1/* 2 * This program is free software; you can redistribute it and/or modify 3 * it under the terms of the GNU General Public License as published by 4 * the Free Software Foundation; either version 2 of the License, or 5 * (at your option) any later version. 6 * 7 * Copyright Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk) 8 * Copyright Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk) 9 * Copyright Darryl Miles G7LED (dlm@g7led.demon.co.uk) 10 */ 11#include <linux/module.h> 12#include <linux/moduleparam.h> 13#include <linux/capability.h> 14#include <linux/errno.h> 15#include <linux/types.h> 16#include <linux/socket.h> 17#include <linux/in.h> 18#include <linux/kernel.h> 19#include <linux/sched.h> 20#include <linux/timer.h> 21#include <linux/string.h> 22#include <linux/sockios.h> 23#include <linux/net.h> 24#include <linux/stat.h> 25#include <net/ax25.h> 26#include <linux/inet.h> 27#include <linux/netdevice.h> 28#include <linux/if_arp.h> 29#include <linux/skbuff.h> 30#include <net/sock.h> 31#include <asm/uaccess.h> 32#include <asm/system.h> 33#include <linux/fcntl.h> 34#include <linux/termios.h> /* For TIOCINQ/OUTQ */ 35#include <linux/mm.h> 36#include <linux/interrupt.h> 37#include <linux/notifier.h> 38#include <net/netrom.h> 39#include <linux/proc_fs.h> 40#include <linux/seq_file.h> 41#include <net/ip.h> 42#include <net/tcp_states.h> 43#include <net/arp.h> 44#include <linux/init.h> 45 46static int nr_ndevs = 4; 47 48int sysctl_netrom_default_path_quality = NR_DEFAULT_QUAL; 49int sysctl_netrom_obsolescence_count_initialiser = NR_DEFAULT_OBS; 50int sysctl_netrom_network_ttl_initialiser = NR_DEFAULT_TTL; 51int sysctl_netrom_transport_timeout = NR_DEFAULT_T1; 52int sysctl_netrom_transport_maximum_tries = NR_DEFAULT_N2; 53int sysctl_netrom_transport_acknowledge_delay = NR_DEFAULT_T2; 54int sysctl_netrom_transport_busy_delay = NR_DEFAULT_T4; 55int sysctl_netrom_transport_requested_window_size = NR_DEFAULT_WINDOW; 56int sysctl_netrom_transport_no_activity_timeout = NR_DEFAULT_IDLE; 57int sysctl_netrom_routing_control = NR_DEFAULT_ROUTING; 58int sysctl_netrom_link_fails_count = NR_DEFAULT_FAILS; 59int sysctl_netrom_reset_circuit = NR_DEFAULT_RESET; 60 61static unsigned short circuit = 0x101; 62 63static HLIST_HEAD(nr_list); 64static DEFINE_SPINLOCK(nr_list_lock); 65 66static const struct proto_ops nr_proto_ops; 67 68/* 69 * NETROM network devices are virtual network devices encapsulating NETROM 70 * frames into AX.25 which will be sent through an AX.25 device, so form a 71 * special "super class" of normal net devices; split their locks off into a 72 * separate class since they always nest. 73 */ 74static struct lock_class_key nr_netdev_xmit_lock_key; 75 76/* 77 * Socket removal during an interrupt is now safe. 78 */ 79static void nr_remove_socket(struct sock *sk) 80{ 81 spin_lock_bh(&nr_list_lock); 82 sk_del_node_init(sk); 83 spin_unlock_bh(&nr_list_lock); 84} 85 86/* 87 * Kill all bound sockets on a dropped device. 88 */ 89static void nr_kill_by_device(struct net_device *dev) 90{ 91 struct sock *s; 92 struct hlist_node *node; 93 94 spin_lock_bh(&nr_list_lock); 95 sk_for_each(s, node, &nr_list) 96 if (nr_sk(s)->device == dev) 97 nr_disconnect(s, ENETUNREACH); 98 spin_unlock_bh(&nr_list_lock); 99} 100 101/* 102 * Handle device status changes. 103 */ 104static int nr_device_event(struct notifier_block *this, unsigned long event, void *ptr) 105{ 106 struct net_device *dev = (struct net_device *)ptr; 107 108 if (event != NETDEV_DOWN) 109 return NOTIFY_DONE; 110 111 nr_kill_by_device(dev); 112 nr_rt_device_down(dev); 113 114 return NOTIFY_DONE; 115} 116 117/* 118 * Add a socket to the bound sockets list. 119 */ 120static void nr_insert_socket(struct sock *sk) 121{ 122 spin_lock_bh(&nr_list_lock); 123 sk_add_node(sk, &nr_list); 124 spin_unlock_bh(&nr_list_lock); 125} 126 127/* 128 * Find a socket that wants to accept the Connect Request we just 129 * received. 130 */ 131static struct sock *nr_find_listener(ax25_address *addr) 132{ 133 struct sock *s; 134 struct hlist_node *node; 135 136 spin_lock_bh(&nr_list_lock); 137 sk_for_each(s, node, &nr_list) 138 if (!ax25cmp(&nr_sk(s)->source_addr, addr) && 139 s->sk_state == TCP_LISTEN) { 140 bh_lock_sock(s); 141 goto found; 142 } 143 s = NULL; 144found: 145 spin_unlock_bh(&nr_list_lock); 146 return s; 147} 148 149/* 150 * Find a connected NET/ROM socket given my circuit IDs. 151 */ 152static struct sock *nr_find_socket(unsigned char index, unsigned char id) 153{ 154 struct sock *s; 155 struct hlist_node *node; 156 157 spin_lock_bh(&nr_list_lock); 158 sk_for_each(s, node, &nr_list) { 159 struct nr_sock *nr = nr_sk(s); 160 161 if (nr->my_index == index && nr->my_id == id) { 162 bh_lock_sock(s); 163 goto found; 164 } 165 } 166 s = NULL; 167found: 168 spin_unlock_bh(&nr_list_lock); 169 return s; 170} 171 172/* 173 * Find a connected NET/ROM socket given their circuit IDs. 174 */ 175static struct sock *nr_find_peer(unsigned char index, unsigned char id, 176 ax25_address *dest) 177{ 178 struct sock *s; 179 struct hlist_node *node; 180 181 spin_lock_bh(&nr_list_lock); 182 sk_for_each(s, node, &nr_list) { 183 struct nr_sock *nr = nr_sk(s); 184 185 if (nr->your_index == index && nr->your_id == id && 186 !ax25cmp(&nr->dest_addr, dest)) { 187 bh_lock_sock(s); 188 goto found; 189 } 190 } 191 s = NULL; 192found: 193 spin_unlock_bh(&nr_list_lock); 194 return s; 195} 196 197/* 198 * Find next free circuit ID. 199 */ 200static unsigned short nr_find_next_circuit(void) 201{ 202 unsigned short id = circuit; 203 unsigned char i, j; 204 struct sock *sk; 205 206 for (;;) { 207 i = id / 256; 208 j = id % 256; 209 210 if (i != 0 && j != 0) { 211 if ((sk=nr_find_socket(i, j)) == NULL) 212 break; 213 bh_unlock_sock(sk); 214 } 215 216 id++; 217 } 218 219 return id; 220} 221 222/* 223 * Deferred destroy. 224 */ 225void nr_destroy_socket(struct sock *); 226 227/* 228 * Handler for deferred kills. 229 */ 230static void nr_destroy_timer(unsigned long data) 231{ 232 struct sock *sk=(struct sock *)data; 233 bh_lock_sock(sk); 234 sock_hold(sk); 235 nr_destroy_socket(sk); 236 bh_unlock_sock(sk); 237 sock_put(sk); 238} 239 240/* 241 * This is called from user mode and the timers. Thus it protects itself 242 * against interrupt users but doesn't worry about being called during 243 * work. Once it is removed from the queue no interrupt or bottom half 244 * will touch it and we are (fairly 8-) ) safe. 245 */ 246void nr_destroy_socket(struct sock *sk) 247{ 248 struct sk_buff *skb; 249 250 nr_remove_socket(sk); 251 252 nr_stop_heartbeat(sk); 253 nr_stop_t1timer(sk); 254 nr_stop_t2timer(sk); 255 nr_stop_t4timer(sk); 256 nr_stop_idletimer(sk); 257 258 nr_clear_queues(sk); /* Flush the queues */ 259 260 while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) { 261 if (skb->sk != sk) { /* A pending connection */ 262 /* Queue the unaccepted socket for death */ 263 sock_set_flag(skb->sk, SOCK_DEAD); 264 nr_start_heartbeat(skb->sk); 265 nr_sk(skb->sk)->state = NR_STATE_0; 266 } 267 268 kfree_skb(skb); 269 } 270 271 if (atomic_read(&sk->sk_wmem_alloc) || 272 atomic_read(&sk->sk_rmem_alloc)) { 273 /* Defer: outstanding buffers */ 274 sk->sk_timer.function = nr_destroy_timer; 275 sk->sk_timer.expires = jiffies + 2 * HZ; 276 add_timer(&sk->sk_timer); 277 } else 278 sock_put(sk); 279} 280 281/* 282 * Handling for system calls applied via the various interfaces to a 283 * NET/ROM socket object. 284 */ 285 286static int nr_setsockopt(struct socket *sock, int level, int optname, 287 char __user *optval, int optlen) 288{ 289 struct sock *sk = sock->sk; 290 struct nr_sock *nr = nr_sk(sk); 291 int opt; 292 293 if (level != SOL_NETROM) 294 return -ENOPROTOOPT; 295 296 if (optlen < sizeof(int)) 297 return -EINVAL; 298 299 if (get_user(opt, (int __user *)optval)) 300 return -EFAULT; 301 302 switch (optname) { 303 case NETROM_T1: 304 if (opt < 1) 305 return -EINVAL; 306 nr->t1 = opt * HZ; 307 return 0; 308 309 case NETROM_T2: 310 if (opt < 1) 311 return -EINVAL; 312 nr->t2 = opt * HZ; 313 return 0; 314 315 case NETROM_N2: 316 if (opt < 1 || opt > 31) 317 return -EINVAL; 318 nr->n2 = opt; 319 return 0; 320 321 case NETROM_T4: 322 if (opt < 1) 323 return -EINVAL; 324 nr->t4 = opt * HZ; 325 return 0; 326 327 case NETROM_IDLE: 328 if (opt < 0) 329 return -EINVAL; 330 nr->idle = opt * 60 * HZ; 331 return 0; 332 333 default: 334 return -ENOPROTOOPT; 335 } 336} 337 338static int nr_getsockopt(struct socket *sock, int level, int optname, 339 char __user *optval, int __user *optlen) 340{ 341 struct sock *sk = sock->sk; 342 struct nr_sock *nr = nr_sk(sk); 343 int val = 0; 344 int len; 345 346 if (level != SOL_NETROM) 347 return -ENOPROTOOPT; 348 349 if (get_user(len, optlen)) 350 return -EFAULT; 351 352 if (len < 0) 353 return -EINVAL; 354 355 switch (optname) { 356 case NETROM_T1: 357 val = nr->t1 / HZ; 358 break; 359 360 case NETROM_T2: 361 val = nr->t2 / HZ; 362 break; 363 364 case NETROM_N2: 365 val = nr->n2; 366 break; 367 368 case NETROM_T4: 369 val = nr->t4 / HZ; 370 break; 371 372 case NETROM_IDLE: 373 val = nr->idle / (60 * HZ); 374 break; 375 376 default: 377 return -ENOPROTOOPT; 378 } 379 380 len = min_t(unsigned int, len, sizeof(int)); 381 382 if (put_user(len, optlen)) 383 return -EFAULT; 384 385 return copy_to_user(optval, &val, len) ? -EFAULT : 0; 386} 387 388static int nr_listen(struct socket *sock, int backlog) 389{ 390 struct sock *sk = sock->sk; 391 392 lock_sock(sk); 393 if (sk->sk_state != TCP_LISTEN) { 394 memset(&nr_sk(sk)->user_addr, 0, AX25_ADDR_LEN); 395 sk->sk_max_ack_backlog = backlog; 396 sk->sk_state = TCP_LISTEN; 397 release_sock(sk); 398 return 0; 399 } 400 release_sock(sk); 401 402 return -EOPNOTSUPP; 403} 404 405static struct proto nr_proto = { 406 .name = "NETROM", 407 .owner = THIS_MODULE, 408 .obj_size = sizeof(struct nr_sock), 409}; 410 411static int nr_create(struct socket *sock, int protocol) 412{ 413 struct sock *sk; 414 struct nr_sock *nr; 415 416 if (sock->type != SOCK_SEQPACKET || protocol != 0) 417 return -ESOCKTNOSUPPORT; 418 419 if ((sk = sk_alloc(PF_NETROM, GFP_ATOMIC, &nr_proto, 1)) == NULL) 420 return -ENOMEM; 421 422 nr = nr_sk(sk); 423 424 sock_init_data(sock, sk); 425 426 sock->ops = &nr_proto_ops; 427 sk->sk_protocol = protocol; 428 429 skb_queue_head_init(&nr->ack_queue); 430 skb_queue_head_init(&nr->reseq_queue); 431 skb_queue_head_init(&nr->frag_queue); 432 433 nr_init_timers(sk); 434 435 nr->t1 = 436 msecs_to_jiffies(sysctl_netrom_transport_timeout); 437 nr->t2 = 438 msecs_to_jiffies(sysctl_netrom_transport_acknowledge_delay); 439 nr->n2 = 440 msecs_to_jiffies(sysctl_netrom_transport_maximum_tries); 441 nr->t4 = 442 msecs_to_jiffies(sysctl_netrom_transport_busy_delay); 443 nr->idle = 444 msecs_to_jiffies(sysctl_netrom_transport_no_activity_timeout); 445 nr->window = sysctl_netrom_transport_requested_window_size; 446 447 nr->bpqext = 1; 448 nr->state = NR_STATE_0; 449 450 return 0; 451} 452 453static struct sock *nr_make_new(struct sock *osk) 454{ 455 struct sock *sk; 456 struct nr_sock *nr, *onr; 457 458 if (osk->sk_type != SOCK_SEQPACKET) 459 return NULL; 460 461 if ((sk = sk_alloc(PF_NETROM, GFP_ATOMIC, osk->sk_prot, 1)) == NULL) 462 return NULL; 463 464 nr = nr_sk(sk); 465 466 sock_init_data(NULL, sk); 467 468 sk->sk_type = osk->sk_type; 469 sk->sk_socket = osk->sk_socket; 470 sk->sk_priority = osk->sk_priority; 471 sk->sk_protocol = osk->sk_protocol; 472 sk->sk_rcvbuf = osk->sk_rcvbuf; 473 sk->sk_sndbuf = osk->sk_sndbuf; 474 sk->sk_state = TCP_ESTABLISHED; 475 sk->sk_sleep = osk->sk_sleep; 476 sock_copy_flags(sk, osk); 477 478 skb_queue_head_init(&nr->ack_queue); 479 skb_queue_head_init(&nr->reseq_queue); 480 skb_queue_head_init(&nr->frag_queue); 481 482 nr_init_timers(sk); 483 484 onr = nr_sk(osk); 485 486 nr->t1 = onr->t1; 487 nr->t2 = onr->t2; 488 nr->n2 = onr->n2; 489 nr->t4 = onr->t4; 490 nr->idle = onr->idle; 491 nr->window = onr->window; 492 493 nr->device = onr->device; 494 nr->bpqext = onr->bpqext; 495 496 return sk; 497} 498 499static int nr_release(struct socket *sock) 500{ 501 struct sock *sk = sock->sk; 502 struct nr_sock *nr; 503 504 if (sk == NULL) return 0; 505 506 sock_hold(sk); 507 lock_sock(sk); 508 nr = nr_sk(sk); 509 510 switch (nr->state) { 511 case NR_STATE_0: 512 case NR_STATE_1: 513 case NR_STATE_2: 514 nr_disconnect(sk, 0); 515 nr_destroy_socket(sk); 516 break; 517 518 case NR_STATE_3: 519 nr_clear_queues(sk); 520 nr->n2count = 0; 521 nr_write_internal(sk, NR_DISCREQ); 522 nr_start_t1timer(sk); 523 nr_stop_t2timer(sk); 524 nr_stop_t4timer(sk); 525 nr_stop_idletimer(sk); 526 nr->state = NR_STATE_2; 527 sk->sk_state = TCP_CLOSE; 528 sk->sk_shutdown |= SEND_SHUTDOWN; 529 sk->sk_state_change(sk); 530 sock_orphan(sk); 531 sock_set_flag(sk, SOCK_DESTROY); 532 sk->sk_socket = NULL; 533 break; 534 535 default: 536 sk->sk_socket = NULL; 537 break; 538 } 539 540 sock->sk = NULL; 541 release_sock(sk); 542 sock_put(sk); 543 544 return 0; 545} 546 547static int nr_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len) 548{ 549 struct sock *sk = sock->sk; 550 struct nr_sock *nr = nr_sk(sk); 551 struct full_sockaddr_ax25 *addr = (struct full_sockaddr_ax25 *)uaddr; 552 struct net_device *dev; 553 ax25_uid_assoc *user; 554 ax25_address *source; 555 556 lock_sock(sk); 557 if (!sock_flag(sk, SOCK_ZAPPED)) { 558 release_sock(sk); 559 return -EINVAL; 560 } 561 if (addr_len < sizeof(struct sockaddr_ax25) || addr_len > sizeof(struct full_sockaddr_ax25)) { 562 release_sock(sk); 563 return -EINVAL; 564 } 565 if (addr_len < (addr->fsa_ax25.sax25_ndigis * sizeof(ax25_address) + sizeof(struct sockaddr_ax25))) { 566 release_sock(sk); 567 return -EINVAL; 568 } 569 if (addr->fsa_ax25.sax25_family != AF_NETROM) { 570 release_sock(sk); 571 return -EINVAL; 572 } 573 if ((dev = nr_dev_get(&addr->fsa_ax25.sax25_call)) == NULL) { 574 SOCK_DEBUG(sk, "NET/ROM: bind failed: invalid node callsign\n"); 575 release_sock(sk); 576 return -EADDRNOTAVAIL; 577 } 578 579 /* 580 * Only the super user can set an arbitrary user callsign. 581 */ 582 if (addr->fsa_ax25.sax25_ndigis == 1) { 583 if (!capable(CAP_NET_BIND_SERVICE)) { 584 dev_put(dev); 585 release_sock(sk); 586 return -EACCES; 587 } 588 nr->user_addr = addr->fsa_digipeater[0]; 589 nr->source_addr = addr->fsa_ax25.sax25_call; 590 } else { 591 source = &addr->fsa_ax25.sax25_call; 592 593 user = ax25_findbyuid(current->euid); 594 if (user) { 595 nr->user_addr = user->call; 596 ax25_uid_put(user); 597 } else { 598 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE)) { 599 release_sock(sk); 600 dev_put(dev); 601 return -EPERM; 602 } 603 nr->user_addr = *source; 604 } 605 606 nr->source_addr = *source; 607 } 608 609 nr->device = dev; 610 nr_insert_socket(sk); 611 612 sock_reset_flag(sk, SOCK_ZAPPED); 613 dev_put(dev); 614 release_sock(sk); 615 SOCK_DEBUG(sk, "NET/ROM: socket is bound\n"); 616 return 0; 617} 618 619static int nr_connect(struct socket *sock, struct sockaddr *uaddr, 620 int addr_len, int flags) 621{ 622 struct sock *sk = sock->sk; 623 struct nr_sock *nr = nr_sk(sk); 624 struct sockaddr_ax25 *addr = (struct sockaddr_ax25 *)uaddr; 625 ax25_address *source = NULL; 626 ax25_uid_assoc *user; 627 struct net_device *dev; 628 int err = 0; 629 630 lock_sock(sk); 631 if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) { 632 sock->state = SS_CONNECTED; 633 goto out_release; /* Connect completed during a ERESTARTSYS event */ 634 } 635 636 if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) { 637 sock->state = SS_UNCONNECTED; 638 err = -ECONNREFUSED; 639 goto out_release; 640 } 641 642 if (sk->sk_state == TCP_ESTABLISHED) { 643 err = -EISCONN; /* No reconnect on a seqpacket socket */ 644 goto out_release; 645 } 646 647 sk->sk_state = TCP_CLOSE; 648 sock->state = SS_UNCONNECTED; 649 650 if (addr_len != sizeof(struct sockaddr_ax25) && addr_len != sizeof(struct full_sockaddr_ax25)) { 651 err = -EINVAL; 652 goto out_release; 653 } 654 if (addr->sax25_family != AF_NETROM) { 655 err = -EINVAL; 656 goto out_release; 657 } 658 if (sock_flag(sk, SOCK_ZAPPED)) { /* Must bind first - autobinding in this may or may not work */ 659 sock_reset_flag(sk, SOCK_ZAPPED); 660 661 if ((dev = nr_dev_first()) == NULL) { 662 err = -ENETUNREACH; 663 goto out_release; 664 } 665 source = (ax25_address *)dev->dev_addr; 666 667 user = ax25_findbyuid(current->euid); 668 if (user) { 669 nr->user_addr = user->call; 670 ax25_uid_put(user); 671 } else { 672 if (ax25_uid_policy && !capable(CAP_NET_ADMIN)) { 673 dev_put(dev); 674 err = -EPERM; 675 goto out_release; 676 } 677 nr->user_addr = *source; 678 } 679 680 nr->source_addr = *source; 681 nr->device = dev; 682 683 dev_put(dev); 684 nr_insert_socket(sk); /* Finish the bind */ 685 } 686 687 nr->dest_addr = addr->sax25_call; 688 689 release_sock(sk); 690 circuit = nr_find_next_circuit(); 691 lock_sock(sk); 692 693 nr->my_index = circuit / 256; 694 nr->my_id = circuit % 256; 695 696 circuit++; 697 698 /* Move to connecting socket, start sending Connect Requests */ 699 sock->state = SS_CONNECTING; 700 sk->sk_state = TCP_SYN_SENT; 701 702 nr_establish_data_link(sk); 703 704 nr->state = NR_STATE_1; 705 706 nr_start_heartbeat(sk); 707 708 /* Now the loop */ 709 if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) { 710 err = -EINPROGRESS; 711 goto out_release; 712 } 713 714 /* 715 * A Connect Ack with Choke or timeout or failed routing will go to 716 * closed. 717 */ 718 if (sk->sk_state == TCP_SYN_SENT) { 719 DEFINE_WAIT(wait); 720 721 for (;;) { 722 prepare_to_wait(sk->sk_sleep, &wait, 723 TASK_INTERRUPTIBLE); 724 if (sk->sk_state != TCP_SYN_SENT) 725 break; 726 if (!signal_pending(current)) { 727 release_sock(sk); 728 schedule(); 729 lock_sock(sk); 730 continue; 731 } 732 err = -ERESTARTSYS; 733 break; 734 } 735 finish_wait(sk->sk_sleep, &wait); 736 if (err) 737 goto out_release; 738 } 739 740 if (sk->sk_state != TCP_ESTABLISHED) { 741 sock->state = SS_UNCONNECTED; 742 err = sock_error(sk); /* Always set at this point */ 743 goto out_release; 744 } 745 746 sock->state = SS_CONNECTED; 747 748out_release: 749 release_sock(sk); 750 751 return err; 752} 753 754static int nr_accept(struct socket *sock, struct socket *newsock, int flags) 755{ 756 struct sk_buff *skb; 757 struct sock *newsk; 758 DEFINE_WAIT(wait); 759 struct sock *sk; 760 int err = 0; 761 762 if ((sk = sock->sk) == NULL) 763 return -EINVAL; 764 765 lock_sock(sk); 766 if (sk->sk_type != SOCK_SEQPACKET) { 767 err = -EOPNOTSUPP; 768 goto out_release; 769 } 770 771 if (sk->sk_state != TCP_LISTEN) { 772 err = -EINVAL; 773 goto out_release; 774 } 775 776 /* 777 * The write queue this time is holding sockets ready to use 778 * hooked into the SABM we saved 779 */ 780 for (;;) { 781 prepare_to_wait(sk->sk_sleep, &wait, TASK_INTERRUPTIBLE); 782 skb = skb_dequeue(&sk->sk_receive_queue); 783 if (skb) 784 break; 785 786 if (flags & O_NONBLOCK) { 787 err = -EWOULDBLOCK; 788 break; 789 } 790 if (!signal_pending(current)) { 791 release_sock(sk); 792 schedule(); 793 lock_sock(sk); 794 continue; 795 } 796 err = -ERESTARTSYS; 797 break; 798 } 799 finish_wait(sk->sk_sleep, &wait); 800 if (err) 801 goto out_release; 802 803 newsk = skb->sk; 804 newsk->sk_socket = newsock; 805 newsk->sk_sleep = &newsock->wait; 806 807 /* Now attach up the new socket */ 808 kfree_skb(skb); 809 sk_acceptq_removed(sk); 810 newsock->sk = newsk; 811 812out_release: 813 release_sock(sk); 814 815 return err; 816} 817 818static int nr_getname(struct socket *sock, struct sockaddr *uaddr, 819 int *uaddr_len, int peer) 820{ 821 struct full_sockaddr_ax25 *sax = (struct full_sockaddr_ax25 *)uaddr; 822 struct sock *sk = sock->sk; 823 struct nr_sock *nr = nr_sk(sk); 824 825 lock_sock(sk); 826 if (peer != 0) { 827 if (sk->sk_state != TCP_ESTABLISHED) { 828 release_sock(sk); 829 return -ENOTCONN; 830 } 831 sax->fsa_ax25.sax25_family = AF_NETROM; 832 sax->fsa_ax25.sax25_ndigis = 1; 833 sax->fsa_ax25.sax25_call = nr->user_addr; 834 sax->fsa_digipeater[0] = nr->dest_addr; 835 *uaddr_len = sizeof(struct full_sockaddr_ax25); 836 } else { 837 sax->fsa_ax25.sax25_family = AF_NETROM; 838 sax->fsa_ax25.sax25_ndigis = 0; 839 sax->fsa_ax25.sax25_call = nr->source_addr; 840 *uaddr_len = sizeof(struct sockaddr_ax25); 841 } 842 release_sock(sk); 843 844 return 0; 845} 846 847int nr_rx_frame(struct sk_buff *skb, struct net_device *dev) 848{ 849 struct sock *sk; 850 struct sock *make; 851 struct nr_sock *nr_make; 852 ax25_address *src, *dest, *user; 853 unsigned short circuit_index, circuit_id; 854 unsigned short peer_circuit_index, peer_circuit_id; 855 unsigned short frametype, flags, window, timeout; 856 int ret; 857 858 skb->sk = NULL; /* Initially we don't know who it's for */ 859 860 /* 861 * skb->data points to the netrom frame start 862 */ 863 864 src = (ax25_address *)(skb->data + 0); 865 dest = (ax25_address *)(skb->data + 7); 866 867 circuit_index = skb->data[15]; 868 circuit_id = skb->data[16]; 869 peer_circuit_index = skb->data[17]; 870 peer_circuit_id = skb->data[18]; 871 frametype = skb->data[19] & 0x0F; 872 flags = skb->data[19] & 0xF0; 873 874 /* 875 * Check for an incoming IP over NET/ROM frame. 876 */ 877 if (frametype == NR_PROTOEXT && 878 circuit_index == NR_PROTO_IP && circuit_id == NR_PROTO_IP) { 879 skb_pull(skb, NR_NETWORK_LEN + NR_TRANSPORT_LEN); 880 skb_reset_transport_header(skb); 881 882 return nr_rx_ip(skb, dev); 883 } 884 885 /* 886 * Find an existing socket connection, based on circuit ID, if it's 887 * a Connect Request base it on their circuit ID. 888 * 889 * Circuit ID 0/0 is not valid but it could still be a "reset" for a 890 * circuit that no longer exists at the other end ... 891 */ 892 893 sk = NULL; 894 895 if (circuit_index == 0 && circuit_id == 0) { 896 if (frametype == NR_CONNACK && flags == NR_CHOKE_FLAG) 897 sk = nr_find_peer(peer_circuit_index, peer_circuit_id, src); 898 } else { 899 if (frametype == NR_CONNREQ) 900 sk = nr_find_peer(circuit_index, circuit_id, src); 901 else 902 sk = nr_find_socket(circuit_index, circuit_id); 903 } 904 905 if (sk != NULL) { 906 skb_reset_transport_header(skb); 907 908 if (frametype == NR_CONNACK && skb->len == 22) 909 nr_sk(sk)->bpqext = 1; 910 else 911 nr_sk(sk)->bpqext = 0; 912 913 ret = nr_process_rx_frame(sk, skb); 914 bh_unlock_sock(sk); 915 return ret; 916 } 917 918 /* 919 * Now it should be a CONNREQ. 920 */ 921 if (frametype != NR_CONNREQ) { 922 /* 923 * Here it would be nice to be able to send a reset but 924 * NET/ROM doesn't have one. We've tried to extend the protocol 925 * by sending NR_CONNACK | NR_CHOKE_FLAGS replies but that 926 * apparently kills BPQ boxes... :-( 927 * So now we try to follow the established behaviour of 928 * G8PZT's Xrouter which is sending packets with command type 7 929 * as an extension of the protocol. 930 */ 931 if (sysctl_netrom_reset_circuit && 932 (frametype != NR_RESET || flags != 0)) 933 nr_transmit_reset(skb, 1); 934 935 return 0; 936 } 937 938 sk = nr_find_listener(dest); 939 940 user = (ax25_address *)(skb->data + 21); 941 942 if (sk == NULL || sk_acceptq_is_full(sk) || 943 (make = nr_make_new(sk)) == NULL) { 944 nr_transmit_refusal(skb, 0); 945 if (sk) 946 bh_unlock_sock(sk); 947 return 0; 948 } 949 950 window = skb->data[20]; 951 952 skb->sk = make; 953 make->sk_state = TCP_ESTABLISHED; 954 955 /* Fill in his circuit details */ 956 nr_make = nr_sk(make); 957 nr_make->source_addr = *dest; 958 nr_make->dest_addr = *src; 959 nr_make->user_addr = *user; 960 961 nr_make->your_index = circuit_index; 962 nr_make->your_id = circuit_id; 963 964 bh_unlock_sock(sk); 965 circuit = nr_find_next_circuit(); 966 bh_lock_sock(sk); 967 968 nr_make->my_index = circuit / 256; 969 nr_make->my_id = circuit % 256; 970 971 circuit++; 972 973 /* Window negotiation */ 974 if (window < nr_make->window) 975 nr_make->window = window; 976 977 /* L4 timeout negotiation */ 978 if (skb->len == 37) { 979 timeout = skb->data[36] * 256 + skb->data[35]; 980 if (timeout * HZ < nr_make->t1) 981 nr_make->t1 = timeout * HZ; 982 nr_make->bpqext = 1; 983 } else { 984 nr_make->bpqext = 0; 985 } 986 987 nr_write_internal(make, NR_CONNACK); 988 989 nr_make->condition = 0x00; 990 nr_make->vs = 0; 991 nr_make->va = 0; 992 nr_make->vr = 0; 993 nr_make->vl = 0; 994 nr_make->state = NR_STATE_3; 995 sk_acceptq_added(sk); 996 skb_queue_head(&sk->sk_receive_queue, skb); 997 998 if (!sock_flag(sk, SOCK_DEAD)) 999 sk->sk_data_ready(sk, skb->len); 1000 1001 bh_unlock_sock(sk); 1002 1003 nr_insert_socket(make); 1004 1005 nr_start_heartbeat(make); 1006 nr_start_idletimer(make); 1007 1008 return 1; 1009} 1010 1011static int nr_sendmsg(struct kiocb *iocb, struct socket *sock, 1012 struct msghdr *msg, size_t len) 1013{ 1014 struct sock *sk = sock->sk; 1015 struct nr_sock *nr = nr_sk(sk); 1016 struct sockaddr_ax25 *usax = (struct sockaddr_ax25 *)msg->msg_name; 1017 int err; 1018 struct sockaddr_ax25 sax; 1019 struct sk_buff *skb; 1020 unsigned char *asmptr; 1021 int size; 1022 1023 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT)) 1024 return -EINVAL; 1025 1026 lock_sock(sk); 1027 if (sock_flag(sk, SOCK_ZAPPED)) { 1028 err = -EADDRNOTAVAIL; 1029 goto out; 1030 } 1031 1032 if (sk->sk_shutdown & SEND_SHUTDOWN) { 1033 send_sig(SIGPIPE, current, 0); 1034 err = -EPIPE; 1035 goto out; 1036 } 1037 1038 if (nr->device == NULL) { 1039 err = -ENETUNREACH; 1040 goto out; 1041 } 1042 1043 if (usax) { 1044 if (msg->msg_namelen < sizeof(sax)) { 1045 err = -EINVAL; 1046 goto out; 1047 } 1048 sax = *usax; 1049 if (ax25cmp(&nr->dest_addr, &sax.sax25_call) != 0) { 1050 err = -EISCONN; 1051 goto out; 1052 } 1053 if (sax.sax25_family != AF_NETROM) { 1054 err = -EINVAL; 1055 goto out; 1056 } 1057 } else { 1058 if (sk->sk_state != TCP_ESTABLISHED) { 1059 err = -ENOTCONN; 1060 goto out; 1061 } 1062 sax.sax25_family = AF_NETROM; 1063 sax.sax25_call = nr->dest_addr; 1064 } 1065 1066 SOCK_DEBUG(sk, "NET/ROM: sendto: Addresses built.\n"); 1067 1068 /* Build a packet */ 1069 SOCK_DEBUG(sk, "NET/ROM: sendto: building packet.\n"); 1070 size = len + NR_NETWORK_LEN + NR_TRANSPORT_LEN; 1071 1072 if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL) 1073 goto out; 1074 1075 skb_reserve(skb, size - len); 1076 skb_reset_transport_header(skb); 1077 1078 /* 1079 * Push down the NET/ROM header 1080 */ 1081 1082 asmptr = skb_push(skb, NR_TRANSPORT_LEN); 1083 SOCK_DEBUG(sk, "Building NET/ROM Header.\n"); 1084 1085 /* Build a NET/ROM Transport header */ 1086 1087 *asmptr++ = nr->your_index; 1088 *asmptr++ = nr->your_id; 1089 *asmptr++ = 0; /* To be filled in later */ 1090 *asmptr++ = 0; /* Ditto */ 1091 *asmptr++ = NR_INFO; 1092 SOCK_DEBUG(sk, "Built header.\n"); 1093 1094 /* 1095 * Put the data on the end 1096 */ 1097 skb_put(skb, len); 1098 1099 SOCK_DEBUG(sk, "NET/ROM: Appending user data\n"); 1100 1101 /* User data follows immediately after the NET/ROM transport header */ 1102 if (memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len)) { 1103 kfree_skb(skb); 1104 err = -EFAULT; 1105 goto out; 1106 } 1107 1108 SOCK_DEBUG(sk, "NET/ROM: Transmitting buffer\n"); 1109 1110 if (sk->sk_state != TCP_ESTABLISHED) { 1111 kfree_skb(skb); 1112 err = -ENOTCONN; 1113 goto out; 1114 } 1115 1116 nr_output(sk, skb); /* Shove it onto the queue */ 1117 1118 err = len; 1119out: 1120 release_sock(sk); 1121 return err; 1122} 1123 1124static int nr_recvmsg(struct kiocb *iocb, struct socket *sock, 1125 struct msghdr *msg, size_t size, int flags) 1126{ 1127 struct sock *sk = sock->sk; 1128 struct sockaddr_ax25 *sax = (struct sockaddr_ax25 *)msg->msg_name; 1129 size_t copied; 1130 struct sk_buff *skb; 1131 int er; 1132 1133 /* 1134 * This works for seqpacket too. The receiver has ordered the queue for 1135 * us! We do one quick check first though 1136 */ 1137 1138 lock_sock(sk); 1139 if (sk->sk_state != TCP_ESTABLISHED) { 1140 release_sock(sk); 1141 return -ENOTCONN; 1142 } 1143 1144 /* Now we can treat all alike */ 1145 if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL) { 1146 release_sock(sk); 1147 return er; 1148 } 1149 1150 skb_reset_transport_header(skb); 1151 copied = skb->len; 1152 1153 if (copied > size) { 1154 copied = size; 1155 msg->msg_flags |= MSG_TRUNC; 1156 } 1157 1158 skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied); 1159 1160 if (sax != NULL) { 1161 sax->sax25_family = AF_NETROM; 1162 skb_copy_from_linear_data_offset(skb, 7, sax->sax25_call.ax25_call, 1163 AX25_ADDR_LEN); 1164 } 1165 1166 msg->msg_namelen = sizeof(*sax); 1167 1168 skb_free_datagram(sk, skb); 1169 1170 release_sock(sk); 1171 return copied; 1172} 1173 1174 1175static int nr_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg) 1176{ 1177 struct sock *sk = sock->sk; 1178 void __user *argp = (void __user *)arg; 1179 int ret; 1180 1181 switch (cmd) { 1182 case TIOCOUTQ: { 1183 long amount; 1184 1185 lock_sock(sk); 1186 amount = sk->sk_sndbuf - atomic_read(&sk->sk_wmem_alloc); 1187 if (amount < 0) 1188 amount = 0; 1189 release_sock(sk); 1190 return put_user(amount, (int __user *)argp); 1191 } 1192 1193 case TIOCINQ: { 1194 struct sk_buff *skb; 1195 long amount = 0L; 1196 1197 lock_sock(sk); 1198 /* These two are safe on a single CPU system as only user tasks fiddle here */ 1199 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL) 1200 amount = skb->len; 1201 release_sock(sk); 1202 return put_user(amount, (int __user *)argp); 1203 } 1204 1205 case SIOCGSTAMP: 1206 lock_sock(sk); 1207 ret = sock_get_timestamp(sk, argp); 1208 release_sock(sk); 1209 return ret; 1210 1211 case SIOCGSTAMPNS: 1212 lock_sock(sk); 1213 ret = sock_get_timestampns(sk, argp); 1214 release_sock(sk); 1215 return ret; 1216 1217 case SIOCGIFADDR: 1218 case SIOCSIFADDR: 1219 case SIOCGIFDSTADDR: 1220 case SIOCSIFDSTADDR: 1221 case SIOCGIFBRDADDR: 1222 case SIOCSIFBRDADDR: 1223 case SIOCGIFNETMASK: 1224 case SIOCSIFNETMASK: 1225 case SIOCGIFMETRIC: 1226 case SIOCSIFMETRIC: 1227 return -EINVAL; 1228 1229 case SIOCADDRT: 1230 case SIOCDELRT: 1231 case SIOCNRDECOBS: 1232 if (!capable(CAP_NET_ADMIN)) return -EPERM; 1233 return nr_rt_ioctl(cmd, argp); 1234 1235 default: 1236 return -ENOIOCTLCMD; 1237 } 1238 1239 return 0; 1240} 1241 1242#ifdef CONFIG_PROC_FS 1243 1244static void *nr_info_start(struct seq_file *seq, loff_t *pos) 1245{ 1246 struct sock *s; 1247 struct hlist_node *node; 1248 int i = 1; 1249 1250 spin_lock_bh(&nr_list_lock); 1251 if (*pos == 0) 1252 return SEQ_START_TOKEN; 1253 1254 sk_for_each(s, node, &nr_list) { 1255 if (i == *pos) 1256 return s; 1257 ++i; 1258 } 1259 return NULL; 1260} 1261 1262static void *nr_info_next(struct seq_file *seq, void *v, loff_t *pos) 1263{ 1264 ++*pos; 1265 1266 return (v == SEQ_START_TOKEN) ? sk_head(&nr_list) 1267 : sk_next((struct sock *)v); 1268} 1269 1270static void nr_info_stop(struct seq_file *seq, void *v) 1271{ 1272 spin_unlock_bh(&nr_list_lock); 1273} 1274 1275static int nr_info_show(struct seq_file *seq, void *v) 1276{ 1277 struct sock *s = v; 1278 struct net_device *dev; 1279 struct nr_sock *nr; 1280 const char *devname; 1281 char buf[11]; 1282 1283 if (v == SEQ_START_TOKEN) 1284 seq_puts(seq, 1285"user_addr dest_node src_node dev my your st vs vr va t1 t2 t4 idle n2 wnd Snd-Q Rcv-Q inode\n"); 1286 1287 else { 1288 1289 bh_lock_sock(s); 1290 nr = nr_sk(s); 1291 1292 if ((dev = nr->device) == NULL) 1293 devname = "???"; 1294 else 1295 devname = dev->name; 1296 1297 seq_printf(seq, "%-9s ", ax2asc(buf, &nr->user_addr)); 1298 seq_printf(seq, "%-9s ", ax2asc(buf, &nr->dest_addr)); 1299 seq_printf(seq, 1300"%-9s %-3s %02X/%02X %02X/%02X %2d %3d %3d %3d %3lu/%03lu %2lu/%02lu %3lu/%03lu %3lu/%03lu %2d/%02d %3d %5d %5d %ld\n", 1301 ax2asc(buf, &nr->source_addr), 1302 devname, 1303 nr->my_index, 1304 nr->my_id, 1305 nr->your_index, 1306 nr->your_id, 1307 nr->state, 1308 nr->vs, 1309 nr->vr, 1310 nr->va, 1311 ax25_display_timer(&nr->t1timer) / HZ, 1312 nr->t1 / HZ, 1313 ax25_display_timer(&nr->t2timer) / HZ, 1314 nr->t2 / HZ, 1315 ax25_display_timer(&nr->t4timer) / HZ, 1316 nr->t4 / HZ, 1317 ax25_display_timer(&nr->idletimer) / (60 * HZ), 1318 nr->idle / (60 * HZ), 1319 nr->n2count, 1320 nr->n2, 1321 nr->window, 1322 atomic_read(&s->sk_wmem_alloc), 1323 atomic_read(&s->sk_rmem_alloc), 1324 s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L); 1325 1326 bh_unlock_sock(s); 1327 } 1328 return 0; 1329} 1330 1331static struct seq_operations nr_info_seqops = { 1332 .start = nr_info_start, 1333 .next = nr_info_next, 1334 .stop = nr_info_stop, 1335 .show = nr_info_show, 1336}; 1337 1338static int nr_info_open(struct inode *inode, struct file *file) 1339{ 1340 return seq_open(file, &nr_info_seqops); 1341} 1342 1343static const struct file_operations nr_info_fops = { 1344 .owner = THIS_MODULE, 1345 .open = nr_info_open, 1346 .read = seq_read, 1347 .llseek = seq_lseek, 1348 .release = seq_release, 1349}; 1350#endif /* CONFIG_PROC_FS */ 1351 1352static struct net_proto_family nr_family_ops = { 1353 .family = PF_NETROM, 1354 .create = nr_create, 1355 .owner = THIS_MODULE, 1356}; 1357 1358static const struct proto_ops nr_proto_ops = { 1359 .family = PF_NETROM, 1360 .owner = THIS_MODULE, 1361 .release = nr_release, 1362 .bind = nr_bind, 1363 .connect = nr_connect, 1364 .socketpair = sock_no_socketpair, 1365 .accept = nr_accept, 1366 .getname = nr_getname, 1367 .poll = datagram_poll, 1368 .ioctl = nr_ioctl, 1369 .listen = nr_listen, 1370 .shutdown = sock_no_shutdown, 1371 .setsockopt = nr_setsockopt, 1372 .getsockopt = nr_getsockopt, 1373 .sendmsg = nr_sendmsg, 1374 .recvmsg = nr_recvmsg, 1375 .mmap = sock_no_mmap, 1376 .sendpage = sock_no_sendpage, 1377}; 1378 1379static struct notifier_block nr_dev_notifier = { 1380 .notifier_call = nr_device_event, 1381}; 1382 1383static struct net_device **dev_nr; 1384 1385static struct ax25_protocol nr_pid = { 1386 .pid = AX25_P_NETROM, 1387 .func = nr_route_frame 1388}; 1389 1390static struct ax25_linkfail nr_linkfail_notifier = { 1391 .func = nr_link_failed, 1392}; 1393 1394static int __init nr_proto_init(void) 1395{ 1396 int i; 1397 int rc = proto_register(&nr_proto, 0); 1398 1399 if (rc != 0) 1400 goto out; 1401 1402 if (nr_ndevs > 0x7fffffff/sizeof(struct net_device *)) { 1403 printk(KERN_ERR "NET/ROM: nr_proto_init - nr_ndevs parameter to large\n"); 1404 return -1; 1405 } 1406 1407 dev_nr = kzalloc(nr_ndevs * sizeof(struct net_device *), GFP_KERNEL); 1408 if (dev_nr == NULL) { 1409 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device array\n"); 1410 return -1; 1411 } 1412 1413 for (i = 0; i < nr_ndevs; i++) { 1414 char name[IFNAMSIZ]; 1415 struct net_device *dev; 1416 1417 sprintf(name, "nr%d", i); 1418 dev = alloc_netdev(sizeof(struct nr_private), name, nr_setup); 1419 if (!dev) { 1420 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device structure\n"); 1421 goto fail; 1422 } 1423 1424 dev->base_addr = i; 1425 if (register_netdev(dev)) { 1426 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register network device\n"); 1427 free_netdev(dev); 1428 goto fail; 1429 } 1430 lockdep_set_class(&dev->_xmit_lock, &nr_netdev_xmit_lock_key); 1431 dev_nr[i] = dev; 1432 } 1433 1434 if (sock_register(&nr_family_ops)) { 1435 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register socket family\n"); 1436 goto fail; 1437 } 1438 1439 register_netdevice_notifier(&nr_dev_notifier); 1440 1441 ax25_register_pid(&nr_pid); 1442 ax25_linkfail_register(&nr_linkfail_notifier); 1443 1444#ifdef CONFIG_SYSCTL 1445 nr_register_sysctl(); 1446#endif 1447 1448 nr_loopback_init(); 1449 1450 proc_net_fops_create("nr", S_IRUGO, &nr_info_fops); 1451 proc_net_fops_create("nr_neigh", S_IRUGO, &nr_neigh_fops); 1452 proc_net_fops_create("nr_nodes", S_IRUGO, &nr_nodes_fops); 1453out: 1454 return rc; 1455fail: 1456 while (--i >= 0) { 1457 unregister_netdev(dev_nr[i]); 1458 free_netdev(dev_nr[i]); 1459 } 1460 kfree(dev_nr); 1461 proto_unregister(&nr_proto); 1462 rc = -1; 1463 goto out; 1464} 1465 1466module_init(nr_proto_init); 1467 1468module_param(nr_ndevs, int, 0); 1469MODULE_PARM_DESC(nr_ndevs, "number of NET/ROM devices"); 1470 1471MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>"); 1472MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol"); 1473MODULE_LICENSE("GPL"); 1474MODULE_ALIAS_NETPROTO(PF_NETROM); 1475 1476static void __exit nr_exit(void) 1477{ 1478 int i; 1479 1480 proc_net_remove("nr"); 1481 proc_net_remove("nr_neigh"); 1482 proc_net_remove("nr_nodes"); 1483 nr_loopback_clear(); 1484 1485 nr_rt_free(); 1486 1487#ifdef CONFIG_SYSCTL 1488 nr_unregister_sysctl(); 1489#endif 1490 1491 ax25_linkfail_release(&nr_linkfail_notifier); 1492 ax25_protocol_release(AX25_P_NETROM); 1493 1494 unregister_netdevice_notifier(&nr_dev_notifier); 1495 1496 sock_unregister(PF_NETROM); 1497 1498 for (i = 0; i < nr_ndevs; i++) { 1499 struct net_device *dev = dev_nr[i]; 1500 if (dev) { 1501 unregister_netdev(dev); 1502 free_netdev(dev); 1503 } 1504 } 1505 1506 kfree(dev_nr); 1507 proto_unregister(&nr_proto); 1508} 1509module_exit(nr_exit); 1510