Loading...
1/*
2 * IUCV protocol stack for Linux on zSeries
3 *
4 * Copyright IBM Corp. 2006, 2009
5 *
6 * Author(s): Jennifer Hunt <jenhunt@us.ibm.com>
7 * Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
8 * PM functions:
9 * Ursula Braun <ursula.braun@de.ibm.com>
10 */
11
12#define KMSG_COMPONENT "af_iucv"
13#define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
14
15#include <linux/module.h>
16#include <linux/types.h>
17#include <linux/list.h>
18#include <linux/errno.h>
19#include <linux/kernel.h>
20#include <linux/sched.h>
21#include <linux/slab.h>
22#include <linux/skbuff.h>
23#include <linux/init.h>
24#include <linux/poll.h>
25#include <net/sock.h>
26#include <asm/ebcdic.h>
27#include <asm/cpcmd.h>
28#include <linux/kmod.h>
29
30#include <net/iucv/af_iucv.h>
31
32#define VERSION "1.2"
33
34static char iucv_userid[80];
35
36static const struct proto_ops iucv_sock_ops;
37
38static struct proto iucv_proto = {
39 .name = "AF_IUCV",
40 .owner = THIS_MODULE,
41 .obj_size = sizeof(struct iucv_sock),
42};
43
44static struct iucv_interface *pr_iucv;
45
46/* special AF_IUCV IPRM messages */
47static const u8 iprm_shutdown[8] =
48 {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01};
49
50#define TRGCLS_SIZE (sizeof(((struct iucv_message *)0)->class))
51
52/* macros to set/get socket control buffer at correct offset */
53#define CB_TAG(skb) ((skb)->cb) /* iucv message tag */
54#define CB_TAG_LEN (sizeof(((struct iucv_message *) 0)->tag))
55#define CB_TRGCLS(skb) ((skb)->cb + CB_TAG_LEN) /* iucv msg target class */
56#define CB_TRGCLS_LEN (TRGCLS_SIZE)
57
58#define __iucv_sock_wait(sk, condition, timeo, ret) \
59do { \
60 DEFINE_WAIT(__wait); \
61 long __timeo = timeo; \
62 ret = 0; \
63 prepare_to_wait(sk_sleep(sk), &__wait, TASK_INTERRUPTIBLE); \
64 while (!(condition)) { \
65 if (!__timeo) { \
66 ret = -EAGAIN; \
67 break; \
68 } \
69 if (signal_pending(current)) { \
70 ret = sock_intr_errno(__timeo); \
71 break; \
72 } \
73 release_sock(sk); \
74 __timeo = schedule_timeout(__timeo); \
75 lock_sock(sk); \
76 ret = sock_error(sk); \
77 if (ret) \
78 break; \
79 } \
80 finish_wait(sk_sleep(sk), &__wait); \
81} while (0)
82
83#define iucv_sock_wait(sk, condition, timeo) \
84({ \
85 int __ret = 0; \
86 if (!(condition)) \
87 __iucv_sock_wait(sk, condition, timeo, __ret); \
88 __ret; \
89})
90
91static void iucv_sock_kill(struct sock *sk);
92static void iucv_sock_close(struct sock *sk);
93static void iucv_sever_path(struct sock *, int);
94
95static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
96 struct packet_type *pt, struct net_device *orig_dev);
97static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
98 struct sk_buff *skb, u8 flags);
99static void afiucv_hs_callback_txnotify(struct sk_buff *, enum iucv_tx_notify);
100
101/* Call Back functions */
102static void iucv_callback_rx(struct iucv_path *, struct iucv_message *);
103static void iucv_callback_txdone(struct iucv_path *, struct iucv_message *);
104static void iucv_callback_connack(struct iucv_path *, u8 ipuser[16]);
105static int iucv_callback_connreq(struct iucv_path *, u8 ipvmid[8],
106 u8 ipuser[16]);
107static void iucv_callback_connrej(struct iucv_path *, u8 ipuser[16]);
108static void iucv_callback_shutdown(struct iucv_path *, u8 ipuser[16]);
109
110static struct iucv_sock_list iucv_sk_list = {
111 .lock = __RW_LOCK_UNLOCKED(iucv_sk_list.lock),
112 .autobind_name = ATOMIC_INIT(0)
113};
114
115static struct iucv_handler af_iucv_handler = {
116 .path_pending = iucv_callback_connreq,
117 .path_complete = iucv_callback_connack,
118 .path_severed = iucv_callback_connrej,
119 .message_pending = iucv_callback_rx,
120 .message_complete = iucv_callback_txdone,
121 .path_quiesced = iucv_callback_shutdown,
122};
123
124static inline void high_nmcpy(unsigned char *dst, char *src)
125{
126 memcpy(dst, src, 8);
127}
128
129static inline void low_nmcpy(unsigned char *dst, char *src)
130{
131 memcpy(&dst[8], src, 8);
132}
133
134static int afiucv_pm_prepare(struct device *dev)
135{
136#ifdef CONFIG_PM_DEBUG
137 printk(KERN_WARNING "afiucv_pm_prepare\n");
138#endif
139 return 0;
140}
141
142static void afiucv_pm_complete(struct device *dev)
143{
144#ifdef CONFIG_PM_DEBUG
145 printk(KERN_WARNING "afiucv_pm_complete\n");
146#endif
147}
148
149/**
150 * afiucv_pm_freeze() - Freeze PM callback
151 * @dev: AFIUCV dummy device
152 *
153 * Sever all established IUCV communication pathes
154 */
155static int afiucv_pm_freeze(struct device *dev)
156{
157 struct iucv_sock *iucv;
158 struct sock *sk;
159 struct hlist_node *node;
160 int err = 0;
161
162#ifdef CONFIG_PM_DEBUG
163 printk(KERN_WARNING "afiucv_pm_freeze\n");
164#endif
165 read_lock(&iucv_sk_list.lock);
166 sk_for_each(sk, node, &iucv_sk_list.head) {
167 iucv = iucv_sk(sk);
168 switch (sk->sk_state) {
169 case IUCV_DISCONN:
170 case IUCV_CLOSING:
171 case IUCV_CONNECTED:
172 iucv_sever_path(sk, 0);
173 break;
174 case IUCV_OPEN:
175 case IUCV_BOUND:
176 case IUCV_LISTEN:
177 case IUCV_CLOSED:
178 default:
179 break;
180 }
181 skb_queue_purge(&iucv->send_skb_q);
182 skb_queue_purge(&iucv->backlog_skb_q);
183 }
184 read_unlock(&iucv_sk_list.lock);
185 return err;
186}
187
188/**
189 * afiucv_pm_restore_thaw() - Thaw and restore PM callback
190 * @dev: AFIUCV dummy device
191 *
192 * socket clean up after freeze
193 */
194static int afiucv_pm_restore_thaw(struct device *dev)
195{
196 struct sock *sk;
197 struct hlist_node *node;
198
199#ifdef CONFIG_PM_DEBUG
200 printk(KERN_WARNING "afiucv_pm_restore_thaw\n");
201#endif
202 read_lock(&iucv_sk_list.lock);
203 sk_for_each(sk, node, &iucv_sk_list.head) {
204 switch (sk->sk_state) {
205 case IUCV_CONNECTED:
206 sk->sk_err = EPIPE;
207 sk->sk_state = IUCV_DISCONN;
208 sk->sk_state_change(sk);
209 break;
210 case IUCV_DISCONN:
211 case IUCV_CLOSING:
212 case IUCV_LISTEN:
213 case IUCV_BOUND:
214 case IUCV_OPEN:
215 default:
216 break;
217 }
218 }
219 read_unlock(&iucv_sk_list.lock);
220 return 0;
221}
222
223static const struct dev_pm_ops afiucv_pm_ops = {
224 .prepare = afiucv_pm_prepare,
225 .complete = afiucv_pm_complete,
226 .freeze = afiucv_pm_freeze,
227 .thaw = afiucv_pm_restore_thaw,
228 .restore = afiucv_pm_restore_thaw,
229};
230
231static struct device_driver af_iucv_driver = {
232 .owner = THIS_MODULE,
233 .name = "afiucv",
234 .bus = NULL,
235 .pm = &afiucv_pm_ops,
236};
237
238/* dummy device used as trigger for PM functions */
239static struct device *af_iucv_dev;
240
241/**
242 * iucv_msg_length() - Returns the length of an iucv message.
243 * @msg: Pointer to struct iucv_message, MUST NOT be NULL
244 *
245 * The function returns the length of the specified iucv message @msg of data
246 * stored in a buffer and of data stored in the parameter list (PRMDATA).
247 *
248 * For IUCV_IPRMDATA, AF_IUCV uses the following convention to transport socket
249 * data:
250 * PRMDATA[0..6] socket data (max 7 bytes);
251 * PRMDATA[7] socket data length value (len is 0xff - PRMDATA[7])
252 *
253 * The socket data length is computed by subtracting the socket data length
254 * value from 0xFF.
255 * If the socket data len is greater 7, then PRMDATA can be used for special
256 * notifications (see iucv_sock_shutdown); and further,
257 * if the socket data len is > 7, the function returns 8.
258 *
259 * Use this function to allocate socket buffers to store iucv message data.
260 */
261static inline size_t iucv_msg_length(struct iucv_message *msg)
262{
263 size_t datalen;
264
265 if (msg->flags & IUCV_IPRMDATA) {
266 datalen = 0xff - msg->rmmsg[7];
267 return (datalen < 8) ? datalen : 8;
268 }
269 return msg->length;
270}
271
272/**
273 * iucv_sock_in_state() - check for specific states
274 * @sk: sock structure
275 * @state: first iucv sk state
276 * @state: second iucv sk state
277 *
278 * Returns true if the socket in either in the first or second state.
279 */
280static int iucv_sock_in_state(struct sock *sk, int state, int state2)
281{
282 return (sk->sk_state == state || sk->sk_state == state2);
283}
284
285/**
286 * iucv_below_msglim() - function to check if messages can be sent
287 * @sk: sock structure
288 *
289 * Returns true if the send queue length is lower than the message limit.
290 * Always returns true if the socket is not connected (no iucv path for
291 * checking the message limit).
292 */
293static inline int iucv_below_msglim(struct sock *sk)
294{
295 struct iucv_sock *iucv = iucv_sk(sk);
296
297 if (sk->sk_state != IUCV_CONNECTED)
298 return 1;
299 if (iucv->transport == AF_IUCV_TRANS_IUCV)
300 return (skb_queue_len(&iucv->send_skb_q) < iucv->path->msglim);
301 else
302 return ((atomic_read(&iucv->msg_sent) < iucv->msglimit_peer) &&
303 (atomic_read(&iucv->pendings) <= 0));
304}
305
306/**
307 * iucv_sock_wake_msglim() - Wake up thread waiting on msg limit
308 */
309static void iucv_sock_wake_msglim(struct sock *sk)
310{
311 struct socket_wq *wq;
312
313 rcu_read_lock();
314 wq = rcu_dereference(sk->sk_wq);
315 if (wq_has_sleeper(wq))
316 wake_up_interruptible_all(&wq->wait);
317 sk_wake_async(sk, SOCK_WAKE_SPACE, POLL_OUT);
318 rcu_read_unlock();
319}
320
321/**
322 * afiucv_hs_send() - send a message through HiperSockets transport
323 */
324static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
325 struct sk_buff *skb, u8 flags)
326{
327 struct iucv_sock *iucv = iucv_sk(sock);
328 struct af_iucv_trans_hdr *phs_hdr;
329 struct sk_buff *nskb;
330 int err, confirm_recv = 0;
331
332 memset(skb->head, 0, ETH_HLEN);
333 phs_hdr = (struct af_iucv_trans_hdr *)skb_push(skb,
334 sizeof(struct af_iucv_trans_hdr));
335 skb_reset_mac_header(skb);
336 skb_reset_network_header(skb);
337 skb_push(skb, ETH_HLEN);
338 skb_reset_mac_header(skb);
339 memset(phs_hdr, 0, sizeof(struct af_iucv_trans_hdr));
340
341 phs_hdr->magic = ETH_P_AF_IUCV;
342 phs_hdr->version = 1;
343 phs_hdr->flags = flags;
344 if (flags == AF_IUCV_FLAG_SYN)
345 phs_hdr->window = iucv->msglimit;
346 else if ((flags == AF_IUCV_FLAG_WIN) || !flags) {
347 confirm_recv = atomic_read(&iucv->msg_recv);
348 phs_hdr->window = confirm_recv;
349 if (confirm_recv)
350 phs_hdr->flags = phs_hdr->flags | AF_IUCV_FLAG_WIN;
351 }
352 memcpy(phs_hdr->destUserID, iucv->dst_user_id, 8);
353 memcpy(phs_hdr->destAppName, iucv->dst_name, 8);
354 memcpy(phs_hdr->srcUserID, iucv->src_user_id, 8);
355 memcpy(phs_hdr->srcAppName, iucv->src_name, 8);
356 ASCEBC(phs_hdr->destUserID, sizeof(phs_hdr->destUserID));
357 ASCEBC(phs_hdr->destAppName, sizeof(phs_hdr->destAppName));
358 ASCEBC(phs_hdr->srcUserID, sizeof(phs_hdr->srcUserID));
359 ASCEBC(phs_hdr->srcAppName, sizeof(phs_hdr->srcAppName));
360 if (imsg)
361 memcpy(&phs_hdr->iucv_hdr, imsg, sizeof(struct iucv_message));
362
363 skb->dev = iucv->hs_dev;
364 if (!skb->dev)
365 return -ENODEV;
366 if (!(skb->dev->flags & IFF_UP) || !netif_carrier_ok(skb->dev))
367 return -ENETDOWN;
368 if (skb->len > skb->dev->mtu) {
369 if (sock->sk_type == SOCK_SEQPACKET)
370 return -EMSGSIZE;
371 else
372 skb_trim(skb, skb->dev->mtu);
373 }
374 skb->protocol = ETH_P_AF_IUCV;
375 nskb = skb_clone(skb, GFP_ATOMIC);
376 if (!nskb)
377 return -ENOMEM;
378 skb_queue_tail(&iucv->send_skb_q, nskb);
379 err = dev_queue_xmit(skb);
380 if (net_xmit_eval(err)) {
381 skb_unlink(nskb, &iucv->send_skb_q);
382 kfree_skb(nskb);
383 } else {
384 atomic_sub(confirm_recv, &iucv->msg_recv);
385 WARN_ON(atomic_read(&iucv->msg_recv) < 0);
386 }
387 return net_xmit_eval(err);
388}
389
390static struct sock *__iucv_get_sock_by_name(char *nm)
391{
392 struct sock *sk;
393 struct hlist_node *node;
394
395 sk_for_each(sk, node, &iucv_sk_list.head)
396 if (!memcmp(&iucv_sk(sk)->src_name, nm, 8))
397 return sk;
398
399 return NULL;
400}
401
402static void iucv_sock_destruct(struct sock *sk)
403{
404 skb_queue_purge(&sk->sk_receive_queue);
405 skb_queue_purge(&sk->sk_error_queue);
406
407 sk_mem_reclaim(sk);
408
409 if (!sock_flag(sk, SOCK_DEAD)) {
410 pr_err("Attempt to release alive iucv socket %p\n", sk);
411 return;
412 }
413
414 WARN_ON(atomic_read(&sk->sk_rmem_alloc));
415 WARN_ON(atomic_read(&sk->sk_wmem_alloc));
416 WARN_ON(sk->sk_wmem_queued);
417 WARN_ON(sk->sk_forward_alloc);
418}
419
420/* Cleanup Listen */
421static void iucv_sock_cleanup_listen(struct sock *parent)
422{
423 struct sock *sk;
424
425 /* Close non-accepted connections */
426 while ((sk = iucv_accept_dequeue(parent, NULL))) {
427 iucv_sock_close(sk);
428 iucv_sock_kill(sk);
429 }
430
431 parent->sk_state = IUCV_CLOSED;
432}
433
434/* Kill socket (only if zapped and orphaned) */
435static void iucv_sock_kill(struct sock *sk)
436{
437 if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
438 return;
439
440 iucv_sock_unlink(&iucv_sk_list, sk);
441 sock_set_flag(sk, SOCK_DEAD);
442 sock_put(sk);
443}
444
445/* Terminate an IUCV path */
446static void iucv_sever_path(struct sock *sk, int with_user_data)
447{
448 unsigned char user_data[16];
449 struct iucv_sock *iucv = iucv_sk(sk);
450 struct iucv_path *path = iucv->path;
451
452 if (iucv->path) {
453 iucv->path = NULL;
454 if (with_user_data) {
455 low_nmcpy(user_data, iucv->src_name);
456 high_nmcpy(user_data, iucv->dst_name);
457 ASCEBC(user_data, sizeof(user_data));
458 pr_iucv->path_sever(path, user_data);
459 } else
460 pr_iucv->path_sever(path, NULL);
461 iucv_path_free(path);
462 }
463}
464
465/* Send FIN through an IUCV socket for HIPER transport */
466static int iucv_send_ctrl(struct sock *sk, u8 flags)
467{
468 int err = 0;
469 int blen;
470 struct sk_buff *skb;
471
472 blen = sizeof(struct af_iucv_trans_hdr) + ETH_HLEN;
473 skb = sock_alloc_send_skb(sk, blen, 1, &err);
474 if (skb) {
475 skb_reserve(skb, blen);
476 err = afiucv_hs_send(NULL, sk, skb, flags);
477 }
478 return err;
479}
480
481/* Close an IUCV socket */
482static void iucv_sock_close(struct sock *sk)
483{
484 struct iucv_sock *iucv = iucv_sk(sk);
485 unsigned long timeo;
486 int err = 0;
487
488 lock_sock(sk);
489
490 switch (sk->sk_state) {
491 case IUCV_LISTEN:
492 iucv_sock_cleanup_listen(sk);
493 break;
494
495 case IUCV_CONNECTED:
496 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
497 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
498 sk->sk_state = IUCV_DISCONN;
499 sk->sk_state_change(sk);
500 }
501 case IUCV_DISCONN: /* fall through */
502 sk->sk_state = IUCV_CLOSING;
503 sk->sk_state_change(sk);
504
505 if (!err && !skb_queue_empty(&iucv->send_skb_q)) {
506 if (sock_flag(sk, SOCK_LINGER) && sk->sk_lingertime)
507 timeo = sk->sk_lingertime;
508 else
509 timeo = IUCV_DISCONN_TIMEOUT;
510 iucv_sock_wait(sk,
511 iucv_sock_in_state(sk, IUCV_CLOSED, 0),
512 timeo);
513 }
514
515 case IUCV_CLOSING: /* fall through */
516 sk->sk_state = IUCV_CLOSED;
517 sk->sk_state_change(sk);
518
519 sk->sk_err = ECONNRESET;
520 sk->sk_state_change(sk);
521
522 skb_queue_purge(&iucv->send_skb_q);
523 skb_queue_purge(&iucv->backlog_skb_q);
524
525 default: /* fall through */
526 iucv_sever_path(sk, 1);
527 }
528
529 if (iucv->hs_dev) {
530 dev_put(iucv->hs_dev);
531 iucv->hs_dev = NULL;
532 sk->sk_bound_dev_if = 0;
533 }
534
535 /* mark socket for deletion by iucv_sock_kill() */
536 sock_set_flag(sk, SOCK_ZAPPED);
537
538 release_sock(sk);
539}
540
541static void iucv_sock_init(struct sock *sk, struct sock *parent)
542{
543 if (parent)
544 sk->sk_type = parent->sk_type;
545}
546
547static struct sock *iucv_sock_alloc(struct socket *sock, int proto, gfp_t prio)
548{
549 struct sock *sk;
550 struct iucv_sock *iucv;
551
552 sk = sk_alloc(&init_net, PF_IUCV, prio, &iucv_proto);
553 if (!sk)
554 return NULL;
555 iucv = iucv_sk(sk);
556
557 sock_init_data(sock, sk);
558 INIT_LIST_HEAD(&iucv->accept_q);
559 spin_lock_init(&iucv->accept_q_lock);
560 skb_queue_head_init(&iucv->send_skb_q);
561 INIT_LIST_HEAD(&iucv->message_q.list);
562 spin_lock_init(&iucv->message_q.lock);
563 skb_queue_head_init(&iucv->backlog_skb_q);
564 iucv->send_tag = 0;
565 atomic_set(&iucv->pendings, 0);
566 iucv->flags = 0;
567 iucv->msglimit = 0;
568 atomic_set(&iucv->msg_sent, 0);
569 atomic_set(&iucv->msg_recv, 0);
570 iucv->path = NULL;
571 iucv->sk_txnotify = afiucv_hs_callback_txnotify;
572 memset(&iucv->src_user_id , 0, 32);
573 if (pr_iucv)
574 iucv->transport = AF_IUCV_TRANS_IUCV;
575 else
576 iucv->transport = AF_IUCV_TRANS_HIPER;
577
578 sk->sk_destruct = iucv_sock_destruct;
579 sk->sk_sndtimeo = IUCV_CONN_TIMEOUT;
580 sk->sk_allocation = GFP_DMA;
581
582 sock_reset_flag(sk, SOCK_ZAPPED);
583
584 sk->sk_protocol = proto;
585 sk->sk_state = IUCV_OPEN;
586
587 iucv_sock_link(&iucv_sk_list, sk);
588 return sk;
589}
590
591/* Create an IUCV socket */
592static int iucv_sock_create(struct net *net, struct socket *sock, int protocol,
593 int kern)
594{
595 struct sock *sk;
596
597 if (protocol && protocol != PF_IUCV)
598 return -EPROTONOSUPPORT;
599
600 sock->state = SS_UNCONNECTED;
601
602 switch (sock->type) {
603 case SOCK_STREAM:
604 sock->ops = &iucv_sock_ops;
605 break;
606 case SOCK_SEQPACKET:
607 /* currently, proto ops can handle both sk types */
608 sock->ops = &iucv_sock_ops;
609 break;
610 default:
611 return -ESOCKTNOSUPPORT;
612 }
613
614 sk = iucv_sock_alloc(sock, protocol, GFP_KERNEL);
615 if (!sk)
616 return -ENOMEM;
617
618 iucv_sock_init(sk, NULL);
619
620 return 0;
621}
622
623void iucv_sock_link(struct iucv_sock_list *l, struct sock *sk)
624{
625 write_lock_bh(&l->lock);
626 sk_add_node(sk, &l->head);
627 write_unlock_bh(&l->lock);
628}
629
630void iucv_sock_unlink(struct iucv_sock_list *l, struct sock *sk)
631{
632 write_lock_bh(&l->lock);
633 sk_del_node_init(sk);
634 write_unlock_bh(&l->lock);
635}
636
637void iucv_accept_enqueue(struct sock *parent, struct sock *sk)
638{
639 unsigned long flags;
640 struct iucv_sock *par = iucv_sk(parent);
641
642 sock_hold(sk);
643 spin_lock_irqsave(&par->accept_q_lock, flags);
644 list_add_tail(&iucv_sk(sk)->accept_q, &par->accept_q);
645 spin_unlock_irqrestore(&par->accept_q_lock, flags);
646 iucv_sk(sk)->parent = parent;
647 sk_acceptq_added(parent);
648}
649
650void iucv_accept_unlink(struct sock *sk)
651{
652 unsigned long flags;
653 struct iucv_sock *par = iucv_sk(iucv_sk(sk)->parent);
654
655 spin_lock_irqsave(&par->accept_q_lock, flags);
656 list_del_init(&iucv_sk(sk)->accept_q);
657 spin_unlock_irqrestore(&par->accept_q_lock, flags);
658 sk_acceptq_removed(iucv_sk(sk)->parent);
659 iucv_sk(sk)->parent = NULL;
660 sock_put(sk);
661}
662
663struct sock *iucv_accept_dequeue(struct sock *parent, struct socket *newsock)
664{
665 struct iucv_sock *isk, *n;
666 struct sock *sk;
667
668 list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
669 sk = (struct sock *) isk;
670 lock_sock(sk);
671
672 if (sk->sk_state == IUCV_CLOSED) {
673 iucv_accept_unlink(sk);
674 release_sock(sk);
675 continue;
676 }
677
678 if (sk->sk_state == IUCV_CONNECTED ||
679 sk->sk_state == IUCV_DISCONN ||
680 !newsock) {
681 iucv_accept_unlink(sk);
682 if (newsock)
683 sock_graft(sk, newsock);
684
685 release_sock(sk);
686 return sk;
687 }
688
689 release_sock(sk);
690 }
691 return NULL;
692}
693
694/* Bind an unbound socket */
695static int iucv_sock_bind(struct socket *sock, struct sockaddr *addr,
696 int addr_len)
697{
698 struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
699 struct sock *sk = sock->sk;
700 struct iucv_sock *iucv;
701 int err = 0;
702 struct net_device *dev;
703 char uid[9];
704
705 /* Verify the input sockaddr */
706 if (!addr || addr->sa_family != AF_IUCV)
707 return -EINVAL;
708
709 lock_sock(sk);
710 if (sk->sk_state != IUCV_OPEN) {
711 err = -EBADFD;
712 goto done;
713 }
714
715 write_lock_bh(&iucv_sk_list.lock);
716
717 iucv = iucv_sk(sk);
718 if (__iucv_get_sock_by_name(sa->siucv_name)) {
719 err = -EADDRINUSE;
720 goto done_unlock;
721 }
722 if (iucv->path)
723 goto done_unlock;
724
725 /* Bind the socket */
726 if (pr_iucv)
727 if (!memcmp(sa->siucv_user_id, iucv_userid, 8))
728 goto vm_bind; /* VM IUCV transport */
729
730 /* try hiper transport */
731 memcpy(uid, sa->siucv_user_id, sizeof(uid));
732 ASCEBC(uid, 8);
733 rcu_read_lock();
734 for_each_netdev_rcu(&init_net, dev) {
735 if (!memcmp(dev->perm_addr, uid, 8)) {
736 memcpy(iucv->src_name, sa->siucv_name, 8);
737 memcpy(iucv->src_user_id, sa->siucv_user_id, 8);
738 sk->sk_bound_dev_if = dev->ifindex;
739 iucv->hs_dev = dev;
740 dev_hold(dev);
741 sk->sk_state = IUCV_BOUND;
742 iucv->transport = AF_IUCV_TRANS_HIPER;
743 if (!iucv->msglimit)
744 iucv->msglimit = IUCV_HIPER_MSGLIM_DEFAULT;
745 rcu_read_unlock();
746 goto done_unlock;
747 }
748 }
749 rcu_read_unlock();
750vm_bind:
751 if (pr_iucv) {
752 /* use local userid for backward compat */
753 memcpy(iucv->src_name, sa->siucv_name, 8);
754 memcpy(iucv->src_user_id, iucv_userid, 8);
755 sk->sk_state = IUCV_BOUND;
756 iucv->transport = AF_IUCV_TRANS_IUCV;
757 if (!iucv->msglimit)
758 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
759 goto done_unlock;
760 }
761 /* found no dev to bind */
762 err = -ENODEV;
763done_unlock:
764 /* Release the socket list lock */
765 write_unlock_bh(&iucv_sk_list.lock);
766done:
767 release_sock(sk);
768 return err;
769}
770
771/* Automatically bind an unbound socket */
772static int iucv_sock_autobind(struct sock *sk)
773{
774 struct iucv_sock *iucv = iucv_sk(sk);
775 char name[12];
776 int err = 0;
777
778 if (unlikely(!pr_iucv))
779 return -EPROTO;
780
781 memcpy(iucv->src_user_id, iucv_userid, 8);
782
783 write_lock_bh(&iucv_sk_list.lock);
784
785 sprintf(name, "%08x", atomic_inc_return(&iucv_sk_list.autobind_name));
786 while (__iucv_get_sock_by_name(name)) {
787 sprintf(name, "%08x",
788 atomic_inc_return(&iucv_sk_list.autobind_name));
789 }
790
791 write_unlock_bh(&iucv_sk_list.lock);
792
793 memcpy(&iucv->src_name, name, 8);
794
795 if (!iucv->msglimit)
796 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
797
798 return err;
799}
800
801static int afiucv_path_connect(struct socket *sock, struct sockaddr *addr)
802{
803 struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
804 struct sock *sk = sock->sk;
805 struct iucv_sock *iucv = iucv_sk(sk);
806 unsigned char user_data[16];
807 int err;
808
809 high_nmcpy(user_data, sa->siucv_name);
810 low_nmcpy(user_data, iucv->src_name);
811 ASCEBC(user_data, sizeof(user_data));
812
813 /* Create path. */
814 iucv->path = iucv_path_alloc(iucv->msglimit,
815 IUCV_IPRMDATA, GFP_KERNEL);
816 if (!iucv->path) {
817 err = -ENOMEM;
818 goto done;
819 }
820 err = pr_iucv->path_connect(iucv->path, &af_iucv_handler,
821 sa->siucv_user_id, NULL, user_data,
822 sk);
823 if (err) {
824 iucv_path_free(iucv->path);
825 iucv->path = NULL;
826 switch (err) {
827 case 0x0b: /* Target communicator is not logged on */
828 err = -ENETUNREACH;
829 break;
830 case 0x0d: /* Max connections for this guest exceeded */
831 case 0x0e: /* Max connections for target guest exceeded */
832 err = -EAGAIN;
833 break;
834 case 0x0f: /* Missing IUCV authorization */
835 err = -EACCES;
836 break;
837 default:
838 err = -ECONNREFUSED;
839 break;
840 }
841 }
842done:
843 return err;
844}
845
846/* Connect an unconnected socket */
847static int iucv_sock_connect(struct socket *sock, struct sockaddr *addr,
848 int alen, int flags)
849{
850 struct sockaddr_iucv *sa = (struct sockaddr_iucv *) addr;
851 struct sock *sk = sock->sk;
852 struct iucv_sock *iucv = iucv_sk(sk);
853 int err;
854
855 if (addr->sa_family != AF_IUCV || alen < sizeof(struct sockaddr_iucv))
856 return -EINVAL;
857
858 if (sk->sk_state != IUCV_OPEN && sk->sk_state != IUCV_BOUND)
859 return -EBADFD;
860
861 if (sk->sk_state == IUCV_OPEN &&
862 iucv->transport == AF_IUCV_TRANS_HIPER)
863 return -EBADFD; /* explicit bind required */
864
865 if (sk->sk_type != SOCK_STREAM && sk->sk_type != SOCK_SEQPACKET)
866 return -EINVAL;
867
868 if (sk->sk_state == IUCV_OPEN) {
869 err = iucv_sock_autobind(sk);
870 if (unlikely(err))
871 return err;
872 }
873
874 lock_sock(sk);
875
876 /* Set the destination information */
877 memcpy(iucv->dst_user_id, sa->siucv_user_id, 8);
878 memcpy(iucv->dst_name, sa->siucv_name, 8);
879
880 if (iucv->transport == AF_IUCV_TRANS_HIPER)
881 err = iucv_send_ctrl(sock->sk, AF_IUCV_FLAG_SYN);
882 else
883 err = afiucv_path_connect(sock, addr);
884 if (err)
885 goto done;
886
887 if (sk->sk_state != IUCV_CONNECTED)
888 err = iucv_sock_wait(sk, iucv_sock_in_state(sk, IUCV_CONNECTED,
889 IUCV_DISCONN),
890 sock_sndtimeo(sk, flags & O_NONBLOCK));
891
892 if (sk->sk_state == IUCV_DISCONN || sk->sk_state == IUCV_CLOSED)
893 err = -ECONNREFUSED;
894
895 if (err && iucv->transport == AF_IUCV_TRANS_IUCV)
896 iucv_sever_path(sk, 0);
897
898done:
899 release_sock(sk);
900 return err;
901}
902
903/* Move a socket into listening state. */
904static int iucv_sock_listen(struct socket *sock, int backlog)
905{
906 struct sock *sk = sock->sk;
907 int err;
908
909 lock_sock(sk);
910
911 err = -EINVAL;
912 if (sk->sk_state != IUCV_BOUND)
913 goto done;
914
915 if (sock->type != SOCK_STREAM && sock->type != SOCK_SEQPACKET)
916 goto done;
917
918 sk->sk_max_ack_backlog = backlog;
919 sk->sk_ack_backlog = 0;
920 sk->sk_state = IUCV_LISTEN;
921 err = 0;
922
923done:
924 release_sock(sk);
925 return err;
926}
927
928/* Accept a pending connection */
929static int iucv_sock_accept(struct socket *sock, struct socket *newsock,
930 int flags)
931{
932 DECLARE_WAITQUEUE(wait, current);
933 struct sock *sk = sock->sk, *nsk;
934 long timeo;
935 int err = 0;
936
937 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
938
939 if (sk->sk_state != IUCV_LISTEN) {
940 err = -EBADFD;
941 goto done;
942 }
943
944 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
945
946 /* Wait for an incoming connection */
947 add_wait_queue_exclusive(sk_sleep(sk), &wait);
948 while (!(nsk = iucv_accept_dequeue(sk, newsock))) {
949 set_current_state(TASK_INTERRUPTIBLE);
950 if (!timeo) {
951 err = -EAGAIN;
952 break;
953 }
954
955 release_sock(sk);
956 timeo = schedule_timeout(timeo);
957 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
958
959 if (sk->sk_state != IUCV_LISTEN) {
960 err = -EBADFD;
961 break;
962 }
963
964 if (signal_pending(current)) {
965 err = sock_intr_errno(timeo);
966 break;
967 }
968 }
969
970 set_current_state(TASK_RUNNING);
971 remove_wait_queue(sk_sleep(sk), &wait);
972
973 if (err)
974 goto done;
975
976 newsock->state = SS_CONNECTED;
977
978done:
979 release_sock(sk);
980 return err;
981}
982
983static int iucv_sock_getname(struct socket *sock, struct sockaddr *addr,
984 int *len, int peer)
985{
986 struct sockaddr_iucv *siucv = (struct sockaddr_iucv *) addr;
987 struct sock *sk = sock->sk;
988 struct iucv_sock *iucv = iucv_sk(sk);
989
990 addr->sa_family = AF_IUCV;
991 *len = sizeof(struct sockaddr_iucv);
992
993 if (peer) {
994 memcpy(siucv->siucv_user_id, iucv->dst_user_id, 8);
995 memcpy(siucv->siucv_name, iucv->dst_name, 8);
996 } else {
997 memcpy(siucv->siucv_user_id, iucv->src_user_id, 8);
998 memcpy(siucv->siucv_name, iucv->src_name, 8);
999 }
1000 memset(&siucv->siucv_port, 0, sizeof(siucv->siucv_port));
1001 memset(&siucv->siucv_addr, 0, sizeof(siucv->siucv_addr));
1002 memset(&siucv->siucv_nodeid, 0, sizeof(siucv->siucv_nodeid));
1003
1004 return 0;
1005}
1006
1007/**
1008 * iucv_send_iprm() - Send socket data in parameter list of an iucv message.
1009 * @path: IUCV path
1010 * @msg: Pointer to a struct iucv_message
1011 * @skb: The socket data to send, skb->len MUST BE <= 7
1012 *
1013 * Send the socket data in the parameter list in the iucv message
1014 * (IUCV_IPRMDATA). The socket data is stored at index 0 to 6 in the parameter
1015 * list and the socket data len at index 7 (last byte).
1016 * See also iucv_msg_length().
1017 *
1018 * Returns the error code from the iucv_message_send() call.
1019 */
1020static int iucv_send_iprm(struct iucv_path *path, struct iucv_message *msg,
1021 struct sk_buff *skb)
1022{
1023 u8 prmdata[8];
1024
1025 memcpy(prmdata, (void *) skb->data, skb->len);
1026 prmdata[7] = 0xff - (u8) skb->len;
1027 return pr_iucv->message_send(path, msg, IUCV_IPRMDATA, 0,
1028 (void *) prmdata, 8);
1029}
1030
1031static int iucv_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
1032 struct msghdr *msg, size_t len)
1033{
1034 struct sock *sk = sock->sk;
1035 struct iucv_sock *iucv = iucv_sk(sk);
1036 struct sk_buff *skb;
1037 struct iucv_message txmsg;
1038 struct cmsghdr *cmsg;
1039 int cmsg_done;
1040 long timeo;
1041 char user_id[9];
1042 char appl_id[9];
1043 int err;
1044 int noblock = msg->msg_flags & MSG_DONTWAIT;
1045
1046 err = sock_error(sk);
1047 if (err)
1048 return err;
1049
1050 if (msg->msg_flags & MSG_OOB)
1051 return -EOPNOTSUPP;
1052
1053 /* SOCK_SEQPACKET: we do not support segmented records */
1054 if (sk->sk_type == SOCK_SEQPACKET && !(msg->msg_flags & MSG_EOR))
1055 return -EOPNOTSUPP;
1056
1057 lock_sock(sk);
1058
1059 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1060 err = -EPIPE;
1061 goto out;
1062 }
1063
1064 /* Return if the socket is not in connected state */
1065 if (sk->sk_state != IUCV_CONNECTED) {
1066 err = -ENOTCONN;
1067 goto out;
1068 }
1069
1070 /* initialize defaults */
1071 cmsg_done = 0; /* check for duplicate headers */
1072 txmsg.class = 0;
1073
1074 /* iterate over control messages */
1075 for (cmsg = CMSG_FIRSTHDR(msg); cmsg;
1076 cmsg = CMSG_NXTHDR(msg, cmsg)) {
1077
1078 if (!CMSG_OK(msg, cmsg)) {
1079 err = -EINVAL;
1080 goto out;
1081 }
1082
1083 if (cmsg->cmsg_level != SOL_IUCV)
1084 continue;
1085
1086 if (cmsg->cmsg_type & cmsg_done) {
1087 err = -EINVAL;
1088 goto out;
1089 }
1090 cmsg_done |= cmsg->cmsg_type;
1091
1092 switch (cmsg->cmsg_type) {
1093 case SCM_IUCV_TRGCLS:
1094 if (cmsg->cmsg_len != CMSG_LEN(TRGCLS_SIZE)) {
1095 err = -EINVAL;
1096 goto out;
1097 }
1098
1099 /* set iucv message target class */
1100 memcpy(&txmsg.class,
1101 (void *) CMSG_DATA(cmsg), TRGCLS_SIZE);
1102
1103 break;
1104
1105 default:
1106 err = -EINVAL;
1107 goto out;
1108 break;
1109 }
1110 }
1111
1112 /* allocate one skb for each iucv message:
1113 * this is fine for SOCK_SEQPACKET (unless we want to support
1114 * segmented records using the MSG_EOR flag), but
1115 * for SOCK_STREAM we might want to improve it in future */
1116 if (iucv->transport == AF_IUCV_TRANS_HIPER)
1117 skb = sock_alloc_send_skb(sk,
1118 len + sizeof(struct af_iucv_trans_hdr) + ETH_HLEN,
1119 noblock, &err);
1120 else
1121 skb = sock_alloc_send_skb(sk, len, noblock, &err);
1122 if (!skb) {
1123 err = -ENOMEM;
1124 goto out;
1125 }
1126 if (iucv->transport == AF_IUCV_TRANS_HIPER)
1127 skb_reserve(skb, sizeof(struct af_iucv_trans_hdr) + ETH_HLEN);
1128 if (memcpy_fromiovec(skb_put(skb, len), msg->msg_iov, len)) {
1129 err = -EFAULT;
1130 goto fail;
1131 }
1132
1133 /* wait if outstanding messages for iucv path has reached */
1134 timeo = sock_sndtimeo(sk, noblock);
1135 err = iucv_sock_wait(sk, iucv_below_msglim(sk), timeo);
1136 if (err)
1137 goto fail;
1138
1139 /* return -ECONNRESET if the socket is no longer connected */
1140 if (sk->sk_state != IUCV_CONNECTED) {
1141 err = -ECONNRESET;
1142 goto fail;
1143 }
1144
1145 /* increment and save iucv message tag for msg_completion cbk */
1146 txmsg.tag = iucv->send_tag++;
1147 memcpy(CB_TAG(skb), &txmsg.tag, CB_TAG_LEN);
1148
1149 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1150 atomic_inc(&iucv->msg_sent);
1151 err = afiucv_hs_send(&txmsg, sk, skb, 0);
1152 if (err) {
1153 atomic_dec(&iucv->msg_sent);
1154 goto fail;
1155 }
1156 goto release;
1157 }
1158 skb_queue_tail(&iucv->send_skb_q, skb);
1159
1160 if (((iucv->path->flags & IUCV_IPRMDATA) & iucv->flags)
1161 && skb->len <= 7) {
1162 err = iucv_send_iprm(iucv->path, &txmsg, skb);
1163
1164 /* on success: there is no message_complete callback
1165 * for an IPRMDATA msg; remove skb from send queue */
1166 if (err == 0) {
1167 skb_unlink(skb, &iucv->send_skb_q);
1168 kfree_skb(skb);
1169 }
1170
1171 /* this error should never happen since the
1172 * IUCV_IPRMDATA path flag is set... sever path */
1173 if (err == 0x15) {
1174 pr_iucv->path_sever(iucv->path, NULL);
1175 skb_unlink(skb, &iucv->send_skb_q);
1176 err = -EPIPE;
1177 goto fail;
1178 }
1179 } else
1180 err = pr_iucv->message_send(iucv->path, &txmsg, 0, 0,
1181 (void *) skb->data, skb->len);
1182 if (err) {
1183 if (err == 3) {
1184 user_id[8] = 0;
1185 memcpy(user_id, iucv->dst_user_id, 8);
1186 appl_id[8] = 0;
1187 memcpy(appl_id, iucv->dst_name, 8);
1188 pr_err("Application %s on z/VM guest %s"
1189 " exceeds message limit\n",
1190 appl_id, user_id);
1191 err = -EAGAIN;
1192 } else
1193 err = -EPIPE;
1194 skb_unlink(skb, &iucv->send_skb_q);
1195 goto fail;
1196 }
1197
1198release:
1199 release_sock(sk);
1200 return len;
1201
1202fail:
1203 kfree_skb(skb);
1204out:
1205 release_sock(sk);
1206 return err;
1207}
1208
1209/* iucv_fragment_skb() - Fragment a single IUCV message into multiple skb's
1210 *
1211 * Locking: must be called with message_q.lock held
1212 */
1213static int iucv_fragment_skb(struct sock *sk, struct sk_buff *skb, int len)
1214{
1215 int dataleft, size, copied = 0;
1216 struct sk_buff *nskb;
1217
1218 dataleft = len;
1219 while (dataleft) {
1220 if (dataleft >= sk->sk_rcvbuf / 4)
1221 size = sk->sk_rcvbuf / 4;
1222 else
1223 size = dataleft;
1224
1225 nskb = alloc_skb(size, GFP_ATOMIC | GFP_DMA);
1226 if (!nskb)
1227 return -ENOMEM;
1228
1229 /* copy target class to control buffer of new skb */
1230 memcpy(CB_TRGCLS(nskb), CB_TRGCLS(skb), CB_TRGCLS_LEN);
1231
1232 /* copy data fragment */
1233 memcpy(nskb->data, skb->data + copied, size);
1234 copied += size;
1235 dataleft -= size;
1236
1237 skb_reset_transport_header(nskb);
1238 skb_reset_network_header(nskb);
1239 nskb->len = size;
1240
1241 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, nskb);
1242 }
1243
1244 return 0;
1245}
1246
1247/* iucv_process_message() - Receive a single outstanding IUCV message
1248 *
1249 * Locking: must be called with message_q.lock held
1250 */
1251static void iucv_process_message(struct sock *sk, struct sk_buff *skb,
1252 struct iucv_path *path,
1253 struct iucv_message *msg)
1254{
1255 int rc;
1256 unsigned int len;
1257
1258 len = iucv_msg_length(msg);
1259
1260 /* store msg target class in the second 4 bytes of skb ctrl buffer */
1261 /* Note: the first 4 bytes are reserved for msg tag */
1262 memcpy(CB_TRGCLS(skb), &msg->class, CB_TRGCLS_LEN);
1263
1264 /* check for special IPRM messages (e.g. iucv_sock_shutdown) */
1265 if ((msg->flags & IUCV_IPRMDATA) && len > 7) {
1266 if (memcmp(msg->rmmsg, iprm_shutdown, 8) == 0) {
1267 skb->data = NULL;
1268 skb->len = 0;
1269 }
1270 } else {
1271 rc = pr_iucv->message_receive(path, msg,
1272 msg->flags & IUCV_IPRMDATA,
1273 skb->data, len, NULL);
1274 if (rc) {
1275 kfree_skb(skb);
1276 return;
1277 }
1278 /* we need to fragment iucv messages for SOCK_STREAM only;
1279 * for SOCK_SEQPACKET, it is only relevant if we support
1280 * record segmentation using MSG_EOR (see also recvmsg()) */
1281 if (sk->sk_type == SOCK_STREAM &&
1282 skb->truesize >= sk->sk_rcvbuf / 4) {
1283 rc = iucv_fragment_skb(sk, skb, len);
1284 kfree_skb(skb);
1285 skb = NULL;
1286 if (rc) {
1287 pr_iucv->path_sever(path, NULL);
1288 return;
1289 }
1290 skb = skb_dequeue(&iucv_sk(sk)->backlog_skb_q);
1291 } else {
1292 skb_reset_transport_header(skb);
1293 skb_reset_network_header(skb);
1294 skb->len = len;
1295 }
1296 }
1297
1298 if (sock_queue_rcv_skb(sk, skb))
1299 skb_queue_head(&iucv_sk(sk)->backlog_skb_q, skb);
1300}
1301
1302/* iucv_process_message_q() - Process outstanding IUCV messages
1303 *
1304 * Locking: must be called with message_q.lock held
1305 */
1306static void iucv_process_message_q(struct sock *sk)
1307{
1308 struct iucv_sock *iucv = iucv_sk(sk);
1309 struct sk_buff *skb;
1310 struct sock_msg_q *p, *n;
1311
1312 list_for_each_entry_safe(p, n, &iucv->message_q.list, list) {
1313 skb = alloc_skb(iucv_msg_length(&p->msg), GFP_ATOMIC | GFP_DMA);
1314 if (!skb)
1315 break;
1316 iucv_process_message(sk, skb, p->path, &p->msg);
1317 list_del(&p->list);
1318 kfree(p);
1319 if (!skb_queue_empty(&iucv->backlog_skb_q))
1320 break;
1321 }
1322}
1323
1324static int iucv_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
1325 struct msghdr *msg, size_t len, int flags)
1326{
1327 int noblock = flags & MSG_DONTWAIT;
1328 struct sock *sk = sock->sk;
1329 struct iucv_sock *iucv = iucv_sk(sk);
1330 unsigned int copied, rlen;
1331 struct sk_buff *skb, *rskb, *cskb;
1332 int err = 0;
1333
1334 if ((sk->sk_state == IUCV_DISCONN) &&
1335 skb_queue_empty(&iucv->backlog_skb_q) &&
1336 skb_queue_empty(&sk->sk_receive_queue) &&
1337 list_empty(&iucv->message_q.list))
1338 return 0;
1339
1340 if (flags & (MSG_OOB))
1341 return -EOPNOTSUPP;
1342
1343 /* receive/dequeue next skb:
1344 * the function understands MSG_PEEK and, thus, does not dequeue skb */
1345 skb = skb_recv_datagram(sk, flags, noblock, &err);
1346 if (!skb) {
1347 if (sk->sk_shutdown & RCV_SHUTDOWN)
1348 return 0;
1349 return err;
1350 }
1351
1352 rlen = skb->len; /* real length of skb */
1353 copied = min_t(unsigned int, rlen, len);
1354 if (!rlen)
1355 sk->sk_shutdown = sk->sk_shutdown | RCV_SHUTDOWN;
1356
1357 cskb = skb;
1358 if (skb_copy_datagram_iovec(cskb, 0, msg->msg_iov, copied)) {
1359 if (!(flags & MSG_PEEK))
1360 skb_queue_head(&sk->sk_receive_queue, skb);
1361 return -EFAULT;
1362 }
1363
1364 /* SOCK_SEQPACKET: set MSG_TRUNC if recv buf size is too small */
1365 if (sk->sk_type == SOCK_SEQPACKET) {
1366 if (copied < rlen)
1367 msg->msg_flags |= MSG_TRUNC;
1368 /* each iucv message contains a complete record */
1369 msg->msg_flags |= MSG_EOR;
1370 }
1371
1372 /* create control message to store iucv msg target class:
1373 * get the trgcls from the control buffer of the skb due to
1374 * fragmentation of original iucv message. */
1375 err = put_cmsg(msg, SOL_IUCV, SCM_IUCV_TRGCLS,
1376 CB_TRGCLS_LEN, CB_TRGCLS(skb));
1377 if (err) {
1378 if (!(flags & MSG_PEEK))
1379 skb_queue_head(&sk->sk_receive_queue, skb);
1380 return err;
1381 }
1382
1383 /* Mark read part of skb as used */
1384 if (!(flags & MSG_PEEK)) {
1385
1386 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
1387 if (sk->sk_type == SOCK_STREAM) {
1388 skb_pull(skb, copied);
1389 if (skb->len) {
1390 skb_queue_head(&sk->sk_receive_queue, skb);
1391 goto done;
1392 }
1393 }
1394
1395 kfree_skb(skb);
1396 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1397 atomic_inc(&iucv->msg_recv);
1398 if (atomic_read(&iucv->msg_recv) > iucv->msglimit) {
1399 WARN_ON(1);
1400 iucv_sock_close(sk);
1401 return -EFAULT;
1402 }
1403 }
1404
1405 /* Queue backlog skbs */
1406 spin_lock_bh(&iucv->message_q.lock);
1407 rskb = skb_dequeue(&iucv->backlog_skb_q);
1408 while (rskb) {
1409 if (sock_queue_rcv_skb(sk, rskb)) {
1410 skb_queue_head(&iucv->backlog_skb_q,
1411 rskb);
1412 break;
1413 } else {
1414 rskb = skb_dequeue(&iucv->backlog_skb_q);
1415 }
1416 }
1417 if (skb_queue_empty(&iucv->backlog_skb_q)) {
1418 if (!list_empty(&iucv->message_q.list))
1419 iucv_process_message_q(sk);
1420 if (atomic_read(&iucv->msg_recv) >=
1421 iucv->msglimit / 2) {
1422 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_WIN);
1423 if (err) {
1424 sk->sk_state = IUCV_DISCONN;
1425 sk->sk_state_change(sk);
1426 }
1427 }
1428 }
1429 spin_unlock_bh(&iucv->message_q.lock);
1430 }
1431
1432done:
1433 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
1434 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
1435 copied = rlen;
1436
1437 return copied;
1438}
1439
1440static inline unsigned int iucv_accept_poll(struct sock *parent)
1441{
1442 struct iucv_sock *isk, *n;
1443 struct sock *sk;
1444
1445 list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
1446 sk = (struct sock *) isk;
1447
1448 if (sk->sk_state == IUCV_CONNECTED)
1449 return POLLIN | POLLRDNORM;
1450 }
1451
1452 return 0;
1453}
1454
1455unsigned int iucv_sock_poll(struct file *file, struct socket *sock,
1456 poll_table *wait)
1457{
1458 struct sock *sk = sock->sk;
1459 unsigned int mask = 0;
1460
1461 sock_poll_wait(file, sk_sleep(sk), wait);
1462
1463 if (sk->sk_state == IUCV_LISTEN)
1464 return iucv_accept_poll(sk);
1465
1466 if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
1467 mask |= POLLERR;
1468
1469 if (sk->sk_shutdown & RCV_SHUTDOWN)
1470 mask |= POLLRDHUP;
1471
1472 if (sk->sk_shutdown == SHUTDOWN_MASK)
1473 mask |= POLLHUP;
1474
1475 if (!skb_queue_empty(&sk->sk_receive_queue) ||
1476 (sk->sk_shutdown & RCV_SHUTDOWN))
1477 mask |= POLLIN | POLLRDNORM;
1478
1479 if (sk->sk_state == IUCV_CLOSED)
1480 mask |= POLLHUP;
1481
1482 if (sk->sk_state == IUCV_DISCONN)
1483 mask |= POLLIN;
1484
1485 if (sock_writeable(sk) && iucv_below_msglim(sk))
1486 mask |= POLLOUT | POLLWRNORM | POLLWRBAND;
1487 else
1488 set_bit(SOCK_ASYNC_NOSPACE, &sk->sk_socket->flags);
1489
1490 return mask;
1491}
1492
1493static int iucv_sock_shutdown(struct socket *sock, int how)
1494{
1495 struct sock *sk = sock->sk;
1496 struct iucv_sock *iucv = iucv_sk(sk);
1497 struct iucv_message txmsg;
1498 int err = 0;
1499
1500 how++;
1501
1502 if ((how & ~SHUTDOWN_MASK) || !how)
1503 return -EINVAL;
1504
1505 lock_sock(sk);
1506 switch (sk->sk_state) {
1507 case IUCV_LISTEN:
1508 case IUCV_DISCONN:
1509 case IUCV_CLOSING:
1510 case IUCV_CLOSED:
1511 err = -ENOTCONN;
1512 goto fail;
1513 default:
1514 break;
1515 }
1516
1517 if (how == SEND_SHUTDOWN || how == SHUTDOWN_MASK) {
1518 if (iucv->transport == AF_IUCV_TRANS_IUCV) {
1519 txmsg.class = 0;
1520 txmsg.tag = 0;
1521 err = pr_iucv->message_send(iucv->path, &txmsg,
1522 IUCV_IPRMDATA, 0, (void *) iprm_shutdown, 8);
1523 if (err) {
1524 switch (err) {
1525 case 1:
1526 err = -ENOTCONN;
1527 break;
1528 case 2:
1529 err = -ECONNRESET;
1530 break;
1531 default:
1532 err = -ENOTCONN;
1533 break;
1534 }
1535 }
1536 } else
1537 iucv_send_ctrl(sk, AF_IUCV_FLAG_SHT);
1538 }
1539
1540 sk->sk_shutdown |= how;
1541 if (how == RCV_SHUTDOWN || how == SHUTDOWN_MASK) {
1542 if (iucv->transport == AF_IUCV_TRANS_IUCV) {
1543 err = pr_iucv->path_quiesce(iucv->path, NULL);
1544 if (err)
1545 err = -ENOTCONN;
1546/* skb_queue_purge(&sk->sk_receive_queue); */
1547 }
1548 skb_queue_purge(&sk->sk_receive_queue);
1549 }
1550
1551 /* Wake up anyone sleeping in poll */
1552 sk->sk_state_change(sk);
1553
1554fail:
1555 release_sock(sk);
1556 return err;
1557}
1558
1559static int iucv_sock_release(struct socket *sock)
1560{
1561 struct sock *sk = sock->sk;
1562 int err = 0;
1563
1564 if (!sk)
1565 return 0;
1566
1567 iucv_sock_close(sk);
1568
1569 sock_orphan(sk);
1570 iucv_sock_kill(sk);
1571 return err;
1572}
1573
1574/* getsockopt and setsockopt */
1575static int iucv_sock_setsockopt(struct socket *sock, int level, int optname,
1576 char __user *optval, unsigned int optlen)
1577{
1578 struct sock *sk = sock->sk;
1579 struct iucv_sock *iucv = iucv_sk(sk);
1580 int val;
1581 int rc;
1582
1583 if (level != SOL_IUCV)
1584 return -ENOPROTOOPT;
1585
1586 if (optlen < sizeof(int))
1587 return -EINVAL;
1588
1589 if (get_user(val, (int __user *) optval))
1590 return -EFAULT;
1591
1592 rc = 0;
1593
1594 lock_sock(sk);
1595 switch (optname) {
1596 case SO_IPRMDATA_MSG:
1597 if (val)
1598 iucv->flags |= IUCV_IPRMDATA;
1599 else
1600 iucv->flags &= ~IUCV_IPRMDATA;
1601 break;
1602 case SO_MSGLIMIT:
1603 switch (sk->sk_state) {
1604 case IUCV_OPEN:
1605 case IUCV_BOUND:
1606 if (val < 1 || val > (u16)(~0))
1607 rc = -EINVAL;
1608 else
1609 iucv->msglimit = val;
1610 break;
1611 default:
1612 rc = -EINVAL;
1613 break;
1614 }
1615 break;
1616 default:
1617 rc = -ENOPROTOOPT;
1618 break;
1619 }
1620 release_sock(sk);
1621
1622 return rc;
1623}
1624
1625static int iucv_sock_getsockopt(struct socket *sock, int level, int optname,
1626 char __user *optval, int __user *optlen)
1627{
1628 struct sock *sk = sock->sk;
1629 struct iucv_sock *iucv = iucv_sk(sk);
1630 unsigned int val;
1631 int len;
1632
1633 if (level != SOL_IUCV)
1634 return -ENOPROTOOPT;
1635
1636 if (get_user(len, optlen))
1637 return -EFAULT;
1638
1639 if (len < 0)
1640 return -EINVAL;
1641
1642 len = min_t(unsigned int, len, sizeof(int));
1643
1644 switch (optname) {
1645 case SO_IPRMDATA_MSG:
1646 val = (iucv->flags & IUCV_IPRMDATA) ? 1 : 0;
1647 break;
1648 case SO_MSGLIMIT:
1649 lock_sock(sk);
1650 val = (iucv->path != NULL) ? iucv->path->msglim /* connected */
1651 : iucv->msglimit; /* default */
1652 release_sock(sk);
1653 break;
1654 case SO_MSGSIZE:
1655 if (sk->sk_state == IUCV_OPEN)
1656 return -EBADFD;
1657 val = (iucv->hs_dev) ? iucv->hs_dev->mtu -
1658 sizeof(struct af_iucv_trans_hdr) - ETH_HLEN :
1659 0x7fffffff;
1660 break;
1661 default:
1662 return -ENOPROTOOPT;
1663 }
1664
1665 if (put_user(len, optlen))
1666 return -EFAULT;
1667 if (copy_to_user(optval, &val, len))
1668 return -EFAULT;
1669
1670 return 0;
1671}
1672
1673
1674/* Callback wrappers - called from iucv base support */
1675static int iucv_callback_connreq(struct iucv_path *path,
1676 u8 ipvmid[8], u8 ipuser[16])
1677{
1678 unsigned char user_data[16];
1679 unsigned char nuser_data[16];
1680 unsigned char src_name[8];
1681 struct hlist_node *node;
1682 struct sock *sk, *nsk;
1683 struct iucv_sock *iucv, *niucv;
1684 int err;
1685
1686 memcpy(src_name, ipuser, 8);
1687 EBCASC(src_name, 8);
1688 /* Find out if this path belongs to af_iucv. */
1689 read_lock(&iucv_sk_list.lock);
1690 iucv = NULL;
1691 sk = NULL;
1692 sk_for_each(sk, node, &iucv_sk_list.head)
1693 if (sk->sk_state == IUCV_LISTEN &&
1694 !memcmp(&iucv_sk(sk)->src_name, src_name, 8)) {
1695 /*
1696 * Found a listening socket with
1697 * src_name == ipuser[0-7].
1698 */
1699 iucv = iucv_sk(sk);
1700 break;
1701 }
1702 read_unlock(&iucv_sk_list.lock);
1703 if (!iucv)
1704 /* No socket found, not one of our paths. */
1705 return -EINVAL;
1706
1707 bh_lock_sock(sk);
1708
1709 /* Check if parent socket is listening */
1710 low_nmcpy(user_data, iucv->src_name);
1711 high_nmcpy(user_data, iucv->dst_name);
1712 ASCEBC(user_data, sizeof(user_data));
1713 if (sk->sk_state != IUCV_LISTEN) {
1714 err = pr_iucv->path_sever(path, user_data);
1715 iucv_path_free(path);
1716 goto fail;
1717 }
1718
1719 /* Check for backlog size */
1720 if (sk_acceptq_is_full(sk)) {
1721 err = pr_iucv->path_sever(path, user_data);
1722 iucv_path_free(path);
1723 goto fail;
1724 }
1725
1726 /* Create the new socket */
1727 nsk = iucv_sock_alloc(NULL, sk->sk_type, GFP_ATOMIC);
1728 if (!nsk) {
1729 err = pr_iucv->path_sever(path, user_data);
1730 iucv_path_free(path);
1731 goto fail;
1732 }
1733
1734 niucv = iucv_sk(nsk);
1735 iucv_sock_init(nsk, sk);
1736
1737 /* Set the new iucv_sock */
1738 memcpy(niucv->dst_name, ipuser + 8, 8);
1739 EBCASC(niucv->dst_name, 8);
1740 memcpy(niucv->dst_user_id, ipvmid, 8);
1741 memcpy(niucv->src_name, iucv->src_name, 8);
1742 memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1743 niucv->path = path;
1744
1745 /* Call iucv_accept */
1746 high_nmcpy(nuser_data, ipuser + 8);
1747 memcpy(nuser_data + 8, niucv->src_name, 8);
1748 ASCEBC(nuser_data + 8, 8);
1749
1750 /* set message limit for path based on msglimit of accepting socket */
1751 niucv->msglimit = iucv->msglimit;
1752 path->msglim = iucv->msglimit;
1753 err = pr_iucv->path_accept(path, &af_iucv_handler, nuser_data, nsk);
1754 if (err) {
1755 iucv_sever_path(nsk, 1);
1756 iucv_sock_kill(nsk);
1757 goto fail;
1758 }
1759
1760 iucv_accept_enqueue(sk, nsk);
1761
1762 /* Wake up accept */
1763 nsk->sk_state = IUCV_CONNECTED;
1764 sk->sk_data_ready(sk, 1);
1765 err = 0;
1766fail:
1767 bh_unlock_sock(sk);
1768 return 0;
1769}
1770
1771static void iucv_callback_connack(struct iucv_path *path, u8 ipuser[16])
1772{
1773 struct sock *sk = path->private;
1774
1775 sk->sk_state = IUCV_CONNECTED;
1776 sk->sk_state_change(sk);
1777}
1778
1779static void iucv_callback_rx(struct iucv_path *path, struct iucv_message *msg)
1780{
1781 struct sock *sk = path->private;
1782 struct iucv_sock *iucv = iucv_sk(sk);
1783 struct sk_buff *skb;
1784 struct sock_msg_q *save_msg;
1785 int len;
1786
1787 if (sk->sk_shutdown & RCV_SHUTDOWN) {
1788 pr_iucv->message_reject(path, msg);
1789 return;
1790 }
1791
1792 spin_lock(&iucv->message_q.lock);
1793
1794 if (!list_empty(&iucv->message_q.list) ||
1795 !skb_queue_empty(&iucv->backlog_skb_q))
1796 goto save_message;
1797
1798 len = atomic_read(&sk->sk_rmem_alloc);
1799 len += SKB_TRUESIZE(iucv_msg_length(msg));
1800 if (len > sk->sk_rcvbuf)
1801 goto save_message;
1802
1803 skb = alloc_skb(iucv_msg_length(msg), GFP_ATOMIC | GFP_DMA);
1804 if (!skb)
1805 goto save_message;
1806
1807 iucv_process_message(sk, skb, path, msg);
1808 goto out_unlock;
1809
1810save_message:
1811 save_msg = kzalloc(sizeof(struct sock_msg_q), GFP_ATOMIC | GFP_DMA);
1812 if (!save_msg)
1813 goto out_unlock;
1814 save_msg->path = path;
1815 save_msg->msg = *msg;
1816
1817 list_add_tail(&save_msg->list, &iucv->message_q.list);
1818
1819out_unlock:
1820 spin_unlock(&iucv->message_q.lock);
1821}
1822
1823static void iucv_callback_txdone(struct iucv_path *path,
1824 struct iucv_message *msg)
1825{
1826 struct sock *sk = path->private;
1827 struct sk_buff *this = NULL;
1828 struct sk_buff_head *list = &iucv_sk(sk)->send_skb_q;
1829 struct sk_buff *list_skb = list->next;
1830 unsigned long flags;
1831
1832 bh_lock_sock(sk);
1833 if (!skb_queue_empty(list)) {
1834 spin_lock_irqsave(&list->lock, flags);
1835
1836 while (list_skb != (struct sk_buff *)list) {
1837 if (!memcmp(&msg->tag, CB_TAG(list_skb), CB_TAG_LEN)) {
1838 this = list_skb;
1839 break;
1840 }
1841 list_skb = list_skb->next;
1842 }
1843 if (this)
1844 __skb_unlink(this, list);
1845
1846 spin_unlock_irqrestore(&list->lock, flags);
1847
1848 if (this) {
1849 kfree_skb(this);
1850 /* wake up any process waiting for sending */
1851 iucv_sock_wake_msglim(sk);
1852 }
1853 }
1854
1855 if (sk->sk_state == IUCV_CLOSING) {
1856 if (skb_queue_empty(&iucv_sk(sk)->send_skb_q)) {
1857 sk->sk_state = IUCV_CLOSED;
1858 sk->sk_state_change(sk);
1859 }
1860 }
1861 bh_unlock_sock(sk);
1862
1863}
1864
1865static void iucv_callback_connrej(struct iucv_path *path, u8 ipuser[16])
1866{
1867 struct sock *sk = path->private;
1868
1869 if (sk->sk_state == IUCV_CLOSED)
1870 return;
1871
1872 bh_lock_sock(sk);
1873 iucv_sever_path(sk, 1);
1874 sk->sk_state = IUCV_DISCONN;
1875
1876 sk->sk_state_change(sk);
1877 bh_unlock_sock(sk);
1878}
1879
1880/* called if the other communication side shuts down its RECV direction;
1881 * in turn, the callback sets SEND_SHUTDOWN to disable sending of data.
1882 */
1883static void iucv_callback_shutdown(struct iucv_path *path, u8 ipuser[16])
1884{
1885 struct sock *sk = path->private;
1886
1887 bh_lock_sock(sk);
1888 if (sk->sk_state != IUCV_CLOSED) {
1889 sk->sk_shutdown |= SEND_SHUTDOWN;
1890 sk->sk_state_change(sk);
1891 }
1892 bh_unlock_sock(sk);
1893}
1894
1895/***************** HiperSockets transport callbacks ********************/
1896static void afiucv_swap_src_dest(struct sk_buff *skb)
1897{
1898 struct af_iucv_trans_hdr *trans_hdr =
1899 (struct af_iucv_trans_hdr *)skb->data;
1900 char tmpID[8];
1901 char tmpName[8];
1902
1903 ASCEBC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
1904 ASCEBC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
1905 ASCEBC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
1906 ASCEBC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
1907 memcpy(tmpID, trans_hdr->srcUserID, 8);
1908 memcpy(tmpName, trans_hdr->srcAppName, 8);
1909 memcpy(trans_hdr->srcUserID, trans_hdr->destUserID, 8);
1910 memcpy(trans_hdr->srcAppName, trans_hdr->destAppName, 8);
1911 memcpy(trans_hdr->destUserID, tmpID, 8);
1912 memcpy(trans_hdr->destAppName, tmpName, 8);
1913 skb_push(skb, ETH_HLEN);
1914 memset(skb->data, 0, ETH_HLEN);
1915}
1916
1917/**
1918 * afiucv_hs_callback_syn - react on received SYN
1919 **/
1920static int afiucv_hs_callback_syn(struct sock *sk, struct sk_buff *skb)
1921{
1922 struct sock *nsk;
1923 struct iucv_sock *iucv, *niucv;
1924 struct af_iucv_trans_hdr *trans_hdr;
1925 int err;
1926
1927 iucv = iucv_sk(sk);
1928 trans_hdr = (struct af_iucv_trans_hdr *)skb->data;
1929 if (!iucv) {
1930 /* no sock - connection refused */
1931 afiucv_swap_src_dest(skb);
1932 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1933 err = dev_queue_xmit(skb);
1934 goto out;
1935 }
1936
1937 nsk = iucv_sock_alloc(NULL, sk->sk_type, GFP_ATOMIC);
1938 bh_lock_sock(sk);
1939 if ((sk->sk_state != IUCV_LISTEN) ||
1940 sk_acceptq_is_full(sk) ||
1941 !nsk) {
1942 /* error on server socket - connection refused */
1943 if (nsk)
1944 sk_free(nsk);
1945 afiucv_swap_src_dest(skb);
1946 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1947 err = dev_queue_xmit(skb);
1948 bh_unlock_sock(sk);
1949 goto out;
1950 }
1951
1952 niucv = iucv_sk(nsk);
1953 iucv_sock_init(nsk, sk);
1954 niucv->transport = AF_IUCV_TRANS_HIPER;
1955 niucv->msglimit = iucv->msglimit;
1956 if (!trans_hdr->window)
1957 niucv->msglimit_peer = IUCV_HIPER_MSGLIM_DEFAULT;
1958 else
1959 niucv->msglimit_peer = trans_hdr->window;
1960 memcpy(niucv->dst_name, trans_hdr->srcAppName, 8);
1961 memcpy(niucv->dst_user_id, trans_hdr->srcUserID, 8);
1962 memcpy(niucv->src_name, iucv->src_name, 8);
1963 memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1964 nsk->sk_bound_dev_if = sk->sk_bound_dev_if;
1965 niucv->hs_dev = iucv->hs_dev;
1966 dev_hold(niucv->hs_dev);
1967 afiucv_swap_src_dest(skb);
1968 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK;
1969 trans_hdr->window = niucv->msglimit;
1970 /* if receiver acks the xmit connection is established */
1971 err = dev_queue_xmit(skb);
1972 if (!err) {
1973 iucv_accept_enqueue(sk, nsk);
1974 nsk->sk_state = IUCV_CONNECTED;
1975 sk->sk_data_ready(sk, 1);
1976 } else
1977 iucv_sock_kill(nsk);
1978 bh_unlock_sock(sk);
1979
1980out:
1981 return NET_RX_SUCCESS;
1982}
1983
1984/**
1985 * afiucv_hs_callback_synack() - react on received SYN-ACK
1986 **/
1987static int afiucv_hs_callback_synack(struct sock *sk, struct sk_buff *skb)
1988{
1989 struct iucv_sock *iucv = iucv_sk(sk);
1990 struct af_iucv_trans_hdr *trans_hdr =
1991 (struct af_iucv_trans_hdr *)skb->data;
1992
1993 if (!iucv)
1994 goto out;
1995 if (sk->sk_state != IUCV_BOUND)
1996 goto out;
1997 bh_lock_sock(sk);
1998 iucv->msglimit_peer = trans_hdr->window;
1999 sk->sk_state = IUCV_CONNECTED;
2000 sk->sk_state_change(sk);
2001 bh_unlock_sock(sk);
2002out:
2003 kfree_skb(skb);
2004 return NET_RX_SUCCESS;
2005}
2006
2007/**
2008 * afiucv_hs_callback_synfin() - react on received SYN_FIN
2009 **/
2010static int afiucv_hs_callback_synfin(struct sock *sk, struct sk_buff *skb)
2011{
2012 struct iucv_sock *iucv = iucv_sk(sk);
2013
2014 if (!iucv)
2015 goto out;
2016 if (sk->sk_state != IUCV_BOUND)
2017 goto out;
2018 bh_lock_sock(sk);
2019 sk->sk_state = IUCV_DISCONN;
2020 sk->sk_state_change(sk);
2021 bh_unlock_sock(sk);
2022out:
2023 kfree_skb(skb);
2024 return NET_RX_SUCCESS;
2025}
2026
2027/**
2028 * afiucv_hs_callback_fin() - react on received FIN
2029 **/
2030static int afiucv_hs_callback_fin(struct sock *sk, struct sk_buff *skb)
2031{
2032 struct iucv_sock *iucv = iucv_sk(sk);
2033
2034 /* other end of connection closed */
2035 if (!iucv)
2036 goto out;
2037 bh_lock_sock(sk);
2038 if (sk->sk_state == IUCV_CONNECTED) {
2039 sk->sk_state = IUCV_DISCONN;
2040 sk->sk_state_change(sk);
2041 }
2042 bh_unlock_sock(sk);
2043out:
2044 kfree_skb(skb);
2045 return NET_RX_SUCCESS;
2046}
2047
2048/**
2049 * afiucv_hs_callback_win() - react on received WIN
2050 **/
2051static int afiucv_hs_callback_win(struct sock *sk, struct sk_buff *skb)
2052{
2053 struct iucv_sock *iucv = iucv_sk(sk);
2054 struct af_iucv_trans_hdr *trans_hdr =
2055 (struct af_iucv_trans_hdr *)skb->data;
2056
2057 if (!iucv)
2058 return NET_RX_SUCCESS;
2059
2060 if (sk->sk_state != IUCV_CONNECTED)
2061 return NET_RX_SUCCESS;
2062
2063 atomic_sub(trans_hdr->window, &iucv->msg_sent);
2064 iucv_sock_wake_msglim(sk);
2065 return NET_RX_SUCCESS;
2066}
2067
2068/**
2069 * afiucv_hs_callback_rx() - react on received data
2070 **/
2071static int afiucv_hs_callback_rx(struct sock *sk, struct sk_buff *skb)
2072{
2073 struct iucv_sock *iucv = iucv_sk(sk);
2074
2075 if (!iucv) {
2076 kfree_skb(skb);
2077 return NET_RX_SUCCESS;
2078 }
2079
2080 if (sk->sk_state != IUCV_CONNECTED) {
2081 kfree_skb(skb);
2082 return NET_RX_SUCCESS;
2083 }
2084
2085 if (sk->sk_shutdown & RCV_SHUTDOWN) {
2086 kfree_skb(skb);
2087 return NET_RX_SUCCESS;
2088 }
2089
2090 /* write stuff from iucv_msg to skb cb */
2091 if (skb->len < sizeof(struct af_iucv_trans_hdr)) {
2092 kfree_skb(skb);
2093 return NET_RX_SUCCESS;
2094 }
2095 skb_pull(skb, sizeof(struct af_iucv_trans_hdr));
2096 skb_reset_transport_header(skb);
2097 skb_reset_network_header(skb);
2098 spin_lock(&iucv->message_q.lock);
2099 if (skb_queue_empty(&iucv->backlog_skb_q)) {
2100 if (sock_queue_rcv_skb(sk, skb)) {
2101 /* handle rcv queue full */
2102 skb_queue_tail(&iucv->backlog_skb_q, skb);
2103 }
2104 } else
2105 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, skb);
2106 spin_unlock(&iucv->message_q.lock);
2107 return NET_RX_SUCCESS;
2108}
2109
2110/**
2111 * afiucv_hs_rcv() - base function for arriving data through HiperSockets
2112 * transport
2113 * called from netif RX softirq
2114 **/
2115static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
2116 struct packet_type *pt, struct net_device *orig_dev)
2117{
2118 struct hlist_node *node;
2119 struct sock *sk;
2120 struct iucv_sock *iucv;
2121 struct af_iucv_trans_hdr *trans_hdr;
2122 char nullstring[8];
2123 int err = 0;
2124
2125 skb_pull(skb, ETH_HLEN);
2126 trans_hdr = (struct af_iucv_trans_hdr *)skb->data;
2127 EBCASC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
2128 EBCASC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
2129 EBCASC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
2130 EBCASC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
2131 memset(nullstring, 0, sizeof(nullstring));
2132 iucv = NULL;
2133 sk = NULL;
2134 read_lock(&iucv_sk_list.lock);
2135 sk_for_each(sk, node, &iucv_sk_list.head) {
2136 if (trans_hdr->flags == AF_IUCV_FLAG_SYN) {
2137 if ((!memcmp(&iucv_sk(sk)->src_name,
2138 trans_hdr->destAppName, 8)) &&
2139 (!memcmp(&iucv_sk(sk)->src_user_id,
2140 trans_hdr->destUserID, 8)) &&
2141 (!memcmp(&iucv_sk(sk)->dst_name, nullstring, 8)) &&
2142 (!memcmp(&iucv_sk(sk)->dst_user_id,
2143 nullstring, 8))) {
2144 iucv = iucv_sk(sk);
2145 break;
2146 }
2147 } else {
2148 if ((!memcmp(&iucv_sk(sk)->src_name,
2149 trans_hdr->destAppName, 8)) &&
2150 (!memcmp(&iucv_sk(sk)->src_user_id,
2151 trans_hdr->destUserID, 8)) &&
2152 (!memcmp(&iucv_sk(sk)->dst_name,
2153 trans_hdr->srcAppName, 8)) &&
2154 (!memcmp(&iucv_sk(sk)->dst_user_id,
2155 trans_hdr->srcUserID, 8))) {
2156 iucv = iucv_sk(sk);
2157 break;
2158 }
2159 }
2160 }
2161 read_unlock(&iucv_sk_list.lock);
2162 if (!iucv)
2163 sk = NULL;
2164
2165 /* no sock
2166 how should we send with no sock
2167 1) send without sock no send rc checking?
2168 2) introduce default sock to handle this cases
2169
2170 SYN -> send SYN|ACK in good case, send SYN|FIN in bad case
2171 data -> send FIN
2172 SYN|ACK, SYN|FIN, FIN -> no action? */
2173
2174 switch (trans_hdr->flags) {
2175 case AF_IUCV_FLAG_SYN:
2176 /* connect request */
2177 err = afiucv_hs_callback_syn(sk, skb);
2178 break;
2179 case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK):
2180 /* connect request confirmed */
2181 err = afiucv_hs_callback_synack(sk, skb);
2182 break;
2183 case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN):
2184 /* connect request refused */
2185 err = afiucv_hs_callback_synfin(sk, skb);
2186 break;
2187 case (AF_IUCV_FLAG_FIN):
2188 /* close request */
2189 err = afiucv_hs_callback_fin(sk, skb);
2190 break;
2191 case (AF_IUCV_FLAG_WIN):
2192 err = afiucv_hs_callback_win(sk, skb);
2193 if (skb->len == sizeof(struct af_iucv_trans_hdr)) {
2194 kfree_skb(skb);
2195 break;
2196 }
2197 /* fall through and receive non-zero length data */
2198 case (AF_IUCV_FLAG_SHT):
2199 /* shutdown request */
2200 /* fall through and receive zero length data */
2201 case 0:
2202 /* plain data frame */
2203 memcpy(CB_TRGCLS(skb), &trans_hdr->iucv_hdr.class,
2204 CB_TRGCLS_LEN);
2205 err = afiucv_hs_callback_rx(sk, skb);
2206 break;
2207 default:
2208 ;
2209 }
2210
2211 return err;
2212}
2213
2214/**
2215 * afiucv_hs_callback_txnotify() - handle send notifcations from HiperSockets
2216 * transport
2217 **/
2218static void afiucv_hs_callback_txnotify(struct sk_buff *skb,
2219 enum iucv_tx_notify n)
2220{
2221 struct sock *isk = skb->sk;
2222 struct sock *sk = NULL;
2223 struct iucv_sock *iucv = NULL;
2224 struct sk_buff_head *list;
2225 struct sk_buff *list_skb;
2226 struct sk_buff *nskb;
2227 unsigned long flags;
2228 struct hlist_node *node;
2229
2230 read_lock_irqsave(&iucv_sk_list.lock, flags);
2231 sk_for_each(sk, node, &iucv_sk_list.head)
2232 if (sk == isk) {
2233 iucv = iucv_sk(sk);
2234 break;
2235 }
2236 read_unlock_irqrestore(&iucv_sk_list.lock, flags);
2237
2238 if (!iucv || sock_flag(sk, SOCK_ZAPPED))
2239 return;
2240
2241 list = &iucv->send_skb_q;
2242 spin_lock_irqsave(&list->lock, flags);
2243 if (skb_queue_empty(list))
2244 goto out_unlock;
2245 list_skb = list->next;
2246 nskb = list_skb->next;
2247 while (list_skb != (struct sk_buff *)list) {
2248 if (skb_shinfo(list_skb) == skb_shinfo(skb)) {
2249 switch (n) {
2250 case TX_NOTIFY_OK:
2251 __skb_unlink(list_skb, list);
2252 kfree_skb(list_skb);
2253 iucv_sock_wake_msglim(sk);
2254 break;
2255 case TX_NOTIFY_PENDING:
2256 atomic_inc(&iucv->pendings);
2257 break;
2258 case TX_NOTIFY_DELAYED_OK:
2259 __skb_unlink(list_skb, list);
2260 atomic_dec(&iucv->pendings);
2261 if (atomic_read(&iucv->pendings) <= 0)
2262 iucv_sock_wake_msglim(sk);
2263 kfree_skb(list_skb);
2264 break;
2265 case TX_NOTIFY_UNREACHABLE:
2266 case TX_NOTIFY_DELAYED_UNREACHABLE:
2267 case TX_NOTIFY_TPQFULL: /* not yet used */
2268 case TX_NOTIFY_GENERALERROR:
2269 case TX_NOTIFY_DELAYED_GENERALERROR:
2270 __skb_unlink(list_skb, list);
2271 kfree_skb(list_skb);
2272 if (sk->sk_state == IUCV_CONNECTED) {
2273 sk->sk_state = IUCV_DISCONN;
2274 sk->sk_state_change(sk);
2275 }
2276 break;
2277 }
2278 break;
2279 }
2280 list_skb = nskb;
2281 nskb = nskb->next;
2282 }
2283out_unlock:
2284 spin_unlock_irqrestore(&list->lock, flags);
2285
2286 if (sk->sk_state == IUCV_CLOSING) {
2287 if (skb_queue_empty(&iucv_sk(sk)->send_skb_q)) {
2288 sk->sk_state = IUCV_CLOSED;
2289 sk->sk_state_change(sk);
2290 }
2291 }
2292
2293}
2294
2295/*
2296 * afiucv_netdev_event: handle netdev notifier chain events
2297 */
2298static int afiucv_netdev_event(struct notifier_block *this,
2299 unsigned long event, void *ptr)
2300{
2301 struct net_device *event_dev = (struct net_device *)ptr;
2302 struct hlist_node *node;
2303 struct sock *sk;
2304 struct iucv_sock *iucv;
2305
2306 switch (event) {
2307 case NETDEV_REBOOT:
2308 case NETDEV_GOING_DOWN:
2309 sk_for_each(sk, node, &iucv_sk_list.head) {
2310 iucv = iucv_sk(sk);
2311 if ((iucv->hs_dev == event_dev) &&
2312 (sk->sk_state == IUCV_CONNECTED)) {
2313 if (event == NETDEV_GOING_DOWN)
2314 iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
2315 sk->sk_state = IUCV_DISCONN;
2316 sk->sk_state_change(sk);
2317 }
2318 }
2319 break;
2320 case NETDEV_DOWN:
2321 case NETDEV_UNREGISTER:
2322 default:
2323 break;
2324 }
2325 return NOTIFY_DONE;
2326}
2327
2328static struct notifier_block afiucv_netdev_notifier = {
2329 .notifier_call = afiucv_netdev_event,
2330};
2331
2332static const struct proto_ops iucv_sock_ops = {
2333 .family = PF_IUCV,
2334 .owner = THIS_MODULE,
2335 .release = iucv_sock_release,
2336 .bind = iucv_sock_bind,
2337 .connect = iucv_sock_connect,
2338 .listen = iucv_sock_listen,
2339 .accept = iucv_sock_accept,
2340 .getname = iucv_sock_getname,
2341 .sendmsg = iucv_sock_sendmsg,
2342 .recvmsg = iucv_sock_recvmsg,
2343 .poll = iucv_sock_poll,
2344 .ioctl = sock_no_ioctl,
2345 .mmap = sock_no_mmap,
2346 .socketpair = sock_no_socketpair,
2347 .shutdown = iucv_sock_shutdown,
2348 .setsockopt = iucv_sock_setsockopt,
2349 .getsockopt = iucv_sock_getsockopt,
2350};
2351
2352static const struct net_proto_family iucv_sock_family_ops = {
2353 .family = AF_IUCV,
2354 .owner = THIS_MODULE,
2355 .create = iucv_sock_create,
2356};
2357
2358static struct packet_type iucv_packet_type = {
2359 .type = cpu_to_be16(ETH_P_AF_IUCV),
2360 .func = afiucv_hs_rcv,
2361};
2362
2363static int afiucv_iucv_init(void)
2364{
2365 int err;
2366
2367 err = pr_iucv->iucv_register(&af_iucv_handler, 0);
2368 if (err)
2369 goto out;
2370 /* establish dummy device */
2371 af_iucv_driver.bus = pr_iucv->bus;
2372 err = driver_register(&af_iucv_driver);
2373 if (err)
2374 goto out_iucv;
2375 af_iucv_dev = kzalloc(sizeof(struct device), GFP_KERNEL);
2376 if (!af_iucv_dev) {
2377 err = -ENOMEM;
2378 goto out_driver;
2379 }
2380 dev_set_name(af_iucv_dev, "af_iucv");
2381 af_iucv_dev->bus = pr_iucv->bus;
2382 af_iucv_dev->parent = pr_iucv->root;
2383 af_iucv_dev->release = (void (*)(struct device *))kfree;
2384 af_iucv_dev->driver = &af_iucv_driver;
2385 err = device_register(af_iucv_dev);
2386 if (err)
2387 goto out_driver;
2388 return 0;
2389
2390out_driver:
2391 driver_unregister(&af_iucv_driver);
2392out_iucv:
2393 pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2394out:
2395 return err;
2396}
2397
2398static int __init afiucv_init(void)
2399{
2400 int err;
2401
2402 if (MACHINE_IS_VM) {
2403 cpcmd("QUERY USERID", iucv_userid, sizeof(iucv_userid), &err);
2404 if (unlikely(err)) {
2405 WARN_ON(err);
2406 err = -EPROTONOSUPPORT;
2407 goto out;
2408 }
2409
2410 pr_iucv = try_then_request_module(symbol_get(iucv_if), "iucv");
2411 if (!pr_iucv) {
2412 printk(KERN_WARNING "iucv_if lookup failed\n");
2413 memset(&iucv_userid, 0, sizeof(iucv_userid));
2414 }
2415 } else {
2416 memset(&iucv_userid, 0, sizeof(iucv_userid));
2417 pr_iucv = NULL;
2418 }
2419
2420 err = proto_register(&iucv_proto, 0);
2421 if (err)
2422 goto out;
2423 err = sock_register(&iucv_sock_family_ops);
2424 if (err)
2425 goto out_proto;
2426
2427 if (pr_iucv) {
2428 err = afiucv_iucv_init();
2429 if (err)
2430 goto out_sock;
2431 } else
2432 register_netdevice_notifier(&afiucv_netdev_notifier);
2433 dev_add_pack(&iucv_packet_type);
2434 return 0;
2435
2436out_sock:
2437 sock_unregister(PF_IUCV);
2438out_proto:
2439 proto_unregister(&iucv_proto);
2440out:
2441 if (pr_iucv)
2442 symbol_put(iucv_if);
2443 return err;
2444}
2445
2446static void __exit afiucv_exit(void)
2447{
2448 if (pr_iucv) {
2449 device_unregister(af_iucv_dev);
2450 driver_unregister(&af_iucv_driver);
2451 pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2452 symbol_put(iucv_if);
2453 } else
2454 unregister_netdevice_notifier(&afiucv_netdev_notifier);
2455 dev_remove_pack(&iucv_packet_type);
2456 sock_unregister(PF_IUCV);
2457 proto_unregister(&iucv_proto);
2458}
2459
2460module_init(afiucv_init);
2461module_exit(afiucv_exit);
2462
2463MODULE_AUTHOR("Jennifer Hunt <jenhunt@us.ibm.com>");
2464MODULE_DESCRIPTION("IUCV Sockets ver " VERSION);
2465MODULE_VERSION(VERSION);
2466MODULE_LICENSE("GPL");
2467MODULE_ALIAS_NETPROTO(PF_IUCV);
2468
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * IUCV protocol stack for Linux on zSeries
4 *
5 * Copyright IBM Corp. 2006, 2009
6 *
7 * Author(s): Jennifer Hunt <jenhunt@us.ibm.com>
8 * Hendrik Brueckner <brueckner@linux.vnet.ibm.com>
9 * PM functions:
10 * Ursula Braun <ursula.braun@de.ibm.com>
11 */
12
13#define KMSG_COMPONENT "af_iucv"
14#define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
15
16#include <linux/filter.h>
17#include <linux/module.h>
18#include <linux/netdevice.h>
19#include <linux/types.h>
20#include <linux/limits.h>
21#include <linux/list.h>
22#include <linux/errno.h>
23#include <linux/kernel.h>
24#include <linux/sched/signal.h>
25#include <linux/slab.h>
26#include <linux/skbuff.h>
27#include <linux/init.h>
28#include <linux/poll.h>
29#include <linux/security.h>
30#include <net/sock.h>
31#include <asm/ebcdic.h>
32#include <asm/cpcmd.h>
33#include <linux/kmod.h>
34
35#include <net/iucv/af_iucv.h>
36
37#define VERSION "1.2"
38
39static char iucv_userid[80];
40
41static struct proto iucv_proto = {
42 .name = "AF_IUCV",
43 .owner = THIS_MODULE,
44 .obj_size = sizeof(struct iucv_sock),
45};
46
47static struct iucv_interface *pr_iucv;
48static struct iucv_handler af_iucv_handler;
49
50/* special AF_IUCV IPRM messages */
51static const u8 iprm_shutdown[8] =
52 {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01};
53
54#define TRGCLS_SIZE sizeof_field(struct iucv_message, class)
55
56#define __iucv_sock_wait(sk, condition, timeo, ret) \
57do { \
58 DEFINE_WAIT(__wait); \
59 long __timeo = timeo; \
60 ret = 0; \
61 prepare_to_wait(sk_sleep(sk), &__wait, TASK_INTERRUPTIBLE); \
62 while (!(condition)) { \
63 if (!__timeo) { \
64 ret = -EAGAIN; \
65 break; \
66 } \
67 if (signal_pending(current)) { \
68 ret = sock_intr_errno(__timeo); \
69 break; \
70 } \
71 release_sock(sk); \
72 __timeo = schedule_timeout(__timeo); \
73 lock_sock(sk); \
74 ret = sock_error(sk); \
75 if (ret) \
76 break; \
77 } \
78 finish_wait(sk_sleep(sk), &__wait); \
79} while (0)
80
81#define iucv_sock_wait(sk, condition, timeo) \
82({ \
83 int __ret = 0; \
84 if (!(condition)) \
85 __iucv_sock_wait(sk, condition, timeo, __ret); \
86 __ret; \
87})
88
89static struct sock *iucv_accept_dequeue(struct sock *parent,
90 struct socket *newsock);
91static void iucv_sock_kill(struct sock *sk);
92static void iucv_sock_close(struct sock *sk);
93
94static void afiucv_hs_callback_txnotify(struct sock *sk, enum iucv_tx_notify);
95
96static struct iucv_sock_list iucv_sk_list = {
97 .lock = __RW_LOCK_UNLOCKED(iucv_sk_list.lock),
98 .autobind_name = ATOMIC_INIT(0)
99};
100
101static inline void high_nmcpy(unsigned char *dst, char *src)
102{
103 memcpy(dst, src, 8);
104}
105
106static inline void low_nmcpy(unsigned char *dst, char *src)
107{
108 memcpy(&dst[8], src, 8);
109}
110
111/**
112 * iucv_msg_length() - Returns the length of an iucv message.
113 * @msg: Pointer to struct iucv_message, MUST NOT be NULL
114 *
115 * The function returns the length of the specified iucv message @msg of data
116 * stored in a buffer and of data stored in the parameter list (PRMDATA).
117 *
118 * For IUCV_IPRMDATA, AF_IUCV uses the following convention to transport socket
119 * data:
120 * PRMDATA[0..6] socket data (max 7 bytes);
121 * PRMDATA[7] socket data length value (len is 0xff - PRMDATA[7])
122 *
123 * The socket data length is computed by subtracting the socket data length
124 * value from 0xFF.
125 * If the socket data len is greater 7, then PRMDATA can be used for special
126 * notifications (see iucv_sock_shutdown); and further,
127 * if the socket data len is > 7, the function returns 8.
128 *
129 * Use this function to allocate socket buffers to store iucv message data.
130 */
131static inline size_t iucv_msg_length(struct iucv_message *msg)
132{
133 size_t datalen;
134
135 if (msg->flags & IUCV_IPRMDATA) {
136 datalen = 0xff - msg->rmmsg[7];
137 return (datalen < 8) ? datalen : 8;
138 }
139 return msg->length;
140}
141
142/**
143 * iucv_sock_in_state() - check for specific states
144 * @sk: sock structure
145 * @state: first iucv sk state
146 * @state2: second iucv sk state
147 *
148 * Returns true if the socket in either in the first or second state.
149 */
150static int iucv_sock_in_state(struct sock *sk, int state, int state2)
151{
152 return (sk->sk_state == state || sk->sk_state == state2);
153}
154
155/**
156 * iucv_below_msglim() - function to check if messages can be sent
157 * @sk: sock structure
158 *
159 * Returns true if the send queue length is lower than the message limit.
160 * Always returns true if the socket is not connected (no iucv path for
161 * checking the message limit).
162 */
163static inline int iucv_below_msglim(struct sock *sk)
164{
165 struct iucv_sock *iucv = iucv_sk(sk);
166
167 if (sk->sk_state != IUCV_CONNECTED)
168 return 1;
169 if (iucv->transport == AF_IUCV_TRANS_IUCV)
170 return (atomic_read(&iucv->skbs_in_xmit) < iucv->path->msglim);
171 else
172 return ((atomic_read(&iucv->msg_sent) < iucv->msglimit_peer) &&
173 (atomic_read(&iucv->pendings) <= 0));
174}
175
176/*
177 * iucv_sock_wake_msglim() - Wake up thread waiting on msg limit
178 */
179static void iucv_sock_wake_msglim(struct sock *sk)
180{
181 struct socket_wq *wq;
182
183 rcu_read_lock();
184 wq = rcu_dereference(sk->sk_wq);
185 if (skwq_has_sleeper(wq))
186 wake_up_interruptible_all(&wq->wait);
187 sk_wake_async(sk, SOCK_WAKE_SPACE, POLL_OUT);
188 rcu_read_unlock();
189}
190
191/*
192 * afiucv_hs_send() - send a message through HiperSockets transport
193 */
194static int afiucv_hs_send(struct iucv_message *imsg, struct sock *sock,
195 struct sk_buff *skb, u8 flags)
196{
197 struct iucv_sock *iucv = iucv_sk(sock);
198 struct af_iucv_trans_hdr *phs_hdr;
199 int err, confirm_recv = 0;
200
201 phs_hdr = skb_push(skb, sizeof(*phs_hdr));
202 memset(phs_hdr, 0, sizeof(*phs_hdr));
203 skb_reset_network_header(skb);
204
205 phs_hdr->magic = ETH_P_AF_IUCV;
206 phs_hdr->version = 1;
207 phs_hdr->flags = flags;
208 if (flags == AF_IUCV_FLAG_SYN)
209 phs_hdr->window = iucv->msglimit;
210 else if ((flags == AF_IUCV_FLAG_WIN) || !flags) {
211 confirm_recv = atomic_read(&iucv->msg_recv);
212 phs_hdr->window = confirm_recv;
213 if (confirm_recv)
214 phs_hdr->flags = phs_hdr->flags | AF_IUCV_FLAG_WIN;
215 }
216 memcpy(phs_hdr->destUserID, iucv->dst_user_id, 8);
217 memcpy(phs_hdr->destAppName, iucv->dst_name, 8);
218 memcpy(phs_hdr->srcUserID, iucv->src_user_id, 8);
219 memcpy(phs_hdr->srcAppName, iucv->src_name, 8);
220 ASCEBC(phs_hdr->destUserID, sizeof(phs_hdr->destUserID));
221 ASCEBC(phs_hdr->destAppName, sizeof(phs_hdr->destAppName));
222 ASCEBC(phs_hdr->srcUserID, sizeof(phs_hdr->srcUserID));
223 ASCEBC(phs_hdr->srcAppName, sizeof(phs_hdr->srcAppName));
224 if (imsg)
225 memcpy(&phs_hdr->iucv_hdr, imsg, sizeof(struct iucv_message));
226
227 skb->dev = iucv->hs_dev;
228 if (!skb->dev) {
229 err = -ENODEV;
230 goto err_free;
231 }
232
233 dev_hard_header(skb, skb->dev, ETH_P_AF_IUCV, NULL, NULL, skb->len);
234
235 if (!(skb->dev->flags & IFF_UP) || !netif_carrier_ok(skb->dev)) {
236 err = -ENETDOWN;
237 goto err_free;
238 }
239 if (skb->len > skb->dev->mtu) {
240 if (sock->sk_type == SOCK_SEQPACKET) {
241 err = -EMSGSIZE;
242 goto err_free;
243 }
244 err = pskb_trim(skb, skb->dev->mtu);
245 if (err)
246 goto err_free;
247 }
248 skb->protocol = cpu_to_be16(ETH_P_AF_IUCV);
249
250 atomic_inc(&iucv->skbs_in_xmit);
251 err = dev_queue_xmit(skb);
252 if (net_xmit_eval(err)) {
253 atomic_dec(&iucv->skbs_in_xmit);
254 } else {
255 atomic_sub(confirm_recv, &iucv->msg_recv);
256 WARN_ON(atomic_read(&iucv->msg_recv) < 0);
257 }
258 return net_xmit_eval(err);
259
260err_free:
261 kfree_skb(skb);
262 return err;
263}
264
265static struct sock *__iucv_get_sock_by_name(char *nm)
266{
267 struct sock *sk;
268
269 sk_for_each(sk, &iucv_sk_list.head)
270 if (!memcmp(&iucv_sk(sk)->src_name, nm, 8))
271 return sk;
272
273 return NULL;
274}
275
276static void iucv_sock_destruct(struct sock *sk)
277{
278 skb_queue_purge(&sk->sk_receive_queue);
279 skb_queue_purge(&sk->sk_error_queue);
280
281 if (!sock_flag(sk, SOCK_DEAD)) {
282 pr_err("Attempt to release alive iucv socket %p\n", sk);
283 return;
284 }
285
286 WARN_ON(atomic_read(&sk->sk_rmem_alloc));
287 WARN_ON(refcount_read(&sk->sk_wmem_alloc));
288 WARN_ON(sk->sk_wmem_queued);
289 WARN_ON(sk->sk_forward_alloc);
290}
291
292/* Cleanup Listen */
293static void iucv_sock_cleanup_listen(struct sock *parent)
294{
295 struct sock *sk;
296
297 /* Close non-accepted connections */
298 while ((sk = iucv_accept_dequeue(parent, NULL))) {
299 iucv_sock_close(sk);
300 iucv_sock_kill(sk);
301 }
302
303 parent->sk_state = IUCV_CLOSED;
304}
305
306static void iucv_sock_link(struct iucv_sock_list *l, struct sock *sk)
307{
308 write_lock_bh(&l->lock);
309 sk_add_node(sk, &l->head);
310 write_unlock_bh(&l->lock);
311}
312
313static void iucv_sock_unlink(struct iucv_sock_list *l, struct sock *sk)
314{
315 write_lock_bh(&l->lock);
316 sk_del_node_init(sk);
317 write_unlock_bh(&l->lock);
318}
319
320/* Kill socket (only if zapped and orphaned) */
321static void iucv_sock_kill(struct sock *sk)
322{
323 if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
324 return;
325
326 iucv_sock_unlink(&iucv_sk_list, sk);
327 sock_set_flag(sk, SOCK_DEAD);
328 sock_put(sk);
329}
330
331/* Terminate an IUCV path */
332static void iucv_sever_path(struct sock *sk, int with_user_data)
333{
334 unsigned char user_data[16];
335 struct iucv_sock *iucv = iucv_sk(sk);
336 struct iucv_path *path = iucv->path;
337
338 if (iucv->path) {
339 iucv->path = NULL;
340 if (with_user_data) {
341 low_nmcpy(user_data, iucv->src_name);
342 high_nmcpy(user_data, iucv->dst_name);
343 ASCEBC(user_data, sizeof(user_data));
344 pr_iucv->path_sever(path, user_data);
345 } else
346 pr_iucv->path_sever(path, NULL);
347 iucv_path_free(path);
348 }
349}
350
351/* Send controlling flags through an IUCV socket for HIPER transport */
352static int iucv_send_ctrl(struct sock *sk, u8 flags)
353{
354 struct iucv_sock *iucv = iucv_sk(sk);
355 int err = 0;
356 int blen;
357 struct sk_buff *skb;
358 u8 shutdown = 0;
359
360 blen = sizeof(struct af_iucv_trans_hdr) +
361 LL_RESERVED_SPACE(iucv->hs_dev);
362 if (sk->sk_shutdown & SEND_SHUTDOWN) {
363 /* controlling flags should be sent anyway */
364 shutdown = sk->sk_shutdown;
365 sk->sk_shutdown &= RCV_SHUTDOWN;
366 }
367 skb = sock_alloc_send_skb(sk, blen, 1, &err);
368 if (skb) {
369 skb_reserve(skb, blen);
370 err = afiucv_hs_send(NULL, sk, skb, flags);
371 }
372 if (shutdown)
373 sk->sk_shutdown = shutdown;
374 return err;
375}
376
377/* Close an IUCV socket */
378static void iucv_sock_close(struct sock *sk)
379{
380 struct iucv_sock *iucv = iucv_sk(sk);
381 unsigned long timeo;
382 int err = 0;
383
384 lock_sock(sk);
385
386 switch (sk->sk_state) {
387 case IUCV_LISTEN:
388 iucv_sock_cleanup_listen(sk);
389 break;
390
391 case IUCV_CONNECTED:
392 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
393 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
394 sk->sk_state = IUCV_DISCONN;
395 sk->sk_state_change(sk);
396 }
397 fallthrough;
398
399 case IUCV_DISCONN:
400 sk->sk_state = IUCV_CLOSING;
401 sk->sk_state_change(sk);
402
403 if (!err && atomic_read(&iucv->skbs_in_xmit) > 0) {
404 if (sock_flag(sk, SOCK_LINGER) && sk->sk_lingertime)
405 timeo = sk->sk_lingertime;
406 else
407 timeo = IUCV_DISCONN_TIMEOUT;
408 iucv_sock_wait(sk,
409 iucv_sock_in_state(sk, IUCV_CLOSED, 0),
410 timeo);
411 }
412 fallthrough;
413
414 case IUCV_CLOSING:
415 sk->sk_state = IUCV_CLOSED;
416 sk->sk_state_change(sk);
417
418 sk->sk_err = ECONNRESET;
419 sk->sk_state_change(sk);
420
421 skb_queue_purge(&iucv->send_skb_q);
422 skb_queue_purge(&iucv->backlog_skb_q);
423 fallthrough;
424
425 default:
426 iucv_sever_path(sk, 1);
427 }
428
429 if (iucv->hs_dev) {
430 dev_put(iucv->hs_dev);
431 iucv->hs_dev = NULL;
432 sk->sk_bound_dev_if = 0;
433 }
434
435 /* mark socket for deletion by iucv_sock_kill() */
436 sock_set_flag(sk, SOCK_ZAPPED);
437
438 release_sock(sk);
439}
440
441static void iucv_sock_init(struct sock *sk, struct sock *parent)
442{
443 if (parent) {
444 sk->sk_type = parent->sk_type;
445 security_sk_clone(parent, sk);
446 }
447}
448
449static struct sock *iucv_sock_alloc(struct socket *sock, int proto, gfp_t prio, int kern)
450{
451 struct sock *sk;
452 struct iucv_sock *iucv;
453
454 sk = sk_alloc(&init_net, PF_IUCV, prio, &iucv_proto, kern);
455 if (!sk)
456 return NULL;
457 iucv = iucv_sk(sk);
458
459 sock_init_data(sock, sk);
460 INIT_LIST_HEAD(&iucv->accept_q);
461 spin_lock_init(&iucv->accept_q_lock);
462 skb_queue_head_init(&iucv->send_skb_q);
463 INIT_LIST_HEAD(&iucv->message_q.list);
464 spin_lock_init(&iucv->message_q.lock);
465 skb_queue_head_init(&iucv->backlog_skb_q);
466 iucv->send_tag = 0;
467 atomic_set(&iucv->pendings, 0);
468 iucv->flags = 0;
469 iucv->msglimit = 0;
470 atomic_set(&iucv->skbs_in_xmit, 0);
471 atomic_set(&iucv->msg_sent, 0);
472 atomic_set(&iucv->msg_recv, 0);
473 iucv->path = NULL;
474 iucv->sk_txnotify = afiucv_hs_callback_txnotify;
475 memset(&iucv->init, 0, sizeof(iucv->init));
476 if (pr_iucv)
477 iucv->transport = AF_IUCV_TRANS_IUCV;
478 else
479 iucv->transport = AF_IUCV_TRANS_HIPER;
480
481 sk->sk_destruct = iucv_sock_destruct;
482 sk->sk_sndtimeo = IUCV_CONN_TIMEOUT;
483
484 sock_reset_flag(sk, SOCK_ZAPPED);
485
486 sk->sk_protocol = proto;
487 sk->sk_state = IUCV_OPEN;
488
489 iucv_sock_link(&iucv_sk_list, sk);
490 return sk;
491}
492
493static void iucv_accept_enqueue(struct sock *parent, struct sock *sk)
494{
495 unsigned long flags;
496 struct iucv_sock *par = iucv_sk(parent);
497
498 sock_hold(sk);
499 spin_lock_irqsave(&par->accept_q_lock, flags);
500 list_add_tail(&iucv_sk(sk)->accept_q, &par->accept_q);
501 spin_unlock_irqrestore(&par->accept_q_lock, flags);
502 iucv_sk(sk)->parent = parent;
503 sk_acceptq_added(parent);
504}
505
506static void iucv_accept_unlink(struct sock *sk)
507{
508 unsigned long flags;
509 struct iucv_sock *par = iucv_sk(iucv_sk(sk)->parent);
510
511 spin_lock_irqsave(&par->accept_q_lock, flags);
512 list_del_init(&iucv_sk(sk)->accept_q);
513 spin_unlock_irqrestore(&par->accept_q_lock, flags);
514 sk_acceptq_removed(iucv_sk(sk)->parent);
515 iucv_sk(sk)->parent = NULL;
516 sock_put(sk);
517}
518
519static struct sock *iucv_accept_dequeue(struct sock *parent,
520 struct socket *newsock)
521{
522 struct iucv_sock *isk, *n;
523 struct sock *sk;
524
525 list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
526 sk = (struct sock *) isk;
527 lock_sock(sk);
528
529 if (sk->sk_state == IUCV_CLOSED) {
530 iucv_accept_unlink(sk);
531 release_sock(sk);
532 continue;
533 }
534
535 if (sk->sk_state == IUCV_CONNECTED ||
536 sk->sk_state == IUCV_DISCONN ||
537 !newsock) {
538 iucv_accept_unlink(sk);
539 if (newsock)
540 sock_graft(sk, newsock);
541
542 release_sock(sk);
543 return sk;
544 }
545
546 release_sock(sk);
547 }
548 return NULL;
549}
550
551static void __iucv_auto_name(struct iucv_sock *iucv)
552{
553 char name[12];
554
555 sprintf(name, "%08x", atomic_inc_return(&iucv_sk_list.autobind_name));
556 while (__iucv_get_sock_by_name(name)) {
557 sprintf(name, "%08x",
558 atomic_inc_return(&iucv_sk_list.autobind_name));
559 }
560 memcpy(iucv->src_name, name, 8);
561}
562
563/* Bind an unbound socket */
564static int iucv_sock_bind(struct socket *sock, struct sockaddr *addr,
565 int addr_len)
566{
567 DECLARE_SOCKADDR(struct sockaddr_iucv *, sa, addr);
568 char uid[sizeof(sa->siucv_user_id)];
569 struct sock *sk = sock->sk;
570 struct iucv_sock *iucv;
571 int err = 0;
572 struct net_device *dev;
573
574 /* Verify the input sockaddr */
575 if (addr_len < sizeof(struct sockaddr_iucv) ||
576 addr->sa_family != AF_IUCV)
577 return -EINVAL;
578
579 lock_sock(sk);
580 if (sk->sk_state != IUCV_OPEN) {
581 err = -EBADFD;
582 goto done;
583 }
584
585 write_lock_bh(&iucv_sk_list.lock);
586
587 iucv = iucv_sk(sk);
588 if (__iucv_get_sock_by_name(sa->siucv_name)) {
589 err = -EADDRINUSE;
590 goto done_unlock;
591 }
592 if (iucv->path)
593 goto done_unlock;
594
595 /* Bind the socket */
596 if (pr_iucv)
597 if (!memcmp(sa->siucv_user_id, iucv_userid, 8))
598 goto vm_bind; /* VM IUCV transport */
599
600 /* try hiper transport */
601 memcpy(uid, sa->siucv_user_id, sizeof(uid));
602 ASCEBC(uid, 8);
603 rcu_read_lock();
604 for_each_netdev_rcu(&init_net, dev) {
605 if (!memcmp(dev->perm_addr, uid, 8)) {
606 memcpy(iucv->src_user_id, sa->siucv_user_id, 8);
607 /* Check for uninitialized siucv_name */
608 if (strncmp(sa->siucv_name, " ", 8) == 0)
609 __iucv_auto_name(iucv);
610 else
611 memcpy(iucv->src_name, sa->siucv_name, 8);
612 sk->sk_bound_dev_if = dev->ifindex;
613 iucv->hs_dev = dev;
614 dev_hold(dev);
615 sk->sk_state = IUCV_BOUND;
616 iucv->transport = AF_IUCV_TRANS_HIPER;
617 if (!iucv->msglimit)
618 iucv->msglimit = IUCV_HIPER_MSGLIM_DEFAULT;
619 rcu_read_unlock();
620 goto done_unlock;
621 }
622 }
623 rcu_read_unlock();
624vm_bind:
625 if (pr_iucv) {
626 /* use local userid for backward compat */
627 memcpy(iucv->src_name, sa->siucv_name, 8);
628 memcpy(iucv->src_user_id, iucv_userid, 8);
629 sk->sk_state = IUCV_BOUND;
630 iucv->transport = AF_IUCV_TRANS_IUCV;
631 sk->sk_allocation |= GFP_DMA;
632 if (!iucv->msglimit)
633 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
634 goto done_unlock;
635 }
636 /* found no dev to bind */
637 err = -ENODEV;
638done_unlock:
639 /* Release the socket list lock */
640 write_unlock_bh(&iucv_sk_list.lock);
641done:
642 release_sock(sk);
643 return err;
644}
645
646/* Automatically bind an unbound socket */
647static int iucv_sock_autobind(struct sock *sk)
648{
649 struct iucv_sock *iucv = iucv_sk(sk);
650 int err = 0;
651
652 if (unlikely(!pr_iucv))
653 return -EPROTO;
654
655 memcpy(iucv->src_user_id, iucv_userid, 8);
656 iucv->transport = AF_IUCV_TRANS_IUCV;
657 sk->sk_allocation |= GFP_DMA;
658
659 write_lock_bh(&iucv_sk_list.lock);
660 __iucv_auto_name(iucv);
661 write_unlock_bh(&iucv_sk_list.lock);
662
663 if (!iucv->msglimit)
664 iucv->msglimit = IUCV_QUEUELEN_DEFAULT;
665
666 return err;
667}
668
669static int afiucv_path_connect(struct socket *sock, struct sockaddr *addr)
670{
671 DECLARE_SOCKADDR(struct sockaddr_iucv *, sa, addr);
672 struct sock *sk = sock->sk;
673 struct iucv_sock *iucv = iucv_sk(sk);
674 unsigned char user_data[16];
675 int err;
676
677 high_nmcpy(user_data, sa->siucv_name);
678 low_nmcpy(user_data, iucv->src_name);
679 ASCEBC(user_data, sizeof(user_data));
680
681 /* Create path. */
682 iucv->path = iucv_path_alloc(iucv->msglimit,
683 IUCV_IPRMDATA, GFP_KERNEL);
684 if (!iucv->path) {
685 err = -ENOMEM;
686 goto done;
687 }
688 err = pr_iucv->path_connect(iucv->path, &af_iucv_handler,
689 sa->siucv_user_id, NULL, user_data,
690 sk);
691 if (err) {
692 iucv_path_free(iucv->path);
693 iucv->path = NULL;
694 switch (err) {
695 case 0x0b: /* Target communicator is not logged on */
696 err = -ENETUNREACH;
697 break;
698 case 0x0d: /* Max connections for this guest exceeded */
699 case 0x0e: /* Max connections for target guest exceeded */
700 err = -EAGAIN;
701 break;
702 case 0x0f: /* Missing IUCV authorization */
703 err = -EACCES;
704 break;
705 default:
706 err = -ECONNREFUSED;
707 break;
708 }
709 }
710done:
711 return err;
712}
713
714/* Connect an unconnected socket */
715static int iucv_sock_connect(struct socket *sock, struct sockaddr *addr,
716 int alen, int flags)
717{
718 DECLARE_SOCKADDR(struct sockaddr_iucv *, sa, addr);
719 struct sock *sk = sock->sk;
720 struct iucv_sock *iucv = iucv_sk(sk);
721 int err;
722
723 if (alen < sizeof(struct sockaddr_iucv) || addr->sa_family != AF_IUCV)
724 return -EINVAL;
725
726 if (sk->sk_state != IUCV_OPEN && sk->sk_state != IUCV_BOUND)
727 return -EBADFD;
728
729 if (sk->sk_state == IUCV_OPEN &&
730 iucv->transport == AF_IUCV_TRANS_HIPER)
731 return -EBADFD; /* explicit bind required */
732
733 if (sk->sk_type != SOCK_STREAM && sk->sk_type != SOCK_SEQPACKET)
734 return -EINVAL;
735
736 if (sk->sk_state == IUCV_OPEN) {
737 err = iucv_sock_autobind(sk);
738 if (unlikely(err))
739 return err;
740 }
741
742 lock_sock(sk);
743
744 /* Set the destination information */
745 memcpy(iucv->dst_user_id, sa->siucv_user_id, 8);
746 memcpy(iucv->dst_name, sa->siucv_name, 8);
747
748 if (iucv->transport == AF_IUCV_TRANS_HIPER)
749 err = iucv_send_ctrl(sock->sk, AF_IUCV_FLAG_SYN);
750 else
751 err = afiucv_path_connect(sock, addr);
752 if (err)
753 goto done;
754
755 if (sk->sk_state != IUCV_CONNECTED)
756 err = iucv_sock_wait(sk, iucv_sock_in_state(sk, IUCV_CONNECTED,
757 IUCV_DISCONN),
758 sock_sndtimeo(sk, flags & O_NONBLOCK));
759
760 if (sk->sk_state == IUCV_DISCONN || sk->sk_state == IUCV_CLOSED)
761 err = -ECONNREFUSED;
762
763 if (err && iucv->transport == AF_IUCV_TRANS_IUCV)
764 iucv_sever_path(sk, 0);
765
766done:
767 release_sock(sk);
768 return err;
769}
770
771/* Move a socket into listening state. */
772static int iucv_sock_listen(struct socket *sock, int backlog)
773{
774 struct sock *sk = sock->sk;
775 int err;
776
777 lock_sock(sk);
778
779 err = -EINVAL;
780 if (sk->sk_state != IUCV_BOUND)
781 goto done;
782
783 if (sock->type != SOCK_STREAM && sock->type != SOCK_SEQPACKET)
784 goto done;
785
786 sk->sk_max_ack_backlog = backlog;
787 sk->sk_ack_backlog = 0;
788 sk->sk_state = IUCV_LISTEN;
789 err = 0;
790
791done:
792 release_sock(sk);
793 return err;
794}
795
796/* Accept a pending connection */
797static int iucv_sock_accept(struct socket *sock, struct socket *newsock,
798 int flags, bool kern)
799{
800 DECLARE_WAITQUEUE(wait, current);
801 struct sock *sk = sock->sk, *nsk;
802 long timeo;
803 int err = 0;
804
805 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
806
807 if (sk->sk_state != IUCV_LISTEN) {
808 err = -EBADFD;
809 goto done;
810 }
811
812 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
813
814 /* Wait for an incoming connection */
815 add_wait_queue_exclusive(sk_sleep(sk), &wait);
816 while (!(nsk = iucv_accept_dequeue(sk, newsock))) {
817 set_current_state(TASK_INTERRUPTIBLE);
818 if (!timeo) {
819 err = -EAGAIN;
820 break;
821 }
822
823 release_sock(sk);
824 timeo = schedule_timeout(timeo);
825 lock_sock_nested(sk, SINGLE_DEPTH_NESTING);
826
827 if (sk->sk_state != IUCV_LISTEN) {
828 err = -EBADFD;
829 break;
830 }
831
832 if (signal_pending(current)) {
833 err = sock_intr_errno(timeo);
834 break;
835 }
836 }
837
838 set_current_state(TASK_RUNNING);
839 remove_wait_queue(sk_sleep(sk), &wait);
840
841 if (err)
842 goto done;
843
844 newsock->state = SS_CONNECTED;
845
846done:
847 release_sock(sk);
848 return err;
849}
850
851static int iucv_sock_getname(struct socket *sock, struct sockaddr *addr,
852 int peer)
853{
854 DECLARE_SOCKADDR(struct sockaddr_iucv *, siucv, addr);
855 struct sock *sk = sock->sk;
856 struct iucv_sock *iucv = iucv_sk(sk);
857
858 addr->sa_family = AF_IUCV;
859
860 if (peer) {
861 memcpy(siucv->siucv_user_id, iucv->dst_user_id, 8);
862 memcpy(siucv->siucv_name, iucv->dst_name, 8);
863 } else {
864 memcpy(siucv->siucv_user_id, iucv->src_user_id, 8);
865 memcpy(siucv->siucv_name, iucv->src_name, 8);
866 }
867 memset(&siucv->siucv_port, 0, sizeof(siucv->siucv_port));
868 memset(&siucv->siucv_addr, 0, sizeof(siucv->siucv_addr));
869 memset(&siucv->siucv_nodeid, 0, sizeof(siucv->siucv_nodeid));
870
871 return sizeof(struct sockaddr_iucv);
872}
873
874/**
875 * iucv_send_iprm() - Send socket data in parameter list of an iucv message.
876 * @path: IUCV path
877 * @msg: Pointer to a struct iucv_message
878 * @skb: The socket data to send, skb->len MUST BE <= 7
879 *
880 * Send the socket data in the parameter list in the iucv message
881 * (IUCV_IPRMDATA). The socket data is stored at index 0 to 6 in the parameter
882 * list and the socket data len at index 7 (last byte).
883 * See also iucv_msg_length().
884 *
885 * Returns the error code from the iucv_message_send() call.
886 */
887static int iucv_send_iprm(struct iucv_path *path, struct iucv_message *msg,
888 struct sk_buff *skb)
889{
890 u8 prmdata[8];
891
892 memcpy(prmdata, (void *) skb->data, skb->len);
893 prmdata[7] = 0xff - (u8) skb->len;
894 return pr_iucv->message_send(path, msg, IUCV_IPRMDATA, 0,
895 (void *) prmdata, 8);
896}
897
898static int iucv_sock_sendmsg(struct socket *sock, struct msghdr *msg,
899 size_t len)
900{
901 struct sock *sk = sock->sk;
902 struct iucv_sock *iucv = iucv_sk(sk);
903 size_t headroom = 0;
904 size_t linear;
905 struct sk_buff *skb;
906 struct iucv_message txmsg = {0};
907 struct cmsghdr *cmsg;
908 int cmsg_done;
909 long timeo;
910 char user_id[9];
911 char appl_id[9];
912 int err;
913 int noblock = msg->msg_flags & MSG_DONTWAIT;
914
915 err = sock_error(sk);
916 if (err)
917 return err;
918
919 if (msg->msg_flags & MSG_OOB)
920 return -EOPNOTSUPP;
921
922 /* SOCK_SEQPACKET: we do not support segmented records */
923 if (sk->sk_type == SOCK_SEQPACKET && !(msg->msg_flags & MSG_EOR))
924 return -EOPNOTSUPP;
925
926 lock_sock(sk);
927
928 if (sk->sk_shutdown & SEND_SHUTDOWN) {
929 err = -EPIPE;
930 goto out;
931 }
932
933 /* Return if the socket is not in connected state */
934 if (sk->sk_state != IUCV_CONNECTED) {
935 err = -ENOTCONN;
936 goto out;
937 }
938
939 /* initialize defaults */
940 cmsg_done = 0; /* check for duplicate headers */
941
942 /* iterate over control messages */
943 for_each_cmsghdr(cmsg, msg) {
944 if (!CMSG_OK(msg, cmsg)) {
945 err = -EINVAL;
946 goto out;
947 }
948
949 if (cmsg->cmsg_level != SOL_IUCV)
950 continue;
951
952 if (cmsg->cmsg_type & cmsg_done) {
953 err = -EINVAL;
954 goto out;
955 }
956 cmsg_done |= cmsg->cmsg_type;
957
958 switch (cmsg->cmsg_type) {
959 case SCM_IUCV_TRGCLS:
960 if (cmsg->cmsg_len != CMSG_LEN(TRGCLS_SIZE)) {
961 err = -EINVAL;
962 goto out;
963 }
964
965 /* set iucv message target class */
966 memcpy(&txmsg.class,
967 (void *) CMSG_DATA(cmsg), TRGCLS_SIZE);
968
969 break;
970
971 default:
972 err = -EINVAL;
973 goto out;
974 }
975 }
976
977 /* allocate one skb for each iucv message:
978 * this is fine for SOCK_SEQPACKET (unless we want to support
979 * segmented records using the MSG_EOR flag), but
980 * for SOCK_STREAM we might want to improve it in future */
981 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
982 headroom = sizeof(struct af_iucv_trans_hdr) +
983 LL_RESERVED_SPACE(iucv->hs_dev);
984 linear = min(len, PAGE_SIZE - headroom);
985 } else {
986 if (len < PAGE_SIZE) {
987 linear = len;
988 } else {
989 /* In nonlinear "classic" iucv skb,
990 * reserve space for iucv_array
991 */
992 headroom = sizeof(struct iucv_array) *
993 (MAX_SKB_FRAGS + 1);
994 linear = PAGE_SIZE - headroom;
995 }
996 }
997 skb = sock_alloc_send_pskb(sk, headroom + linear, len - linear,
998 noblock, &err, 0);
999 if (!skb)
1000 goto out;
1001 if (headroom)
1002 skb_reserve(skb, headroom);
1003 skb_put(skb, linear);
1004 skb->len = len;
1005 skb->data_len = len - linear;
1006 err = skb_copy_datagram_from_iter(skb, 0, &msg->msg_iter, len);
1007 if (err)
1008 goto fail;
1009
1010 /* wait if outstanding messages for iucv path has reached */
1011 timeo = sock_sndtimeo(sk, noblock);
1012 err = iucv_sock_wait(sk, iucv_below_msglim(sk), timeo);
1013 if (err)
1014 goto fail;
1015
1016 /* return -ECONNRESET if the socket is no longer connected */
1017 if (sk->sk_state != IUCV_CONNECTED) {
1018 err = -ECONNRESET;
1019 goto fail;
1020 }
1021
1022 /* increment and save iucv message tag for msg_completion cbk */
1023 txmsg.tag = iucv->send_tag++;
1024 IUCV_SKB_CB(skb)->tag = txmsg.tag;
1025
1026 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1027 atomic_inc(&iucv->msg_sent);
1028 err = afiucv_hs_send(&txmsg, sk, skb, 0);
1029 if (err) {
1030 atomic_dec(&iucv->msg_sent);
1031 goto out;
1032 }
1033 } else { /* Classic VM IUCV transport */
1034 skb_queue_tail(&iucv->send_skb_q, skb);
1035 atomic_inc(&iucv->skbs_in_xmit);
1036
1037 if (((iucv->path->flags & IUCV_IPRMDATA) & iucv->flags) &&
1038 skb->len <= 7) {
1039 err = iucv_send_iprm(iucv->path, &txmsg, skb);
1040
1041 /* on success: there is no message_complete callback */
1042 /* for an IPRMDATA msg; remove skb from send queue */
1043 if (err == 0) {
1044 atomic_dec(&iucv->skbs_in_xmit);
1045 skb_unlink(skb, &iucv->send_skb_q);
1046 consume_skb(skb);
1047 }
1048
1049 /* this error should never happen since the */
1050 /* IUCV_IPRMDATA path flag is set... sever path */
1051 if (err == 0x15) {
1052 pr_iucv->path_sever(iucv->path, NULL);
1053 atomic_dec(&iucv->skbs_in_xmit);
1054 skb_unlink(skb, &iucv->send_skb_q);
1055 err = -EPIPE;
1056 goto fail;
1057 }
1058 } else if (skb_is_nonlinear(skb)) {
1059 struct iucv_array *iba = (struct iucv_array *)skb->head;
1060 int i;
1061
1062 /* skip iucv_array lying in the headroom */
1063 iba[0].address = (u32)(addr_t)skb->data;
1064 iba[0].length = (u32)skb_headlen(skb);
1065 for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
1066 skb_frag_t *frag = &skb_shinfo(skb)->frags[i];
1067
1068 iba[i + 1].address =
1069 (u32)(addr_t)skb_frag_address(frag);
1070 iba[i + 1].length = (u32)skb_frag_size(frag);
1071 }
1072 err = pr_iucv->message_send(iucv->path, &txmsg,
1073 IUCV_IPBUFLST, 0,
1074 (void *)iba, skb->len);
1075 } else { /* non-IPRM Linear skb */
1076 err = pr_iucv->message_send(iucv->path, &txmsg,
1077 0, 0, (void *)skb->data, skb->len);
1078 }
1079 if (err) {
1080 if (err == 3) {
1081 user_id[8] = 0;
1082 memcpy(user_id, iucv->dst_user_id, 8);
1083 appl_id[8] = 0;
1084 memcpy(appl_id, iucv->dst_name, 8);
1085 pr_err(
1086 "Application %s on z/VM guest %s exceeds message limit\n",
1087 appl_id, user_id);
1088 err = -EAGAIN;
1089 } else {
1090 err = -EPIPE;
1091 }
1092
1093 atomic_dec(&iucv->skbs_in_xmit);
1094 skb_unlink(skb, &iucv->send_skb_q);
1095 goto fail;
1096 }
1097 }
1098
1099 release_sock(sk);
1100 return len;
1101
1102fail:
1103 kfree_skb(skb);
1104out:
1105 release_sock(sk);
1106 return err;
1107}
1108
1109static struct sk_buff *alloc_iucv_recv_skb(unsigned long len)
1110{
1111 size_t headroom, linear;
1112 struct sk_buff *skb;
1113 int err;
1114
1115 if (len < PAGE_SIZE) {
1116 headroom = 0;
1117 linear = len;
1118 } else {
1119 headroom = sizeof(struct iucv_array) * (MAX_SKB_FRAGS + 1);
1120 linear = PAGE_SIZE - headroom;
1121 }
1122 skb = alloc_skb_with_frags(headroom + linear, len - linear,
1123 0, &err, GFP_ATOMIC | GFP_DMA);
1124 WARN_ONCE(!skb,
1125 "alloc of recv iucv skb len=%lu failed with errcode=%d\n",
1126 len, err);
1127 if (skb) {
1128 if (headroom)
1129 skb_reserve(skb, headroom);
1130 skb_put(skb, linear);
1131 skb->len = len;
1132 skb->data_len = len - linear;
1133 }
1134 return skb;
1135}
1136
1137/* iucv_process_message() - Receive a single outstanding IUCV message
1138 *
1139 * Locking: must be called with message_q.lock held
1140 */
1141static void iucv_process_message(struct sock *sk, struct sk_buff *skb,
1142 struct iucv_path *path,
1143 struct iucv_message *msg)
1144{
1145 int rc;
1146 unsigned int len;
1147
1148 len = iucv_msg_length(msg);
1149
1150 /* store msg target class in the second 4 bytes of skb ctrl buffer */
1151 /* Note: the first 4 bytes are reserved for msg tag */
1152 IUCV_SKB_CB(skb)->class = msg->class;
1153
1154 /* check for special IPRM messages (e.g. iucv_sock_shutdown) */
1155 if ((msg->flags & IUCV_IPRMDATA) && len > 7) {
1156 if (memcmp(msg->rmmsg, iprm_shutdown, 8) == 0) {
1157 skb->data = NULL;
1158 skb->len = 0;
1159 }
1160 } else {
1161 if (skb_is_nonlinear(skb)) {
1162 struct iucv_array *iba = (struct iucv_array *)skb->head;
1163 int i;
1164
1165 iba[0].address = (u32)(addr_t)skb->data;
1166 iba[0].length = (u32)skb_headlen(skb);
1167 for (i = 0; i < skb_shinfo(skb)->nr_frags; i++) {
1168 skb_frag_t *frag = &skb_shinfo(skb)->frags[i];
1169
1170 iba[i + 1].address =
1171 (u32)(addr_t)skb_frag_address(frag);
1172 iba[i + 1].length = (u32)skb_frag_size(frag);
1173 }
1174 rc = pr_iucv->message_receive(path, msg,
1175 IUCV_IPBUFLST,
1176 (void *)iba, len, NULL);
1177 } else {
1178 rc = pr_iucv->message_receive(path, msg,
1179 msg->flags & IUCV_IPRMDATA,
1180 skb->data, len, NULL);
1181 }
1182 if (rc) {
1183 kfree_skb(skb);
1184 return;
1185 }
1186 WARN_ON_ONCE(skb->len != len);
1187 }
1188
1189 IUCV_SKB_CB(skb)->offset = 0;
1190 if (sk_filter(sk, skb)) {
1191 atomic_inc(&sk->sk_drops); /* skb rejected by filter */
1192 kfree_skb(skb);
1193 return;
1194 }
1195 if (__sock_queue_rcv_skb(sk, skb)) /* handle rcv queue full */
1196 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, skb);
1197}
1198
1199/* iucv_process_message_q() - Process outstanding IUCV messages
1200 *
1201 * Locking: must be called with message_q.lock held
1202 */
1203static void iucv_process_message_q(struct sock *sk)
1204{
1205 struct iucv_sock *iucv = iucv_sk(sk);
1206 struct sk_buff *skb;
1207 struct sock_msg_q *p, *n;
1208
1209 list_for_each_entry_safe(p, n, &iucv->message_q.list, list) {
1210 skb = alloc_iucv_recv_skb(iucv_msg_length(&p->msg));
1211 if (!skb)
1212 break;
1213 iucv_process_message(sk, skb, p->path, &p->msg);
1214 list_del(&p->list);
1215 kfree(p);
1216 if (!skb_queue_empty(&iucv->backlog_skb_q))
1217 break;
1218 }
1219}
1220
1221static int iucv_sock_recvmsg(struct socket *sock, struct msghdr *msg,
1222 size_t len, int flags)
1223{
1224 struct sock *sk = sock->sk;
1225 struct iucv_sock *iucv = iucv_sk(sk);
1226 unsigned int copied, rlen;
1227 struct sk_buff *skb, *rskb, *cskb;
1228 int err = 0;
1229 u32 offset;
1230
1231 if ((sk->sk_state == IUCV_DISCONN) &&
1232 skb_queue_empty(&iucv->backlog_skb_q) &&
1233 skb_queue_empty(&sk->sk_receive_queue) &&
1234 list_empty(&iucv->message_q.list))
1235 return 0;
1236
1237 if (flags & (MSG_OOB))
1238 return -EOPNOTSUPP;
1239
1240 /* receive/dequeue next skb:
1241 * the function understands MSG_PEEK and, thus, does not dequeue skb */
1242 skb = skb_recv_datagram(sk, flags, &err);
1243 if (!skb) {
1244 if (sk->sk_shutdown & RCV_SHUTDOWN)
1245 return 0;
1246 return err;
1247 }
1248
1249 offset = IUCV_SKB_CB(skb)->offset;
1250 rlen = skb->len - offset; /* real length of skb */
1251 copied = min_t(unsigned int, rlen, len);
1252 if (!rlen)
1253 sk->sk_shutdown = sk->sk_shutdown | RCV_SHUTDOWN;
1254
1255 cskb = skb;
1256 if (skb_copy_datagram_msg(cskb, offset, msg, copied)) {
1257 if (!(flags & MSG_PEEK))
1258 skb_queue_head(&sk->sk_receive_queue, skb);
1259 return -EFAULT;
1260 }
1261
1262 /* SOCK_SEQPACKET: set MSG_TRUNC if recv buf size is too small */
1263 if (sk->sk_type == SOCK_SEQPACKET) {
1264 if (copied < rlen)
1265 msg->msg_flags |= MSG_TRUNC;
1266 /* each iucv message contains a complete record */
1267 msg->msg_flags |= MSG_EOR;
1268 }
1269
1270 /* create control message to store iucv msg target class:
1271 * get the trgcls from the control buffer of the skb due to
1272 * fragmentation of original iucv message. */
1273 err = put_cmsg(msg, SOL_IUCV, SCM_IUCV_TRGCLS,
1274 sizeof(IUCV_SKB_CB(skb)->class),
1275 (void *)&IUCV_SKB_CB(skb)->class);
1276 if (err) {
1277 if (!(flags & MSG_PEEK))
1278 skb_queue_head(&sk->sk_receive_queue, skb);
1279 return err;
1280 }
1281
1282 /* Mark read part of skb as used */
1283 if (!(flags & MSG_PEEK)) {
1284
1285 /* SOCK_STREAM: re-queue skb if it contains unreceived data */
1286 if (sk->sk_type == SOCK_STREAM) {
1287 if (copied < rlen) {
1288 IUCV_SKB_CB(skb)->offset = offset + copied;
1289 skb_queue_head(&sk->sk_receive_queue, skb);
1290 goto done;
1291 }
1292 }
1293
1294 consume_skb(skb);
1295 if (iucv->transport == AF_IUCV_TRANS_HIPER) {
1296 atomic_inc(&iucv->msg_recv);
1297 if (atomic_read(&iucv->msg_recv) > iucv->msglimit) {
1298 WARN_ON(1);
1299 iucv_sock_close(sk);
1300 return -EFAULT;
1301 }
1302 }
1303
1304 /* Queue backlog skbs */
1305 spin_lock_bh(&iucv->message_q.lock);
1306 rskb = skb_dequeue(&iucv->backlog_skb_q);
1307 while (rskb) {
1308 IUCV_SKB_CB(rskb)->offset = 0;
1309 if (__sock_queue_rcv_skb(sk, rskb)) {
1310 /* handle rcv queue full */
1311 skb_queue_head(&iucv->backlog_skb_q,
1312 rskb);
1313 break;
1314 }
1315 rskb = skb_dequeue(&iucv->backlog_skb_q);
1316 }
1317 if (skb_queue_empty(&iucv->backlog_skb_q)) {
1318 if (!list_empty(&iucv->message_q.list))
1319 iucv_process_message_q(sk);
1320 if (atomic_read(&iucv->msg_recv) >=
1321 iucv->msglimit / 2) {
1322 err = iucv_send_ctrl(sk, AF_IUCV_FLAG_WIN);
1323 if (err) {
1324 sk->sk_state = IUCV_DISCONN;
1325 sk->sk_state_change(sk);
1326 }
1327 }
1328 }
1329 spin_unlock_bh(&iucv->message_q.lock);
1330 }
1331
1332done:
1333 /* SOCK_SEQPACKET: return real length if MSG_TRUNC is set */
1334 if (sk->sk_type == SOCK_SEQPACKET && (flags & MSG_TRUNC))
1335 copied = rlen;
1336
1337 return copied;
1338}
1339
1340static inline __poll_t iucv_accept_poll(struct sock *parent)
1341{
1342 struct iucv_sock *isk, *n;
1343 struct sock *sk;
1344
1345 list_for_each_entry_safe(isk, n, &iucv_sk(parent)->accept_q, accept_q) {
1346 sk = (struct sock *) isk;
1347
1348 if (sk->sk_state == IUCV_CONNECTED)
1349 return EPOLLIN | EPOLLRDNORM;
1350 }
1351
1352 return 0;
1353}
1354
1355static __poll_t iucv_sock_poll(struct file *file, struct socket *sock,
1356 poll_table *wait)
1357{
1358 struct sock *sk = sock->sk;
1359 __poll_t mask = 0;
1360
1361 sock_poll_wait(file, sock, wait);
1362
1363 if (sk->sk_state == IUCV_LISTEN)
1364 return iucv_accept_poll(sk);
1365
1366 if (sk->sk_err || !skb_queue_empty(&sk->sk_error_queue))
1367 mask |= EPOLLERR |
1368 (sock_flag(sk, SOCK_SELECT_ERR_QUEUE) ? EPOLLPRI : 0);
1369
1370 if (sk->sk_shutdown & RCV_SHUTDOWN)
1371 mask |= EPOLLRDHUP;
1372
1373 if (sk->sk_shutdown == SHUTDOWN_MASK)
1374 mask |= EPOLLHUP;
1375
1376 if (!skb_queue_empty(&sk->sk_receive_queue) ||
1377 (sk->sk_shutdown & RCV_SHUTDOWN))
1378 mask |= EPOLLIN | EPOLLRDNORM;
1379
1380 if (sk->sk_state == IUCV_CLOSED)
1381 mask |= EPOLLHUP;
1382
1383 if (sk->sk_state == IUCV_DISCONN)
1384 mask |= EPOLLIN;
1385
1386 if (sock_writeable(sk) && iucv_below_msglim(sk))
1387 mask |= EPOLLOUT | EPOLLWRNORM | EPOLLWRBAND;
1388 else
1389 sk_set_bit(SOCKWQ_ASYNC_NOSPACE, sk);
1390
1391 return mask;
1392}
1393
1394static int iucv_sock_shutdown(struct socket *sock, int how)
1395{
1396 struct sock *sk = sock->sk;
1397 struct iucv_sock *iucv = iucv_sk(sk);
1398 struct iucv_message txmsg;
1399 int err = 0;
1400
1401 how++;
1402
1403 if ((how & ~SHUTDOWN_MASK) || !how)
1404 return -EINVAL;
1405
1406 lock_sock(sk);
1407 switch (sk->sk_state) {
1408 case IUCV_LISTEN:
1409 case IUCV_DISCONN:
1410 case IUCV_CLOSING:
1411 case IUCV_CLOSED:
1412 err = -ENOTCONN;
1413 goto fail;
1414 default:
1415 break;
1416 }
1417
1418 if ((how == SEND_SHUTDOWN || how == SHUTDOWN_MASK) &&
1419 sk->sk_state == IUCV_CONNECTED) {
1420 if (iucv->transport == AF_IUCV_TRANS_IUCV) {
1421 txmsg.class = 0;
1422 txmsg.tag = 0;
1423 err = pr_iucv->message_send(iucv->path, &txmsg,
1424 IUCV_IPRMDATA, 0, (void *) iprm_shutdown, 8);
1425 if (err) {
1426 switch (err) {
1427 case 1:
1428 err = -ENOTCONN;
1429 break;
1430 case 2:
1431 err = -ECONNRESET;
1432 break;
1433 default:
1434 err = -ENOTCONN;
1435 break;
1436 }
1437 }
1438 } else
1439 iucv_send_ctrl(sk, AF_IUCV_FLAG_SHT);
1440 }
1441
1442 sk->sk_shutdown |= how;
1443 if (how == RCV_SHUTDOWN || how == SHUTDOWN_MASK) {
1444 if ((iucv->transport == AF_IUCV_TRANS_IUCV) &&
1445 iucv->path) {
1446 err = pr_iucv->path_quiesce(iucv->path, NULL);
1447 if (err)
1448 err = -ENOTCONN;
1449/* skb_queue_purge(&sk->sk_receive_queue); */
1450 }
1451 skb_queue_purge(&sk->sk_receive_queue);
1452 }
1453
1454 /* Wake up anyone sleeping in poll */
1455 sk->sk_state_change(sk);
1456
1457fail:
1458 release_sock(sk);
1459 return err;
1460}
1461
1462static int iucv_sock_release(struct socket *sock)
1463{
1464 struct sock *sk = sock->sk;
1465 int err = 0;
1466
1467 if (!sk)
1468 return 0;
1469
1470 iucv_sock_close(sk);
1471
1472 sock_orphan(sk);
1473 iucv_sock_kill(sk);
1474 return err;
1475}
1476
1477/* getsockopt and setsockopt */
1478static int iucv_sock_setsockopt(struct socket *sock, int level, int optname,
1479 sockptr_t optval, unsigned int optlen)
1480{
1481 struct sock *sk = sock->sk;
1482 struct iucv_sock *iucv = iucv_sk(sk);
1483 int val;
1484 int rc;
1485
1486 if (level != SOL_IUCV)
1487 return -ENOPROTOOPT;
1488
1489 if (optlen < sizeof(int))
1490 return -EINVAL;
1491
1492 if (copy_from_sockptr(&val, optval, sizeof(int)))
1493 return -EFAULT;
1494
1495 rc = 0;
1496
1497 lock_sock(sk);
1498 switch (optname) {
1499 case SO_IPRMDATA_MSG:
1500 if (val)
1501 iucv->flags |= IUCV_IPRMDATA;
1502 else
1503 iucv->flags &= ~IUCV_IPRMDATA;
1504 break;
1505 case SO_MSGLIMIT:
1506 switch (sk->sk_state) {
1507 case IUCV_OPEN:
1508 case IUCV_BOUND:
1509 if (val < 1 || val > U16_MAX)
1510 rc = -EINVAL;
1511 else
1512 iucv->msglimit = val;
1513 break;
1514 default:
1515 rc = -EINVAL;
1516 break;
1517 }
1518 break;
1519 default:
1520 rc = -ENOPROTOOPT;
1521 break;
1522 }
1523 release_sock(sk);
1524
1525 return rc;
1526}
1527
1528static int iucv_sock_getsockopt(struct socket *sock, int level, int optname,
1529 char __user *optval, int __user *optlen)
1530{
1531 struct sock *sk = sock->sk;
1532 struct iucv_sock *iucv = iucv_sk(sk);
1533 unsigned int val;
1534 int len;
1535
1536 if (level != SOL_IUCV)
1537 return -ENOPROTOOPT;
1538
1539 if (get_user(len, optlen))
1540 return -EFAULT;
1541
1542 if (len < 0)
1543 return -EINVAL;
1544
1545 len = min_t(unsigned int, len, sizeof(int));
1546
1547 switch (optname) {
1548 case SO_IPRMDATA_MSG:
1549 val = (iucv->flags & IUCV_IPRMDATA) ? 1 : 0;
1550 break;
1551 case SO_MSGLIMIT:
1552 lock_sock(sk);
1553 val = (iucv->path != NULL) ? iucv->path->msglim /* connected */
1554 : iucv->msglimit; /* default */
1555 release_sock(sk);
1556 break;
1557 case SO_MSGSIZE:
1558 if (sk->sk_state == IUCV_OPEN)
1559 return -EBADFD;
1560 val = (iucv->hs_dev) ? iucv->hs_dev->mtu -
1561 sizeof(struct af_iucv_trans_hdr) - ETH_HLEN :
1562 0x7fffffff;
1563 break;
1564 default:
1565 return -ENOPROTOOPT;
1566 }
1567
1568 if (put_user(len, optlen))
1569 return -EFAULT;
1570 if (copy_to_user(optval, &val, len))
1571 return -EFAULT;
1572
1573 return 0;
1574}
1575
1576
1577/* Callback wrappers - called from iucv base support */
1578static int iucv_callback_connreq(struct iucv_path *path,
1579 u8 ipvmid[8], u8 ipuser[16])
1580{
1581 unsigned char user_data[16];
1582 unsigned char nuser_data[16];
1583 unsigned char src_name[8];
1584 struct sock *sk, *nsk;
1585 struct iucv_sock *iucv, *niucv;
1586 int err;
1587
1588 memcpy(src_name, ipuser, 8);
1589 EBCASC(src_name, 8);
1590 /* Find out if this path belongs to af_iucv. */
1591 read_lock(&iucv_sk_list.lock);
1592 iucv = NULL;
1593 sk = NULL;
1594 sk_for_each(sk, &iucv_sk_list.head)
1595 if (sk->sk_state == IUCV_LISTEN &&
1596 !memcmp(&iucv_sk(sk)->src_name, src_name, 8)) {
1597 /*
1598 * Found a listening socket with
1599 * src_name == ipuser[0-7].
1600 */
1601 iucv = iucv_sk(sk);
1602 break;
1603 }
1604 read_unlock(&iucv_sk_list.lock);
1605 if (!iucv)
1606 /* No socket found, not one of our paths. */
1607 return -EINVAL;
1608
1609 bh_lock_sock(sk);
1610
1611 /* Check if parent socket is listening */
1612 low_nmcpy(user_data, iucv->src_name);
1613 high_nmcpy(user_data, iucv->dst_name);
1614 ASCEBC(user_data, sizeof(user_data));
1615 if (sk->sk_state != IUCV_LISTEN) {
1616 err = pr_iucv->path_sever(path, user_data);
1617 iucv_path_free(path);
1618 goto fail;
1619 }
1620
1621 /* Check for backlog size */
1622 if (sk_acceptq_is_full(sk)) {
1623 err = pr_iucv->path_sever(path, user_data);
1624 iucv_path_free(path);
1625 goto fail;
1626 }
1627
1628 /* Create the new socket */
1629 nsk = iucv_sock_alloc(NULL, sk->sk_protocol, GFP_ATOMIC, 0);
1630 if (!nsk) {
1631 err = pr_iucv->path_sever(path, user_data);
1632 iucv_path_free(path);
1633 goto fail;
1634 }
1635
1636 niucv = iucv_sk(nsk);
1637 iucv_sock_init(nsk, sk);
1638 niucv->transport = AF_IUCV_TRANS_IUCV;
1639 nsk->sk_allocation |= GFP_DMA;
1640
1641 /* Set the new iucv_sock */
1642 memcpy(niucv->dst_name, ipuser + 8, 8);
1643 EBCASC(niucv->dst_name, 8);
1644 memcpy(niucv->dst_user_id, ipvmid, 8);
1645 memcpy(niucv->src_name, iucv->src_name, 8);
1646 memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1647 niucv->path = path;
1648
1649 /* Call iucv_accept */
1650 high_nmcpy(nuser_data, ipuser + 8);
1651 memcpy(nuser_data + 8, niucv->src_name, 8);
1652 ASCEBC(nuser_data + 8, 8);
1653
1654 /* set message limit for path based on msglimit of accepting socket */
1655 niucv->msglimit = iucv->msglimit;
1656 path->msglim = iucv->msglimit;
1657 err = pr_iucv->path_accept(path, &af_iucv_handler, nuser_data, nsk);
1658 if (err) {
1659 iucv_sever_path(nsk, 1);
1660 iucv_sock_kill(nsk);
1661 goto fail;
1662 }
1663
1664 iucv_accept_enqueue(sk, nsk);
1665
1666 /* Wake up accept */
1667 nsk->sk_state = IUCV_CONNECTED;
1668 sk->sk_data_ready(sk);
1669 err = 0;
1670fail:
1671 bh_unlock_sock(sk);
1672 return 0;
1673}
1674
1675static void iucv_callback_connack(struct iucv_path *path, u8 ipuser[16])
1676{
1677 struct sock *sk = path->private;
1678
1679 sk->sk_state = IUCV_CONNECTED;
1680 sk->sk_state_change(sk);
1681}
1682
1683static void iucv_callback_rx(struct iucv_path *path, struct iucv_message *msg)
1684{
1685 struct sock *sk = path->private;
1686 struct iucv_sock *iucv = iucv_sk(sk);
1687 struct sk_buff *skb;
1688 struct sock_msg_q *save_msg;
1689 int len;
1690
1691 if (sk->sk_shutdown & RCV_SHUTDOWN) {
1692 pr_iucv->message_reject(path, msg);
1693 return;
1694 }
1695
1696 spin_lock(&iucv->message_q.lock);
1697
1698 if (!list_empty(&iucv->message_q.list) ||
1699 !skb_queue_empty(&iucv->backlog_skb_q))
1700 goto save_message;
1701
1702 len = atomic_read(&sk->sk_rmem_alloc);
1703 len += SKB_TRUESIZE(iucv_msg_length(msg));
1704 if (len > sk->sk_rcvbuf)
1705 goto save_message;
1706
1707 skb = alloc_iucv_recv_skb(iucv_msg_length(msg));
1708 if (!skb)
1709 goto save_message;
1710
1711 iucv_process_message(sk, skb, path, msg);
1712 goto out_unlock;
1713
1714save_message:
1715 save_msg = kzalloc(sizeof(struct sock_msg_q), GFP_ATOMIC | GFP_DMA);
1716 if (!save_msg)
1717 goto out_unlock;
1718 save_msg->path = path;
1719 save_msg->msg = *msg;
1720
1721 list_add_tail(&save_msg->list, &iucv->message_q.list);
1722
1723out_unlock:
1724 spin_unlock(&iucv->message_q.lock);
1725}
1726
1727static void iucv_callback_txdone(struct iucv_path *path,
1728 struct iucv_message *msg)
1729{
1730 struct sock *sk = path->private;
1731 struct sk_buff *this = NULL;
1732 struct sk_buff_head *list;
1733 struct sk_buff *list_skb;
1734 struct iucv_sock *iucv;
1735 unsigned long flags;
1736
1737 iucv = iucv_sk(sk);
1738 list = &iucv->send_skb_q;
1739
1740 bh_lock_sock(sk);
1741
1742 spin_lock_irqsave(&list->lock, flags);
1743 skb_queue_walk(list, list_skb) {
1744 if (msg->tag == IUCV_SKB_CB(list_skb)->tag) {
1745 this = list_skb;
1746 break;
1747 }
1748 }
1749 if (this) {
1750 atomic_dec(&iucv->skbs_in_xmit);
1751 __skb_unlink(this, list);
1752 }
1753
1754 spin_unlock_irqrestore(&list->lock, flags);
1755
1756 if (this) {
1757 consume_skb(this);
1758 /* wake up any process waiting for sending */
1759 iucv_sock_wake_msglim(sk);
1760 }
1761
1762 if (sk->sk_state == IUCV_CLOSING) {
1763 if (atomic_read(&iucv->skbs_in_xmit) == 0) {
1764 sk->sk_state = IUCV_CLOSED;
1765 sk->sk_state_change(sk);
1766 }
1767 }
1768 bh_unlock_sock(sk);
1769
1770}
1771
1772static void iucv_callback_connrej(struct iucv_path *path, u8 ipuser[16])
1773{
1774 struct sock *sk = path->private;
1775
1776 if (sk->sk_state == IUCV_CLOSED)
1777 return;
1778
1779 bh_lock_sock(sk);
1780 iucv_sever_path(sk, 1);
1781 sk->sk_state = IUCV_DISCONN;
1782
1783 sk->sk_state_change(sk);
1784 bh_unlock_sock(sk);
1785}
1786
1787/* called if the other communication side shuts down its RECV direction;
1788 * in turn, the callback sets SEND_SHUTDOWN to disable sending of data.
1789 */
1790static void iucv_callback_shutdown(struct iucv_path *path, u8 ipuser[16])
1791{
1792 struct sock *sk = path->private;
1793
1794 bh_lock_sock(sk);
1795 if (sk->sk_state != IUCV_CLOSED) {
1796 sk->sk_shutdown |= SEND_SHUTDOWN;
1797 sk->sk_state_change(sk);
1798 }
1799 bh_unlock_sock(sk);
1800}
1801
1802static struct iucv_handler af_iucv_handler = {
1803 .path_pending = iucv_callback_connreq,
1804 .path_complete = iucv_callback_connack,
1805 .path_severed = iucv_callback_connrej,
1806 .message_pending = iucv_callback_rx,
1807 .message_complete = iucv_callback_txdone,
1808 .path_quiesced = iucv_callback_shutdown,
1809};
1810
1811/***************** HiperSockets transport callbacks ********************/
1812static void afiucv_swap_src_dest(struct sk_buff *skb)
1813{
1814 struct af_iucv_trans_hdr *trans_hdr = iucv_trans_hdr(skb);
1815 char tmpID[8];
1816 char tmpName[8];
1817
1818 ASCEBC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
1819 ASCEBC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
1820 ASCEBC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
1821 ASCEBC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
1822 memcpy(tmpID, trans_hdr->srcUserID, 8);
1823 memcpy(tmpName, trans_hdr->srcAppName, 8);
1824 memcpy(trans_hdr->srcUserID, trans_hdr->destUserID, 8);
1825 memcpy(trans_hdr->srcAppName, trans_hdr->destAppName, 8);
1826 memcpy(trans_hdr->destUserID, tmpID, 8);
1827 memcpy(trans_hdr->destAppName, tmpName, 8);
1828 skb_push(skb, ETH_HLEN);
1829 memset(skb->data, 0, ETH_HLEN);
1830}
1831
1832/*
1833 * afiucv_hs_callback_syn - react on received SYN
1834 */
1835static int afiucv_hs_callback_syn(struct sock *sk, struct sk_buff *skb)
1836{
1837 struct af_iucv_trans_hdr *trans_hdr = iucv_trans_hdr(skb);
1838 struct sock *nsk;
1839 struct iucv_sock *iucv, *niucv;
1840 int err;
1841
1842 iucv = iucv_sk(sk);
1843 if (!iucv) {
1844 /* no sock - connection refused */
1845 afiucv_swap_src_dest(skb);
1846 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1847 err = dev_queue_xmit(skb);
1848 goto out;
1849 }
1850
1851 nsk = iucv_sock_alloc(NULL, sk->sk_protocol, GFP_ATOMIC, 0);
1852 bh_lock_sock(sk);
1853 if ((sk->sk_state != IUCV_LISTEN) ||
1854 sk_acceptq_is_full(sk) ||
1855 !nsk) {
1856 /* error on server socket - connection refused */
1857 afiucv_swap_src_dest(skb);
1858 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN;
1859 err = dev_queue_xmit(skb);
1860 iucv_sock_kill(nsk);
1861 bh_unlock_sock(sk);
1862 goto out;
1863 }
1864
1865 niucv = iucv_sk(nsk);
1866 iucv_sock_init(nsk, sk);
1867 niucv->transport = AF_IUCV_TRANS_HIPER;
1868 niucv->msglimit = iucv->msglimit;
1869 if (!trans_hdr->window)
1870 niucv->msglimit_peer = IUCV_HIPER_MSGLIM_DEFAULT;
1871 else
1872 niucv->msglimit_peer = trans_hdr->window;
1873 memcpy(niucv->dst_name, trans_hdr->srcAppName, 8);
1874 memcpy(niucv->dst_user_id, trans_hdr->srcUserID, 8);
1875 memcpy(niucv->src_name, iucv->src_name, 8);
1876 memcpy(niucv->src_user_id, iucv->src_user_id, 8);
1877 nsk->sk_bound_dev_if = sk->sk_bound_dev_if;
1878 niucv->hs_dev = iucv->hs_dev;
1879 dev_hold(niucv->hs_dev);
1880 afiucv_swap_src_dest(skb);
1881 trans_hdr->flags = AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK;
1882 trans_hdr->window = niucv->msglimit;
1883 /* if receiver acks the xmit connection is established */
1884 err = dev_queue_xmit(skb);
1885 if (!err) {
1886 iucv_accept_enqueue(sk, nsk);
1887 nsk->sk_state = IUCV_CONNECTED;
1888 sk->sk_data_ready(sk);
1889 } else
1890 iucv_sock_kill(nsk);
1891 bh_unlock_sock(sk);
1892
1893out:
1894 return NET_RX_SUCCESS;
1895}
1896
1897/*
1898 * afiucv_hs_callback_synack() - react on received SYN-ACK
1899 */
1900static int afiucv_hs_callback_synack(struct sock *sk, struct sk_buff *skb)
1901{
1902 struct iucv_sock *iucv = iucv_sk(sk);
1903
1904 if (!iucv || sk->sk_state != IUCV_BOUND) {
1905 kfree_skb(skb);
1906 return NET_RX_SUCCESS;
1907 }
1908
1909 bh_lock_sock(sk);
1910 iucv->msglimit_peer = iucv_trans_hdr(skb)->window;
1911 sk->sk_state = IUCV_CONNECTED;
1912 sk->sk_state_change(sk);
1913 bh_unlock_sock(sk);
1914 consume_skb(skb);
1915 return NET_RX_SUCCESS;
1916}
1917
1918/*
1919 * afiucv_hs_callback_synfin() - react on received SYN_FIN
1920 */
1921static int afiucv_hs_callback_synfin(struct sock *sk, struct sk_buff *skb)
1922{
1923 struct iucv_sock *iucv = iucv_sk(sk);
1924
1925 if (!iucv || sk->sk_state != IUCV_BOUND) {
1926 kfree_skb(skb);
1927 return NET_RX_SUCCESS;
1928 }
1929
1930 bh_lock_sock(sk);
1931 sk->sk_state = IUCV_DISCONN;
1932 sk->sk_state_change(sk);
1933 bh_unlock_sock(sk);
1934 consume_skb(skb);
1935 return NET_RX_SUCCESS;
1936}
1937
1938/*
1939 * afiucv_hs_callback_fin() - react on received FIN
1940 */
1941static int afiucv_hs_callback_fin(struct sock *sk, struct sk_buff *skb)
1942{
1943 struct iucv_sock *iucv = iucv_sk(sk);
1944
1945 /* other end of connection closed */
1946 if (!iucv) {
1947 kfree_skb(skb);
1948 return NET_RX_SUCCESS;
1949 }
1950
1951 bh_lock_sock(sk);
1952 if (sk->sk_state == IUCV_CONNECTED) {
1953 sk->sk_state = IUCV_DISCONN;
1954 sk->sk_state_change(sk);
1955 }
1956 bh_unlock_sock(sk);
1957 consume_skb(skb);
1958 return NET_RX_SUCCESS;
1959}
1960
1961/*
1962 * afiucv_hs_callback_win() - react on received WIN
1963 */
1964static int afiucv_hs_callback_win(struct sock *sk, struct sk_buff *skb)
1965{
1966 struct iucv_sock *iucv = iucv_sk(sk);
1967
1968 if (!iucv)
1969 return NET_RX_SUCCESS;
1970
1971 if (sk->sk_state != IUCV_CONNECTED)
1972 return NET_RX_SUCCESS;
1973
1974 atomic_sub(iucv_trans_hdr(skb)->window, &iucv->msg_sent);
1975 iucv_sock_wake_msglim(sk);
1976 return NET_RX_SUCCESS;
1977}
1978
1979/*
1980 * afiucv_hs_callback_rx() - react on received data
1981 */
1982static int afiucv_hs_callback_rx(struct sock *sk, struct sk_buff *skb)
1983{
1984 struct iucv_sock *iucv = iucv_sk(sk);
1985
1986 if (!iucv) {
1987 kfree_skb(skb);
1988 return NET_RX_SUCCESS;
1989 }
1990
1991 if (sk->sk_state != IUCV_CONNECTED) {
1992 kfree_skb(skb);
1993 return NET_RX_SUCCESS;
1994 }
1995
1996 if (sk->sk_shutdown & RCV_SHUTDOWN) {
1997 kfree_skb(skb);
1998 return NET_RX_SUCCESS;
1999 }
2000
2001 /* write stuff from iucv_msg to skb cb */
2002 skb_pull(skb, sizeof(struct af_iucv_trans_hdr));
2003 skb_reset_transport_header(skb);
2004 skb_reset_network_header(skb);
2005 IUCV_SKB_CB(skb)->offset = 0;
2006 if (sk_filter(sk, skb)) {
2007 atomic_inc(&sk->sk_drops); /* skb rejected by filter */
2008 kfree_skb(skb);
2009 return NET_RX_SUCCESS;
2010 }
2011
2012 spin_lock(&iucv->message_q.lock);
2013 if (skb_queue_empty(&iucv->backlog_skb_q)) {
2014 if (__sock_queue_rcv_skb(sk, skb))
2015 /* handle rcv queue full */
2016 skb_queue_tail(&iucv->backlog_skb_q, skb);
2017 } else
2018 skb_queue_tail(&iucv_sk(sk)->backlog_skb_q, skb);
2019 spin_unlock(&iucv->message_q.lock);
2020 return NET_RX_SUCCESS;
2021}
2022
2023/*
2024 * afiucv_hs_rcv() - base function for arriving data through HiperSockets
2025 * transport
2026 * called from netif RX softirq
2027 */
2028static int afiucv_hs_rcv(struct sk_buff *skb, struct net_device *dev,
2029 struct packet_type *pt, struct net_device *orig_dev)
2030{
2031 struct sock *sk;
2032 struct iucv_sock *iucv;
2033 struct af_iucv_trans_hdr *trans_hdr;
2034 int err = NET_RX_SUCCESS;
2035 char nullstring[8];
2036
2037 if (!pskb_may_pull(skb, sizeof(*trans_hdr))) {
2038 kfree_skb(skb);
2039 return NET_RX_SUCCESS;
2040 }
2041
2042 trans_hdr = iucv_trans_hdr(skb);
2043 EBCASC(trans_hdr->destAppName, sizeof(trans_hdr->destAppName));
2044 EBCASC(trans_hdr->destUserID, sizeof(trans_hdr->destUserID));
2045 EBCASC(trans_hdr->srcAppName, sizeof(trans_hdr->srcAppName));
2046 EBCASC(trans_hdr->srcUserID, sizeof(trans_hdr->srcUserID));
2047 memset(nullstring, 0, sizeof(nullstring));
2048 iucv = NULL;
2049 sk = NULL;
2050 read_lock(&iucv_sk_list.lock);
2051 sk_for_each(sk, &iucv_sk_list.head) {
2052 if (trans_hdr->flags == AF_IUCV_FLAG_SYN) {
2053 if ((!memcmp(&iucv_sk(sk)->src_name,
2054 trans_hdr->destAppName, 8)) &&
2055 (!memcmp(&iucv_sk(sk)->src_user_id,
2056 trans_hdr->destUserID, 8)) &&
2057 (!memcmp(&iucv_sk(sk)->dst_name, nullstring, 8)) &&
2058 (!memcmp(&iucv_sk(sk)->dst_user_id,
2059 nullstring, 8))) {
2060 iucv = iucv_sk(sk);
2061 break;
2062 }
2063 } else {
2064 if ((!memcmp(&iucv_sk(sk)->src_name,
2065 trans_hdr->destAppName, 8)) &&
2066 (!memcmp(&iucv_sk(sk)->src_user_id,
2067 trans_hdr->destUserID, 8)) &&
2068 (!memcmp(&iucv_sk(sk)->dst_name,
2069 trans_hdr->srcAppName, 8)) &&
2070 (!memcmp(&iucv_sk(sk)->dst_user_id,
2071 trans_hdr->srcUserID, 8))) {
2072 iucv = iucv_sk(sk);
2073 break;
2074 }
2075 }
2076 }
2077 read_unlock(&iucv_sk_list.lock);
2078 if (!iucv)
2079 sk = NULL;
2080
2081 /* no sock
2082 how should we send with no sock
2083 1) send without sock no send rc checking?
2084 2) introduce default sock to handle this cases
2085
2086 SYN -> send SYN|ACK in good case, send SYN|FIN in bad case
2087 data -> send FIN
2088 SYN|ACK, SYN|FIN, FIN -> no action? */
2089
2090 switch (trans_hdr->flags) {
2091 case AF_IUCV_FLAG_SYN:
2092 /* connect request */
2093 err = afiucv_hs_callback_syn(sk, skb);
2094 break;
2095 case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_ACK):
2096 /* connect request confirmed */
2097 err = afiucv_hs_callback_synack(sk, skb);
2098 break;
2099 case (AF_IUCV_FLAG_SYN | AF_IUCV_FLAG_FIN):
2100 /* connect request refused */
2101 err = afiucv_hs_callback_synfin(sk, skb);
2102 break;
2103 case (AF_IUCV_FLAG_FIN):
2104 /* close request */
2105 err = afiucv_hs_callback_fin(sk, skb);
2106 break;
2107 case (AF_IUCV_FLAG_WIN):
2108 err = afiucv_hs_callback_win(sk, skb);
2109 if (skb->len == sizeof(struct af_iucv_trans_hdr)) {
2110 consume_skb(skb);
2111 break;
2112 }
2113 fallthrough; /* and receive non-zero length data */
2114 case (AF_IUCV_FLAG_SHT):
2115 /* shutdown request */
2116 fallthrough; /* and receive zero length data */
2117 case 0:
2118 /* plain data frame */
2119 IUCV_SKB_CB(skb)->class = trans_hdr->iucv_hdr.class;
2120 err = afiucv_hs_callback_rx(sk, skb);
2121 break;
2122 default:
2123 kfree_skb(skb);
2124 }
2125
2126 return err;
2127}
2128
2129/*
2130 * afiucv_hs_callback_txnotify() - handle send notifications from HiperSockets
2131 * transport
2132 */
2133static void afiucv_hs_callback_txnotify(struct sock *sk, enum iucv_tx_notify n)
2134{
2135 struct iucv_sock *iucv = iucv_sk(sk);
2136
2137 if (sock_flag(sk, SOCK_ZAPPED))
2138 return;
2139
2140 switch (n) {
2141 case TX_NOTIFY_OK:
2142 atomic_dec(&iucv->skbs_in_xmit);
2143 iucv_sock_wake_msglim(sk);
2144 break;
2145 case TX_NOTIFY_PENDING:
2146 atomic_inc(&iucv->pendings);
2147 break;
2148 case TX_NOTIFY_DELAYED_OK:
2149 atomic_dec(&iucv->skbs_in_xmit);
2150 if (atomic_dec_return(&iucv->pendings) <= 0)
2151 iucv_sock_wake_msglim(sk);
2152 break;
2153 default:
2154 atomic_dec(&iucv->skbs_in_xmit);
2155 if (sk->sk_state == IUCV_CONNECTED) {
2156 sk->sk_state = IUCV_DISCONN;
2157 sk->sk_state_change(sk);
2158 }
2159 }
2160
2161 if (sk->sk_state == IUCV_CLOSING) {
2162 if (atomic_read(&iucv->skbs_in_xmit) == 0) {
2163 sk->sk_state = IUCV_CLOSED;
2164 sk->sk_state_change(sk);
2165 }
2166 }
2167}
2168
2169/*
2170 * afiucv_netdev_event: handle netdev notifier chain events
2171 */
2172static int afiucv_netdev_event(struct notifier_block *this,
2173 unsigned long event, void *ptr)
2174{
2175 struct net_device *event_dev = netdev_notifier_info_to_dev(ptr);
2176 struct sock *sk;
2177 struct iucv_sock *iucv;
2178
2179 switch (event) {
2180 case NETDEV_REBOOT:
2181 case NETDEV_GOING_DOWN:
2182 sk_for_each(sk, &iucv_sk_list.head) {
2183 iucv = iucv_sk(sk);
2184 if ((iucv->hs_dev == event_dev) &&
2185 (sk->sk_state == IUCV_CONNECTED)) {
2186 if (event == NETDEV_GOING_DOWN)
2187 iucv_send_ctrl(sk, AF_IUCV_FLAG_FIN);
2188 sk->sk_state = IUCV_DISCONN;
2189 sk->sk_state_change(sk);
2190 }
2191 }
2192 break;
2193 case NETDEV_DOWN:
2194 case NETDEV_UNREGISTER:
2195 default:
2196 break;
2197 }
2198 return NOTIFY_DONE;
2199}
2200
2201static struct notifier_block afiucv_netdev_notifier = {
2202 .notifier_call = afiucv_netdev_event,
2203};
2204
2205static const struct proto_ops iucv_sock_ops = {
2206 .family = PF_IUCV,
2207 .owner = THIS_MODULE,
2208 .release = iucv_sock_release,
2209 .bind = iucv_sock_bind,
2210 .connect = iucv_sock_connect,
2211 .listen = iucv_sock_listen,
2212 .accept = iucv_sock_accept,
2213 .getname = iucv_sock_getname,
2214 .sendmsg = iucv_sock_sendmsg,
2215 .recvmsg = iucv_sock_recvmsg,
2216 .poll = iucv_sock_poll,
2217 .ioctl = sock_no_ioctl,
2218 .mmap = sock_no_mmap,
2219 .socketpair = sock_no_socketpair,
2220 .shutdown = iucv_sock_shutdown,
2221 .setsockopt = iucv_sock_setsockopt,
2222 .getsockopt = iucv_sock_getsockopt,
2223};
2224
2225static int iucv_sock_create(struct net *net, struct socket *sock, int protocol,
2226 int kern)
2227{
2228 struct sock *sk;
2229
2230 if (protocol && protocol != PF_IUCV)
2231 return -EPROTONOSUPPORT;
2232
2233 sock->state = SS_UNCONNECTED;
2234
2235 switch (sock->type) {
2236 case SOCK_STREAM:
2237 case SOCK_SEQPACKET:
2238 /* currently, proto ops can handle both sk types */
2239 sock->ops = &iucv_sock_ops;
2240 break;
2241 default:
2242 return -ESOCKTNOSUPPORT;
2243 }
2244
2245 sk = iucv_sock_alloc(sock, protocol, GFP_KERNEL, kern);
2246 if (!sk)
2247 return -ENOMEM;
2248
2249 iucv_sock_init(sk, NULL);
2250
2251 return 0;
2252}
2253
2254static const struct net_proto_family iucv_sock_family_ops = {
2255 .family = AF_IUCV,
2256 .owner = THIS_MODULE,
2257 .create = iucv_sock_create,
2258};
2259
2260static struct packet_type iucv_packet_type = {
2261 .type = cpu_to_be16(ETH_P_AF_IUCV),
2262 .func = afiucv_hs_rcv,
2263};
2264
2265static int __init afiucv_init(void)
2266{
2267 int err;
2268
2269 if (MACHINE_IS_VM && IS_ENABLED(CONFIG_IUCV)) {
2270 cpcmd("QUERY USERID", iucv_userid, sizeof(iucv_userid), &err);
2271 if (unlikely(err)) {
2272 WARN_ON(err);
2273 err = -EPROTONOSUPPORT;
2274 goto out;
2275 }
2276
2277 pr_iucv = &iucv_if;
2278 } else {
2279 memset(&iucv_userid, 0, sizeof(iucv_userid));
2280 pr_iucv = NULL;
2281 }
2282
2283 err = proto_register(&iucv_proto, 0);
2284 if (err)
2285 goto out;
2286 err = sock_register(&iucv_sock_family_ops);
2287 if (err)
2288 goto out_proto;
2289
2290 if (pr_iucv) {
2291 err = pr_iucv->iucv_register(&af_iucv_handler, 0);
2292 if (err)
2293 goto out_sock;
2294 }
2295
2296 err = register_netdevice_notifier(&afiucv_netdev_notifier);
2297 if (err)
2298 goto out_notifier;
2299
2300 dev_add_pack(&iucv_packet_type);
2301 return 0;
2302
2303out_notifier:
2304 if (pr_iucv)
2305 pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2306out_sock:
2307 sock_unregister(PF_IUCV);
2308out_proto:
2309 proto_unregister(&iucv_proto);
2310out:
2311 return err;
2312}
2313
2314static void __exit afiucv_exit(void)
2315{
2316 if (pr_iucv)
2317 pr_iucv->iucv_unregister(&af_iucv_handler, 0);
2318
2319 unregister_netdevice_notifier(&afiucv_netdev_notifier);
2320 dev_remove_pack(&iucv_packet_type);
2321 sock_unregister(PF_IUCV);
2322 proto_unregister(&iucv_proto);
2323}
2324
2325module_init(afiucv_init);
2326module_exit(afiucv_exit);
2327
2328MODULE_AUTHOR("Jennifer Hunt <jenhunt@us.ibm.com>");
2329MODULE_DESCRIPTION("IUCV Sockets ver " VERSION);
2330MODULE_VERSION(VERSION);
2331MODULE_LICENSE("GPL");
2332MODULE_ALIAS_NETPROTO(PF_IUCV);