Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 *
4 * Copyright Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
5 * Copyright Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
6 * Copyright Darryl Miles G7LED (dlm@g7led.demon.co.uk)
7 */
8#include <linux/module.h>
9#include <linux/moduleparam.h>
10#include <linux/capability.h>
11#include <linux/errno.h>
12#include <linux/types.h>
13#include <linux/socket.h>
14#include <linux/in.h>
15#include <linux/slab.h>
16#include <linux/kernel.h>
17#include <linux/sched/signal.h>
18#include <linux/timer.h>
19#include <linux/string.h>
20#include <linux/sockios.h>
21#include <linux/net.h>
22#include <linux/stat.h>
23#include <net/ax25.h>
24#include <linux/inet.h>
25#include <linux/netdevice.h>
26#include <linux/if_arp.h>
27#include <linux/skbuff.h>
28#include <net/net_namespace.h>
29#include <net/sock.h>
30#include <linux/uaccess.h>
31#include <linux/fcntl.h>
32#include <linux/termios.h> /* For TIOCINQ/OUTQ */
33#include <linux/mm.h>
34#include <linux/interrupt.h>
35#include <linux/notifier.h>
36#include <net/netrom.h>
37#include <linux/proc_fs.h>
38#include <linux/seq_file.h>
39#include <net/ip.h>
40#include <net/tcp_states.h>
41#include <net/arp.h>
42#include <linux/init.h>
43
44static int nr_ndevs = 4;
45
46int sysctl_netrom_default_path_quality = NR_DEFAULT_QUAL;
47int sysctl_netrom_obsolescence_count_initialiser = NR_DEFAULT_OBS;
48int sysctl_netrom_network_ttl_initialiser = NR_DEFAULT_TTL;
49int sysctl_netrom_transport_timeout = NR_DEFAULT_T1;
50int sysctl_netrom_transport_maximum_tries = NR_DEFAULT_N2;
51int sysctl_netrom_transport_acknowledge_delay = NR_DEFAULT_T2;
52int sysctl_netrom_transport_busy_delay = NR_DEFAULT_T4;
53int sysctl_netrom_transport_requested_window_size = NR_DEFAULT_WINDOW;
54int sysctl_netrom_transport_no_activity_timeout = NR_DEFAULT_IDLE;
55int sysctl_netrom_routing_control = NR_DEFAULT_ROUTING;
56int sysctl_netrom_link_fails_count = NR_DEFAULT_FAILS;
57int sysctl_netrom_reset_circuit = NR_DEFAULT_RESET;
58
59static unsigned short circuit = 0x101;
60
61static HLIST_HEAD(nr_list);
62static DEFINE_SPINLOCK(nr_list_lock);
63
64static const struct proto_ops nr_proto_ops;
65
66/*
67 * NETROM network devices are virtual network devices encapsulating NETROM
68 * frames into AX.25 which will be sent through an AX.25 device, so form a
69 * special "super class" of normal net devices; split their locks off into a
70 * separate class since they always nest.
71 */
72static struct lock_class_key nr_netdev_xmit_lock_key;
73static struct lock_class_key nr_netdev_addr_lock_key;
74
75static void nr_set_lockdep_one(struct net_device *dev,
76 struct netdev_queue *txq,
77 void *_unused)
78{
79 lockdep_set_class(&txq->_xmit_lock, &nr_netdev_xmit_lock_key);
80}
81
82static void nr_set_lockdep_key(struct net_device *dev)
83{
84 lockdep_set_class(&dev->addr_list_lock, &nr_netdev_addr_lock_key);
85 netdev_for_each_tx_queue(dev, nr_set_lockdep_one, NULL);
86}
87
88/*
89 * Socket removal during an interrupt is now safe.
90 */
91static void nr_remove_socket(struct sock *sk)
92{
93 spin_lock_bh(&nr_list_lock);
94 sk_del_node_init(sk);
95 spin_unlock_bh(&nr_list_lock);
96}
97
98/*
99 * Kill all bound sockets on a dropped device.
100 */
101static void nr_kill_by_device(struct net_device *dev)
102{
103 struct sock *s;
104
105 spin_lock_bh(&nr_list_lock);
106 sk_for_each(s, &nr_list)
107 if (nr_sk(s)->device == dev)
108 nr_disconnect(s, ENETUNREACH);
109 spin_unlock_bh(&nr_list_lock);
110}
111
112/*
113 * Handle device status changes.
114 */
115static int nr_device_event(struct notifier_block *this, unsigned long event, void *ptr)
116{
117 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
118
119 if (!net_eq(dev_net(dev), &init_net))
120 return NOTIFY_DONE;
121
122 if (event != NETDEV_DOWN)
123 return NOTIFY_DONE;
124
125 nr_kill_by_device(dev);
126 nr_rt_device_down(dev);
127
128 return NOTIFY_DONE;
129}
130
131/*
132 * Add a socket to the bound sockets list.
133 */
134static void nr_insert_socket(struct sock *sk)
135{
136 spin_lock_bh(&nr_list_lock);
137 sk_add_node(sk, &nr_list);
138 spin_unlock_bh(&nr_list_lock);
139}
140
141/*
142 * Find a socket that wants to accept the Connect Request we just
143 * received.
144 */
145static struct sock *nr_find_listener(ax25_address *addr)
146{
147 struct sock *s;
148
149 spin_lock_bh(&nr_list_lock);
150 sk_for_each(s, &nr_list)
151 if (!ax25cmp(&nr_sk(s)->source_addr, addr) &&
152 s->sk_state == TCP_LISTEN) {
153 sock_hold(s);
154 goto found;
155 }
156 s = NULL;
157found:
158 spin_unlock_bh(&nr_list_lock);
159 return s;
160}
161
162/*
163 * Find a connected NET/ROM socket given my circuit IDs.
164 */
165static struct sock *nr_find_socket(unsigned char index, unsigned char id)
166{
167 struct sock *s;
168
169 spin_lock_bh(&nr_list_lock);
170 sk_for_each(s, &nr_list) {
171 struct nr_sock *nr = nr_sk(s);
172
173 if (nr->my_index == index && nr->my_id == id) {
174 sock_hold(s);
175 goto found;
176 }
177 }
178 s = NULL;
179found:
180 spin_unlock_bh(&nr_list_lock);
181 return s;
182}
183
184/*
185 * Find a connected NET/ROM socket given their circuit IDs.
186 */
187static struct sock *nr_find_peer(unsigned char index, unsigned char id,
188 ax25_address *dest)
189{
190 struct sock *s;
191
192 spin_lock_bh(&nr_list_lock);
193 sk_for_each(s, &nr_list) {
194 struct nr_sock *nr = nr_sk(s);
195
196 if (nr->your_index == index && nr->your_id == id &&
197 !ax25cmp(&nr->dest_addr, dest)) {
198 sock_hold(s);
199 goto found;
200 }
201 }
202 s = NULL;
203found:
204 spin_unlock_bh(&nr_list_lock);
205 return s;
206}
207
208/*
209 * Find next free circuit ID.
210 */
211static unsigned short nr_find_next_circuit(void)
212{
213 unsigned short id = circuit;
214 unsigned char i, j;
215 struct sock *sk;
216
217 for (;;) {
218 i = id / 256;
219 j = id % 256;
220
221 if (i != 0 && j != 0) {
222 if ((sk=nr_find_socket(i, j)) == NULL)
223 break;
224 sock_put(sk);
225 }
226
227 id++;
228 }
229
230 return id;
231}
232
233/*
234 * Deferred destroy.
235 */
236void nr_destroy_socket(struct sock *);
237
238/*
239 * Handler for deferred kills.
240 */
241static void nr_destroy_timer(struct timer_list *t)
242{
243 struct sock *sk = from_timer(sk, t, sk_timer);
244 bh_lock_sock(sk);
245 sock_hold(sk);
246 nr_destroy_socket(sk);
247 bh_unlock_sock(sk);
248 sock_put(sk);
249}
250
251/*
252 * This is called from user mode and the timers. Thus it protects itself
253 * against interrupt users but doesn't worry about being called during
254 * work. Once it is removed from the queue no interrupt or bottom half
255 * will touch it and we are (fairly 8-) ) safe.
256 */
257void nr_destroy_socket(struct sock *sk)
258{
259 struct sk_buff *skb;
260
261 nr_remove_socket(sk);
262
263 nr_stop_heartbeat(sk);
264 nr_stop_t1timer(sk);
265 nr_stop_t2timer(sk);
266 nr_stop_t4timer(sk);
267 nr_stop_idletimer(sk);
268
269 nr_clear_queues(sk); /* Flush the queues */
270
271 while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
272 if (skb->sk != sk) { /* A pending connection */
273 /* Queue the unaccepted socket for death */
274 sock_set_flag(skb->sk, SOCK_DEAD);
275 nr_start_heartbeat(skb->sk);
276 nr_sk(skb->sk)->state = NR_STATE_0;
277 }
278
279 kfree_skb(skb);
280 }
281
282 if (sk_has_allocations(sk)) {
283 /* Defer: outstanding buffers */
284 sk->sk_timer.function = nr_destroy_timer;
285 sk->sk_timer.expires = jiffies + 2 * HZ;
286 add_timer(&sk->sk_timer);
287 } else
288 sock_put(sk);
289}
290
291/*
292 * Handling for system calls applied via the various interfaces to a
293 * NET/ROM socket object.
294 */
295
296static int nr_setsockopt(struct socket *sock, int level, int optname,
297 sockptr_t optval, unsigned int optlen)
298{
299 struct sock *sk = sock->sk;
300 struct nr_sock *nr = nr_sk(sk);
301 unsigned int opt;
302
303 if (level != SOL_NETROM)
304 return -ENOPROTOOPT;
305
306 if (optlen < sizeof(unsigned int))
307 return -EINVAL;
308
309 if (copy_from_sockptr(&opt, optval, sizeof(opt)))
310 return -EFAULT;
311
312 switch (optname) {
313 case NETROM_T1:
314 if (opt < 1 || opt > UINT_MAX / HZ)
315 return -EINVAL;
316 nr->t1 = opt * HZ;
317 return 0;
318
319 case NETROM_T2:
320 if (opt < 1 || opt > UINT_MAX / HZ)
321 return -EINVAL;
322 nr->t2 = opt * HZ;
323 return 0;
324
325 case NETROM_N2:
326 if (opt < 1 || opt > 31)
327 return -EINVAL;
328 nr->n2 = opt;
329 return 0;
330
331 case NETROM_T4:
332 if (opt < 1 || opt > UINT_MAX / HZ)
333 return -EINVAL;
334 nr->t4 = opt * HZ;
335 return 0;
336
337 case NETROM_IDLE:
338 if (opt > UINT_MAX / (60 * HZ))
339 return -EINVAL;
340 nr->idle = opt * 60 * HZ;
341 return 0;
342
343 default:
344 return -ENOPROTOOPT;
345 }
346}
347
348static int nr_getsockopt(struct socket *sock, int level, int optname,
349 char __user *optval, int __user *optlen)
350{
351 struct sock *sk = sock->sk;
352 struct nr_sock *nr = nr_sk(sk);
353 int val = 0;
354 int len;
355
356 if (level != SOL_NETROM)
357 return -ENOPROTOOPT;
358
359 if (get_user(len, optlen))
360 return -EFAULT;
361
362 if (len < 0)
363 return -EINVAL;
364
365 switch (optname) {
366 case NETROM_T1:
367 val = nr->t1 / HZ;
368 break;
369
370 case NETROM_T2:
371 val = nr->t2 / HZ;
372 break;
373
374 case NETROM_N2:
375 val = nr->n2;
376 break;
377
378 case NETROM_T4:
379 val = nr->t4 / HZ;
380 break;
381
382 case NETROM_IDLE:
383 val = nr->idle / (60 * HZ);
384 break;
385
386 default:
387 return -ENOPROTOOPT;
388 }
389
390 len = min_t(unsigned int, len, sizeof(int));
391
392 if (put_user(len, optlen))
393 return -EFAULT;
394
395 return copy_to_user(optval, &val, len) ? -EFAULT : 0;
396}
397
398static int nr_listen(struct socket *sock, int backlog)
399{
400 struct sock *sk = sock->sk;
401
402 lock_sock(sk);
403 if (sock->state != SS_UNCONNECTED) {
404 release_sock(sk);
405 return -EINVAL;
406 }
407
408 if (sk->sk_state != TCP_LISTEN) {
409 memset(&nr_sk(sk)->user_addr, 0, AX25_ADDR_LEN);
410 sk->sk_max_ack_backlog = backlog;
411 sk->sk_state = TCP_LISTEN;
412 release_sock(sk);
413 return 0;
414 }
415 release_sock(sk);
416
417 return -EOPNOTSUPP;
418}
419
420static struct proto nr_proto = {
421 .name = "NETROM",
422 .owner = THIS_MODULE,
423 .obj_size = sizeof(struct nr_sock),
424};
425
426static int nr_create(struct net *net, struct socket *sock, int protocol,
427 int kern)
428{
429 struct sock *sk;
430 struct nr_sock *nr;
431
432 if (!net_eq(net, &init_net))
433 return -EAFNOSUPPORT;
434
435 if (sock->type != SOCK_SEQPACKET || protocol != 0)
436 return -ESOCKTNOSUPPORT;
437
438 sk = sk_alloc(net, PF_NETROM, GFP_ATOMIC, &nr_proto, kern);
439 if (sk == NULL)
440 return -ENOMEM;
441
442 nr = nr_sk(sk);
443
444 sock_init_data(sock, sk);
445
446 sock->ops = &nr_proto_ops;
447 sk->sk_protocol = protocol;
448
449 skb_queue_head_init(&nr->ack_queue);
450 skb_queue_head_init(&nr->reseq_queue);
451 skb_queue_head_init(&nr->frag_queue);
452
453 nr_init_timers(sk);
454
455 nr->t1 =
456 msecs_to_jiffies(READ_ONCE(sysctl_netrom_transport_timeout));
457 nr->t2 =
458 msecs_to_jiffies(READ_ONCE(sysctl_netrom_transport_acknowledge_delay));
459 nr->n2 =
460 msecs_to_jiffies(READ_ONCE(sysctl_netrom_transport_maximum_tries));
461 nr->t4 =
462 msecs_to_jiffies(READ_ONCE(sysctl_netrom_transport_busy_delay));
463 nr->idle =
464 msecs_to_jiffies(READ_ONCE(sysctl_netrom_transport_no_activity_timeout));
465 nr->window = READ_ONCE(sysctl_netrom_transport_requested_window_size);
466
467 nr->bpqext = 1;
468 nr->state = NR_STATE_0;
469
470 return 0;
471}
472
473static struct sock *nr_make_new(struct sock *osk)
474{
475 struct sock *sk;
476 struct nr_sock *nr, *onr;
477
478 if (osk->sk_type != SOCK_SEQPACKET)
479 return NULL;
480
481 sk = sk_alloc(sock_net(osk), PF_NETROM, GFP_ATOMIC, osk->sk_prot, 0);
482 if (sk == NULL)
483 return NULL;
484
485 nr = nr_sk(sk);
486
487 sock_init_data(NULL, sk);
488
489 sk->sk_type = osk->sk_type;
490 sk->sk_priority = READ_ONCE(osk->sk_priority);
491 sk->sk_protocol = osk->sk_protocol;
492 sk->sk_rcvbuf = osk->sk_rcvbuf;
493 sk->sk_sndbuf = osk->sk_sndbuf;
494 sk->sk_state = TCP_ESTABLISHED;
495 sock_copy_flags(sk, osk);
496
497 skb_queue_head_init(&nr->ack_queue);
498 skb_queue_head_init(&nr->reseq_queue);
499 skb_queue_head_init(&nr->frag_queue);
500
501 nr_init_timers(sk);
502
503 onr = nr_sk(osk);
504
505 nr->t1 = onr->t1;
506 nr->t2 = onr->t2;
507 nr->n2 = onr->n2;
508 nr->t4 = onr->t4;
509 nr->idle = onr->idle;
510 nr->window = onr->window;
511
512 nr->device = onr->device;
513 nr->bpqext = onr->bpqext;
514
515 return sk;
516}
517
518static int nr_release(struct socket *sock)
519{
520 struct sock *sk = sock->sk;
521 struct nr_sock *nr;
522
523 if (sk == NULL) return 0;
524
525 sock_hold(sk);
526 sock_orphan(sk);
527 lock_sock(sk);
528 nr = nr_sk(sk);
529
530 switch (nr->state) {
531 case NR_STATE_0:
532 case NR_STATE_1:
533 case NR_STATE_2:
534 nr_disconnect(sk, 0);
535 nr_destroy_socket(sk);
536 break;
537
538 case NR_STATE_3:
539 nr_clear_queues(sk);
540 nr->n2count = 0;
541 nr_write_internal(sk, NR_DISCREQ);
542 nr_start_t1timer(sk);
543 nr_stop_t2timer(sk);
544 nr_stop_t4timer(sk);
545 nr_stop_idletimer(sk);
546 nr->state = NR_STATE_2;
547 sk->sk_state = TCP_CLOSE;
548 sk->sk_shutdown |= SEND_SHUTDOWN;
549 sk->sk_state_change(sk);
550 sock_set_flag(sk, SOCK_DESTROY);
551 break;
552
553 default:
554 break;
555 }
556
557 sock->sk = NULL;
558 release_sock(sk);
559 sock_put(sk);
560
561 return 0;
562}
563
564static int nr_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
565{
566 struct sock *sk = sock->sk;
567 struct nr_sock *nr = nr_sk(sk);
568 struct full_sockaddr_ax25 *addr = (struct full_sockaddr_ax25 *)uaddr;
569 struct net_device *dev;
570 ax25_uid_assoc *user;
571 ax25_address *source;
572
573 lock_sock(sk);
574 if (!sock_flag(sk, SOCK_ZAPPED)) {
575 release_sock(sk);
576 return -EINVAL;
577 }
578 if (addr_len < sizeof(struct sockaddr_ax25) || addr_len > sizeof(struct full_sockaddr_ax25)) {
579 release_sock(sk);
580 return -EINVAL;
581 }
582 if (addr_len < (addr->fsa_ax25.sax25_ndigis * sizeof(ax25_address) + sizeof(struct sockaddr_ax25))) {
583 release_sock(sk);
584 return -EINVAL;
585 }
586 if (addr->fsa_ax25.sax25_family != AF_NETROM) {
587 release_sock(sk);
588 return -EINVAL;
589 }
590 if ((dev = nr_dev_get(&addr->fsa_ax25.sax25_call)) == NULL) {
591 release_sock(sk);
592 return -EADDRNOTAVAIL;
593 }
594
595 /*
596 * Only the super user can set an arbitrary user callsign.
597 */
598 if (addr->fsa_ax25.sax25_ndigis == 1) {
599 if (!capable(CAP_NET_BIND_SERVICE)) {
600 dev_put(dev);
601 release_sock(sk);
602 return -EPERM;
603 }
604 nr->user_addr = addr->fsa_digipeater[0];
605 nr->source_addr = addr->fsa_ax25.sax25_call;
606 } else {
607 source = &addr->fsa_ax25.sax25_call;
608
609 user = ax25_findbyuid(current_euid());
610 if (user) {
611 nr->user_addr = user->call;
612 ax25_uid_put(user);
613 } else {
614 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE)) {
615 release_sock(sk);
616 dev_put(dev);
617 return -EPERM;
618 }
619 nr->user_addr = *source;
620 }
621
622 nr->source_addr = *source;
623 }
624
625 nr->device = dev;
626 nr_insert_socket(sk);
627
628 sock_reset_flag(sk, SOCK_ZAPPED);
629 dev_put(dev);
630 release_sock(sk);
631
632 return 0;
633}
634
635static int nr_connect(struct socket *sock, struct sockaddr *uaddr,
636 int addr_len, int flags)
637{
638 struct sock *sk = sock->sk;
639 struct nr_sock *nr = nr_sk(sk);
640 struct sockaddr_ax25 *addr = (struct sockaddr_ax25 *)uaddr;
641 const ax25_address *source = NULL;
642 ax25_uid_assoc *user;
643 struct net_device *dev;
644 int err = 0;
645
646 lock_sock(sk);
647 if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
648 sock->state = SS_CONNECTED;
649 goto out_release; /* Connect completed during a ERESTARTSYS event */
650 }
651
652 if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
653 sock->state = SS_UNCONNECTED;
654 err = -ECONNREFUSED;
655 goto out_release;
656 }
657
658 if (sk->sk_state == TCP_ESTABLISHED) {
659 err = -EISCONN; /* No reconnect on a seqpacket socket */
660 goto out_release;
661 }
662
663 if (sock->state == SS_CONNECTING) {
664 err = -EALREADY;
665 goto out_release;
666 }
667
668 sk->sk_state = TCP_CLOSE;
669 sock->state = SS_UNCONNECTED;
670
671 if (addr_len != sizeof(struct sockaddr_ax25) && addr_len != sizeof(struct full_sockaddr_ax25)) {
672 err = -EINVAL;
673 goto out_release;
674 }
675 if (addr->sax25_family != AF_NETROM) {
676 err = -EINVAL;
677 goto out_release;
678 }
679 if (sock_flag(sk, SOCK_ZAPPED)) { /* Must bind first - autobinding in this may or may not work */
680 sock_reset_flag(sk, SOCK_ZAPPED);
681
682 if ((dev = nr_dev_first()) == NULL) {
683 err = -ENETUNREACH;
684 goto out_release;
685 }
686 source = (const ax25_address *)dev->dev_addr;
687
688 user = ax25_findbyuid(current_euid());
689 if (user) {
690 nr->user_addr = user->call;
691 ax25_uid_put(user);
692 } else {
693 if (ax25_uid_policy && !capable(CAP_NET_ADMIN)) {
694 dev_put(dev);
695 err = -EPERM;
696 goto out_release;
697 }
698 nr->user_addr = *source;
699 }
700
701 nr->source_addr = *source;
702 nr->device = dev;
703
704 dev_put(dev);
705 nr_insert_socket(sk); /* Finish the bind */
706 }
707
708 nr->dest_addr = addr->sax25_call;
709
710 release_sock(sk);
711 circuit = nr_find_next_circuit();
712 lock_sock(sk);
713
714 nr->my_index = circuit / 256;
715 nr->my_id = circuit % 256;
716
717 circuit++;
718
719 /* Move to connecting socket, start sending Connect Requests */
720 sock->state = SS_CONNECTING;
721 sk->sk_state = TCP_SYN_SENT;
722
723 nr_establish_data_link(sk);
724
725 nr->state = NR_STATE_1;
726
727 nr_start_heartbeat(sk);
728
729 /* Now the loop */
730 if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
731 err = -EINPROGRESS;
732 goto out_release;
733 }
734
735 /*
736 * A Connect Ack with Choke or timeout or failed routing will go to
737 * closed.
738 */
739 if (sk->sk_state == TCP_SYN_SENT) {
740 DEFINE_WAIT(wait);
741
742 for (;;) {
743 prepare_to_wait(sk_sleep(sk), &wait,
744 TASK_INTERRUPTIBLE);
745 if (sk->sk_state != TCP_SYN_SENT)
746 break;
747 if (!signal_pending(current)) {
748 release_sock(sk);
749 schedule();
750 lock_sock(sk);
751 continue;
752 }
753 err = -ERESTARTSYS;
754 break;
755 }
756 finish_wait(sk_sleep(sk), &wait);
757 if (err)
758 goto out_release;
759 }
760
761 if (sk->sk_state != TCP_ESTABLISHED) {
762 sock->state = SS_UNCONNECTED;
763 err = sock_error(sk); /* Always set at this point */
764 goto out_release;
765 }
766
767 sock->state = SS_CONNECTED;
768
769out_release:
770 release_sock(sk);
771
772 return err;
773}
774
775static int nr_accept(struct socket *sock, struct socket *newsock, int flags,
776 bool kern)
777{
778 struct sk_buff *skb;
779 struct sock *newsk;
780 DEFINE_WAIT(wait);
781 struct sock *sk;
782 int err = 0;
783
784 if ((sk = sock->sk) == NULL)
785 return -EINVAL;
786
787 lock_sock(sk);
788 if (sk->sk_type != SOCK_SEQPACKET) {
789 err = -EOPNOTSUPP;
790 goto out_release;
791 }
792
793 if (sk->sk_state != TCP_LISTEN) {
794 err = -EINVAL;
795 goto out_release;
796 }
797
798 /*
799 * The write queue this time is holding sockets ready to use
800 * hooked into the SABM we saved
801 */
802 for (;;) {
803 prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
804 skb = skb_dequeue(&sk->sk_receive_queue);
805 if (skb)
806 break;
807
808 if (flags & O_NONBLOCK) {
809 err = -EWOULDBLOCK;
810 break;
811 }
812 if (!signal_pending(current)) {
813 release_sock(sk);
814 schedule();
815 lock_sock(sk);
816 continue;
817 }
818 err = -ERESTARTSYS;
819 break;
820 }
821 finish_wait(sk_sleep(sk), &wait);
822 if (err)
823 goto out_release;
824
825 newsk = skb->sk;
826 sock_graft(newsk, newsock);
827
828 /* Now attach up the new socket */
829 kfree_skb(skb);
830 sk_acceptq_removed(sk);
831
832out_release:
833 release_sock(sk);
834
835 return err;
836}
837
838static int nr_getname(struct socket *sock, struct sockaddr *uaddr,
839 int peer)
840{
841 struct full_sockaddr_ax25 *sax = (struct full_sockaddr_ax25 *)uaddr;
842 struct sock *sk = sock->sk;
843 struct nr_sock *nr = nr_sk(sk);
844 int uaddr_len;
845
846 memset(&sax->fsa_ax25, 0, sizeof(struct sockaddr_ax25));
847
848 lock_sock(sk);
849 if (peer != 0) {
850 if (sk->sk_state != TCP_ESTABLISHED) {
851 release_sock(sk);
852 return -ENOTCONN;
853 }
854 sax->fsa_ax25.sax25_family = AF_NETROM;
855 sax->fsa_ax25.sax25_ndigis = 1;
856 sax->fsa_ax25.sax25_call = nr->user_addr;
857 memset(sax->fsa_digipeater, 0, sizeof(sax->fsa_digipeater));
858 sax->fsa_digipeater[0] = nr->dest_addr;
859 uaddr_len = sizeof(struct full_sockaddr_ax25);
860 } else {
861 sax->fsa_ax25.sax25_family = AF_NETROM;
862 sax->fsa_ax25.sax25_ndigis = 0;
863 sax->fsa_ax25.sax25_call = nr->source_addr;
864 uaddr_len = sizeof(struct sockaddr_ax25);
865 }
866 release_sock(sk);
867
868 return uaddr_len;
869}
870
871int nr_rx_frame(struct sk_buff *skb, struct net_device *dev)
872{
873 struct sock *sk;
874 struct sock *make;
875 struct nr_sock *nr_make;
876 ax25_address *src, *dest, *user;
877 unsigned short circuit_index, circuit_id;
878 unsigned short peer_circuit_index, peer_circuit_id;
879 unsigned short frametype, flags, window, timeout;
880 int ret;
881
882 skb_orphan(skb);
883
884 /*
885 * skb->data points to the netrom frame start
886 */
887
888 src = (ax25_address *)(skb->data + 0);
889 dest = (ax25_address *)(skb->data + 7);
890
891 circuit_index = skb->data[15];
892 circuit_id = skb->data[16];
893 peer_circuit_index = skb->data[17];
894 peer_circuit_id = skb->data[18];
895 frametype = skb->data[19] & 0x0F;
896 flags = skb->data[19] & 0xF0;
897
898 /*
899 * Check for an incoming IP over NET/ROM frame.
900 */
901 if (frametype == NR_PROTOEXT &&
902 circuit_index == NR_PROTO_IP && circuit_id == NR_PROTO_IP) {
903 skb_pull(skb, NR_NETWORK_LEN + NR_TRANSPORT_LEN);
904 skb_reset_transport_header(skb);
905
906 return nr_rx_ip(skb, dev);
907 }
908
909 /*
910 * Find an existing socket connection, based on circuit ID, if it's
911 * a Connect Request base it on their circuit ID.
912 *
913 * Circuit ID 0/0 is not valid but it could still be a "reset" for a
914 * circuit that no longer exists at the other end ...
915 */
916
917 sk = NULL;
918
919 if (circuit_index == 0 && circuit_id == 0) {
920 if (frametype == NR_CONNACK && flags == NR_CHOKE_FLAG)
921 sk = nr_find_peer(peer_circuit_index, peer_circuit_id, src);
922 } else {
923 if (frametype == NR_CONNREQ)
924 sk = nr_find_peer(circuit_index, circuit_id, src);
925 else
926 sk = nr_find_socket(circuit_index, circuit_id);
927 }
928
929 if (sk != NULL) {
930 bh_lock_sock(sk);
931 skb_reset_transport_header(skb);
932
933 if (frametype == NR_CONNACK && skb->len == 22)
934 nr_sk(sk)->bpqext = 1;
935 else
936 nr_sk(sk)->bpqext = 0;
937
938 ret = nr_process_rx_frame(sk, skb);
939 bh_unlock_sock(sk);
940 sock_put(sk);
941 return ret;
942 }
943
944 /*
945 * Now it should be a CONNREQ.
946 */
947 if (frametype != NR_CONNREQ) {
948 /*
949 * Here it would be nice to be able to send a reset but
950 * NET/ROM doesn't have one. We've tried to extend the protocol
951 * by sending NR_CONNACK | NR_CHOKE_FLAGS replies but that
952 * apparently kills BPQ boxes... :-(
953 * So now we try to follow the established behaviour of
954 * G8PZT's Xrouter which is sending packets with command type 7
955 * as an extension of the protocol.
956 */
957 if (READ_ONCE(sysctl_netrom_reset_circuit) &&
958 (frametype != NR_RESET || flags != 0))
959 nr_transmit_reset(skb, 1);
960
961 return 0;
962 }
963
964 sk = nr_find_listener(dest);
965
966 user = (ax25_address *)(skb->data + 21);
967
968 if (sk == NULL || sk_acceptq_is_full(sk) ||
969 (make = nr_make_new(sk)) == NULL) {
970 nr_transmit_refusal(skb, 0);
971 if (sk)
972 sock_put(sk);
973 return 0;
974 }
975
976 bh_lock_sock(sk);
977
978 window = skb->data[20];
979
980 sock_hold(make);
981 skb->sk = make;
982 skb->destructor = sock_efree;
983 make->sk_state = TCP_ESTABLISHED;
984
985 /* Fill in his circuit details */
986 nr_make = nr_sk(make);
987 nr_make->source_addr = *dest;
988 nr_make->dest_addr = *src;
989 nr_make->user_addr = *user;
990
991 nr_make->your_index = circuit_index;
992 nr_make->your_id = circuit_id;
993
994 bh_unlock_sock(sk);
995 circuit = nr_find_next_circuit();
996 bh_lock_sock(sk);
997
998 nr_make->my_index = circuit / 256;
999 nr_make->my_id = circuit % 256;
1000
1001 circuit++;
1002
1003 /* Window negotiation */
1004 if (window < nr_make->window)
1005 nr_make->window = window;
1006
1007 /* L4 timeout negotiation */
1008 if (skb->len == 37) {
1009 timeout = skb->data[36] * 256 + skb->data[35];
1010 if (timeout * HZ < nr_make->t1)
1011 nr_make->t1 = timeout * HZ;
1012 nr_make->bpqext = 1;
1013 } else {
1014 nr_make->bpqext = 0;
1015 }
1016
1017 nr_write_internal(make, NR_CONNACK);
1018
1019 nr_make->condition = 0x00;
1020 nr_make->vs = 0;
1021 nr_make->va = 0;
1022 nr_make->vr = 0;
1023 nr_make->vl = 0;
1024 nr_make->state = NR_STATE_3;
1025 sk_acceptq_added(sk);
1026 skb_queue_head(&sk->sk_receive_queue, skb);
1027
1028 if (!sock_flag(sk, SOCK_DEAD))
1029 sk->sk_data_ready(sk);
1030
1031 bh_unlock_sock(sk);
1032 sock_put(sk);
1033
1034 nr_insert_socket(make);
1035
1036 nr_start_heartbeat(make);
1037 nr_start_idletimer(make);
1038
1039 return 1;
1040}
1041
1042static int nr_sendmsg(struct socket *sock, struct msghdr *msg, size_t len)
1043{
1044 struct sock *sk = sock->sk;
1045 struct nr_sock *nr = nr_sk(sk);
1046 DECLARE_SOCKADDR(struct sockaddr_ax25 *, usax, msg->msg_name);
1047 int err;
1048 struct sockaddr_ax25 sax;
1049 struct sk_buff *skb;
1050 unsigned char *asmptr;
1051 int size;
1052
1053 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1054 return -EINVAL;
1055
1056 lock_sock(sk);
1057 if (sock_flag(sk, SOCK_ZAPPED)) {
1058 err = -EADDRNOTAVAIL;
1059 goto out;
1060 }
1061
1062 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1063 send_sig(SIGPIPE, current, 0);
1064 err = -EPIPE;
1065 goto out;
1066 }
1067
1068 if (nr->device == NULL) {
1069 err = -ENETUNREACH;
1070 goto out;
1071 }
1072
1073 if (usax) {
1074 if (msg->msg_namelen < sizeof(sax)) {
1075 err = -EINVAL;
1076 goto out;
1077 }
1078 sax = *usax;
1079 if (ax25cmp(&nr->dest_addr, &sax.sax25_call) != 0) {
1080 err = -EISCONN;
1081 goto out;
1082 }
1083 if (sax.sax25_family != AF_NETROM) {
1084 err = -EINVAL;
1085 goto out;
1086 }
1087 } else {
1088 if (sk->sk_state != TCP_ESTABLISHED) {
1089 err = -ENOTCONN;
1090 goto out;
1091 }
1092 sax.sax25_family = AF_NETROM;
1093 sax.sax25_call = nr->dest_addr;
1094 }
1095
1096 /* Build a packet - the conventional user limit is 236 bytes. We can
1097 do ludicrously large NetROM frames but must not overflow */
1098 if (len > 65536) {
1099 err = -EMSGSIZE;
1100 goto out;
1101 }
1102
1103 size = len + NR_NETWORK_LEN + NR_TRANSPORT_LEN;
1104
1105 if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1106 goto out;
1107
1108 skb_reserve(skb, size - len);
1109 skb_reset_transport_header(skb);
1110
1111 /*
1112 * Push down the NET/ROM header
1113 */
1114
1115 asmptr = skb_push(skb, NR_TRANSPORT_LEN);
1116
1117 /* Build a NET/ROM Transport header */
1118
1119 *asmptr++ = nr->your_index;
1120 *asmptr++ = nr->your_id;
1121 *asmptr++ = 0; /* To be filled in later */
1122 *asmptr++ = 0; /* Ditto */
1123 *asmptr++ = NR_INFO;
1124
1125 /*
1126 * Put the data on the end
1127 */
1128 skb_put(skb, len);
1129
1130 /* User data follows immediately after the NET/ROM transport header */
1131 if (memcpy_from_msg(skb_transport_header(skb), msg, len)) {
1132 kfree_skb(skb);
1133 err = -EFAULT;
1134 goto out;
1135 }
1136
1137 if (sk->sk_state != TCP_ESTABLISHED) {
1138 kfree_skb(skb);
1139 err = -ENOTCONN;
1140 goto out;
1141 }
1142
1143 nr_output(sk, skb); /* Shove it onto the queue */
1144
1145 err = len;
1146out:
1147 release_sock(sk);
1148 return err;
1149}
1150
1151static int nr_recvmsg(struct socket *sock, struct msghdr *msg, size_t size,
1152 int flags)
1153{
1154 struct sock *sk = sock->sk;
1155 DECLARE_SOCKADDR(struct sockaddr_ax25 *, sax, msg->msg_name);
1156 size_t copied;
1157 struct sk_buff *skb;
1158 int er;
1159
1160 /*
1161 * This works for seqpacket too. The receiver has ordered the queue for
1162 * us! We do one quick check first though
1163 */
1164
1165 lock_sock(sk);
1166 if (sk->sk_state != TCP_ESTABLISHED) {
1167 release_sock(sk);
1168 return -ENOTCONN;
1169 }
1170
1171 /* Now we can treat all alike */
1172 skb = skb_recv_datagram(sk, flags, &er);
1173 if (!skb) {
1174 release_sock(sk);
1175 return er;
1176 }
1177
1178 skb_reset_transport_header(skb);
1179 copied = skb->len;
1180
1181 if (copied > size) {
1182 copied = size;
1183 msg->msg_flags |= MSG_TRUNC;
1184 }
1185
1186 er = skb_copy_datagram_msg(skb, 0, msg, copied);
1187 if (er < 0) {
1188 skb_free_datagram(sk, skb);
1189 release_sock(sk);
1190 return er;
1191 }
1192
1193 if (sax != NULL) {
1194 memset(sax, 0, sizeof(*sax));
1195 sax->sax25_family = AF_NETROM;
1196 skb_copy_from_linear_data_offset(skb, 7, sax->sax25_call.ax25_call,
1197 AX25_ADDR_LEN);
1198 msg->msg_namelen = sizeof(*sax);
1199 }
1200
1201 skb_free_datagram(sk, skb);
1202
1203 release_sock(sk);
1204 return copied;
1205}
1206
1207
1208static int nr_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1209{
1210 struct sock *sk = sock->sk;
1211 void __user *argp = (void __user *)arg;
1212
1213 switch (cmd) {
1214 case TIOCOUTQ: {
1215 long amount;
1216
1217 lock_sock(sk);
1218 amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1219 if (amount < 0)
1220 amount = 0;
1221 release_sock(sk);
1222 return put_user(amount, (int __user *)argp);
1223 }
1224
1225 case TIOCINQ: {
1226 struct sk_buff *skb;
1227 long amount = 0L;
1228
1229 lock_sock(sk);
1230 /* These two are safe on a single CPU system as only user tasks fiddle here */
1231 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1232 amount = skb->len;
1233 release_sock(sk);
1234 return put_user(amount, (int __user *)argp);
1235 }
1236
1237 case SIOCGIFADDR:
1238 case SIOCSIFADDR:
1239 case SIOCGIFDSTADDR:
1240 case SIOCSIFDSTADDR:
1241 case SIOCGIFBRDADDR:
1242 case SIOCSIFBRDADDR:
1243 case SIOCGIFNETMASK:
1244 case SIOCSIFNETMASK:
1245 case SIOCGIFMETRIC:
1246 case SIOCSIFMETRIC:
1247 return -EINVAL;
1248
1249 case SIOCADDRT:
1250 case SIOCDELRT:
1251 case SIOCNRDECOBS:
1252 if (!capable(CAP_NET_ADMIN))
1253 return -EPERM;
1254 return nr_rt_ioctl(cmd, argp);
1255
1256 default:
1257 return -ENOIOCTLCMD;
1258 }
1259
1260 return 0;
1261}
1262
1263#ifdef CONFIG_PROC_FS
1264
1265static void *nr_info_start(struct seq_file *seq, loff_t *pos)
1266 __acquires(&nr_list_lock)
1267{
1268 spin_lock_bh(&nr_list_lock);
1269 return seq_hlist_start_head(&nr_list, *pos);
1270}
1271
1272static void *nr_info_next(struct seq_file *seq, void *v, loff_t *pos)
1273{
1274 return seq_hlist_next(v, &nr_list, pos);
1275}
1276
1277static void nr_info_stop(struct seq_file *seq, void *v)
1278 __releases(&nr_list_lock)
1279{
1280 spin_unlock_bh(&nr_list_lock);
1281}
1282
1283static int nr_info_show(struct seq_file *seq, void *v)
1284{
1285 struct sock *s = sk_entry(v);
1286 struct net_device *dev;
1287 struct nr_sock *nr;
1288 const char *devname;
1289 char buf[11];
1290
1291 if (v == SEQ_START_TOKEN)
1292 seq_puts(seq,
1293"user_addr dest_node src_node dev my your st vs vr va t1 t2 t4 idle n2 wnd Snd-Q Rcv-Q inode\n");
1294
1295 else {
1296
1297 bh_lock_sock(s);
1298 nr = nr_sk(s);
1299
1300 if ((dev = nr->device) == NULL)
1301 devname = "???";
1302 else
1303 devname = dev->name;
1304
1305 seq_printf(seq, "%-9s ", ax2asc(buf, &nr->user_addr));
1306 seq_printf(seq, "%-9s ", ax2asc(buf, &nr->dest_addr));
1307 seq_printf(seq,
1308"%-9s %-3s %02X/%02X %02X/%02X %2d %3d %3d %3d %3lu/%03lu %2lu/%02lu %3lu/%03lu %3lu/%03lu %2d/%02d %3d %5d %5d %ld\n",
1309 ax2asc(buf, &nr->source_addr),
1310 devname,
1311 nr->my_index,
1312 nr->my_id,
1313 nr->your_index,
1314 nr->your_id,
1315 nr->state,
1316 nr->vs,
1317 nr->vr,
1318 nr->va,
1319 ax25_display_timer(&nr->t1timer) / HZ,
1320 nr->t1 / HZ,
1321 ax25_display_timer(&nr->t2timer) / HZ,
1322 nr->t2 / HZ,
1323 ax25_display_timer(&nr->t4timer) / HZ,
1324 nr->t4 / HZ,
1325 ax25_display_timer(&nr->idletimer) / (60 * HZ),
1326 nr->idle / (60 * HZ),
1327 nr->n2count,
1328 nr->n2,
1329 nr->window,
1330 sk_wmem_alloc_get(s),
1331 sk_rmem_alloc_get(s),
1332 s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1333
1334 bh_unlock_sock(s);
1335 }
1336 return 0;
1337}
1338
1339static const struct seq_operations nr_info_seqops = {
1340 .start = nr_info_start,
1341 .next = nr_info_next,
1342 .stop = nr_info_stop,
1343 .show = nr_info_show,
1344};
1345#endif /* CONFIG_PROC_FS */
1346
1347static const struct net_proto_family nr_family_ops = {
1348 .family = PF_NETROM,
1349 .create = nr_create,
1350 .owner = THIS_MODULE,
1351};
1352
1353static const struct proto_ops nr_proto_ops = {
1354 .family = PF_NETROM,
1355 .owner = THIS_MODULE,
1356 .release = nr_release,
1357 .bind = nr_bind,
1358 .connect = nr_connect,
1359 .socketpair = sock_no_socketpair,
1360 .accept = nr_accept,
1361 .getname = nr_getname,
1362 .poll = datagram_poll,
1363 .ioctl = nr_ioctl,
1364 .gettstamp = sock_gettstamp,
1365 .listen = nr_listen,
1366 .shutdown = sock_no_shutdown,
1367 .setsockopt = nr_setsockopt,
1368 .getsockopt = nr_getsockopt,
1369 .sendmsg = nr_sendmsg,
1370 .recvmsg = nr_recvmsg,
1371 .mmap = sock_no_mmap,
1372};
1373
1374static struct notifier_block nr_dev_notifier = {
1375 .notifier_call = nr_device_event,
1376};
1377
1378static struct net_device **dev_nr;
1379
1380static struct ax25_protocol nr_pid = {
1381 .pid = AX25_P_NETROM,
1382 .func = nr_route_frame
1383};
1384
1385static struct ax25_linkfail nr_linkfail_notifier = {
1386 .func = nr_link_failed,
1387};
1388
1389static int __init nr_proto_init(void)
1390{
1391 int i;
1392 int rc = proto_register(&nr_proto, 0);
1393
1394 if (rc)
1395 return rc;
1396
1397 if (nr_ndevs > 0x7fffffff/sizeof(struct net_device *)) {
1398 pr_err("NET/ROM: %s - nr_ndevs parameter too large\n",
1399 __func__);
1400 rc = -EINVAL;
1401 goto unregister_proto;
1402 }
1403
1404 dev_nr = kcalloc(nr_ndevs, sizeof(struct net_device *), GFP_KERNEL);
1405 if (!dev_nr) {
1406 pr_err("NET/ROM: %s - unable to allocate device array\n",
1407 __func__);
1408 rc = -ENOMEM;
1409 goto unregister_proto;
1410 }
1411
1412 for (i = 0; i < nr_ndevs; i++) {
1413 char name[IFNAMSIZ];
1414 struct net_device *dev;
1415
1416 sprintf(name, "nr%d", i);
1417 dev = alloc_netdev(0, name, NET_NAME_UNKNOWN, nr_setup);
1418 if (!dev) {
1419 rc = -ENOMEM;
1420 goto fail;
1421 }
1422
1423 dev->base_addr = i;
1424 rc = register_netdev(dev);
1425 if (rc) {
1426 free_netdev(dev);
1427 goto fail;
1428 }
1429 nr_set_lockdep_key(dev);
1430 dev_nr[i] = dev;
1431 }
1432
1433 rc = sock_register(&nr_family_ops);
1434 if (rc)
1435 goto fail;
1436
1437 rc = register_netdevice_notifier(&nr_dev_notifier);
1438 if (rc)
1439 goto out_sock;
1440
1441 ax25_register_pid(&nr_pid);
1442 ax25_linkfail_register(&nr_linkfail_notifier);
1443
1444#ifdef CONFIG_SYSCTL
1445 rc = nr_register_sysctl();
1446 if (rc)
1447 goto out_sysctl;
1448#endif
1449
1450 nr_loopback_init();
1451
1452 rc = -ENOMEM;
1453 if (!proc_create_seq("nr", 0444, init_net.proc_net, &nr_info_seqops))
1454 goto proc_remove1;
1455 if (!proc_create_seq("nr_neigh", 0444, init_net.proc_net,
1456 &nr_neigh_seqops))
1457 goto proc_remove2;
1458 if (!proc_create_seq("nr_nodes", 0444, init_net.proc_net,
1459 &nr_node_seqops))
1460 goto proc_remove3;
1461
1462 return 0;
1463
1464proc_remove3:
1465 remove_proc_entry("nr_neigh", init_net.proc_net);
1466proc_remove2:
1467 remove_proc_entry("nr", init_net.proc_net);
1468proc_remove1:
1469
1470 nr_loopback_clear();
1471 nr_rt_free();
1472
1473#ifdef CONFIG_SYSCTL
1474 nr_unregister_sysctl();
1475out_sysctl:
1476#endif
1477 ax25_linkfail_release(&nr_linkfail_notifier);
1478 ax25_protocol_release(AX25_P_NETROM);
1479 unregister_netdevice_notifier(&nr_dev_notifier);
1480out_sock:
1481 sock_unregister(PF_NETROM);
1482fail:
1483 while (--i >= 0) {
1484 unregister_netdev(dev_nr[i]);
1485 free_netdev(dev_nr[i]);
1486 }
1487 kfree(dev_nr);
1488unregister_proto:
1489 proto_unregister(&nr_proto);
1490 return rc;
1491}
1492
1493module_init(nr_proto_init);
1494
1495module_param(nr_ndevs, int, 0);
1496MODULE_PARM_DESC(nr_ndevs, "number of NET/ROM devices");
1497
1498MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1499MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol");
1500MODULE_LICENSE("GPL");
1501MODULE_ALIAS_NETPROTO(PF_NETROM);
1502
1503static void __exit nr_exit(void)
1504{
1505 int i;
1506
1507 remove_proc_entry("nr", init_net.proc_net);
1508 remove_proc_entry("nr_neigh", init_net.proc_net);
1509 remove_proc_entry("nr_nodes", init_net.proc_net);
1510 nr_loopback_clear();
1511
1512 nr_rt_free();
1513
1514#ifdef CONFIG_SYSCTL
1515 nr_unregister_sysctl();
1516#endif
1517
1518 ax25_linkfail_release(&nr_linkfail_notifier);
1519 ax25_protocol_release(AX25_P_NETROM);
1520
1521 unregister_netdevice_notifier(&nr_dev_notifier);
1522
1523 sock_unregister(PF_NETROM);
1524
1525 for (i = 0; i < nr_ndevs; i++) {
1526 struct net_device *dev = dev_nr[i];
1527 if (dev) {
1528 unregister_netdev(dev);
1529 free_netdev(dev);
1530 }
1531 }
1532
1533 kfree(dev_nr);
1534 proto_unregister(&nr_proto);
1535}
1536module_exit(nr_exit);
1/*
2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License as published by
4 * the Free Software Foundation; either version 2 of the License, or
5 * (at your option) any later version.
6 *
7 * Copyright Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
8 * Copyright Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
9 * Copyright Darryl Miles G7LED (dlm@g7led.demon.co.uk)
10 */
11#include <linux/module.h>
12#include <linux/moduleparam.h>
13#include <linux/capability.h>
14#include <linux/errno.h>
15#include <linux/types.h>
16#include <linux/socket.h>
17#include <linux/in.h>
18#include <linux/slab.h>
19#include <linux/kernel.h>
20#include <linux/sched.h>
21#include <linux/timer.h>
22#include <linux/string.h>
23#include <linux/sockios.h>
24#include <linux/net.h>
25#include <linux/stat.h>
26#include <net/ax25.h>
27#include <linux/inet.h>
28#include <linux/netdevice.h>
29#include <linux/if_arp.h>
30#include <linux/skbuff.h>
31#include <net/net_namespace.h>
32#include <net/sock.h>
33#include <asm/uaccess.h>
34#include <asm/system.h>
35#include <linux/fcntl.h>
36#include <linux/termios.h> /* For TIOCINQ/OUTQ */
37#include <linux/mm.h>
38#include <linux/interrupt.h>
39#include <linux/notifier.h>
40#include <net/netrom.h>
41#include <linux/proc_fs.h>
42#include <linux/seq_file.h>
43#include <net/ip.h>
44#include <net/tcp_states.h>
45#include <net/arp.h>
46#include <linux/init.h>
47
48static int nr_ndevs = 4;
49
50int sysctl_netrom_default_path_quality = NR_DEFAULT_QUAL;
51int sysctl_netrom_obsolescence_count_initialiser = NR_DEFAULT_OBS;
52int sysctl_netrom_network_ttl_initialiser = NR_DEFAULT_TTL;
53int sysctl_netrom_transport_timeout = NR_DEFAULT_T1;
54int sysctl_netrom_transport_maximum_tries = NR_DEFAULT_N2;
55int sysctl_netrom_transport_acknowledge_delay = NR_DEFAULT_T2;
56int sysctl_netrom_transport_busy_delay = NR_DEFAULT_T4;
57int sysctl_netrom_transport_requested_window_size = NR_DEFAULT_WINDOW;
58int sysctl_netrom_transport_no_activity_timeout = NR_DEFAULT_IDLE;
59int sysctl_netrom_routing_control = NR_DEFAULT_ROUTING;
60int sysctl_netrom_link_fails_count = NR_DEFAULT_FAILS;
61int sysctl_netrom_reset_circuit = NR_DEFAULT_RESET;
62
63static unsigned short circuit = 0x101;
64
65static HLIST_HEAD(nr_list);
66static DEFINE_SPINLOCK(nr_list_lock);
67
68static const struct proto_ops nr_proto_ops;
69
70/*
71 * NETROM network devices are virtual network devices encapsulating NETROM
72 * frames into AX.25 which will be sent through an AX.25 device, so form a
73 * special "super class" of normal net devices; split their locks off into a
74 * separate class since they always nest.
75 */
76static struct lock_class_key nr_netdev_xmit_lock_key;
77static struct lock_class_key nr_netdev_addr_lock_key;
78
79static void nr_set_lockdep_one(struct net_device *dev,
80 struct netdev_queue *txq,
81 void *_unused)
82{
83 lockdep_set_class(&txq->_xmit_lock, &nr_netdev_xmit_lock_key);
84}
85
86static void nr_set_lockdep_key(struct net_device *dev)
87{
88 lockdep_set_class(&dev->addr_list_lock, &nr_netdev_addr_lock_key);
89 netdev_for_each_tx_queue(dev, nr_set_lockdep_one, NULL);
90}
91
92/*
93 * Socket removal during an interrupt is now safe.
94 */
95static void nr_remove_socket(struct sock *sk)
96{
97 spin_lock_bh(&nr_list_lock);
98 sk_del_node_init(sk);
99 spin_unlock_bh(&nr_list_lock);
100}
101
102/*
103 * Kill all bound sockets on a dropped device.
104 */
105static void nr_kill_by_device(struct net_device *dev)
106{
107 struct sock *s;
108 struct hlist_node *node;
109
110 spin_lock_bh(&nr_list_lock);
111 sk_for_each(s, node, &nr_list)
112 if (nr_sk(s)->device == dev)
113 nr_disconnect(s, ENETUNREACH);
114 spin_unlock_bh(&nr_list_lock);
115}
116
117/*
118 * Handle device status changes.
119 */
120static int nr_device_event(struct notifier_block *this, unsigned long event, void *ptr)
121{
122 struct net_device *dev = (struct net_device *)ptr;
123
124 if (!net_eq(dev_net(dev), &init_net))
125 return NOTIFY_DONE;
126
127 if (event != NETDEV_DOWN)
128 return NOTIFY_DONE;
129
130 nr_kill_by_device(dev);
131 nr_rt_device_down(dev);
132
133 return NOTIFY_DONE;
134}
135
136/*
137 * Add a socket to the bound sockets list.
138 */
139static void nr_insert_socket(struct sock *sk)
140{
141 spin_lock_bh(&nr_list_lock);
142 sk_add_node(sk, &nr_list);
143 spin_unlock_bh(&nr_list_lock);
144}
145
146/*
147 * Find a socket that wants to accept the Connect Request we just
148 * received.
149 */
150static struct sock *nr_find_listener(ax25_address *addr)
151{
152 struct sock *s;
153 struct hlist_node *node;
154
155 spin_lock_bh(&nr_list_lock);
156 sk_for_each(s, node, &nr_list)
157 if (!ax25cmp(&nr_sk(s)->source_addr, addr) &&
158 s->sk_state == TCP_LISTEN) {
159 bh_lock_sock(s);
160 goto found;
161 }
162 s = NULL;
163found:
164 spin_unlock_bh(&nr_list_lock);
165 return s;
166}
167
168/*
169 * Find a connected NET/ROM socket given my circuit IDs.
170 */
171static struct sock *nr_find_socket(unsigned char index, unsigned char id)
172{
173 struct sock *s;
174 struct hlist_node *node;
175
176 spin_lock_bh(&nr_list_lock);
177 sk_for_each(s, node, &nr_list) {
178 struct nr_sock *nr = nr_sk(s);
179
180 if (nr->my_index == index && nr->my_id == id) {
181 bh_lock_sock(s);
182 goto found;
183 }
184 }
185 s = NULL;
186found:
187 spin_unlock_bh(&nr_list_lock);
188 return s;
189}
190
191/*
192 * Find a connected NET/ROM socket given their circuit IDs.
193 */
194static struct sock *nr_find_peer(unsigned char index, unsigned char id,
195 ax25_address *dest)
196{
197 struct sock *s;
198 struct hlist_node *node;
199
200 spin_lock_bh(&nr_list_lock);
201 sk_for_each(s, node, &nr_list) {
202 struct nr_sock *nr = nr_sk(s);
203
204 if (nr->your_index == index && nr->your_id == id &&
205 !ax25cmp(&nr->dest_addr, dest)) {
206 bh_lock_sock(s);
207 goto found;
208 }
209 }
210 s = NULL;
211found:
212 spin_unlock_bh(&nr_list_lock);
213 return s;
214}
215
216/*
217 * Find next free circuit ID.
218 */
219static unsigned short nr_find_next_circuit(void)
220{
221 unsigned short id = circuit;
222 unsigned char i, j;
223 struct sock *sk;
224
225 for (;;) {
226 i = id / 256;
227 j = id % 256;
228
229 if (i != 0 && j != 0) {
230 if ((sk=nr_find_socket(i, j)) == NULL)
231 break;
232 bh_unlock_sock(sk);
233 }
234
235 id++;
236 }
237
238 return id;
239}
240
241/*
242 * Deferred destroy.
243 */
244void nr_destroy_socket(struct sock *);
245
246/*
247 * Handler for deferred kills.
248 */
249static void nr_destroy_timer(unsigned long data)
250{
251 struct sock *sk=(struct sock *)data;
252 bh_lock_sock(sk);
253 sock_hold(sk);
254 nr_destroy_socket(sk);
255 bh_unlock_sock(sk);
256 sock_put(sk);
257}
258
259/*
260 * This is called from user mode and the timers. Thus it protects itself
261 * against interrupt users but doesn't worry about being called during
262 * work. Once it is removed from the queue no interrupt or bottom half
263 * will touch it and we are (fairly 8-) ) safe.
264 */
265void nr_destroy_socket(struct sock *sk)
266{
267 struct sk_buff *skb;
268
269 nr_remove_socket(sk);
270
271 nr_stop_heartbeat(sk);
272 nr_stop_t1timer(sk);
273 nr_stop_t2timer(sk);
274 nr_stop_t4timer(sk);
275 nr_stop_idletimer(sk);
276
277 nr_clear_queues(sk); /* Flush the queues */
278
279 while ((skb = skb_dequeue(&sk->sk_receive_queue)) != NULL) {
280 if (skb->sk != sk) { /* A pending connection */
281 /* Queue the unaccepted socket for death */
282 sock_set_flag(skb->sk, SOCK_DEAD);
283 nr_start_heartbeat(skb->sk);
284 nr_sk(skb->sk)->state = NR_STATE_0;
285 }
286
287 kfree_skb(skb);
288 }
289
290 if (sk_has_allocations(sk)) {
291 /* Defer: outstanding buffers */
292 sk->sk_timer.function = nr_destroy_timer;
293 sk->sk_timer.expires = jiffies + 2 * HZ;
294 add_timer(&sk->sk_timer);
295 } else
296 sock_put(sk);
297}
298
299/*
300 * Handling for system calls applied via the various interfaces to a
301 * NET/ROM socket object.
302 */
303
304static int nr_setsockopt(struct socket *sock, int level, int optname,
305 char __user *optval, unsigned int optlen)
306{
307 struct sock *sk = sock->sk;
308 struct nr_sock *nr = nr_sk(sk);
309 int opt;
310
311 if (level != SOL_NETROM)
312 return -ENOPROTOOPT;
313
314 if (optlen < sizeof(int))
315 return -EINVAL;
316
317 if (get_user(opt, (int __user *)optval))
318 return -EFAULT;
319
320 switch (optname) {
321 case NETROM_T1:
322 if (opt < 1)
323 return -EINVAL;
324 nr->t1 = opt * HZ;
325 return 0;
326
327 case NETROM_T2:
328 if (opt < 1)
329 return -EINVAL;
330 nr->t2 = opt * HZ;
331 return 0;
332
333 case NETROM_N2:
334 if (opt < 1 || opt > 31)
335 return -EINVAL;
336 nr->n2 = opt;
337 return 0;
338
339 case NETROM_T4:
340 if (opt < 1)
341 return -EINVAL;
342 nr->t4 = opt * HZ;
343 return 0;
344
345 case NETROM_IDLE:
346 if (opt < 0)
347 return -EINVAL;
348 nr->idle = opt * 60 * HZ;
349 return 0;
350
351 default:
352 return -ENOPROTOOPT;
353 }
354}
355
356static int nr_getsockopt(struct socket *sock, int level, int optname,
357 char __user *optval, int __user *optlen)
358{
359 struct sock *sk = sock->sk;
360 struct nr_sock *nr = nr_sk(sk);
361 int val = 0;
362 int len;
363
364 if (level != SOL_NETROM)
365 return -ENOPROTOOPT;
366
367 if (get_user(len, optlen))
368 return -EFAULT;
369
370 if (len < 0)
371 return -EINVAL;
372
373 switch (optname) {
374 case NETROM_T1:
375 val = nr->t1 / HZ;
376 break;
377
378 case NETROM_T2:
379 val = nr->t2 / HZ;
380 break;
381
382 case NETROM_N2:
383 val = nr->n2;
384 break;
385
386 case NETROM_T4:
387 val = nr->t4 / HZ;
388 break;
389
390 case NETROM_IDLE:
391 val = nr->idle / (60 * HZ);
392 break;
393
394 default:
395 return -ENOPROTOOPT;
396 }
397
398 len = min_t(unsigned int, len, sizeof(int));
399
400 if (put_user(len, optlen))
401 return -EFAULT;
402
403 return copy_to_user(optval, &val, len) ? -EFAULT : 0;
404}
405
406static int nr_listen(struct socket *sock, int backlog)
407{
408 struct sock *sk = sock->sk;
409
410 lock_sock(sk);
411 if (sk->sk_state != TCP_LISTEN) {
412 memset(&nr_sk(sk)->user_addr, 0, AX25_ADDR_LEN);
413 sk->sk_max_ack_backlog = backlog;
414 sk->sk_state = TCP_LISTEN;
415 release_sock(sk);
416 return 0;
417 }
418 release_sock(sk);
419
420 return -EOPNOTSUPP;
421}
422
423static struct proto nr_proto = {
424 .name = "NETROM",
425 .owner = THIS_MODULE,
426 .obj_size = sizeof(struct nr_sock),
427};
428
429static int nr_create(struct net *net, struct socket *sock, int protocol,
430 int kern)
431{
432 struct sock *sk;
433 struct nr_sock *nr;
434
435 if (!net_eq(net, &init_net))
436 return -EAFNOSUPPORT;
437
438 if (sock->type != SOCK_SEQPACKET || protocol != 0)
439 return -ESOCKTNOSUPPORT;
440
441 sk = sk_alloc(net, PF_NETROM, GFP_ATOMIC, &nr_proto);
442 if (sk == NULL)
443 return -ENOMEM;
444
445 nr = nr_sk(sk);
446
447 sock_init_data(sock, sk);
448
449 sock->ops = &nr_proto_ops;
450 sk->sk_protocol = protocol;
451
452 skb_queue_head_init(&nr->ack_queue);
453 skb_queue_head_init(&nr->reseq_queue);
454 skb_queue_head_init(&nr->frag_queue);
455
456 nr_init_timers(sk);
457
458 nr->t1 =
459 msecs_to_jiffies(sysctl_netrom_transport_timeout);
460 nr->t2 =
461 msecs_to_jiffies(sysctl_netrom_transport_acknowledge_delay);
462 nr->n2 =
463 msecs_to_jiffies(sysctl_netrom_transport_maximum_tries);
464 nr->t4 =
465 msecs_to_jiffies(sysctl_netrom_transport_busy_delay);
466 nr->idle =
467 msecs_to_jiffies(sysctl_netrom_transport_no_activity_timeout);
468 nr->window = sysctl_netrom_transport_requested_window_size;
469
470 nr->bpqext = 1;
471 nr->state = NR_STATE_0;
472
473 return 0;
474}
475
476static struct sock *nr_make_new(struct sock *osk)
477{
478 struct sock *sk;
479 struct nr_sock *nr, *onr;
480
481 if (osk->sk_type != SOCK_SEQPACKET)
482 return NULL;
483
484 sk = sk_alloc(sock_net(osk), PF_NETROM, GFP_ATOMIC, osk->sk_prot);
485 if (sk == NULL)
486 return NULL;
487
488 nr = nr_sk(sk);
489
490 sock_init_data(NULL, sk);
491
492 sk->sk_type = osk->sk_type;
493 sk->sk_priority = osk->sk_priority;
494 sk->sk_protocol = osk->sk_protocol;
495 sk->sk_rcvbuf = osk->sk_rcvbuf;
496 sk->sk_sndbuf = osk->sk_sndbuf;
497 sk->sk_state = TCP_ESTABLISHED;
498 sock_copy_flags(sk, osk);
499
500 skb_queue_head_init(&nr->ack_queue);
501 skb_queue_head_init(&nr->reseq_queue);
502 skb_queue_head_init(&nr->frag_queue);
503
504 nr_init_timers(sk);
505
506 onr = nr_sk(osk);
507
508 nr->t1 = onr->t1;
509 nr->t2 = onr->t2;
510 nr->n2 = onr->n2;
511 nr->t4 = onr->t4;
512 nr->idle = onr->idle;
513 nr->window = onr->window;
514
515 nr->device = onr->device;
516 nr->bpqext = onr->bpqext;
517
518 return sk;
519}
520
521static int nr_release(struct socket *sock)
522{
523 struct sock *sk = sock->sk;
524 struct nr_sock *nr;
525
526 if (sk == NULL) return 0;
527
528 sock_hold(sk);
529 sock_orphan(sk);
530 lock_sock(sk);
531 nr = nr_sk(sk);
532
533 switch (nr->state) {
534 case NR_STATE_0:
535 case NR_STATE_1:
536 case NR_STATE_2:
537 nr_disconnect(sk, 0);
538 nr_destroy_socket(sk);
539 break;
540
541 case NR_STATE_3:
542 nr_clear_queues(sk);
543 nr->n2count = 0;
544 nr_write_internal(sk, NR_DISCREQ);
545 nr_start_t1timer(sk);
546 nr_stop_t2timer(sk);
547 nr_stop_t4timer(sk);
548 nr_stop_idletimer(sk);
549 nr->state = NR_STATE_2;
550 sk->sk_state = TCP_CLOSE;
551 sk->sk_shutdown |= SEND_SHUTDOWN;
552 sk->sk_state_change(sk);
553 sock_set_flag(sk, SOCK_DESTROY);
554 break;
555
556 default:
557 break;
558 }
559
560 sock->sk = NULL;
561 release_sock(sk);
562 sock_put(sk);
563
564 return 0;
565}
566
567static int nr_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
568{
569 struct sock *sk = sock->sk;
570 struct nr_sock *nr = nr_sk(sk);
571 struct full_sockaddr_ax25 *addr = (struct full_sockaddr_ax25 *)uaddr;
572 struct net_device *dev;
573 ax25_uid_assoc *user;
574 ax25_address *source;
575
576 lock_sock(sk);
577 if (!sock_flag(sk, SOCK_ZAPPED)) {
578 release_sock(sk);
579 return -EINVAL;
580 }
581 if (addr_len < sizeof(struct sockaddr_ax25) || addr_len > sizeof(struct full_sockaddr_ax25)) {
582 release_sock(sk);
583 return -EINVAL;
584 }
585 if (addr_len < (addr->fsa_ax25.sax25_ndigis * sizeof(ax25_address) + sizeof(struct sockaddr_ax25))) {
586 release_sock(sk);
587 return -EINVAL;
588 }
589 if (addr->fsa_ax25.sax25_family != AF_NETROM) {
590 release_sock(sk);
591 return -EINVAL;
592 }
593 if ((dev = nr_dev_get(&addr->fsa_ax25.sax25_call)) == NULL) {
594 release_sock(sk);
595 return -EADDRNOTAVAIL;
596 }
597
598 /*
599 * Only the super user can set an arbitrary user callsign.
600 */
601 if (addr->fsa_ax25.sax25_ndigis == 1) {
602 if (!capable(CAP_NET_BIND_SERVICE)) {
603 dev_put(dev);
604 release_sock(sk);
605 return -EACCES;
606 }
607 nr->user_addr = addr->fsa_digipeater[0];
608 nr->source_addr = addr->fsa_ax25.sax25_call;
609 } else {
610 source = &addr->fsa_ax25.sax25_call;
611
612 user = ax25_findbyuid(current_euid());
613 if (user) {
614 nr->user_addr = user->call;
615 ax25_uid_put(user);
616 } else {
617 if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE)) {
618 release_sock(sk);
619 dev_put(dev);
620 return -EPERM;
621 }
622 nr->user_addr = *source;
623 }
624
625 nr->source_addr = *source;
626 }
627
628 nr->device = dev;
629 nr_insert_socket(sk);
630
631 sock_reset_flag(sk, SOCK_ZAPPED);
632 dev_put(dev);
633 release_sock(sk);
634
635 return 0;
636}
637
638static int nr_connect(struct socket *sock, struct sockaddr *uaddr,
639 int addr_len, int flags)
640{
641 struct sock *sk = sock->sk;
642 struct nr_sock *nr = nr_sk(sk);
643 struct sockaddr_ax25 *addr = (struct sockaddr_ax25 *)uaddr;
644 ax25_address *source = NULL;
645 ax25_uid_assoc *user;
646 struct net_device *dev;
647 int err = 0;
648
649 lock_sock(sk);
650 if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
651 sock->state = SS_CONNECTED;
652 goto out_release; /* Connect completed during a ERESTARTSYS event */
653 }
654
655 if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
656 sock->state = SS_UNCONNECTED;
657 err = -ECONNREFUSED;
658 goto out_release;
659 }
660
661 if (sk->sk_state == TCP_ESTABLISHED) {
662 err = -EISCONN; /* No reconnect on a seqpacket socket */
663 goto out_release;
664 }
665
666 sk->sk_state = TCP_CLOSE;
667 sock->state = SS_UNCONNECTED;
668
669 if (addr_len != sizeof(struct sockaddr_ax25) && addr_len != sizeof(struct full_sockaddr_ax25)) {
670 err = -EINVAL;
671 goto out_release;
672 }
673 if (addr->sax25_family != AF_NETROM) {
674 err = -EINVAL;
675 goto out_release;
676 }
677 if (sock_flag(sk, SOCK_ZAPPED)) { /* Must bind first - autobinding in this may or may not work */
678 sock_reset_flag(sk, SOCK_ZAPPED);
679
680 if ((dev = nr_dev_first()) == NULL) {
681 err = -ENETUNREACH;
682 goto out_release;
683 }
684 source = (ax25_address *)dev->dev_addr;
685
686 user = ax25_findbyuid(current_euid());
687 if (user) {
688 nr->user_addr = user->call;
689 ax25_uid_put(user);
690 } else {
691 if (ax25_uid_policy && !capable(CAP_NET_ADMIN)) {
692 dev_put(dev);
693 err = -EPERM;
694 goto out_release;
695 }
696 nr->user_addr = *source;
697 }
698
699 nr->source_addr = *source;
700 nr->device = dev;
701
702 dev_put(dev);
703 nr_insert_socket(sk); /* Finish the bind */
704 }
705
706 nr->dest_addr = addr->sax25_call;
707
708 release_sock(sk);
709 circuit = nr_find_next_circuit();
710 lock_sock(sk);
711
712 nr->my_index = circuit / 256;
713 nr->my_id = circuit % 256;
714
715 circuit++;
716
717 /* Move to connecting socket, start sending Connect Requests */
718 sock->state = SS_CONNECTING;
719 sk->sk_state = TCP_SYN_SENT;
720
721 nr_establish_data_link(sk);
722
723 nr->state = NR_STATE_1;
724
725 nr_start_heartbeat(sk);
726
727 /* Now the loop */
728 if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
729 err = -EINPROGRESS;
730 goto out_release;
731 }
732
733 /*
734 * A Connect Ack with Choke or timeout or failed routing will go to
735 * closed.
736 */
737 if (sk->sk_state == TCP_SYN_SENT) {
738 DEFINE_WAIT(wait);
739
740 for (;;) {
741 prepare_to_wait(sk_sleep(sk), &wait,
742 TASK_INTERRUPTIBLE);
743 if (sk->sk_state != TCP_SYN_SENT)
744 break;
745 if (!signal_pending(current)) {
746 release_sock(sk);
747 schedule();
748 lock_sock(sk);
749 continue;
750 }
751 err = -ERESTARTSYS;
752 break;
753 }
754 finish_wait(sk_sleep(sk), &wait);
755 if (err)
756 goto out_release;
757 }
758
759 if (sk->sk_state != TCP_ESTABLISHED) {
760 sock->state = SS_UNCONNECTED;
761 err = sock_error(sk); /* Always set at this point */
762 goto out_release;
763 }
764
765 sock->state = SS_CONNECTED;
766
767out_release:
768 release_sock(sk);
769
770 return err;
771}
772
773static int nr_accept(struct socket *sock, struct socket *newsock, int flags)
774{
775 struct sk_buff *skb;
776 struct sock *newsk;
777 DEFINE_WAIT(wait);
778 struct sock *sk;
779 int err = 0;
780
781 if ((sk = sock->sk) == NULL)
782 return -EINVAL;
783
784 lock_sock(sk);
785 if (sk->sk_type != SOCK_SEQPACKET) {
786 err = -EOPNOTSUPP;
787 goto out_release;
788 }
789
790 if (sk->sk_state != TCP_LISTEN) {
791 err = -EINVAL;
792 goto out_release;
793 }
794
795 /*
796 * The write queue this time is holding sockets ready to use
797 * hooked into the SABM we saved
798 */
799 for (;;) {
800 prepare_to_wait(sk_sleep(sk), &wait, TASK_INTERRUPTIBLE);
801 skb = skb_dequeue(&sk->sk_receive_queue);
802 if (skb)
803 break;
804
805 if (flags & O_NONBLOCK) {
806 err = -EWOULDBLOCK;
807 break;
808 }
809 if (!signal_pending(current)) {
810 release_sock(sk);
811 schedule();
812 lock_sock(sk);
813 continue;
814 }
815 err = -ERESTARTSYS;
816 break;
817 }
818 finish_wait(sk_sleep(sk), &wait);
819 if (err)
820 goto out_release;
821
822 newsk = skb->sk;
823 sock_graft(newsk, newsock);
824
825 /* Now attach up the new socket */
826 kfree_skb(skb);
827 sk_acceptq_removed(sk);
828
829out_release:
830 release_sock(sk);
831
832 return err;
833}
834
835static int nr_getname(struct socket *sock, struct sockaddr *uaddr,
836 int *uaddr_len, int peer)
837{
838 struct full_sockaddr_ax25 *sax = (struct full_sockaddr_ax25 *)uaddr;
839 struct sock *sk = sock->sk;
840 struct nr_sock *nr = nr_sk(sk);
841
842 lock_sock(sk);
843 if (peer != 0) {
844 if (sk->sk_state != TCP_ESTABLISHED) {
845 release_sock(sk);
846 return -ENOTCONN;
847 }
848 sax->fsa_ax25.sax25_family = AF_NETROM;
849 sax->fsa_ax25.sax25_ndigis = 1;
850 sax->fsa_ax25.sax25_call = nr->user_addr;
851 memset(sax->fsa_digipeater, 0, sizeof(sax->fsa_digipeater));
852 sax->fsa_digipeater[0] = nr->dest_addr;
853 *uaddr_len = sizeof(struct full_sockaddr_ax25);
854 } else {
855 sax->fsa_ax25.sax25_family = AF_NETROM;
856 sax->fsa_ax25.sax25_ndigis = 0;
857 sax->fsa_ax25.sax25_call = nr->source_addr;
858 *uaddr_len = sizeof(struct sockaddr_ax25);
859 }
860 release_sock(sk);
861
862 return 0;
863}
864
865int nr_rx_frame(struct sk_buff *skb, struct net_device *dev)
866{
867 struct sock *sk;
868 struct sock *make;
869 struct nr_sock *nr_make;
870 ax25_address *src, *dest, *user;
871 unsigned short circuit_index, circuit_id;
872 unsigned short peer_circuit_index, peer_circuit_id;
873 unsigned short frametype, flags, window, timeout;
874 int ret;
875
876 skb->sk = NULL; /* Initially we don't know who it's for */
877
878 /*
879 * skb->data points to the netrom frame start
880 */
881
882 src = (ax25_address *)(skb->data + 0);
883 dest = (ax25_address *)(skb->data + 7);
884
885 circuit_index = skb->data[15];
886 circuit_id = skb->data[16];
887 peer_circuit_index = skb->data[17];
888 peer_circuit_id = skb->data[18];
889 frametype = skb->data[19] & 0x0F;
890 flags = skb->data[19] & 0xF0;
891
892 /*
893 * Check for an incoming IP over NET/ROM frame.
894 */
895 if (frametype == NR_PROTOEXT &&
896 circuit_index == NR_PROTO_IP && circuit_id == NR_PROTO_IP) {
897 skb_pull(skb, NR_NETWORK_LEN + NR_TRANSPORT_LEN);
898 skb_reset_transport_header(skb);
899
900 return nr_rx_ip(skb, dev);
901 }
902
903 /*
904 * Find an existing socket connection, based on circuit ID, if it's
905 * a Connect Request base it on their circuit ID.
906 *
907 * Circuit ID 0/0 is not valid but it could still be a "reset" for a
908 * circuit that no longer exists at the other end ...
909 */
910
911 sk = NULL;
912
913 if (circuit_index == 0 && circuit_id == 0) {
914 if (frametype == NR_CONNACK && flags == NR_CHOKE_FLAG)
915 sk = nr_find_peer(peer_circuit_index, peer_circuit_id, src);
916 } else {
917 if (frametype == NR_CONNREQ)
918 sk = nr_find_peer(circuit_index, circuit_id, src);
919 else
920 sk = nr_find_socket(circuit_index, circuit_id);
921 }
922
923 if (sk != NULL) {
924 skb_reset_transport_header(skb);
925
926 if (frametype == NR_CONNACK && skb->len == 22)
927 nr_sk(sk)->bpqext = 1;
928 else
929 nr_sk(sk)->bpqext = 0;
930
931 ret = nr_process_rx_frame(sk, skb);
932 bh_unlock_sock(sk);
933 return ret;
934 }
935
936 /*
937 * Now it should be a CONNREQ.
938 */
939 if (frametype != NR_CONNREQ) {
940 /*
941 * Here it would be nice to be able to send a reset but
942 * NET/ROM doesn't have one. We've tried to extend the protocol
943 * by sending NR_CONNACK | NR_CHOKE_FLAGS replies but that
944 * apparently kills BPQ boxes... :-(
945 * So now we try to follow the established behaviour of
946 * G8PZT's Xrouter which is sending packets with command type 7
947 * as an extension of the protocol.
948 */
949 if (sysctl_netrom_reset_circuit &&
950 (frametype != NR_RESET || flags != 0))
951 nr_transmit_reset(skb, 1);
952
953 return 0;
954 }
955
956 sk = nr_find_listener(dest);
957
958 user = (ax25_address *)(skb->data + 21);
959
960 if (sk == NULL || sk_acceptq_is_full(sk) ||
961 (make = nr_make_new(sk)) == NULL) {
962 nr_transmit_refusal(skb, 0);
963 if (sk)
964 bh_unlock_sock(sk);
965 return 0;
966 }
967
968 window = skb->data[20];
969
970 skb->sk = make;
971 make->sk_state = TCP_ESTABLISHED;
972
973 /* Fill in his circuit details */
974 nr_make = nr_sk(make);
975 nr_make->source_addr = *dest;
976 nr_make->dest_addr = *src;
977 nr_make->user_addr = *user;
978
979 nr_make->your_index = circuit_index;
980 nr_make->your_id = circuit_id;
981
982 bh_unlock_sock(sk);
983 circuit = nr_find_next_circuit();
984 bh_lock_sock(sk);
985
986 nr_make->my_index = circuit / 256;
987 nr_make->my_id = circuit % 256;
988
989 circuit++;
990
991 /* Window negotiation */
992 if (window < nr_make->window)
993 nr_make->window = window;
994
995 /* L4 timeout negotiation */
996 if (skb->len == 37) {
997 timeout = skb->data[36] * 256 + skb->data[35];
998 if (timeout * HZ < nr_make->t1)
999 nr_make->t1 = timeout * HZ;
1000 nr_make->bpqext = 1;
1001 } else {
1002 nr_make->bpqext = 0;
1003 }
1004
1005 nr_write_internal(make, NR_CONNACK);
1006
1007 nr_make->condition = 0x00;
1008 nr_make->vs = 0;
1009 nr_make->va = 0;
1010 nr_make->vr = 0;
1011 nr_make->vl = 0;
1012 nr_make->state = NR_STATE_3;
1013 sk_acceptq_added(sk);
1014 skb_queue_head(&sk->sk_receive_queue, skb);
1015
1016 if (!sock_flag(sk, SOCK_DEAD))
1017 sk->sk_data_ready(sk, skb->len);
1018
1019 bh_unlock_sock(sk);
1020
1021 nr_insert_socket(make);
1022
1023 nr_start_heartbeat(make);
1024 nr_start_idletimer(make);
1025
1026 return 1;
1027}
1028
1029static int nr_sendmsg(struct kiocb *iocb, struct socket *sock,
1030 struct msghdr *msg, size_t len)
1031{
1032 struct sock *sk = sock->sk;
1033 struct nr_sock *nr = nr_sk(sk);
1034 struct sockaddr_ax25 *usax = (struct sockaddr_ax25 *)msg->msg_name;
1035 int err;
1036 struct sockaddr_ax25 sax;
1037 struct sk_buff *skb;
1038 unsigned char *asmptr;
1039 int size;
1040
1041 if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1042 return -EINVAL;
1043
1044 lock_sock(sk);
1045 if (sock_flag(sk, SOCK_ZAPPED)) {
1046 err = -EADDRNOTAVAIL;
1047 goto out;
1048 }
1049
1050 if (sk->sk_shutdown & SEND_SHUTDOWN) {
1051 send_sig(SIGPIPE, current, 0);
1052 err = -EPIPE;
1053 goto out;
1054 }
1055
1056 if (nr->device == NULL) {
1057 err = -ENETUNREACH;
1058 goto out;
1059 }
1060
1061 if (usax) {
1062 if (msg->msg_namelen < sizeof(sax)) {
1063 err = -EINVAL;
1064 goto out;
1065 }
1066 sax = *usax;
1067 if (ax25cmp(&nr->dest_addr, &sax.sax25_call) != 0) {
1068 err = -EISCONN;
1069 goto out;
1070 }
1071 if (sax.sax25_family != AF_NETROM) {
1072 err = -EINVAL;
1073 goto out;
1074 }
1075 } else {
1076 if (sk->sk_state != TCP_ESTABLISHED) {
1077 err = -ENOTCONN;
1078 goto out;
1079 }
1080 sax.sax25_family = AF_NETROM;
1081 sax.sax25_call = nr->dest_addr;
1082 }
1083
1084 /* Build a packet - the conventional user limit is 236 bytes. We can
1085 do ludicrously large NetROM frames but must not overflow */
1086 if (len > 65536) {
1087 err = -EMSGSIZE;
1088 goto out;
1089 }
1090
1091 size = len + NR_NETWORK_LEN + NR_TRANSPORT_LEN;
1092
1093 if ((skb = sock_alloc_send_skb(sk, size, msg->msg_flags & MSG_DONTWAIT, &err)) == NULL)
1094 goto out;
1095
1096 skb_reserve(skb, size - len);
1097 skb_reset_transport_header(skb);
1098
1099 /*
1100 * Push down the NET/ROM header
1101 */
1102
1103 asmptr = skb_push(skb, NR_TRANSPORT_LEN);
1104
1105 /* Build a NET/ROM Transport header */
1106
1107 *asmptr++ = nr->your_index;
1108 *asmptr++ = nr->your_id;
1109 *asmptr++ = 0; /* To be filled in later */
1110 *asmptr++ = 0; /* Ditto */
1111 *asmptr++ = NR_INFO;
1112
1113 /*
1114 * Put the data on the end
1115 */
1116 skb_put(skb, len);
1117
1118 /* User data follows immediately after the NET/ROM transport header */
1119 if (memcpy_fromiovec(skb_transport_header(skb), msg->msg_iov, len)) {
1120 kfree_skb(skb);
1121 err = -EFAULT;
1122 goto out;
1123 }
1124
1125 if (sk->sk_state != TCP_ESTABLISHED) {
1126 kfree_skb(skb);
1127 err = -ENOTCONN;
1128 goto out;
1129 }
1130
1131 nr_output(sk, skb); /* Shove it onto the queue */
1132
1133 err = len;
1134out:
1135 release_sock(sk);
1136 return err;
1137}
1138
1139static int nr_recvmsg(struct kiocb *iocb, struct socket *sock,
1140 struct msghdr *msg, size_t size, int flags)
1141{
1142 struct sock *sk = sock->sk;
1143 struct sockaddr_ax25 *sax = (struct sockaddr_ax25 *)msg->msg_name;
1144 size_t copied;
1145 struct sk_buff *skb;
1146 int er;
1147
1148 /*
1149 * This works for seqpacket too. The receiver has ordered the queue for
1150 * us! We do one quick check first though
1151 */
1152
1153 lock_sock(sk);
1154 if (sk->sk_state != TCP_ESTABLISHED) {
1155 release_sock(sk);
1156 return -ENOTCONN;
1157 }
1158
1159 /* Now we can treat all alike */
1160 if ((skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT, flags & MSG_DONTWAIT, &er)) == NULL) {
1161 release_sock(sk);
1162 return er;
1163 }
1164
1165 skb_reset_transport_header(skb);
1166 copied = skb->len;
1167
1168 if (copied > size) {
1169 copied = size;
1170 msg->msg_flags |= MSG_TRUNC;
1171 }
1172
1173 skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
1174
1175 if (sax != NULL) {
1176 sax->sax25_family = AF_NETROM;
1177 skb_copy_from_linear_data_offset(skb, 7, sax->sax25_call.ax25_call,
1178 AX25_ADDR_LEN);
1179 }
1180
1181 msg->msg_namelen = sizeof(*sax);
1182
1183 skb_free_datagram(sk, skb);
1184
1185 release_sock(sk);
1186 return copied;
1187}
1188
1189
1190static int nr_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1191{
1192 struct sock *sk = sock->sk;
1193 void __user *argp = (void __user *)arg;
1194 int ret;
1195
1196 switch (cmd) {
1197 case TIOCOUTQ: {
1198 long amount;
1199
1200 lock_sock(sk);
1201 amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1202 if (amount < 0)
1203 amount = 0;
1204 release_sock(sk);
1205 return put_user(amount, (int __user *)argp);
1206 }
1207
1208 case TIOCINQ: {
1209 struct sk_buff *skb;
1210 long amount = 0L;
1211
1212 lock_sock(sk);
1213 /* These two are safe on a single CPU system as only user tasks fiddle here */
1214 if ((skb = skb_peek(&sk->sk_receive_queue)) != NULL)
1215 amount = skb->len;
1216 release_sock(sk);
1217 return put_user(amount, (int __user *)argp);
1218 }
1219
1220 case SIOCGSTAMP:
1221 lock_sock(sk);
1222 ret = sock_get_timestamp(sk, argp);
1223 release_sock(sk);
1224 return ret;
1225
1226 case SIOCGSTAMPNS:
1227 lock_sock(sk);
1228 ret = sock_get_timestampns(sk, argp);
1229 release_sock(sk);
1230 return ret;
1231
1232 case SIOCGIFADDR:
1233 case SIOCSIFADDR:
1234 case SIOCGIFDSTADDR:
1235 case SIOCSIFDSTADDR:
1236 case SIOCGIFBRDADDR:
1237 case SIOCSIFBRDADDR:
1238 case SIOCGIFNETMASK:
1239 case SIOCSIFNETMASK:
1240 case SIOCGIFMETRIC:
1241 case SIOCSIFMETRIC:
1242 return -EINVAL;
1243
1244 case SIOCADDRT:
1245 case SIOCDELRT:
1246 case SIOCNRDECOBS:
1247 if (!capable(CAP_NET_ADMIN)) return -EPERM;
1248 return nr_rt_ioctl(cmd, argp);
1249
1250 default:
1251 return -ENOIOCTLCMD;
1252 }
1253
1254 return 0;
1255}
1256
1257#ifdef CONFIG_PROC_FS
1258
1259static void *nr_info_start(struct seq_file *seq, loff_t *pos)
1260{
1261 spin_lock_bh(&nr_list_lock);
1262 return seq_hlist_start_head(&nr_list, *pos);
1263}
1264
1265static void *nr_info_next(struct seq_file *seq, void *v, loff_t *pos)
1266{
1267 return seq_hlist_next(v, &nr_list, pos);
1268}
1269
1270static void nr_info_stop(struct seq_file *seq, void *v)
1271{
1272 spin_unlock_bh(&nr_list_lock);
1273}
1274
1275static int nr_info_show(struct seq_file *seq, void *v)
1276{
1277 struct sock *s = sk_entry(v);
1278 struct net_device *dev;
1279 struct nr_sock *nr;
1280 const char *devname;
1281 char buf[11];
1282
1283 if (v == SEQ_START_TOKEN)
1284 seq_puts(seq,
1285"user_addr dest_node src_node dev my your st vs vr va t1 t2 t4 idle n2 wnd Snd-Q Rcv-Q inode\n");
1286
1287 else {
1288
1289 bh_lock_sock(s);
1290 nr = nr_sk(s);
1291
1292 if ((dev = nr->device) == NULL)
1293 devname = "???";
1294 else
1295 devname = dev->name;
1296
1297 seq_printf(seq, "%-9s ", ax2asc(buf, &nr->user_addr));
1298 seq_printf(seq, "%-9s ", ax2asc(buf, &nr->dest_addr));
1299 seq_printf(seq,
1300"%-9s %-3s %02X/%02X %02X/%02X %2d %3d %3d %3d %3lu/%03lu %2lu/%02lu %3lu/%03lu %3lu/%03lu %2d/%02d %3d %5d %5d %ld\n",
1301 ax2asc(buf, &nr->source_addr),
1302 devname,
1303 nr->my_index,
1304 nr->my_id,
1305 nr->your_index,
1306 nr->your_id,
1307 nr->state,
1308 nr->vs,
1309 nr->vr,
1310 nr->va,
1311 ax25_display_timer(&nr->t1timer) / HZ,
1312 nr->t1 / HZ,
1313 ax25_display_timer(&nr->t2timer) / HZ,
1314 nr->t2 / HZ,
1315 ax25_display_timer(&nr->t4timer) / HZ,
1316 nr->t4 / HZ,
1317 ax25_display_timer(&nr->idletimer) / (60 * HZ),
1318 nr->idle / (60 * HZ),
1319 nr->n2count,
1320 nr->n2,
1321 nr->window,
1322 sk_wmem_alloc_get(s),
1323 sk_rmem_alloc_get(s),
1324 s->sk_socket ? SOCK_INODE(s->sk_socket)->i_ino : 0L);
1325
1326 bh_unlock_sock(s);
1327 }
1328 return 0;
1329}
1330
1331static const struct seq_operations nr_info_seqops = {
1332 .start = nr_info_start,
1333 .next = nr_info_next,
1334 .stop = nr_info_stop,
1335 .show = nr_info_show,
1336};
1337
1338static int nr_info_open(struct inode *inode, struct file *file)
1339{
1340 return seq_open(file, &nr_info_seqops);
1341}
1342
1343static const struct file_operations nr_info_fops = {
1344 .owner = THIS_MODULE,
1345 .open = nr_info_open,
1346 .read = seq_read,
1347 .llseek = seq_lseek,
1348 .release = seq_release,
1349};
1350#endif /* CONFIG_PROC_FS */
1351
1352static const struct net_proto_family nr_family_ops = {
1353 .family = PF_NETROM,
1354 .create = nr_create,
1355 .owner = THIS_MODULE,
1356};
1357
1358static const struct proto_ops nr_proto_ops = {
1359 .family = PF_NETROM,
1360 .owner = THIS_MODULE,
1361 .release = nr_release,
1362 .bind = nr_bind,
1363 .connect = nr_connect,
1364 .socketpair = sock_no_socketpair,
1365 .accept = nr_accept,
1366 .getname = nr_getname,
1367 .poll = datagram_poll,
1368 .ioctl = nr_ioctl,
1369 .listen = nr_listen,
1370 .shutdown = sock_no_shutdown,
1371 .setsockopt = nr_setsockopt,
1372 .getsockopt = nr_getsockopt,
1373 .sendmsg = nr_sendmsg,
1374 .recvmsg = nr_recvmsg,
1375 .mmap = sock_no_mmap,
1376 .sendpage = sock_no_sendpage,
1377};
1378
1379static struct notifier_block nr_dev_notifier = {
1380 .notifier_call = nr_device_event,
1381};
1382
1383static struct net_device **dev_nr;
1384
1385static struct ax25_protocol nr_pid = {
1386 .pid = AX25_P_NETROM,
1387 .func = nr_route_frame
1388};
1389
1390static struct ax25_linkfail nr_linkfail_notifier = {
1391 .func = nr_link_failed,
1392};
1393
1394static int __init nr_proto_init(void)
1395{
1396 int i;
1397 int rc = proto_register(&nr_proto, 0);
1398
1399 if (rc != 0)
1400 goto out;
1401
1402 if (nr_ndevs > 0x7fffffff/sizeof(struct net_device *)) {
1403 printk(KERN_ERR "NET/ROM: nr_proto_init - nr_ndevs parameter to large\n");
1404 return -1;
1405 }
1406
1407 dev_nr = kzalloc(nr_ndevs * sizeof(struct net_device *), GFP_KERNEL);
1408 if (dev_nr == NULL) {
1409 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device array\n");
1410 return -1;
1411 }
1412
1413 for (i = 0; i < nr_ndevs; i++) {
1414 char name[IFNAMSIZ];
1415 struct net_device *dev;
1416
1417 sprintf(name, "nr%d", i);
1418 dev = alloc_netdev(0, name, nr_setup);
1419 if (!dev) {
1420 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to allocate device structure\n");
1421 goto fail;
1422 }
1423
1424 dev->base_addr = i;
1425 if (register_netdev(dev)) {
1426 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register network device\n");
1427 free_netdev(dev);
1428 goto fail;
1429 }
1430 nr_set_lockdep_key(dev);
1431 dev_nr[i] = dev;
1432 }
1433
1434 if (sock_register(&nr_family_ops)) {
1435 printk(KERN_ERR "NET/ROM: nr_proto_init - unable to register socket family\n");
1436 goto fail;
1437 }
1438
1439 register_netdevice_notifier(&nr_dev_notifier);
1440
1441 ax25_register_pid(&nr_pid);
1442 ax25_linkfail_register(&nr_linkfail_notifier);
1443
1444#ifdef CONFIG_SYSCTL
1445 nr_register_sysctl();
1446#endif
1447
1448 nr_loopback_init();
1449
1450 proc_net_fops_create(&init_net, "nr", S_IRUGO, &nr_info_fops);
1451 proc_net_fops_create(&init_net, "nr_neigh", S_IRUGO, &nr_neigh_fops);
1452 proc_net_fops_create(&init_net, "nr_nodes", S_IRUGO, &nr_nodes_fops);
1453out:
1454 return rc;
1455fail:
1456 while (--i >= 0) {
1457 unregister_netdev(dev_nr[i]);
1458 free_netdev(dev_nr[i]);
1459 }
1460 kfree(dev_nr);
1461 proto_unregister(&nr_proto);
1462 rc = -1;
1463 goto out;
1464}
1465
1466module_init(nr_proto_init);
1467
1468module_param(nr_ndevs, int, 0);
1469MODULE_PARM_DESC(nr_ndevs, "number of NET/ROM devices");
1470
1471MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1472MODULE_DESCRIPTION("The amateur radio NET/ROM network and transport layer protocol");
1473MODULE_LICENSE("GPL");
1474MODULE_ALIAS_NETPROTO(PF_NETROM);
1475
1476static void __exit nr_exit(void)
1477{
1478 int i;
1479
1480 proc_net_remove(&init_net, "nr");
1481 proc_net_remove(&init_net, "nr_neigh");
1482 proc_net_remove(&init_net, "nr_nodes");
1483 nr_loopback_clear();
1484
1485 nr_rt_free();
1486
1487#ifdef CONFIG_SYSCTL
1488 nr_unregister_sysctl();
1489#endif
1490
1491 ax25_linkfail_release(&nr_linkfail_notifier);
1492 ax25_protocol_release(AX25_P_NETROM);
1493
1494 unregister_netdevice_notifier(&nr_dev_notifier);
1495
1496 sock_unregister(PF_NETROM);
1497
1498 for (i = 0; i < nr_ndevs; i++) {
1499 struct net_device *dev = dev_nr[i];
1500 if (dev) {
1501 unregister_netdev(dev);
1502 free_netdev(dev);
1503 }
1504 }
1505
1506 kfree(dev_nr);
1507 proto_unregister(&nr_proto);
1508}
1509module_exit(nr_exit);