
1559 rc = compat_x25_subscr_ioctl(cmd, argp);
1560 break;
1561 case SIOCX25SSUBSCRIP:
1562 rc = -EPERM;
1563 if (!capable(CAP_NET_ADMIN))
1564 break;
1565 rc = compat_x25_subscr_ioctl(cmd, argp);
1566 break;
1567 case SIOCX25GFACILITIES:
1568 case SIOCX25SFACILITIES:
9a6b9f2e
SP
1569 case SIOCX25GDTEFACILITIES:
1570 case SIOCX25SDTEFACILITIES:
1b06e6ba
SP
1571 case SIOCX25GCALLUSERDATA:
1572 case SIOCX25SCALLUSERDATA:
1573 case SIOCX25GCAUSEDIAG:
1574 case SIOCX25SCUDMATCHLEN:
1575 case SIOCX25CALLACCPTAPPRV:
1576 case SIOCX25SENDCALLACCPT:
1577 rc = x25_ioctl(sock, cmd, (unsigned long)argp);
1578 break;
1579 default:
1580 rc = -ENOIOCTLCMD;
1581 break;
1582 }
1583 return rc;
1584}
1585#endif
1586
90ddc4f0 1587static const struct proto_ops SOCKOPS_WRAPPED(x25_proto_ops) = {
1da177e4
LT
1588 .family = AF_X25,
1589 .owner = THIS_MODULE,
1590 .release = x25_release,
1591 .bind = x25_bind,
1592 .connect = x25_connect,
1593 .socketpair = sock_no_socketpair,
1594 .accept = x25_accept,
1595 .getname = x25_getname,
1596 .poll = datagram_poll,
1597 .ioctl = x25_ioctl,
1b06e6ba
SP
1598#ifdef CONFIG_COMPAT
1599 .compat_ioctl = compat_x25_ioctl,
1600#endif
1da177e4
LT
1601 .listen = x25_listen,
1602 .shutdown = sock_no_shutdown,
1603 .setsockopt = x25_setsockopt,
1604 .getsockopt = x25_getsockopt,
1605 .sendmsg = x25_sendmsg,
1606 .recvmsg = x25_recvmsg,
1607 .mmap = sock_no_mmap,
1608 .sendpage = sock_no_sendpage,
1609};
1610
1da177e4
LT
1611SOCKOPS_WRAP(x25_proto, AF_X25);
1612
1613static struct packet_type x25_packet_type = {
1614 .type = __constant_htons(ETH_P_X25),
1615 .func = x25_lapb_receive_frame,
1616};
1617
1618static struct notifier_block x25_dev_notifier = {
1619 .notifier_call = x25_device_event,
1620};
1621
1622void x25_kill_by_neigh(struct x25_neigh *nb)
1623{
1624 struct sock *s;
1625 struct hlist_node *node;
1626
1627 write_lock_bh(&x25_list_lock);
1628
1629 sk_for_each(s, node, &x25_list)
1630 if (x25_sk(s)->neighbour == nb)
1631 x25_disconnect(s, ENETUNREACH, 0, 0);
1632
1633 write_unlock_bh(&x25_list_lock);
95a9dc43
AH
1634
1635 /* Remove any related forwards */
1636 x25_clear_forward_by_dev(nb->dev);
1da177e4
LT
1637}
1638
1639static int __init x25_init(void)
1640{
1641 int rc = proto_register(&x25_proto, 0);
1642
1643 if (rc != 0)
1644 goto out;
1645
1646 sock_register(&x25_family_ops);
1647
1648 dev_add_pack(&x25_packet_type);
1649
1650 register_netdevice_notifier(&x25_dev_notifier);
1651
1652 printk(KERN_INFO "X.25 for Linux. Version 0.2 for Linux 2.1.15\n");
1653
1654#ifdef CONFIG_SYSCTL
1655 x25_register_sysctl();
1656#endif
1657 x25_proc_init();
1658out:
1659 return rc;
1660}
1661module_init(x25_init);
1662
1663static void __exit x25_exit(void)
1664{
1665 x25_proc_exit();
1666 x25_link_free();
1667 x25_route_free();
1668
1669#ifdef CONFIG_SYSCTL
1670 x25_unregister_sysctl();
1671#endif
1672
1673 unregister_netdevice_notifier(&x25_dev_notifier);
1674
1675 dev_remove_pack(&x25_packet_type);
1676
1677 sock_unregister(AF_X25);
1678 proto_unregister(&x25_proto);
1679}
1680module_exit(x25_exit);
1681
1682MODULE_AUTHOR("Jonathan Naylor <g4klx@g4klx.demon.co.uk>");
1683MODULE_DESCRIPTION("The X.25 Packet Layer network layer protocol");
1684MODULE_LICENSE("GPL");
1685MODULE_ALIAS_NETPROTO(PF_X25);
This page took 0.32584 seconds and 5 git commands to generate.