1	// SPDX-License-Identifier: GPL-2.0-or-later
2	/*
3	*
4	* Copyright (C) Jonathan Naylor G4KLX (g4klx@g4klx.demon.co.uk)
5	* Copyright (C) Alan Cox GW4PTS (alan@lxorguk.ukuu.org.uk)
6	* Copyright (C) Terry Dawson VK2KTJ (terry@animats.net)
7	* Copyright (C) Tomi Manninen OH2BNS (oh2bns@sral.fi)
8	*/
9
10	#include <linux/capability.h>
11	#include <linux/module.h>
12	#include <linux/moduleparam.h>
13	#include <linux/init.h>
14	#include <linux/errno.h>
15	#include <linux/types.h>
16	#include <linux/socket.h>
17	#include <linux/in.h>
18	#include <linux/slab.h>
19	#include <linux/kernel.h>
20	#include <linux/sched/signal.h>
21	#include <linux/spinlock.h>
22	#include <linux/timer.h>
23	#include <linux/string.h>
24	#include <linux/sockios.h>
25	#include <linux/net.h>
26	#include <linux/stat.h>
27	#include <net/net_namespace.h>
28	#include <net/ax25.h>
29	#include <linux/inet.h>
30	#include <linux/netdevice.h>
31	#include <linux/if_arp.h>
32	#include <linux/skbuff.h>
33	#include <net/sock.h>
34	#include <linux/uaccess.h>
35	#include <linux/fcntl.h>
36	#include <linux/termios.h>
37	#include <linux/mm.h>
38	#include <linux/interrupt.h>
39	#include <linux/notifier.h>
40	#include <net/rose.h>
41	#include <linux/proc_fs.h>
42	#include <linux/seq_file.h>
43	#include <net/tcp_states.h>
44	#include <net/ip.h>
45	#include <net/arp.h>
46
47	static int rose_ndevs = 10;
48
49	int sysctl_rose_restart_request_timeout = ROSE_DEFAULT_T0;
50	int sysctl_rose_call_request_timeout = ROSE_DEFAULT_T1;
51	int sysctl_rose_reset_request_timeout = ROSE_DEFAULT_T2;
52	int sysctl_rose_clear_request_timeout = ROSE_DEFAULT_T3;
53	int sysctl_rose_no_activity_timeout = ROSE_DEFAULT_IDLE;
54	int sysctl_rose_ack_hold_back_timeout = ROSE_DEFAULT_HB;
55	int sysctl_rose_routing_control = ROSE_DEFAULT_ROUTING;
56	int sysctl_rose_link_fail_timeout = ROSE_DEFAULT_FAIL_TIMEOUT;
57	int sysctl_rose_maximum_vcs = ROSE_DEFAULT_MAXVC;
58	int sysctl_rose_window_size = ROSE_DEFAULT_WINDOW_SIZE;
59
60	static HLIST_HEAD(rose_list);
61	static DEFINE_SPINLOCK(rose_list_lock);
62
63	static const struct proto_ops rose_proto_ops;
64
65	ax25_address rose_callsign;
66
67	/*
68	* ROSE network devices are virtual network devices encapsulating ROSE
69	* frames into AX.25 which will be sent through an AX.25 device, so form a
70	* special "super class" of normal net devices; split their locks off into a
71	* separate class since they always nest.
72	*/
73	static struct lock_class_key rose_netdev_xmit_lock_key;
74	static struct lock_class_key rose_netdev_addr_lock_key;
75
76	static void rose_set_lockdep_one(struct net_device *dev,
77	struct netdev_queue *txq,
78	void *_unused)
79	{
80	lockdep_set_class(&txq->_xmit_lock, &rose_netdev_xmit_lock_key);
81	}
82
83	static void rose_set_lockdep_key(struct net_device *dev)
84	{
85	lockdep_set_class(&dev->addr_list_lock, &rose_netdev_addr_lock_key);
86	netdev_for_each_tx_queue(dev, f: rose_set_lockdep_one, NULL);
87	}
88
89	/*
90	* Convert a ROSE address into text.
91	*/
92	char *rose2asc(char *buf, const rose_address *addr)
93	{
94	if (addr->rose_addr[0] == 0x00 && addr->rose_addr[1] == 0x00 &&
95	addr->rose_addr[2] == 0x00 && addr->rose_addr[3] == 0x00 &&
96	addr->rose_addr[4] == 0x00) {
97	strcpy(p: buf, q: "*");
98	} else {
99	sprintf(buf, fmt: "%02X%02X%02X%02X%02X", addr->rose_addr[0] & 0xFF,
100	addr->rose_addr[1] & 0xFF,
101	addr->rose_addr[2] & 0xFF,
102	addr->rose_addr[3] & 0xFF,
103	addr->rose_addr[4] & 0xFF);
104	}
105
106	return buf;
107	}
108
109	/*
110	* Compare two ROSE addresses, 0 == equal.
111	*/
112	int rosecmp(const rose_address *addr1, const rose_address *addr2)
113	{
114	int i;
115
116	for (i = 0; i < 5; i++)
117	if (addr1->rose_addr[i] != addr2->rose_addr[i])
118	return 1;
119
120	return 0;
121	}
122
123	/*
124	* Compare two ROSE addresses for only mask digits, 0 == equal.
125	*/
126	int rosecmpm(const rose_address *addr1, const rose_address *addr2,
127	unsigned short mask)
128	{
129	unsigned int i, j;
130
131	if (mask > 10)
132	return 1;
133
134	for (i = 0; i < mask; i++) {
135	j = i / 2;
136
137	if ((i % 2) != 0) {
138	if ((addr1->rose_addr[j] & 0x0F) != (addr2->rose_addr[j] & 0x0F))
139	return 1;
140	} else {
141	if ((addr1->rose_addr[j] & 0xF0) != (addr2->rose_addr[j] & 0xF0))
142	return 1;
143	}
144	}
145
146	return 0;
147	}
148
149	/*
150	* Socket removal during an interrupt is now safe.
151	*/
152	static void rose_remove_socket(struct sock *sk)
153	{
154	spin_lock_bh(lock: &rose_list_lock);
155	sk_del_node_init(sk);
156	spin_unlock_bh(lock: &rose_list_lock);
157	}
158
159	/*
160	* Kill all bound sockets on a broken link layer connection to a
161	* particular neighbour.
162	*/
163	void rose_kill_by_neigh(struct rose_neigh *neigh)
164	{
165	struct sock *s;
166
167	spin_lock_bh(lock: &rose_list_lock);
168	sk_for_each(s, &rose_list) {
169	struct rose_sock *rose = rose_sk(s);
170
171	if (rose->neighbour == neigh) {
172	rose_disconnect(s, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
173	rose->neighbour->use--;
174	rose->neighbour = NULL;
175	}
176	}
177	spin_unlock_bh(lock: &rose_list_lock);
178	}
179
180	/*
181	* Kill all bound sockets on a dropped device.
182	*/
183	static void rose_kill_by_device(struct net_device *dev)
184	{
185	struct sock *sk, *array[16];
186	struct rose_sock *rose;
187	bool rescan;
188	int i, cnt;
189
190	start:
191	rescan = false;
192	cnt = 0;
193	spin_lock_bh(lock: &rose_list_lock);
194	sk_for_each(sk, &rose_list) {
195	rose = rose_sk(sk);
196	if (rose->device == dev) {
197	if (cnt == ARRAY_SIZE(array)) {
198	rescan = true;
199	break;
200	}
201	sock_hold(sk);
202	array[cnt++] = sk;
203	}
204	}
205	spin_unlock_bh(lock: &rose_list_lock);
206
207	for (i = 0; i < cnt; i++) {
208	sk = array[cnt];
209	rose = rose_sk(sk);
210	lock_sock(sk);
211	spin_lock_bh(lock: &rose_list_lock);
212	if (rose->device == dev) {
213	rose_disconnect(sk, ENETUNREACH, ROSE_OUT_OF_ORDER, 0);
214	if (rose->neighbour)
215	rose->neighbour->use--;
216	netdev_put(dev: rose->device, tracker: &rose->dev_tracker);
217	rose->device = NULL;
218	}
219	spin_unlock_bh(lock: &rose_list_lock);
220	release_sock(sk);
221	sock_put(sk);
222	cond_resched();
223	}
224	if (rescan)
225	goto start;
226	}
227
228	/*
229	* Handle device status changes.
230	*/
231	static int rose_device_event(struct notifier_block *this,
232	unsigned long event, void *ptr)
233	{
234	struct net_device *dev = netdev_notifier_info_to_dev(info: ptr);
235
236	if (!net_eq(net1: dev_net(dev), net2: &init_net))
237	return NOTIFY_DONE;
238
239	if (event != NETDEV_DOWN)
240	return NOTIFY_DONE;
241
242	switch (dev->type) {
243	case ARPHRD_ROSE:
244	rose_kill_by_device(dev);
245	break;
246	case ARPHRD_AX25:
247	rose_link_device_down(dev);
248	rose_rt_device_down(dev);
249	break;
250	}
251
252	return NOTIFY_DONE;
253	}
254
255	/*
256	* Add a socket to the bound sockets list.
257	*/
258	static void rose_insert_socket(struct sock *sk)
259	{
260
261	spin_lock_bh(lock: &rose_list_lock);
262	sk_add_node(sk, list: &rose_list);
263	spin_unlock_bh(lock: &rose_list_lock);
264	}
265
266	/*
267	* Find a socket that wants to accept the Call Request we just
268	* received.
269	*/
270	static struct sock *rose_find_listener(rose_address *addr, ax25_address *call)
271	{
272	struct sock *s;
273
274	spin_lock_bh(lock: &rose_list_lock);
275	sk_for_each(s, &rose_list) {
276	struct rose_sock *rose = rose_sk(s);
277
278	if (!rosecmp(addr1: &rose->source_addr, addr2: addr) &&
279	!ax25cmp(&rose->source_call, call) &&
280	!rose->source_ndigis && s->sk_state == TCP_LISTEN)
281	goto found;
282	}
283
284	sk_for_each(s, &rose_list) {
285	struct rose_sock *rose = rose_sk(s);
286
287	if (!rosecmp(addr1: &rose->source_addr, addr2: addr) &&
288	!ax25cmp(&rose->source_call, &null_ax25_address) &&
289	s->sk_state == TCP_LISTEN)
290	goto found;
291	}
292	s = NULL;
293	found:
294	spin_unlock_bh(lock: &rose_list_lock);
295	return s;
296	}
297
298	/*
299	* Find a connected ROSE socket given my LCI and device.
300	*/
301	struct sock *rose_find_socket(unsigned int lci, struct rose_neigh *neigh)
302	{
303	struct sock *s;
304
305	spin_lock_bh(lock: &rose_list_lock);
306	sk_for_each(s, &rose_list) {
307	struct rose_sock *rose = rose_sk(s);
308
309	if (rose->lci == lci && rose->neighbour == neigh)
310	goto found;
311	}
312	s = NULL;
313	found:
314	spin_unlock_bh(lock: &rose_list_lock);
315	return s;
316	}
317
318	/*
319	* Find a unique LCI for a given device.
320	*/
321	unsigned int rose_new_lci(struct rose_neigh *neigh)
322	{
323	int lci;
324
325	if (neigh->dce_mode) {
326	for (lci = 1; lci <= sysctl_rose_maximum_vcs; lci++)
327	if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
328	return lci;
329	} else {
330	for (lci = sysctl_rose_maximum_vcs; lci > 0; lci--)
331	if (rose_find_socket(lci, neigh) == NULL && rose_route_free_lci(lci, neigh) == NULL)
332	return lci;
333	}
334
335	return 0;
336	}
337
338	/*
339	* Deferred destroy.
340	*/
341	void rose_destroy_socket(struct sock *);
342
343	/*
344	* Handler for deferred kills.
345	*/
346	static void rose_destroy_timer(struct timer_list *t)
347	{
348	struct sock *sk = from_timer(sk, t, sk_timer);
349
350	rose_destroy_socket(sk);
351	}
352
353	/*
354	* This is called from user mode and the timers. Thus it protects itself
355	* against interrupt users but doesn't worry about being called during
356	* work. Once it is removed from the queue no interrupt or bottom half
357	* will touch it and we are (fairly 8-) ) safe.
358	*/
359	void rose_destroy_socket(struct sock *sk)
360	{
361	struct sk_buff *skb;
362
363	rose_remove_socket(sk);
364	rose_stop_heartbeat(sk);
365	rose_stop_idletimer(sk);
366	rose_stop_timer(sk);
367
368	rose_clear_queues(sk); /* Flush the queues */
369
370	while ((skb = skb_dequeue(list: &sk->sk_receive_queue)) != NULL) {
371	if (skb->sk != sk) { /* A pending connection */
372	/* Queue the unaccepted socket for death */
373	sock_set_flag(sk: skb->sk, flag: SOCK_DEAD);
374	rose_start_heartbeat(skb->sk);
375	rose_sk(skb->sk)->state = ROSE_STATE_0;
376	}
377
378	kfree_skb(skb);
379	}
380
381	if (sk_has_allocations(sk)) {
382	/* Defer: outstanding buffers */
383	timer_setup(&sk->sk_timer, rose_destroy_timer, 0);
384	sk->sk_timer.expires = jiffies + 10 * HZ;
385	add_timer(timer: &sk->sk_timer);
386	} else
387	sock_put(sk);
388	}
389
390	/*
391	* Handling for system calls applied via the various interfaces to a
392	* ROSE socket object.
393	*/
394
395	static int rose_setsockopt(struct socket *sock, int level, int optname,
396	sockptr_t optval, unsigned int optlen)
397	{
398	struct sock *sk = sock->sk;
399	struct rose_sock *rose = rose_sk(sk);
400	int opt;
401
402	if (level != SOL_ROSE)
403	return -ENOPROTOOPT;
404
405	if (optlen < sizeof(int))
406	return -EINVAL;
407
408	if (copy_from_sockptr(dst: &opt, src: optval, size: sizeof(int)))
409	return -EFAULT;
410
411	switch (optname) {
412	case ROSE_DEFER:
413	rose->defer = opt ? 1 : 0;
414	return 0;
415
416	case ROSE_T1:
417	if (opt < 1)
418	return -EINVAL;
419	rose->t1 = opt * HZ;
420	return 0;
421
422	case ROSE_T2:
423	if (opt < 1)
424	return -EINVAL;
425	rose->t2 = opt * HZ;
426	return 0;
427
428	case ROSE_T3:
429	if (opt < 1)
430	return -EINVAL;
431	rose->t3 = opt * HZ;
432	return 0;
433
434	case ROSE_HOLDBACK:
435	if (opt < 1)
436	return -EINVAL;
437	rose->hb = opt * HZ;
438	return 0;
439
440	case ROSE_IDLE:
441	if (opt < 0)
442	return -EINVAL;
443	rose->idle = opt * 60 * HZ;
444	return 0;
445
446	case ROSE_QBITINCL:
447	rose->qbitincl = opt ? 1 : 0;
448	return 0;
449
450	default:
451	return -ENOPROTOOPT;
452	}
453	}
454
455	static int rose_getsockopt(struct socket *sock, int level, int optname,
456	char __user *optval, int __user *optlen)
457	{
458	struct sock *sk = sock->sk;
459	struct rose_sock *rose = rose_sk(sk);
460	int val = 0;
461	int len;
462
463	if (level != SOL_ROSE)
464	return -ENOPROTOOPT;
465
466	if (get_user(len, optlen))
467	return -EFAULT;
468
469	if (len < 0)
470	return -EINVAL;
471
472	switch (optname) {
473	case ROSE_DEFER:
474	val = rose->defer;
475	break;
476
477	case ROSE_T1:
478	val = rose->t1 / HZ;
479	break;
480
481	case ROSE_T2:
482	val = rose->t2 / HZ;
483	break;
484
485	case ROSE_T3:
486	val = rose->t3 / HZ;
487	break;
488
489	case ROSE_HOLDBACK:
490	val = rose->hb / HZ;
491	break;
492
493	case ROSE_IDLE:
494	val = rose->idle / (60 * HZ);
495	break;
496
497	case ROSE_QBITINCL:
498	val = rose->qbitincl;
499	break;
500
501	default:
502	return -ENOPROTOOPT;
503	}
504
505	len = min_t(unsigned int, len, sizeof(int));
506
507	if (put_user(len, optlen))
508	return -EFAULT;
509
510	return copy_to_user(to: optval, from: &val, n: len) ? -EFAULT : 0;
511	}
512
513	static int rose_listen(struct socket *sock, int backlog)
514	{
515	struct sock *sk = sock->sk;
516
517	lock_sock(sk);
518	if (sock->state != SS_UNCONNECTED) {
519	release_sock(sk);
520	return -EINVAL;
521	}
522
523	if (sk->sk_state != TCP_LISTEN) {
524	struct rose_sock *rose = rose_sk(sk);
525
526	rose->dest_ndigis = 0;
527	memset(&rose->dest_addr, 0, ROSE_ADDR_LEN);
528	memset(&rose->dest_call, 0, AX25_ADDR_LEN);
529	memset(rose->dest_digis, 0, AX25_ADDR_LEN * ROSE_MAX_DIGIS);
530	sk->sk_max_ack_backlog = backlog;
531	sk->sk_state = TCP_LISTEN;
532	release_sock(sk);
533	return 0;
534	}
535	release_sock(sk);
536
537	return -EOPNOTSUPP;
538	}
539
540	static struct proto rose_proto = {
541	.name = "ROSE",
542	.owner = THIS_MODULE,
543	.obj_size = sizeof(struct rose_sock),
544	};
545
546	static int rose_create(struct net *net, struct socket *sock, int protocol,
547	int kern)
548	{
549	struct sock *sk;
550	struct rose_sock *rose;
551
552	if (!net_eq(net1: net, net2: &init_net))
553	return -EAFNOSUPPORT;
554
555	if (sock->type != SOCK_SEQPACKET || protocol != 0)
556	return -ESOCKTNOSUPPORT;
557
558	sk = sk_alloc(net, PF_ROSE, GFP_ATOMIC, prot: &rose_proto, kern);
559	if (sk == NULL)
560	return -ENOMEM;
561
562	rose = rose_sk(sk);
563
564	sock_init_data(sock, sk);
565
566	skb_queue_head_init(list: &rose->ack_queue);
567	#ifdef M_BIT
568	skb_queue_head_init(&rose->frag_queue);
569	rose->fraglen = 0;
570	#endif
571
572	sock->ops = &rose_proto_ops;
573	sk->sk_protocol = protocol;
574
575	timer_setup(&rose->timer, NULL, 0);
576	timer_setup(&rose->idletimer, NULL, 0);
577
578	rose->t1 = msecs_to_jiffies(m: sysctl_rose_call_request_timeout);
579	rose->t2 = msecs_to_jiffies(m: sysctl_rose_reset_request_timeout);
580	rose->t3 = msecs_to_jiffies(m: sysctl_rose_clear_request_timeout);
581	rose->hb = msecs_to_jiffies(m: sysctl_rose_ack_hold_back_timeout);
582	rose->idle = msecs_to_jiffies(m: sysctl_rose_no_activity_timeout);
583
584	rose->state = ROSE_STATE_0;
585
586	return 0;
587	}
588
589	static struct sock *rose_make_new(struct sock *osk)
590	{
591	struct sock *sk;
592	struct rose_sock *rose, *orose;
593
594	if (osk->sk_type != SOCK_SEQPACKET)
595	return NULL;
596
597	sk = sk_alloc(net: sock_net(sk: osk), PF_ROSE, GFP_ATOMIC, prot: &rose_proto, kern: 0);
598	if (sk == NULL)
599	return NULL;
600
601	rose = rose_sk(sk);
602
603	sock_init_data(NULL, sk);
604
605	skb_queue_head_init(list: &rose->ack_queue);
606	#ifdef M_BIT
607	skb_queue_head_init(&rose->frag_queue);
608	rose->fraglen = 0;
609	#endif
610
611	sk->sk_type = osk->sk_type;
612	sk->sk_priority = READ_ONCE(osk->sk_priority);
613	sk->sk_protocol = osk->sk_protocol;
614	sk->sk_rcvbuf = osk->sk_rcvbuf;
615	sk->sk_sndbuf = osk->sk_sndbuf;
616	sk->sk_state = TCP_ESTABLISHED;
617	sock_copy_flags(nsk: sk, osk);
618
619	timer_setup(&rose->timer, NULL, 0);
620	timer_setup(&rose->idletimer, NULL, 0);
621
622	orose = rose_sk(osk);
623	rose->t1 = orose->t1;
624	rose->t2 = orose->t2;
625	rose->t3 = orose->t3;
626	rose->hb = orose->hb;
627	rose->idle = orose->idle;
628	rose->defer = orose->defer;
629	rose->device = orose->device;
630	if (rose->device)
631	netdev_hold(dev: rose->device, tracker: &rose->dev_tracker, GFP_ATOMIC);
632	rose->qbitincl = orose->qbitincl;
633
634	return sk;
635	}
636
637	static int rose_release(struct socket *sock)
638	{
639	struct sock *sk = sock->sk;
640	struct rose_sock *rose;
641
642	if (sk == NULL) return 0;
643
644	sock_hold(sk);
645	sock_orphan(sk);
646	lock_sock(sk);
647	rose = rose_sk(sk);
648
649	switch (rose->state) {
650	case ROSE_STATE_0:
651	release_sock(sk);
652	rose_disconnect(sk, 0, -1, -1);
653	lock_sock(sk);
654	rose_destroy_socket(sk);
655	break;
656
657	case ROSE_STATE_2:
658	rose->neighbour->use--;
659	release_sock(sk);
660	rose_disconnect(sk, 0, -1, -1);
661	lock_sock(sk);
662	rose_destroy_socket(sk);
663	break;
664
665	case ROSE_STATE_1:
666	case ROSE_STATE_3:
667	case ROSE_STATE_4:
668	case ROSE_STATE_5:
669	rose_clear_queues(sk);
670	rose_stop_idletimer(sk);
671	rose_write_internal(sk, ROSE_CLEAR_REQUEST);
672	rose_start_t3timer(sk);
673	rose->state = ROSE_STATE_2;
674	sk->sk_state = TCP_CLOSE;
675	sk->sk_shutdown |= SEND_SHUTDOWN;
676	sk->sk_state_change(sk);
677	sock_set_flag(sk, flag: SOCK_DEAD);
678	sock_set_flag(sk, flag: SOCK_DESTROY);
679	break;
680
681	default:
682	break;
683	}
684
685	spin_lock_bh(lock: &rose_list_lock);
686	netdev_put(dev: rose->device, tracker: &rose->dev_tracker);
687	rose->device = NULL;
688	spin_unlock_bh(lock: &rose_list_lock);
689	sock->sk = NULL;
690	release_sock(sk);
691	sock_put(sk);
692
693	return 0;
694	}
695
696	static int rose_bind(struct socket *sock, struct sockaddr *uaddr, int addr_len)
697	{
698	struct sock *sk = sock->sk;
699	struct rose_sock *rose = rose_sk(sk);
700	struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
701	struct net_device *dev;
702	ax25_address *source;
703	ax25_uid_assoc *user;
704	int n;
705
706	if (!sock_flag(sk, flag: SOCK_ZAPPED))
707	return -EINVAL;
708
709	if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
710	return -EINVAL;
711
712	if (addr->srose_family != AF_ROSE)
713	return -EINVAL;
714
715	if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
716	return -EINVAL;
717
718	if ((unsigned int) addr->srose_ndigis > ROSE_MAX_DIGIS)
719	return -EINVAL;
720
721	if ((dev = rose_dev_get(&addr->srose_addr)) == NULL)
722	return -EADDRNOTAVAIL;
723
724	source = &addr->srose_call;
725
726	user = ax25_findbyuid(current_euid());
727	if (user) {
728	rose->source_call = user->call;
729	ax25_uid_put(assoc: user);
730	} else {
731	if (ax25_uid_policy && !capable(CAP_NET_BIND_SERVICE)) {
732	dev_put(dev);
733	return -EACCES;
734	}
735	rose->source_call = *source;
736	}
737
738	rose->source_addr = addr->srose_addr;
739	rose->device = dev;
740	netdev_tracker_alloc(dev: rose->device, tracker: &rose->dev_tracker, GFP_KERNEL);
741	rose->source_ndigis = addr->srose_ndigis;
742
743	if (addr_len == sizeof(struct full_sockaddr_rose)) {
744	struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
745	for (n = 0 ; n < addr->srose_ndigis ; n++)
746	rose->source_digis[n] = full_addr->srose_digis[n];
747	} else {
748	if (rose->source_ndigis == 1) {
749	rose->source_digis[0] = addr->srose_digi;
750	}
751	}
752
753	rose_insert_socket(sk);
754
755	sock_reset_flag(sk, flag: SOCK_ZAPPED);
756
757	return 0;
758	}
759
760	static int rose_connect(struct socket *sock, struct sockaddr *uaddr, int addr_len, int flags)
761	{
762	struct sock *sk = sock->sk;
763	struct rose_sock *rose = rose_sk(sk);
764	struct sockaddr_rose *addr = (struct sockaddr_rose *)uaddr;
765	unsigned char cause, diagnostic;
766	ax25_uid_assoc *user;
767	int n, err = 0;
768
769	if (addr_len != sizeof(struct sockaddr_rose) && addr_len != sizeof(struct full_sockaddr_rose))
770	return -EINVAL;
771
772	if (addr->srose_family != AF_ROSE)
773	return -EINVAL;
774
775	if (addr_len == sizeof(struct sockaddr_rose) && addr->srose_ndigis > 1)
776	return -EINVAL;
777
778	if ((unsigned int) addr->srose_ndigis > ROSE_MAX_DIGIS)
779	return -EINVAL;
780
781	/* Source + Destination digis should not exceed ROSE_MAX_DIGIS */
782	if ((rose->source_ndigis + addr->srose_ndigis) > ROSE_MAX_DIGIS)
783	return -EINVAL;
784
785	lock_sock(sk);
786
787	if (sk->sk_state == TCP_ESTABLISHED && sock->state == SS_CONNECTING) {
788	/* Connect completed during a ERESTARTSYS event */
789	sock->state = SS_CONNECTED;
790	goto out_release;
791	}
792
793	if (sk->sk_state == TCP_CLOSE && sock->state == SS_CONNECTING) {
794	sock->state = SS_UNCONNECTED;
795	err = -ECONNREFUSED;
796	goto out_release;
797	}
798
799	if (sk->sk_state == TCP_ESTABLISHED) {
800	/* No reconnect on a seqpacket socket */
801	err = -EISCONN;
802	goto out_release;
803	}
804
805	sk->sk_state = TCP_CLOSE;
806	sock->state = SS_UNCONNECTED;
807
808	rose->neighbour = rose_get_neigh(&addr->srose_addr, &cause,
809	&diagnostic, 0);
810	if (!rose->neighbour) {
811	err = -ENETUNREACH;
812	goto out_release;
813	}
814
815	rose->lci = rose_new_lci(neigh: rose->neighbour);
816	if (!rose->lci) {
817	err = -ENETUNREACH;
818	goto out_release;
819	}
820
821	if (sock_flag(sk, flag: SOCK_ZAPPED)) { /* Must bind first - autobinding in this may or may not work */
822	struct net_device *dev;
823
824	sock_reset_flag(sk, flag: SOCK_ZAPPED);
825
826	dev = rose_dev_first();
827	if (!dev) {
828	err = -ENETUNREACH;
829	goto out_release;
830	}
831
832	user = ax25_findbyuid(current_euid());
833	if (!user) {
834	err = -EINVAL;
835	dev_put(dev);
836	goto out_release;
837	}
838
839	memcpy(&rose->source_addr, dev->dev_addr, ROSE_ADDR_LEN);
840	rose->source_call = user->call;
841	rose->device = dev;
842	netdev_tracker_alloc(dev: rose->device, tracker: &rose->dev_tracker,
843	GFP_KERNEL);
844	ax25_uid_put(assoc: user);
845
846	rose_insert_socket(sk); /* Finish the bind */
847	}
848	rose->dest_addr = addr->srose_addr;
849	rose->dest_call = addr->srose_call;
850	rose->rand = ((long)rose & 0xFFFF) + rose->lci;
851	rose->dest_ndigis = addr->srose_ndigis;
852
853	if (addr_len == sizeof(struct full_sockaddr_rose)) {
854	struct full_sockaddr_rose *full_addr = (struct full_sockaddr_rose *)uaddr;
855	for (n = 0 ; n < addr->srose_ndigis ; n++)
856	rose->dest_digis[n] = full_addr->srose_digis[n];
857	} else {
858	if (rose->dest_ndigis == 1) {
859	rose->dest_digis[0] = addr->srose_digi;
860	}
861	}
862
863	/* Move to connecting socket, start sending Connect Requests */
864	sock->state = SS_CONNECTING;
865	sk->sk_state = TCP_SYN_SENT;
866
867	rose->state = ROSE_STATE_1;
868
869	rose->neighbour->use++;
870
871	rose_write_internal(sk, ROSE_CALL_REQUEST);
872	rose_start_heartbeat(sk);
873	rose_start_t1timer(sk);
874
875	/* Now the loop */
876	if (sk->sk_state != TCP_ESTABLISHED && (flags & O_NONBLOCK)) {
877	err = -EINPROGRESS;
878	goto out_release;
879	}
880
881	/*
882	* A Connect Ack with Choke or timeout or failed routing will go to
883	* closed.
884	*/
885	if (sk->sk_state == TCP_SYN_SENT) {
886	DEFINE_WAIT(wait);
887
888	for (;;) {
889	prepare_to_wait(wq_head: sk_sleep(sk), wq_entry: &wait,
890	TASK_INTERRUPTIBLE);
891	if (sk->sk_state != TCP_SYN_SENT)
892	break;
893	if (!signal_pending(current)) {
894	release_sock(sk);
895	schedule();
896	lock_sock(sk);
897	continue;
898	}
899	err = -ERESTARTSYS;
900	break;
901	}
902	finish_wait(wq_head: sk_sleep(sk), wq_entry: &wait);
903
904	if (err)
905	goto out_release;
906	}
907
908	if (sk->sk_state != TCP_ESTABLISHED) {
909	sock->state = SS_UNCONNECTED;
910	err = sock_error(sk); /* Always set at this point */
911	goto out_release;
912	}
913
914	sock->state = SS_CONNECTED;
915
916	out_release:
917	release_sock(sk);
918
919	return err;
920	}
921
922	static int rose_accept(struct socket *sock, struct socket *newsock, int flags,
923	bool kern)
924	{
925	struct sk_buff *skb;
926	struct sock *newsk;
927	DEFINE_WAIT(wait);
928	struct sock *sk;
929	int err = 0;
930
931	if ((sk = sock->sk) == NULL)
932	return -EINVAL;
933
934	lock_sock(sk);
935	if (sk->sk_type != SOCK_SEQPACKET) {
936	err = -EOPNOTSUPP;
937	goto out_release;
938	}
939
940	if (sk->sk_state != TCP_LISTEN) {
941	err = -EINVAL;
942	goto out_release;
943	}
944
945	/*
946	* The write queue this time is holding sockets ready to use
947	* hooked into the SABM we saved
948	*/
949	for (;;) {
950	prepare_to_wait(wq_head: sk_sleep(sk), wq_entry: &wait, TASK_INTERRUPTIBLE);
951
952	skb = skb_dequeue(list: &sk->sk_receive_queue);
953	if (skb)
954	break;
955
956	if (flags & O_NONBLOCK) {
957	err = -EWOULDBLOCK;
958	break;
959	}
960	if (!signal_pending(current)) {
961	release_sock(sk);
962	schedule();
963	lock_sock(sk);
964	continue;
965	}
966	err = -ERESTARTSYS;
967	break;
968	}
969	finish_wait(wq_head: sk_sleep(sk), wq_entry: &wait);
970	if (err)
971	goto out_release;
972
973	newsk = skb->sk;
974	sock_graft(sk: newsk, parent: newsock);
975
976	/* Now attach up the new socket */
977	skb->sk = NULL;
978	kfree_skb(skb);
979	sk_acceptq_removed(sk);
980
981	out_release:
982	release_sock(sk);
983
984	return err;
985	}
986
987	static int rose_getname(struct socket *sock, struct sockaddr *uaddr,
988	int peer)
989	{
990	struct full_sockaddr_rose *srose = (struct full_sockaddr_rose *)uaddr;
991	struct sock *sk = sock->sk;
992	struct rose_sock *rose = rose_sk(sk);
993	int n;
994
995	memset(srose, 0, sizeof(*srose));
996	if (peer != 0) {
997	if (sk->sk_state != TCP_ESTABLISHED)
998	return -ENOTCONN;
999	srose->srose_family = AF_ROSE;
1000	srose->srose_addr = rose->dest_addr;
1001	srose->srose_call = rose->dest_call;
1002	srose->srose_ndigis = rose->dest_ndigis;
1003	for (n = 0; n < rose->dest_ndigis; n++)
1004	srose->srose_digis[n] = rose->dest_digis[n];
1005	} else {
1006	srose->srose_family = AF_ROSE;
1007	srose->srose_addr = rose->source_addr;
1008	srose->srose_call = rose->source_call;
1009	srose->srose_ndigis = rose->source_ndigis;
1010	for (n = 0; n < rose->source_ndigis; n++)
1011	srose->srose_digis[n] = rose->source_digis[n];
1012	}
1013
1014	return sizeof(struct full_sockaddr_rose);
1015	}
1016
1017	int rose_rx_call_request(struct sk_buff *skb, struct net_device *dev, struct rose_neigh *neigh, unsigned int lci)
1018	{
1019	struct sock *sk;
1020	struct sock *make;
1021	struct rose_sock *make_rose;
1022	struct rose_facilities_struct facilities;
1023	int n;
1024
1025	skb->sk = NULL; /* Initially we don't know who it's for */
1026
1027	/*
1028	* skb->data points to the rose frame start
1029	*/
1030	memset(&facilities, 0x00, sizeof(struct rose_facilities_struct));
1031
1032	if (!rose_parse_facilities(skb->data + ROSE_CALL_REQ_FACILITIES_OFF,
1033	skb->len - ROSE_CALL_REQ_FACILITIES_OFF,
1034	&facilities)) {
1035	rose_transmit_clear_request(neigh, lci, ROSE_INVALID_FACILITY, 76);
1036	return 0;
1037	}
1038
1039	sk = rose_find_listener(addr: &facilities.source_addr, call: &facilities.source_call);
1040
1041	/*
1042	* We can't accept the Call Request.
1043	*/
1044	if (sk == NULL || sk_acceptq_is_full(sk) ||
1045	(make = rose_make_new(osk: sk)) == NULL) {
1046	rose_transmit_clear_request(neigh, lci, ROSE_NETWORK_CONGESTION, 120);
1047	return 0;
1048	}
1049
1050	skb->sk = make;
1051	make->sk_state = TCP_ESTABLISHED;
1052	make_rose = rose_sk(make);
1053
1054	make_rose->lci = lci;
1055	make_rose->dest_addr = facilities.dest_addr;
1056	make_rose->dest_call = facilities.dest_call;
1057	make_rose->dest_ndigis = facilities.dest_ndigis;
1058	for (n = 0 ; n < facilities.dest_ndigis ; n++)
1059	make_rose->dest_digis[n] = facilities.dest_digis[n];
1060	make_rose->source_addr = facilities.source_addr;
1061	make_rose->source_call = facilities.source_call;
1062	make_rose->source_ndigis = facilities.source_ndigis;
1063	for (n = 0 ; n < facilities.source_ndigis ; n++)
1064	make_rose->source_digis[n] = facilities.source_digis[n];
1065	make_rose->neighbour = neigh;
1066	make_rose->device = dev;
1067	/* Caller got a reference for us. */
1068	netdev_tracker_alloc(dev: make_rose->device, tracker: &make_rose->dev_tracker,
1069	GFP_ATOMIC);
1070	make_rose->facilities = facilities;
1071
1072	make_rose->neighbour->use++;
1073
1074	if (rose_sk(sk)->defer) {
1075	make_rose->state = ROSE_STATE_5;
1076	} else {
1077	rose_write_internal(make, ROSE_CALL_ACCEPTED);
1078	make_rose->state = ROSE_STATE_3;
1079	rose_start_idletimer(make);
1080	}
1081
1082	make_rose->condition = 0x00;
1083	make_rose->vs = 0;
1084	make_rose->va = 0;
1085	make_rose->vr = 0;
1086	make_rose->vl = 0;
1087	sk_acceptq_added(sk);
1088
1089	rose_insert_socket(sk: make);
1090
1091	skb_queue_head(list: &sk->sk_receive_queue, newsk: skb);
1092
1093	rose_start_heartbeat(make);
1094
1095	if (!sock_flag(sk, flag: SOCK_DEAD))
1096	sk->sk_data_ready(sk);
1097
1098	return 1;
1099	}
1100
1101	static int rose_sendmsg(struct socket *sock, struct msghdr *msg, size_t len)
1102	{
1103	struct sock *sk = sock->sk;
1104	struct rose_sock *rose = rose_sk(sk);
1105	DECLARE_SOCKADDR(struct sockaddr_rose *, usrose, msg->msg_name);
1106	int err;
1107	struct full_sockaddr_rose srose;
1108	struct sk_buff *skb;
1109	unsigned char *asmptr;
1110	int n, size, qbit = 0;
1111
1112	if (msg->msg_flags & ~(MSG_DONTWAIT|MSG_EOR|MSG_CMSG_COMPAT))
1113	return -EINVAL;
1114
1115	if (sock_flag(sk, flag: SOCK_ZAPPED))
1116	return -EADDRNOTAVAIL;
1117
1118	if (sk->sk_shutdown & SEND_SHUTDOWN) {
1119	send_sig(SIGPIPE, current, 0);
1120	return -EPIPE;
1121	}
1122
1123	if (rose->neighbour == NULL || rose->device == NULL)
1124	return -ENETUNREACH;
1125
1126	if (usrose != NULL) {
1127	if (msg->msg_namelen != sizeof(struct sockaddr_rose) && msg->msg_namelen != sizeof(struct full_sockaddr_rose))
1128	return -EINVAL;
1129	memset(&srose, 0, sizeof(struct full_sockaddr_rose));
1130	memcpy(&srose, usrose, msg->msg_namelen);
1131	if (rosecmp(addr1: &rose->dest_addr, addr2: &srose.srose_addr) != 0 ||
1132	ax25cmp(&rose->dest_call, &srose.srose_call) != 0)
1133	return -EISCONN;
1134	if (srose.srose_ndigis != rose->dest_ndigis)
1135	return -EISCONN;
1136	if (srose.srose_ndigis == rose->dest_ndigis) {
1137	for (n = 0 ; n < srose.srose_ndigis ; n++)
1138	if (ax25cmp(&rose->dest_digis[n],
1139	&srose.srose_digis[n]))
1140	return -EISCONN;
1141	}
1142	if (srose.srose_family != AF_ROSE)
1143	return -EINVAL;
1144	} else {
1145	if (sk->sk_state != TCP_ESTABLISHED)
1146	return -ENOTCONN;
1147
1148	srose.srose_family = AF_ROSE;
1149	srose.srose_addr = rose->dest_addr;
1150	srose.srose_call = rose->dest_call;
1151	srose.srose_ndigis = rose->dest_ndigis;
1152	for (n = 0 ; n < rose->dest_ndigis ; n++)
1153	srose.srose_digis[n] = rose->dest_digis[n];
1154	}
1155
1156	/* Build a packet */
1157	/* Sanity check the packet size */
1158	if (len > 65535)
1159	return -EMSGSIZE;
1160
1161	size = len + AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN;
1162
1163	if ((skb = sock_alloc_send_skb(sk, size, noblock: msg->msg_flags & MSG_DONTWAIT, errcode: &err)) == NULL)
1164	return err;
1165
1166	skb_reserve(skb, AX25_BPQ_HEADER_LEN + AX25_MAX_HEADER_LEN + ROSE_MIN_LEN);
1167
1168	/*
1169	* Put the data on the end
1170	*/
1171
1172	skb_reset_transport_header(skb);
1173	skb_put(skb, len);
1174
1175	err = memcpy_from_msg(data: skb_transport_header(skb), msg, len);
1176	if (err) {
1177	kfree_skb(skb);
1178	return err;
1179	}
1180
1181	/*
1182	* If the Q BIT Include socket option is in force, the first
1183	* byte of the user data is the logical value of the Q Bit.
1184	*/
1185	if (rose->qbitincl) {
1186	qbit = skb->data[0];
1187	skb_pull(skb, len: 1);
1188	}
1189
1190	/*
1191	* Push down the ROSE header
1192	*/
1193	asmptr = skb_push(skb, ROSE_MIN_LEN);
1194
1195	/* Build a ROSE Network header */
1196	asmptr[0] = ((rose->lci >> 8) & 0x0F) | ROSE_GFI;
1197	asmptr[1] = (rose->lci >> 0) & 0xFF;
1198	asmptr[2] = ROSE_DATA;
1199
1200	if (qbit)
1201	asmptr[0] |= ROSE_Q_BIT;
1202
1203	if (sk->sk_state != TCP_ESTABLISHED) {
1204	kfree_skb(skb);
1205	return -ENOTCONN;
1206	}
1207
1208	#ifdef M_BIT
1209	#define ROSE_PACLEN (256-ROSE_MIN_LEN)
1210	if (skb->len - ROSE_MIN_LEN > ROSE_PACLEN) {
1211	unsigned char header[ROSE_MIN_LEN];
1212	struct sk_buff *skbn;
1213	int frontlen;
1214	int lg;
1215
1216	/* Save a copy of the Header */
1217	skb_copy_from_linear_data(skb, header, ROSE_MIN_LEN);
1218	skb_pull(skb, ROSE_MIN_LEN);
1219
1220	frontlen = skb_headroom(skb);
1221
1222	while (skb->len > 0) {
1223	if ((skbn = sock_alloc_send_skb(sk, frontlen + ROSE_PACLEN, 0, &err)) == NULL) {
1224	kfree_skb(skb);
1225	return err;
1226	}
1227
1228	skbn->sk = sk;
1229	skbn->free = 1;
1230	skbn->arp = 1;
1231
1232	skb_reserve(skbn, frontlen);
1233
1234	lg = (ROSE_PACLEN > skb->len) ? skb->len : ROSE_PACLEN;
1235
1236	/* Copy the user data */
1237	skb_copy_from_linear_data(skb, skb_put(skbn, lg), lg);
1238	skb_pull(skb, lg);
1239
1240	/* Duplicate the Header */
1241	skb_push(skbn, ROSE_MIN_LEN);
1242	skb_copy_to_linear_data(skbn, header, ROSE_MIN_LEN);
1243
1244	if (skb->len > 0)
1245	skbn->data[2] |= M_BIT;
1246
1247	skb_queue_tail(&sk->sk_write_queue, skbn); /* Throw it on the queue */
1248	}
1249
1250	skb->free = 1;
1251	kfree_skb(skb);
1252	} else {
1253	skb_queue_tail(&sk->sk_write_queue, skb); /* Throw it on the queue */
1254	}
1255	#else
1256	skb_queue_tail(list: &sk->sk_write_queue, newsk: skb); /* Shove it onto the queue */
1257	#endif
1258
1259	rose_kick(sk);
1260
1261	return len;
1262	}
1263
1264
1265	static int rose_recvmsg(struct socket *sock, struct msghdr *msg, size_t size,
1266	int flags)
1267	{
1268	struct sock *sk = sock->sk;
1269	struct rose_sock *rose = rose_sk(sk);
1270	size_t copied;
1271	unsigned char *asmptr;
1272	struct sk_buff *skb;
1273	int n, er, qbit;
1274
1275	/*
1276	* This works for seqpacket too. The receiver has ordered the queue for
1277	* us! We do one quick check first though
1278	*/
1279	if (sk->sk_state != TCP_ESTABLISHED)
1280	return -ENOTCONN;
1281
1282	/* Now we can treat all alike */
1283	skb = skb_recv_datagram(sk, flags, err: &er);
1284	if (!skb)
1285	return er;
1286
1287	qbit = (skb->data[0] & ROSE_Q_BIT) == ROSE_Q_BIT;
1288
1289	skb_pull(skb, ROSE_MIN_LEN);
1290
1291	if (rose->qbitincl) {
1292	asmptr = skb_push(skb, len: 1);
1293	*asmptr = qbit;
1294	}
1295
1296	skb_reset_transport_header(skb);
1297	copied = skb->len;
1298
1299	if (copied > size) {
1300	copied = size;
1301	msg->msg_flags |= MSG_TRUNC;
1302	}
1303
1304	skb_copy_datagram_msg(from: skb, offset: 0, msg, size: copied);
1305
1306	if (msg->msg_name) {
1307	struct sockaddr_rose *srose;
1308	DECLARE_SOCKADDR(struct full_sockaddr_rose *, full_srose,
1309	msg->msg_name);
1310
1311	memset(msg->msg_name, 0, sizeof(struct full_sockaddr_rose));
1312	srose = msg->msg_name;
1313	srose->srose_family = AF_ROSE;
1314	srose->srose_addr = rose->dest_addr;
1315	srose->srose_call = rose->dest_call;
1316	srose->srose_ndigis = rose->dest_ndigis;
1317	for (n = 0 ; n < rose->dest_ndigis ; n++)
1318	full_srose->srose_digis[n] = rose->dest_digis[n];
1319	msg->msg_namelen = sizeof(struct full_sockaddr_rose);
1320	}
1321
1322	skb_free_datagram(sk, skb);
1323
1324	return copied;
1325	}
1326
1327
1328	static int rose_ioctl(struct socket *sock, unsigned int cmd, unsigned long arg)
1329	{
1330	struct sock *sk = sock->sk;
1331	struct rose_sock *rose = rose_sk(sk);
1332	void __user *argp = (void __user *)arg;
1333
1334	switch (cmd) {
1335	case TIOCOUTQ: {
1336	long amount;
1337
1338	amount = sk->sk_sndbuf - sk_wmem_alloc_get(sk);
1339	if (amount < 0)
1340	amount = 0;
1341	return put_user(amount, (unsigned int __user *) argp);
1342	}
1343
1344	case TIOCINQ: {
1345	struct sk_buff *skb;
1346	long amount = 0L;
1347
1348	spin_lock_irq(lock: &sk->sk_receive_queue.lock);
1349	if ((skb = skb_peek(list_: &sk->sk_receive_queue)) != NULL)
1350	amount = skb->len;
1351	spin_unlock_irq(lock: &sk->sk_receive_queue.lock);
1352	return put_user(amount, (unsigned int __user *) argp);
1353	}
1354
1355	case SIOCGIFADDR:
1356	case SIOCSIFADDR:
1357	case SIOCGIFDSTADDR:
1358	case SIOCSIFDSTADDR:
1359	case SIOCGIFBRDADDR:
1360	case SIOCSIFBRDADDR:
1361	case SIOCGIFNETMASK:
1362	case SIOCSIFNETMASK:
1363	case SIOCGIFMETRIC:
1364	case SIOCSIFMETRIC:
1365	return -EINVAL;
1366
1367	case SIOCADDRT:
1368	case SIOCDELRT:
1369	case SIOCRSCLRRT:
1370	if (!capable(CAP_NET_ADMIN))
1371	return -EPERM;
1372	return rose_rt_ioctl(cmd, argp);
1373
1374	case SIOCRSGCAUSE: {
1375	struct rose_cause_struct rose_cause;
1376	rose_cause.cause = rose->cause;
1377	rose_cause.diagnostic = rose->diagnostic;
1378	return copy_to_user(to: argp, from: &rose_cause, n: sizeof(struct rose_cause_struct)) ? -EFAULT : 0;
1379	}
1380
1381	case SIOCRSSCAUSE: {
1382	struct rose_cause_struct rose_cause;
1383	if (copy_from_user(to: &rose_cause, from: argp, n: sizeof(struct rose_cause_struct)))
1384	return -EFAULT;
1385	rose->cause = rose_cause.cause;
1386	rose->diagnostic = rose_cause.diagnostic;
1387	return 0;
1388	}
1389
1390	case SIOCRSSL2CALL:
1391	if (!capable(CAP_NET_ADMIN)) return -EPERM;
1392	if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1393	ax25_listen_release(&rose_callsign, NULL);
1394	if (copy_from_user(to: &rose_callsign, from: argp, n: sizeof(ax25_address)))
1395	return -EFAULT;
1396	if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1397	return ax25_listen_register(&rose_callsign, NULL);
1398
1399	return 0;
1400
1401	case SIOCRSGL2CALL:
1402	return copy_to_user(to: argp, from: &rose_callsign, n: sizeof(ax25_address)) ? -EFAULT : 0;
1403
1404	case SIOCRSACCEPT:
1405	if (rose->state == ROSE_STATE_5) {
1406	rose_write_internal(sk, ROSE_CALL_ACCEPTED);
1407	rose_start_idletimer(sk);
1408	rose->condition = 0x00;
1409	rose->vs = 0;
1410	rose->va = 0;
1411	rose->vr = 0;
1412	rose->vl = 0;
1413	rose->state = ROSE_STATE_3;
1414	}
1415	return 0;
1416
1417	default:
1418	return -ENOIOCTLCMD;
1419	}
1420
1421	return 0;
1422	}
1423
1424	#ifdef CONFIG_PROC_FS
1425	static void *rose_info_start(struct seq_file *seq, loff_t *pos)
1426	__acquires(rose_list_lock)
1427	{
1428	spin_lock_bh(lock: &rose_list_lock);
1429	return seq_hlist_start_head(head: &rose_list, pos: *pos);
1430	}
1431
1432	static void *rose_info_next(struct seq_file *seq, void *v, loff_t *pos)
1433	{
1434	return seq_hlist_next(v, head: &rose_list, ppos: pos);
1435	}
1436
1437	static void rose_info_stop(struct seq_file *seq, void *v)
1438	__releases(rose_list_lock)
1439	{
1440	spin_unlock_bh(lock: &rose_list_lock);
1441	}
1442
1443	static int rose_info_show(struct seq_file *seq, void *v)
1444	{
1445	char buf[11], rsbuf[11];
1446
1447	if (v == SEQ_START_TOKEN)
1448	seq_puts(m: seq,
1449	s: "dest_addr dest_call src_addr src_call dev lci neigh st vs vr va t t1 t2 t3 hb idle Snd-Q Rcv-Q inode\n");
1450
1451	else {
1452	struct sock *s = sk_entry(node: v);
1453	struct rose_sock *rose = rose_sk(s);
1454	const char *devname, *callsign;
1455	const struct net_device *dev = rose->device;
1456
1457	if (!dev)
1458	devname = "???";
1459	else
1460	devname = dev->name;
1461
1462	seq_printf(m: seq, fmt: "%-10s %-9s ",
1463	rose2asc(buf: rsbuf, addr: &rose->dest_addr),
1464	ax2asc(buf, &rose->dest_call));
1465
1466	if (ax25cmp(&rose->source_call, &null_ax25_address) == 0)
1467	callsign = "??????-?";
1468	else
1469	callsign = ax2asc(buf, &rose->source_call);
1470
1471	seq_printf(m: seq,
1472	fmt: "%-10s %-9s %-5s %3.3X %05d %d %d %d %d %3lu %3lu %3lu %3lu %3lu %3lu/%03lu %5d %5d %ld\n",
1473	rose2asc(buf: rsbuf, addr: &rose->source_addr),
1474	callsign,
1475	devname,
1476	rose->lci & 0x0FFF,
1477	(rose->neighbour) ? rose->neighbour->number : 0,
1478	rose->state,
1479	rose->vs,
1480	rose->vr,
1481	rose->va,
1482	ax25_display_timer(&rose->timer) / HZ,
1483	rose->t1 / HZ,
1484	rose->t2 / HZ,
1485	rose->t3 / HZ,
1486	rose->hb / HZ,
1487	ax25_display_timer(&rose->idletimer) / (60 * HZ),
1488	rose->idle / (60 * HZ),
1489	sk_wmem_alloc_get(sk: s),
1490	sk_rmem_alloc_get(sk: s),
1491	s->sk_socket ? SOCK_INODE(socket: s->sk_socket)->i_ino : 0L);
1492	}
1493
1494	return 0;
1495	}
1496
1497	static const struct seq_operations rose_info_seqops = {
1498	.start = rose_info_start,
1499	.next = rose_info_next,
1500	.stop = rose_info_stop,
1501	.show = rose_info_show,
1502	};
1503	#endif /* CONFIG_PROC_FS */
1504
1505	static const struct net_proto_family rose_family_ops = {
1506	.family = PF_ROSE,
1507	.create = rose_create,
1508	.owner = THIS_MODULE,
1509	};
1510
1511	static const struct proto_ops rose_proto_ops = {
1512	.family = PF_ROSE,
1513	.owner = THIS_MODULE,
1514	.release = rose_release,
1515	.bind = rose_bind,
1516	.connect = rose_connect,
1517	.socketpair = sock_no_socketpair,
1518	.accept = rose_accept,
1519	.getname = rose_getname,
1520	.poll = datagram_poll,
1521	.ioctl = rose_ioctl,
1522	.gettstamp = sock_gettstamp,
1523	.listen = rose_listen,
1524	.shutdown = sock_no_shutdown,
1525	.setsockopt = rose_setsockopt,
1526	.getsockopt = rose_getsockopt,
1527	.sendmsg = rose_sendmsg,
1528	.recvmsg = rose_recvmsg,
1529	.mmap = sock_no_mmap,
1530	};
1531
1532	static struct notifier_block rose_dev_notifier = {
1533	.notifier_call = rose_device_event,
1534	};
1535
1536	static struct net_device **dev_rose;
1537
1538	static struct ax25_protocol rose_pid = {
1539	.pid = AX25_P_ROSE,
1540	.func = rose_route_frame
1541	};
1542
1543	static struct ax25_linkfail rose_linkfail_notifier = {
1544	.func = rose_link_failed
1545	};
1546
1547	static int __init rose_proto_init(void)
1548	{
1549	int i;
1550	int rc;
1551
1552	if (rose_ndevs > 0x7FFFFFFF/sizeof(struct net_device *)) {
1553	printk(KERN_ERR "ROSE: rose_proto_init - rose_ndevs parameter too large\n");
1554	rc = -EINVAL;
1555	goto out;
1556	}
1557
1558	rc = proto_register(prot: &rose_proto, alloc_slab: 0);
1559	if (rc != 0)
1560	goto out;
1561
1562	rose_callsign = null_ax25_address;
1563
1564	dev_rose = kcalloc(n: rose_ndevs, size: sizeof(struct net_device *),
1565	GFP_KERNEL);
1566	if (dev_rose == NULL) {
1567	printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate device structure\n");
1568	rc = -ENOMEM;
1569	goto out_proto_unregister;
1570	}
1571
1572	for (i = 0; i < rose_ndevs; i++) {
1573	struct net_device *dev;
1574	char name[IFNAMSIZ];
1575
1576	sprintf(buf: name, fmt: "rose%d", i);
1577	dev = alloc_netdev(0, name, NET_NAME_UNKNOWN, rose_setup);
1578	if (!dev) {
1579	printk(KERN_ERR "ROSE: rose_proto_init - unable to allocate memory\n");
1580	rc = -ENOMEM;
1581	goto fail;
1582	}
1583	rc = register_netdev(dev);
1584	if (rc) {
1585	printk(KERN_ERR "ROSE: netdevice registration failed\n");
1586	free_netdev(dev);
1587	goto fail;
1588	}
1589	rose_set_lockdep_key(dev);
1590	dev_rose[i] = dev;
1591	}
1592
1593	sock_register(fam: &rose_family_ops);
1594	register_netdevice_notifier(nb: &rose_dev_notifier);
1595
1596	ax25_register_pid(ap: &rose_pid);
1597	ax25_linkfail_register(lf: &rose_linkfail_notifier);
1598
1599	#ifdef CONFIG_SYSCTL
1600	rose_register_sysctl();
1601	#endif
1602	rose_loopback_init();
1603
1604	rose_add_loopback_neigh();
1605
1606	proc_create_seq("rose", 0444, init_net.proc_net, &rose_info_seqops);
1607	proc_create_seq("rose_neigh", 0444, init_net.proc_net,
1608	&rose_neigh_seqops);
1609	proc_create_seq("rose_nodes", 0444, init_net.proc_net,
1610	&rose_node_seqops);
1611	proc_create_seq("rose_routes", 0444, init_net.proc_net,
1612	&rose_route_seqops);
1613	out:
1614	return rc;
1615	fail:
1616	while (--i >= 0) {
1617	unregister_netdev(dev: dev_rose[i]);
1618	free_netdev(dev: dev_rose[i]);
1619	}
1620	kfree(objp: dev_rose);
1621	out_proto_unregister:
1622	proto_unregister(prot: &rose_proto);
1623	goto out;
1624	}
1625	module_init(rose_proto_init);
1626
1627	module_param(rose_ndevs, int, 0);
1628	MODULE_PARM_DESC(rose_ndevs, "number of ROSE devices");
1629
1630	MODULE_AUTHOR("Jonathan Naylor G4KLX <g4klx@g4klx.demon.co.uk>");
1631	MODULE_DESCRIPTION("The amateur radio ROSE network layer protocol");
1632	MODULE_LICENSE("GPL");
1633	MODULE_ALIAS_NETPROTO(PF_ROSE);
1634
1635	static void __exit rose_exit(void)
1636	{
1637	int i;
1638
1639	remove_proc_entry("rose", init_net.proc_net);
1640	remove_proc_entry("rose_neigh", init_net.proc_net);
1641	remove_proc_entry("rose_nodes", init_net.proc_net);
1642	remove_proc_entry("rose_routes", init_net.proc_net);
1643	rose_loopback_clear();
1644
1645	rose_rt_free();
1646
1647	ax25_protocol_release(AX25_P_ROSE);
1648	ax25_linkfail_release(lf: &rose_linkfail_notifier);
1649
1650	if (ax25cmp(&rose_callsign, &null_ax25_address) != 0)
1651	ax25_listen_release(&rose_callsign, NULL);
1652
1653	#ifdef CONFIG_SYSCTL
1654	rose_unregister_sysctl();
1655	#endif
1656	unregister_netdevice_notifier(nb: &rose_dev_notifier);
1657
1658	sock_unregister(PF_ROSE);
1659
1660	for (i = 0; i < rose_ndevs; i++) {
1661	struct net_device *dev = dev_rose[i];
1662
1663	if (dev) {
1664	unregister_netdev(dev);
1665	free_netdev(dev);
1666	}
1667	}
1668
1669	kfree(objp: dev_rose);
1670	proto_unregister(prot: &rose_proto);
1671	}
1672
1673	module_exit(rose_exit);
1674