Linux Audio

Check our new training course

Linux debugging, profiling, tracing and performance analysis training

Mar 24-27, 2025, special US time zones
Register
Loading...
v6.13.7
   1/*
   2 * llc_conn.c - Driver routines for connection component.
   3 *
   4 * Copyright (c) 1997 by Procom Technology, Inc.
   5 *		 2001-2003 by Arnaldo Carvalho de Melo <acme@conectiva.com.br>
   6 *
   7 * This program can be redistributed or modified under the terms of the
   8 * GNU General Public License as published by the Free Software Foundation.
   9 * This program is distributed without any warranty or implied warranty
  10 * of merchantability or fitness for a particular purpose.
  11 *
  12 * See the GNU General Public License for more details.
  13 */
  14
  15#include <linux/init.h>
  16#include <linux/slab.h>
  17#include <net/llc.h>
  18#include <net/llc_c_ac.h>
  19#include <net/llc_c_ev.h>
  20#include <net/llc_c_st.h>
  21#include <net/llc_conn.h>
  22#include <net/llc_pdu.h>
  23#include <net/llc_sap.h>
 
  24#include <net/sock.h>
  25#include <net/tcp_states.h>
 
 
 
 
  26
  27#if 0
  28#define dprintk(args...) printk(KERN_DEBUG args)
  29#else
  30#define dprintk(args...)
  31#endif
  32
  33static int llc_find_offset(int state, int ev_type);
  34static void llc_conn_send_pdus(struct sock *sk);
  35static int llc_conn_service(struct sock *sk, struct sk_buff *skb);
  36static int llc_exec_conn_trans_actions(struct sock *sk,
  37				       const struct llc_conn_state_trans *trans,
  38				       struct sk_buff *ev);
  39static const struct llc_conn_state_trans *llc_qualify_conn_ev(struct sock *sk,
  40							      struct sk_buff *skb);
  41
  42/* Offset table on connection states transition diagram */
  43static int llc_offset_table[NBR_CONN_STATES][NBR_CONN_EV];
  44
  45int sysctl_llc2_ack_timeout = LLC2_ACK_TIME * HZ;
  46int sysctl_llc2_p_timeout = LLC2_P_TIME * HZ;
  47int sysctl_llc2_rej_timeout = LLC2_REJ_TIME * HZ;
  48int sysctl_llc2_busy_timeout = LLC2_BUSY_TIME * HZ;
  49
  50/**
  51 *	llc_conn_state_process - sends event to connection state machine
  52 *	@sk: connection
  53 *	@skb: occurred event
  54 *
  55 *	Sends an event to connection state machine. After processing event
  56 *	(executing it's actions and changing state), upper layer will be
  57 *	indicated or confirmed, if needed. Returns 0 for success, 1 for
  58 *	failure. The socket lock has to be held before calling this function.
  59 *
  60 *	This function always consumes a reference to the skb.
  61 */
  62int llc_conn_state_process(struct sock *sk, struct sk_buff *skb)
  63{
  64	int rc;
  65	struct llc_sock *llc = llc_sk(skb->sk);
  66	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
  67
 
 
 
 
 
 
  68	ev->ind_prim = ev->cfm_prim = 0;
  69	/*
  70	 * Send event to state machine
  71	 */
  72	rc = llc_conn_service(skb->sk, skb);
  73	if (unlikely(rc != 0)) {
  74		printk(KERN_ERR "%s: llc_conn_service failed\n", __func__);
 
 
 
 
 
 
 
  75		goto out_skb_put;
  76	}
  77
 
 
 
  78	switch (ev->ind_prim) {
  79	case LLC_DATA_PRIM:
  80		skb_get(skb);
  81		llc_save_primitive(sk, skb, LLC_DATA_PRIM);
  82		if (unlikely(sock_queue_rcv_skb(sk, skb))) {
  83			/*
  84			 * shouldn't happen
  85			 */
  86			printk(KERN_ERR "%s: sock_queue_rcv_skb failed!\n",
  87			       __func__);
  88			kfree_skb(skb);
  89		}
  90		break;
  91	case LLC_CONN_PRIM:
  92		/*
  93		 * Can't be sock_queue_rcv_skb, because we have to leave the
  94		 * skb->sk pointing to the newly created struct sock in
  95		 * llc_conn_handler. -acme
  96		 */
  97		skb_get(skb);
  98		skb_queue_tail(&sk->sk_receive_queue, skb);
  99		sk->sk_state_change(sk);
 100		break;
 101	case LLC_DISC_PRIM:
 102		sock_hold(sk);
 103		if (sk->sk_type == SOCK_STREAM &&
 104		    sk->sk_state == TCP_ESTABLISHED) {
 105			sk->sk_shutdown       = SHUTDOWN_MASK;
 106			sk->sk_socket->state  = SS_UNCONNECTED;
 107			sk->sk_state          = TCP_CLOSE;
 108			if (!sock_flag(sk, SOCK_DEAD)) {
 109				sock_set_flag(sk, SOCK_DEAD);
 110				sk->sk_state_change(sk);
 111			}
 112		}
 
 113		sock_put(sk);
 114		break;
 115	case LLC_RESET_PRIM:
 116		/*
 117		 * FIXME:
 118		 * RESET is not being notified to upper layers for now
 119		 */
 120		printk(KERN_INFO "%s: received a reset ind!\n", __func__);
 
 121		break;
 122	default:
 123		if (ev->ind_prim)
 124			printk(KERN_INFO "%s: received unknown %d prim!\n",
 125				__func__, ev->ind_prim);
 
 
 126		/* No indication */
 127		break;
 128	}
 129
 130	switch (ev->cfm_prim) {
 131	case LLC_DATA_PRIM:
 132		if (!llc_data_accept_state(llc->state))
 133			sk->sk_write_space(sk);
 134		else
 135			rc = llc->failed_data_req = 1;
 136		break;
 137	case LLC_CONN_PRIM:
 138		if (sk->sk_type == SOCK_STREAM &&
 139		    sk->sk_state == TCP_SYN_SENT) {
 140			if (ev->status) {
 141				sk->sk_socket->state = SS_UNCONNECTED;
 142				sk->sk_state         = TCP_CLOSE;
 143			} else {
 144				sk->sk_socket->state = SS_CONNECTED;
 145				sk->sk_state         = TCP_ESTABLISHED;
 146			}
 147			sk->sk_state_change(sk);
 148		}
 149		break;
 150	case LLC_DISC_PRIM:
 151		sock_hold(sk);
 152		if (sk->sk_type == SOCK_STREAM && sk->sk_state == TCP_CLOSING) {
 153			sk->sk_socket->state = SS_UNCONNECTED;
 154			sk->sk_state         = TCP_CLOSE;
 155			sk->sk_state_change(sk);
 156		}
 157		sock_put(sk);
 158		break;
 159	case LLC_RESET_PRIM:
 160		/*
 161		 * FIXME:
 162		 * RESET is not being notified to upper layers for now
 163		 */
 164		printk(KERN_INFO "%s: received a reset conf!\n", __func__);
 165		break;
 166	default:
 167		if (ev->cfm_prim)
 168			printk(KERN_INFO "%s: received unknown %d prim!\n",
 169					__func__, ev->cfm_prim);
 170		/* No confirmation */
 171		break;
 
 172	}
 
 
 173out_skb_put:
 174	kfree_skb(skb);
 175	return rc;
 176}
 177
 178void llc_conn_send_pdu(struct sock *sk, struct sk_buff *skb)
 179{
 180	/* queue PDU to send to MAC layer */
 181	skb_queue_tail(&sk->sk_write_queue, skb);
 182	llc_conn_send_pdus(sk);
 183}
 184
 185/**
 186 *	llc_conn_rtn_pdu - sends received data pdu to upper layer
 187 *	@sk: Active connection
 188 *	@skb: Received data frame
 189 *
 190 *	Sends received data pdu to upper layer (by using indicate function).
 191 *	Prepares service parameters (prim and prim_data). calling indication
 192 *	function will be done in llc_conn_state_process.
 193 */
 194void llc_conn_rtn_pdu(struct sock *sk, struct sk_buff *skb)
 195{
 196	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
 197
 198	ev->ind_prim = LLC_DATA_PRIM;
 199}
 200
 201/**
 202 *	llc_conn_resend_i_pdu_as_cmd - resend all all unacknowledged I PDUs
 203 *	@sk: active connection
 204 *	@nr: NR
 205 *	@first_p_bit: p_bit value of first pdu
 206 *
 207 *	Resend all unacknowledged I PDUs, starting with the NR; send first as
 208 *	command PDU with P bit equal first_p_bit; if more than one send
 209 *	subsequent as command PDUs with P bit equal zero (0).
 210 */
 211void llc_conn_resend_i_pdu_as_cmd(struct sock *sk, u8 nr, u8 first_p_bit)
 212{
 213	struct sk_buff *skb;
 214	struct llc_pdu_sn *pdu;
 215	u16 nbr_unack_pdus;
 216	struct llc_sock *llc;
 217	u8 howmany_resend = 0;
 218
 219	llc_conn_remove_acked_pdus(sk, nr, &nbr_unack_pdus);
 220	if (!nbr_unack_pdus)
 221		goto out;
 222	/*
 223	 * Process unack PDUs only if unack queue is not empty; remove
 224	 * appropriate PDUs, fix them up, and put them on mac_pdu_q.
 225	 */
 226	llc = llc_sk(sk);
 227
 228	while ((skb = skb_dequeue(&llc->pdu_unack_q)) != NULL) {
 229		pdu = llc_pdu_sn_hdr(skb);
 230		llc_pdu_set_cmd_rsp(skb, LLC_PDU_CMD);
 231		llc_pdu_set_pf_bit(skb, first_p_bit);
 232		skb_queue_tail(&sk->sk_write_queue, skb);
 233		first_p_bit = 0;
 234		llc->vS = LLC_I_GET_NS(pdu);
 235		howmany_resend++;
 236	}
 237	if (howmany_resend > 0)
 238		llc->vS = (llc->vS + 1) % LLC_2_SEQ_NBR_MODULO;
 239	/* any PDUs to re-send are queued up; start sending to MAC */
 240	llc_conn_send_pdus(sk);
 241out:;
 242}
 243
 244/**
 245 *	llc_conn_resend_i_pdu_as_rsp - Resend all unacknowledged I PDUs
 246 *	@sk: active connection.
 247 *	@nr: NR
 248 *	@first_f_bit: f_bit value of first pdu.
 249 *
 250 *	Resend all unacknowledged I PDUs, starting with the NR; send first as
 251 *	response PDU with F bit equal first_f_bit; if more than one send
 252 *	subsequent as response PDUs with F bit equal zero (0).
 253 */
 254void llc_conn_resend_i_pdu_as_rsp(struct sock *sk, u8 nr, u8 first_f_bit)
 255{
 256	struct sk_buff *skb;
 257	u16 nbr_unack_pdus;
 258	struct llc_sock *llc = llc_sk(sk);
 259	u8 howmany_resend = 0;
 260
 261	llc_conn_remove_acked_pdus(sk, nr, &nbr_unack_pdus);
 262	if (!nbr_unack_pdus)
 263		goto out;
 264	/*
 265	 * Process unack PDUs only if unack queue is not empty; remove
 266	 * appropriate PDUs, fix them up, and put them on mac_pdu_q
 267	 */
 268	while ((skb = skb_dequeue(&llc->pdu_unack_q)) != NULL) {
 269		struct llc_pdu_sn *pdu = llc_pdu_sn_hdr(skb);
 270
 271		llc_pdu_set_cmd_rsp(skb, LLC_PDU_RSP);
 272		llc_pdu_set_pf_bit(skb, first_f_bit);
 273		skb_queue_tail(&sk->sk_write_queue, skb);
 274		first_f_bit = 0;
 275		llc->vS = LLC_I_GET_NS(pdu);
 276		howmany_resend++;
 277	}
 278	if (howmany_resend > 0)
 279		llc->vS = (llc->vS + 1) % LLC_2_SEQ_NBR_MODULO;
 280	/* any PDUs to re-send are queued up; start sending to MAC */
 281	llc_conn_send_pdus(sk);
 282out:;
 283}
 284
 285/**
 286 *	llc_conn_remove_acked_pdus - Removes acknowledged pdus from tx queue
 287 *	@sk: active connection
 288 *	@nr: NR
 289 *	@how_many_unacked: size of pdu_unack_q after removing acked pdus
 290 *
 291 *	Removes acknowledged pdus from transmit queue (pdu_unack_q). Returns
 292 *	the number of pdus that removed from queue.
 293 */
 294int llc_conn_remove_acked_pdus(struct sock *sk, u8 nr, u16 *how_many_unacked)
 295{
 296	int pdu_pos, i;
 297	struct sk_buff *skb;
 298	struct llc_pdu_sn *pdu;
 299	int nbr_acked = 0;
 300	struct llc_sock *llc = llc_sk(sk);
 301	int q_len = skb_queue_len(&llc->pdu_unack_q);
 302
 303	if (!q_len)
 304		goto out;
 305	skb = skb_peek(&llc->pdu_unack_q);
 306	pdu = llc_pdu_sn_hdr(skb);
 307
 308	/* finding position of last acked pdu in queue */
 309	pdu_pos = ((int)LLC_2_SEQ_NBR_MODULO + (int)nr -
 310			(int)LLC_I_GET_NS(pdu)) % LLC_2_SEQ_NBR_MODULO;
 311
 312	for (i = 0; i < pdu_pos && i < q_len; i++) {
 313		skb = skb_dequeue(&llc->pdu_unack_q);
 314		kfree_skb(skb);
 315		nbr_acked++;
 316	}
 317out:
 318	*how_many_unacked = skb_queue_len(&llc->pdu_unack_q);
 319	return nbr_acked;
 320}
 321
 322/**
 323 *	llc_conn_send_pdus - Sends queued PDUs
 324 *	@sk: active connection
 
 325 *
 326 *	Sends queued pdus to MAC layer for transmission.
 
 
 327 */
 328static void llc_conn_send_pdus(struct sock *sk)
 329{
 330	struct sk_buff *skb;
 
 331
 332	while ((skb = skb_dequeue(&sk->sk_write_queue)) != NULL) {
 333		struct llc_pdu_sn *pdu = llc_pdu_sn_hdr(skb);
 334
 335		if (LLC_PDU_TYPE_IS_I(pdu) &&
 336		    !(skb->dev->flags & IFF_LOOPBACK)) {
 337			struct sk_buff *skb2 = skb_clone(skb, GFP_ATOMIC);
 338
 339			skb_queue_tail(&llc_sk(sk)->pdu_unack_q, skb);
 340			if (!skb2)
 341				break;
 342			skb = skb2;
 
 
 
 
 
 
 
 
 
 343		}
 344		dev_queue_xmit(skb);
 345	}
 
 
 346}
 347
 348/**
 349 *	llc_conn_service - finds transition and changes state of connection
 350 *	@sk: connection
 351 *	@skb: happened event
 352 *
 353 *	This function finds transition that matches with happened event, then
 354 *	executes related actions and finally changes state of connection.
 355 *	Returns 0 for success, 1 for failure.
 356 */
 357static int llc_conn_service(struct sock *sk, struct sk_buff *skb)
 358{
 359	const struct llc_conn_state_trans *trans;
 360	struct llc_sock *llc = llc_sk(sk);
 361	int rc = 1;
 
 
 362
 363	if (llc->state > NBR_CONN_STATES)
 364		goto out;
 365	rc = 0;
 366	trans = llc_qualify_conn_ev(sk, skb);
 367	if (trans) {
 368		rc = llc_exec_conn_trans_actions(sk, trans, skb);
 369		if (!rc && trans->next_state != NO_STATE_CHANGE) {
 370			llc->state = trans->next_state;
 371			if (!llc_data_accept_state(llc->state))
 372				sk->sk_state_change(sk);
 373		}
 374	}
 375out:
 376	return rc;
 377}
 378
 379/**
 380 *	llc_qualify_conn_ev - finds transition for event
 381 *	@sk: connection
 382 *	@skb: happened event
 383 *
 384 *	This function finds transition that matches with happened event.
 385 *	Returns pointer to found transition on success, %NULL otherwise.
 386 */
 387static const struct llc_conn_state_trans *llc_qualify_conn_ev(struct sock *sk,
 388							      struct sk_buff *skb)
 389{
 390	const struct llc_conn_state_trans **next_trans;
 391	const llc_conn_ev_qfyr_t *next_qualifier;
 392	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
 393	struct llc_sock *llc = llc_sk(sk);
 394	struct llc_conn_state *curr_state =
 395					&llc_conn_state_table[llc->state - 1];
 396
 397	/* search thru events for this state until
 398	 * list exhausted or until no more
 399	 */
 400	for (next_trans = curr_state->transitions +
 401		llc_find_offset(llc->state - 1, ev->type);
 402	     (*next_trans)->ev; next_trans++) {
 403		if (!((*next_trans)->ev)(sk, skb)) {
 404			/* got POSSIBLE event match; the event may require
 405			 * qualification based on the values of a number of
 406			 * state flags; if all qualifications are met (i.e.,
 407			 * if all qualifying functions return success, or 0,
 408			 * then this is THE event we're looking for
 409			 */
 410			for (next_qualifier = (*next_trans)->ev_qualifiers;
 411			     next_qualifier && *next_qualifier &&
 412			     !(*next_qualifier)(sk, skb); next_qualifier++)
 413				/* nothing */;
 414			if (!next_qualifier || !*next_qualifier)
 415				/* all qualifiers executed successfully; this is
 416				 * our transition; return it so we can perform
 417				 * the associated actions & change the state
 418				 */
 419				return *next_trans;
 420		}
 421	}
 422	return NULL;
 423}
 424
 425/**
 426 *	llc_exec_conn_trans_actions - executes related actions
 427 *	@sk: connection
 428 *	@trans: transition that it's actions must be performed
 429 *	@skb: event
 430 *
 431 *	Executes actions that is related to happened event. Returns 0 for
 432 *	success, 1 to indicate failure of at least one action.
 433 */
 434static int llc_exec_conn_trans_actions(struct sock *sk,
 435				       const struct llc_conn_state_trans *trans,
 436				       struct sk_buff *skb)
 437{
 438	int rc = 0;
 439	const llc_conn_action_t *next_action;
 440
 441	for (next_action = trans->ev_actions;
 442	     next_action && *next_action; next_action++) {
 443		int rc2 = (*next_action)(sk, skb);
 444
 445		if (rc2 == 2) {
 446			rc = rc2;
 447			break;
 448		} else if (rc2)
 449			rc = 1;
 450	}
 451	return rc;
 452}
 453
 454static inline bool llc_estab_match(const struct llc_sap *sap,
 455				   const struct llc_addr *daddr,
 456				   const struct llc_addr *laddr,
 457				   const struct sock *sk,
 458				   const struct net *net)
 459{
 460	struct llc_sock *llc = llc_sk(sk);
 461
 462	return net_eq(sock_net(sk), net) &&
 463		llc->laddr.lsap == laddr->lsap &&
 464		llc->daddr.lsap == daddr->lsap &&
 465		ether_addr_equal(llc->laddr.mac, laddr->mac) &&
 466		ether_addr_equal(llc->daddr.mac, daddr->mac);
 467}
 468
 469/**
 470 *	__llc_lookup_established - Finds connection for the remote/local sap/mac
 471 *	@sap: SAP
 472 *	@daddr: address of remote LLC (MAC + SAP)
 473 *	@laddr: address of local LLC (MAC + SAP)
 474 *	@net: netns to look up a socket in
 475 *
 476 *	Search connection list of the SAP and finds connection using the remote
 477 *	mac, remote sap, local mac, and local sap. Returns pointer for
 478 *	connection found, %NULL otherwise.
 479 *	Caller has to make sure local_bh is disabled.
 480 */
 481static struct sock *__llc_lookup_established(struct llc_sap *sap,
 482					     struct llc_addr *daddr,
 483					     struct llc_addr *laddr,
 484					     const struct net *net)
 485{
 486	struct sock *rc;
 487	struct hlist_nulls_node *node;
 488	int slot = llc_sk_laddr_hashfn(sap, laddr);
 489	struct hlist_nulls_head *laddr_hb = &sap->sk_laddr_hash[slot];
 490
 491	rcu_read_lock();
 492again:
 493	sk_nulls_for_each_rcu(rc, node, laddr_hb) {
 494		if (llc_estab_match(sap, daddr, laddr, rc, net)) {
 495			/* Extra checks required by SLAB_TYPESAFE_BY_RCU */
 496			if (unlikely(!refcount_inc_not_zero(&rc->sk_refcnt)))
 497				goto again;
 498			if (unlikely(llc_sk(rc)->sap != sap ||
 499				     !llc_estab_match(sap, daddr, laddr, rc, net))) {
 500				sock_put(rc);
 501				continue;
 502			}
 503			goto found;
 504		}
 505	}
 506	rc = NULL;
 507	/*
 508	 * if the nulls value we got at the end of this lookup is
 509	 * not the expected one, we must restart lookup.
 510	 * We probably met an item that was moved to another chain.
 511	 */
 512	if (unlikely(get_nulls_value(node) != slot))
 513		goto again;
 514found:
 515	rcu_read_unlock();
 516	return rc;
 517}
 518
 519struct sock *llc_lookup_established(struct llc_sap *sap,
 520				    struct llc_addr *daddr,
 521				    struct llc_addr *laddr,
 522				    const struct net *net)
 523{
 524	struct sock *sk;
 525
 526	local_bh_disable();
 527	sk = __llc_lookup_established(sap, daddr, laddr, net);
 528	local_bh_enable();
 529	return sk;
 530}
 531
 532static inline bool llc_listener_match(const struct llc_sap *sap,
 533				      const struct llc_addr *laddr,
 534				      const struct sock *sk,
 535				      const struct net *net)
 536{
 537	struct llc_sock *llc = llc_sk(sk);
 538
 539	return net_eq(sock_net(sk), net) &&
 540		sk->sk_type == SOCK_STREAM && sk->sk_state == TCP_LISTEN &&
 541		llc->laddr.lsap == laddr->lsap &&
 542		ether_addr_equal(llc->laddr.mac, laddr->mac);
 543}
 544
 545static struct sock *__llc_lookup_listener(struct llc_sap *sap,
 546					  struct llc_addr *laddr,
 547					  const struct net *net)
 548{
 549	struct sock *rc;
 550	struct hlist_nulls_node *node;
 551	int slot = llc_sk_laddr_hashfn(sap, laddr);
 552	struct hlist_nulls_head *laddr_hb = &sap->sk_laddr_hash[slot];
 553
 554	rcu_read_lock();
 555again:
 556	sk_nulls_for_each_rcu(rc, node, laddr_hb) {
 557		if (llc_listener_match(sap, laddr, rc, net)) {
 558			/* Extra checks required by SLAB_TYPESAFE_BY_RCU */
 559			if (unlikely(!refcount_inc_not_zero(&rc->sk_refcnt)))
 560				goto again;
 561			if (unlikely(llc_sk(rc)->sap != sap ||
 562				     !llc_listener_match(sap, laddr, rc, net))) {
 563				sock_put(rc);
 564				continue;
 565			}
 566			goto found;
 567		}
 568	}
 569	rc = NULL;
 570	/*
 571	 * if the nulls value we got at the end of this lookup is
 572	 * not the expected one, we must restart lookup.
 573	 * We probably met an item that was moved to another chain.
 574	 */
 575	if (unlikely(get_nulls_value(node) != slot))
 576		goto again;
 577found:
 578	rcu_read_unlock();
 579	return rc;
 580}
 581
 582/**
 583 *	llc_lookup_listener - Finds listener for local MAC + SAP
 584 *	@sap: SAP
 585 *	@laddr: address of local LLC (MAC + SAP)
 586 *	@net: netns to look up a socket in
 587 *
 588 *	Search connection list of the SAP and finds connection listening on
 589 *	local mac, and local sap. Returns pointer for parent socket found,
 590 *	%NULL otherwise.
 591 *	Caller has to make sure local_bh is disabled.
 592 */
 593static struct sock *llc_lookup_listener(struct llc_sap *sap,
 594					struct llc_addr *laddr,
 595					const struct net *net)
 596{
 597	struct sock *rc = __llc_lookup_listener(sap, laddr, net);
 598	static struct llc_addr null_addr;
 
 599
 600	if (!rc)
 601		rc = __llc_lookup_listener(sap, &null_addr, net);
 602
 603	return rc;
 604}
 605
 606static struct sock *__llc_lookup(struct llc_sap *sap,
 607				 struct llc_addr *daddr,
 608				 struct llc_addr *laddr,
 609				 const struct net *net)
 610{
 611	struct sock *sk = __llc_lookup_established(sap, daddr, laddr, net);
 612
 613	return sk ? : llc_lookup_listener(sap, laddr, net);
 614}
 615
 616/**
 617 *	llc_data_accept_state - designates if in this state data can be sent.
 618 *	@state: state of connection.
 619 *
 620 *	Returns 0 if data can be sent, 1 otherwise.
 621 */
 622u8 llc_data_accept_state(u8 state)
 623{
 624	return state != LLC_CONN_STATE_NORMAL && state != LLC_CONN_STATE_BUSY &&
 625	       state != LLC_CONN_STATE_REJ;
 626}
 627
 628/**
 629 *	llc_find_next_offset - finds offset for next category of transitions
 630 *	@state: state table.
 631 *	@offset: start offset.
 632 *
 633 *	Finds offset of next category of transitions in transition table.
 634 *	Returns the start index of next category.
 635 */
 636static u16 __init llc_find_next_offset(struct llc_conn_state *state, u16 offset)
 637{
 638	const struct llc_conn_state_trans **next_trans;
 639	u16 cnt = 0;
 
 640
 641	for (next_trans = state->transitions + offset;
 642	     (*next_trans)->ev; next_trans++)
 643		++cnt;
 644	return cnt;
 645}
 646
 647/**
 648 *	llc_build_offset_table - builds offset table of connection
 649 *
 650 *	Fills offset table of connection state transition table
 651 *	(llc_offset_table).
 652 */
 653void __init llc_build_offset_table(void)
 654{
 655	struct llc_conn_state *curr_state;
 656	int state, ev_type, next_offset;
 657
 658	for (state = 0; state < NBR_CONN_STATES; state++) {
 659		curr_state = &llc_conn_state_table[state];
 660		next_offset = 0;
 661		for (ev_type = 0; ev_type < NBR_CONN_EV; ev_type++) {
 662			llc_offset_table[state][ev_type] = next_offset;
 663			next_offset += llc_find_next_offset(curr_state,
 664							    next_offset) + 1;
 665		}
 666	}
 667}
 668
 669/**
 670 *	llc_find_offset - finds start offset of category of transitions
 671 *	@state: state of connection
 672 *	@ev_type: type of happened event
 673 *
 674 *	Finds start offset of desired category of transitions. Returns the
 675 *	desired start offset.
 676 */
 677static int llc_find_offset(int state, int ev_type)
 678{
 679	int rc = 0;
 680	/* at this stage, llc_offset_table[..][2] is not important. it is for
 681	 * init_pf_cycle and I don't know what is it.
 682	 */
 683	switch (ev_type) {
 684	case LLC_CONN_EV_TYPE_PRIM:
 685		rc = llc_offset_table[state][0]; break;
 686	case LLC_CONN_EV_TYPE_PDU:
 687		rc = llc_offset_table[state][4]; break;
 688	case LLC_CONN_EV_TYPE_SIMPLE:
 689		rc = llc_offset_table[state][1]; break;
 690	case LLC_CONN_EV_TYPE_P_TMR:
 691	case LLC_CONN_EV_TYPE_ACK_TMR:
 692	case LLC_CONN_EV_TYPE_REJ_TMR:
 693	case LLC_CONN_EV_TYPE_BUSY_TMR:
 694		rc = llc_offset_table[state][3]; break;
 695	}
 696	return rc;
 697}
 698
 699/**
 700 *	llc_sap_add_socket - adds a socket to a SAP
 701 *	@sap: SAP
 702 *	@sk: socket
 703 *
 704 *	This function adds a socket to the hash tables of a SAP.
 705 */
 706void llc_sap_add_socket(struct llc_sap *sap, struct sock *sk)
 707{
 708	struct llc_sock *llc = llc_sk(sk);
 709	struct hlist_head *dev_hb = llc_sk_dev_hash(sap, llc->dev->ifindex);
 710	struct hlist_nulls_head *laddr_hb = llc_sk_laddr_hash(sap, &llc->laddr);
 711
 712	llc_sap_hold(sap);
 713	llc_sk(sk)->sap = sap;
 714
 715	spin_lock_bh(&sap->sk_lock);
 716	sock_set_flag(sk, SOCK_RCU_FREE);
 717	sap->sk_count++;
 718	sk_nulls_add_node_rcu(sk, laddr_hb);
 719	hlist_add_head(&llc->dev_hash_node, dev_hb);
 720	spin_unlock_bh(&sap->sk_lock);
 721}
 722
 723/**
 724 *	llc_sap_remove_socket - removes a socket from SAP
 725 *	@sap: SAP
 726 *	@sk: socket
 727 *
 728 *	This function removes a connection from the hash tables of a SAP if
 729 *	the connection was in this list.
 730 */
 731void llc_sap_remove_socket(struct llc_sap *sap, struct sock *sk)
 732{
 733	struct llc_sock *llc = llc_sk(sk);
 734
 735	spin_lock_bh(&sap->sk_lock);
 736	sk_nulls_del_node_init_rcu(sk);
 737	hlist_del(&llc->dev_hash_node);
 738	sap->sk_count--;
 739	spin_unlock_bh(&sap->sk_lock);
 740	llc_sap_put(sap);
 741}
 742
 743/**
 744 *	llc_conn_rcv - sends received pdus to the connection state machine
 745 *	@sk: current connection structure.
 746 *	@skb: received frame.
 747 *
 748 *	Sends received pdus to the connection state machine.
 749 */
 750static int llc_conn_rcv(struct sock *sk, struct sk_buff *skb)
 751{
 752	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
 753
 754	ev->type   = LLC_CONN_EV_TYPE_PDU;
 755	ev->reason = 0;
 756	return llc_conn_state_process(sk, skb);
 757}
 758
 759static struct sock *llc_create_incoming_sock(struct sock *sk,
 760					     struct net_device *dev,
 761					     struct llc_addr *saddr,
 762					     struct llc_addr *daddr)
 763{
 764	struct sock *newsk = llc_sk_alloc(sock_net(sk), sk->sk_family, GFP_ATOMIC,
 765					  sk->sk_prot, 0);
 766	struct llc_sock *newllc, *llc = llc_sk(sk);
 767
 768	if (!newsk)
 769		goto out;
 770	newllc = llc_sk(newsk);
 771	memcpy(&newllc->laddr, daddr, sizeof(newllc->laddr));
 772	memcpy(&newllc->daddr, saddr, sizeof(newllc->daddr));
 773	newllc->dev = dev;
 774	dev_hold(dev);
 775	llc_sap_add_socket(llc->sap, newsk);
 776	llc_sap_hold(llc->sap);
 777out:
 778	return newsk;
 779}
 780
 781void llc_conn_handler(struct llc_sap *sap, struct sk_buff *skb)
 782{
 783	struct llc_addr saddr, daddr;
 784	struct sock *sk;
 785
 786	llc_pdu_decode_sa(skb, saddr.mac);
 787	llc_pdu_decode_ssap(skb, &saddr.lsap);
 788	llc_pdu_decode_da(skb, daddr.mac);
 789	llc_pdu_decode_dsap(skb, &daddr.lsap);
 790
 791	sk = __llc_lookup(sap, &saddr, &daddr, dev_net(skb->dev));
 792	if (!sk)
 793		goto drop;
 794
 795	bh_lock_sock(sk);
 796	/*
 797	 * This has to be done here and not at the upper layer ->accept
 798	 * method because of the way the PROCOM state machine works:
 799	 * it needs to set several state variables (see, for instance,
 800	 * llc_adm_actions_2 in net/llc/llc_c_st.c) and send a packet to
 801	 * the originator of the new connection, and this state has to be
 802	 * in the newly created struct sock private area. -acme
 803	 */
 804	if (unlikely(sk->sk_state == TCP_LISTEN)) {
 805		struct sock *newsk = llc_create_incoming_sock(sk, skb->dev,
 806							      &saddr, &daddr);
 807		if (!newsk)
 808			goto drop_unlock;
 809		skb_set_owner_r(skb, newsk);
 810	} else {
 811		/*
 812		 * Can't be skb_set_owner_r, this will be done at the
 813		 * llc_conn_state_process function, later on, when we will use
 814		 * skb_queue_rcv_skb to send it to upper layers, this is
 815		 * another trick required to cope with how the PROCOM state
 816		 * machine works. -acme
 817		 */
 818		skb_orphan(skb);
 819		sock_hold(sk);
 820		skb->sk = sk;
 821		skb->destructor = sock_efree;
 822	}
 823	if (!sock_owned_by_user(sk))
 824		llc_conn_rcv(sk, skb);
 825	else {
 826		dprintk("%s: adding to backlog...\n", __func__);
 827		llc_set_backlog_type(skb, LLC_PACKET);
 828		if (sk_add_backlog(sk, skb, READ_ONCE(sk->sk_rcvbuf)))
 829			goto drop_unlock;
 830	}
 831out:
 832	bh_unlock_sock(sk);
 833	sock_put(sk);
 834	return;
 835drop:
 836	kfree_skb(skb);
 837	return;
 838drop_unlock:
 839	kfree_skb(skb);
 840	goto out;
 841}
 842
 843#undef LLC_REFCNT_DEBUG
 844#ifdef LLC_REFCNT_DEBUG
 845static atomic_t llc_sock_nr;
 846#endif
 847
 848/**
 849 *	llc_backlog_rcv - Processes rx frames and expired timers.
 850 *	@sk: LLC sock (p8022 connection)
 851 *	@skb: queued rx frame or event
 852 *
 853 *	This function processes frames that has received and timers that has
 854 *	expired during sending an I pdu (refer to data_req_handler).  frames
 855 *	queue by llc_rcv function (llc_mac.c) and timers queue by timer
 856 *	callback functions(llc_c_ac.c).
 857 */
 858static int llc_backlog_rcv(struct sock *sk, struct sk_buff *skb)
 859{
 860	int rc = 0;
 861	struct llc_sock *llc = llc_sk(sk);
 862
 863	if (likely(llc_backlog_type(skb) == LLC_PACKET)) {
 864		if (likely(llc->state > 1)) /* not closed */
 865			rc = llc_conn_rcv(sk, skb);
 866		else
 867			goto out_kfree_skb;
 868	} else if (llc_backlog_type(skb) == LLC_EVENT) {
 869		/* timer expiration event */
 870		if (likely(llc->state > 1))  /* not closed */
 871			rc = llc_conn_state_process(sk, skb);
 872		else
 873			goto out_kfree_skb;
 874	} else {
 875		printk(KERN_ERR "%s: invalid skb in backlog\n", __func__);
 876		goto out_kfree_skb;
 877	}
 878out:
 879	return rc;
 880out_kfree_skb:
 881	kfree_skb(skb);
 882	goto out;
 883}
 884
 885/**
 886 *     llc_sk_init - Initializes a socket with default llc values.
 887 *     @sk: socket to initialize.
 888 *
 889 *     Initializes a socket with default llc values.
 890 */
 891static void llc_sk_init(struct sock *sk)
 892{
 893	struct llc_sock *llc = llc_sk(sk);
 894
 895	llc->state    = LLC_CONN_STATE_ADM;
 896	llc->inc_cntr = llc->dec_cntr = 2;
 897	llc->dec_step = llc->connect_step = 1;
 898
 899	timer_setup(&llc->ack_timer.timer, llc_conn_ack_tmr_cb, 0);
 900	llc->ack_timer.expire	      = sysctl_llc2_ack_timeout;
 901
 902	timer_setup(&llc->pf_cycle_timer.timer, llc_conn_pf_cycle_tmr_cb, 0);
 903	llc->pf_cycle_timer.expire	   = sysctl_llc2_p_timeout;
 904
 905	timer_setup(&llc->rej_sent_timer.timer, llc_conn_rej_tmr_cb, 0);
 906	llc->rej_sent_timer.expire	   = sysctl_llc2_rej_timeout;
 907
 908	timer_setup(&llc->busy_state_timer.timer, llc_conn_busy_tmr_cb, 0);
 909	llc->busy_state_timer.expire	     = sysctl_llc2_busy_timeout;
 910
 911	llc->n2 = 2;   /* max retransmit */
 912	llc->k  = 2;   /* tx win size, will adjust dynam */
 913	llc->rw = 128; /* rx win size (opt and equal to
 914			* tx_win of remote LLC) */
 915	skb_queue_head_init(&llc->pdu_unack_q);
 916	sk->sk_backlog_rcv = llc_backlog_rcv;
 917}
 918
 919/**
 920 *	llc_sk_alloc - Allocates LLC sock
 921 *	@net: network namespace
 922 *	@family: upper layer protocol family
 923 *	@priority: for allocation (%GFP_KERNEL, %GFP_ATOMIC, etc)
 924 *	@prot: struct proto associated with this new sock instance
 925 *	@kern: is this to be a kernel socket?
 926 *
 927 *	Allocates a LLC sock and initializes it. Returns the new LLC sock
 928 *	or %NULL if there's no memory available for one
 929 */
 930struct sock *llc_sk_alloc(struct net *net, int family, gfp_t priority, struct proto *prot, int kern)
 931{
 932	struct sock *sk = sk_alloc(net, family, priority, prot, kern);
 933
 934	if (!sk)
 935		goto out;
 936	llc_sk_init(sk);
 937	sock_init_data(NULL, sk);
 938#ifdef LLC_REFCNT_DEBUG
 939	atomic_inc(&llc_sock_nr);
 940	printk(KERN_DEBUG "LLC socket %p created in %s, now we have %d alive\n", sk,
 941		__func__, atomic_read(&llc_sock_nr));
 942#endif
 943out:
 944	return sk;
 945}
 946
 947void llc_sk_stop_all_timers(struct sock *sk, bool sync)
 948{
 949	struct llc_sock *llc = llc_sk(sk);
 950
 951	if (sync) {
 952		del_timer_sync(&llc->pf_cycle_timer.timer);
 953		del_timer_sync(&llc->ack_timer.timer);
 954		del_timer_sync(&llc->rej_sent_timer.timer);
 955		del_timer_sync(&llc->busy_state_timer.timer);
 956	} else {
 957		del_timer(&llc->pf_cycle_timer.timer);
 958		del_timer(&llc->ack_timer.timer);
 959		del_timer(&llc->rej_sent_timer.timer);
 960		del_timer(&llc->busy_state_timer.timer);
 961	}
 962
 963	llc->ack_must_be_send = 0;
 964	llc->ack_pf = 0;
 965}
 966
 967/**
 968 *	llc_sk_free - Frees a LLC socket
 969 *	@sk: - socket to free
 970 *
 971 *	Frees a LLC socket
 972 */
 973void llc_sk_free(struct sock *sk)
 974{
 975	struct llc_sock *llc = llc_sk(sk);
 976
 977	llc->state = LLC_CONN_OUT_OF_SVC;
 978	/* Stop all (possibly) running timers */
 979	llc_sk_stop_all_timers(sk, true);
 980#ifdef DEBUG_LLC_CONN_ALLOC
 981	printk(KERN_INFO "%s: unackq=%d, txq=%d\n", __func__,
 982		skb_queue_len(&llc->pdu_unack_q),
 983		skb_queue_len(&sk->sk_write_queue));
 984#endif
 985	skb_queue_purge(&sk->sk_receive_queue);
 986	skb_queue_purge(&sk->sk_write_queue);
 987	skb_queue_purge(&llc->pdu_unack_q);
 988#ifdef LLC_REFCNT_DEBUG
 989	if (refcount_read(&sk->sk_refcnt) != 1) {
 990		printk(KERN_DEBUG "Destruction of LLC sock %p delayed in %s, cnt=%d\n",
 991			sk, __func__, refcount_read(&sk->sk_refcnt));
 992		printk(KERN_DEBUG "%d LLC sockets are still alive\n",
 993			atomic_read(&llc_sock_nr));
 994	} else {
 995		atomic_dec(&llc_sock_nr);
 996		printk(KERN_DEBUG "LLC socket %p released in %s, %d are still alive\n", sk,
 997			__func__, atomic_read(&llc_sock_nr));
 998	}
 999#endif
1000	sock_put(sk);
1001}
1002
1003/**
1004 *	llc_sk_reset - resets a connection
1005 *	@sk: LLC socket to reset
1006 *
1007 *	Resets a connection to the out of service state. Stops its timers
1008 *	and frees any frames in the queues of the connection.
1009 */
1010void llc_sk_reset(struct sock *sk)
1011{
1012	struct llc_sock *llc = llc_sk(sk);
1013
1014	llc_conn_ac_stop_all_timers(sk, NULL);
1015	skb_queue_purge(&sk->sk_write_queue);
1016	skb_queue_purge(&llc->pdu_unack_q);
1017	llc->remote_busy_flag	= 0;
1018	llc->cause_flag		= 0;
1019	llc->retry_count	= 0;
1020	llc_conn_set_p_flag(sk, 0);
1021	llc->f_flag		= 0;
1022	llc->s_flag		= 0;
1023	llc->ack_pf		= 0;
1024	llc->first_pdu_Ns	= 0;
1025	llc->ack_must_be_send	= 0;
1026	llc->dec_step		= 1;
1027	llc->inc_cntr		= 2;
1028	llc->dec_cntr		= 2;
1029	llc->X			= 0;
1030	llc->failed_data_req	= 0 ;
1031	llc->last_nr		= 0;
1032}
v4.17
   1/*
   2 * llc_conn.c - Driver routines for connection component.
   3 *
   4 * Copyright (c) 1997 by Procom Technology, Inc.
   5 *		 2001-2003 by Arnaldo Carvalho de Melo <acme@conectiva.com.br>
   6 *
   7 * This program can be redistributed or modified under the terms of the
   8 * GNU General Public License as published by the Free Software Foundation.
   9 * This program is distributed without any warranty or implied warranty
  10 * of merchantability or fitness for a particular purpose.
  11 *
  12 * See the GNU General Public License for more details.
  13 */
  14
  15#include <linux/init.h>
  16#include <linux/slab.h>
 
 
 
 
 
 
  17#include <net/llc_sap.h>
  18#include <net/llc_conn.h>
  19#include <net/sock.h>
  20#include <net/tcp_states.h>
  21#include <net/llc_c_ev.h>
  22#include <net/llc_c_ac.h>
  23#include <net/llc_c_st.h>
  24#include <net/llc_pdu.h>
  25
  26#if 0
  27#define dprintk(args...) printk(KERN_DEBUG args)
  28#else
  29#define dprintk(args...)
  30#endif
  31
  32static int llc_find_offset(int state, int ev_type);
  33static int llc_conn_send_pdus(struct sock *sk, struct sk_buff *skb);
  34static int llc_conn_service(struct sock *sk, struct sk_buff *skb);
  35static int llc_exec_conn_trans_actions(struct sock *sk,
  36				       struct llc_conn_state_trans *trans,
  37				       struct sk_buff *ev);
  38static struct llc_conn_state_trans *llc_qualify_conn_ev(struct sock *sk,
  39							struct sk_buff *skb);
  40
  41/* Offset table on connection states transition diagram */
  42static int llc_offset_table[NBR_CONN_STATES][NBR_CONN_EV];
  43
  44int sysctl_llc2_ack_timeout = LLC2_ACK_TIME * HZ;
  45int sysctl_llc2_p_timeout = LLC2_P_TIME * HZ;
  46int sysctl_llc2_rej_timeout = LLC2_REJ_TIME * HZ;
  47int sysctl_llc2_busy_timeout = LLC2_BUSY_TIME * HZ;
  48
  49/**
  50 *	llc_conn_state_process - sends event to connection state machine
  51 *	@sk: connection
  52 *	@skb: occurred event
  53 *
  54 *	Sends an event to connection state machine. After processing event
  55 *	(executing it's actions and changing state), upper layer will be
  56 *	indicated or confirmed, if needed. Returns 0 for success, 1 for
  57 *	failure. The socket lock has to be held before calling this function.
 
 
  58 */
  59int llc_conn_state_process(struct sock *sk, struct sk_buff *skb)
  60{
  61	int rc;
  62	struct llc_sock *llc = llc_sk(skb->sk);
  63	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
  64
  65	/*
  66	 * We have to hold the skb, because llc_conn_service will kfree it in
  67	 * the sending path and we need to look at the skb->cb, where we encode
  68	 * llc_conn_state_ev.
  69	 */
  70	skb_get(skb);
  71	ev->ind_prim = ev->cfm_prim = 0;
  72	/*
  73	 * Send event to state machine
  74	 */
  75	rc = llc_conn_service(skb->sk, skb);
  76	if (unlikely(rc != 0)) {
  77		printk(KERN_ERR "%s: llc_conn_service failed\n", __func__);
  78		goto out_kfree_skb;
  79	}
  80
  81	if (unlikely(!ev->ind_prim && !ev->cfm_prim)) {
  82		/* indicate or confirm not required */
  83		if (!skb->next)
  84			goto out_kfree_skb;
  85		goto out_skb_put;
  86	}
  87
  88	if (unlikely(ev->ind_prim && ev->cfm_prim)) /* Paranoia */
  89		skb_get(skb);
  90
  91	switch (ev->ind_prim) {
  92	case LLC_DATA_PRIM:
 
  93		llc_save_primitive(sk, skb, LLC_DATA_PRIM);
  94		if (unlikely(sock_queue_rcv_skb(sk, skb))) {
  95			/*
  96			 * shouldn't happen
  97			 */
  98			printk(KERN_ERR "%s: sock_queue_rcv_skb failed!\n",
  99			       __func__);
 100			kfree_skb(skb);
 101		}
 102		break;
 103	case LLC_CONN_PRIM:
 104		/*
 105		 * Can't be sock_queue_rcv_skb, because we have to leave the
 106		 * skb->sk pointing to the newly created struct sock in
 107		 * llc_conn_handler. -acme
 108		 */
 
 109		skb_queue_tail(&sk->sk_receive_queue, skb);
 110		sk->sk_state_change(sk);
 111		break;
 112	case LLC_DISC_PRIM:
 113		sock_hold(sk);
 114		if (sk->sk_type == SOCK_STREAM &&
 115		    sk->sk_state == TCP_ESTABLISHED) {
 116			sk->sk_shutdown       = SHUTDOWN_MASK;
 117			sk->sk_socket->state  = SS_UNCONNECTED;
 118			sk->sk_state          = TCP_CLOSE;
 119			if (!sock_flag(sk, SOCK_DEAD)) {
 120				sock_set_flag(sk, SOCK_DEAD);
 121				sk->sk_state_change(sk);
 122			}
 123		}
 124		kfree_skb(skb);
 125		sock_put(sk);
 126		break;
 127	case LLC_RESET_PRIM:
 128		/*
 129		 * FIXME:
 130		 * RESET is not being notified to upper layers for now
 131		 */
 132		printk(KERN_INFO "%s: received a reset ind!\n", __func__);
 133		kfree_skb(skb);
 134		break;
 135	default:
 136		if (ev->ind_prim) {
 137			printk(KERN_INFO "%s: received unknown %d prim!\n",
 138				__func__, ev->ind_prim);
 139			kfree_skb(skb);
 140		}
 141		/* No indication */
 142		break;
 143	}
 144
 145	switch (ev->cfm_prim) {
 146	case LLC_DATA_PRIM:
 147		if (!llc_data_accept_state(llc->state))
 148			sk->sk_write_space(sk);
 149		else
 150			rc = llc->failed_data_req = 1;
 151		break;
 152	case LLC_CONN_PRIM:
 153		if (sk->sk_type == SOCK_STREAM &&
 154		    sk->sk_state == TCP_SYN_SENT) {
 155			if (ev->status) {
 156				sk->sk_socket->state = SS_UNCONNECTED;
 157				sk->sk_state         = TCP_CLOSE;
 158			} else {
 159				sk->sk_socket->state = SS_CONNECTED;
 160				sk->sk_state         = TCP_ESTABLISHED;
 161			}
 162			sk->sk_state_change(sk);
 163		}
 164		break;
 165	case LLC_DISC_PRIM:
 166		sock_hold(sk);
 167		if (sk->sk_type == SOCK_STREAM && sk->sk_state == TCP_CLOSING) {
 168			sk->sk_socket->state = SS_UNCONNECTED;
 169			sk->sk_state         = TCP_CLOSE;
 170			sk->sk_state_change(sk);
 171		}
 172		sock_put(sk);
 173		break;
 174	case LLC_RESET_PRIM:
 175		/*
 176		 * FIXME:
 177		 * RESET is not being notified to upper layers for now
 178		 */
 179		printk(KERN_INFO "%s: received a reset conf!\n", __func__);
 180		break;
 181	default:
 182		if (ev->cfm_prim) {
 183			printk(KERN_INFO "%s: received unknown %d prim!\n",
 184					__func__, ev->cfm_prim);
 185			break;
 186		}
 187		goto out_skb_put; /* No confirmation */
 188	}
 189out_kfree_skb:
 190	kfree_skb(skb);
 191out_skb_put:
 192	kfree_skb(skb);
 193	return rc;
 194}
 195
 196int llc_conn_send_pdu(struct sock *sk, struct sk_buff *skb)
 197{
 198	/* queue PDU to send to MAC layer */
 199	skb_queue_tail(&sk->sk_write_queue, skb);
 200	return llc_conn_send_pdus(sk, skb);
 201}
 202
 203/**
 204 *	llc_conn_rtn_pdu - sends received data pdu to upper layer
 205 *	@sk: Active connection
 206 *	@skb: Received data frame
 207 *
 208 *	Sends received data pdu to upper layer (by using indicate function).
 209 *	Prepares service parameters (prim and prim_data). calling indication
 210 *	function will be done in llc_conn_state_process.
 211 */
 212void llc_conn_rtn_pdu(struct sock *sk, struct sk_buff *skb)
 213{
 214	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
 215
 216	ev->ind_prim = LLC_DATA_PRIM;
 217}
 218
 219/**
 220 *	llc_conn_resend_i_pdu_as_cmd - resend all all unacknowledged I PDUs
 221 *	@sk: active connection
 222 *	@nr: NR
 223 *	@first_p_bit: p_bit value of first pdu
 224 *
 225 *	Resend all unacknowledged I PDUs, starting with the NR; send first as
 226 *	command PDU with P bit equal first_p_bit; if more than one send
 227 *	subsequent as command PDUs with P bit equal zero (0).
 228 */
 229void llc_conn_resend_i_pdu_as_cmd(struct sock *sk, u8 nr, u8 first_p_bit)
 230{
 231	struct sk_buff *skb;
 232	struct llc_pdu_sn *pdu;
 233	u16 nbr_unack_pdus;
 234	struct llc_sock *llc;
 235	u8 howmany_resend = 0;
 236
 237	llc_conn_remove_acked_pdus(sk, nr, &nbr_unack_pdus);
 238	if (!nbr_unack_pdus)
 239		goto out;
 240	/*
 241	 * Process unack PDUs only if unack queue is not empty; remove
 242	 * appropriate PDUs, fix them up, and put them on mac_pdu_q.
 243	 */
 244	llc = llc_sk(sk);
 245
 246	while ((skb = skb_dequeue(&llc->pdu_unack_q)) != NULL) {
 247		pdu = llc_pdu_sn_hdr(skb);
 248		llc_pdu_set_cmd_rsp(skb, LLC_PDU_CMD);
 249		llc_pdu_set_pf_bit(skb, first_p_bit);
 250		skb_queue_tail(&sk->sk_write_queue, skb);
 251		first_p_bit = 0;
 252		llc->vS = LLC_I_GET_NS(pdu);
 253		howmany_resend++;
 254	}
 255	if (howmany_resend > 0)
 256		llc->vS = (llc->vS + 1) % LLC_2_SEQ_NBR_MODULO;
 257	/* any PDUs to re-send are queued up; start sending to MAC */
 258	llc_conn_send_pdus(sk, NULL);
 259out:;
 260}
 261
 262/**
 263 *	llc_conn_resend_i_pdu_as_rsp - Resend all unacknowledged I PDUs
 264 *	@sk: active connection.
 265 *	@nr: NR
 266 *	@first_f_bit: f_bit value of first pdu.
 267 *
 268 *	Resend all unacknowledged I PDUs, starting with the NR; send first as
 269 *	response PDU with F bit equal first_f_bit; if more than one send
 270 *	subsequent as response PDUs with F bit equal zero (0).
 271 */
 272void llc_conn_resend_i_pdu_as_rsp(struct sock *sk, u8 nr, u8 first_f_bit)
 273{
 274	struct sk_buff *skb;
 275	u16 nbr_unack_pdus;
 276	struct llc_sock *llc = llc_sk(sk);
 277	u8 howmany_resend = 0;
 278
 279	llc_conn_remove_acked_pdus(sk, nr, &nbr_unack_pdus);
 280	if (!nbr_unack_pdus)
 281		goto out;
 282	/*
 283	 * Process unack PDUs only if unack queue is not empty; remove
 284	 * appropriate PDUs, fix them up, and put them on mac_pdu_q
 285	 */
 286	while ((skb = skb_dequeue(&llc->pdu_unack_q)) != NULL) {
 287		struct llc_pdu_sn *pdu = llc_pdu_sn_hdr(skb);
 288
 289		llc_pdu_set_cmd_rsp(skb, LLC_PDU_RSP);
 290		llc_pdu_set_pf_bit(skb, first_f_bit);
 291		skb_queue_tail(&sk->sk_write_queue, skb);
 292		first_f_bit = 0;
 293		llc->vS = LLC_I_GET_NS(pdu);
 294		howmany_resend++;
 295	}
 296	if (howmany_resend > 0)
 297		llc->vS = (llc->vS + 1) % LLC_2_SEQ_NBR_MODULO;
 298	/* any PDUs to re-send are queued up; start sending to MAC */
 299	llc_conn_send_pdus(sk, NULL);
 300out:;
 301}
 302
 303/**
 304 *	llc_conn_remove_acked_pdus - Removes acknowledged pdus from tx queue
 305 *	@sk: active connection
 306 *	nr: NR
 307 *	how_many_unacked: size of pdu_unack_q after removing acked pdus
 308 *
 309 *	Removes acknowledged pdus from transmit queue (pdu_unack_q). Returns
 310 *	the number of pdus that removed from queue.
 311 */
 312int llc_conn_remove_acked_pdus(struct sock *sk, u8 nr, u16 *how_many_unacked)
 313{
 314	int pdu_pos, i;
 315	struct sk_buff *skb;
 316	struct llc_pdu_sn *pdu;
 317	int nbr_acked = 0;
 318	struct llc_sock *llc = llc_sk(sk);
 319	int q_len = skb_queue_len(&llc->pdu_unack_q);
 320
 321	if (!q_len)
 322		goto out;
 323	skb = skb_peek(&llc->pdu_unack_q);
 324	pdu = llc_pdu_sn_hdr(skb);
 325
 326	/* finding position of last acked pdu in queue */
 327	pdu_pos = ((int)LLC_2_SEQ_NBR_MODULO + (int)nr -
 328			(int)LLC_I_GET_NS(pdu)) % LLC_2_SEQ_NBR_MODULO;
 329
 330	for (i = 0; i < pdu_pos && i < q_len; i++) {
 331		skb = skb_dequeue(&llc->pdu_unack_q);
 332		kfree_skb(skb);
 333		nbr_acked++;
 334	}
 335out:
 336	*how_many_unacked = skb_queue_len(&llc->pdu_unack_q);
 337	return nbr_acked;
 338}
 339
 340/**
 341 *	llc_conn_send_pdus - Sends queued PDUs
 342 *	@sk: active connection
 343 *	@hold_skb: the skb held by caller, or NULL if does not care
 344 *
 345 *	Sends queued pdus to MAC layer for transmission. When @hold_skb is
 346 *	NULL, always return 0. Otherwise, return 0 if @hold_skb is sent
 347 *	successfully, or 1 for failure.
 348 */
 349static int llc_conn_send_pdus(struct sock *sk, struct sk_buff *hold_skb)
 350{
 351	struct sk_buff *skb;
 352	int ret = 0;
 353
 354	while ((skb = skb_dequeue(&sk->sk_write_queue)) != NULL) {
 355		struct llc_pdu_sn *pdu = llc_pdu_sn_hdr(skb);
 356
 357		if (LLC_PDU_TYPE_IS_I(pdu) &&
 358		    !(skb->dev->flags & IFF_LOOPBACK)) {
 359			struct sk_buff *skb2 = skb_clone(skb, GFP_ATOMIC);
 360
 361			skb_queue_tail(&llc_sk(sk)->pdu_unack_q, skb);
 362			if (!skb2)
 363				break;
 364			dev_queue_xmit(skb2);
 365		} else {
 366			bool is_target = skb == hold_skb;
 367			int rc;
 368
 369			if (is_target)
 370				skb_get(skb);
 371			rc = dev_queue_xmit(skb);
 372			if (is_target)
 373				ret = rc;
 374		}
 
 375	}
 376
 377	return ret;
 378}
 379
 380/**
 381 *	llc_conn_service - finds transition and changes state of connection
 382 *	@sk: connection
 383 *	@skb: happened event
 384 *
 385 *	This function finds transition that matches with happened event, then
 386 *	executes related actions and finally changes state of connection.
 387 *	Returns 0 for success, 1 for failure.
 388 */
 389static int llc_conn_service(struct sock *sk, struct sk_buff *skb)
 390{
 
 
 391	int rc = 1;
 392	struct llc_sock *llc = llc_sk(sk);
 393	struct llc_conn_state_trans *trans;
 394
 395	if (llc->state > NBR_CONN_STATES)
 396		goto out;
 397	rc = 0;
 398	trans = llc_qualify_conn_ev(sk, skb);
 399	if (trans) {
 400		rc = llc_exec_conn_trans_actions(sk, trans, skb);
 401		if (!rc && trans->next_state != NO_STATE_CHANGE) {
 402			llc->state = trans->next_state;
 403			if (!llc_data_accept_state(llc->state))
 404				sk->sk_state_change(sk);
 405		}
 406	}
 407out:
 408	return rc;
 409}
 410
 411/**
 412 *	llc_qualify_conn_ev - finds transition for event
 413 *	@sk: connection
 414 *	@skb: happened event
 415 *
 416 *	This function finds transition that matches with happened event.
 417 *	Returns pointer to found transition on success, %NULL otherwise.
 418 */
 419static struct llc_conn_state_trans *llc_qualify_conn_ev(struct sock *sk,
 420							struct sk_buff *skb)
 421{
 422	struct llc_conn_state_trans **next_trans;
 423	const llc_conn_ev_qfyr_t *next_qualifier;
 424	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
 425	struct llc_sock *llc = llc_sk(sk);
 426	struct llc_conn_state *curr_state =
 427					&llc_conn_state_table[llc->state - 1];
 428
 429	/* search thru events for this state until
 430	 * list exhausted or until no more
 431	 */
 432	for (next_trans = curr_state->transitions +
 433		llc_find_offset(llc->state - 1, ev->type);
 434	     (*next_trans)->ev; next_trans++) {
 435		if (!((*next_trans)->ev)(sk, skb)) {
 436			/* got POSSIBLE event match; the event may require
 437			 * qualification based on the values of a number of
 438			 * state flags; if all qualifications are met (i.e.,
 439			 * if all qualifying functions return success, or 0,
 440			 * then this is THE event we're looking for
 441			 */
 442			for (next_qualifier = (*next_trans)->ev_qualifiers;
 443			     next_qualifier && *next_qualifier &&
 444			     !(*next_qualifier)(sk, skb); next_qualifier++)
 445				/* nothing */;
 446			if (!next_qualifier || !*next_qualifier)
 447				/* all qualifiers executed successfully; this is
 448				 * our transition; return it so we can perform
 449				 * the associated actions & change the state
 450				 */
 451				return *next_trans;
 452		}
 453	}
 454	return NULL;
 455}
 456
 457/**
 458 *	llc_exec_conn_trans_actions - executes related actions
 459 *	@sk: connection
 460 *	@trans: transition that it's actions must be performed
 461 *	@skb: event
 462 *
 463 *	Executes actions that is related to happened event. Returns 0 for
 464 *	success, 1 to indicate failure of at least one action.
 465 */
 466static int llc_exec_conn_trans_actions(struct sock *sk,
 467				       struct llc_conn_state_trans *trans,
 468				       struct sk_buff *skb)
 469{
 470	int rc = 0;
 471	const llc_conn_action_t *next_action;
 472
 473	for (next_action = trans->ev_actions;
 474	     next_action && *next_action; next_action++) {
 475		int rc2 = (*next_action)(sk, skb);
 476
 477		if (rc2 == 2) {
 478			rc = rc2;
 479			break;
 480		} else if (rc2)
 481			rc = 1;
 482	}
 483	return rc;
 484}
 485
 486static inline bool llc_estab_match(const struct llc_sap *sap,
 487				   const struct llc_addr *daddr,
 488				   const struct llc_addr *laddr,
 489				   const struct sock *sk)
 
 490{
 491	struct llc_sock *llc = llc_sk(sk);
 492
 493	return llc->laddr.lsap == laddr->lsap &&
 
 494		llc->daddr.lsap == daddr->lsap &&
 495		ether_addr_equal(llc->laddr.mac, laddr->mac) &&
 496		ether_addr_equal(llc->daddr.mac, daddr->mac);
 497}
 498
 499/**
 500 *	__llc_lookup_established - Finds connection for the remote/local sap/mac
 501 *	@sap: SAP
 502 *	@daddr: address of remote LLC (MAC + SAP)
 503 *	@laddr: address of local LLC (MAC + SAP)
 
 504 *
 505 *	Search connection list of the SAP and finds connection using the remote
 506 *	mac, remote sap, local mac, and local sap. Returns pointer for
 507 *	connection found, %NULL otherwise.
 508 *	Caller has to make sure local_bh is disabled.
 509 */
 510static struct sock *__llc_lookup_established(struct llc_sap *sap,
 511					     struct llc_addr *daddr,
 512					     struct llc_addr *laddr)
 
 513{
 514	struct sock *rc;
 515	struct hlist_nulls_node *node;
 516	int slot = llc_sk_laddr_hashfn(sap, laddr);
 517	struct hlist_nulls_head *laddr_hb = &sap->sk_laddr_hash[slot];
 518
 519	rcu_read_lock();
 520again:
 521	sk_nulls_for_each_rcu(rc, node, laddr_hb) {
 522		if (llc_estab_match(sap, daddr, laddr, rc)) {
 523			/* Extra checks required by SLAB_TYPESAFE_BY_RCU */
 524			if (unlikely(!refcount_inc_not_zero(&rc->sk_refcnt)))
 525				goto again;
 526			if (unlikely(llc_sk(rc)->sap != sap ||
 527				     !llc_estab_match(sap, daddr, laddr, rc))) {
 528				sock_put(rc);
 529				continue;
 530			}
 531			goto found;
 532		}
 533	}
 534	rc = NULL;
 535	/*
 536	 * if the nulls value we got at the end of this lookup is
 537	 * not the expected one, we must restart lookup.
 538	 * We probably met an item that was moved to another chain.
 539	 */
 540	if (unlikely(get_nulls_value(node) != slot))
 541		goto again;
 542found:
 543	rcu_read_unlock();
 544	return rc;
 545}
 546
 547struct sock *llc_lookup_established(struct llc_sap *sap,
 548				    struct llc_addr *daddr,
 549				    struct llc_addr *laddr)
 
 550{
 551	struct sock *sk;
 552
 553	local_bh_disable();
 554	sk = __llc_lookup_established(sap, daddr, laddr);
 555	local_bh_enable();
 556	return sk;
 557}
 558
 559static inline bool llc_listener_match(const struct llc_sap *sap,
 560				      const struct llc_addr *laddr,
 561				      const struct sock *sk)
 
 562{
 563	struct llc_sock *llc = llc_sk(sk);
 564
 565	return sk->sk_type == SOCK_STREAM && sk->sk_state == TCP_LISTEN &&
 
 566		llc->laddr.lsap == laddr->lsap &&
 567		ether_addr_equal(llc->laddr.mac, laddr->mac);
 568}
 569
 570static struct sock *__llc_lookup_listener(struct llc_sap *sap,
 571					  struct llc_addr *laddr)
 
 572{
 573	struct sock *rc;
 574	struct hlist_nulls_node *node;
 575	int slot = llc_sk_laddr_hashfn(sap, laddr);
 576	struct hlist_nulls_head *laddr_hb = &sap->sk_laddr_hash[slot];
 577
 578	rcu_read_lock();
 579again:
 580	sk_nulls_for_each_rcu(rc, node, laddr_hb) {
 581		if (llc_listener_match(sap, laddr, rc)) {
 582			/* Extra checks required by SLAB_TYPESAFE_BY_RCU */
 583			if (unlikely(!refcount_inc_not_zero(&rc->sk_refcnt)))
 584				goto again;
 585			if (unlikely(llc_sk(rc)->sap != sap ||
 586				     !llc_listener_match(sap, laddr, rc))) {
 587				sock_put(rc);
 588				continue;
 589			}
 590			goto found;
 591		}
 592	}
 593	rc = NULL;
 594	/*
 595	 * if the nulls value we got at the end of this lookup is
 596	 * not the expected one, we must restart lookup.
 597	 * We probably met an item that was moved to another chain.
 598	 */
 599	if (unlikely(get_nulls_value(node) != slot))
 600		goto again;
 601found:
 602	rcu_read_unlock();
 603	return rc;
 604}
 605
 606/**
 607 *	llc_lookup_listener - Finds listener for local MAC + SAP
 608 *	@sap: SAP
 609 *	@laddr: address of local LLC (MAC + SAP)
 
 610 *
 611 *	Search connection list of the SAP and finds connection listening on
 612 *	local mac, and local sap. Returns pointer for parent socket found,
 613 *	%NULL otherwise.
 614 *	Caller has to make sure local_bh is disabled.
 615 */
 616static struct sock *llc_lookup_listener(struct llc_sap *sap,
 617					struct llc_addr *laddr)
 
 618{
 
 619	static struct llc_addr null_addr;
 620	struct sock *rc = __llc_lookup_listener(sap, laddr);
 621
 622	if (!rc)
 623		rc = __llc_lookup_listener(sap, &null_addr);
 624
 625	return rc;
 626}
 627
 628static struct sock *__llc_lookup(struct llc_sap *sap,
 629				 struct llc_addr *daddr,
 630				 struct llc_addr *laddr)
 
 631{
 632	struct sock *sk = __llc_lookup_established(sap, daddr, laddr);
 633
 634	return sk ? : llc_lookup_listener(sap, laddr);
 635}
 636
 637/**
 638 *	llc_data_accept_state - designates if in this state data can be sent.
 639 *	@state: state of connection.
 640 *
 641 *	Returns 0 if data can be sent, 1 otherwise.
 642 */
 643u8 llc_data_accept_state(u8 state)
 644{
 645	return state != LLC_CONN_STATE_NORMAL && state != LLC_CONN_STATE_BUSY &&
 646	       state != LLC_CONN_STATE_REJ;
 647}
 648
 649/**
 650 *	llc_find_next_offset - finds offset for next category of transitions
 651 *	@state: state table.
 652 *	@offset: start offset.
 653 *
 654 *	Finds offset of next category of transitions in transition table.
 655 *	Returns the start index of next category.
 656 */
 657static u16 __init llc_find_next_offset(struct llc_conn_state *state, u16 offset)
 658{
 
 659	u16 cnt = 0;
 660	struct llc_conn_state_trans **next_trans;
 661
 662	for (next_trans = state->transitions + offset;
 663	     (*next_trans)->ev; next_trans++)
 664		++cnt;
 665	return cnt;
 666}
 667
 668/**
 669 *	llc_build_offset_table - builds offset table of connection
 670 *
 671 *	Fills offset table of connection state transition table
 672 *	(llc_offset_table).
 673 */
 674void __init llc_build_offset_table(void)
 675{
 676	struct llc_conn_state *curr_state;
 677	int state, ev_type, next_offset;
 678
 679	for (state = 0; state < NBR_CONN_STATES; state++) {
 680		curr_state = &llc_conn_state_table[state];
 681		next_offset = 0;
 682		for (ev_type = 0; ev_type < NBR_CONN_EV; ev_type++) {
 683			llc_offset_table[state][ev_type] = next_offset;
 684			next_offset += llc_find_next_offset(curr_state,
 685							    next_offset) + 1;
 686		}
 687	}
 688}
 689
 690/**
 691 *	llc_find_offset - finds start offset of category of transitions
 692 *	@state: state of connection
 693 *	@ev_type: type of happened event
 694 *
 695 *	Finds start offset of desired category of transitions. Returns the
 696 *	desired start offset.
 697 */
 698static int llc_find_offset(int state, int ev_type)
 699{
 700	int rc = 0;
 701	/* at this stage, llc_offset_table[..][2] is not important. it is for
 702	 * init_pf_cycle and I don't know what is it.
 703	 */
 704	switch (ev_type) {
 705	case LLC_CONN_EV_TYPE_PRIM:
 706		rc = llc_offset_table[state][0]; break;
 707	case LLC_CONN_EV_TYPE_PDU:
 708		rc = llc_offset_table[state][4]; break;
 709	case LLC_CONN_EV_TYPE_SIMPLE:
 710		rc = llc_offset_table[state][1]; break;
 711	case LLC_CONN_EV_TYPE_P_TMR:
 712	case LLC_CONN_EV_TYPE_ACK_TMR:
 713	case LLC_CONN_EV_TYPE_REJ_TMR:
 714	case LLC_CONN_EV_TYPE_BUSY_TMR:
 715		rc = llc_offset_table[state][3]; break;
 716	}
 717	return rc;
 718}
 719
 720/**
 721 *	llc_sap_add_socket - adds a socket to a SAP
 722 *	@sap: SAP
 723 *	@sk: socket
 724 *
 725 *	This function adds a socket to the hash tables of a SAP.
 726 */
 727void llc_sap_add_socket(struct llc_sap *sap, struct sock *sk)
 728{
 729	struct llc_sock *llc = llc_sk(sk);
 730	struct hlist_head *dev_hb = llc_sk_dev_hash(sap, llc->dev->ifindex);
 731	struct hlist_nulls_head *laddr_hb = llc_sk_laddr_hash(sap, &llc->laddr);
 732
 733	llc_sap_hold(sap);
 734	llc_sk(sk)->sap = sap;
 735
 736	spin_lock_bh(&sap->sk_lock);
 
 737	sap->sk_count++;
 738	sk_nulls_add_node_rcu(sk, laddr_hb);
 739	hlist_add_head(&llc->dev_hash_node, dev_hb);
 740	spin_unlock_bh(&sap->sk_lock);
 741}
 742
 743/**
 744 *	llc_sap_remove_socket - removes a socket from SAP
 745 *	@sap: SAP
 746 *	@sk: socket
 747 *
 748 *	This function removes a connection from the hash tables of a SAP if
 749 *	the connection was in this list.
 750 */
 751void llc_sap_remove_socket(struct llc_sap *sap, struct sock *sk)
 752{
 753	struct llc_sock *llc = llc_sk(sk);
 754
 755	spin_lock_bh(&sap->sk_lock);
 756	sk_nulls_del_node_init_rcu(sk);
 757	hlist_del(&llc->dev_hash_node);
 758	sap->sk_count--;
 759	spin_unlock_bh(&sap->sk_lock);
 760	llc_sap_put(sap);
 761}
 762
 763/**
 764 *	llc_conn_rcv - sends received pdus to the connection state machine
 765 *	@sk: current connection structure.
 766 *	@skb: received frame.
 767 *
 768 *	Sends received pdus to the connection state machine.
 769 */
 770static int llc_conn_rcv(struct sock *sk, struct sk_buff *skb)
 771{
 772	struct llc_conn_state_ev *ev = llc_conn_ev(skb);
 773
 774	ev->type   = LLC_CONN_EV_TYPE_PDU;
 775	ev->reason = 0;
 776	return llc_conn_state_process(sk, skb);
 777}
 778
 779static struct sock *llc_create_incoming_sock(struct sock *sk,
 780					     struct net_device *dev,
 781					     struct llc_addr *saddr,
 782					     struct llc_addr *daddr)
 783{
 784	struct sock *newsk = llc_sk_alloc(sock_net(sk), sk->sk_family, GFP_ATOMIC,
 785					  sk->sk_prot, 0);
 786	struct llc_sock *newllc, *llc = llc_sk(sk);
 787
 788	if (!newsk)
 789		goto out;
 790	newllc = llc_sk(newsk);
 791	memcpy(&newllc->laddr, daddr, sizeof(newllc->laddr));
 792	memcpy(&newllc->daddr, saddr, sizeof(newllc->daddr));
 793	newllc->dev = dev;
 794	dev_hold(dev);
 795	llc_sap_add_socket(llc->sap, newsk);
 796	llc_sap_hold(llc->sap);
 797out:
 798	return newsk;
 799}
 800
 801void llc_conn_handler(struct llc_sap *sap, struct sk_buff *skb)
 802{
 803	struct llc_addr saddr, daddr;
 804	struct sock *sk;
 805
 806	llc_pdu_decode_sa(skb, saddr.mac);
 807	llc_pdu_decode_ssap(skb, &saddr.lsap);
 808	llc_pdu_decode_da(skb, daddr.mac);
 809	llc_pdu_decode_dsap(skb, &daddr.lsap);
 810
 811	sk = __llc_lookup(sap, &saddr, &daddr);
 812	if (!sk)
 813		goto drop;
 814
 815	bh_lock_sock(sk);
 816	/*
 817	 * This has to be done here and not at the upper layer ->accept
 818	 * method because of the way the PROCOM state machine works:
 819	 * it needs to set several state variables (see, for instance,
 820	 * llc_adm_actions_2 in net/llc/llc_c_st.c) and send a packet to
 821	 * the originator of the new connection, and this state has to be
 822	 * in the newly created struct sock private area. -acme
 823	 */
 824	if (unlikely(sk->sk_state == TCP_LISTEN)) {
 825		struct sock *newsk = llc_create_incoming_sock(sk, skb->dev,
 826							      &saddr, &daddr);
 827		if (!newsk)
 828			goto drop_unlock;
 829		skb_set_owner_r(skb, newsk);
 830	} else {
 831		/*
 832		 * Can't be skb_set_owner_r, this will be done at the
 833		 * llc_conn_state_process function, later on, when we will use
 834		 * skb_queue_rcv_skb to send it to upper layers, this is
 835		 * another trick required to cope with how the PROCOM state
 836		 * machine works. -acme
 837		 */
 838		skb_orphan(skb);
 839		sock_hold(sk);
 840		skb->sk = sk;
 841		skb->destructor = sock_efree;
 842	}
 843	if (!sock_owned_by_user(sk))
 844		llc_conn_rcv(sk, skb);
 845	else {
 846		dprintk("%s: adding to backlog...\n", __func__);
 847		llc_set_backlog_type(skb, LLC_PACKET);
 848		if (sk_add_backlog(sk, skb, sk->sk_rcvbuf))
 849			goto drop_unlock;
 850	}
 851out:
 852	bh_unlock_sock(sk);
 853	sock_put(sk);
 854	return;
 855drop:
 856	kfree_skb(skb);
 857	return;
 858drop_unlock:
 859	kfree_skb(skb);
 860	goto out;
 861}
 862
 863#undef LLC_REFCNT_DEBUG
 864#ifdef LLC_REFCNT_DEBUG
 865static atomic_t llc_sock_nr;
 866#endif
 867
 868/**
 869 *	llc_backlog_rcv - Processes rx frames and expired timers.
 870 *	@sk: LLC sock (p8022 connection)
 871 *	@skb: queued rx frame or event
 872 *
 873 *	This function processes frames that has received and timers that has
 874 *	expired during sending an I pdu (refer to data_req_handler).  frames
 875 *	queue by llc_rcv function (llc_mac.c) and timers queue by timer
 876 *	callback functions(llc_c_ac.c).
 877 */
 878static int llc_backlog_rcv(struct sock *sk, struct sk_buff *skb)
 879{
 880	int rc = 0;
 881	struct llc_sock *llc = llc_sk(sk);
 882
 883	if (likely(llc_backlog_type(skb) == LLC_PACKET)) {
 884		if (likely(llc->state > 1)) /* not closed */
 885			rc = llc_conn_rcv(sk, skb);
 886		else
 887			goto out_kfree_skb;
 888	} else if (llc_backlog_type(skb) == LLC_EVENT) {
 889		/* timer expiration event */
 890		if (likely(llc->state > 1))  /* not closed */
 891			rc = llc_conn_state_process(sk, skb);
 892		else
 893			goto out_kfree_skb;
 894	} else {
 895		printk(KERN_ERR "%s: invalid skb in backlog\n", __func__);
 896		goto out_kfree_skb;
 897	}
 898out:
 899	return rc;
 900out_kfree_skb:
 901	kfree_skb(skb);
 902	goto out;
 903}
 904
 905/**
 906 *     llc_sk_init - Initializes a socket with default llc values.
 907 *     @sk: socket to initialize.
 908 *
 909 *     Initializes a socket with default llc values.
 910 */
 911static void llc_sk_init(struct sock *sk)
 912{
 913	struct llc_sock *llc = llc_sk(sk);
 914
 915	llc->state    = LLC_CONN_STATE_ADM;
 916	llc->inc_cntr = llc->dec_cntr = 2;
 917	llc->dec_step = llc->connect_step = 1;
 918
 919	timer_setup(&llc->ack_timer.timer, llc_conn_ack_tmr_cb, 0);
 920	llc->ack_timer.expire	      = sysctl_llc2_ack_timeout;
 921
 922	timer_setup(&llc->pf_cycle_timer.timer, llc_conn_pf_cycle_tmr_cb, 0);
 923	llc->pf_cycle_timer.expire	   = sysctl_llc2_p_timeout;
 924
 925	timer_setup(&llc->rej_sent_timer.timer, llc_conn_rej_tmr_cb, 0);
 926	llc->rej_sent_timer.expire	   = sysctl_llc2_rej_timeout;
 927
 928	timer_setup(&llc->busy_state_timer.timer, llc_conn_busy_tmr_cb, 0);
 929	llc->busy_state_timer.expire	     = sysctl_llc2_busy_timeout;
 930
 931	llc->n2 = 2;   /* max retransmit */
 932	llc->k  = 2;   /* tx win size, will adjust dynam */
 933	llc->rw = 128; /* rx win size (opt and equal to
 934			* tx_win of remote LLC) */
 935	skb_queue_head_init(&llc->pdu_unack_q);
 936	sk->sk_backlog_rcv = llc_backlog_rcv;
 937}
 938
 939/**
 940 *	llc_sk_alloc - Allocates LLC sock
 
 941 *	@family: upper layer protocol family
 942 *	@priority: for allocation (%GFP_KERNEL, %GFP_ATOMIC, etc)
 
 
 943 *
 944 *	Allocates a LLC sock and initializes it. Returns the new LLC sock
 945 *	or %NULL if there's no memory available for one
 946 */
 947struct sock *llc_sk_alloc(struct net *net, int family, gfp_t priority, struct proto *prot, int kern)
 948{
 949	struct sock *sk = sk_alloc(net, family, priority, prot, kern);
 950
 951	if (!sk)
 952		goto out;
 953	llc_sk_init(sk);
 954	sock_init_data(NULL, sk);
 955#ifdef LLC_REFCNT_DEBUG
 956	atomic_inc(&llc_sock_nr);
 957	printk(KERN_DEBUG "LLC socket %p created in %s, now we have %d alive\n", sk,
 958		__func__, atomic_read(&llc_sock_nr));
 959#endif
 960out:
 961	return sk;
 962}
 963
 964void llc_sk_stop_all_timers(struct sock *sk, bool sync)
 965{
 966	struct llc_sock *llc = llc_sk(sk);
 967
 968	if (sync) {
 969		del_timer_sync(&llc->pf_cycle_timer.timer);
 970		del_timer_sync(&llc->ack_timer.timer);
 971		del_timer_sync(&llc->rej_sent_timer.timer);
 972		del_timer_sync(&llc->busy_state_timer.timer);
 973	} else {
 974		del_timer(&llc->pf_cycle_timer.timer);
 975		del_timer(&llc->ack_timer.timer);
 976		del_timer(&llc->rej_sent_timer.timer);
 977		del_timer(&llc->busy_state_timer.timer);
 978	}
 979
 980	llc->ack_must_be_send = 0;
 981	llc->ack_pf = 0;
 982}
 983
 984/**
 985 *	llc_sk_free - Frees a LLC socket
 986 *	@sk - socket to free
 987 *
 988 *	Frees a LLC socket
 989 */
 990void llc_sk_free(struct sock *sk)
 991{
 992	struct llc_sock *llc = llc_sk(sk);
 993
 994	llc->state = LLC_CONN_OUT_OF_SVC;
 995	/* Stop all (possibly) running timers */
 996	llc_sk_stop_all_timers(sk, true);
 997#ifdef DEBUG_LLC_CONN_ALLOC
 998	printk(KERN_INFO "%s: unackq=%d, txq=%d\n", __func__,
 999		skb_queue_len(&llc->pdu_unack_q),
1000		skb_queue_len(&sk->sk_write_queue));
1001#endif
1002	skb_queue_purge(&sk->sk_receive_queue);
1003	skb_queue_purge(&sk->sk_write_queue);
1004	skb_queue_purge(&llc->pdu_unack_q);
1005#ifdef LLC_REFCNT_DEBUG
1006	if (refcount_read(&sk->sk_refcnt) != 1) {
1007		printk(KERN_DEBUG "Destruction of LLC sock %p delayed in %s, cnt=%d\n",
1008			sk, __func__, refcount_read(&sk->sk_refcnt));
1009		printk(KERN_DEBUG "%d LLC sockets are still alive\n",
1010			atomic_read(&llc_sock_nr));
1011	} else {
1012		atomic_dec(&llc_sock_nr);
1013		printk(KERN_DEBUG "LLC socket %p released in %s, %d are still alive\n", sk,
1014			__func__, atomic_read(&llc_sock_nr));
1015	}
1016#endif
1017	sock_put(sk);
1018}
1019
1020/**
1021 *	llc_sk_reset - resets a connection
1022 *	@sk: LLC socket to reset
1023 *
1024 *	Resets a connection to the out of service state. Stops its timers
1025 *	and frees any frames in the queues of the connection.
1026 */
1027void llc_sk_reset(struct sock *sk)
1028{
1029	struct llc_sock *llc = llc_sk(sk);
1030
1031	llc_conn_ac_stop_all_timers(sk, NULL);
1032	skb_queue_purge(&sk->sk_write_queue);
1033	skb_queue_purge(&llc->pdu_unack_q);
1034	llc->remote_busy_flag	= 0;
1035	llc->cause_flag		= 0;
1036	llc->retry_count	= 0;
1037	llc_conn_set_p_flag(sk, 0);
1038	llc->f_flag		= 0;
1039	llc->s_flag		= 0;
1040	llc->ack_pf		= 0;
1041	llc->first_pdu_Ns	= 0;
1042	llc->ack_must_be_send	= 0;
1043	llc->dec_step		= 1;
1044	llc->inc_cntr		= 2;
1045	llc->dec_cntr		= 2;
1046	llc->X			= 0;
1047	llc->failed_data_req	= 0 ;
1048	llc->last_nr		= 0;
1049}