Linux Audio

Check our new training course

Linux BSP upgrade and security maintenance

Need help to get security updates for your Linux BSP?
Loading...
v3.1
   1/*
   2 *	Implements an IPX socket layer.
   3 *
   4 *	This code is derived from work by
   5 *		Ross Biro	: 	Writing the original IP stack
   6 *		Fred Van Kempen :	Tidying up the TCP/IP
   7 *
   8 *	Many thanks go to Keith Baker, Institute For Industrial Information
   9 *	Technology Ltd, Swansea University for allowing me to work on this
  10 *	in my own time even though it was in some ways related to commercial
  11 *	work I am currently employed to do there.
  12 *
  13 *	All the material in this file is subject to the Gnu license version 2.
  14 *	Neither Alan Cox nor the Swansea University Computer Society admit
  15 *	liability nor provide warranty for any of this software. This material
  16 *	is provided as is and at no charge.
  17 *
  18 *	Portions Copyright (c) 2000-2003 Conectiva, Inc. <acme@conectiva.com.br>
  19 *	Neither Arnaldo Carvalho de Melo nor Conectiva, Inc. admit liability nor
  20 *	provide warranty for any of this software. This material is provided
  21 *	"AS-IS" and at no charge.
  22 *
  23 * 	Portions Copyright (c) 1995 Caldera, Inc. <greg@caldera.com>
  24 *	Neither Greg Page nor Caldera, Inc. admit liability nor provide
  25 *	warranty for any of this software. This material is provided
  26 *	"AS-IS" and at no charge.
  27 *
  28 *	See net/ipx/ChangeLog.
  29 */
  30
  31#include <linux/capability.h>
  32#include <linux/errno.h>
  33#include <linux/if_arp.h>
  34#include <linux/if_ether.h>
  35#include <linux/init.h>
  36#include <linux/ipx.h>
  37#include <linux/kernel.h>
  38#include <linux/list.h>
  39#include <linux/module.h>
  40#include <linux/net.h>
  41#include <linux/netdevice.h>
  42#include <linux/uio.h>
  43#include <linux/slab.h>
  44#include <linux/skbuff.h>
  45#include <linux/socket.h>
  46#include <linux/sockios.h>
  47#include <linux/string.h>
  48#include <linux/types.h>
  49#include <linux/termios.h>
  50
  51#include <net/ipx.h>
  52#include <net/p8022.h>
  53#include <net/psnap.h>
  54#include <net/sock.h>
 
  55#include <net/tcp_states.h>
 
  56
  57#include <asm/uaccess.h>
  58
  59#ifdef CONFIG_SYSCTL
  60extern void ipx_register_sysctl(void);
  61extern void ipx_unregister_sysctl(void);
  62#else
  63#define ipx_register_sysctl()
  64#define ipx_unregister_sysctl()
  65#endif
  66
  67/* Configuration Variables */
  68static unsigned char ipxcfg_max_hops = 16;
  69static char ipxcfg_auto_select_primary;
  70static char ipxcfg_auto_create_interfaces;
  71int sysctl_ipx_pprop_broadcasting = 1;
  72
  73/* Global Variables */
  74static struct datalink_proto *p8022_datalink;
  75static struct datalink_proto *pEII_datalink;
  76static struct datalink_proto *p8023_datalink;
  77static struct datalink_proto *pSNAP_datalink;
  78
  79static const struct proto_ops ipx_dgram_ops;
  80
  81LIST_HEAD(ipx_interfaces);
  82DEFINE_SPINLOCK(ipx_interfaces_lock);
  83
  84struct ipx_interface *ipx_primary_net;
  85struct ipx_interface *ipx_internal_net;
  86
  87extern int ipxrtr_add_route(__be32 network, struct ipx_interface *intrfc,
  88			    unsigned char *node);
  89extern void ipxrtr_del_routes(struct ipx_interface *intrfc);
  90extern int ipxrtr_route_packet(struct sock *sk, struct sockaddr_ipx *usipx,
  91			       struct iovec *iov, size_t len, int noblock);
  92extern int ipxrtr_route_skb(struct sk_buff *skb);
  93extern struct ipx_route *ipxrtr_lookup(__be32 net);
  94extern int ipxrtr_ioctl(unsigned int cmd, void __user *arg);
  95
  96struct ipx_interface *ipx_interfaces_head(void)
  97{
  98	struct ipx_interface *rc = NULL;
  99
 100	if (!list_empty(&ipx_interfaces))
 101		rc = list_entry(ipx_interfaces.next,
 102				struct ipx_interface, node);
 103	return rc;
 104}
 105
 106static void ipxcfg_set_auto_select(char val)
 107{
 108	ipxcfg_auto_select_primary = val;
 109	if (val && !ipx_primary_net)
 110		ipx_primary_net = ipx_interfaces_head();
 111}
 112
 113static int ipxcfg_get_config_data(struct ipx_config_data __user *arg)
 114{
 115	struct ipx_config_data vals;
 116
 117	vals.ipxcfg_auto_create_interfaces = ipxcfg_auto_create_interfaces;
 118	vals.ipxcfg_auto_select_primary	   = ipxcfg_auto_select_primary;
 119
 120	return copy_to_user(arg, &vals, sizeof(vals)) ? -EFAULT : 0;
 121}
 122
 123/*
 124 * Note: Sockets may not be removed _during_ an interrupt or inet_bh
 125 * handler using this technique. They can be added although we do not
 126 * use this facility.
 127 */
 128
 129static void ipx_remove_socket(struct sock *sk)
 130{
 131	/* Determine interface with which socket is associated */
 132	struct ipx_interface *intrfc = ipx_sk(sk)->intrfc;
 133
 134	if (!intrfc)
 135		goto out;
 136
 137	ipxitf_hold(intrfc);
 138	spin_lock_bh(&intrfc->if_sklist_lock);
 139	sk_del_node_init(sk);
 140	spin_unlock_bh(&intrfc->if_sklist_lock);
 141	ipxitf_put(intrfc);
 142out:
 143	return;
 144}
 145
 146static void ipx_destroy_socket(struct sock *sk)
 147{
 148	ipx_remove_socket(sk);
 149	skb_queue_purge(&sk->sk_receive_queue);
 150	sk_refcnt_debug_dec(sk);
 151}
 152
 153/*
 154 * The following code is used to support IPX Interfaces (IPXITF).  An
 155 * IPX interface is defined by a physical device and a frame type.
 156 */
 157
 158/* ipxitf_clear_primary_net has to be called with ipx_interfaces_lock held */
 159
 160static void ipxitf_clear_primary_net(void)
 161{
 162	ipx_primary_net = NULL;
 163	if (ipxcfg_auto_select_primary)
 164		ipx_primary_net = ipx_interfaces_head();
 165}
 166
 167static struct ipx_interface *__ipxitf_find_using_phys(struct net_device *dev,
 168						      __be16 datalink)
 169{
 170	struct ipx_interface *i;
 171
 172	list_for_each_entry(i, &ipx_interfaces, node)
 173		if (i->if_dev == dev && i->if_dlink_type == datalink)
 174			goto out;
 175	i = NULL;
 176out:
 177	return i;
 178}
 179
 180static struct ipx_interface *ipxitf_find_using_phys(struct net_device *dev,
 181						    __be16 datalink)
 182{
 183	struct ipx_interface *i;
 184
 185	spin_lock_bh(&ipx_interfaces_lock);
 186	i = __ipxitf_find_using_phys(dev, datalink);
 187	if (i)
 188		ipxitf_hold(i);
 189	spin_unlock_bh(&ipx_interfaces_lock);
 190	return i;
 191}
 192
 193struct ipx_interface *ipxitf_find_using_net(__be32 net)
 194{
 195	struct ipx_interface *i;
 196
 197	spin_lock_bh(&ipx_interfaces_lock);
 198	if (net) {
 199		list_for_each_entry(i, &ipx_interfaces, node)
 200			if (i->if_netnum == net)
 201				goto hold;
 202		i = NULL;
 203		goto unlock;
 204	}
 205
 206	i = ipx_primary_net;
 207	if (i)
 208hold:
 209		ipxitf_hold(i);
 210unlock:
 211	spin_unlock_bh(&ipx_interfaces_lock);
 212	return i;
 213}
 214
 215/* Sockets are bound to a particular IPX interface. */
 216static void ipxitf_insert_socket(struct ipx_interface *intrfc, struct sock *sk)
 217{
 218	ipxitf_hold(intrfc);
 219	spin_lock_bh(&intrfc->if_sklist_lock);
 220	ipx_sk(sk)->intrfc = intrfc;
 221	sk_add_node(sk, &intrfc->if_sklist);
 222	spin_unlock_bh(&intrfc->if_sklist_lock);
 223	ipxitf_put(intrfc);
 224}
 225
 226/* caller must hold intrfc->if_sklist_lock */
 227static struct sock *__ipxitf_find_socket(struct ipx_interface *intrfc,
 228					 __be16 port)
 229{
 230	struct sock *s;
 231	struct hlist_node *node;
 232
 233	sk_for_each(s, node, &intrfc->if_sklist)
 234		if (ipx_sk(s)->port == port)
 235			goto found;
 236	s = NULL;
 237found:
 238	return s;
 239}
 240
 241/* caller must hold a reference to intrfc */
 242static struct sock *ipxitf_find_socket(struct ipx_interface *intrfc,
 243					__be16 port)
 244{
 245	struct sock *s;
 246
 247	spin_lock_bh(&intrfc->if_sklist_lock);
 248	s = __ipxitf_find_socket(intrfc, port);
 249	if (s)
 250		sock_hold(s);
 251	spin_unlock_bh(&intrfc->if_sklist_lock);
 252
 253	return s;
 254}
 255
 256#ifdef CONFIG_IPX_INTERN
 257static struct sock *ipxitf_find_internal_socket(struct ipx_interface *intrfc,
 258						unsigned char *ipx_node,
 259						__be16 port)
 260{
 261	struct sock *s;
 262	struct hlist_node *node;
 263
 264	ipxitf_hold(intrfc);
 265	spin_lock_bh(&intrfc->if_sklist_lock);
 266
 267	sk_for_each(s, node, &intrfc->if_sklist) {
 268		struct ipx_sock *ipxs = ipx_sk(s);
 269
 270		if (ipxs->port == port &&
 271		    !memcmp(ipx_node, ipxs->node, IPX_NODE_LEN))
 272			goto found;
 273	}
 274	s = NULL;
 275found:
 276	spin_unlock_bh(&intrfc->if_sklist_lock);
 277	ipxitf_put(intrfc);
 278	return s;
 279}
 280#endif
 281
 282static void __ipxitf_down(struct ipx_interface *intrfc)
 283{
 284	struct sock *s;
 285	struct hlist_node *node, *t;
 286
 287	/* Delete all routes associated with this interface */
 288	ipxrtr_del_routes(intrfc);
 289
 290	spin_lock_bh(&intrfc->if_sklist_lock);
 291	/* error sockets */
 292	sk_for_each_safe(s, node, t, &intrfc->if_sklist) {
 293		struct ipx_sock *ipxs = ipx_sk(s);
 294
 295		s->sk_err = ENOLINK;
 296		s->sk_error_report(s);
 297		ipxs->intrfc = NULL;
 298		ipxs->port   = 0;
 299		sock_set_flag(s, SOCK_ZAPPED); /* Indicates it is no longer bound */
 300		sk_del_node_init(s);
 301	}
 302	INIT_HLIST_HEAD(&intrfc->if_sklist);
 303	spin_unlock_bh(&intrfc->if_sklist_lock);
 304
 305	/* remove this interface from list */
 306	list_del(&intrfc->node);
 307
 308	/* remove this interface from *special* networks */
 309	if (intrfc == ipx_primary_net)
 310		ipxitf_clear_primary_net();
 311	if (intrfc == ipx_internal_net)
 312		ipx_internal_net = NULL;
 313
 314	if (intrfc->if_dev)
 315		dev_put(intrfc->if_dev);
 316	kfree(intrfc);
 317}
 318
 319void ipxitf_down(struct ipx_interface *intrfc)
 320{
 321	spin_lock_bh(&ipx_interfaces_lock);
 322	__ipxitf_down(intrfc);
 323	spin_unlock_bh(&ipx_interfaces_lock);
 324}
 325
 326static __inline__ void __ipxitf_put(struct ipx_interface *intrfc)
 327{
 328	if (atomic_dec_and_test(&intrfc->refcnt))
 329		__ipxitf_down(intrfc);
 330}
 331
 332static int ipxitf_device_event(struct notifier_block *notifier,
 333				unsigned long event, void *ptr)
 334{
 335	struct net_device *dev = ptr;
 336	struct ipx_interface *i, *tmp;
 337
 338	if (!net_eq(dev_net(dev), &init_net))
 339		return NOTIFY_DONE;
 340
 341	if (event != NETDEV_DOWN && event != NETDEV_UP)
 342		goto out;
 343
 344	spin_lock_bh(&ipx_interfaces_lock);
 345	list_for_each_entry_safe(i, tmp, &ipx_interfaces, node)
 346		if (i->if_dev == dev) {
 347			if (event == NETDEV_UP)
 348				ipxitf_hold(i);
 349			else
 350				__ipxitf_put(i);
 351		}
 352	spin_unlock_bh(&ipx_interfaces_lock);
 353out:
 354	return NOTIFY_DONE;
 355}
 356
 357
 358static __exit void ipxitf_cleanup(void)
 359{
 360	struct ipx_interface *i, *tmp;
 361
 362	spin_lock_bh(&ipx_interfaces_lock);
 363	list_for_each_entry_safe(i, tmp, &ipx_interfaces, node)
 364		__ipxitf_put(i);
 365	spin_unlock_bh(&ipx_interfaces_lock);
 366}
 367
 368static void ipxitf_def_skb_handler(struct sock *sock, struct sk_buff *skb)
 369{
 370	if (sock_queue_rcv_skb(sock, skb) < 0)
 371		kfree_skb(skb);
 372}
 373
 374/*
 375 * On input skb->sk is NULL. Nobody is charged for the memory.
 376 */
 377
 378/* caller must hold a reference to intrfc */
 379
 380#ifdef CONFIG_IPX_INTERN
 381static int ipxitf_demux_socket(struct ipx_interface *intrfc,
 382			       struct sk_buff *skb, int copy)
 383{
 384	struct ipxhdr *ipx = ipx_hdr(skb);
 385	int is_broadcast = !memcmp(ipx->ipx_dest.node, ipx_broadcast_node,
 386				   IPX_NODE_LEN);
 387	struct sock *s;
 388	struct hlist_node *node;
 389	int rc;
 390
 391	spin_lock_bh(&intrfc->if_sklist_lock);
 392
 393	sk_for_each(s, node, &intrfc->if_sklist) {
 394		struct ipx_sock *ipxs = ipx_sk(s);
 395
 396		if (ipxs->port == ipx->ipx_dest.sock &&
 397		    (is_broadcast || !memcmp(ipx->ipx_dest.node,
 398					     ipxs->node, IPX_NODE_LEN))) {
 399			/* We found a socket to which to send */
 400			struct sk_buff *skb1;
 401
 402			if (copy) {
 403				skb1 = skb_clone(skb, GFP_ATOMIC);
 404				rc = -ENOMEM;
 405				if (!skb1)
 406					goto out;
 407			} else {
 408				skb1 = skb;
 409				copy = 1; /* skb may only be used once */
 410			}
 411			ipxitf_def_skb_handler(s, skb1);
 412
 413			/* On an external interface, one socket can listen */
 414			if (intrfc != ipx_internal_net)
 415				break;
 416		}
 417	}
 418
 419	/* skb was solely for us, and we did not make a copy, so free it. */
 420	if (!copy)
 421		kfree_skb(skb);
 422
 423	rc = 0;
 424out:
 425	spin_unlock_bh(&intrfc->if_sklist_lock);
 426	return rc;
 427}
 428#else
 429static struct sock *ncp_connection_hack(struct ipx_interface *intrfc,
 430					struct ipxhdr *ipx)
 431{
 432	/* The packet's target is a NCP connection handler. We want to hand it
 433	 * to the correct socket directly within the kernel, so that the
 434	 * mars_nwe packet distribution process does not have to do it. Here we
 435	 * only care about NCP and BURST packets.
 436	 *
 437	 * You might call this a hack, but believe me, you do not want a
 438	 * complete NCP layer in the kernel, and this is VERY fast as well. */
 439	struct sock *sk = NULL;
 440	int connection = 0;
 441	u8 *ncphdr = (u8 *)(ipx + 1);
 442
 443	if (*ncphdr == 0x22 && *(ncphdr + 1) == 0x22) /* NCP request */
 444		connection = (((int) *(ncphdr + 5)) << 8) | (int) *(ncphdr + 3);
 445	else if (*ncphdr == 0x77 && *(ncphdr + 1) == 0x77) /* BURST packet */
 446		connection = (((int) *(ncphdr + 9)) << 8) | (int) *(ncphdr + 8);
 447
 448	if (connection) {
 449		struct hlist_node *node;
 450		/* Now we have to look for a special NCP connection handling
 451		 * socket. Only these sockets have ipx_ncp_conn != 0, set by
 452		 * SIOCIPXNCPCONN. */
 453		spin_lock_bh(&intrfc->if_sklist_lock);
 454		sk_for_each(sk, node, &intrfc->if_sklist)
 455			if (ipx_sk(sk)->ipx_ncp_conn == connection) {
 456				sock_hold(sk);
 457				goto found;
 458			}
 459		sk = NULL;
 460	found:
 461		spin_unlock_bh(&intrfc->if_sklist_lock);
 462	}
 463	return sk;
 464}
 465
 466static int ipxitf_demux_socket(struct ipx_interface *intrfc,
 467			       struct sk_buff *skb, int copy)
 468{
 469	struct ipxhdr *ipx = ipx_hdr(skb);
 470	struct sock *sock1 = NULL, *sock2 = NULL;
 471	struct sk_buff *skb1 = NULL, *skb2 = NULL;
 472	int rc;
 473
 474	if (intrfc == ipx_primary_net && ntohs(ipx->ipx_dest.sock) == 0x451)
 475		sock1 = ncp_connection_hack(intrfc, ipx);
 476	if (!sock1)
 477		/* No special socket found, forward the packet the normal way */
 478		sock1 = ipxitf_find_socket(intrfc, ipx->ipx_dest.sock);
 479
 480	/*
 481	 * We need to check if there is a primary net and if
 482	 * this is addressed to one of the *SPECIAL* sockets because
 483	 * these need to be propagated to the primary net.
 484	 * The *SPECIAL* socket list contains: 0x452(SAP), 0x453(RIP) and
 485	 * 0x456(Diagnostic).
 486	 */
 487
 488	if (ipx_primary_net && intrfc != ipx_primary_net) {
 489		const int dsock = ntohs(ipx->ipx_dest.sock);
 490
 491		if (dsock == 0x452 || dsock == 0x453 || dsock == 0x456)
 492			/* The appropriate thing to do here is to dup the
 493			 * packet and route to the primary net interface via
 494			 * ipxitf_send; however, we'll cheat and just demux it
 495			 * here. */
 496			sock2 = ipxitf_find_socket(ipx_primary_net,
 497							ipx->ipx_dest.sock);
 498	}
 499
 500	/*
 501	 * If there is nothing to do return. The kfree will cancel any charging.
 502	 */
 503	rc = 0;
 504	if (!sock1 && !sock2) {
 505		if (!copy)
 506			kfree_skb(skb);
 507		goto out;
 508	}
 509
 510	/*
 511	 * This next segment of code is a little awkward, but it sets it up
 512	 * so that the appropriate number of copies of the SKB are made and
 513	 * that skb1 and skb2 point to it (them) so that it (they) can be
 514	 * demuxed to sock1 and/or sock2.  If we are unable to make enough
 515	 * copies, we do as much as is possible.
 516	 */
 517
 518	if (copy)
 519		skb1 = skb_clone(skb, GFP_ATOMIC);
 520	else
 521		skb1 = skb;
 522
 523	rc = -ENOMEM;
 524	if (!skb1)
 525		goto out_put;
 526
 527	/* Do we need 2 SKBs? */
 528	if (sock1 && sock2)
 529		skb2 = skb_clone(skb1, GFP_ATOMIC);
 530	else
 531		skb2 = skb1;
 532
 533	if (sock1)
 534		ipxitf_def_skb_handler(sock1, skb1);
 535
 536	if (!skb2)
 537		goto out_put;
 538
 539	if (sock2)
 540		ipxitf_def_skb_handler(sock2, skb2);
 541
 542	rc = 0;
 543out_put:
 544	if (sock1)
 545		sock_put(sock1);
 546	if (sock2)
 547		sock_put(sock2);
 548out:
 549	return rc;
 550}
 551#endif	/* CONFIG_IPX_INTERN */
 552
 553static struct sk_buff *ipxitf_adjust_skbuff(struct ipx_interface *intrfc,
 554					    struct sk_buff *skb)
 555{
 556	struct sk_buff *skb2;
 557	int in_offset = (unsigned char *)ipx_hdr(skb) - skb->head;
 558	int out_offset = intrfc->if_ipx_offset;
 559	int len;
 560
 561	/* Hopefully, most cases */
 562	if (in_offset >= out_offset)
 563		return skb;
 564
 565	/* Need new SKB */
 566	len  = skb->len + out_offset;
 567	skb2 = alloc_skb(len, GFP_ATOMIC);
 568	if (skb2) {
 569		skb_reserve(skb2, out_offset);
 570		skb_reset_network_header(skb2);
 571		skb_reset_transport_header(skb2);
 572		skb_put(skb2, skb->len);
 573		memcpy(ipx_hdr(skb2), ipx_hdr(skb), skb->len);
 574		memcpy(skb2->cb, skb->cb, sizeof(skb->cb));
 575	}
 576	kfree_skb(skb);
 577	return skb2;
 578}
 579
 580/* caller must hold a reference to intrfc and the skb has to be unshared */
 581int ipxitf_send(struct ipx_interface *intrfc, struct sk_buff *skb, char *node)
 582{
 583	struct ipxhdr *ipx = ipx_hdr(skb);
 584	struct net_device *dev = intrfc->if_dev;
 585	struct datalink_proto *dl = intrfc->if_dlink;
 586	char dest_node[IPX_NODE_LEN];
 587	int send_to_wire = 1;
 588	int addr_len;
 589
 590	ipx->ipx_tctrl = IPX_SKB_CB(skb)->ipx_tctrl;
 591	ipx->ipx_dest.net = IPX_SKB_CB(skb)->ipx_dest_net;
 592	ipx->ipx_source.net = IPX_SKB_CB(skb)->ipx_source_net;
 593
 594	/* see if we need to include the netnum in the route list */
 595	if (IPX_SKB_CB(skb)->last_hop.index >= 0) {
 596		__be32 *last_hop = (__be32 *)(((u8 *) skb->data) +
 597				sizeof(struct ipxhdr) +
 598				IPX_SKB_CB(skb)->last_hop.index *
 599				sizeof(__be32));
 600		*last_hop = IPX_SKB_CB(skb)->last_hop.netnum;
 601		IPX_SKB_CB(skb)->last_hop.index = -1;
 602	}
 603
 604	/*
 605	 * We need to know how many skbuffs it will take to send out this
 606	 * packet to avoid unnecessary copies.
 607	 */
 608
 609	if (!dl || !dev || dev->flags & IFF_LOOPBACK)
 610		send_to_wire = 0;	/* No non looped */
 611
 612	/*
 613	 * See if this should be demuxed to sockets on this interface
 614	 *
 615	 * We want to ensure the original was eaten or that we only use
 616	 * up clones.
 617	 */
 618
 619	if (ipx->ipx_dest.net == intrfc->if_netnum) {
 620		/*
 621		 * To our own node, loop and free the original.
 622		 * The internal net will receive on all node address.
 623		 */
 624		if (intrfc == ipx_internal_net ||
 625		    !memcmp(intrfc->if_node, node, IPX_NODE_LEN)) {
 626			/* Don't charge sender */
 627			skb_orphan(skb);
 628
 629			/* Will charge receiver */
 630			return ipxitf_demux_socket(intrfc, skb, 0);
 631		}
 632
 633		/* Broadcast, loop and possibly keep to send on. */
 634		if (!memcmp(ipx_broadcast_node, node, IPX_NODE_LEN)) {
 635			if (!send_to_wire)
 636				skb_orphan(skb);
 637			ipxitf_demux_socket(intrfc, skb, send_to_wire);
 638			if (!send_to_wire)
 639				goto out;
 640		}
 641	}
 642
 643	/*
 644	 * If the originating net is not equal to our net; this is routed
 645	 * We are still charging the sender. Which is right - the driver
 646	 * free will handle this fairly.
 647	 */
 648	if (ipx->ipx_source.net != intrfc->if_netnum) {
 649		/*
 650		 * Unshare the buffer before modifying the count in
 651		 * case it's a flood or tcpdump
 652		 */
 653		skb = skb_unshare(skb, GFP_ATOMIC);
 654		if (!skb)
 655			goto out;
 656		if (++ipx->ipx_tctrl > ipxcfg_max_hops)
 657			send_to_wire = 0;
 658	}
 659
 660	if (!send_to_wire) {
 661		kfree_skb(skb);
 662		goto out;
 663	}
 664
 665	/* Determine the appropriate hardware address */
 666	addr_len = dev->addr_len;
 667	if (!memcmp(ipx_broadcast_node, node, IPX_NODE_LEN))
 668		memcpy(dest_node, dev->broadcast, addr_len);
 669	else
 670		memcpy(dest_node, &(node[IPX_NODE_LEN-addr_len]), addr_len);
 671
 672	/* Make any compensation for differing physical/data link size */
 673	skb = ipxitf_adjust_skbuff(intrfc, skb);
 674	if (!skb)
 675		goto out;
 676
 677	/* set up data link and physical headers */
 678	skb->dev	= dev;
 679	skb->protocol	= htons(ETH_P_IPX);
 680
 681	/* Send it out */
 682	dl->request(dl, skb, dest_node);
 683out:
 684	return 0;
 685}
 686
 687static int ipxitf_add_local_route(struct ipx_interface *intrfc)
 688{
 689	return ipxrtr_add_route(intrfc->if_netnum, intrfc, NULL);
 690}
 691
 692static void ipxitf_discover_netnum(struct ipx_interface *intrfc,
 693				   struct sk_buff *skb);
 694static int ipxitf_pprop(struct ipx_interface *intrfc, struct sk_buff *skb);
 695
 696static int ipxitf_rcv(struct ipx_interface *intrfc, struct sk_buff *skb)
 697{
 698	struct ipxhdr *ipx = ipx_hdr(skb);
 699	int rc = 0;
 700
 701	ipxitf_hold(intrfc);
 702
 703	/* See if we should update our network number */
 704	if (!intrfc->if_netnum) /* net number of intrfc not known yet */
 705		ipxitf_discover_netnum(intrfc, skb);
 706
 707	IPX_SKB_CB(skb)->last_hop.index = -1;
 708	if (ipx->ipx_type == IPX_TYPE_PPROP) {
 709		rc = ipxitf_pprop(intrfc, skb);
 710		if (rc)
 711			goto out_free_skb;
 712	}
 713
 714	/* local processing follows */
 715	if (!IPX_SKB_CB(skb)->ipx_dest_net)
 716		IPX_SKB_CB(skb)->ipx_dest_net = intrfc->if_netnum;
 717	if (!IPX_SKB_CB(skb)->ipx_source_net)
 718		IPX_SKB_CB(skb)->ipx_source_net = intrfc->if_netnum;
 719
 720	/* it doesn't make sense to route a pprop packet, there's no meaning
 721	 * in the ipx_dest_net for such packets */
 722	if (ipx->ipx_type != IPX_TYPE_PPROP &&
 723	    intrfc->if_netnum != IPX_SKB_CB(skb)->ipx_dest_net) {
 724		/* We only route point-to-point packets. */
 725		if (skb->pkt_type == PACKET_HOST) {
 726			skb = skb_unshare(skb, GFP_ATOMIC);
 727			if (skb)
 728				rc = ipxrtr_route_skb(skb);
 729			goto out_intrfc;
 730		}
 731
 732		goto out_free_skb;
 733	}
 734
 735	/* see if we should keep it */
 736	if (!memcmp(ipx_broadcast_node, ipx->ipx_dest.node, IPX_NODE_LEN) ||
 737	    !memcmp(intrfc->if_node, ipx->ipx_dest.node, IPX_NODE_LEN)) {
 738		rc = ipxitf_demux_socket(intrfc, skb, 0);
 739		goto out_intrfc;
 740	}
 741
 742	/* we couldn't pawn it off so unload it */
 743out_free_skb:
 744	kfree_skb(skb);
 745out_intrfc:
 746	ipxitf_put(intrfc);
 747	return rc;
 748}
 749
 750static void ipxitf_discover_netnum(struct ipx_interface *intrfc,
 751				   struct sk_buff *skb)
 752{
 753	const struct ipx_cb *cb = IPX_SKB_CB(skb);
 754
 755	/* see if this is an intra packet: source_net == dest_net */
 756	if (cb->ipx_source_net == cb->ipx_dest_net && cb->ipx_source_net) {
 757		struct ipx_interface *i =
 758				ipxitf_find_using_net(cb->ipx_source_net);
 759		/* NB: NetWare servers lie about their hop count so we
 760		 * dropped the test based on it. This is the best way
 761		 * to determine this is a 0 hop count packet. */
 762		if (!i) {
 763			intrfc->if_netnum = cb->ipx_source_net;
 764			ipxitf_add_local_route(intrfc);
 765		} else {
 766			printk(KERN_WARNING "IPX: Network number collision "
 767				"%lx\n        %s %s and %s %s\n",
 768				(unsigned long) ntohl(cb->ipx_source_net),
 769				ipx_device_name(i),
 770				ipx_frame_name(i->if_dlink_type),
 771				ipx_device_name(intrfc),
 772				ipx_frame_name(intrfc->if_dlink_type));
 773			ipxitf_put(i);
 774		}
 775	}
 776}
 777
 778/**
 779 * ipxitf_pprop - Process packet propagation IPX packet type 0x14, used for
 780 * 		  NetBIOS broadcasts
 781 * @intrfc: IPX interface receiving this packet
 782 * @skb: Received packet
 783 *
 784 * Checks if packet is valid: if its more than %IPX_MAX_PPROP_HOPS hops or if it
 785 * is smaller than a IPX header + the room for %IPX_MAX_PPROP_HOPS hops we drop
 786 * it, not even processing it locally, if it has exact %IPX_MAX_PPROP_HOPS we
 787 * don't broadcast it, but process it locally. See chapter 5 of Novell's "IPX
 788 * RIP and SAP Router Specification", Part Number 107-000029-001.
 789 *
 790 * If it is valid, check if we have pprop broadcasting enabled by the user,
 791 * if not, just return zero for local processing.
 792 *
 793 * If it is enabled check the packet and don't broadcast it if we have already
 794 * seen this packet.
 795 *
 796 * Broadcast: send it to the interfaces that aren't on the packet visited nets
 797 * array, just after the IPX header.
 798 *
 799 * Returns -EINVAL for invalid packets, so that the calling function drops
 800 * the packet without local processing. 0 if packet is to be locally processed.
 801 */
 802static int ipxitf_pprop(struct ipx_interface *intrfc, struct sk_buff *skb)
 803{
 804	struct ipxhdr *ipx = ipx_hdr(skb);
 805	int i, rc = -EINVAL;
 806	struct ipx_interface *ifcs;
 807	char *c;
 808	__be32 *l;
 809
 810	/* Illegal packet - too many hops or too short */
 811	/* We decide to throw it away: no broadcasting, no local processing.
 812	 * NetBIOS unaware implementations route them as normal packets -
 813	 * tctrl <= 15, any data payload... */
 814	if (IPX_SKB_CB(skb)->ipx_tctrl > IPX_MAX_PPROP_HOPS ||
 815	    ntohs(ipx->ipx_pktsize) < sizeof(struct ipxhdr) +
 816					IPX_MAX_PPROP_HOPS * sizeof(u32))
 817		goto out;
 818	/* are we broadcasting this damn thing? */
 819	rc = 0;
 820	if (!sysctl_ipx_pprop_broadcasting)
 821		goto out;
 822	/* We do broadcast packet on the IPX_MAX_PPROP_HOPS hop, but we
 823	 * process it locally. All previous hops broadcasted it, and process it
 824	 * locally. */
 825	if (IPX_SKB_CB(skb)->ipx_tctrl == IPX_MAX_PPROP_HOPS)
 826		goto out;
 827
 828	c = ((u8 *) ipx) + sizeof(struct ipxhdr);
 829	l = (__be32 *) c;
 830
 831	/* Don't broadcast packet if already seen this net */
 832	for (i = 0; i < IPX_SKB_CB(skb)->ipx_tctrl; i++)
 833		if (*l++ == intrfc->if_netnum)
 834			goto out;
 835
 836	/* < IPX_MAX_PPROP_HOPS hops && input interface not in list. Save the
 837	 * position where we will insert recvd netnum into list, later on,
 838	 * in ipxitf_send */
 839	IPX_SKB_CB(skb)->last_hop.index = i;
 840	IPX_SKB_CB(skb)->last_hop.netnum = intrfc->if_netnum;
 841	/* xmit on all other interfaces... */
 842	spin_lock_bh(&ipx_interfaces_lock);
 843	list_for_each_entry(ifcs, &ipx_interfaces, node) {
 844		/* Except unconfigured interfaces */
 845		if (!ifcs->if_netnum)
 846			continue;
 847
 848		/* That aren't in the list */
 849		if (ifcs == intrfc)
 850			continue;
 851		l = (__be32 *) c;
 852		/* don't consider the last entry in the packet list,
 853		 * it is our netnum, and it is not there yet */
 854		for (i = 0; i < IPX_SKB_CB(skb)->ipx_tctrl; i++)
 855			if (ifcs->if_netnum == *l++)
 856				break;
 857		if (i == IPX_SKB_CB(skb)->ipx_tctrl) {
 858			struct sk_buff *s = skb_copy(skb, GFP_ATOMIC);
 859
 860			if (s) {
 861				IPX_SKB_CB(s)->ipx_dest_net = ifcs->if_netnum;
 862				ipxrtr_route_skb(s);
 863			}
 864		}
 865	}
 866	spin_unlock_bh(&ipx_interfaces_lock);
 867out:
 868	return rc;
 869}
 870
 871static void ipxitf_insert(struct ipx_interface *intrfc)
 872{
 873	spin_lock_bh(&ipx_interfaces_lock);
 874	list_add_tail(&intrfc->node, &ipx_interfaces);
 875	spin_unlock_bh(&ipx_interfaces_lock);
 876
 877	if (ipxcfg_auto_select_primary && !ipx_primary_net)
 878		ipx_primary_net = intrfc;
 879}
 880
 881static struct ipx_interface *ipxitf_alloc(struct net_device *dev, __be32 netnum,
 882					  __be16 dlink_type,
 883					  struct datalink_proto *dlink,
 884					  unsigned char internal,
 885					  int ipx_offset)
 886{
 887	struct ipx_interface *intrfc = kmalloc(sizeof(*intrfc), GFP_ATOMIC);
 888
 889	if (intrfc) {
 890		intrfc->if_dev		= dev;
 891		intrfc->if_netnum	= netnum;
 892		intrfc->if_dlink_type 	= dlink_type;
 893		intrfc->if_dlink 	= dlink;
 894		intrfc->if_internal 	= internal;
 895		intrfc->if_ipx_offset 	= ipx_offset;
 896		intrfc->if_sknum 	= IPX_MIN_EPHEMERAL_SOCKET;
 897		INIT_HLIST_HEAD(&intrfc->if_sklist);
 898		atomic_set(&intrfc->refcnt, 1);
 899		spin_lock_init(&intrfc->if_sklist_lock);
 900	}
 901
 902	return intrfc;
 903}
 904
 905static int ipxitf_create_internal(struct ipx_interface_definition *idef)
 906{
 907	struct ipx_interface *intrfc;
 908	int rc = -EEXIST;
 909
 910	/* Only one primary network allowed */
 911	if (ipx_primary_net)
 912		goto out;
 913
 914	/* Must have a valid network number */
 915	rc = -EADDRNOTAVAIL;
 916	if (!idef->ipx_network)
 917		goto out;
 918	intrfc = ipxitf_find_using_net(idef->ipx_network);
 919	rc = -EADDRINUSE;
 920	if (intrfc) {
 921		ipxitf_put(intrfc);
 922		goto out;
 923	}
 924	intrfc = ipxitf_alloc(NULL, idef->ipx_network, 0, NULL, 1, 0);
 925	rc = -EAGAIN;
 926	if (!intrfc)
 927		goto out;
 928	memcpy((char *)&(intrfc->if_node), idef->ipx_node, IPX_NODE_LEN);
 929	ipx_internal_net = ipx_primary_net = intrfc;
 930	ipxitf_hold(intrfc);
 931	ipxitf_insert(intrfc);
 932
 933	rc = ipxitf_add_local_route(intrfc);
 934	ipxitf_put(intrfc);
 935out:
 936	return rc;
 937}
 938
 939static __be16 ipx_map_frame_type(unsigned char type)
 940{
 941	__be16 rc = 0;
 942
 943	switch (type) {
 944	case IPX_FRAME_ETHERII:	rc = htons(ETH_P_IPX);		break;
 945	case IPX_FRAME_8022:	rc = htons(ETH_P_802_2);	break;
 946	case IPX_FRAME_SNAP:	rc = htons(ETH_P_SNAP);		break;
 947	case IPX_FRAME_8023:	rc = htons(ETH_P_802_3);	break;
 948	}
 949
 950	return rc;
 951}
 952
 953static int ipxitf_create(struct ipx_interface_definition *idef)
 954{
 955	struct net_device *dev;
 956	__be16 dlink_type = 0;
 957	struct datalink_proto *datalink = NULL;
 958	struct ipx_interface *intrfc;
 959	int rc;
 960
 961	if (idef->ipx_special == IPX_INTERNAL) {
 962		rc = ipxitf_create_internal(idef);
 963		goto out;
 964	}
 965
 966	rc = -EEXIST;
 967	if (idef->ipx_special == IPX_PRIMARY && ipx_primary_net)
 968		goto out;
 969
 970	intrfc = ipxitf_find_using_net(idef->ipx_network);
 971	rc = -EADDRINUSE;
 972	if (idef->ipx_network && intrfc) {
 973		ipxitf_put(intrfc);
 974		goto out;
 975	}
 976
 977	if (intrfc)
 978		ipxitf_put(intrfc);
 979
 980	dev = dev_get_by_name(&init_net, idef->ipx_device);
 981	rc = -ENODEV;
 982	if (!dev)
 983		goto out;
 984
 985	switch (idef->ipx_dlink_type) {
 986	case IPX_FRAME_TR_8022:
 987		printk(KERN_WARNING "IPX frame type 802.2TR is "
 988			"obsolete Use 802.2 instead.\n");
 989		/* fall through */
 990	case IPX_FRAME_8022:
 991		dlink_type 	= htons(ETH_P_802_2);
 992		datalink 	= p8022_datalink;
 993		break;
 994	case IPX_FRAME_ETHERII:
 995		if (dev->type != ARPHRD_IEEE802) {
 996			dlink_type 	= htons(ETH_P_IPX);
 997			datalink 	= pEII_datalink;
 998			break;
 999		} else
1000			printk(KERN_WARNING "IPX frame type EtherII over "
1001					"token-ring is obsolete. Use SNAP "
1002					"instead.\n");
1003		/* fall through */
1004	case IPX_FRAME_SNAP:
1005		dlink_type 	= htons(ETH_P_SNAP);
1006		datalink 	= pSNAP_datalink;
1007		break;
1008	case IPX_FRAME_8023:
1009		dlink_type 	= htons(ETH_P_802_3);
1010		datalink 	= p8023_datalink;
1011		break;
1012	case IPX_FRAME_NONE:
1013	default:
1014		rc = -EPROTONOSUPPORT;
1015		goto out_dev;
1016	}
1017
1018	rc = -ENETDOWN;
1019	if (!(dev->flags & IFF_UP))
1020		goto out_dev;
1021
1022	/* Check addresses are suitable */
1023	rc = -EINVAL;
1024	if (dev->addr_len > IPX_NODE_LEN)
1025		goto out_dev;
1026
1027	intrfc = ipxitf_find_using_phys(dev, dlink_type);
1028	if (!intrfc) {
1029		/* Ok now create */
1030		intrfc = ipxitf_alloc(dev, idef->ipx_network, dlink_type,
1031				      datalink, 0, dev->hard_header_len +
1032					datalink->header_length);
1033		rc = -EAGAIN;
1034		if (!intrfc)
1035			goto out_dev;
1036		/* Setup primary if necessary */
1037		if (idef->ipx_special == IPX_PRIMARY)
1038			ipx_primary_net = intrfc;
1039		if (!memcmp(idef->ipx_node, "\000\000\000\000\000\000",
1040			    IPX_NODE_LEN)) {
1041			memset(intrfc->if_node, 0, IPX_NODE_LEN);
1042			memcpy(intrfc->if_node + IPX_NODE_LEN - dev->addr_len,
1043				dev->dev_addr, dev->addr_len);
1044		} else
1045			memcpy(intrfc->if_node, idef->ipx_node, IPX_NODE_LEN);
1046		ipxitf_hold(intrfc);
1047		ipxitf_insert(intrfc);
1048	}
1049
1050
1051	/* If the network number is known, add a route */
1052	rc = 0;
1053	if (!intrfc->if_netnum)
1054		goto out_intrfc;
1055
1056	rc = ipxitf_add_local_route(intrfc);
1057out_intrfc:
1058	ipxitf_put(intrfc);
1059	goto out;
1060out_dev:
1061	dev_put(dev);
1062out:
1063	return rc;
1064}
1065
1066static int ipxitf_delete(struct ipx_interface_definition *idef)
1067{
1068	struct net_device *dev = NULL;
1069	__be16 dlink_type = 0;
1070	struct ipx_interface *intrfc;
1071	int rc = 0;
1072
1073	spin_lock_bh(&ipx_interfaces_lock);
1074	if (idef->ipx_special == IPX_INTERNAL) {
1075		if (ipx_internal_net) {
1076			__ipxitf_put(ipx_internal_net);
1077			goto out;
1078		}
1079		rc = -ENOENT;
1080		goto out;
1081	}
1082
1083	dlink_type = ipx_map_frame_type(idef->ipx_dlink_type);
1084	rc = -EPROTONOSUPPORT;
1085	if (!dlink_type)
1086		goto out;
1087
1088	dev = __dev_get_by_name(&init_net, idef->ipx_device);
1089	rc = -ENODEV;
1090	if (!dev)
1091		goto out;
1092
1093	intrfc = __ipxitf_find_using_phys(dev, dlink_type);
1094	rc = -EINVAL;
1095	if (!intrfc)
1096		goto out;
1097	__ipxitf_put(intrfc);
1098
1099	rc = 0;
1100out:
1101	spin_unlock_bh(&ipx_interfaces_lock);
1102	return rc;
1103}
1104
1105static struct ipx_interface *ipxitf_auto_create(struct net_device *dev,
1106						__be16 dlink_type)
1107{
1108	struct ipx_interface *intrfc = NULL;
1109	struct datalink_proto *datalink;
1110
1111	if (!dev)
1112		goto out;
1113
1114	/* Check addresses are suitable */
1115	if (dev->addr_len > IPX_NODE_LEN)
1116		goto out;
1117
1118	switch (ntohs(dlink_type)) {
1119	case ETH_P_IPX:		datalink = pEII_datalink;	break;
1120	case ETH_P_802_2:	datalink = p8022_datalink;	break;
1121	case ETH_P_SNAP:	datalink = pSNAP_datalink;	break;
1122	case ETH_P_802_3:	datalink = p8023_datalink;	break;
1123	default:		goto out;
1124	}
1125
1126	intrfc = ipxitf_alloc(dev, 0, dlink_type, datalink, 0,
1127				dev->hard_header_len + datalink->header_length);
1128
1129	if (intrfc) {
1130		memset(intrfc->if_node, 0, IPX_NODE_LEN);
1131		memcpy((char *)&(intrfc->if_node[IPX_NODE_LEN-dev->addr_len]),
1132			dev->dev_addr, dev->addr_len);
1133		spin_lock_init(&intrfc->if_sklist_lock);
1134		atomic_set(&intrfc->refcnt, 1);
1135		ipxitf_insert(intrfc);
1136		dev_hold(dev);
1137	}
1138
1139out:
1140	return intrfc;
1141}
1142
1143static int ipxitf_ioctl(unsigned int cmd, void __user *arg)
1144{
1145	int rc = -EINVAL;
1146	struct ifreq ifr;
1147	int val;
1148
1149	switch (cmd) {
1150	case SIOCSIFADDR: {
1151		struct sockaddr_ipx *sipx;
1152		struct ipx_interface_definition f;
1153
1154		rc = -EFAULT;
1155		if (copy_from_user(&ifr, arg, sizeof(ifr)))
1156			break;
1157		sipx = (struct sockaddr_ipx *)&ifr.ifr_addr;
1158		rc = -EINVAL;
1159		if (sipx->sipx_family != AF_IPX)
1160			break;
1161		f.ipx_network = sipx->sipx_network;
1162		memcpy(f.ipx_device, ifr.ifr_name,
1163			sizeof(f.ipx_device));
1164		memcpy(f.ipx_node, sipx->sipx_node, IPX_NODE_LEN);
1165		f.ipx_dlink_type = sipx->sipx_type;
1166		f.ipx_special = sipx->sipx_special;
1167
1168		if (sipx->sipx_action == IPX_DLTITF)
1169			rc = ipxitf_delete(&f);
1170		else
1171			rc = ipxitf_create(&f);
1172		break;
1173	}
1174	case SIOCGIFADDR: {
1175		struct sockaddr_ipx *sipx;
1176		struct ipx_interface *ipxif;
1177		struct net_device *dev;
1178
1179		rc = -EFAULT;
1180		if (copy_from_user(&ifr, arg, sizeof(ifr)))
1181			break;
1182		sipx = (struct sockaddr_ipx *)&ifr.ifr_addr;
1183		dev  = __dev_get_by_name(&init_net, ifr.ifr_name);
1184		rc   = -ENODEV;
1185		if (!dev)
1186			break;
1187		ipxif = ipxitf_find_using_phys(dev,
1188					   ipx_map_frame_type(sipx->sipx_type));
1189		rc = -EADDRNOTAVAIL;
1190		if (!ipxif)
1191			break;
1192
1193		sipx->sipx_family	= AF_IPX;
1194		sipx->sipx_network	= ipxif->if_netnum;
1195		memcpy(sipx->sipx_node, ipxif->if_node,
1196			sizeof(sipx->sipx_node));
1197		rc = -EFAULT;
1198		if (copy_to_user(arg, &ifr, sizeof(ifr)))
1199			break;
1200		ipxitf_put(ipxif);
1201		rc = 0;
1202		break;
1203	}
1204	case SIOCAIPXITFCRT:
1205		rc = -EFAULT;
1206		if (get_user(val, (unsigned char __user *) arg))
1207			break;
1208		rc = 0;
1209		ipxcfg_auto_create_interfaces = val;
1210		break;
1211	case SIOCAIPXPRISLT:
1212		rc = -EFAULT;
1213		if (get_user(val, (unsigned char __user *) arg))
1214			break;
1215		rc = 0;
1216		ipxcfg_set_auto_select(val);
1217		break;
1218	}
1219
1220	return rc;
1221}
1222
1223/*
1224 *	Checksum routine for IPX
1225 */
1226
1227/* Note: We assume ipx_tctrl==0 and htons(length)==ipx_pktsize */
1228/* This functions should *not* mess with packet contents */
1229
1230__be16 ipx_cksum(struct ipxhdr *packet, int length)
1231{
1232	/*
1233	 *	NOTE: sum is a net byte order quantity, which optimizes the
1234	 *	loop. This only works on big and little endian machines. (I
1235	 *	don't know of a machine that isn't.)
1236	 */
1237	/* handle the first 3 words separately; checksum should be skipped
1238	 * and ipx_tctrl masked out */
1239	__u16 *p = (__u16 *)packet;
1240	__u32 sum = p[1] + (p[2] & (__force u16)htons(0x00ff));
1241	__u32 i = (length >> 1) - 3; /* Number of remaining complete words */
1242
1243	/* Loop through them */
1244	p += 3;
1245	while (i--)
1246		sum += *p++;
1247
1248	/* Add on the last part word if it exists */
1249	if (packet->ipx_pktsize & htons(1))
1250		sum += (__force u16)htons(0xff00) & *p;
1251
1252	/* Do final fixup */
1253	sum = (sum & 0xffff) + (sum >> 16);
1254
1255	/* It's a pity there's no concept of carry in C */
1256	if (sum >= 0x10000)
1257		sum++;
1258
1259	/*
1260	 * Leave 0 alone; we don't want 0xffff here.  Note that we can't get
1261	 * here with 0x10000, so this check is the same as ((__u16)sum)
1262	 */
1263	if (sum)
1264		sum = ~sum;
1265
1266	return (__force __be16)sum;
1267}
1268
1269const char *ipx_frame_name(__be16 frame)
1270{
1271	char* rc = "None";
1272
1273	switch (ntohs(frame)) {
1274	case ETH_P_IPX:		rc = "EtherII";	break;
1275	case ETH_P_802_2:	rc = "802.2";	break;
1276	case ETH_P_SNAP:	rc = "SNAP";	break;
1277	case ETH_P_802_3:	rc = "802.3";	break;
1278	case ETH_P_TR_802_2:	rc = "802.2TR";	break;
1279	}
1280
1281	return rc;
1282}
1283
1284const char *ipx_device_name(struct ipx_interface *intrfc)
1285{
1286	return intrfc->if_internal ? "Internal" :
1287		intrfc->if_dev ? intrfc->if_dev->name : "Unknown";
1288}
1289
1290/* Handling for system calls applied via the various interfaces to an IPX
1291 * socket object. */
1292
1293static int ipx_setsockopt(struct socket *sock, int level, int optname,
1294			  char __user *optval, unsigned int optlen)
1295{
1296	struct sock *sk = sock->sk;
1297	int opt;
1298	int rc = -EINVAL;
1299
1300	lock_sock(sk);
1301	if (optlen != sizeof(int))
1302		goto out;
1303
1304	rc = -EFAULT;
1305	if (get_user(opt, (unsigned int __user *)optval))
1306		goto out;
1307
1308	rc = -ENOPROTOOPT;
1309	if (!(level == SOL_IPX && optname == IPX_TYPE))
1310		goto out;
1311
1312	ipx_sk(sk)->type = opt;
1313	rc = 0;
1314out:
1315	release_sock(sk);
1316	return rc;
1317}
1318
1319static int ipx_getsockopt(struct socket *sock, int level, int optname,
1320	char __user *optval, int __user *optlen)
1321{
1322	struct sock *sk = sock->sk;
1323	int val = 0;
1324	int len;
1325	int rc = -ENOPROTOOPT;
1326
1327	lock_sock(sk);
1328	if (!(level == SOL_IPX && optname == IPX_TYPE))
1329		goto out;
1330
1331	val = ipx_sk(sk)->type;
1332
1333	rc = -EFAULT;
1334	if (get_user(len, optlen))
1335		goto out;
1336
1337	len = min_t(unsigned int, len, sizeof(int));
1338	rc = -EINVAL;
1339	if(len < 0)
1340		goto out;
1341
1342	rc = -EFAULT;
1343	if (put_user(len, optlen) || copy_to_user(optval, &val, len))
1344		goto out;
1345
1346	rc = 0;
1347out:
1348	release_sock(sk);
1349	return rc;
1350}
1351
1352static struct proto ipx_proto = {
1353	.name	  = "IPX",
1354	.owner	  = THIS_MODULE,
1355	.obj_size = sizeof(struct ipx_sock),
1356};
1357
1358static int ipx_create(struct net *net, struct socket *sock, int protocol,
1359		      int kern)
1360{
1361	int rc = -ESOCKTNOSUPPORT;
1362	struct sock *sk;
1363
1364	if (!net_eq(net, &init_net))
1365		return -EAFNOSUPPORT;
1366
1367	/*
1368	 * SPX support is not anymore in the kernel sources. If you want to
1369	 * ressurrect it, completing it and making it understand shared skbs,
1370	 * be fully multithreaded, etc, grab the sources in an early 2.5 kernel
1371	 * tree.
1372	 */
1373	if (sock->type != SOCK_DGRAM)
1374		goto out;
1375
1376	rc = -ENOMEM;
1377	sk = sk_alloc(net, PF_IPX, GFP_KERNEL, &ipx_proto);
1378	if (!sk)
1379		goto out;
1380
1381	sk_refcnt_debug_inc(sk);
1382	sock_init_data(sock, sk);
1383	sk->sk_no_check = 1;		/* Checksum off by default */
1384	sock->ops = &ipx_dgram_ops;
1385	rc = 0;
1386out:
1387	return rc;
1388}
1389
1390static int ipx_release(struct socket *sock)
1391{
1392	struct sock *sk = sock->sk;
1393
1394	if (!sk)
1395		goto out;
1396
1397	lock_sock(sk);
 
1398	if (!sock_flag(sk, SOCK_DEAD))
1399		sk->sk_state_change(sk);
1400
1401	sock_set_flag(sk, SOCK_DEAD);
1402	sock->sk = NULL;
1403	sk_refcnt_debug_release(sk);
1404	ipx_destroy_socket(sk);
1405	release_sock(sk);
1406	sock_put(sk);
1407out:
1408	return 0;
1409}
1410
1411/* caller must hold a reference to intrfc */
1412
1413static __be16 ipx_first_free_socketnum(struct ipx_interface *intrfc)
1414{
1415	unsigned short socketNum = intrfc->if_sknum;
1416
1417	spin_lock_bh(&intrfc->if_sklist_lock);
1418
1419	if (socketNum < IPX_MIN_EPHEMERAL_SOCKET)
1420		socketNum = IPX_MIN_EPHEMERAL_SOCKET;
1421
1422	while (__ipxitf_find_socket(intrfc, htons(socketNum)))
1423		if (socketNum > IPX_MAX_EPHEMERAL_SOCKET)
1424			socketNum = IPX_MIN_EPHEMERAL_SOCKET;
1425		else
1426			socketNum++;
1427
1428	spin_unlock_bh(&intrfc->if_sklist_lock);
1429	intrfc->if_sknum = socketNum;
1430
1431	return htons(socketNum);
1432}
1433
1434static int __ipx_bind(struct socket *sock,
1435			struct sockaddr *uaddr, int addr_len)
1436{
1437	struct sock *sk = sock->sk;
1438	struct ipx_sock *ipxs = ipx_sk(sk);
1439	struct ipx_interface *intrfc;
1440	struct sockaddr_ipx *addr = (struct sockaddr_ipx *)uaddr;
1441	int rc = -EINVAL;
1442
1443	if (!sock_flag(sk, SOCK_ZAPPED) || addr_len != sizeof(struct sockaddr_ipx))
1444		goto out;
1445
1446	intrfc = ipxitf_find_using_net(addr->sipx_network);
1447	rc = -EADDRNOTAVAIL;
1448	if (!intrfc)
1449		goto out;
1450
1451	if (!addr->sipx_port) {
1452		addr->sipx_port = ipx_first_free_socketnum(intrfc);
1453		rc = -EINVAL;
1454		if (!addr->sipx_port)
1455			goto out_put;
1456	}
1457
1458	/* protect IPX system stuff like routing/sap */
1459	rc = -EACCES;
1460	if (ntohs(addr->sipx_port) < IPX_MIN_EPHEMERAL_SOCKET &&
1461	    !capable(CAP_NET_ADMIN))
1462		goto out_put;
1463
1464	ipxs->port = addr->sipx_port;
1465
1466#ifdef CONFIG_IPX_INTERN
1467	if (intrfc == ipx_internal_net) {
1468		/* The source address is to be set explicitly if the
1469		 * socket is to be bound on the internal network. If a
1470		 * node number 0 was specified, the default is used.
1471		 */
1472
1473		rc = -EINVAL;
1474		if (!memcmp(addr->sipx_node, ipx_broadcast_node, IPX_NODE_LEN))
1475			goto out_put;
1476		if (!memcmp(addr->sipx_node, ipx_this_node, IPX_NODE_LEN))
1477			memcpy(ipxs->node, intrfc->if_node, IPX_NODE_LEN);
1478		else
1479			memcpy(ipxs->node, addr->sipx_node, IPX_NODE_LEN);
1480
1481		rc = -EADDRINUSE;
1482		if (ipxitf_find_internal_socket(intrfc, ipxs->node,
1483						ipxs->port)) {
1484			SOCK_DEBUG(sk,
1485				"IPX: bind failed because port %X in use.\n",
1486				ntohs(addr->sipx_port));
1487			goto out_put;
1488		}
1489	} else {
1490		/* Source addresses are easy. It must be our
1491		 * network:node pair for an interface routed to IPX
1492		 * with the ipx routing ioctl()
1493		 */
1494
1495		memcpy(ipxs->node, intrfc->if_node, IPX_NODE_LEN);
1496
1497		rc = -EADDRINUSE;
1498		if (ipxitf_find_socket(intrfc, addr->sipx_port)) {
1499			SOCK_DEBUG(sk,
1500				"IPX: bind failed because port %X in use.\n",
1501				ntohs(addr->sipx_port));
1502			goto out_put;
1503		}
1504	}
1505
1506#else	/* !def CONFIG_IPX_INTERN */
1507
1508	/* Source addresses are easy. It must be our network:node pair for
1509	   an interface routed to IPX with the ipx routing ioctl() */
1510
1511	rc = -EADDRINUSE;
1512	if (ipxitf_find_socket(intrfc, addr->sipx_port)) {
1513		SOCK_DEBUG(sk, "IPX: bind failed because port %X in use.\n",
1514				ntohs((int)addr->sipx_port));
1515		goto out_put;
1516	}
1517
1518#endif	/* CONFIG_IPX_INTERN */
1519
1520	ipxitf_insert_socket(intrfc, sk);
1521	sock_reset_flag(sk, SOCK_ZAPPED);
1522
1523	rc = 0;
1524out_put:
1525	ipxitf_put(intrfc);
1526out:
1527	return rc;
1528}
1529
1530static int ipx_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
1531{
1532	struct sock *sk = sock->sk;
1533	int rc;
1534
1535	lock_sock(sk);
1536	rc = __ipx_bind(sock, uaddr, addr_len);
1537	release_sock(sk);
1538
1539	return rc;
1540}
1541
1542static int ipx_connect(struct socket *sock, struct sockaddr *uaddr,
1543	int addr_len, int flags)
1544{
1545	struct sock *sk = sock->sk;
1546	struct ipx_sock *ipxs = ipx_sk(sk);
1547	struct sockaddr_ipx *addr;
1548	int rc = -EINVAL;
1549	struct ipx_route *rt;
1550
1551	sk->sk_state	= TCP_CLOSE;
1552	sock->state 	= SS_UNCONNECTED;
1553
1554	lock_sock(sk);
1555	if (addr_len != sizeof(*addr))
1556		goto out;
1557	addr = (struct sockaddr_ipx *)uaddr;
1558
1559	/* put the autobinding in */
1560	if (!ipxs->port) {
1561		struct sockaddr_ipx uaddr;
1562
1563		uaddr.sipx_port		= 0;
1564		uaddr.sipx_network 	= 0;
1565
1566#ifdef CONFIG_IPX_INTERN
1567		rc = -ENETDOWN;
1568		if (!ipxs->intrfc)
1569			goto out; /* Someone zonked the iface */
1570		memcpy(uaddr.sipx_node, ipxs->intrfc->if_node,
1571			IPX_NODE_LEN);
1572#endif	/* CONFIG_IPX_INTERN */
1573
1574		rc = __ipx_bind(sock, (struct sockaddr *)&uaddr,
1575			      sizeof(struct sockaddr_ipx));
1576		if (rc)
1577			goto out;
1578	}
1579
1580	/* We can either connect to primary network or somewhere
1581	 * we can route to */
1582	rt = ipxrtr_lookup(addr->sipx_network);
1583	rc = -ENETUNREACH;
1584	if (!rt && !(!addr->sipx_network && ipx_primary_net))
1585		goto out;
1586
1587	ipxs->dest_addr.net  = addr->sipx_network;
1588	ipxs->dest_addr.sock = addr->sipx_port;
1589	memcpy(ipxs->dest_addr.node, addr->sipx_node, IPX_NODE_LEN);
1590	ipxs->type = addr->sipx_type;
1591
1592	if (sock->type == SOCK_DGRAM) {
1593		sock->state 	= SS_CONNECTED;
1594		sk->sk_state 	= TCP_ESTABLISHED;
1595	}
1596
1597	if (rt)
1598		ipxrtr_put(rt);
1599	rc = 0;
1600out:
1601	release_sock(sk);
1602	return rc;
1603}
1604
1605
1606static int ipx_getname(struct socket *sock, struct sockaddr *uaddr,
1607			int *uaddr_len, int peer)
1608{
1609	struct ipx_address *addr;
1610	struct sockaddr_ipx sipx;
1611	struct sock *sk = sock->sk;
1612	struct ipx_sock *ipxs = ipx_sk(sk);
1613	int rc;
1614
1615	*uaddr_len = sizeof(struct sockaddr_ipx);
1616
1617	lock_sock(sk);
1618	if (peer) {
1619		rc = -ENOTCONN;
1620		if (sk->sk_state != TCP_ESTABLISHED)
1621			goto out;
1622
1623		addr = &ipxs->dest_addr;
1624		sipx.sipx_network	= addr->net;
1625		sipx.sipx_port		= addr->sock;
1626		memcpy(sipx.sipx_node, addr->node, IPX_NODE_LEN);
1627	} else {
1628		if (ipxs->intrfc) {
1629			sipx.sipx_network = ipxs->intrfc->if_netnum;
1630#ifdef CONFIG_IPX_INTERN
1631			memcpy(sipx.sipx_node, ipxs->node, IPX_NODE_LEN);
1632#else
1633			memcpy(sipx.sipx_node, ipxs->intrfc->if_node,
1634				IPX_NODE_LEN);
1635#endif	/* CONFIG_IPX_INTERN */
1636
1637		} else {
1638			sipx.sipx_network = 0;
1639			memset(sipx.sipx_node, '\0', IPX_NODE_LEN);
1640		}
1641
1642		sipx.sipx_port = ipxs->port;
1643	}
1644
1645	sipx.sipx_family = AF_IPX;
1646	sipx.sipx_type	 = ipxs->type;
1647	sipx.sipx_zero	 = 0;
1648	memcpy(uaddr, &sipx, sizeof(sipx));
1649
1650	rc = 0;
1651out:
1652	release_sock(sk);
1653	return rc;
1654}
1655
1656static int ipx_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev)
1657{
1658	/* NULL here for pt means the packet was looped back */
1659	struct ipx_interface *intrfc;
1660	struct ipxhdr *ipx;
1661	u16 ipx_pktsize;
1662	int rc = 0;
1663
1664	if (!net_eq(dev_net(dev), &init_net))
1665		goto drop;
1666
1667	/* Not ours */
1668	if (skb->pkt_type == PACKET_OTHERHOST)
1669		goto drop;
1670
1671	if ((skb = skb_share_check(skb, GFP_ATOMIC)) == NULL)
1672		goto out;
1673
1674	if (!pskb_may_pull(skb, sizeof(struct ipxhdr)))
1675		goto drop;
1676
1677	ipx_pktsize = ntohs(ipx_hdr(skb)->ipx_pktsize);
1678
1679	/* Too small or invalid header? */
1680	if (ipx_pktsize < sizeof(struct ipxhdr) ||
1681	    !pskb_may_pull(skb, ipx_pktsize))
1682		goto drop;
1683
1684	ipx = ipx_hdr(skb);
1685	if (ipx->ipx_checksum != IPX_NO_CHECKSUM &&
1686	   ipx->ipx_checksum != ipx_cksum(ipx, ipx_pktsize))
1687		goto drop;
1688
1689	IPX_SKB_CB(skb)->ipx_tctrl	= ipx->ipx_tctrl;
1690	IPX_SKB_CB(skb)->ipx_dest_net	= ipx->ipx_dest.net;
1691	IPX_SKB_CB(skb)->ipx_source_net = ipx->ipx_source.net;
1692
1693	/* Determine what local ipx endpoint this is */
1694	intrfc = ipxitf_find_using_phys(dev, pt->type);
1695	if (!intrfc) {
1696		if (ipxcfg_auto_create_interfaces &&
1697		   IPX_SKB_CB(skb)->ipx_dest_net) {
1698			intrfc = ipxitf_auto_create(dev, pt->type);
1699			if (intrfc)
1700				ipxitf_hold(intrfc);
1701		}
1702
1703		if (!intrfc)	/* Not one of ours */
1704				/* or invalid packet for auto creation */
1705			goto drop;
1706	}
1707
1708	rc = ipxitf_rcv(intrfc, skb);
1709	ipxitf_put(intrfc);
1710	goto out;
1711drop:
1712	kfree_skb(skb);
1713out:
1714	return rc;
1715}
1716
1717static int ipx_sendmsg(struct kiocb *iocb, struct socket *sock,
1718	struct msghdr *msg, size_t len)
1719{
1720	struct sock *sk = sock->sk;
1721	struct ipx_sock *ipxs = ipx_sk(sk);
1722	struct sockaddr_ipx *usipx = (struct sockaddr_ipx *)msg->msg_name;
1723	struct sockaddr_ipx local_sipx;
1724	int rc = -EINVAL;
1725	int flags = msg->msg_flags;
1726
1727	lock_sock(sk);
1728	/* Socket gets bound below anyway */
1729/*	if (sk->sk_zapped)
1730		return -EIO; */	/* Socket not bound */
1731	if (flags & ~(MSG_DONTWAIT|MSG_CMSG_COMPAT))
1732		goto out;
1733
1734	/* Max possible packet size limited by 16 bit pktsize in header */
1735	if (len >= 65535 - sizeof(struct ipxhdr))
1736		goto out;
1737
1738	if (usipx) {
1739		if (!ipxs->port) {
1740			struct sockaddr_ipx uaddr;
1741
1742			uaddr.sipx_port		= 0;
1743			uaddr.sipx_network	= 0;
1744#ifdef CONFIG_IPX_INTERN
1745			rc = -ENETDOWN;
1746			if (!ipxs->intrfc)
1747				goto out; /* Someone zonked the iface */
1748			memcpy(uaddr.sipx_node, ipxs->intrfc->if_node,
1749				IPX_NODE_LEN);
1750#endif
1751			rc = __ipx_bind(sock, (struct sockaddr *)&uaddr,
1752					sizeof(struct sockaddr_ipx));
1753			if (rc)
1754				goto out;
1755		}
1756
1757		rc = -EINVAL;
1758		if (msg->msg_namelen < sizeof(*usipx) ||
1759		    usipx->sipx_family != AF_IPX)
1760			goto out;
1761	} else {
1762		rc = -ENOTCONN;
1763		if (sk->sk_state != TCP_ESTABLISHED)
1764			goto out;
1765
1766		usipx = &local_sipx;
1767		usipx->sipx_family 	= AF_IPX;
1768		usipx->sipx_type 	= ipxs->type;
1769		usipx->sipx_port 	= ipxs->dest_addr.sock;
1770		usipx->sipx_network 	= ipxs->dest_addr.net;
1771		memcpy(usipx->sipx_node, ipxs->dest_addr.node, IPX_NODE_LEN);
1772	}
1773
1774	rc = ipxrtr_route_packet(sk, usipx, msg->msg_iov, len,
1775				 flags & MSG_DONTWAIT);
1776	if (rc >= 0)
1777		rc = len;
1778out:
1779	release_sock(sk);
1780	return rc;
1781}
1782
1783
1784static int ipx_recvmsg(struct kiocb *iocb, struct socket *sock,
1785		struct msghdr *msg, size_t size, int flags)
1786{
1787	struct sock *sk = sock->sk;
1788	struct ipx_sock *ipxs = ipx_sk(sk);
1789	struct sockaddr_ipx *sipx = (struct sockaddr_ipx *)msg->msg_name;
1790	struct ipxhdr *ipx = NULL;
1791	struct sk_buff *skb;
1792	int copied, rc;
 
1793
1794	lock_sock(sk);
1795	/* put the autobinding in */
1796	if (!ipxs->port) {
1797		struct sockaddr_ipx uaddr;
1798
1799		uaddr.sipx_port		= 0;
1800		uaddr.sipx_network 	= 0;
1801
1802#ifdef CONFIG_IPX_INTERN
1803		rc = -ENETDOWN;
1804		if (!ipxs->intrfc)
1805			goto out; /* Someone zonked the iface */
1806		memcpy(uaddr.sipx_node, ipxs->intrfc->if_node, IPX_NODE_LEN);
1807#endif	/* CONFIG_IPX_INTERN */
1808
1809		rc = __ipx_bind(sock, (struct sockaddr *)&uaddr,
1810			      sizeof(struct sockaddr_ipx));
1811		if (rc)
1812			goto out;
1813	}
1814
1815	rc = -ENOTCONN;
1816	if (sock_flag(sk, SOCK_ZAPPED))
1817		goto out;
1818
 
 
1819	skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
1820				flags & MSG_DONTWAIT, &rc);
1821	if (!skb)
 
 
1822		goto out;
 
1823
1824	ipx 	= ipx_hdr(skb);
1825	copied 	= ntohs(ipx->ipx_pktsize) - sizeof(struct ipxhdr);
1826	if (copied > size) {
1827		copied = size;
1828		msg->msg_flags |= MSG_TRUNC;
1829	}
1830
1831	rc = skb_copy_datagram_iovec(skb, sizeof(struct ipxhdr), msg->msg_iov,
1832				     copied);
1833	if (rc)
1834		goto out_free;
1835	if (skb->tstamp.tv64)
1836		sk->sk_stamp = skb->tstamp;
1837
1838	msg->msg_namelen = sizeof(*sipx);
1839
1840	if (sipx) {
1841		sipx->sipx_family	= AF_IPX;
1842		sipx->sipx_port		= ipx->ipx_source.sock;
1843		memcpy(sipx->sipx_node, ipx->ipx_source.node, IPX_NODE_LEN);
1844		sipx->sipx_network	= IPX_SKB_CB(skb)->ipx_source_net;
1845		sipx->sipx_type 	= ipx->ipx_type;
1846		sipx->sipx_zero		= 0;
 
1847	}
1848	rc = copied;
1849
1850out_free:
1851	skb_free_datagram(sk, skb);
1852out:
1853	release_sock(sk);
 
1854	return rc;
1855}
1856
1857
1858static int ipx_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1859{
1860	int rc = 0;
1861	long amount = 0;
1862	struct sock *sk = sock->sk;
1863	void __user *argp = (void __user *)arg;
1864
1865	lock_sock(sk);
1866	switch (cmd) {
1867	case TIOCOUTQ:
1868		amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1869		if (amount < 0)
1870			amount = 0;
1871		rc = put_user(amount, (int __user *)argp);
1872		break;
1873	case TIOCINQ: {
1874		struct sk_buff *skb = skb_peek(&sk->sk_receive_queue);
1875		/* These two are safe on a single CPU system as only
1876		 * user tasks fiddle here */
1877		if (skb)
1878			amount = skb->len - sizeof(struct ipxhdr);
1879		rc = put_user(amount, (int __user *)argp);
1880		break;
1881	}
1882	case SIOCADDRT:
1883	case SIOCDELRT:
1884		rc = -EPERM;
1885		if (capable(CAP_NET_ADMIN))
1886			rc = ipxrtr_ioctl(cmd, argp);
1887		break;
1888	case SIOCSIFADDR:
1889	case SIOCAIPXITFCRT:
1890	case SIOCAIPXPRISLT:
1891		rc = -EPERM;
1892		if (!capable(CAP_NET_ADMIN))
1893			break;
1894	case SIOCGIFADDR:
1895		rc = ipxitf_ioctl(cmd, argp);
1896		break;
1897	case SIOCIPXCFGDATA:
1898		rc = ipxcfg_get_config_data(argp);
1899		break;
1900	case SIOCIPXNCPCONN:
1901		/*
1902		 * This socket wants to take care of the NCP connection
1903		 * handed to us in arg.
1904		 */
1905		rc = -EPERM;
1906		if (!capable(CAP_NET_ADMIN))
1907			break;
1908		rc = get_user(ipx_sk(sk)->ipx_ncp_conn,
1909			      (const unsigned short __user *)argp);
1910		break;
1911	case SIOCGSTAMP:
1912		rc = -EINVAL;
1913		if (sk)
1914			rc = sock_get_timestamp(sk, argp);
1915		break;
1916	case SIOCGIFDSTADDR:
1917	case SIOCSIFDSTADDR:
1918	case SIOCGIFBRDADDR:
1919	case SIOCSIFBRDADDR:
1920	case SIOCGIFNETMASK:
1921	case SIOCSIFNETMASK:
1922		rc = -EINVAL;
1923		break;
1924	default:
1925		rc = -ENOIOCTLCMD;
1926		break;
1927	}
1928	release_sock(sk);
1929
1930	return rc;
1931}
1932
1933
1934#ifdef CONFIG_COMPAT
1935static int ipx_compat_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1936{
1937	/*
1938	 * These 4 commands use same structure on 32bit and 64bit.  Rest of IPX
1939	 * commands is handled by generic ioctl code.  As these commands are
1940	 * SIOCPROTOPRIVATE..SIOCPROTOPRIVATE+3, they cannot be handled by generic
1941	 * code.
1942	 */
1943	switch (cmd) {
1944	case SIOCAIPXITFCRT:
1945	case SIOCAIPXPRISLT:
1946	case SIOCIPXCFGDATA:
1947	case SIOCIPXNCPCONN:
1948		return ipx_ioctl(sock, cmd, arg);
1949	default:
1950		return -ENOIOCTLCMD;
1951	}
1952}
1953#endif
1954
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1955
1956/*
1957 * Socket family declarations
1958 */
1959
1960static const struct net_proto_family ipx_family_ops = {
1961	.family		= PF_IPX,
1962	.create		= ipx_create,
1963	.owner		= THIS_MODULE,
1964};
1965
1966static const struct proto_ops ipx_dgram_ops = {
1967	.family		= PF_IPX,
1968	.owner		= THIS_MODULE,
1969	.release	= ipx_release,
1970	.bind		= ipx_bind,
1971	.connect	= ipx_connect,
1972	.socketpair	= sock_no_socketpair,
1973	.accept		= sock_no_accept,
1974	.getname	= ipx_getname,
1975	.poll		= datagram_poll,
1976	.ioctl		= ipx_ioctl,
1977#ifdef CONFIG_COMPAT
1978	.compat_ioctl	= ipx_compat_ioctl,
1979#endif
1980	.listen		= sock_no_listen,
1981	.shutdown	= sock_no_shutdown, /* FIXME: support shutdown */
1982	.setsockopt	= ipx_setsockopt,
1983	.getsockopt	= ipx_getsockopt,
1984	.sendmsg	= ipx_sendmsg,
1985	.recvmsg	= ipx_recvmsg,
1986	.mmap		= sock_no_mmap,
1987	.sendpage	= sock_no_sendpage,
1988};
1989
1990static struct packet_type ipx_8023_packet_type __read_mostly = {
1991	.type		= cpu_to_be16(ETH_P_802_3),
1992	.func		= ipx_rcv,
1993};
1994
1995static struct packet_type ipx_dix_packet_type __read_mostly = {
1996	.type		= cpu_to_be16(ETH_P_IPX),
1997	.func		= ipx_rcv,
1998};
1999
2000static struct notifier_block ipx_dev_notifier = {
2001	.notifier_call	= ipxitf_device_event,
2002};
2003
2004extern struct datalink_proto *make_EII_client(void);
2005extern void destroy_EII_client(struct datalink_proto *);
2006
2007static const unsigned char ipx_8022_type = 0xE0;
2008static const unsigned char ipx_snap_id[5] = { 0x0, 0x0, 0x0, 0x81, 0x37 };
2009static const char ipx_EII_err_msg[] __initconst =
2010	KERN_CRIT "IPX: Unable to register with Ethernet II\n";
2011static const char ipx_8023_err_msg[] __initconst =
2012	KERN_CRIT "IPX: Unable to register with 802.3\n";
2013static const char ipx_llc_err_msg[] __initconst =
2014	KERN_CRIT "IPX: Unable to register with 802.2\n";
2015static const char ipx_snap_err_msg[] __initconst =
2016	KERN_CRIT "IPX: Unable to register with SNAP\n";
2017
2018static int __init ipx_init(void)
2019{
2020	int rc = proto_register(&ipx_proto, 1);
2021
2022	if (rc != 0)
2023		goto out;
2024
2025	sock_register(&ipx_family_ops);
2026
2027	pEII_datalink = make_EII_client();
2028	if (pEII_datalink)
2029		dev_add_pack(&ipx_dix_packet_type);
2030	else
2031		printk(ipx_EII_err_msg);
2032
2033	p8023_datalink = make_8023_client();
2034	if (p8023_datalink)
2035		dev_add_pack(&ipx_8023_packet_type);
2036	else
2037		printk(ipx_8023_err_msg);
2038
2039	p8022_datalink = register_8022_client(ipx_8022_type, ipx_rcv);
2040	if (!p8022_datalink)
2041		printk(ipx_llc_err_msg);
2042
2043	pSNAP_datalink = register_snap_client(ipx_snap_id, ipx_rcv);
2044	if (!pSNAP_datalink)
2045		printk(ipx_snap_err_msg);
2046
2047	register_netdevice_notifier(&ipx_dev_notifier);
2048	ipx_register_sysctl();
2049	ipx_proc_init();
2050out:
2051	return rc;
2052}
2053
2054static void __exit ipx_proto_finito(void)
2055{
2056	ipx_proc_exit();
2057	ipx_unregister_sysctl();
2058
2059	unregister_netdevice_notifier(&ipx_dev_notifier);
2060
2061	ipxitf_cleanup();
2062
2063	if (pSNAP_datalink) {
2064		unregister_snap_client(pSNAP_datalink);
2065		pSNAP_datalink = NULL;
2066	}
2067
2068	if (p8022_datalink) {
2069		unregister_8022_client(p8022_datalink);
2070		p8022_datalink = NULL;
2071	}
2072
2073	dev_remove_pack(&ipx_8023_packet_type);
2074	if (p8023_datalink) {
2075		destroy_8023_client(p8023_datalink);
2076		p8023_datalink = NULL;
2077	}
2078
2079	dev_remove_pack(&ipx_dix_packet_type);
2080	if (pEII_datalink) {
2081		destroy_EII_client(pEII_datalink);
2082		pEII_datalink = NULL;
2083	}
2084
2085	proto_unregister(&ipx_proto);
2086	sock_unregister(ipx_family_ops.family);
2087}
2088
2089module_init(ipx_init);
2090module_exit(ipx_proto_finito);
2091MODULE_LICENSE("GPL");
2092MODULE_ALIAS_NETPROTO(PF_IPX);
v4.6
   1/*
   2 *	Implements an IPX socket layer.
   3 *
   4 *	This code is derived from work by
   5 *		Ross Biro	: 	Writing the original IP stack
   6 *		Fred Van Kempen :	Tidying up the TCP/IP
   7 *
   8 *	Many thanks go to Keith Baker, Institute For Industrial Information
   9 *	Technology Ltd, Swansea University for allowing me to work on this
  10 *	in my own time even though it was in some ways related to commercial
  11 *	work I am currently employed to do there.
  12 *
  13 *	All the material in this file is subject to the Gnu license version 2.
  14 *	Neither Alan Cox nor the Swansea University Computer Society admit
  15 *	liability nor provide warranty for any of this software. This material
  16 *	is provided as is and at no charge.
  17 *
  18 *	Portions Copyright (c) 2000-2003 Conectiva, Inc. <acme@conectiva.com.br>
  19 *	Neither Arnaldo Carvalho de Melo nor Conectiva, Inc. admit liability nor
  20 *	provide warranty for any of this software. This material is provided
  21 *	"AS-IS" and at no charge.
  22 *
  23 * 	Portions Copyright (c) 1995 Caldera, Inc. <greg@caldera.com>
  24 *	Neither Greg Page nor Caldera, Inc. admit liability nor provide
  25 *	warranty for any of this software. This material is provided
  26 *	"AS-IS" and at no charge.
  27 *
  28 *	See net/ipx/ChangeLog.
  29 */
  30
  31#include <linux/capability.h>
  32#include <linux/errno.h>
  33#include <linux/if_arp.h>
  34#include <linux/if_ether.h>
  35#include <linux/init.h>
  36#include <linux/ipx.h>
  37#include <linux/kernel.h>
  38#include <linux/list.h>
  39#include <linux/module.h>
  40#include <linux/net.h>
  41#include <linux/netdevice.h>
  42#include <linux/uio.h>
  43#include <linux/slab.h>
  44#include <linux/skbuff.h>
  45#include <linux/socket.h>
  46#include <linux/sockios.h>
  47#include <linux/string.h>
  48#include <linux/types.h>
  49#include <linux/termios.h>
  50
  51#include <net/ipx.h>
  52#include <net/p8022.h>
  53#include <net/psnap.h>
  54#include <net/sock.h>
  55#include <net/datalink.h>
  56#include <net/tcp_states.h>
  57#include <net/net_namespace.h>
  58
  59#include <asm/uaccess.h>
  60
 
 
 
 
 
 
 
 
  61/* Configuration Variables */
  62static unsigned char ipxcfg_max_hops = 16;
  63static char ipxcfg_auto_select_primary;
  64static char ipxcfg_auto_create_interfaces;
  65int sysctl_ipx_pprop_broadcasting = 1;
  66
  67/* Global Variables */
  68static struct datalink_proto *p8022_datalink;
  69static struct datalink_proto *pEII_datalink;
  70static struct datalink_proto *p8023_datalink;
  71static struct datalink_proto *pSNAP_datalink;
  72
  73static const struct proto_ops ipx_dgram_ops;
  74
  75LIST_HEAD(ipx_interfaces);
  76DEFINE_SPINLOCK(ipx_interfaces_lock);
  77
  78struct ipx_interface *ipx_primary_net;
  79struct ipx_interface *ipx_internal_net;
  80
 
 
 
 
 
 
 
 
 
  81struct ipx_interface *ipx_interfaces_head(void)
  82{
  83	struct ipx_interface *rc = NULL;
  84
  85	if (!list_empty(&ipx_interfaces))
  86		rc = list_entry(ipx_interfaces.next,
  87				struct ipx_interface, node);
  88	return rc;
  89}
  90
  91static void ipxcfg_set_auto_select(char val)
  92{
  93	ipxcfg_auto_select_primary = val;
  94	if (val && !ipx_primary_net)
  95		ipx_primary_net = ipx_interfaces_head();
  96}
  97
  98static int ipxcfg_get_config_data(struct ipx_config_data __user *arg)
  99{
 100	struct ipx_config_data vals;
 101
 102	vals.ipxcfg_auto_create_interfaces = ipxcfg_auto_create_interfaces;
 103	vals.ipxcfg_auto_select_primary	   = ipxcfg_auto_select_primary;
 104
 105	return copy_to_user(arg, &vals, sizeof(vals)) ? -EFAULT : 0;
 106}
 107
 108/*
 109 * Note: Sockets may not be removed _during_ an interrupt or inet_bh
 110 * handler using this technique. They can be added although we do not
 111 * use this facility.
 112 */
 113
 114static void ipx_remove_socket(struct sock *sk)
 115{
 116	/* Determine interface with which socket is associated */
 117	struct ipx_interface *intrfc = ipx_sk(sk)->intrfc;
 118
 119	if (!intrfc)
 120		goto out;
 121
 122	ipxitf_hold(intrfc);
 123	spin_lock_bh(&intrfc->if_sklist_lock);
 124	sk_del_node_init(sk);
 125	spin_unlock_bh(&intrfc->if_sklist_lock);
 126	ipxitf_put(intrfc);
 127out:
 128	return;
 129}
 130
 131static void ipx_destroy_socket(struct sock *sk)
 132{
 133	ipx_remove_socket(sk);
 134	skb_queue_purge(&sk->sk_receive_queue);
 135	sk_refcnt_debug_dec(sk);
 136}
 137
 138/*
 139 * The following code is used to support IPX Interfaces (IPXITF).  An
 140 * IPX interface is defined by a physical device and a frame type.
 141 */
 142
 143/* ipxitf_clear_primary_net has to be called with ipx_interfaces_lock held */
 144
 145static void ipxitf_clear_primary_net(void)
 146{
 147	ipx_primary_net = NULL;
 148	if (ipxcfg_auto_select_primary)
 149		ipx_primary_net = ipx_interfaces_head();
 150}
 151
 152static struct ipx_interface *__ipxitf_find_using_phys(struct net_device *dev,
 153						      __be16 datalink)
 154{
 155	struct ipx_interface *i;
 156
 157	list_for_each_entry(i, &ipx_interfaces, node)
 158		if (i->if_dev == dev && i->if_dlink_type == datalink)
 159			goto out;
 160	i = NULL;
 161out:
 162	return i;
 163}
 164
 165static struct ipx_interface *ipxitf_find_using_phys(struct net_device *dev,
 166						    __be16 datalink)
 167{
 168	struct ipx_interface *i;
 169
 170	spin_lock_bh(&ipx_interfaces_lock);
 171	i = __ipxitf_find_using_phys(dev, datalink);
 172	if (i)
 173		ipxitf_hold(i);
 174	spin_unlock_bh(&ipx_interfaces_lock);
 175	return i;
 176}
 177
 178struct ipx_interface *ipxitf_find_using_net(__be32 net)
 179{
 180	struct ipx_interface *i;
 181
 182	spin_lock_bh(&ipx_interfaces_lock);
 183	if (net) {
 184		list_for_each_entry(i, &ipx_interfaces, node)
 185			if (i->if_netnum == net)
 186				goto hold;
 187		i = NULL;
 188		goto unlock;
 189	}
 190
 191	i = ipx_primary_net;
 192	if (i)
 193hold:
 194		ipxitf_hold(i);
 195unlock:
 196	spin_unlock_bh(&ipx_interfaces_lock);
 197	return i;
 198}
 199
 200/* Sockets are bound to a particular IPX interface. */
 201static void ipxitf_insert_socket(struct ipx_interface *intrfc, struct sock *sk)
 202{
 203	ipxitf_hold(intrfc);
 204	spin_lock_bh(&intrfc->if_sklist_lock);
 205	ipx_sk(sk)->intrfc = intrfc;
 206	sk_add_node(sk, &intrfc->if_sklist);
 207	spin_unlock_bh(&intrfc->if_sklist_lock);
 208	ipxitf_put(intrfc);
 209}
 210
 211/* caller must hold intrfc->if_sklist_lock */
 212static struct sock *__ipxitf_find_socket(struct ipx_interface *intrfc,
 213					 __be16 port)
 214{
 215	struct sock *s;
 
 216
 217	sk_for_each(s, &intrfc->if_sklist)
 218		if (ipx_sk(s)->port == port)
 219			goto found;
 220	s = NULL;
 221found:
 222	return s;
 223}
 224
 225/* caller must hold a reference to intrfc */
 226static struct sock *ipxitf_find_socket(struct ipx_interface *intrfc,
 227					__be16 port)
 228{
 229	struct sock *s;
 230
 231	spin_lock_bh(&intrfc->if_sklist_lock);
 232	s = __ipxitf_find_socket(intrfc, port);
 233	if (s)
 234		sock_hold(s);
 235	spin_unlock_bh(&intrfc->if_sklist_lock);
 236
 237	return s;
 238}
 239
 240#ifdef CONFIG_IPX_INTERN
 241static struct sock *ipxitf_find_internal_socket(struct ipx_interface *intrfc,
 242						unsigned char *ipx_node,
 243						__be16 port)
 244{
 245	struct sock *s;
 
 246
 247	ipxitf_hold(intrfc);
 248	spin_lock_bh(&intrfc->if_sklist_lock);
 249
 250	sk_for_each(s, &intrfc->if_sklist) {
 251		struct ipx_sock *ipxs = ipx_sk(s);
 252
 253		if (ipxs->port == port &&
 254		    !memcmp(ipx_node, ipxs->node, IPX_NODE_LEN))
 255			goto found;
 256	}
 257	s = NULL;
 258found:
 259	spin_unlock_bh(&intrfc->if_sklist_lock);
 260	ipxitf_put(intrfc);
 261	return s;
 262}
 263#endif
 264
 265static void __ipxitf_down(struct ipx_interface *intrfc)
 266{
 267	struct sock *s;
 268	struct hlist_node *t;
 269
 270	/* Delete all routes associated with this interface */
 271	ipxrtr_del_routes(intrfc);
 272
 273	spin_lock_bh(&intrfc->if_sklist_lock);
 274	/* error sockets */
 275	sk_for_each_safe(s, t, &intrfc->if_sklist) {
 276		struct ipx_sock *ipxs = ipx_sk(s);
 277
 278		s->sk_err = ENOLINK;
 279		s->sk_error_report(s);
 280		ipxs->intrfc = NULL;
 281		ipxs->port   = 0;
 282		sock_set_flag(s, SOCK_ZAPPED); /* Indicates it is no longer bound */
 283		sk_del_node_init(s);
 284	}
 285	INIT_HLIST_HEAD(&intrfc->if_sklist);
 286	spin_unlock_bh(&intrfc->if_sklist_lock);
 287
 288	/* remove this interface from list */
 289	list_del(&intrfc->node);
 290
 291	/* remove this interface from *special* networks */
 292	if (intrfc == ipx_primary_net)
 293		ipxitf_clear_primary_net();
 294	if (intrfc == ipx_internal_net)
 295		ipx_internal_net = NULL;
 296
 297	if (intrfc->if_dev)
 298		dev_put(intrfc->if_dev);
 299	kfree(intrfc);
 300}
 301
 302void ipxitf_down(struct ipx_interface *intrfc)
 303{
 304	spin_lock_bh(&ipx_interfaces_lock);
 305	__ipxitf_down(intrfc);
 306	spin_unlock_bh(&ipx_interfaces_lock);
 307}
 308
 309static void __ipxitf_put(struct ipx_interface *intrfc)
 310{
 311	if (atomic_dec_and_test(&intrfc->refcnt))
 312		__ipxitf_down(intrfc);
 313}
 314
 315static int ipxitf_device_event(struct notifier_block *notifier,
 316				unsigned long event, void *ptr)
 317{
 318	struct net_device *dev = netdev_notifier_info_to_dev(ptr);
 319	struct ipx_interface *i, *tmp;
 320
 321	if (!net_eq(dev_net(dev), &init_net))
 322		return NOTIFY_DONE;
 323
 324	if (event != NETDEV_DOWN && event != NETDEV_UP)
 325		goto out;
 326
 327	spin_lock_bh(&ipx_interfaces_lock);
 328	list_for_each_entry_safe(i, tmp, &ipx_interfaces, node)
 329		if (i->if_dev == dev) {
 330			if (event == NETDEV_UP)
 331				ipxitf_hold(i);
 332			else
 333				__ipxitf_put(i);
 334		}
 335	spin_unlock_bh(&ipx_interfaces_lock);
 336out:
 337	return NOTIFY_DONE;
 338}
 339
 340
 341static __exit void ipxitf_cleanup(void)
 342{
 343	struct ipx_interface *i, *tmp;
 344
 345	spin_lock_bh(&ipx_interfaces_lock);
 346	list_for_each_entry_safe(i, tmp, &ipx_interfaces, node)
 347		__ipxitf_put(i);
 348	spin_unlock_bh(&ipx_interfaces_lock);
 349}
 350
 351static void ipxitf_def_skb_handler(struct sock *sock, struct sk_buff *skb)
 352{
 353	if (sock_queue_rcv_skb(sock, skb) < 0)
 354		kfree_skb(skb);
 355}
 356
 357/*
 358 * On input skb->sk is NULL. Nobody is charged for the memory.
 359 */
 360
 361/* caller must hold a reference to intrfc */
 362
 363#ifdef CONFIG_IPX_INTERN
 364static int ipxitf_demux_socket(struct ipx_interface *intrfc,
 365			       struct sk_buff *skb, int copy)
 366{
 367	struct ipxhdr *ipx = ipx_hdr(skb);
 368	int is_broadcast = !memcmp(ipx->ipx_dest.node, ipx_broadcast_node,
 369				   IPX_NODE_LEN);
 370	struct sock *s;
 
 371	int rc;
 372
 373	spin_lock_bh(&intrfc->if_sklist_lock);
 374
 375	sk_for_each(s, &intrfc->if_sklist) {
 376		struct ipx_sock *ipxs = ipx_sk(s);
 377
 378		if (ipxs->port == ipx->ipx_dest.sock &&
 379		    (is_broadcast || !memcmp(ipx->ipx_dest.node,
 380					     ipxs->node, IPX_NODE_LEN))) {
 381			/* We found a socket to which to send */
 382			struct sk_buff *skb1;
 383
 384			if (copy) {
 385				skb1 = skb_clone(skb, GFP_ATOMIC);
 386				rc = -ENOMEM;
 387				if (!skb1)
 388					goto out;
 389			} else {
 390				skb1 = skb;
 391				copy = 1; /* skb may only be used once */
 392			}
 393			ipxitf_def_skb_handler(s, skb1);
 394
 395			/* On an external interface, one socket can listen */
 396			if (intrfc != ipx_internal_net)
 397				break;
 398		}
 399	}
 400
 401	/* skb was solely for us, and we did not make a copy, so free it. */
 402	if (!copy)
 403		kfree_skb(skb);
 404
 405	rc = 0;
 406out:
 407	spin_unlock_bh(&intrfc->if_sklist_lock);
 408	return rc;
 409}
 410#else
 411static struct sock *ncp_connection_hack(struct ipx_interface *intrfc,
 412					struct ipxhdr *ipx)
 413{
 414	/* The packet's target is a NCP connection handler. We want to hand it
 415	 * to the correct socket directly within the kernel, so that the
 416	 * mars_nwe packet distribution process does not have to do it. Here we
 417	 * only care about NCP and BURST packets.
 418	 *
 419	 * You might call this a hack, but believe me, you do not want a
 420	 * complete NCP layer in the kernel, and this is VERY fast as well. */
 421	struct sock *sk = NULL;
 422	int connection = 0;
 423	u8 *ncphdr = (u8 *)(ipx + 1);
 424
 425	if (*ncphdr == 0x22 && *(ncphdr + 1) == 0x22) /* NCP request */
 426		connection = (((int) *(ncphdr + 5)) << 8) | (int) *(ncphdr + 3);
 427	else if (*ncphdr == 0x77 && *(ncphdr + 1) == 0x77) /* BURST packet */
 428		connection = (((int) *(ncphdr + 9)) << 8) | (int) *(ncphdr + 8);
 429
 430	if (connection) {
 
 431		/* Now we have to look for a special NCP connection handling
 432		 * socket. Only these sockets have ipx_ncp_conn != 0, set by
 433		 * SIOCIPXNCPCONN. */
 434		spin_lock_bh(&intrfc->if_sklist_lock);
 435		sk_for_each(sk, &intrfc->if_sklist)
 436			if (ipx_sk(sk)->ipx_ncp_conn == connection) {
 437				sock_hold(sk);
 438				goto found;
 439			}
 440		sk = NULL;
 441	found:
 442		spin_unlock_bh(&intrfc->if_sklist_lock);
 443	}
 444	return sk;
 445}
 446
 447static int ipxitf_demux_socket(struct ipx_interface *intrfc,
 448			       struct sk_buff *skb, int copy)
 449{
 450	struct ipxhdr *ipx = ipx_hdr(skb);
 451	struct sock *sock1 = NULL, *sock2 = NULL;
 452	struct sk_buff *skb1 = NULL, *skb2 = NULL;
 453	int rc;
 454
 455	if (intrfc == ipx_primary_net && ntohs(ipx->ipx_dest.sock) == 0x451)
 456		sock1 = ncp_connection_hack(intrfc, ipx);
 457	if (!sock1)
 458		/* No special socket found, forward the packet the normal way */
 459		sock1 = ipxitf_find_socket(intrfc, ipx->ipx_dest.sock);
 460
 461	/*
 462	 * We need to check if there is a primary net and if
 463	 * this is addressed to one of the *SPECIAL* sockets because
 464	 * these need to be propagated to the primary net.
 465	 * The *SPECIAL* socket list contains: 0x452(SAP), 0x453(RIP) and
 466	 * 0x456(Diagnostic).
 467	 */
 468
 469	if (ipx_primary_net && intrfc != ipx_primary_net) {
 470		const int dsock = ntohs(ipx->ipx_dest.sock);
 471
 472		if (dsock == 0x452 || dsock == 0x453 || dsock == 0x456)
 473			/* The appropriate thing to do here is to dup the
 474			 * packet and route to the primary net interface via
 475			 * ipxitf_send; however, we'll cheat and just demux it
 476			 * here. */
 477			sock2 = ipxitf_find_socket(ipx_primary_net,
 478							ipx->ipx_dest.sock);
 479	}
 480
 481	/*
 482	 * If there is nothing to do return. The kfree will cancel any charging.
 483	 */
 484	rc = 0;
 485	if (!sock1 && !sock2) {
 486		if (!copy)
 487			kfree_skb(skb);
 488		goto out;
 489	}
 490
 491	/*
 492	 * This next segment of code is a little awkward, but it sets it up
 493	 * so that the appropriate number of copies of the SKB are made and
 494	 * that skb1 and skb2 point to it (them) so that it (they) can be
 495	 * demuxed to sock1 and/or sock2.  If we are unable to make enough
 496	 * copies, we do as much as is possible.
 497	 */
 498
 499	if (copy)
 500		skb1 = skb_clone(skb, GFP_ATOMIC);
 501	else
 502		skb1 = skb;
 503
 504	rc = -ENOMEM;
 505	if (!skb1)
 506		goto out_put;
 507
 508	/* Do we need 2 SKBs? */
 509	if (sock1 && sock2)
 510		skb2 = skb_clone(skb1, GFP_ATOMIC);
 511	else
 512		skb2 = skb1;
 513
 514	if (sock1)
 515		ipxitf_def_skb_handler(sock1, skb1);
 516
 517	if (!skb2)
 518		goto out_put;
 519
 520	if (sock2)
 521		ipxitf_def_skb_handler(sock2, skb2);
 522
 523	rc = 0;
 524out_put:
 525	if (sock1)
 526		sock_put(sock1);
 527	if (sock2)
 528		sock_put(sock2);
 529out:
 530	return rc;
 531}
 532#endif	/* CONFIG_IPX_INTERN */
 533
 534static struct sk_buff *ipxitf_adjust_skbuff(struct ipx_interface *intrfc,
 535					    struct sk_buff *skb)
 536{
 537	struct sk_buff *skb2;
 538	int in_offset = (unsigned char *)ipx_hdr(skb) - skb->head;
 539	int out_offset = intrfc->if_ipx_offset;
 540	int len;
 541
 542	/* Hopefully, most cases */
 543	if (in_offset >= out_offset)
 544		return skb;
 545
 546	/* Need new SKB */
 547	len  = skb->len + out_offset;
 548	skb2 = alloc_skb(len, GFP_ATOMIC);
 549	if (skb2) {
 550		skb_reserve(skb2, out_offset);
 551		skb_reset_network_header(skb2);
 552		skb_reset_transport_header(skb2);
 553		skb_put(skb2, skb->len);
 554		memcpy(ipx_hdr(skb2), ipx_hdr(skb), skb->len);
 555		memcpy(skb2->cb, skb->cb, sizeof(skb->cb));
 556	}
 557	kfree_skb(skb);
 558	return skb2;
 559}
 560
 561/* caller must hold a reference to intrfc and the skb has to be unshared */
 562int ipxitf_send(struct ipx_interface *intrfc, struct sk_buff *skb, char *node)
 563{
 564	struct ipxhdr *ipx = ipx_hdr(skb);
 565	struct net_device *dev = intrfc->if_dev;
 566	struct datalink_proto *dl = intrfc->if_dlink;
 567	char dest_node[IPX_NODE_LEN];
 568	int send_to_wire = 1;
 569	int addr_len;
 570
 571	ipx->ipx_tctrl = IPX_SKB_CB(skb)->ipx_tctrl;
 572	ipx->ipx_dest.net = IPX_SKB_CB(skb)->ipx_dest_net;
 573	ipx->ipx_source.net = IPX_SKB_CB(skb)->ipx_source_net;
 574
 575	/* see if we need to include the netnum in the route list */
 576	if (IPX_SKB_CB(skb)->last_hop.index >= 0) {
 577		__be32 *last_hop = (__be32 *)(((u8 *) skb->data) +
 578				sizeof(struct ipxhdr) +
 579				IPX_SKB_CB(skb)->last_hop.index *
 580				sizeof(__be32));
 581		*last_hop = IPX_SKB_CB(skb)->last_hop.netnum;
 582		IPX_SKB_CB(skb)->last_hop.index = -1;
 583	}
 584
 585	/*
 586	 * We need to know how many skbuffs it will take to send out this
 587	 * packet to avoid unnecessary copies.
 588	 */
 589
 590	if (!dl || !dev || dev->flags & IFF_LOOPBACK)
 591		send_to_wire = 0;	/* No non looped */
 592
 593	/*
 594	 * See if this should be demuxed to sockets on this interface
 595	 *
 596	 * We want to ensure the original was eaten or that we only use
 597	 * up clones.
 598	 */
 599
 600	if (ipx->ipx_dest.net == intrfc->if_netnum) {
 601		/*
 602		 * To our own node, loop and free the original.
 603		 * The internal net will receive on all node address.
 604		 */
 605		if (intrfc == ipx_internal_net ||
 606		    !memcmp(intrfc->if_node, node, IPX_NODE_LEN)) {
 607			/* Don't charge sender */
 608			skb_orphan(skb);
 609
 610			/* Will charge receiver */
 611			return ipxitf_demux_socket(intrfc, skb, 0);
 612		}
 613
 614		/* Broadcast, loop and possibly keep to send on. */
 615		if (!memcmp(ipx_broadcast_node, node, IPX_NODE_LEN)) {
 616			if (!send_to_wire)
 617				skb_orphan(skb);
 618			ipxitf_demux_socket(intrfc, skb, send_to_wire);
 619			if (!send_to_wire)
 620				goto out;
 621		}
 622	}
 623
 624	/*
 625	 * If the originating net is not equal to our net; this is routed
 626	 * We are still charging the sender. Which is right - the driver
 627	 * free will handle this fairly.
 628	 */
 629	if (ipx->ipx_source.net != intrfc->if_netnum) {
 630		/*
 631		 * Unshare the buffer before modifying the count in
 632		 * case it's a flood or tcpdump
 633		 */
 634		skb = skb_unshare(skb, GFP_ATOMIC);
 635		if (!skb)
 636			goto out;
 637		if (++ipx->ipx_tctrl > ipxcfg_max_hops)
 638			send_to_wire = 0;
 639	}
 640
 641	if (!send_to_wire) {
 642		kfree_skb(skb);
 643		goto out;
 644	}
 645
 646	/* Determine the appropriate hardware address */
 647	addr_len = dev->addr_len;
 648	if (!memcmp(ipx_broadcast_node, node, IPX_NODE_LEN))
 649		memcpy(dest_node, dev->broadcast, addr_len);
 650	else
 651		memcpy(dest_node, &(node[IPX_NODE_LEN-addr_len]), addr_len);
 652
 653	/* Make any compensation for differing physical/data link size */
 654	skb = ipxitf_adjust_skbuff(intrfc, skb);
 655	if (!skb)
 656		goto out;
 657
 658	/* set up data link and physical headers */
 659	skb->dev	= dev;
 660	skb->protocol	= htons(ETH_P_IPX);
 661
 662	/* Send it out */
 663	dl->request(dl, skb, dest_node);
 664out:
 665	return 0;
 666}
 667
 668static int ipxitf_add_local_route(struct ipx_interface *intrfc)
 669{
 670	return ipxrtr_add_route(intrfc->if_netnum, intrfc, NULL);
 671}
 672
 673static void ipxitf_discover_netnum(struct ipx_interface *intrfc,
 674				   struct sk_buff *skb);
 675static int ipxitf_pprop(struct ipx_interface *intrfc, struct sk_buff *skb);
 676
 677static int ipxitf_rcv(struct ipx_interface *intrfc, struct sk_buff *skb)
 678{
 679	struct ipxhdr *ipx = ipx_hdr(skb);
 680	int rc = 0;
 681
 682	ipxitf_hold(intrfc);
 683
 684	/* See if we should update our network number */
 685	if (!intrfc->if_netnum) /* net number of intrfc not known yet */
 686		ipxitf_discover_netnum(intrfc, skb);
 687
 688	IPX_SKB_CB(skb)->last_hop.index = -1;
 689	if (ipx->ipx_type == IPX_TYPE_PPROP) {
 690		rc = ipxitf_pprop(intrfc, skb);
 691		if (rc)
 692			goto out_free_skb;
 693	}
 694
 695	/* local processing follows */
 696	if (!IPX_SKB_CB(skb)->ipx_dest_net)
 697		IPX_SKB_CB(skb)->ipx_dest_net = intrfc->if_netnum;
 698	if (!IPX_SKB_CB(skb)->ipx_source_net)
 699		IPX_SKB_CB(skb)->ipx_source_net = intrfc->if_netnum;
 700
 701	/* it doesn't make sense to route a pprop packet, there's no meaning
 702	 * in the ipx_dest_net for such packets */
 703	if (ipx->ipx_type != IPX_TYPE_PPROP &&
 704	    intrfc->if_netnum != IPX_SKB_CB(skb)->ipx_dest_net) {
 705		/* We only route point-to-point packets. */
 706		if (skb->pkt_type == PACKET_HOST) {
 707			skb = skb_unshare(skb, GFP_ATOMIC);
 708			if (skb)
 709				rc = ipxrtr_route_skb(skb);
 710			goto out_intrfc;
 711		}
 712
 713		goto out_free_skb;
 714	}
 715
 716	/* see if we should keep it */
 717	if (!memcmp(ipx_broadcast_node, ipx->ipx_dest.node, IPX_NODE_LEN) ||
 718	    !memcmp(intrfc->if_node, ipx->ipx_dest.node, IPX_NODE_LEN)) {
 719		rc = ipxitf_demux_socket(intrfc, skb, 0);
 720		goto out_intrfc;
 721	}
 722
 723	/* we couldn't pawn it off so unload it */
 724out_free_skb:
 725	kfree_skb(skb);
 726out_intrfc:
 727	ipxitf_put(intrfc);
 728	return rc;
 729}
 730
 731static void ipxitf_discover_netnum(struct ipx_interface *intrfc,
 732				   struct sk_buff *skb)
 733{
 734	const struct ipx_cb *cb = IPX_SKB_CB(skb);
 735
 736	/* see if this is an intra packet: source_net == dest_net */
 737	if (cb->ipx_source_net == cb->ipx_dest_net && cb->ipx_source_net) {
 738		struct ipx_interface *i =
 739				ipxitf_find_using_net(cb->ipx_source_net);
 740		/* NB: NetWare servers lie about their hop count so we
 741		 * dropped the test based on it. This is the best way
 742		 * to determine this is a 0 hop count packet. */
 743		if (!i) {
 744			intrfc->if_netnum = cb->ipx_source_net;
 745			ipxitf_add_local_route(intrfc);
 746		} else {
 747			printk(KERN_WARNING "IPX: Network number collision "
 748				"%lx\n        %s %s and %s %s\n",
 749				(unsigned long) ntohl(cb->ipx_source_net),
 750				ipx_device_name(i),
 751				ipx_frame_name(i->if_dlink_type),
 752				ipx_device_name(intrfc),
 753				ipx_frame_name(intrfc->if_dlink_type));
 754			ipxitf_put(i);
 755		}
 756	}
 757}
 758
 759/**
 760 * ipxitf_pprop - Process packet propagation IPX packet type 0x14, used for
 761 * 		  NetBIOS broadcasts
 762 * @intrfc: IPX interface receiving this packet
 763 * @skb: Received packet
 764 *
 765 * Checks if packet is valid: if its more than %IPX_MAX_PPROP_HOPS hops or if it
 766 * is smaller than a IPX header + the room for %IPX_MAX_PPROP_HOPS hops we drop
 767 * it, not even processing it locally, if it has exact %IPX_MAX_PPROP_HOPS we
 768 * don't broadcast it, but process it locally. See chapter 5 of Novell's "IPX
 769 * RIP and SAP Router Specification", Part Number 107-000029-001.
 770 *
 771 * If it is valid, check if we have pprop broadcasting enabled by the user,
 772 * if not, just return zero for local processing.
 773 *
 774 * If it is enabled check the packet and don't broadcast it if we have already
 775 * seen this packet.
 776 *
 777 * Broadcast: send it to the interfaces that aren't on the packet visited nets
 778 * array, just after the IPX header.
 779 *
 780 * Returns -EINVAL for invalid packets, so that the calling function drops
 781 * the packet without local processing. 0 if packet is to be locally processed.
 782 */
 783static int ipxitf_pprop(struct ipx_interface *intrfc, struct sk_buff *skb)
 784{
 785	struct ipxhdr *ipx = ipx_hdr(skb);
 786	int i, rc = -EINVAL;
 787	struct ipx_interface *ifcs;
 788	char *c;
 789	__be32 *l;
 790
 791	/* Illegal packet - too many hops or too short */
 792	/* We decide to throw it away: no broadcasting, no local processing.
 793	 * NetBIOS unaware implementations route them as normal packets -
 794	 * tctrl <= 15, any data payload... */
 795	if (IPX_SKB_CB(skb)->ipx_tctrl > IPX_MAX_PPROP_HOPS ||
 796	    ntohs(ipx->ipx_pktsize) < sizeof(struct ipxhdr) +
 797					IPX_MAX_PPROP_HOPS * sizeof(u32))
 798		goto out;
 799	/* are we broadcasting this damn thing? */
 800	rc = 0;
 801	if (!sysctl_ipx_pprop_broadcasting)
 802		goto out;
 803	/* We do broadcast packet on the IPX_MAX_PPROP_HOPS hop, but we
 804	 * process it locally. All previous hops broadcasted it, and process it
 805	 * locally. */
 806	if (IPX_SKB_CB(skb)->ipx_tctrl == IPX_MAX_PPROP_HOPS)
 807		goto out;
 808
 809	c = ((u8 *) ipx) + sizeof(struct ipxhdr);
 810	l = (__be32 *) c;
 811
 812	/* Don't broadcast packet if already seen this net */
 813	for (i = 0; i < IPX_SKB_CB(skb)->ipx_tctrl; i++)
 814		if (*l++ == intrfc->if_netnum)
 815			goto out;
 816
 817	/* < IPX_MAX_PPROP_HOPS hops && input interface not in list. Save the
 818	 * position where we will insert recvd netnum into list, later on,
 819	 * in ipxitf_send */
 820	IPX_SKB_CB(skb)->last_hop.index = i;
 821	IPX_SKB_CB(skb)->last_hop.netnum = intrfc->if_netnum;
 822	/* xmit on all other interfaces... */
 823	spin_lock_bh(&ipx_interfaces_lock);
 824	list_for_each_entry(ifcs, &ipx_interfaces, node) {
 825		/* Except unconfigured interfaces */
 826		if (!ifcs->if_netnum)
 827			continue;
 828
 829		/* That aren't in the list */
 830		if (ifcs == intrfc)
 831			continue;
 832		l = (__be32 *) c;
 833		/* don't consider the last entry in the packet list,
 834		 * it is our netnum, and it is not there yet */
 835		for (i = 0; i < IPX_SKB_CB(skb)->ipx_tctrl; i++)
 836			if (ifcs->if_netnum == *l++)
 837				break;
 838		if (i == IPX_SKB_CB(skb)->ipx_tctrl) {
 839			struct sk_buff *s = skb_copy(skb, GFP_ATOMIC);
 840
 841			if (s) {
 842				IPX_SKB_CB(s)->ipx_dest_net = ifcs->if_netnum;
 843				ipxrtr_route_skb(s);
 844			}
 845		}
 846	}
 847	spin_unlock_bh(&ipx_interfaces_lock);
 848out:
 849	return rc;
 850}
 851
 852static void ipxitf_insert(struct ipx_interface *intrfc)
 853{
 854	spin_lock_bh(&ipx_interfaces_lock);
 855	list_add_tail(&intrfc->node, &ipx_interfaces);
 856	spin_unlock_bh(&ipx_interfaces_lock);
 857
 858	if (ipxcfg_auto_select_primary && !ipx_primary_net)
 859		ipx_primary_net = intrfc;
 860}
 861
 862static struct ipx_interface *ipxitf_alloc(struct net_device *dev, __be32 netnum,
 863					  __be16 dlink_type,
 864					  struct datalink_proto *dlink,
 865					  unsigned char internal,
 866					  int ipx_offset)
 867{
 868	struct ipx_interface *intrfc = kmalloc(sizeof(*intrfc), GFP_ATOMIC);
 869
 870	if (intrfc) {
 871		intrfc->if_dev		= dev;
 872		intrfc->if_netnum	= netnum;
 873		intrfc->if_dlink_type 	= dlink_type;
 874		intrfc->if_dlink 	= dlink;
 875		intrfc->if_internal 	= internal;
 876		intrfc->if_ipx_offset 	= ipx_offset;
 877		intrfc->if_sknum 	= IPX_MIN_EPHEMERAL_SOCKET;
 878		INIT_HLIST_HEAD(&intrfc->if_sklist);
 879		atomic_set(&intrfc->refcnt, 1);
 880		spin_lock_init(&intrfc->if_sklist_lock);
 881	}
 882
 883	return intrfc;
 884}
 885
 886static int ipxitf_create_internal(struct ipx_interface_definition *idef)
 887{
 888	struct ipx_interface *intrfc;
 889	int rc = -EEXIST;
 890
 891	/* Only one primary network allowed */
 892	if (ipx_primary_net)
 893		goto out;
 894
 895	/* Must have a valid network number */
 896	rc = -EADDRNOTAVAIL;
 897	if (!idef->ipx_network)
 898		goto out;
 899	intrfc = ipxitf_find_using_net(idef->ipx_network);
 900	rc = -EADDRINUSE;
 901	if (intrfc) {
 902		ipxitf_put(intrfc);
 903		goto out;
 904	}
 905	intrfc = ipxitf_alloc(NULL, idef->ipx_network, 0, NULL, 1, 0);
 906	rc = -EAGAIN;
 907	if (!intrfc)
 908		goto out;
 909	memcpy((char *)&(intrfc->if_node), idef->ipx_node, IPX_NODE_LEN);
 910	ipx_internal_net = ipx_primary_net = intrfc;
 911	ipxitf_hold(intrfc);
 912	ipxitf_insert(intrfc);
 913
 914	rc = ipxitf_add_local_route(intrfc);
 915	ipxitf_put(intrfc);
 916out:
 917	return rc;
 918}
 919
 920static __be16 ipx_map_frame_type(unsigned char type)
 921{
 922	__be16 rc = 0;
 923
 924	switch (type) {
 925	case IPX_FRAME_ETHERII:	rc = htons(ETH_P_IPX);		break;
 926	case IPX_FRAME_8022:	rc = htons(ETH_P_802_2);	break;
 927	case IPX_FRAME_SNAP:	rc = htons(ETH_P_SNAP);		break;
 928	case IPX_FRAME_8023:	rc = htons(ETH_P_802_3);	break;
 929	}
 930
 931	return rc;
 932}
 933
 934static int ipxitf_create(struct ipx_interface_definition *idef)
 935{
 936	struct net_device *dev;
 937	__be16 dlink_type = 0;
 938	struct datalink_proto *datalink = NULL;
 939	struct ipx_interface *intrfc;
 940	int rc;
 941
 942	if (idef->ipx_special == IPX_INTERNAL) {
 943		rc = ipxitf_create_internal(idef);
 944		goto out;
 945	}
 946
 947	rc = -EEXIST;
 948	if (idef->ipx_special == IPX_PRIMARY && ipx_primary_net)
 949		goto out;
 950
 951	intrfc = ipxitf_find_using_net(idef->ipx_network);
 952	rc = -EADDRINUSE;
 953	if (idef->ipx_network && intrfc) {
 954		ipxitf_put(intrfc);
 955		goto out;
 956	}
 957
 958	if (intrfc)
 959		ipxitf_put(intrfc);
 960
 961	dev = dev_get_by_name(&init_net, idef->ipx_device);
 962	rc = -ENODEV;
 963	if (!dev)
 964		goto out;
 965
 966	switch (idef->ipx_dlink_type) {
 
 
 
 
 967	case IPX_FRAME_8022:
 968		dlink_type 	= htons(ETH_P_802_2);
 969		datalink 	= p8022_datalink;
 970		break;
 971	case IPX_FRAME_ETHERII:
 972		if (dev->type != ARPHRD_IEEE802) {
 973			dlink_type 	= htons(ETH_P_IPX);
 974			datalink 	= pEII_datalink;
 975			break;
 976		}
 
 
 
 977		/* fall through */
 978	case IPX_FRAME_SNAP:
 979		dlink_type 	= htons(ETH_P_SNAP);
 980		datalink 	= pSNAP_datalink;
 981		break;
 982	case IPX_FRAME_8023:
 983		dlink_type 	= htons(ETH_P_802_3);
 984		datalink 	= p8023_datalink;
 985		break;
 986	case IPX_FRAME_NONE:
 987	default:
 988		rc = -EPROTONOSUPPORT;
 989		goto out_dev;
 990	}
 991
 992	rc = -ENETDOWN;
 993	if (!(dev->flags & IFF_UP))
 994		goto out_dev;
 995
 996	/* Check addresses are suitable */
 997	rc = -EINVAL;
 998	if (dev->addr_len > IPX_NODE_LEN)
 999		goto out_dev;
1000
1001	intrfc = ipxitf_find_using_phys(dev, dlink_type);
1002	if (!intrfc) {
1003		/* Ok now create */
1004		intrfc = ipxitf_alloc(dev, idef->ipx_network, dlink_type,
1005				      datalink, 0, dev->hard_header_len +
1006					datalink->header_length);
1007		rc = -EAGAIN;
1008		if (!intrfc)
1009			goto out_dev;
1010		/* Setup primary if necessary */
1011		if (idef->ipx_special == IPX_PRIMARY)
1012			ipx_primary_net = intrfc;
1013		if (!memcmp(idef->ipx_node, "\000\000\000\000\000\000",
1014			    IPX_NODE_LEN)) {
1015			memset(intrfc->if_node, 0, IPX_NODE_LEN);
1016			memcpy(intrfc->if_node + IPX_NODE_LEN - dev->addr_len,
1017				dev->dev_addr, dev->addr_len);
1018		} else
1019			memcpy(intrfc->if_node, idef->ipx_node, IPX_NODE_LEN);
1020		ipxitf_hold(intrfc);
1021		ipxitf_insert(intrfc);
1022	}
1023
1024
1025	/* If the network number is known, add a route */
1026	rc = 0;
1027	if (!intrfc->if_netnum)
1028		goto out_intrfc;
1029
1030	rc = ipxitf_add_local_route(intrfc);
1031out_intrfc:
1032	ipxitf_put(intrfc);
1033	goto out;
1034out_dev:
1035	dev_put(dev);
1036out:
1037	return rc;
1038}
1039
1040static int ipxitf_delete(struct ipx_interface_definition *idef)
1041{
1042	struct net_device *dev = NULL;
1043	__be16 dlink_type = 0;
1044	struct ipx_interface *intrfc;
1045	int rc = 0;
1046
1047	spin_lock_bh(&ipx_interfaces_lock);
1048	if (idef->ipx_special == IPX_INTERNAL) {
1049		if (ipx_internal_net) {
1050			__ipxitf_put(ipx_internal_net);
1051			goto out;
1052		}
1053		rc = -ENOENT;
1054		goto out;
1055	}
1056
1057	dlink_type = ipx_map_frame_type(idef->ipx_dlink_type);
1058	rc = -EPROTONOSUPPORT;
1059	if (!dlink_type)
1060		goto out;
1061
1062	dev = __dev_get_by_name(&init_net, idef->ipx_device);
1063	rc = -ENODEV;
1064	if (!dev)
1065		goto out;
1066
1067	intrfc = __ipxitf_find_using_phys(dev, dlink_type);
1068	rc = -EINVAL;
1069	if (!intrfc)
1070		goto out;
1071	__ipxitf_put(intrfc);
1072
1073	rc = 0;
1074out:
1075	spin_unlock_bh(&ipx_interfaces_lock);
1076	return rc;
1077}
1078
1079static struct ipx_interface *ipxitf_auto_create(struct net_device *dev,
1080						__be16 dlink_type)
1081{
1082	struct ipx_interface *intrfc = NULL;
1083	struct datalink_proto *datalink;
1084
1085	if (!dev)
1086		goto out;
1087
1088	/* Check addresses are suitable */
1089	if (dev->addr_len > IPX_NODE_LEN)
1090		goto out;
1091
1092	switch (ntohs(dlink_type)) {
1093	case ETH_P_IPX:		datalink = pEII_datalink;	break;
1094	case ETH_P_802_2:	datalink = p8022_datalink;	break;
1095	case ETH_P_SNAP:	datalink = pSNAP_datalink;	break;
1096	case ETH_P_802_3:	datalink = p8023_datalink;	break;
1097	default:		goto out;
1098	}
1099
1100	intrfc = ipxitf_alloc(dev, 0, dlink_type, datalink, 0,
1101				dev->hard_header_len + datalink->header_length);
1102
1103	if (intrfc) {
1104		memset(intrfc->if_node, 0, IPX_NODE_LEN);
1105		memcpy((char *)&(intrfc->if_node[IPX_NODE_LEN-dev->addr_len]),
1106			dev->dev_addr, dev->addr_len);
1107		spin_lock_init(&intrfc->if_sklist_lock);
1108		atomic_set(&intrfc->refcnt, 1);
1109		ipxitf_insert(intrfc);
1110		dev_hold(dev);
1111	}
1112
1113out:
1114	return intrfc;
1115}
1116
1117static int ipxitf_ioctl(unsigned int cmd, void __user *arg)
1118{
1119	int rc = -EINVAL;
1120	struct ifreq ifr;
1121	int val;
1122
1123	switch (cmd) {
1124	case SIOCSIFADDR: {
1125		struct sockaddr_ipx *sipx;
1126		struct ipx_interface_definition f;
1127
1128		rc = -EFAULT;
1129		if (copy_from_user(&ifr, arg, sizeof(ifr)))
1130			break;
1131		sipx = (struct sockaddr_ipx *)&ifr.ifr_addr;
1132		rc = -EINVAL;
1133		if (sipx->sipx_family != AF_IPX)
1134			break;
1135		f.ipx_network = sipx->sipx_network;
1136		memcpy(f.ipx_device, ifr.ifr_name,
1137			sizeof(f.ipx_device));
1138		memcpy(f.ipx_node, sipx->sipx_node, IPX_NODE_LEN);
1139		f.ipx_dlink_type = sipx->sipx_type;
1140		f.ipx_special = sipx->sipx_special;
1141
1142		if (sipx->sipx_action == IPX_DLTITF)
1143			rc = ipxitf_delete(&f);
1144		else
1145			rc = ipxitf_create(&f);
1146		break;
1147	}
1148	case SIOCGIFADDR: {
1149		struct sockaddr_ipx *sipx;
1150		struct ipx_interface *ipxif;
1151		struct net_device *dev;
1152
1153		rc = -EFAULT;
1154		if (copy_from_user(&ifr, arg, sizeof(ifr)))
1155			break;
1156		sipx = (struct sockaddr_ipx *)&ifr.ifr_addr;
1157		dev  = __dev_get_by_name(&init_net, ifr.ifr_name);
1158		rc   = -ENODEV;
1159		if (!dev)
1160			break;
1161		ipxif = ipxitf_find_using_phys(dev,
1162					   ipx_map_frame_type(sipx->sipx_type));
1163		rc = -EADDRNOTAVAIL;
1164		if (!ipxif)
1165			break;
1166
1167		sipx->sipx_family	= AF_IPX;
1168		sipx->sipx_network	= ipxif->if_netnum;
1169		memcpy(sipx->sipx_node, ipxif->if_node,
1170			sizeof(sipx->sipx_node));
1171		rc = -EFAULT;
1172		if (copy_to_user(arg, &ifr, sizeof(ifr)))
1173			break;
1174		ipxitf_put(ipxif);
1175		rc = 0;
1176		break;
1177	}
1178	case SIOCAIPXITFCRT:
1179		rc = -EFAULT;
1180		if (get_user(val, (unsigned char __user *) arg))
1181			break;
1182		rc = 0;
1183		ipxcfg_auto_create_interfaces = val;
1184		break;
1185	case SIOCAIPXPRISLT:
1186		rc = -EFAULT;
1187		if (get_user(val, (unsigned char __user *) arg))
1188			break;
1189		rc = 0;
1190		ipxcfg_set_auto_select(val);
1191		break;
1192	}
1193
1194	return rc;
1195}
1196
1197/*
1198 *	Checksum routine for IPX
1199 */
1200
1201/* Note: We assume ipx_tctrl==0 and htons(length)==ipx_pktsize */
1202/* This functions should *not* mess with packet contents */
1203
1204__be16 ipx_cksum(struct ipxhdr *packet, int length)
1205{
1206	/*
1207	 *	NOTE: sum is a net byte order quantity, which optimizes the
1208	 *	loop. This only works on big and little endian machines. (I
1209	 *	don't know of a machine that isn't.)
1210	 */
1211	/* handle the first 3 words separately; checksum should be skipped
1212	 * and ipx_tctrl masked out */
1213	__u16 *p = (__u16 *)packet;
1214	__u32 sum = p[1] + (p[2] & (__force u16)htons(0x00ff));
1215	__u32 i = (length >> 1) - 3; /* Number of remaining complete words */
1216
1217	/* Loop through them */
1218	p += 3;
1219	while (i--)
1220		sum += *p++;
1221
1222	/* Add on the last part word if it exists */
1223	if (packet->ipx_pktsize & htons(1))
1224		sum += (__force u16)htons(0xff00) & *p;
1225
1226	/* Do final fixup */
1227	sum = (sum & 0xffff) + (sum >> 16);
1228
1229	/* It's a pity there's no concept of carry in C */
1230	if (sum >= 0x10000)
1231		sum++;
1232
1233	/*
1234	 * Leave 0 alone; we don't want 0xffff here.  Note that we can't get
1235	 * here with 0x10000, so this check is the same as ((__u16)sum)
1236	 */
1237	if (sum)
1238		sum = ~sum;
1239
1240	return (__force __be16)sum;
1241}
1242
1243const char *ipx_frame_name(__be16 frame)
1244{
1245	char* rc = "None";
1246
1247	switch (ntohs(frame)) {
1248	case ETH_P_IPX:		rc = "EtherII";	break;
1249	case ETH_P_802_2:	rc = "802.2";	break;
1250	case ETH_P_SNAP:	rc = "SNAP";	break;
1251	case ETH_P_802_3:	rc = "802.3";	break;
 
1252	}
1253
1254	return rc;
1255}
1256
1257const char *ipx_device_name(struct ipx_interface *intrfc)
1258{
1259	return intrfc->if_internal ? "Internal" :
1260		intrfc->if_dev ? intrfc->if_dev->name : "Unknown";
1261}
1262
1263/* Handling for system calls applied via the various interfaces to an IPX
1264 * socket object. */
1265
1266static int ipx_setsockopt(struct socket *sock, int level, int optname,
1267			  char __user *optval, unsigned int optlen)
1268{
1269	struct sock *sk = sock->sk;
1270	int opt;
1271	int rc = -EINVAL;
1272
1273	lock_sock(sk);
1274	if (optlen != sizeof(int))
1275		goto out;
1276
1277	rc = -EFAULT;
1278	if (get_user(opt, (unsigned int __user *)optval))
1279		goto out;
1280
1281	rc = -ENOPROTOOPT;
1282	if (!(level == SOL_IPX && optname == IPX_TYPE))
1283		goto out;
1284
1285	ipx_sk(sk)->type = opt;
1286	rc = 0;
1287out:
1288	release_sock(sk);
1289	return rc;
1290}
1291
1292static int ipx_getsockopt(struct socket *sock, int level, int optname,
1293	char __user *optval, int __user *optlen)
1294{
1295	struct sock *sk = sock->sk;
1296	int val = 0;
1297	int len;
1298	int rc = -ENOPROTOOPT;
1299
1300	lock_sock(sk);
1301	if (!(level == SOL_IPX && optname == IPX_TYPE))
1302		goto out;
1303
1304	val = ipx_sk(sk)->type;
1305
1306	rc = -EFAULT;
1307	if (get_user(len, optlen))
1308		goto out;
1309
1310	len = min_t(unsigned int, len, sizeof(int));
1311	rc = -EINVAL;
1312	if(len < 0)
1313		goto out;
1314
1315	rc = -EFAULT;
1316	if (put_user(len, optlen) || copy_to_user(optval, &val, len))
1317		goto out;
1318
1319	rc = 0;
1320out:
1321	release_sock(sk);
1322	return rc;
1323}
1324
1325static struct proto ipx_proto = {
1326	.name	  = "IPX",
1327	.owner	  = THIS_MODULE,
1328	.obj_size = sizeof(struct ipx_sock),
1329};
1330
1331static int ipx_create(struct net *net, struct socket *sock, int protocol,
1332		      int kern)
1333{
1334	int rc = -ESOCKTNOSUPPORT;
1335	struct sock *sk;
1336
1337	if (!net_eq(net, &init_net))
1338		return -EAFNOSUPPORT;
1339
1340	/*
1341	 * SPX support is not anymore in the kernel sources. If you want to
1342	 * ressurrect it, completing it and making it understand shared skbs,
1343	 * be fully multithreaded, etc, grab the sources in an early 2.5 kernel
1344	 * tree.
1345	 */
1346	if (sock->type != SOCK_DGRAM)
1347		goto out;
1348
1349	rc = -ENOMEM;
1350	sk = sk_alloc(net, PF_IPX, GFP_KERNEL, &ipx_proto, kern);
1351	if (!sk)
1352		goto out;
1353
1354	sk_refcnt_debug_inc(sk);
1355	sock_init_data(sock, sk);
1356	sk->sk_no_check_tx = 1;		/* Checksum off by default */
1357	sock->ops = &ipx_dgram_ops;
1358	rc = 0;
1359out:
1360	return rc;
1361}
1362
1363static int ipx_release(struct socket *sock)
1364{
1365	struct sock *sk = sock->sk;
1366
1367	if (!sk)
1368		goto out;
1369
1370	lock_sock(sk);
1371	sk->sk_shutdown = SHUTDOWN_MASK;
1372	if (!sock_flag(sk, SOCK_DEAD))
1373		sk->sk_state_change(sk);
1374
1375	sock_set_flag(sk, SOCK_DEAD);
1376	sock->sk = NULL;
1377	sk_refcnt_debug_release(sk);
1378	ipx_destroy_socket(sk);
1379	release_sock(sk);
1380	sock_put(sk);
1381out:
1382	return 0;
1383}
1384
1385/* caller must hold a reference to intrfc */
1386
1387static __be16 ipx_first_free_socketnum(struct ipx_interface *intrfc)
1388{
1389	unsigned short socketNum = intrfc->if_sknum;
1390
1391	spin_lock_bh(&intrfc->if_sklist_lock);
1392
1393	if (socketNum < IPX_MIN_EPHEMERAL_SOCKET)
1394		socketNum = IPX_MIN_EPHEMERAL_SOCKET;
1395
1396	while (__ipxitf_find_socket(intrfc, htons(socketNum)))
1397		if (socketNum > IPX_MAX_EPHEMERAL_SOCKET)
1398			socketNum = IPX_MIN_EPHEMERAL_SOCKET;
1399		else
1400			socketNum++;
1401
1402	spin_unlock_bh(&intrfc->if_sklist_lock);
1403	intrfc->if_sknum = socketNum;
1404
1405	return htons(socketNum);
1406}
1407
1408static int __ipx_bind(struct socket *sock,
1409			struct sockaddr *uaddr, int addr_len)
1410{
1411	struct sock *sk = sock->sk;
1412	struct ipx_sock *ipxs = ipx_sk(sk);
1413	struct ipx_interface *intrfc;
1414	struct sockaddr_ipx *addr = (struct sockaddr_ipx *)uaddr;
1415	int rc = -EINVAL;
1416
1417	if (!sock_flag(sk, SOCK_ZAPPED) || addr_len != sizeof(struct sockaddr_ipx))
1418		goto out;
1419
1420	intrfc = ipxitf_find_using_net(addr->sipx_network);
1421	rc = -EADDRNOTAVAIL;
1422	if (!intrfc)
1423		goto out;
1424
1425	if (!addr->sipx_port) {
1426		addr->sipx_port = ipx_first_free_socketnum(intrfc);
1427		rc = -EINVAL;
1428		if (!addr->sipx_port)
1429			goto out_put;
1430	}
1431
1432	/* protect IPX system stuff like routing/sap */
1433	rc = -EACCES;
1434	if (ntohs(addr->sipx_port) < IPX_MIN_EPHEMERAL_SOCKET &&
1435	    !capable(CAP_NET_ADMIN))
1436		goto out_put;
1437
1438	ipxs->port = addr->sipx_port;
1439
1440#ifdef CONFIG_IPX_INTERN
1441	if (intrfc == ipx_internal_net) {
1442		/* The source address is to be set explicitly if the
1443		 * socket is to be bound on the internal network. If a
1444		 * node number 0 was specified, the default is used.
1445		 */
1446
1447		rc = -EINVAL;
1448		if (!memcmp(addr->sipx_node, ipx_broadcast_node, IPX_NODE_LEN))
1449			goto out_put;
1450		if (!memcmp(addr->sipx_node, ipx_this_node, IPX_NODE_LEN))
1451			memcpy(ipxs->node, intrfc->if_node, IPX_NODE_LEN);
1452		else
1453			memcpy(ipxs->node, addr->sipx_node, IPX_NODE_LEN);
1454
1455		rc = -EADDRINUSE;
1456		if (ipxitf_find_internal_socket(intrfc, ipxs->node,
1457						ipxs->port)) {
1458			SOCK_DEBUG(sk,
1459				"IPX: bind failed because port %X in use.\n",
1460				ntohs(addr->sipx_port));
1461			goto out_put;
1462		}
1463	} else {
1464		/* Source addresses are easy. It must be our
1465		 * network:node pair for an interface routed to IPX
1466		 * with the ipx routing ioctl()
1467		 */
1468
1469		memcpy(ipxs->node, intrfc->if_node, IPX_NODE_LEN);
1470
1471		rc = -EADDRINUSE;
1472		if (ipxitf_find_socket(intrfc, addr->sipx_port)) {
1473			SOCK_DEBUG(sk,
1474				"IPX: bind failed because port %X in use.\n",
1475				ntohs(addr->sipx_port));
1476			goto out_put;
1477		}
1478	}
1479
1480#else	/* !def CONFIG_IPX_INTERN */
1481
1482	/* Source addresses are easy. It must be our network:node pair for
1483	   an interface routed to IPX with the ipx routing ioctl() */
1484
1485	rc = -EADDRINUSE;
1486	if (ipxitf_find_socket(intrfc, addr->sipx_port)) {
1487		SOCK_DEBUG(sk, "IPX: bind failed because port %X in use.\n",
1488				ntohs((int)addr->sipx_port));
1489		goto out_put;
1490	}
1491
1492#endif	/* CONFIG_IPX_INTERN */
1493
1494	ipxitf_insert_socket(intrfc, sk);
1495	sock_reset_flag(sk, SOCK_ZAPPED);
1496
1497	rc = 0;
1498out_put:
1499	ipxitf_put(intrfc);
1500out:
1501	return rc;
1502}
1503
1504static int ipx_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
1505{
1506	struct sock *sk = sock->sk;
1507	int rc;
1508
1509	lock_sock(sk);
1510	rc = __ipx_bind(sock, uaddr, addr_len);
1511	release_sock(sk);
1512
1513	return rc;
1514}
1515
1516static int ipx_connect(struct socket *sock, struct sockaddr *uaddr,
1517	int addr_len, int flags)
1518{
1519	struct sock *sk = sock->sk;
1520	struct ipx_sock *ipxs = ipx_sk(sk);
1521	struct sockaddr_ipx *addr;
1522	int rc = -EINVAL;
1523	struct ipx_route *rt;
1524
1525	sk->sk_state	= TCP_CLOSE;
1526	sock->state 	= SS_UNCONNECTED;
1527
1528	lock_sock(sk);
1529	if (addr_len != sizeof(*addr))
1530		goto out;
1531	addr = (struct sockaddr_ipx *)uaddr;
1532
1533	/* put the autobinding in */
1534	if (!ipxs->port) {
1535		struct sockaddr_ipx uaddr;
1536
1537		uaddr.sipx_port		= 0;
1538		uaddr.sipx_network 	= 0;
1539
1540#ifdef CONFIG_IPX_INTERN
1541		rc = -ENETDOWN;
1542		if (!ipxs->intrfc)
1543			goto out; /* Someone zonked the iface */
1544		memcpy(uaddr.sipx_node, ipxs->intrfc->if_node,
1545			IPX_NODE_LEN);
1546#endif	/* CONFIG_IPX_INTERN */
1547
1548		rc = __ipx_bind(sock, (struct sockaddr *)&uaddr,
1549			      sizeof(struct sockaddr_ipx));
1550		if (rc)
1551			goto out;
1552	}
1553
1554	/* We can either connect to primary network or somewhere
1555	 * we can route to */
1556	rt = ipxrtr_lookup(addr->sipx_network);
1557	rc = -ENETUNREACH;
1558	if (!rt && !(!addr->sipx_network && ipx_primary_net))
1559		goto out;
1560
1561	ipxs->dest_addr.net  = addr->sipx_network;
1562	ipxs->dest_addr.sock = addr->sipx_port;
1563	memcpy(ipxs->dest_addr.node, addr->sipx_node, IPX_NODE_LEN);
1564	ipxs->type = addr->sipx_type;
1565
1566	if (sock->type == SOCK_DGRAM) {
1567		sock->state 	= SS_CONNECTED;
1568		sk->sk_state 	= TCP_ESTABLISHED;
1569	}
1570
1571	if (rt)
1572		ipxrtr_put(rt);
1573	rc = 0;
1574out:
1575	release_sock(sk);
1576	return rc;
1577}
1578
1579
1580static int ipx_getname(struct socket *sock, struct sockaddr *uaddr,
1581			int *uaddr_len, int peer)
1582{
1583	struct ipx_address *addr;
1584	struct sockaddr_ipx sipx;
1585	struct sock *sk = sock->sk;
1586	struct ipx_sock *ipxs = ipx_sk(sk);
1587	int rc;
1588
1589	*uaddr_len = sizeof(struct sockaddr_ipx);
1590
1591	lock_sock(sk);
1592	if (peer) {
1593		rc = -ENOTCONN;
1594		if (sk->sk_state != TCP_ESTABLISHED)
1595			goto out;
1596
1597		addr = &ipxs->dest_addr;
1598		sipx.sipx_network	= addr->net;
1599		sipx.sipx_port		= addr->sock;
1600		memcpy(sipx.sipx_node, addr->node, IPX_NODE_LEN);
1601	} else {
1602		if (ipxs->intrfc) {
1603			sipx.sipx_network = ipxs->intrfc->if_netnum;
1604#ifdef CONFIG_IPX_INTERN
1605			memcpy(sipx.sipx_node, ipxs->node, IPX_NODE_LEN);
1606#else
1607			memcpy(sipx.sipx_node, ipxs->intrfc->if_node,
1608				IPX_NODE_LEN);
1609#endif	/* CONFIG_IPX_INTERN */
1610
1611		} else {
1612			sipx.sipx_network = 0;
1613			memset(sipx.sipx_node, '\0', IPX_NODE_LEN);
1614		}
1615
1616		sipx.sipx_port = ipxs->port;
1617	}
1618
1619	sipx.sipx_family = AF_IPX;
1620	sipx.sipx_type	 = ipxs->type;
1621	sipx.sipx_zero	 = 0;
1622	memcpy(uaddr, &sipx, sizeof(sipx));
1623
1624	rc = 0;
1625out:
1626	release_sock(sk);
1627	return rc;
1628}
1629
1630static int ipx_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev)
1631{
1632	/* NULL here for pt means the packet was looped back */
1633	struct ipx_interface *intrfc;
1634	struct ipxhdr *ipx;
1635	u16 ipx_pktsize;
1636	int rc = 0;
1637
1638	if (!net_eq(dev_net(dev), &init_net))
1639		goto drop;
1640
1641	/* Not ours */
1642	if (skb->pkt_type == PACKET_OTHERHOST)
1643		goto drop;
1644
1645	if ((skb = skb_share_check(skb, GFP_ATOMIC)) == NULL)
1646		goto out;
1647
1648	if (!pskb_may_pull(skb, sizeof(struct ipxhdr)))
1649		goto drop;
1650
1651	ipx_pktsize = ntohs(ipx_hdr(skb)->ipx_pktsize);
1652
1653	/* Too small or invalid header? */
1654	if (ipx_pktsize < sizeof(struct ipxhdr) ||
1655	    !pskb_may_pull(skb, ipx_pktsize))
1656		goto drop;
1657
1658	ipx = ipx_hdr(skb);
1659	if (ipx->ipx_checksum != IPX_NO_CHECKSUM &&
1660	   ipx->ipx_checksum != ipx_cksum(ipx, ipx_pktsize))
1661		goto drop;
1662
1663	IPX_SKB_CB(skb)->ipx_tctrl	= ipx->ipx_tctrl;
1664	IPX_SKB_CB(skb)->ipx_dest_net	= ipx->ipx_dest.net;
1665	IPX_SKB_CB(skb)->ipx_source_net = ipx->ipx_source.net;
1666
1667	/* Determine what local ipx endpoint this is */
1668	intrfc = ipxitf_find_using_phys(dev, pt->type);
1669	if (!intrfc) {
1670		if (ipxcfg_auto_create_interfaces &&
1671		   IPX_SKB_CB(skb)->ipx_dest_net) {
1672			intrfc = ipxitf_auto_create(dev, pt->type);
1673			if (intrfc)
1674				ipxitf_hold(intrfc);
1675		}
1676
1677		if (!intrfc)	/* Not one of ours */
1678				/* or invalid packet for auto creation */
1679			goto drop;
1680	}
1681
1682	rc = ipxitf_rcv(intrfc, skb);
1683	ipxitf_put(intrfc);
1684	goto out;
1685drop:
1686	kfree_skb(skb);
1687out:
1688	return rc;
1689}
1690
1691static int ipx_sendmsg(struct socket *sock, struct msghdr *msg, size_t len)
 
1692{
1693	struct sock *sk = sock->sk;
1694	struct ipx_sock *ipxs = ipx_sk(sk);
1695	DECLARE_SOCKADDR(struct sockaddr_ipx *, usipx, msg->msg_name);
1696	struct sockaddr_ipx local_sipx;
1697	int rc = -EINVAL;
1698	int flags = msg->msg_flags;
1699
1700	lock_sock(sk);
1701	/* Socket gets bound below anyway */
1702/*	if (sk->sk_zapped)
1703		return -EIO; */	/* Socket not bound */
1704	if (flags & ~(MSG_DONTWAIT|MSG_CMSG_COMPAT))
1705		goto out;
1706
1707	/* Max possible packet size limited by 16 bit pktsize in header */
1708	if (len >= 65535 - sizeof(struct ipxhdr))
1709		goto out;
1710
1711	if (usipx) {
1712		if (!ipxs->port) {
1713			struct sockaddr_ipx uaddr;
1714
1715			uaddr.sipx_port		= 0;
1716			uaddr.sipx_network	= 0;
1717#ifdef CONFIG_IPX_INTERN
1718			rc = -ENETDOWN;
1719			if (!ipxs->intrfc)
1720				goto out; /* Someone zonked the iface */
1721			memcpy(uaddr.sipx_node, ipxs->intrfc->if_node,
1722				IPX_NODE_LEN);
1723#endif
1724			rc = __ipx_bind(sock, (struct sockaddr *)&uaddr,
1725					sizeof(struct sockaddr_ipx));
1726			if (rc)
1727				goto out;
1728		}
1729
1730		rc = -EINVAL;
1731		if (msg->msg_namelen < sizeof(*usipx) ||
1732		    usipx->sipx_family != AF_IPX)
1733			goto out;
1734	} else {
1735		rc = -ENOTCONN;
1736		if (sk->sk_state != TCP_ESTABLISHED)
1737			goto out;
1738
1739		usipx = &local_sipx;
1740		usipx->sipx_family 	= AF_IPX;
1741		usipx->sipx_type 	= ipxs->type;
1742		usipx->sipx_port 	= ipxs->dest_addr.sock;
1743		usipx->sipx_network 	= ipxs->dest_addr.net;
1744		memcpy(usipx->sipx_node, ipxs->dest_addr.node, IPX_NODE_LEN);
1745	}
1746
1747	rc = ipxrtr_route_packet(sk, usipx, msg, len, flags & MSG_DONTWAIT);
 
1748	if (rc >= 0)
1749		rc = len;
1750out:
1751	release_sock(sk);
1752	return rc;
1753}
1754
1755
1756static int ipx_recvmsg(struct socket *sock, struct msghdr *msg, size_t size,
1757		       int flags)
1758{
1759	struct sock *sk = sock->sk;
1760	struct ipx_sock *ipxs = ipx_sk(sk);
1761	DECLARE_SOCKADDR(struct sockaddr_ipx *, sipx, msg->msg_name);
1762	struct ipxhdr *ipx = NULL;
1763	struct sk_buff *skb;
1764	int copied, rc;
1765	bool locked = true;
1766
1767	lock_sock(sk);
1768	/* put the autobinding in */
1769	if (!ipxs->port) {
1770		struct sockaddr_ipx uaddr;
1771
1772		uaddr.sipx_port		= 0;
1773		uaddr.sipx_network 	= 0;
1774
1775#ifdef CONFIG_IPX_INTERN
1776		rc = -ENETDOWN;
1777		if (!ipxs->intrfc)
1778			goto out; /* Someone zonked the iface */
1779		memcpy(uaddr.sipx_node, ipxs->intrfc->if_node, IPX_NODE_LEN);
1780#endif	/* CONFIG_IPX_INTERN */
1781
1782		rc = __ipx_bind(sock, (struct sockaddr *)&uaddr,
1783			      sizeof(struct sockaddr_ipx));
1784		if (rc)
1785			goto out;
1786	}
1787
1788	rc = -ENOTCONN;
1789	if (sock_flag(sk, SOCK_ZAPPED))
1790		goto out;
1791
1792	release_sock(sk);
1793	locked = false;
1794	skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
1795				flags & MSG_DONTWAIT, &rc);
1796	if (!skb) {
1797		if (rc == -EAGAIN && (sk->sk_shutdown & RCV_SHUTDOWN))
1798			rc = 0;
1799		goto out;
1800	}
1801
1802	ipx 	= ipx_hdr(skb);
1803	copied 	= ntohs(ipx->ipx_pktsize) - sizeof(struct ipxhdr);
1804	if (copied > size) {
1805		copied = size;
1806		msg->msg_flags |= MSG_TRUNC;
1807	}
1808
1809	rc = skb_copy_datagram_msg(skb, sizeof(struct ipxhdr), msg, copied);
 
1810	if (rc)
1811		goto out_free;
1812	if (skb->tstamp.tv64)
1813		sk->sk_stamp = skb->tstamp;
1814
 
 
1815	if (sipx) {
1816		sipx->sipx_family	= AF_IPX;
1817		sipx->sipx_port		= ipx->ipx_source.sock;
1818		memcpy(sipx->sipx_node, ipx->ipx_source.node, IPX_NODE_LEN);
1819		sipx->sipx_network	= IPX_SKB_CB(skb)->ipx_source_net;
1820		sipx->sipx_type 	= ipx->ipx_type;
1821		sipx->sipx_zero		= 0;
1822		msg->msg_namelen	= sizeof(*sipx);
1823	}
1824	rc = copied;
1825
1826out_free:
1827	skb_free_datagram(sk, skb);
1828out:
1829	if (locked)
1830		release_sock(sk);
1831	return rc;
1832}
1833
1834
1835static int ipx_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1836{
1837	int rc = 0;
1838	long amount = 0;
1839	struct sock *sk = sock->sk;
1840	void __user *argp = (void __user *)arg;
1841
1842	lock_sock(sk);
1843	switch (cmd) {
1844	case TIOCOUTQ:
1845		amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1846		if (amount < 0)
1847			amount = 0;
1848		rc = put_user(amount, (int __user *)argp);
1849		break;
1850	case TIOCINQ: {
1851		struct sk_buff *skb = skb_peek(&sk->sk_receive_queue);
1852		/* These two are safe on a single CPU system as only
1853		 * user tasks fiddle here */
1854		if (skb)
1855			amount = skb->len - sizeof(struct ipxhdr);
1856		rc = put_user(amount, (int __user *)argp);
1857		break;
1858	}
1859	case SIOCADDRT:
1860	case SIOCDELRT:
1861		rc = -EPERM;
1862		if (capable(CAP_NET_ADMIN))
1863			rc = ipxrtr_ioctl(cmd, argp);
1864		break;
1865	case SIOCSIFADDR:
1866	case SIOCAIPXITFCRT:
1867	case SIOCAIPXPRISLT:
1868		rc = -EPERM;
1869		if (!capable(CAP_NET_ADMIN))
1870			break;
1871	case SIOCGIFADDR:
1872		rc = ipxitf_ioctl(cmd, argp);
1873		break;
1874	case SIOCIPXCFGDATA:
1875		rc = ipxcfg_get_config_data(argp);
1876		break;
1877	case SIOCIPXNCPCONN:
1878		/*
1879		 * This socket wants to take care of the NCP connection
1880		 * handed to us in arg.
1881		 */
1882		rc = -EPERM;
1883		if (!capable(CAP_NET_ADMIN))
1884			break;
1885		rc = get_user(ipx_sk(sk)->ipx_ncp_conn,
1886			      (const unsigned short __user *)argp);
1887		break;
1888	case SIOCGSTAMP:
1889		rc = sock_get_timestamp(sk, argp);
 
 
1890		break;
1891	case SIOCGIFDSTADDR:
1892	case SIOCSIFDSTADDR:
1893	case SIOCGIFBRDADDR:
1894	case SIOCSIFBRDADDR:
1895	case SIOCGIFNETMASK:
1896	case SIOCSIFNETMASK:
1897		rc = -EINVAL;
1898		break;
1899	default:
1900		rc = -ENOIOCTLCMD;
1901		break;
1902	}
1903	release_sock(sk);
1904
1905	return rc;
1906}
1907
1908
1909#ifdef CONFIG_COMPAT
1910static int ipx_compat_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1911{
1912	/*
1913	 * These 4 commands use same structure on 32bit and 64bit.  Rest of IPX
1914	 * commands is handled by generic ioctl code.  As these commands are
1915	 * SIOCPROTOPRIVATE..SIOCPROTOPRIVATE+3, they cannot be handled by generic
1916	 * code.
1917	 */
1918	switch (cmd) {
1919	case SIOCAIPXITFCRT:
1920	case SIOCAIPXPRISLT:
1921	case SIOCIPXCFGDATA:
1922	case SIOCIPXNCPCONN:
1923		return ipx_ioctl(sock, cmd, arg);
1924	default:
1925		return -ENOIOCTLCMD;
1926	}
1927}
1928#endif
1929
1930static int ipx_shutdown(struct socket *sock, int mode)
1931{
1932	struct sock *sk = sock->sk;
1933
1934	if (mode < SHUT_RD || mode > SHUT_RDWR)
1935		return -EINVAL;
1936	/* This maps:
1937	 * SHUT_RD   (0) -> RCV_SHUTDOWN  (1)
1938	 * SHUT_WR   (1) -> SEND_SHUTDOWN (2)
1939	 * SHUT_RDWR (2) -> SHUTDOWN_MASK (3)
1940	 */
1941	++mode;
1942
1943	lock_sock(sk);
1944	sk->sk_shutdown |= mode;
1945	release_sock(sk);
1946	sk->sk_state_change(sk);
1947
1948	return 0;
1949}
1950
1951/*
1952 * Socket family declarations
1953 */
1954
1955static const struct net_proto_family ipx_family_ops = {
1956	.family		= PF_IPX,
1957	.create		= ipx_create,
1958	.owner		= THIS_MODULE,
1959};
1960
1961static const struct proto_ops ipx_dgram_ops = {
1962	.family		= PF_IPX,
1963	.owner		= THIS_MODULE,
1964	.release	= ipx_release,
1965	.bind		= ipx_bind,
1966	.connect	= ipx_connect,
1967	.socketpair	= sock_no_socketpair,
1968	.accept		= sock_no_accept,
1969	.getname	= ipx_getname,
1970	.poll		= datagram_poll,
1971	.ioctl		= ipx_ioctl,
1972#ifdef CONFIG_COMPAT
1973	.compat_ioctl	= ipx_compat_ioctl,
1974#endif
1975	.listen		= sock_no_listen,
1976	.shutdown	= ipx_shutdown,
1977	.setsockopt	= ipx_setsockopt,
1978	.getsockopt	= ipx_getsockopt,
1979	.sendmsg	= ipx_sendmsg,
1980	.recvmsg	= ipx_recvmsg,
1981	.mmap		= sock_no_mmap,
1982	.sendpage	= sock_no_sendpage,
1983};
1984
1985static struct packet_type ipx_8023_packet_type __read_mostly = {
1986	.type		= cpu_to_be16(ETH_P_802_3),
1987	.func		= ipx_rcv,
1988};
1989
1990static struct packet_type ipx_dix_packet_type __read_mostly = {
1991	.type		= cpu_to_be16(ETH_P_IPX),
1992	.func		= ipx_rcv,
1993};
1994
1995static struct notifier_block ipx_dev_notifier = {
1996	.notifier_call	= ipxitf_device_event,
1997};
 
 
 
1998
1999static const unsigned char ipx_8022_type = 0xE0;
2000static const unsigned char ipx_snap_id[5] = { 0x0, 0x0, 0x0, 0x81, 0x37 };
2001static const char ipx_EII_err_msg[] __initconst =
2002	KERN_CRIT "IPX: Unable to register with Ethernet II\n";
2003static const char ipx_8023_err_msg[] __initconst =
2004	KERN_CRIT "IPX: Unable to register with 802.3\n";
2005static const char ipx_llc_err_msg[] __initconst =
2006	KERN_CRIT "IPX: Unable to register with 802.2\n";
2007static const char ipx_snap_err_msg[] __initconst =
2008	KERN_CRIT "IPX: Unable to register with SNAP\n";
2009
2010static int __init ipx_init(void)
2011{
2012	int rc = proto_register(&ipx_proto, 1);
2013
2014	if (rc != 0)
2015		goto out;
2016
2017	sock_register(&ipx_family_ops);
2018
2019	pEII_datalink = make_EII_client();
2020	if (pEII_datalink)
2021		dev_add_pack(&ipx_dix_packet_type);
2022	else
2023		printk(ipx_EII_err_msg);
2024
2025	p8023_datalink = make_8023_client();
2026	if (p8023_datalink)
2027		dev_add_pack(&ipx_8023_packet_type);
2028	else
2029		printk(ipx_8023_err_msg);
2030
2031	p8022_datalink = register_8022_client(ipx_8022_type, ipx_rcv);
2032	if (!p8022_datalink)
2033		printk(ipx_llc_err_msg);
2034
2035	pSNAP_datalink = register_snap_client(ipx_snap_id, ipx_rcv);
2036	if (!pSNAP_datalink)
2037		printk(ipx_snap_err_msg);
2038
2039	register_netdevice_notifier(&ipx_dev_notifier);
2040	ipx_register_sysctl();
2041	ipx_proc_init();
2042out:
2043	return rc;
2044}
2045
2046static void __exit ipx_proto_finito(void)
2047{
2048	ipx_proc_exit();
2049	ipx_unregister_sysctl();
2050
2051	unregister_netdevice_notifier(&ipx_dev_notifier);
2052
2053	ipxitf_cleanup();
2054
2055	if (pSNAP_datalink) {
2056		unregister_snap_client(pSNAP_datalink);
2057		pSNAP_datalink = NULL;
2058	}
2059
2060	if (p8022_datalink) {
2061		unregister_8022_client(p8022_datalink);
2062		p8022_datalink = NULL;
2063	}
2064
2065	dev_remove_pack(&ipx_8023_packet_type);
2066	if (p8023_datalink) {
2067		destroy_8023_client(p8023_datalink);
2068		p8023_datalink = NULL;
2069	}
2070
2071	dev_remove_pack(&ipx_dix_packet_type);
2072	if (pEII_datalink) {
2073		destroy_EII_client(pEII_datalink);
2074		pEII_datalink = NULL;
2075	}
2076
2077	proto_unregister(&ipx_proto);
2078	sock_unregister(ipx_family_ops.family);
2079}
2080
2081module_init(ipx_init);
2082module_exit(ipx_proto_finito);
2083MODULE_LICENSE("GPL");
2084MODULE_ALIAS_NETPROTO(PF_IPX);